last executing test programs: 14m49.728951196s ago: executing program 0 (id=315): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000001480)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac2b000000010902240003000000000904060000ff4f9b0009040658"], 0x0) 14m48.147350152s ago: executing program 0 (id=321): syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x208280) (async) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x208280) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000700)=[@in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e21, 0xfffff800, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, @in={0x2, 0x4e22, @local}], 0x64) syz_usb_control_io$uac1(r1, 0x0, 0x0) 14m45.20165653s ago: executing program 0 (id=327): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0xce08, 0x10100, 0x1, 0x170}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) (async) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r7, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) (async) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000800)=""/263, 0x107}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002ac0)=""/4128, 0x1020}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f00000005c0)=""/206, 0xce}], 0x6}, 0xb9fc}], 0x4, 0x2170, 0x0) 14m44.701584637s ago: executing program 0 (id=335): r0 = socket(0x400000000010, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 64) r3 = socket(0x1e, 0x4, 0x0) (rerun: 64) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) (rerun: 64) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000)=0x38, 0x4) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) (async, rerun: 32) fcntl$setstatus(r1, 0x4, 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x9}]}}]}, 0x3c}}, 0x0) 14m44.153434161s ago: executing program 0 (id=341): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(0x0, 0x7) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) (async) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r7, 0x3, 0x9, 0x3ffc}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0x3, 0x2) (async) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0x2, 0x6}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) (async) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080006000900000014000000451a001400640049836653e6000b32907864010104ffffffff6280bfed92a7069212147efbee989574c6ea7e928da26c29f5ea5162fd83cc899a1878f447fbd661b7c886837edc2e09a87c0f06ea70ec0b3ade82fbbfad2891176d7a0a79e23b46a7ddf8302c3785b47d8274ca1d9c4c095389d2cd37e1ac1eae05444934946d58e08970a5dcab232e7ad6becf456140a44b"], 0x22) 14m43.882935521s ago: executing program 0 (id=342): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6000000000009050202"], 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x2020) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002080), 0x10) close(r0) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xf0}}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r3, 0xfffffffffffffffd, {}, 0xfe}, 0x18) 14m42.907328881s ago: executing program 32 (id=342): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6000000000009050202"], 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x2020) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002080), 0x10) close(r0) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xf0}}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r3, 0xfffffffffffffffd, {}, 0xfe}, 0x18) 1m47.447018568s ago: executing program 5 (id=3215): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x78, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x7, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0xc4, r8, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x800) readv(r6, &(0x7f0000000200)=[{&(0x7f0000001580)=""/4091, 0xffb}, {&(0x7f0000000040)=""/81, 0x51}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x5) unshare(0x8040480) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r9, 0x4}, 0x38) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000000)=0x3) 1m42.86331993s ago: executing program 5 (id=3221): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) write$sndseq(r1, &(0x7f00000000c0)=[{0x7, 0x0, 0x7f, 0x5d, @tick, {0x7, 0x1}, {0x4, 0x4}, @note={0x97, 0x8, 0x3, 0x4, 0x1}}, {0x6, 0xf9, 0x0, 0x8, @tick=0x9, {0x9}, {0xf4, 0x2}, @control={0x3, 0x3, 0xe74}}], 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071102800000000001f150000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m42.491803697s ago: executing program 5 (id=3223): syz_usb_connect(0x3, 0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="120110014fd5a61094060100fcb1010203010902120001ff0740030904334f009b015519"], 0x0) r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x5, 0xd4, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x0, 0x0, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x179, 0x1}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0xfd, "ee23"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0xfff, 0x3, "308eb0"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x0, "1335"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xfc, 0x2}, @as_header={0x7, 0x24, 0x1, 0x9, 0x6}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xc1, 0x2, 0x5, 0x6, "4f7f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xad, 0x1, 0x0, {0x7, 0x25, 0x1, 0x80, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x59, 0x3, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2, 0x2}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x1, 0x6, "3c8ce4b7ab8ddcbf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x208, 0xe4, 0x4, 0xe6, {0x7, 0x25, 0x1, 0x80, 0x10, 0xa}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x40, 0x2, 0x4, 0x40, 0x9}, 0xb1, &(0x7f0000000480)={0x5, 0xf, 0xb1, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1ce, 0x4, 0x3, 0x7, 0xcf}, @generic={0x94, 0x10, 0xa, "bab4bc447b9f45f19858fc1741435c3bef63d0c187c10c6d0720d18d84db4603b6215dc95aef721fecf22cf9970dc26359f8901147224bd275485272e0dc3df7794ca29c82894ec984a7ad6f449db1fabfde049415a4a7870efdf7b6601866447b7c395ab02ee4b9f47ce403cd198754c3b7d05b52e9ecdaf2dc26cd9b579c5b29b8dedba29f9bc604e96401091c8a541d"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x89, 0x4, 0x7}]}, 0xa, [{0xe7, &(0x7f0000000540)=@string={0xe7, 0x3, "fad20e37fc4ac5a62ffc73fbf08471496ad0084d6eee1f795ec59ef2b809a919aa9ecddb4d352c321032e9b719f1563b8261b61833a6dbf0f2788769b9703dcb21867a4a2a50b5a9d7f86e87cdebb97b3380db7a95cadb01f5e0d4e0cbf0b296f56aec2716a1315227a765126ee00e9a49eeba52b42b1617bd3b8682e4d8455f99531d48104fd45844191d3cd9e11ddeee652cd620e0ddcbb4ca9c54baa17c0c44856848a5c2a0b1012801abed749a9f61c533623c88f7411f2a3c84f3752541e72ef06f34b13b5b81b1d7f9261c02025ca870eddd58a9f23dc1838226987d1d6e9121e9c2"}}, {0xbe, &(0x7f0000000640)=@string={0xbe, 0x3, "ee4c8c3cdae2010b32b293351dc066a103550a55288cf758cdfeda01f2670cf7fdc82ea4c8c000f6af6fbb5cc93fd53275cb8a90a1d6d9dd2c3ed08b2b434e02c84626748ecbf0f0512d2670163cc7a5fb07fe8b639f0194e3c5763d209334c0446383125121b6c6b09f28fdcbc960d5957f002ba246b16a9700de4e81b24dd3e47e95010b1fd5202dfde4ab59353bce97b06df967543d5532cbb8e6549aee1be2c1abb3edf240370f4161e324a80f2bb83e0e82f59499a2217051c0"}}, {0xad, &(0x7f0000000700)=@string={0xad, 0x3, "b495fefdb7fca7562acf67ce0db822fa8f2fc8bb9d558322fdbc2cfa162e1157361c0137899bdfbf02b657fd0dd0c90349da025afa7ba94a0c6f66a77277e46ef3c7c44977dc4d96b5ff66bf6458d5bea5aca5a21f5d7e458c62c219d6b5e385062323dd7d50af292850c4eecc59e91dcb64864123e9b8d58b115af78f43bf9677d4a61bf5f3c2e90c6a22be90ad8cb1832e50056e4c4c65859b5ecd6c800aa46d7a5e45308848c357da1e"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x809}}, {0x82, &(0x7f0000000840)=@string={0x82, 0x3, "fbc6d3d0850472740c16bab705effec8e077ecc59c873e1bb6bea2fb7b3210de69682586b0a1c435e9b5f46e657193d7461275849c31e87e0e78bb823a91168cfca17db3852ac7fe2914751db63b2cc11cb038ed93a44795f321e9cf6ccc01b9f5b51e34696f3e63048c0fd5d728d343b852b5943b0e6160d1dcb827cf518baf"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2809}}, {0x97, &(0x7f0000000980)=@string={0x97, 0x3, "7f6bed4d315c3d1338299443d18efd45953b78a018c18d5980ac1a464404e590e0821459043901f268797c4965c4ab411e5eda8c1f6f7d31e343e866889dcb59a6b2e4bb4d3451c741bd0f52c38a8715acab23476d97579bd83ec00832077a7efef9bab91e340e8360aec3a2eb3c8855469e58cc8597100525d8c628655843a234b909b32d792e3b9f5b16a6484eea43f988911a42"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x809}}, {0x2b, &(0x7f0000000a80)=@string={0x2b, 0x3, "d022ec494ca60f642d853c0464377e99b9e4a292260c0757d808af830935d5285aaa375ddfedd136fd"}}]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x18, 0x0, "53bb46"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000008000500000a38000000030a1b0000000000000000000a0000090c00024000000000000000010900010073797a3100000000090003"], 0x60}, 0x1, 0x0, 0x0, 0x4048851}, 0x490) 1m39.279038971s ago: executing program 5 (id=3230): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000300)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x20000600) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x2010, r1, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) syz_clone3(&(0x7f0000000380)={0x100000000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3, r2], 0x2}, 0x58) pivot_root(0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)=@known='user.syz\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7f, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x2e8, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffa, @mcast1, 0xb}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4bf7, @private0}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x461e, @local, 0x1}}}}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x3f, 0x3, "33c1932d13a1c8259283b15d6764ff98a01be32faa7b5cefb5954b7ec31021a9696cce9167d7f9d4ea6fa756e850a45964a6a1d06bd376eec51460"}, @TIPC_NLA_NODE_ID={0x7c, 0x3, "80802fff4ea42363678e7b6eb0d06ad2211172636f3d6ac5a6c9a46e4449a9d2e29bf3d3c88066a1e227cac322fc742e5ab46fae4ddde6e66edd53bca53eb780fc0fe69795d3caedc7ed6ce89b3dabde8301a1a4b19e445b65fafc3892cd2a6f5d067487c568b6de7eb9a22153bfcfd3cc1a44d187fd15d4"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x40020}, 0x10) 1m35.244344227s ago: executing program 5 (id=3243): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) fanotify_init(0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000002c0)}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote, 0x3}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c0f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200009200004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000a1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) 1m34.886991548s ago: executing program 5 (id=3244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x110}, 0x4000000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000001, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100006400", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d84", 0xac}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1a1cfa5e1ce7ceddbe24f9c22560cd3ab668414f7cc9a7d920925c30e25b097c2360e6f66801e2aa8c96a6465c15f75", 0xdb}, {&(0x7f0000000840)}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x198}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fedbdf257000000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000000000ffffffff00810a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100"/72], 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000c5) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904d9"], 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) 1m34.228450978s ago: executing program 33 (id=3244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x110}, 0x4000000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000001, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100006400", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d84", 0xac}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1a1cfa5e1ce7ceddbe24f9c22560cd3ab668414f7cc9a7d920925c30e25b097c2360e6f66801e2aa8c96a6465c15f75", 0xdb}, {&(0x7f0000000840)}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x198}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fedbdf257000000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000000000ffffffff00810a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100"/72], 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000c5) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904d9"], 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000000)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) 11.321682441s ago: executing program 1 (id=3513): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4004}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000100)={0x0, 0xa00}) 10.618455973s ago: executing program 2 (id=3517): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x5}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r7, 0x0, 0x0) fstat(r5, &(0x7f0000001b00)) (async) fstat(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r5, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="a109c6eda20a0b38cf60abf2d58dbd76972af3420ddd5f2d84d4637ecb3c92", 0x1f}, {&(0x7f0000000700)="2c0a9b6e76563f299017a97151f467ff1f4d8e03d01d7f531e55752c49b2a22483f10b0ca0c7ca0b799cc4623f47f5b6b49dbf3370f768148062ec96bf60ab57c338153a3744f6a9778f45582ecc02b4fcb8e9d3fa9a59aae5b73ea0c135627c038e84141eeeeaa0db83d2794d64b6792133580561cbf21cb91edde20f57ff87affb5ff60060904213bac4d99c039ec019e98cd70ba982bb5adb9751e3a530e14ab90f4c0fdbea0b57ba6a7898d96fb01cb635d2f714a33f7c2ec317c6e3ea0a60139f2ab4c35c56e0", 0xc9}], 0x2, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x38, 0x1, 0x1, [r3, r4, r3, r4, r6, r0, r7, r0, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x70, 0x803}}, {{&(0x7f0000000800)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000940)="0b326044496f90e94b74664d90d89d3d34ec08f56eea32ddfe534c88668b9bb3f0852bcc6ed1c82b4fd01a0c1876a508aa11bd61c25db176e1e7c517a06c5703b0d77150517851931a5bebf6258ef8446ad2de6cd8fdc1c2828117d1a1845c2b7c4fc86e996c324dc779b3edea68670423f226f84e1d65d606", 0x79}, {&(0x7f00000009c0)="17e68159f53bad9db27940dff1c3a5ac5a5e8fd107eeab4fba3eaa415611593ca8d1fa081c5ea434ed4f8e880e533198a176dc7e46c6df44752ef68688872cd170012a2f60697ea06f52141ad8760fb4d048de15287af0997ed2284a172446f77168167ba0487cebb864b1690931790623c29dfcaa018bc35454676dc2d61ae7f4", 0x81}, {&(0x7f0000000a80)="5620d14452cf02adb49a8dd441d7c83a1aad1e3159a37afeb9b375fb699473a964c8e482d691c8c3ba8916a32e4ce46665254b7fd0730504cfa2b042670bebf223fe4f188c7db113c1c96617ce76cb5412f9194a4630a3634c58349ace850084a701dc933f46fac46a2fcd4148279c3d89430c5c8ce1d29d0c814b9cd8b8b7e3ef9b119ad6f7a9e1ff8f0c02de51a8e8a5a9ca26c5c891fe7572b9943f594cd64e4e7d5e0fcac68d1a6fa7c9325e7c7f52bea4eafba78a11b16336a631116306f4e0185dacba90c9ecd34bc05d30201313383b3ea7fd38422547a3a934b7de35c7cb1d3cdf04d4d680ab5ae856c6c0df4404087f325aec9527c2f20d6e0a02955cee376a9110b42cdb192b0d597ab4d130b6a73eaa286ac774928d49a360867df3197c67cbe0d67dcb064f5289bf3d18c7912c71ca5dd2e8a2ca7e8071f9b19511366548df2a2c35c8759ffcd45d1130da0d967ef0024d7f29c0394eee83f0d787723e63bad61aefd8b2a6c4736cc23471b0f64a7e7123f818b7b734cce4da8cc2b50f7a2e550c226e268e64127ec162f4acfcd4f7876e8ac8c5a7ac6e365558c016f91c9f175cac596068de23379eb7a92cba565bd18d490e3141494d8e89f9cf1a2c3d572df4518b6550210f981587f81bd9677b11919728585462a6df8a164ec1d5edb8e7dc2a05caf4fd07c489e623731ad87b8a462ae8d9e702ba50cedd3de938f5cec1e3fbe8585b94834a88495b3c32ac9887973cb308eb9c0e83a9153aae561790bf42423e84465d918276aef8e3b3fb39f42beda112fdc0ba9f3add60437de5d67bc6dc1a1bd0a1430ff55c969cf9b99d4797ef0ce35d930a023a6751ac52e84df3b00219b6947b25b6bd0a85a5a4970634d4d3a24dad1059e71526fd5532cddc4734dd822e5ae681b14a3fb20e35e0ee3459dcc41e69f56ffe70e46143c58951a89b30542fdc75233a8a6751da613f4d437aa8058dfb376324bb45b886c0f99c5596f778dc728a70eacc133ddb77b91f2acb01d3d60229d9c67b04220ab5af5f24f39127345b33b34ec82fbf18e79bb64ae5519cbf5f3357539bd734a1d12aa34118619a90a2196037d0209be1d3339d59d2955f1eff8ca5e7507d29749ade6729518310ffc848cc2f96bd4e75edfd14c901678ae12d7b1570b73d7a151f92000dcbab98fcfa53877b7f7fe269c2af40c310ee9e0d283fab45a4524ace068bca5273730937f0b60dbfd36b1df9eafc10b7bb2595a60038dbab34b023010d6f77dcb1a0daf19f37cf97ffdcb829c7fc2aae2fd7a700afcbdf32465b761757150a1b692152641b3d53802e4bf2f7c1b68c9f27c5f08d7dcbf9131111da903d1b166732535bab526fa325582df5aed03e6abf4eaeae30113f6e4b778ec84d56a60f2c4c3927623b14a79b2870b11fdfad37cdafbc56cee1ca6908a68845b93487b212f63fb2059d836bf50b4404eff72dfb308a2792dcd9f0a8ea309f3bc81f2b6192ab5dfbb03f0e25bb6e499802dc16f0f8c179db65616e275646e47e2363a5e4f0f407327edf353f9e56dab194ee9a1d4638b38480feb4a45558bd681a5f917023bff847f9a1ac89348e008f7d7b9f13618f277bf4d4fe3ab7d50e1a74107bbb53faf9a9db0491ba525a2c93d7fd4663a3ca53b2d7b25ad709746020350f9d78f08a4af378a2f2dbd58fddf770d0f45ca20a7604aff826408de880f844e00fa93ca1417c8509a382b61d96b77e27444feb3bd4a109bbac56b94c5582287bad859f9dd0dd091692f0b88a299dfe2d44da680811589158aa12187f8ab377a93056d2fe04eb33440404f470f863a7f982ca2dbafbcdad3c01a7273bc3cac4e8948391280304056649da74fd6d7bb2823f552c937e34fdd919d4a0c091534eb13b3be389e8ae379815bdef8506fd66be1af0ca4291c692b23689da768b7c82bf92dc35a7d343279a5feb7575f49e3b4efcea43b81e1746864794d9b1b8752a5ce2c864e49f26443ca02ed074238407722545bdba85dad6561902718fd442b369fd542e4e634fac2b39d5578856c9e3e54f6088de29571cb74e378028daacfefc9a47d01513adf46605e514f9067ae340f1c7646136e77cbde54fb6674098c4ee9f20018b16c640408a435596047f4924a55bb57645d18cd5f5c537140140f413385f448a5a7574cfab2a41637181752d35cf7e97ef9269fe3d1716064a89a0c20feafc8015a71f1de026005431719b035353d140d6331545d4945103c6bbd159916ba166bbe06f1181b4fd1171b032fce809ea9fe0b68f01021d6478cbbf32ed712ce60af59663151e2c941f7b7a73b0bbc2675c3aaf1d17424a1c14b1bcbe66b08e95a1b4ce5754ab0202234aba51404cdb89dec00488b364f674b5f346e8ad571639c4ed03b90c96b8584c4069314e87438de2d2e34e61cf8f2e14f1712874567220812622f9c84082c680b757279d0ffcd6f8910882f3a0bdba22137a8a5efc44c25d0a12ec0e7837aae3fb18950b5142eb543ded789b1894b8b5b63a8ee79d96e6ff69bd737fb0ca54150b7211e970da6aba8f0a6d9a0f3912c25cb56285d77171bf13749b0d80f434adbec8b0e412fa26d1211e62cc73997255d659ed4889f2f1a21edf4aa7368d1f7aa0c4e81633f974b2bf4c391a24993487c5e9596352bb07ef8b13fa9405f78d5ddb72b9b4b89ee7e2d7a3d364bd456757e9406207334cea6a613f1566f1b7488a90643efdbcdd2214d6b1a871294cc29476986c8c7b3064728cf79d9d70547b7ab25905029d2158ca8a7fb6f095712ee4c8c329c32bbdeb6025fa7ead4c440522b22dc0255f992b3e996ca9405d1a347ef5e1b4096673e0751fd54422217132dda71aecafa3b9ff4738e1690510e9c77f26ae81936080904ea3e919b2716f1d0e7f9920dd47267510578575c1b630f22ec10a6eac3040f07e68837173802432183c3ff6534c3cd2a8a78f31805c375b754683b64f0513863c97625fed0fc92f77d5207e93a43e693673abb43f6d6ea121bb95d720767784cf27341be44466fda6093a178e33d052f781f41238ab1cfdd8e67c34c99eb51ffd89f7c0b48bbd9998c98443b65b058dc19d7685e9fa43ba0e4561bdd0695d43ddf545c32925265d3444a994549666cf45281cf8a0bbd4cc473ae447762e842b4e61ee94d41c2990a95e3c74e4869219250f4311c1f86959b6df719370b4f53bdf0cf0c05442603d7e38472201e4f051a07aa789a918962625248fc843c6dd7dec4bf1ed00be693607e857fd09d6ee626332f14be8419f830e80a70e765068a89b33504eb5447db1aa86e9a77da806388186ea7711303b474693c79df2970e9addba939da9b7061a568ddc8e0892f067c32a0ffe7882c77ee6b263071b298b3ed3f4e62a650ac183ad93cc7f48fbe03213d995cf2b1e5729595c6bc0ee00a490656b1c01932ce0c9bca1966046c4c486411becc3334dfe1270f2b7cdcca84da7aba1e71ebb761abe5bd22d78f0cadd10032a2e5fe8c35aae221d9d0de70f9e555a5823b0fe984832a8b9f3990015166603f13553511a838179e9c144a73170fc7b6524a9037840f3e91a1e6f504dd6091191b462e9a105f4b417a5d39d314962de971844f9fd9410d97f299166651fa7086b01e18271ed4dffcb111b28c6c24f885db09f982d47c2363b40cd6e107ba64108dc90acd078fba68c3af20ef1887c5757cb0c99826318ee60807741ab9655d2bf2499ae937e8641050f6fef89223e0aad43c26fe79fd6fe80d2404f419f9b955969a8e195fdf045b70179b088eb5f9a974a084f4f5170659952be0c2bd24c38f59d9c5eca8756103f58e665594a001da37bd9d2fc7d75e790704a710b12841b5655278b29173b79f1aa4eee684eac38374513a44fc100b75d342c40b86295d64f6b5c5c1a96211824eebc37b53513effab1e9de0eb31c4afe2d77a0acbe329af1eb0ea446334e384bd7eed8ad91b3ff5754de8810fe39385eabf96903008e8bfb90b9ffcec9dc4abec7a0c0ea916d09f600d6fdac0196ac3c40f6a1bae0e85ecb6f72970186fda1a7cfb181634b5bb332c830d30c0ef734eeae3bd7fe4329f7fee074252fa9893d7d29c33d1e2983a0c3ac245717ca866e98021945deeb8671fcf82b040f6bae56a68e4991b7e93bcee5a81fec5e46a8762e5f7f21b7c16de5840e5c398a9697032d3744561bc5b007cb93475365e5dee4ecce607856c10d2b2da2f35b997b64284b988c74fc49e5780181ba324dadc5ce4670f249cf9a6186cd067131fc781b5c221d232ce448c801f251fe883de452c2af853580fc3b762fdbbde437dc21230f01ccfa20ed546ad38210a685be058e2166c4c8b8b6bd95de2db73ca2e2be2156d66b930907595be7aeab8e51480072953e57c7b6d650945e3e4952f0812d7b806e80e72712b75b4e837573ead7f57017bf1720ff576d5dec6894b2d1d800c30ed9c14b6c216022c11043da71ba408208670f8f295cc631efa2a52f954464c95280b32bdf082d74e4229b90594bd1a1ea9773fd5a0c5e2b43aa7654f0655aed34b1216d70aa3419c4b191a8df9ca384f884a478f0ec71986f2b6541dbd2eb26e3f45bbde99b94cbbb6eef11dbfb6f79e4fb8ce7cd1398de3ee2aa62502f3df27cd0bf217b352e34f8d1d656c0826cdeb4afe12a4eff3180be9f8fb0c81093f4911a95ea8fcbfd581aaab58fe1b55209b47f4c3d0532726fc028a99bd09dfa7e80ccb5b2300663f6cc23405b8c63e3757f8a03ab4b6b9d30aa520a08a8e769189684fa8f7cece9408e0f272761a49e787aade62194e544514c399219ba1e252ebcefadefcd910b6db441471cc3d0113821bad32b4f6db0ec1d51c942a83b968b40d008cf7abac9cf27f078a3dc96db1105927654e6bff08b4054943292e0487349ba48f460a668115d0cdb4a60fe5c8fdbe2edf86cb4d32b17a525b6d78826e0022147e1971a70115c1c4fbd59a5585abfe60da19cd52206c8b39af42146aac61f73451d9fb74e66c4e60197c197d7b420dc50e1d83ca214b9072d0fe15619700bebf4374514af384c51e6e315aeee78e05f7b0e4050d82886bc9e11295d197b544c0cc03a4e17ea7142e3dbe87d62c8c5f0beff81ca68e9c3d3947258047e3f989cae2f9093349e22fc5093458d392cc71bb97b8cb862181c4bf45f0483c7ad7a46a7060fe94f17d35ce017d8bfad479480b766a68b26e99a6b7ee9ff81f1680f8d4ddd33a9c8979ac9df1b8aa9ad2bc99897bea5ca4e270d714269240a125c7f86799e679d1b3f0fb5c77f0a8750603360da484cce03547af2bead2261c26b699d2e5a1acdd6953c5b7f9770170b2f4811b1703e5d4b5fb4014be502bd6eaadb7211eda9c94a06286344f33ff2e8945d92709f2afde292113b3af1fd1c850c65424ac08c0c5567c54aaf0cac84db12f4b064e424b6ad1f64b193c2b500d4d26c3b1d64aad51c949776ce790c98d6fd76e134dad4d32d56cc1ca4340b266fdf9984113a34b0ff61ba9a2955f5c4e332ef79c6fc2fc114f23db2ac19a3d981cb465d06484689117dc3d1dad614578c7c2dc684ad39815810407df8b0b4d23d2d134a32e76c0981f30ddbc70a4ce2f770f212399849d0d973eaa5d18803f4c144b0c42814aa8f0bdc373599a40dc3828c0a65a70e83abef6878a1cf819d30b50d4fe050a8d9573bb795c10e817d3499e3263dc97ec7cab9f3e6059d28d307a34cff50e12b2b072d73502da5287cddce743d52c7f7ad9a558a5bbc96d6d48866314fa6", 0x1000}, {&(0x7f0000001a80)="920f409eed859bf059ab60ef523bb67560386d0deb018795d265dd333c92fbfe94c8093bb46eec670e5b94b87addb93accdce448316aefc0b75ff671bbfed391233af23cce", 0x45}], 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="000000000d00000000000023fb33210c8f798700", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x4000000}}], 0x2, 0x4000800) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) socket(0x10, 0x3, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r13, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r13, &(0x7f0000000140), 0x4924b68, 0x0) writev(r12, &(0x7f00000000c0), 0x0) 10.137125297s ago: executing program 6 (id=3519): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) socket$inet6(0xa, 0x3, 0x5) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2c, &(0x7f0000000000)=""/27, &(0x7f0000000040)=0x1b) syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x46402) 10.136686673s ago: executing program 1 (id=3520): syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a05240401", @ANYRESDEC], 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x5, 0xae}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x10, 0x1, 0x6, 0xff, 0xfe}, 0xdf, &(0x7f0000000240)={0x5, 0xf, 0xdf, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x18, 0x20, 0x5, 0x3, 0x8, 0x91}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x7, 0x5c10}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x5, 0xff, 0x8c9, 0x1}, @generic={0xb6, 0x10, 0x1, "705cf82b994432badd8bd5c74599aa4382f44745e20f74e7ed74eb8885efe94b030835781ef7fef97f4197ac245e7c0ebb901ffa8731346dabf243a0c5168d1ec8b72f56901ab60c1aae5bd9dd20f112d1f613d7188cbb3f0ae6224acdaedb270acae4b7306095e6fb1d7173f9bdb70852dbfeb67450ac693f8354af51a5744c114b84f87c31a248af9674407486f44848f10decd9277c250fb9fd7211934ff913a0579d22d65dfb060000a67f925fe522ddc0"}]}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x455}}]}) 9.431646068s ago: executing program 2 (id=3521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x401a, 0x0, r3}, &(0x7f0000000500), &(0x7f0000ffe000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_eeprom={0x43, 0x1d2, 0x8000, 0xba, "98d38a5e3f3fffee4214ce01ece7578f23fd5022f7209a7e449d8580de439d1a285450817c90576abb4f4b54eb727299efc6e330672a6ebcd352e6266427a70307754c3b2cf55b7358b671f798214cff305550a011fcfee889e602744cf063aee13b9ab477696f4353a30cf9d17335570168d0a96428b802be61807ff0d3b5ee802e0377e8863b5d5d393a744b67161654451f01f042dcfce899a147a743ae88c054072102de04d0869c921381e18a246da45a0c5ddb6fb54431"}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000a0000000000000007000000186700000c"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x3e, &(0x7f0000000200)=""/62, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2e, r3, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)=[r3, r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0x4}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000480)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2d, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000002c0004802800018007000100633665465100028008000140000000020800024000000016080004400000000c0900010073797a"], 0x74}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, 0x0, 0x90) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_NMI(r9, 0xae9a) 8.574683887s ago: executing program 6 (id=3524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x20040046) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000929000/0x2000)=nil, 0x2000, 0x1, 0x80010, r2, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000bf5000/0x14000)=nil, 0x14000, 0x1000000, 0x13, r1, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x12, 0x0, 0x0, 0x0, 0x12345}) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) r6 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008aec1, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x100000001, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 8.291161241s ago: executing program 1 (id=3526): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x880) openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x84, 0x0, &(0x7f00000001c0)=0x90) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x84, 0x0, &(0x7f00000001c0)=0x90) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 8.018573796s ago: executing program 6 (id=3527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x14}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000040000000000912a8f2d7090ed0000000700000705"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x7) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0xc080) 7.761773651s ago: executing program 2 (id=3529): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5, 0x7ff, 0xffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000000000000005839c97b910000", 0x48}], 0x1) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f0000001840)=""/4090, 0xffa) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0xffffffff, 0x0) close(r0) 7.087385169s ago: executing program 6 (id=3530): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) close(r1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 6.149331942s ago: executing program 1 (id=3532): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x7d, 0x0, &(0x7f0000000340)) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000480)) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRES8=0x0], 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'trusted.', '{$,,}+\x00'}, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x24, 0x35, {0x35, 0xc, "4682e0e7c52953a53c061c02df61b54952eeac32b8b09d0e6c2dddb39b9776804586ff1cd79974744ed03ca559ab765d085dee"}}, &(0x7f0000000040)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "2a82ea9f20a9635b15653b9b1d3270964238cb65bd82ad4240941b0e6a072fa0208514b54823cd7a28350823f0b360cb02b293b37e23c852292a98586e8a7712c4930f8caf2fc3545ad60b0040eed9b1749d4e8b40653422d416a9ab39dbc41526f1eb73910e3cbbc39141289e10f61a8c4553e7cf3fda0ef0fba8c6dc3ea6dcf3ce803e821fb2231f59d2e1c41016159621599964c1acc279072194749139e9300c15ec93d5c969064c336c2c4c48686e3377d30ac68f8228a033e1b6870c9d16239e54f7dd662eb833"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x18, 0x4, 0xcc, '\x00@\x00', "c8258dce"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x7, 0x5, 0x2, 0xffff, 0x8}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0xe, 0x88, "0e211e0b674fea4c845523d26b7308f003f2dbce3abcbc92836e131fe5d0c0cbc4c8694cd884397fea489dd064ffd3fb38730b27a1e2bd4e969b8cc3916d65b1815007e209bfbf5fa6605bb0a67d3a74615ec151a78ba7efec30b7aa1996a0f1fefb324fcc358662548d99ce0518e7aeaf438a833cf101c4f25cf8e5342b30aa11f9ff7b04516a4d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x80, 0x8, [0xffff]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000480)={0x40, 0xb, 0x2, 'n4'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6, @local}, &(0x7f0000000580)={0x40, 0x19, 0x2, "8c00"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) 5.731594934s ago: executing program 2 (id=3534): socket$packet(0x11, 0x3, 0x300) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$inet6(0x2d, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x62, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x10000, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="8fcdcf1f525d9545cb419866e57703d920d8e3a1eec955069f56baecf7ed1883848385999b0df4ba2d4d245d50db0de9700bbed05ec364d46e19fe0593d873dfb3e1a09462b6f6bd22c8accb897be11775a15f84ee4e81be947d87ec3c3f800b444bab17e0ab4e", 0x67}], 0x1, 0x0, 0x0, 0x900}, 0x40000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b00010067726574617000", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/187, 0xbb}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000100)=0xe97d) 4.74322493s ago: executing program 3 (id=3536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bind$alg(r1, 0x0, 0x0) r3 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmsg(r3, 0x0, 0x2000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000380)="e8b2", 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) pipe2(0x0, 0x800) shutdown(r5, 0x1) gettid() r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close(r0) 4.699202243s ago: executing program 2 (id=3537): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = userfaultfd(0x80801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000006c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/173, 0xad}, {0x0}], 0x4, &(0x7f0000000740), 0x0, 0x40021}, 0x20004080) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xffffffffffffffff, {0x3, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x400000000, 0x7, 0x1ff, 0xff, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0x19, 0x2, {0x1000, {0x0, 0x0, 0x7}, 0x60, 0x0, r6, 0x3, 0x6, 0x0, 0x400, 0x8001, 0x6e, 0x6, 0xfdd, 0x9, 0x2, 0x8, 0x100000000, 0x8, 0x1ff, 0x1500}}, 0xa0) getgroups(0x1, &(0x7f0000000380)=[0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, r5, 0x0, r6, r7]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 4.151754909s ago: executing program 4 (id=3538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x84, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000880) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.971495529s ago: executing program 3 (id=3539): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020062018010000000000010902240001000000000904001e010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="002205000000ab"], 0x0}, 0x0) 3.816784831s ago: executing program 4 (id=3540): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000800)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c17"], 0x30}, 0x0) 3.734786243s ago: executing program 4 (id=3541): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x140e, 0x201, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='\x0e\x00\x00\x00\x00\x00\x00\x00alloc', 0x0) socket(0x29, 0xa, 0x824) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x10b, 0x4}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sync() syz_open_dev$midi(0x0, 0x500, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000004c0)=0xb1e0, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) 3.01971997s ago: executing program 6 (id=3542): r0 = syz_usb_connect$hid(0x6, 0xffffffffffffff7d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008ac05530200000000000109022400010000a000090400090203000100092100000001220b0009058103ff03fdfc018849f22643302e1a542b5851e27e760bd929dcecc8c291525ac205d90697ffbdc50d03966111871b66"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xffffffe4, {[@local=@item_012={0x2, 0x2, 0x0, "51c8"}, @global=@item_4={0x3, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0xb, "8c04"}]}}, 0x0}, 0x0) r1 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc0285629, &(0x7f0000000100)=0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync_file_range(0xffffffffffffffff, 0xfffffffffffffffd, 0xb, 0x1) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @loopback, 0x207}, 0x1c) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000140)=0x100) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0}], 0x1}) syz_usb_disconnect(r2) fsconfig$FSCONFIG_SET_STRING(r1, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 2.850747825s ago: executing program 1 (id=3543): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000440)={0x0, 0x0, 0x0}) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0xfffffffd, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xcb2e, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async, rerun: 64) r7 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r7, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002400)="9c50c150c04ca567ded1cc2b0b060d34e705bd4e7ed0b3f36d75ff08ca312f6a270d9e78104411bfef75a7ca8f4471a850ca93f9692f9266e914706013edca1189cda2cd29e6a5fec4c7ff270f16227621b17af16ef0f1c5de", 0x59}], 0x1}, 0x800) (async) r8 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @empty, 0x6}, 0x1c) (async, rerun: 32) socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r8, r6}) r9 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r9, &(0x7f0000000040)=""/4109, 0x100d) 2.433739701s ago: executing program 4 (id=3544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xef2, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000634000/0x4000)=nil, 0x4000, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000100), 0x0, 0x80405, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000b64000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.61112836s ago: executing program 1 (id=3545): r0 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0da302000003dfe4009094c9a098db02df92f5e4e5"], 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xaa) fchdir(r3) openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'dvmrp1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xa, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000001}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffd8b1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.455295124s ago: executing program 4 (id=3546): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0xb40}, 'syz1\x00', 0x3f}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f0000000000)='syz1\x00', 0x1ff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004001400ffff00000b000000010000027df0f3c341047fbeaa4fd843aee5f631863d2d452b42c9a4195ede354986e75043c6e38e9d95e83739cc0553dbf6cc40c0f757854fcce83c8b21fb789c6a8e3d293639e9c43da962411a24", @ANYRES32=0x1, @ANYRESHEX=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r8}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x3, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) 962.035291ms ago: executing program 3 (id=3547): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r2 = syz_clone(0x10300, &(0x7f00000004c0)="7f109d695011e5842a24edf947f8ab838215c5112d1559ba72872ea5c60063de3d37fba8274e184220c8935cd004686fb648bae821a1b057a4dafd5b2261746a5e8fbde28ae705b6eeb7bc44d0183205252b613e04dca34756a9009c6156809da865f81d12794bcb184d223943595baba6", 0x71, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="3c1f79a89b5a0011516faf602b2ca35651f402d73133f9e78291c65f3ec43c58679f9802325db28d8252a8eb143779de81ab2d161471e7366aac946379027989ef328333752d6e518ee9b1e50aad07013a6e1477884fce1a195bde467d507f98253460a7a7b3f00699add35a37107a28e36f0756eb7426f1cd9fadcd57f00ed8c71812bba0a9d906d095392f50ccbd0b3c06a9da7ebfa9cb20d5b0b96f4dc4270b00d5ae6af0d8655ab19da041b99985d7f94d96540fb2bbc53d659f1e57ead4556ffaa23fb667f28e65740ce623835d2cd7cc57c502e16734ee3c1c1fa33a1555532d3b85000987f8ac9a705e8e4afd7e96597d378637fed6f0ff") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f00000007c0)=0xe8) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) r6 = accept(0xffffffffffffffff, &(0x7f0000000900)=@in={0x2, 0x0, @empty}, &(0x7f0000000980)=0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001240)=0x0) r9 = geteuid() statx(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x800, 0x2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$nl_audit(0x10, 0x3, 0x9) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001840), 0x204000, 0x0) pipe2(&(0x7f0000001880)={0xffffffffffffffff}, 0x800) r17 = socket$packet(0x11, 0x3, 0x300) r18 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) r19 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001900), 0x2590968f33a03044, 0x0) r20 = socket$key(0xf, 0x3, 0x2) r21 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001940), 0x50002, 0x0) r22 = syz_open_dev$radio(&(0x7f0000001980), 0x2, 0x2) r23 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r24 = syz_open_dev$vim2m(&(0x7f0000001b40), 0x4, 0x2) r25 = syz_open_dev$vivid(&(0x7f0000001b80), 0x0, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001bc0)={0xffffffffffffffff}) r27 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={&(0x7f0000001c00)='netfs_failure\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r28 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000004240)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)="06e3ddb5aa96d2e2d6c958a2985539279a4a652e606162efabcab1df7656a2f4c0e953bab63d0e74aeb2fdb93f40a521c4a607eef6c96ef9ff3ceeb690183024228102b232c5e81b2a777c5e9ade0dc33c73aa28fc93b68b9dcbc3d3c704263d25ae0c5dae755ad561bfdd7aee168012d662f003f5ece65b8c10f0e256c466648ccb7974e1d6a5a4de77bb42b92ae93ceb5bf80165d1f3efc4712a0f4089606a97493c098cba5e32ca0990e6a25726ffff6c4222360706073aa4b54c749737d2beed279826bcc197", 0xc8}, {&(0x7f00000001c0)="fca9ff141d59a917528ea43528fa05bd2355928e1be6d27d03878de54ada47949aa5ab27f629c2ef182d1ef771667f36efd9bc8538603cbb5fe32e404bde7ae947b42d4944f3c44401b0eae45ca3ef45809d84b383391d5ec6caedecf922ee8ac4d8dcb0fb7007a2ce75afdcc7f02a7962631d708edd0b60f937278c200054d13ebaacd36f23ccc8375dfc8d9912d41a702120f384ea1c2399da58123fedc0ae73ec896af71045c7547b", 0xaa}, {&(0x7f0000000280)="86ec5056cd3a9e0d766231788a1f07d0190c1393f8dc45166d97849d846bae416db755a89635167012e82081fb54403497979f9eba78ad9c5ac7d2532674462afb09a3087db3cc1571efabb514ab3d8c36931abaaa39dc859771a3537f491bd03c68c9582b8825d21d5755a0943fe054d5539eb4d79011dd110eb5656a6091c77482cd5e22", 0x85}, {&(0x7f0000000340)="5f8d209cd4f5217dac28f5c658eb239dc06d8f31f525eece6e355b251744e55bc450b8b173d7a15c995d4716d6dd3740fc48448b67d85efbc5c005fa9a05125c89906e3b08a0eaf0787052701d1ef0b747774d05b99ba317dd188a97f21474da53018172cd30df63626a77b3c65a488dcf4f4a84fb3d48bd099fa025c98e7e2ae064007d928a9dbe3783a68f97725c62b47e502841f919060c08c3a4ab28016898704ab6636d86d8b8e915f086a3f953e3bc111c", 0xb4}], 0x4, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x20, 0x1, 0x1, [r5, r6, r7, 0xffffffffffffffff]}}], 0x58, 0x8000}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000b00)="2103289dbf48b2bb1a3024f3e5f731e5753891c55aeb26b5d375d893536904248620925808f733ba8c5129bce4fb6c3fd397e56e39b92b188f4d2a", 0x3b}, {&(0x7f0000000b40)="543bc9c6c32920c0ba57d11c77d9afd728985465974f2cbf7c4a8c12d877b11e44c68d27e5b2ec69940a6aab06ef90ba20a7cc42ff0dbe1fbd947a6cc0", 0x3d}, {&(0x7f0000000b80)="67e8062be5e927d58ecb6cf9c008aa035a65ad9b3040a3656639b265a9ed03cef0581df273535b2b93ef14efbeb5ddc4d654de489029616a58450aff7dbf06e59a24806ec5207798fc7b96b9578fd79f1fefcfd448d432cbfec43a21841266986eeaf211a1e3e89bf95b9e9f1f0a9b707d60386627ea8ccc5414bbd1cc0f0a2655865d35c07950f68c283c193b2769cf795f674da77eefb34a89ed4e2a0c7677bd90243975ea2df98428e830286516a611ef39be9a71dab32549cffe3860279090cfb8d5116f5d6b3c5f8dbcbc7bd681ee3a4676cec4638ed531e021", 0xdc}, {&(0x7f0000000c80)="0bb56e15a5e53074612024f24002df115ef19ffe9ea10d955c71ebf6dfd2f8bc2f68eeffbc51d8d5d63178342446c6d1a5169639d3e8f0252d7e69492ca28b297fb414d4fb60584ca43b15a4a23e0f48b46c919ad78cf92b55792a4424a1797a1a2976723533647fd164fb84c166704d6b5aa70ba4f1234d4f655440989abec3c5dc3c0e720f5d2986f83a4a3a2b0b0b1332de48815b9f627ef5769225d71de08c7088b866206af5b99434cae87be1a5c5370d03c3c437d41a36a2a5ce95b9e5e434ef187d9ee795ae377e564370f2612e64a907a6e30c07e551cd9ef22f378bf641d0b12b2d534ba4a3dec8bccf1b5c5242", 0xf2}, {&(0x7f0000000d80)="e9e783dd0cfb9aa2d41c46d5bd103d6e148e0d1649ef610415cf8824f02ba7a76b3f1c9a17f39acad35648158278bf90f6a905c816fd3d", 0x37}, {&(0x7f0000000dc0)="f3296f3b85e42b8a9201eec1c65e6bde0425e1df5dfdfd08b0e0855085c10552635218087a6c4a8d17c9eec7277c1aef2d8c7bf9b980897862bf5fe3d64b1332349bc2f5b97243f1843c65df6744c1764cb45460d2f08e18f8db1ad24e00a144c21e2a89d73eb3b3c390bfaa9ff4282fdafc6c50d1bbd4b7cbf56e0a6651dab4e1b7e04ed1488f82d44dfe9f3347a781c740eab87cc9e43bd0d195cc5bfc5d6c5805d303c46051d0b29473729fda55d78acf1857baa9", 0xb6}, {&(0x7f0000000e80)="0141ef6dbdfccba709577937d816b920a0b95faf95cbd941b1d89f548eb13ade10054815d6ca3eebbf35245ee4ed0342579f373d8b108b4746b414641c919839a0c3ff24c32fe9fd5a04bc365a01d05d2a12e5fb7580c34784f82810965489f5cf607c7e83da415ff35f27562cc26197861165727052f85d19c02dae609cbfee38ede0072a5b2b4d1f2b79975a8d1fd4d3aa55c2a843cf629c89c1b20a4b19c8b6b49a03ad0a931b", 0xa8}, {&(0x7f0000000f40)="34bbe1b446764563fff08ccac47633ff8538960057fea5634ddd0370e3468d06275db4ff0c4520b22f07ca55ce0b2d538405ad0e54394882609ab8f5ed21e7f55c6eec318a3626d665f6bb20323441e176d4bd7b56abcebdaccbe660eabdae61d81649ec4a9e78d41544dadd5818920fdf57420b72b5d483472b76709e78bedb6318c6865514b2aa16aa8faf221f", 0x8e}, {&(0x7f0000001000)="fccc82b179d5f67aad7e72b9abf0bcbb4828987e8a6e61f153fabbe03e2ab5e763ad4d750108dba1ca91dc158aa3c65ffa7ed76601cafa1f529f20171c039d956abacf77e17573698740db1c4e4468d519a0b859052b88aada81a340d097eb0a8e0492e8ebd1e7755e5f37f8d2d80fa6dd94dd1ab7777bf86f8b0eb8fc42a88b31c49294cbc7cb240543ef1cdc7fad6bd0c5aec945c5cddf68cc31fd5f3f4786b1", 0xa1}, {&(0x7f00000010c0)="6c29f6fd423afef09001e6c5c8f7314ab918afc7221004aa4182bae6ea86e40da50874d7073b7e3e5dbe19202987810b16566db1d4fac05c560e7f1dadcd14e2b8a9de25eff8bc95386764586fda1759715408cbeead3db189303aa447549757ebe10ea77416e7b4f52374aef3cd7f1724eb75d0d0840941d203aa654513d199c07adb1fee1fa2c437b8618efe1dcdee2e60b8706ca3d38ded29f75511355de76c4ae0d1e9908ae04c416182826efc271618b2ff79128721d162a98466b1d9", 0xbf}], 0xa, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r11, r12, r13]}}], 0x50, 0x4004860}}, {{&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001500)="09086563d1fff5725c4451b729de7fb179a34bb445de06ea5d35dcd2acda59036ad8e6f044c7c7c38ceb69057e2e50a1f4b5a283e49a5f997f8da89178dfcd7ec146046394481cf5d79a486c6f242ae5e198", 0x52}], 0x1, &(0x7f0000001680)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, 0xee00}}}], 0x20, 0x4048051}}, {{&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001740)="607debcc33118d1ef1adfe3064c77ef6a34595a4bd28fb7432f35ad463c5d77297efd237315eb85ae325d2cd8b777553489ef3c80805b5b9038f1d0a3c8d199ac17c5319ef4d45df47aec0e9b8123fd0a879dfd4ebe815e365a6a7b996bd52374bfe780b6f7389f89185eefc765f7b4c8ce8e16e28a99e5ae83a5a3399221e2e0da953eedc7520c7141766f324457e590c18", 0x92}], 0x1, &(0x7f00000019c0)=[@rights={{0x38, 0x1, 0x1, [r15, r16, r17, r18, r19, 0xffffffffffffffff, r20, r21, r22, 0xffffffffffffffff]}}], 0x38, 0x20000804}}, {{&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001a80)="8a89724fc14802c37e47df3bc25f255b560d6b1882ba3ad557463cd929d3154967373c718c452154401814d40475ea52f6ca45f9871a06bd628baa6cf7dd1a78b75aefc40964b4678aaf2d6da534fd695c30f3f80e9a77aa557a1f3dd4e2864c4173a87b9672d9ca5c5aa50a4a5bcce6a32ecfa4ca", 0x75}], 0x1, &(0x7f0000004100)=[@rights={{0x30, 0x1, 0x1, [r23, r24, r25, 0xffffffffffffffff, r26, 0xffffffffffffffff, r27, r28]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118, 0x24000001}}], 0x5, 0x40881) 679.486135ms ago: executing program 3 (id=3548): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmmsg$inet(r10, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x2}) r11 = accept4$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14, 0x80800) tee(r1, r11, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="183f000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES16=r6, @ANYRESOCT=0x0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) 442.78436ms ago: executing program 2 (id=3549): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1, 0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x61d039c7}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8b0}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20004050) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f00000002c0)) syz_usb_connect(0x0, 0x3ac, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x42, 0xe7, 0x1a, 0x8, 0xc45, 0x8001, 0x73e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39a, 0x1, 0x5, 0x0, 0x40, 0x4d, [{{0x9, 0x4, 0x19, 0x80, 0x10, 0x53, 0x9f, 0x30, 0x1e, [], [{{0x9, 0x5, 0x3, 0x8, 0x8, 0x7, 0x4, 0x75, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x0, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x6, 0x6, 0xd, [@generic={0x3b, 0xa, "148a23a0738f2fb5a280d52469cf0676f4d45bc11a60156661d6f19615f425396a3d7ecd9b63a9e127df4cd90c14f8294ab10f3e35481d5ad8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x2}]}}, {{0x9, 0x5, 0x5, 0x1c, 0x3ff, 0xce, 0x10, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x8}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x8, 0xb0, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x6}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x8e, 0x50, 0x6, [@generic={0x40, 0xc, "c5b4db39fa5af00d246268c68186366f6dd90ad0f6a830518632c1a61a3d4c208e795cac4289f0720d7044418bf393ec715393a18cfff2f49d0ad1c473f4"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x2, 0x5, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x200}]}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0xff, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x8, 0xb2, 0xfc}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xf9, 0x8, 0xd}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0xe2, 0x8, 0x1}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x4, 0x8, 0x46, [@generic={0x2a, 0xa, "746178a82991631fc1616dac96a4a3274e8e7711a0b5e992fdebe897c699bad73cb1c3b3d58f0ba8"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x9, 0x8, 0x1, [@generic={0x3f, 0xa, "1d1e297f8d3e7b9af1df0a568c902aea447dda0c8b7b7b9e55f61db2dbaec8f08fe02f906974bba846aaec3c966c830b36938d4554cc5ec8e13b44c981"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x4, 0x4, 0x8, [@generic={0x55, 0xd, "bd583aa5891d0630e0d39db7682c0f9c3561df3e7fe3be846463f7d8b226183de027262ac3a832b6d090e6836c242418d9d2154bbd4eecc8e3aa57d4d7d1205db940f6d39b52188fa012ba27b6963c2aed724a"}, @generic={0x71, 0x9, "cc74d1429da4a5806c7d1a21f1ca606d48194b4fe38448afe742ff43b0295f0273484b2db92212b1d55d9914355e5866fdbb37886fc4c2f644a5d9e574ae6d44c591c943bb68dd5078578e25d709ff51219afd43fb16a35598ed66484b909a0f5cdcbf52d10481c9fa9a04d727e0df"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x0, 0x5, 0x9, [@generic={0x42, 0x7, "07d9bed648d2e7d210ccf7290104aafeb1dbe238a6648e259d2633619af9cf8cbe860775e4010925245cdf5201bb20e5adef21d0e81ea4c7a2a38210f8759fa4"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x6, 0x0, 0x5, [@generic={0xdb, 0x22, "ebae7bf6363a2097d93900c1c31909aa5dbcb0cae9053235963e4c8b67ad9fb16593e17be9ea992102377d9aafd9269dc2c8911ca745349342527802038171c3ac14fb9244a0af31264658c458939997e785286864da91365e70d5c5d9cf364f686c1e128208aadaa0bacba3276578e901792c0d47c556196abf5905ac5eb8adb6eb87c210f94afc5f55288fb0ec571f6e7a46331583410643a7bb3e8e84eb35aff3468fec370e386685f4f25d113dbae6e31463d8fdd1168da703b57c804954a8f89514552c7fb57d56c4cb0fb477d36972440c5084145bb8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x5}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0xab, 0x4, 0x5, 0x8, 0x5}, 0xc9, &(0x7f0000000700)={0x5, 0xf, 0xc9, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x16, 0x3, 0xb1}, @generic={0xad, 0x10, 0x2, "a00e0272f418823be99ba20947199c68eec7a3edd3392614541c1111d5673bb12981ca9da471f72d34be51feceab519d3aa77735dcdedc52dffbc101afd6b5375ed1ec2e224fa20ea26a16a14803ed7458757e792c1b94b69ec19417051de943f999680fbe559acd699660058cb33fd7fd593faae3941f12ccb45cf5340114e18d303325dcbb1ee159a65dce54f640f1222bced69857a19eba54a829338e8856604836fb38f172c68818"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x40, 0xfa, 0xa}]}, 0x9, [{0xd7, &(0x7f0000000800)=@string={0xd7, 0x3, "95d06c4a0589a88ebbd92f3618d139fddbcd363ed317f832b7011306006d67ec486a33364bba33a08a308d90de3db307b8a3e6946eb5deafd86b424cb8f71f5a95bdd4d728ac19aca34ecfcb2366b4c03be2e546ad47627173d3fdc0505e71eb4a18a4d7a432bb463e68afbb7f753ba26cdd0e74286a44ff7fac269491529f21f7f3ef659fe951e8c807d86ad92095ba8c08c1cca41e98380f84412b01b02de3a9ca8f561619f261022d478bb41ca4b28e8f9d1ab85af9e20303c461521397e9370ad4dfa85e4546d28f5f47810387b679443895f2"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x3b, &(0x7f0000000940)=@string={0x3b, 0x3, "994fab449551618123b2df378025603a69a1ee940f3b415abc91709418bcdd6c3226d9263dc38294c403236a0810716b3a0e40ac5e134eba06"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x81d}}, {0xae, &(0x7f0000000a80)=@string={0xae, 0x3, "5bf3894d895119c17c2f1042e9d2df2eefb19df902779c5b8b40badff9e8995c7a0c684100f72efaa0931ce4cf465462451072a4ff735e86263381b6c3a0115d4f25d73ee4ac760450e2663ce47f3acbdd389edf63efee72abdff2ad246ae707e8dad2ed8ad24ef207420f5d5e79dcfbf2b873b4492159a866b2daaeae466e014d444eb0b301fbf2dd51574c29c46b7cf70b39f4a304b39b178a7268d5662c2381b601af5d74d86235f65cfd"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1462}}]}) sendmsg$inet6(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)="a45b542770ed66c919d1bef9635afe02f9e264ee6a60f1bfff50628e65dc1744b5b5ed745bd1014310b0228d6f9c78c93bfec8273ebe55a571d968b94cb895293f4b6778e8b652e8f6066afafe1927608195e1974d1b2ed5a3bc9caf4fb065339ee6239b241b2f2e46ccd990f8b1058428793e432aa5127a", 0x78}, {&(0x7f0000000cc0)="20c920f7d75d1883c6626e723d554204ea1fe0cb13a880bce7774aa53ca669cb39876bf84110b30287763c599d7258bb034a3f44c08942552ae78846e2aa06d79e24c7521d1333098b8c1962bc7b6818f3c329373894e63c0ab9a1c99844edb6ab695cc4cccc0cd39fcab735deb183cab0e905f6be1472c2e10a93d2b5092d2ce2f4fc47101904de90ece65a7078", 0x8e}], 0x2}, 0xc001) write$6lowpan_enable(r1, &(0x7f0000000e00)='0', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000e40)=0x6) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x68, 0xe5, 0xae}}, [{{0x9, 0x5, 0x82, 0x2, 0x397, 0x8, 0x2, 0x7f}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x310, 0xd, 0x0, 0x97, 0x40, 0x80}, 0x5, &(0x7f0000000f00)={0x5, 0xf, 0x5}, 0x7, [{0x5f, &(0x7f0000000f40)=@string={0x5f, 0x3, "0f63e2f1b1cde6762a2ced7b1bbc07db913b6b485e5d528f43eee24d4ec9a756138abefaab3c3849d92e284ddfa59fd17c979a51606159d80834d2226f375fd54dfa1969d6e00d137b7165ad16feac7c29f2b61bb65aa7db8dec3972e1"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x813}}, {0xe3, &(0x7f0000001040)=@string={0xe3, 0x3, "5c9cebd2264fcd4603c345ac77238fa99d5c860640c42e6fce481e7578ad081c0062db8653379050eedeaa435a82722d25fe32b697826099c88986a19d7e3a247f515ffb51418ee4f06bd119c48abd6395735b98a3a33be0b8415fb79cb12017966c51d915bc2044dddf9f3cd446c096fe52ae599b36c8f0ff6db6e276e5aa1048ee36a3560c83d2b4fd6514e535a50f5d67cfc8155480b62e56fd823b777fa0f7dc6753236c3306f7cdff700e9782f35b2ba3e3597f7c67e8dea8a6ab5db566bd6b7f4bc252e0e747f1eaa3c66d3a9551092d4164675e3400248f3d1283a53ae8"}}, {0x7f, &(0x7f0000001140)=@string={0x7f, 0x3, "dc99c118a74e266edb43e1a1787003cf2095eb93c1e75db1c2eb26ab5668f48b6981f5ebed99176115482b8d0a19b1d1a8f5f1c4bd04e6b82667c2a4059bb377d63159b5a54f8d770f528e39160d517ef4b2cbf554e9be5f2eb437cce0f988021c6892b10655b063e174b55375b6e63457e8c9ab22f5580b99b40d856f"}}, {0x9b, &(0x7f00000011c0)=@string={0x9b, 0x3, "2c2c75fc0e96241457a3f64e6b9d83c02fcb94afd599b273101fbff16dce8669c14e223e16306afd571ce0f69d5a65a1889eed4c14ad1cc9ba90d7d41ed2729dfab5c467d7797df340ca6dfbf92906e8002027e63d17750a81bdf07c93c6b787af5818380eb8ba84bc96aee34ed81f6603b69b79de0a911af921dc720d190e3df52ac19464f8783762f7acbd356afbc210eb4495ca412ae21f"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x406}}]}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xe4, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000011) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f00000015c0)={0x1c4, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xdbc3}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffff87}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x11c}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0xa5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb9e}, {0x6, 0x11, 0xd270}}]}, 0x1c4}}, 0x1) mknodat(r1, &(0x7f0000001840)='./file0\x00', 0xc000, 0x3) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0xc000) r5 = openat$cgroup_ro(r1, &(0x7f0000001980)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000019c0)) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x38, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8005) mq_timedreceive(r0, &(0x7f0000001b40), 0x0, 0x10aa, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x5c, r4, 0x500, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x10000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x18}, 0x11) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000001f40)={{&(0x7f0000001ec0)={'KERNEL\x00', {&(0x7f0000001d80)=@adf_str={@format={'Dc', '0', 'BankNumber\x00'}, {"61a14b000ad6a8d106dde62a0b2ad8ca81fbb9ad52cede36aadfe8ea18aecc5ea86fdda921d88115e96d52b9b03c4af3888f5b895776379c825e453044a650ea"}, {&(0x7f0000001cc0)=@adf_dec={@format={'Cy', '4', 'NumConcurrentRequests\x00'}, {0x8}}}}}, {&(0x7f0000001e40)={'Accelerator\x00'}}}}, 0x1}) r7 = fanotify_init(0x0, 0x40000) fanotify_mark(r7, 0x8, 0x0, r1, &(0x7f0000001f80)='./file0\x00') ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000002000)={0x8, 0x0, &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000002040)={0x8fb, "561dc98026a834f9d797b28e2470d2d4b62321632d606cd473fde319ce03a0a4"}) 177.796986ms ago: executing program 3 (id=3550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039040000", @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005c40)=@newtfilter={0x94, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0xffff, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x64, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ct={0x2c, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_BASIC_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 140.986648ms ago: executing program 4 (id=3551): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100001000000000800000000fe80000000000000000000000000001afc000000000000000000000000000000000200004e2100800000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000000000)=0x8, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x12) 7.96901ms ago: executing program 3 (id=3552): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001fff0000b1294e684258d482dae2a317bc21690000800000000000000096a4753298984a68ae96e12e2d5f59c5123b04cf5fa9632f629bf7bdc8b4fc75951ddbcb4c85e5c5c7e0da19f5e2c3aefc84ed05382f4bdcddad16a7272c91257048a60a05ae8ce018b52ea9280c67bcdf8337b8628da3c6dd36b304706a426e8e6bf16ad21891ee322b2bf5097e15eb0f8790f474d7ea64cff871503f7d33746a9b3266f7968fff48bd81f0583a55d6d6d53df839ba257297632913588dacdaad6e14de92808553d83cb886b415d707bae8db51e372a084e725df1062eec4e8416d3c8a811eaef69fca650d52", @ANYRES32=0x0, @ANYBLOB="237534a8b879f7acbedd03630300000000003f00001c0012800b00010062726964676500000c0002", @ANYRES32=r2, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4040004) 0s ago: executing program 6 (id=3553): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1194.521496][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1194.613197][ T9] usb 6-1: USB disconnect, device number 26 [ 1194.646351][T18297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1195.416058][T18320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.779737][T18347] vivid-000: disconnect [ 1197.260848][T18358] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1197.267416][T18358] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1197.278408][T18358] vhci_hcd vhci_hcd.0: Device attached [ 1197.389562][T18358] netdevsim netdevsim1: Direct firmware load for x failed with error -2 [ 1197.400057][T18358] netdevsim netdevsim1: Falling back to sysfs fallback for: x [ 1197.518425][ T5973] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1197.563536][T18360] vhci_hcd: connection reset by peer [ 1197.570713][ T8561] vhci_hcd: stop threads [ 1197.578021][ T8561] vhci_hcd: release socket [ 1197.582635][ T8561] vhci_hcd: disconnect device [ 1199.193235][T18378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3114'. [ 1199.270215][T18379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3114'. [ 1199.745038][T18349] vivid-000: reconnect [ 1199.977633][T18397] netlink: 'syz.2.3119': attribute type 4 has an invalid length. [ 1200.094829][T18398] netlink: 'syz.2.3119': attribute type 4 has an invalid length. [ 1200.173811][T18398] block nbd0: Attempted send on invalid socket [ 1200.180471][T18398] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1201.516564][ T30] audit: type=1326 audit(1756696036.682:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18402 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6194f8ebe9 code=0x7ffc0000 [ 1201.540806][T18406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1201.600515][ T30] audit: type=1326 audit(1756696036.682:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18402 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f6194f8ebe9 code=0x7ffc0000 [ 1201.759491][ T30] audit: type=1326 audit(1756696036.682:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18402 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6194f8ebe9 code=0x7ffc0000 [ 1201.821272][ T30] audit: type=1326 audit(1756696036.682:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18402 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6194f8ebe9 code=0x7ffc0000 [ 1201.876564][ T30] audit: type=1326 audit(1756696036.682:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18402 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6194f8ebe9 code=0x7ffc0000 [ 1201.966611][ T30] audit: type=1326 audit(1756696036.682:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18402 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6194f8ebe9 code=0x7ffc0000 [ 1202.034623][T18407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3121'. [ 1202.049795][ T30] audit: type=1326 audit(1756696036.792:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18402 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6194f8ebe9 code=0x7ffc0000 [ 1202.086430][ T30] audit: type=1326 audit(1756696036.792:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18402 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6194f8ebe9 code=0x7ffc0000 [ 1202.629611][T18430] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 1202.635986][ T5973] vhci_hcd: vhci_device speed not set [ 1202.697382][T18430] syzkaller0: owner set to 0 [ 1203.212241][T18437] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1203.944830][T18449] syz.1.3132 (18449): drop_caches: 2 [ 1205.408021][T18463] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3136'. [ 1205.413246][T18465] block nbd0: Attempted send on invalid socket [ 1205.423371][T18465] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1205.470506][T18465] netlink: 'syz.5.3137': attribute type 29 has an invalid length. [ 1205.696939][T18471] loop3: detected capacity change from 0 to 1 [ 1205.711746][ T5966] Dev loop3: unable to read RDB block 1 [ 1205.719248][ T5966] loop3: unable to read partition table [ 1205.734500][ T5966] loop3: partition table beyond EOD, truncated [ 1205.742199][T18471] Dev loop3: unable to read RDB block 1 [ 1205.751724][T18471] loop3: unable to read partition table [ 1205.768790][T18471] loop3: partition table beyond EOD, truncated [ 1205.788748][T18471] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1206.060046][T18477] pimreg: entered allmulticast mode [ 1206.144508][ T5973] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1206.211337][T18479] pimreg: left allmulticast mode [ 1206.317570][ T5238] Dev loop3: unable to read RDB block 1 [ 1206.328192][ T5238] loop3: unable to read partition table [ 1206.338229][ T5238] loop3: partition table beyond EOD, truncated [ 1206.434833][ T5973] usb 6-1: Using ep0 maxpacket: 32 [ 1206.459710][ T5973] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1206.533231][ T5973] usb 6-1: config 0 has no interface number 0 [ 1206.544752][ T5973] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1206.569987][ T5973] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1206.613015][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.660326][ T5973] usb 6-1: Product: syz [ 1206.677868][ T5973] usb 6-1: Manufacturer: syz [ 1206.695785][ T5973] usb 6-1: SerialNumber: syz [ 1206.757819][ T5973] usb 6-1: config 0 descriptor?? [ 1206.769854][ T5973] smsc75xx v1.0.0 [ 1206.803116][ T5973] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1206.836941][ T5973] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1206.999533][ T9] usb 6-1: USB disconnect, device number 27 [ 1207.649089][T18495] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1209.835139][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1209.845035][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1210.384379][ T9] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1210.549793][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1210.601152][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1210.610277][ T9] usb 6-1: can't read configurations, error -71 [ 1212.808362][T18572] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3165'. [ 1212.924385][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1213.094884][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1213.105037][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.134565][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1213.178392][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1213.238955][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1213.261423][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.273751][T18579] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1213.305143][ T9] usb 2-1: config 0 descriptor?? [ 1213.367322][T18579] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1213.758708][T18570] netlink: 'syz.1.3164': attribute type 27 has an invalid length. [ 1213.794395][T18570] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1213.804096][T18570] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1213.959189][T18570] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1213.995271][T18570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1214.031919][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1214.067073][ T9] corsair-cpro 0003:1B1C:0C10.0033: item fetching failed at offset 2/5 [ 1214.100581][ T9] corsair-cpro 0003:1B1C:0C10.0033: probe with driver corsair-cpro failed with error -22 [ 1214.321963][ T44] usb 2-1: USB disconnect, device number 77 [ 1215.431266][T18627] netlink: 'syz.5.3182': attribute type 8 has an invalid length. [ 1215.835169][ T44] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1216.037318][ T44] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1216.051407][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1216.148853][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3185'. [ 1216.187022][ T44] usb 2-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 1216.197640][T17659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1216.363876][T17659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1216.382697][T17659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1216.394094][T17659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1216.405407][T17659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1216.616957][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.632037][ T44] usb 2-1: config 0 descriptor?? [ 1216.831382][T14699] syz_tun (unregistering): left allmulticast mode [ 1217.231697][ T8558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1217.243390][ T8558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.380631][ T8558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1217.394485][ T8558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.502891][ T8558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1217.515060][ T8558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.607727][ T8558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1217.628635][ T8558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.664829][T18641] chnl_net:caif_netlink_parms(): no params data found [ 1217.951511][T18641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.004074][T18641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.035029][T18641] bridge_slave_0: entered allmulticast mode [ 1218.053450][T18641] bridge_slave_0: entered promiscuous mode [ 1218.126692][T18641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.170487][T18663] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3190'. [ 1218.244994][T18641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.394956][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1218.403880][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1218.442954][T18641] bridge_slave_1: entered allmulticast mode [ 1218.461666][T18641] bridge_slave_1: entered promiscuous mode [ 1218.557247][T17659] Bluetooth: hci4: command tx timeout [ 1218.764684][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 1218.781479][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1218.856068][ T44] usb 2-1: USB disconnect, device number 78 [ 1218.932061][T18673] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3191'. [ 1219.237526][T18641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.248373][ T8558] dummy0: left allmulticast mode [ 1219.253657][ T8558] dummy0: left promiscuous mode [ 1219.264746][ T8558] bridge0: port 3(dummy0) entered disabled state [ 1219.296081][ T8558] bridge_slave_1: left allmulticast mode [ 1219.301884][ T8558] bridge_slave_1: left promiscuous mode [ 1219.308417][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.380755][ T8558] bridge_slave_0: left allmulticast mode [ 1219.388694][ T8558] bridge_slave_0: left promiscuous mode [ 1219.413315][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.836258][T18684] vivid-000: ================= START STATUS ================= [ 1219.851190][T18684] vivid-000: Test Pattern: 75% Colorbar [ 1219.875807][T18684] vivid-000: Fill Percentage of Frame: 100 [ 1219.882578][T18684] vivid-000: Horizontal Movement: No Movement [ 1219.910201][T18684] vivid-000: Vertical Movement: No Movement [ 1219.934431][T18684] vivid-000: OSD Text Mode: All [ 1219.939462][T18684] vivid-000: Show Border: false [ 1219.969987][T18684] vivid-000: Show Square: false [ 1219.980765][T18684] vivid-000: Sensor Flipped Horizontally: true [ 1219.988102][ T8558] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1219.998362][T18684] vivid-000: Sensor Flipped Vertically: false [ 1220.022890][T18684] vivid-000: Insert SAV Code in Image: false [ 1220.082337][T18684] vivid-000: Insert EAV Code in Image: false [ 1220.124035][T18684] vivid-000: Insert Video Guard Band: false [ 1220.139238][T18684] vivid-000: Reduced Framerate: false [ 1220.191037][T18684] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1220.216667][ T8558] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1220.231261][T18684] vivid-000: S-Video 000-0 Is Connected To: None [ 1220.250157][T18684] vivid-000: Enable Capture Cropping: true grabbed [ 1220.266068][T18684] vivid-000: Enable Capture Composing: true grabbed [ 1220.272842][T18684] vivid-000: Enable Capture Scaler: true grabbed [ 1220.282693][T18684] vivid-000: Timestamp Source: End of Frame [ 1220.355162][T18684] vivid-000: Colorspace: sRGB [ 1220.360277][T18684] vivid-000: Transfer Function: Default [ 1220.366356][T18684] vivid-000: Y'CbCr Encoding: Default [ 1220.377170][T18684] vivid-000: HSV Encoding: Hue 0-179 [ 1220.397192][T18684] vivid-000: Quantization: Default [ 1220.415075][T18684] vivid-000: Apply Alpha To Red Only: false [ 1220.464309][T18684] vivid-000: Standard Aspect Ratio: 4x3 [ 1220.484645][T18684] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1220.495155][T18684] vivid-000: DV Timings: 640x480p59 inactive [ 1220.511515][T18684] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1220.547286][T18684] vivid-000: Maximum EDID Blocks: 2 [ 1220.552666][T18684] vivid-000: Limited RGB Range (16-235): false [ 1220.569504][T18684] vivid-000: Rx RGB Quantization Range: Automatic [ 1220.578764][T18684] vivid-000: Power Present: 0x00000001 [ 1220.586716][ T8558] bridge0 (unregistering): left allmulticast mode [ 1220.609364][T18684] tpg source WxH: 320x180 (Y'CbCr) [ 1220.621210][T18684] tpg field: 1 [ 1220.631509][T18684] tpg crop: (0,0)/320x180 [ 1220.645883][T17659] Bluetooth: hci4: command tx timeout [ 1220.651392][T18684] tpg compose: (0,0)/320x180 [ 1220.665793][T18684] tpg colorspace: 9 [ 1220.680093][T18684] tpg transfer function: 7/7 [ 1220.695225][T18684] tpg Y'CbCr encoding: 0/1 [ 1220.702130][T18684] tpg quantization: 1/1 [ 1220.711145][T18684] tpg RGB range: 0/2 [ 1220.742813][T18684] vivid-000: ================== END STATUS ================== [ 1220.744452][ T5973] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1220.914351][ T5973] usb 6-1: Using ep0 maxpacket: 32 [ 1220.938974][ T5973] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1220.949210][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.969975][ T5973] usb 6-1: config 0 descriptor?? [ 1220.996206][ T5973] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1221.090932][ T8558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.110070][ T8558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.148480][ T8558] bond0 (unregistering): Released all slaves [ 1221.188252][ T8558] bond1 (unregistering): Released all slaves [ 1221.231477][ T8558] bond2 (unregistering): Released all slaves [ 1221.288100][ T8558] bond3 (unregistering): Released all slaves [ 1221.586535][ T8558] bond4 (unregistering): Released all slaves [ 1221.687689][T18641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.704698][ T5973] gspca_vc032x: reg_w err -110 [ 1221.709653][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1221.725106][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1221.743193][T18681] gretap1: entered promiscuous mode [ 1221.751283][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1221.781047][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1221.787567][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1221.793095][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1221.872358][ T44] IPVS: starting estimator thread 0... [ 1221.886194][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1221.923459][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1221.931112][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1221.938365][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1221.953693][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1221.964634][ T8558] IPVS: stopping backup sync thread 16034 ... [ 1221.975002][T18695] IPVS: using max 34 ests per chain, 81600 per kthread [ 1221.983883][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1222.000665][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1222.008354][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1222.013812][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1222.021074][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1222.034413][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3198'. [ 1222.053683][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1222.060119][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1222.068831][T18641] team0: Port device team_slave_0 added [ 1222.100284][T18641] team0: Port device team_slave_1 added [ 1222.111441][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1222.139896][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1222.161043][ T5973] gspca_vc032x: I2c Bus Busy Wait 00 [ 1222.186373][ T5973] gspca_vc032x: Unknown sensor... [ 1222.220410][ T5973] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1222.428337][T18641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.481641][T18641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.583583][T18641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.722803][T18641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.734803][T18641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.749877][T17659] Bluetooth: hci4: command tx timeout [ 1222.826957][T18641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.284596][ T6416] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1223.331852][ T5973] usb 6-1: USB disconnect, device number 31 [ 1223.567072][ T6416] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1223.617727][ T6416] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1223.715106][ T6416] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1223.845585][ T6416] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1223.895527][T18641] hsr_slave_0: entered promiscuous mode [ 1223.912187][T18641] hsr_slave_1: entered promiscuous mode [ 1223.924315][ T6416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.954909][ T5980] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1223.977841][T18641] debugfs: 'hsr0' already exists in 'hsr' [ 1223.987407][ T6416] usb 3-1: Product: syz [ 1223.991630][ T6416] usb 3-1: Manufacturer: syz [ 1224.013914][ T6416] usb 3-1: SerialNumber: syz [ 1224.019656][T18641] Cannot create hsr debugfs directory [ 1224.048692][ T6416] hub 3-1:1.0: bad descriptor, ignoring hub [ 1224.090097][ T6416] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1224.104897][ T5980] usb 2-1: Using ep0 maxpacket: 16 [ 1224.117217][ T5980] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.148300][ T5980] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1224.227825][ T5980] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1224.268821][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.303048][ T6416] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1224.304550][ T5980] usb 2-1: Product: syz [ 1224.348621][ T5980] usb 2-1: Manufacturer: syz [ 1224.353664][ T5980] usb 2-1: SerialNumber: syz [ 1224.359035][ T44] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1224.457093][ T8558] hsr_slave_0: left promiscuous mode [ 1224.503803][ T8558] hsr_slave_1: left promiscuous mode [ 1224.516101][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1224.569817][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1224.694641][ T5934] usb 3-1: USB disconnect, device number 82 [ 1224.794995][T17659] Bluetooth: hci4: command tx timeout [ 1224.804360][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1224.838777][ T5934] usblp0: removed [ 1224.853071][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1224.879758][ T44] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1224.908478][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.936317][ T5980] usb 2-1: 0:2 : does not exist [ 1225.001642][ T44] usb 6-1: config 0 descriptor?? [ 1225.321320][T18726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.330359][T18726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.353362][ T5980] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1225.435338][ T5980] usb 2-1: USB disconnect, device number 79 [ 1225.449542][ T44] plantronics 0003:047F:FFFF.0034: ignoring exceeding usage max [ 1225.540210][ T44] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1225.754586][ T8558] team0 (unregistering): Port device team_slave_1 removed [ 1225.824046][ T8558] team0 (unregistering): Port device team_slave_0 removed [ 1226.224459][ T5980] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1226.431044][ T5980] usb 2-1: Using ep0 maxpacket: 8 [ 1226.468941][ T5980] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1226.480909][ T5980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1226.512899][ T5980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1226.542741][ T5980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1226.615060][ T5980] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.671606][ T5980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1226.723292][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.108245][ T5980] usb 2-1: usb_control_msg returned -32 [ 1227.175000][ T6416] usb 6-1: reset high-speed USB device number 32 using dummy_hcd [ 1227.183222][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 1227.207227][ T5980] usbtmc 2-1:16.0: can't read capabilities [ 1227.583546][T18738] usb 2-1: USB disconnect, device number 80 [ 1227.709095][T18767] KVM: debugfs: duplicate directory 18767-4 [ 1227.991250][ T6042] usb 6-1: USB disconnect, device number 32 [ 1228.176599][T18754] delete_channel: no stack [ 1228.844354][ T5980] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1228.989481][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3215'. [ 1229.255571][ T6416] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1229.329879][ T5980] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1229.351237][ T5980] usb 2-1: config 0 has no interface number 0 [ 1229.406373][ T5980] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1229.427700][ T6416] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1229.448680][ T6416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1229.482285][ T5980] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1229.486732][ T6416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1229.516895][ T6416] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1229.534288][ T6416] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1229.543688][ T6416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.571248][ T5980] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1229.580492][ T6416] usb 6-1: config 0 descriptor?? [ 1229.613466][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.668746][ T5980] usb 2-1: Product: syz [ 1229.690558][ T30] audit: type=1326 audit(1756696064.872:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7fc00000 [ 1229.718247][ T5980] usb 2-1: Manufacturer: syz [ 1229.722894][ T5980] usb 2-1: SerialNumber: syz [ 1229.785853][ T5980] usb 2-1: config 0 descriptor?? [ 1229.786782][T18641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1229.819839][ T30] audit: type=1326 audit(1756696064.872:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68fed8ebe9 code=0x7fc00000 [ 1229.856705][ T5980] vmk80xx 2-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 1229.879539][ T5980] vmk80xx 2-1:0.255: probe with driver vmk80xx failed with error -22 [ 1229.883529][T18641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1229.910404][ T30] audit: type=1326 audit(1756696064.872:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7fc00000 [ 1229.954055][ T30] audit: type=1326 audit(1756696064.872:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7fc00000 [ 1229.982595][T18641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1230.029564][T18800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.049584][T18800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.052598][ T30] audit: type=1326 audit(1756696064.872:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7fc00000 [ 1230.089149][ T6416] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1230.155418][T18641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1230.194625][T18738] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1230.222868][ T30] audit: type=1326 audit(1756696064.872:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7fc00000 [ 1230.258920][ T30] audit: type=1326 audit(1756696064.872:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7fc00000 [ 1230.281419][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.367391][T18738] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 1230.376185][T18738] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 1230.391662][T18738] usb 3-1: config 0 has no interface number 0 [ 1230.418439][T18738] usb 3-1: config 0 has no interface number 1 [ 1230.452969][T18738] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1230.493344][T18738] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1230.528663][T18738] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1230.531269][T18641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.539299][T18738] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1230.556237][T18738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.580388][T18738] usb 3-1: Product: syz [ 1230.588022][T18738] usb 3-1: Manufacturer: syz [ 1230.592986][T18738] usb 3-1: SerialNumber: syz [ 1230.619018][T18641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.623092][T18738] usb 3-1: config 0 descriptor?? [ 1230.651966][T18738] usb 3-1: selecting invalid altsetting 0 [ 1230.653504][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.664966][ T8558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.670397][T18738] usb 3-1: Could not set interface, error -22 [ 1230.771192][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.778441][ T8558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.843657][ T9] usb 3-1: USB disconnect, device number 83 [ 1231.056309][T18641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.255406][T18641] veth0_vlan: entered promiscuous mode [ 1231.706623][ T9] usb 2-1: USB disconnect, device number 81 [ 1231.739797][T18641] veth1_vlan: entered promiscuous mode [ 1231.830328][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1231.864391][ T5980] usb 6-1: reset high-speed USB device number 33 using dummy_hcd [ 1232.256565][T18641] veth0_macvtap: entered promiscuous mode [ 1232.524039][T18641] veth1_macvtap: entered promiscuous mode [ 1232.845512][T18738] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1232.855291][T18641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.940805][T18641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.974397][ T8558] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.993464][ T8558] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.017316][T18738] usb 3-1: config 0 has an invalid interface number: 206 but max is 1 [ 1233.030899][T18738] usb 3-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1233.067554][T18738] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1233.080791][ T8561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.095512][T18738] usb 3-1: config 0 has no interface number 0 [ 1233.110027][T18738] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1233.139801][T18738] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1233.161338][T18738] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 30768, setting to 64 [ 1233.192109][ T8561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.200338][T18738] usb 3-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1233.259499][T18738] usb 3-1: config 0 interface 206 has no altsetting 0 [ 1233.301973][T18738] usb 3-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 1233.323283][T18738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.360616][T18738] usb 3-1: Product: syz [ 1233.393576][T18738] usb 3-1: Manufacturer: syz [ 1233.418527][T18738] usb 3-1: SerialNumber: syz [ 1233.457717][T18738] usb 3-1: config 0 descriptor?? [ 1233.470200][T18830] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1233.604554][T18288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.643715][T18288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.777207][T18830] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3045695589 (97462258848 ns) > initial count (89605043936 ns). Using initial count to start timer. [ 1233.779284][T13898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.818424][T13898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.924918][ T5980] usb 6-1: device descriptor read/64, error -71 [ 1234.018145][ T5937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.083847][ T5937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1234.164648][ T5980] usb 6-1: reset high-speed USB device number 33 using dummy_hcd [ 1234.188079][ T5980] usb 6-1: device reset changed ep0 maxpacket size! [ 1234.222799][ T44] usb 6-1: USB disconnect, device number 33 [ 1234.414369][ T44] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1234.430035][ T5937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.474307][ T5937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1234.509377][T18738] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1234.616200][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 1234.640524][ T44] usb 6-1: config 255 has an invalid interface number: 51 but max is 0 [ 1234.776290][ T44] usb 6-1: config 255 has no interface number 0 [ 1234.782617][ T44] usb 6-1: config 255 interface 51 has no altsetting 0 [ 1234.843826][ T5937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.856190][T18738] usb 3-1: USB disconnect, device number 84 [ 1234.891544][ T44] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 1234.912346][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.916039][ T5937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1234.943885][ T44] usb 6-1: Product: syz [ 1234.954050][ T44] usb 6-1: Manufacturer: syz [ 1234.964981][ T44] usb 6-1: SerialNumber: syz [ 1235.085232][ T9927] udevd[9927]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.228043][T18842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.326928][T18842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.373898][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3223'. [ 1235.502605][ T5937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.545892][ T5937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1235.742851][ T44] legousbtower 6-1:255.51: interrupt endpoints not found [ 1235.827570][ T44] usb 6-1: USB disconnect, device number 34 [ 1236.445466][T12273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1236.465697][T12273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1236.493335][T12273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1236.537277][T12273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1236.552088][T12273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1237.051451][T18894] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3230'. [ 1237.286042][ T5937] bridge_slave_1: left allmulticast mode [ 1237.369010][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.463100][ T5937] bridge_slave_0: left allmulticast mode [ 1237.479481][ T5937] bridge_slave_0: left promiscuous mode [ 1237.532501][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.532626][T18901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3231'. [ 1238.119189][ T5937] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 1238.130525][ T5937] ip6gre2 (unregistering): left promiscuous mode [ 1238.184600][T18909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3233'. [ 1238.409817][T18913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.875426][ T5937] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1238.888855][T17659] Bluetooth: hci1: command tx timeout [ 1239.274850][ T121] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1239.445697][ T121] usb 3-1: Using ep0 maxpacket: 32 [ 1239.463589][ T121] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 1239.472258][ T121] usb 3-1: config 0 has no interface number 0 [ 1239.482139][ T121] usb 3-1: config 0 interface 149 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1239.493906][ T121] usb 3-1: config 0 interface 149 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1239.520274][ T121] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 1239.530238][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.545630][ T121] usb 3-1: Product: syz [ 1239.550148][ T121] usb 3-1: Manufacturer: syz [ 1239.591885][ T121] usb 3-1: SerialNumber: syz [ 1239.610223][ T121] usb 3-1: config 0 descriptor?? [ 1239.771374][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.785105][ T5937] bond_slave_0: left promiscuous mode [ 1239.853893][ T121] usb 3-1: USB disconnect, device number 85 [ 1239.866023][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.892629][ T5937] bond_slave_1: left promiscuous mode [ 1239.991794][ T5937] bond0 (unregistering): Released all slaves [ 1240.044459][ T5937] bond1 (unregistering): Released all slaves [ 1240.295037][ T5937] bond2 (unregistering): Released all slaves [ 1240.324095][ T5937] bond3 (unregistering): Released all slaves [ 1240.342666][ T5937] bond4 (unregistering): Released all slaves [ 1240.433242][T18894] tipc: Enabling of bearer rejected, failed to enable media [ 1240.602946][ T5937] tipc: Left network mode [ 1240.804826][ T5934] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1240.955676][T17659] Bluetooth: hci1: command tx timeout [ 1241.012720][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.024474][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.049094][ T5934] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1241.059052][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.069877][ T5934] usb 3-1: config 0 descriptor?? [ 1241.952197][ T5934] usbhid 3-1:0.0: can't add hid device: -71 [ 1241.964596][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1242.010755][ T5934] usb 3-1: USB disconnect, device number 86 [ 1242.062833][T18892] chnl_net:caif_netlink_parms(): no params data found [ 1242.160115][ T5937] hsr_slave_0: left promiscuous mode [ 1242.189343][ T5937] hsr_slave_1: left promiscuous mode [ 1242.211446][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.224264][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.233281][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.270066][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.309593][ T5937] veth1_macvtap: left promiscuous mode [ 1242.326081][ T5937] veth0_macvtap: left promiscuous mode [ 1242.359515][T18891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1242.370504][T18891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1242.386579][T18891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1242.403222][T18891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1242.412495][T18891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1242.810177][ T121] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1242.961791][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1242.974572][ T121] usb 3-1: Using ep0 maxpacket: 8 [ 1243.005744][ T121] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1243.020975][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.034103][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1243.042978][ T121] usb 3-1: Product: syz [ 1243.047580][T17659] Bluetooth: hci1: command tx timeout [ 1243.053249][ T121] usb 3-1: Manufacturer: syz [ 1243.070600][ T121] usb 3-1: SerialNumber: syz [ 1243.093652][ T121] usb 3-1: config 0 descriptor?? [ 1243.113296][ T121] gspca_main: se401-2.14.0 probing 047d:5003 [ 1243.469564][ T121] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1243.498196][ T121] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 1243.531379][ T121] usb 3-1: USB disconnect, device number 87 [ 1244.245089][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.251497][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.504798][T17659] Bluetooth: hci0: command tx timeout [ 1244.608043][ T30] audit: type=1326 audit(1756696079.802:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1244.634892][ T30] audit: type=1326 audit(1756696079.802:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1244.658837][ T30] audit: type=1326 audit(1756696079.802:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1244.662792][T18972] tipc: Enabled bearer , priority 0 [ 1244.682245][ T30] audit: type=1326 audit(1756696079.802:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1244.759034][ T30] audit: type=1326 audit(1756696079.802:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1244.788251][ T30] audit: type=1326 audit(1756696079.802:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1244.888577][ T30] audit: type=1326 audit(1756696079.802:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1244.913124][ T30] audit: type=1326 audit(1756696079.802:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1244.937645][ T30] audit: type=1326 audit(1756696079.802:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1245.034769][ T30] audit: type=1326 audit(1756696079.802:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3078ebe9 code=0x7ffc0000 [ 1245.115910][T17659] Bluetooth: hci1: command tx timeout [ 1245.469686][T18892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.536209][T18892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.543482][T18892] bridge_slave_0: entered allmulticast mode [ 1245.638244][T18892] bridge_slave_0: entered promiscuous mode [ 1245.665517][ T121] tipc: Node number set to 16966793 [ 1245.707933][T18892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.776391][T18892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.810685][T18892] bridge_slave_1: entered allmulticast mode [ 1245.886739][T18892] bridge_slave_1: entered promiscuous mode [ 1245.906371][T19004] ksmbd: Unknown IPC event: 3, ignore. [ 1246.067670][T18892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.080654][T18892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.291463][ T5937] IPVS: stop unused estimator thread 0... [ 1246.332153][T18892] team0: Port device team_slave_0 added [ 1246.752663][T17659] Bluetooth: hci0: command tx timeout [ 1246.770417][T18892] team0: Port device team_slave_1 added [ 1247.028228][T18892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.052015][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.169608][T18892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.320514][T18892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.349866][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.391366][T18892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.592471][T18957] chnl_net:caif_netlink_parms(): no params data found [ 1247.663709][T18892] hsr_slave_0: entered promiscuous mode [ 1247.670624][T18892] hsr_slave_1: entered promiscuous mode [ 1247.689910][T18892] debugfs: 'hsr0' already exists in 'hsr' [ 1247.696566][T18892] Cannot create hsr debugfs directory [ 1247.788298][ T5937] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.804599][ T5937] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1248.016040][ T5937] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.027430][ T5937] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1248.243620][ T5937] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.256136][ T5937] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1248.306708][ T44] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1248.369635][T19043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3260'. [ 1248.477321][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.493908][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.505573][ T44] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1248.522716][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.542281][ T44] usb 3-1: config 0 descriptor?? [ 1248.689074][T18957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.705032][T18957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.723079][T18957] bridge_slave_0: entered allmulticast mode [ 1248.745752][T18957] bridge_slave_0: entered promiscuous mode [ 1248.770012][T19036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.787205][T19036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.795464][T17659] Bluetooth: hci0: command tx timeout [ 1248.815083][T18957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.830758][T18957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.839447][T18957] bridge_slave_1: entered allmulticast mode [ 1248.848433][T18957] bridge_slave_1: entered promiscuous mode [ 1249.056413][ T44] playstation 0003:054C:0BA0.0036: unknown main item tag 0x0 [ 1249.091605][ T44] playstation 0003:054C:0BA0.0036: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 1249.148166][T18957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.172213][T18957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.244426][ T44] playstation 0003:054C:0BA0.0036: Invalid byte count transferred, expected 16 got 0 [ 1249.253948][ T44] playstation 0003:054C:0BA0.0036: Failed to retrieve DualShock4 pairing info: -22 [ 1249.305168][ T44] playstation 0003:054C:0BA0.0036: Failed to get MAC address from DualShock4 [ 1249.314034][ T44] playstation 0003:054C:0BA0.0036: Failed to create dualshock4. [ 1249.362908][ T44] playstation 0003:054C:0BA0.0036: probe with driver playstation failed with error -22 [ 1249.574106][T19075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3259'. [ 1249.629171][T18957] team0: Port device team_slave_0 added [ 1249.649353][T18957] team0: Port device team_slave_1 added [ 1249.980056][ T5937] bridge_slave_1: left allmulticast mode [ 1250.095479][ T5937] bridge_slave_1: left promiscuous mode [ 1250.110174][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.129044][ T5937] bridge_slave_0: left allmulticast mode [ 1250.139306][ T5937] bridge_slave_0: left promiscuous mode [ 1250.190790][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.880627][T17659] Bluetooth: hci0: command tx timeout [ 1251.037191][ T6042] usb 3-1: USB disconnect, device number 88 [ 1251.338218][T19090] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3267'. [ 1252.532182][ T5937] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1253.996165][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.069535][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.109622][ T5937] bond0 (unregistering): Released all slaves [ 1254.151943][ T5937] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1254.168419][ T5937] bond1 (unregistering): Released all slaves [ 1254.201868][ T5937] bond2 (unregistering): Released all slaves [ 1254.471029][ T5937] bond3 (unregistering): Released all slaves [ 1254.499465][T18957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.514085][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.574189][T18957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.844335][T18957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.884280][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.224203][T18957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.451459][ T5937] tipc: Left network mode [ 1255.810885][T18957] hsr_slave_0: entered promiscuous mode [ 1255.823076][T18957] hsr_slave_1: entered promiscuous mode [ 1255.829799][T18957] debugfs: 'hsr0' already exists in 'hsr' [ 1255.876279][T18957] Cannot create hsr debugfs directory [ 1256.781818][ T44] hid-generic 0000:0004:0000.0037: unknown main item tag 0x0 [ 1256.847782][ T44] hid-generic 0000:0004:0000.0037: unknown main item tag 0x0 [ 1256.869077][ T44] hid-generic 0000:0004:0000.0037: unknown main item tag 0x0 [ 1256.931257][ T44] hid-generic 0000:0004:0000.0037: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1257.089892][T18892] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1257.272111][T18892] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1257.272123][T19132] fido_id[19132]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1257.378009][T18892] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1257.510728][T18892] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1257.950953][ T5937] hsr_slave_0: left promiscuous mode [ 1257.985124][ T5937] hsr_slave_1: left promiscuous mode [ 1258.001509][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.016649][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.057242][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.075533][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.184435][ T5937] veth0_macvtap: left promiscuous mode [ 1258.190060][ T5937] veth1_vlan: left promiscuous mode [ 1258.206927][ T5937] veth0_vlan: left promiscuous mode [ 1258.504557][ T6416] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1258.674317][ T6416] usb 3-1: Using ep0 maxpacket: 32 [ 1258.681300][ T6416] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1258.690006][ T6416] usb 3-1: config 0 has no interface number 0 [ 1258.705472][ T6416] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1258.714767][ T6416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.722771][ T6416] usb 3-1: Product: syz [ 1258.728002][ T6416] usb 3-1: Manufacturer: syz [ 1258.732664][ T6416] usb 3-1: SerialNumber: syz [ 1258.740524][ T6416] usb 3-1: config 0 descriptor?? [ 1258.753395][ T6416] smsc95xx v2.0.0 [ 1258.907645][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 1258.963397][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 1259.154752][ T6416] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1259.172174][ T6416] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1259.332772][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3277'. [ 1259.579906][T19166] team_slave_0: entered promiscuous mode [ 1259.585650][T19166] team_slave_1: entered promiscuous mode [ 1259.591843][T19166] macsec1: entered allmulticast mode [ 1259.598747][T19166] team0: entered allmulticast mode [ 1259.603899][T19166] team_slave_0: entered allmulticast mode [ 1259.610270][T19166] team_slave_1: entered allmulticast mode [ 1259.620634][T19166] team0: left allmulticast mode [ 1259.625808][T19166] team_slave_0: left allmulticast mode [ 1259.631395][T19166] team_slave_1: left allmulticast mode [ 1259.637298][T19166] team_slave_0: left promiscuous mode [ 1259.642765][T19166] team_slave_1: left promiscuous mode [ 1259.796956][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1259.796973][ T30] audit: type=1326 audit(1756696095.002:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.2.3274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x0 [ 1259.885729][ T6416] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1259.938206][T18957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1260.030799][T18957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1260.048070][ T6416] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1260.083014][T18957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1260.168579][ T6416] usb 3-1: USB disconnect, device number 89 [ 1260.197093][T18957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1260.548147][ T5937] IPVS: stop unused estimator thread 0... [ 1260.920031][T18892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.042171][T18892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.099178][T18957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.181692][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.188898][ T8558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.255687][ T30] audit: type=1326 audit(1756696096.452:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19185 comm="syz.4.3279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9009b8ebe9 code=0x0 [ 1261.308414][T18957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.381737][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.388968][ T8551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.475681][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.483024][ T8551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.559746][T19194] netlink: 'syz.3.3280': attribute type 4 has an invalid length. [ 1261.610631][T19192] netlink: 'syz.3.3280': attribute type 4 has an invalid length. [ 1261.619093][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.626306][ T8551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.183392][T18957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.277899][T18892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.773961][ T30] audit: type=1326 audit(1756696097.972:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7ffc0000 [ 1262.990019][ T30] audit: type=1326 audit(1756696097.972:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7ffc0000 [ 1263.191111][ T30] audit: type=1326 audit(1756696097.972:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68fed8d550 code=0x7ffc0000 [ 1263.291899][ T30] audit: type=1326 audit(1756696097.972:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7ffc0000 [ 1263.436308][T18957] veth0_vlan: entered promiscuous mode [ 1263.473152][ T30] audit: type=1326 audit(1756696097.972:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68fed8ebe9 code=0x7ffc0000 [ 1263.489291][T18892] veth0_vlan: entered promiscuous mode [ 1263.578043][T18892] veth1_vlan: entered promiscuous mode [ 1263.615350][ T30] audit: type=1326 audit(1756696097.972:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7ffc0000 [ 1263.651976][T18957] veth1_vlan: entered promiscuous mode [ 1263.782942][ T30] audit: type=1326 audit(1756696097.972:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68fed8ebe9 code=0x7ffc0000 [ 1263.884244][ T30] audit: type=1326 audit(1756696097.972:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.2.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68fed8ebe9 code=0x7ffc0000 [ 1263.960840][T18892] veth0_macvtap: entered promiscuous mode [ 1264.002497][T18957] veth0_macvtap: entered promiscuous mode [ 1264.049441][T18892] veth1_macvtap: entered promiscuous mode [ 1264.083686][T18957] veth1_macvtap: entered promiscuous mode [ 1264.160078][T18892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.223410][T18892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.296586][T18957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.310543][ T8551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.320554][ T8551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.356448][T18957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.363772][ T8551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.385164][ T8551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.446923][T18286] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.486961][T18286] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.562607][T18286] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.708056][T18286] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.094424][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.140034][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.266600][T19257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1265.274229][T13898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.305047][T13898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.388821][ T8551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.431632][ T8551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.449109][T18286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.473276][T18286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.599947][T19265] netlink: 'syz.3.3293': attribute type 2 has an invalid length. [ 1265.756041][T19272] input: syz0 as /devices/virtual/input/input74 [ 1265.766570][T19265] : entered promiscuous mode [ 1266.554780][T17659] Bluetooth: Unexpected continuation frame (len 16) [ 1266.644526][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1266.738504][T19299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.836912][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1266.836932][ T30] audit: type=1326 audit(1756696102.042:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.3.3299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f3078ebe9 code=0x0 [ 1266.837788][T19299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.887403][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1266.910431][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1266.921892][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1266.941826][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1266.975242][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.984609][ T6000] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1266.993229][ T9] usb 2-1: Product: syz [ 1266.998791][ T9] usb 2-1: Manufacturer: syz [ 1267.009414][ T9] usb 2-1: SerialNumber: syz [ 1267.032368][ T9] usb 2-1: config 0 descriptor?? [ 1267.093352][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1267.155198][ T6000] usb 7-1: Using ep0 maxpacket: 32 [ 1267.189904][ T6000] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 1267.203663][ T6000] usb 7-1: config 0 has no interface number 0 [ 1267.272927][ T6000] usb 7-1: config 0 interface 230 has no altsetting 0 [ 1267.322874][ T6000] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1267.339542][ T6000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.354511][ T6000] usb 7-1: Product: syz [ 1267.362725][ T6000] usb 7-1: Manufacturer: syz [ 1267.381354][ T6000] usb 7-1: SerialNumber: syz [ 1267.406604][ T6000] usb 7-1: config 0 descriptor?? [ 1267.417041][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1267.424796][ T6000] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 1267.463157][ T9] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1267.465138][ T6000] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1268.264303][ T121] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1268.426455][ T121] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.442812][ T121] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1268.464790][T19345] fuse: Bad value for 'fd' [ 1268.469564][T19345] fuse: Bad value for 'fd' [ 1268.484325][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.485321][T19345] fuse: Bad value for 'fd' [ 1268.509387][ T121] usb 3-1: config 0 descriptor?? [ 1268.527295][ T121] pwc: Askey VC010 type 2 USB webcam detected. [ 1268.677427][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3309'. [ 1268.929084][ T121] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1268.954109][ T121] pwc: recv_control_msg error -32 req 02 val 2700 [ 1268.983003][T19366] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1268.989649][T19366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1269.006145][ T121] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1269.012677][T19366] vhci_hcd vhci_hcd.0: Device attached [ 1269.028647][ T121] pwc: recv_control_msg error -32 req 04 val 1000 [ 1269.060469][ T121] pwc: recv_control_msg error -32 req 04 val 1300 [ 1269.085237][ T121] pwc: recv_control_msg error -32 req 04 val 1400 [ 1269.108794][ T121] pwc: recv_control_msg error -32 req 02 val 2000 [ 1269.137162][ T121] pwc: recv_control_msg error -32 req 02 val 2100 [ 1269.155048][ T121] pwc: recv_control_msg error -32 req 04 val 1500 [ 1269.181325][ T121] pwc: recv_control_msg error -32 req 02 val 2500 [ 1269.200177][ T121] pwc: recv_control_msg error -32 req 02 val 2400 [ 1269.244325][ T6416] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1269.281431][ T121] pwc: recv_control_msg error -32 req 02 val 2600 [ 1269.283173][T19329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.312938][T19329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.473190][ T5980] usb 2-1: USB disconnect, device number 82 [ 1269.581157][T19367] vhci_hcd: connection reset by peer [ 1269.591624][T19329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.612558][T19329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.627670][ T5937] vhci_hcd: stop threads [ 1269.632030][ T5937] vhci_hcd: release socket [ 1269.647210][ T5937] vhci_hcd: disconnect device [ 1269.769032][ T121] pwc: recv_control_msg error -71 req 02 val 2800 [ 1269.806712][ T6000] ums-usbat 7-1:0.230: probe with driver ums-usbat failed with error -5 [ 1269.873222][ T6000] usb 7-1: USB disconnect, device number 2 [ 1269.909326][ T121] pwc: recv_control_msg error -71 req 04 val 1100 [ 1270.032190][ T121] pwc: recv_control_msg error -71 req 04 val 1200 [ 1270.177564][ T121] pwc: Registered as video103. [ 1270.199374][ T121] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input75 [ 1270.285090][ T121] usb 3-1: USB disconnect, device number 90 [ 1270.956859][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1271.169392][ T9] usb 3-1: config 0 has no interfaces? [ 1271.191946][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3321'. [ 1271.200207][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1271.220688][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.234651][ T9] usb 3-1: Product: syz [ 1271.238855][ T9] usb 3-1: Manufacturer: syz [ 1271.256835][ T9] usb 3-1: SerialNumber: syz [ 1271.270683][ T9] usb 3-1: config 0 descriptor?? [ 1271.314264][ T121] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1271.504614][ T121] usb 7-1: Using ep0 maxpacket: 16 [ 1271.523934][ T121] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1271.539452][ T121] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1271.553168][ T121] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1271.567789][ T121] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1271.591523][ T121] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1271.606355][ T121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.617868][ T121] usb 7-1: Product: syz [ 1271.622199][ T121] usb 7-1: Manufacturer: syz [ 1271.641729][ T121] usb 7-1: SerialNumber: syz [ 1271.874258][ T6042] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1271.891223][T19412] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3320'. [ 1271.914703][T18891] Bluetooth: hci5: command 0x0406 tx timeout [ 1272.064394][ T6042] usb 2-1: Using ep0 maxpacket: 16 [ 1272.081023][ T6042] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1272.143466][ T6042] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.273806][ T6042] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1272.419210][ T6042] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1272.500750][ T6042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.555193][ T6042] usb 2-1: Product: syz [ 1272.572870][ T6042] usb 2-1: Manufacturer: syz [ 1272.593785][ T6042] usb 2-1: SerialNumber: syz [ 1273.841551][ T9] usb 3-1: USB disconnect, device number 91 [ 1273.994673][T19476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.185664][T19478] loop2: detected capacity change from 0 to 7 [ 1274.222492][T19478] loop2: [POWERTEC] p1 p2 p3 [ 1274.260698][T19478] loop2: p2 start 4294967287 is beyond EOD, truncated [ 1274.304433][T19478] loop2: p3 start 1932423285 is beyond EOD, truncated [ 1274.379731][ T6042] usb 2-1: 0:2 : does not exist [ 1274.380766][T19486] FAULT_INJECTION: forcing a failure. [ 1274.380766][T19486] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.384802][ T121] usb 7-1: USB disconnect, device number 3 [ 1274.394626][ T6416] vhci_hcd: vhci_device speed not set [ 1274.422346][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1274.450723][T19486] CPU: 1 UID: 0 PID: 19486 Comm: syz.6.3331 Not tainted syzkaller #0 PREEMPT(full) [ 1274.450750][T19486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1274.450764][T19486] Call Trace: [ 1274.450773][T19486] [ 1274.450794][T19486] dump_stack_lvl+0x189/0x250 [ 1274.450823][T19486] ? __pfx____ratelimit+0x10/0x10 [ 1274.450851][T19486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.450874][T19486] ? __pfx__printk+0x10/0x10 [ 1274.450906][T19486] ? __pfx___might_resched+0x10/0x10 [ 1274.450923][T19486] ? fs_reclaim_acquire+0x7d/0x100 [ 1274.450957][T19486] should_fail_ex+0x414/0x560 [ 1274.450988][T19486] should_failslab+0xa8/0x100 [ 1274.451018][T19486] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1274.451044][T19486] ? __alloc_skb+0x112/0x2d0 [ 1274.451066][T19486] __alloc_skb+0x112/0x2d0 [ 1274.451088][T19486] netlink_ack+0x146/0xa50 [ 1274.451132][T19486] netlink_rcv_skb+0x28c/0x470 [ 1274.451162][T19486] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1274.451189][T19486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1274.451228][T19486] ? bpf_lsm_capable+0x9/0x20 [ 1274.451252][T19486] ? security_capable+0x7e/0x2e0 [ 1274.451288][T19486] nfnetlink_rcv+0x26a/0x2520 [ 1274.451316][T19486] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1274.451349][T19486] ? __dev_queue_xmit+0x27b/0x3b50 [ 1274.451384][T19486] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1274.451408][T19486] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1274.451445][T19486] ? ref_tracker_free+0x63a/0x7d0 [ 1274.451472][T19486] ? __asan_memcpy+0x40/0x70 [ 1274.451493][T19486] ? __pfx_ref_tracker_free+0x10/0x10 [ 1274.451542][T19486] ? skb_clone+0x246/0x3a0 [ 1274.451567][T19486] ? __netlink_deliver_tap+0x807/0x850 [ 1274.451595][T19486] ? netlink_deliver_tap+0x2e/0x1b0 [ 1274.451630][T19486] ? netlink_deliver_tap+0x2e/0x1b0 [ 1274.451666][T19486] netlink_unicast+0x82c/0x9e0 [ 1274.451701][T19486] ? __pfx_netlink_unicast+0x10/0x10 [ 1274.451734][T19486] ? netlink_sendmsg+0x642/0xb30 [ 1274.451749][T19486] ? skb_put+0x11b/0x210 [ 1274.451771][T19486] netlink_sendmsg+0x805/0xb30 [ 1274.451798][T19486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.451819][T19486] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1274.451839][T19486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1274.451860][T19486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.451878][T19486] __sock_sendmsg+0x219/0x270 [ 1274.451906][T19486] ____sys_sendmsg+0x505/0x830 [ 1274.451933][T19486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1274.451962][T19486] ? import_iovec+0x74/0xa0 [ 1274.451989][T19486] ___sys_sendmsg+0x21f/0x2a0 [ 1274.452011][T19486] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.452064][T19486] ? __fget_files+0x2a/0x420 [ 1274.452080][T19486] ? __fget_files+0x3a0/0x420 [ 1274.452106][T19486] __x64_sys_sendmsg+0x19b/0x260 [ 1274.452130][T19486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1274.452160][T19486] ? __pfx_ksys_write+0x10/0x10 [ 1274.452182][T19486] ? rcu_is_watching+0x15/0xb0 [ 1274.452205][T19486] ? do_syscall_64+0xbe/0x3b0 [ 1274.452228][T19486] do_syscall_64+0xfa/0x3b0 [ 1274.452244][T19486] ? lockdep_hardirqs_on+0x9c/0x150 [ 1274.452271][T19486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.452290][T19486] ? clear_bhb_loop+0x60/0xb0 [ 1274.452313][T19486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.452332][T19486] RIP: 0033:0x7fb78c38ebe9 [ 1274.452348][T19486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1274.452365][T19486] RSP: 002b:00007fb78d19b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.452385][T19486] RAX: ffffffffffffffda RBX: 00007fb78c5c5fa0 RCX: 00007fb78c38ebe9 [ 1274.452398][T19486] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1274.452410][T19486] RBP: 00007fb78d19b090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.452421][T19486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.452433][T19486] R13: 00007fb78c5c6038 R14: 00007fb78c5c5fa0 R15: 00007fb78c6efa28 [ 1274.452462][T19486] [ 1274.905173][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1275.169783][T19495] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1275.417670][T19495] bond1: entered allmulticast mode [ 1275.433463][T19495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1276.340332][ T6416] usb 2-1: USB disconnect, device number 83 [ 1277.034574][ T6000] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1277.278590][ T6000] usb 3-1: Using ep0 maxpacket: 8 [ 1277.311333][ T6000] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1277.323351][ T6000] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.364508][ T6000] usb 3-1: config 7 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1277.391887][ T6000] usb 3-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1277.551579][ T6000] usb 3-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 1277.562264][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.610837][ T6000] usb 3-1: Product: syz [ 1277.616694][ T6000] usb 3-1: Manufacturer: syz [ 1277.621323][ T6000] usb 3-1: SerialNumber: syz [ 1278.670441][T19561] loop2: detected capacity change from 0 to 7 [ 1278.715716][ T6000] usb 3-1: USB disconnect, device number 92 [ 1278.734850][T11076] loop2: [POWERTEC] p1 p2 p3 [ 1278.766347][T11076] loop2: p2 start 4294967287 is beyond EOD, truncated [ 1278.792075][T11076] loop2: p3 start 1932423285 is beyond EOD, truncated [ 1278.831818][T19561] loop2: [POWERTEC] p1 p2 p3 [ 1278.866463][T19561] loop2: p2 start 4294967287 is beyond EOD, truncated [ 1278.873305][T19561] loop2: p3 start 1932423285 is beyond EOD, truncated [ 1279.008189][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1279.078419][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1279.427507][ T121] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 1279.618946][ T121] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.630011][ T121] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1279.664328][ T121] usb 3-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1279.690615][ T121] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.698534][ T121] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1279.782154][ T121] usb 3-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1279.807192][ T121] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.818549][ T121] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1279.838025][ T121] usb 3-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1279.862805][ T121] usb 3-1: string descriptor 0 read error: -22 [ 1279.869419][ T121] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1279.884399][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.905251][ T121] adutux 3-1:168.0: interrupt endpoints not found [ 1280.111594][T18738] usb 3-1: USB disconnect, device number 93 [ 1280.379557][T19544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1280.924317][ T5934] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1280.949908][T19614] netlink: 'syz.2.3356': attribute type 1 has an invalid length. [ 1280.972645][T19614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'. [ 1281.077063][ T5934] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1281.086593][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.140180][ T5934] usb 2-1: config 0 descriptor?? [ 1281.397592][ T5934] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1281.438414][T19619] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3358'. [ 1281.452459][T19619] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3358'. [ 1281.468349][T19619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3358'. [ 1281.616796][T19607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.628029][T19607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.706869][ T5934] [drm:udl_init] *ERROR* Selecting channel failed [ 1281.740063][ T5934] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1281.754752][ T5934] [drm] Initialized udl on minor 2 [ 1281.785102][ T5934] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1281.799972][ T5934] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1281.809380][T18738] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1281.830841][T18738] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1281.842638][ T5934] usb 2-1: USB disconnect, device number 84 [ 1281.851691][T18738] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1281.894979][T19633] fuse: Unknown parameter 'roo000000000000000100000' [ 1282.183100][T19642] netlink: 'syz.1.3361': attribute type 3 has an invalid length. [ 1282.191909][T19642] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3361'. [ 1282.314497][ T121] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1282.487817][ T121] usb 3-1: Using ep0 maxpacket: 16 [ 1282.495425][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.506580][ T121] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1282.516330][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.528414][ T121] usb 3-1: config 0 descriptor?? [ 1283.295582][ T121] mcp2221 0003:04D8:00DD.0038: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1283.381964][T19648] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1283.670778][T19658] netlink: 'syz.3.3369': attribute type 64 has an invalid length. [ 1283.756520][T18738] usb 3-1: USB disconnect, device number 94 [ 1284.922378][ T121] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1285.086897][ T121] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1285.137947][ T121] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1285.213480][ T121] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.266762][ T121] usb 7-1: config 0 descriptor?? [ 1285.288880][T19687] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1285.769245][ T121] elan 0003:04F3:0755.0039: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1286.330616][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'. [ 1286.924329][ T6042] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1287.178755][ T6042] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1287.334040][ T6042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1287.431825][ T6042] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1287.506260][ T6042] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1287.573431][ T6042] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1287.605042][ T6042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.655133][ T6042] usb 2-1: config 0 descriptor?? [ 1287.850273][T19712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.905676][ T121] usb 7-1: USB disconnect, device number 4 [ 1288.064296][ T121] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1288.140213][ T6042] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1288.240355][ T121] usb 7-1: Using ep0 maxpacket: 16 [ 1288.265919][ T121] usb 7-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1288.286232][ T121] usb 7-1: config 1 interface 0 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1288.330613][ T121] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1288.353455][ T121] usb 7-1: Dual-Role OTG device on HNP port [ 1288.359990][ T121] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1288.379435][ T121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.395682][ T121] usb 7-1: Product: syz [ 1288.403104][ T121] usb 7-1: Manufacturer: syz [ 1288.411470][ T121] usb 7-1: SerialNumber: syz [ 1288.754117][ T121] cdc_ether 7-1:1.0: skipping garbage [ 1288.772816][ T121] cdc_ether 7-1:1.0: skipping garbage [ 1288.802491][ T121] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1288.841499][ T121] usb 7-1: USB disconnect, device number 5 [ 1289.037064][ T6000] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1289.123824][ T121] usb 2-1: USB disconnect, device number 85 [ 1289.221433][ T6000] usb 3-1: config 0 has an invalid interface number: 44 but max is 1 [ 1289.236757][ T6000] usb 3-1: config 0 has an invalid interface number: 92 but max is 1 [ 1289.257564][ T6000] usb 3-1: config 0 has no interface number 0 [ 1289.293912][ T6000] usb 3-1: config 0 has no interface number 1 [ 1289.318063][ T6000] usb 3-1: config 0 interface 44 has no altsetting 0 [ 1289.337936][ T6000] usb 3-1: config 0 interface 92 has no altsetting 0 [ 1289.361090][ T6000] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01ab, bcdDevice=85.24 [ 1289.381570][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.392317][ T6000] usb 3-1: Product: syz [ 1289.400365][ T6000] usb 3-1: Manufacturer: syz [ 1289.411956][ T6000] usb 3-1: SerialNumber: syz [ 1289.440533][T19744] syz.6.3389: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1289.467910][ T6000] usb 3-1: config 0 descriptor?? [ 1289.473737][ T6000] usb 3-1: Interface #92 referenced by multiple IADs [ 1289.485679][T19744] CPU: 1 UID: 0 PID: 19744 Comm: syz.6.3389 Not tainted syzkaller #0 PREEMPT(full) [ 1289.485703][T19744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1289.485716][T19744] Call Trace: [ 1289.485724][T19744] [ 1289.485733][T19744] dump_stack_lvl+0x189/0x250 [ 1289.485762][T19744] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1289.485794][T19744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1289.485817][T19744] ? __pfx__printk+0x10/0x10 [ 1289.485844][T19744] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1289.485867][T19744] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1289.485901][T19744] warn_alloc+0x214/0x310 [ 1289.485953][T19744] ? __pfx_warn_alloc+0x10/0x10 [ 1289.486011][T19744] ? __get_vm_area_node+0x28f/0x300 [ 1289.486042][T19744] ? vb2_vmalloc_alloc+0xef/0x340 [ 1289.486067][T19744] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1289.486136][T19744] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1289.486174][T19744] ? __kasan_kmalloc+0x93/0xb0 [ 1289.486206][T19744] vmalloc_user_noprof+0xad/0xf0 [ 1289.486237][T19744] ? vb2_vmalloc_alloc+0xef/0x340 [ 1289.486260][T19744] vb2_vmalloc_alloc+0xef/0x340 [ 1289.486282][T19744] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1289.486305][T19744] __vb2_queue_alloc+0x9bf/0x15a0 [ 1289.486366][T19744] vb2_core_reqbufs+0xc31/0x1420 [ 1289.486419][T19744] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1289.486450][T19744] ? vb2_verify_memory_type+0x1fc/0x570 [ 1289.486485][T19744] ? vb2_reqbufs+0x3a9/0x630 [ 1289.486525][T19744] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 1289.486555][T19744] __video_do_ioctl+0xc98/0xdb0 [ 1289.486588][T19744] ? __pfx___video_do_ioctl+0x10/0x10 [ 1289.486626][T19744] video_usercopy+0x86e/0x14f0 [ 1289.486659][T19744] ? __pfx___video_do_ioctl+0x10/0x10 [ 1289.486681][T19744] ? __pfx_video_usercopy+0x10/0x10 [ 1289.486715][T19744] ? __fget_files+0x2a/0x420 [ 1289.486750][T19744] ? __fget_files+0x2a/0x420 [ 1289.486766][T19744] ? __fget_files+0x3a0/0x420 [ 1289.486793][T19744] v4l2_ioctl+0x18a/0x1e0 [ 1289.486814][T19744] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1289.486833][T19744] __se_sys_ioctl+0xf9/0x170 [ 1289.486862][T19744] do_syscall_64+0xfa/0x3b0 [ 1289.486881][T19744] ? lockdep_hardirqs_on+0x9c/0x150 [ 1289.486910][T19744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.486931][T19744] ? clear_bhb_loop+0x60/0xb0 [ 1289.486956][T19744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.486976][T19744] RIP: 0033:0x7fb78c38ebe9 [ 1289.486995][T19744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.487014][T19744] RSP: 002b:00007fb78d19b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.487036][T19744] RAX: ffffffffffffffda RBX: 00007fb78c5c5fa0 RCX: 00007fb78c38ebe9 [ 1289.487051][T19744] RDX: 0000200000000180 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1289.487065][T19744] RBP: 00007fb78c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1289.487085][T19744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.487097][T19744] R13: 00007fb78c5c6038 R14: 00007fb78c5c5fa0 R15: 00007fb78c6efa28 [ 1289.487140][T19744] [ 1289.489261][T19744] Mem-Info: [ 1289.890585][ T6000] ftdi_sio 3-1:0.44: FTDI USB Serial Device converter detected [ 1289.951636][ T6000] ftdi_sio ttyUSB0: unknown device type: 0x8524 [ 1289.988257][T19744] active_anon:26515 inactive_anon:5 isolated_anon:0 [ 1289.988257][T19744] active_file:17622 inactive_file:40318 isolated_file:0 [ 1289.988257][T19744] unevictable:768 dirty:160 writeback:0 [ 1289.988257][T19744] slab_reclaimable:6825 slab_unreclaimable:107916 [ 1289.988257][T19744] mapped:42791 shmem:20193 pagetables:1818 [ 1289.988257][T19744] sec_pagetables:0 bounce:0 [ 1289.988257][T19744] kernel_misc_reclaimable:0 [ 1289.988257][T19744] free:1268157 free_pcp:25305 free_cma:0 [ 1289.989488][ T6000] ftdi_sio 3-1:0.92: FTDI USB Serial Device converter detected [ 1290.080526][T19744] Node 0 active_anon:106860kB inactive_anon:20kB active_file:70416kB inactive_file:161072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:171492kB dirty:632kB writeback:0kB shmem:80136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13948kB pagetables:7136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1290.151283][T19744] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1290.187764][ T6000] ftdi_sio ttyUSB1: unknown device type: 0x8524 [ 1290.226025][ T6000] usb 3-1: USB disconnect, device number 95 [ 1290.245062][T19744] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1290.288581][ T6000] ftdi_sio 3-1:0.44: device disconnected [ 1290.300827][ T6000] ftdi_sio 3-1:0.92: device disconnected [ 1290.342353][T19744] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 1290.372505][T19744] Node 0 DMA32 free:1198108kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108316kB inactive_anon:20kB active_file:70416kB inactive_file:159496kB unevictable:1536kB writepending:648kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:46968kB local_pcp:23776kB free_cma:0kB [ 1290.501855][T19744] lowmem_reserve[]: 0 0 1 1 1 [ 1290.510441][T19744] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1290.775330][T19744] lowmem_reserve[]: 0 0 0 0 0 [ 1290.860855][T19744] Node 1 Normal free:3859200kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:51392kB local_pcp:27524kB free_cma:0kB [ 1291.031383][T19744] lowmem_reserve[]: 0 0 0 0 0 [ 1291.056492][T19744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1291.158332][T19744] Node 0 DMA32: 1531*4kB (UE) 220*8kB (UME) 105*16kB (UME) 96*32kB (UE) 73*64kB (UE) 95*128kB (UME) 47*256kB (UME) 21*512kB (UE) 28*1024kB (U) 11*2048kB (U) 267*4096kB (UM) = 1197084kB [ 1291.198403][T19744] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1291.278942][T19744] Node 1 Normal: 3*4kB (UM) 6*8kB (UME) 10*16kB (ME) 133*32kB (UME) 56*64kB (UME) 7*128kB (UM) 3*256kB (UM) 3*512kB (ME) 2*1024kB (U) 2*2048kB (ME) 938*4096kB (M) = 3859452kB [ 1291.309500][T19744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1291.326848][T19744] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1291.387341][T19744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1291.426450][T19744] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1291.514662][T19744] 79052 total pagecache pages [ 1291.519400][T19744] 5 pages in swap cache [ 1291.562228][T19744] Free swap = 124976kB [ 1291.622309][T19744] Total swap = 124996kB [ 1291.647056][T19744] 2097051 pages RAM [ 1291.683196][T19744] 0 pages HighMem/MovableOnly [ 1291.703435][T19744] 425662 pages reserved [ 1291.713555][T19744] 0 pages cma reserved [ 1292.469365][ T6042] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1293.647705][ T6042] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 1293.909562][ T6042] usb 7-1: config 0 has no interface number 0 [ 1293.928594][ T6042] usb 7-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1293.961685][ T6042] usb 7-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1295.012715][ T6042] usb 7-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1295.023287][ T6042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.038476][ T6042] usb 7-1: Product: syz [ 1295.051996][ T6042] usb 7-1: config 0 descriptor?? [ 1295.080368][ T6042] usb 7-1: can't set config #0, error -71 [ 1295.127097][ T6042] usb 7-1: USB disconnect, device number 6 [ 1295.851669][T19855] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3406'. [ 1296.063701][T19860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3407'. [ 1296.063752][T19860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3407'. [ 1296.364981][ T6042] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1296.584423][ T6042] usb 7-1: Using ep0 maxpacket: 16 [ 1296.591600][ T6042] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.611251][ T6042] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1296.631066][ T6042] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 1296.640346][ T6042] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1296.648793][ T6042] usb 7-1: Product: syz [ 1296.652984][ T6042] usb 7-1: Manufacturer: syz [ 1296.664549][ T6042] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1296.824587][ T121] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1296.834752][ T5934] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1296.865850][T18738] usb 7-1: USB disconnect, device number 7 [ 1296.990047][ T5934] usb 3-1: config 0 has an invalid interface number: 118 but max is 0 [ 1296.995710][ T121] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1296.998818][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.018308][ T5934] usb 3-1: config 0 has no interface number 0 [ 1297.024255][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.024776][ T5934] usb 3-1: config 0 interface 118 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 1297.032459][ T121] usb 2-1: Product: syz [ 1297.052996][ T5934] usb 3-1: config 0 interface 118 has no altsetting 0 [ 1297.055381][ T121] usb 2-1: Manufacturer: syz [ 1297.063093][ T5934] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1297.072331][ T121] usb 2-1: SerialNumber: syz [ 1297.078503][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.083033][ T121] usb 2-1: config 0 descriptor?? [ 1297.091799][ T5934] usb 3-1: Product: syz [ 1297.101532][ T5934] usb 3-1: Manufacturer: syz [ 1297.105710][ T121] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1297.107141][ T5934] usb 3-1: SerialNumber: syz [ 1297.122935][ T5934] usb 3-1: config 0 descriptor?? [ 1297.130655][ T5934] usb-storage 3-1:0.118: USB Mass Storage device detected [ 1297.141930][ T5934] usb-storage 3-1:0.118: Quirks match for vid 04e6 pid 000b: 4 [ 1297.149804][ T5934] usb-storage 3-1:0.118: This device (04e6,000b,0100 S fb P 50) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 1297.149804][ T5934] Please send a copy of this message to and [ 1297.528420][ T6042] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1297.564829][ T6042] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1297.673268][ T5934] usb 3-1: USB disconnect, device number 96 [ 1298.122284][T19889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.422830][T19893] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3415'. [ 1298.780719][ T121] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1299.055042][ T121] usb 7-1: device descriptor read/64, error -71 [ 1299.294481][ T121] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1299.422100][ T6042] usb 2-1: USB disconnect, device number 86 [ 1299.514569][ T121] usb 7-1: device descriptor read/64, error -71 [ 1299.664908][ T121] usb usb7-port1: attempt power cycle [ 1299.884419][ T6042] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1300.047084][ T6042] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.074291][ T6042] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1300.105138][ T121] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1300.114190][ T6042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.144986][ T121] usb 7-1: device descriptor read/8, error -71 [ 1300.175464][ T6042] usb 2-1: config 0 descriptor?? [ 1300.217086][ T6042] pwc: Askey VC010 type 2 USB webcam detected. [ 1300.384314][ T121] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1300.415080][ T121] usb 7-1: device descriptor read/8, error -71 [ 1300.544304][ T121] usb usb7-port1: unable to enumerate USB device [ 1300.625696][ T6042] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1300.643290][ T6042] pwc: recv_control_msg error -32 req 02 val 2700 [ 1300.674088][ T6042] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1300.692041][ T6042] pwc: recv_control_msg error -32 req 04 val 1000 [ 1300.713334][ T6042] pwc: recv_control_msg error -32 req 04 val 1300 [ 1300.732833][ T6042] pwc: recv_control_msg error -32 req 04 val 1400 [ 1300.908782][T19920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.941014][ T6042] pwc: recv_control_msg error -71 req 02 val 2100 [ 1300.958920][ T6042] pwc: recv_control_msg error -71 req 04 val 1500 [ 1300.967570][ T6042] pwc: recv_control_msg error -71 req 02 val 2500 [ 1300.975968][ T6042] pwc: recv_control_msg error -71 req 02 val 2400 [ 1300.983727][ T6042] pwc: recv_control_msg error -71 req 02 val 2600 [ 1300.995220][ T6042] pwc: recv_control_msg error -71 req 02 val 2900 [ 1301.002453][ T6042] pwc: recv_control_msg error -71 req 02 val 2800 [ 1301.010134][ T6042] pwc: recv_control_msg error -71 req 04 val 1100 [ 1301.017498][ T6042] pwc: recv_control_msg error -71 req 04 val 1200 [ 1301.050285][ T6042] pwc: Registered as video103. [ 1301.070262][ T6042] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input77 [ 1301.104890][ T6042] usb 2-1: USB disconnect, device number 87 [ 1303.134377][T18738] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1303.294761][T18738] usb 2-1: Using ep0 maxpacket: 16 [ 1303.303872][T18738] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1303.330221][T18738] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1303.358847][T18738] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1303.385027][T18738] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1303.410105][T18738] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1303.436929][T18738] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1303.462931][T18738] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1303.499451][T18738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.549060][T18738] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1303.653601][T19939] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 1303.778698][T19937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.815720][T19937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.851057][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'. [ 1303.862408][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 1303.992461][T18738] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1304.068765][T18738] usb 2-1: USB disconnect, device number 88 [ 1304.134892][ T44] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1304.524981][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 1304.532171][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1304.544404][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1304.612998][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1304.630868][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1304.641313][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.655420][ T44] usb 3-1: config 0 descriptor?? [ 1304.671808][T19947] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1304.681131][ T44] hub 3-1:0.0: USB hub found [ 1304.881126][ T44] hub 3-1:0.0: 2 ports detected [ 1305.135674][T19957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.145292][T19957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.208231][T19958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.229648][T19958] netlink: 'syz.2.3430': attribute type 2 has an invalid length. [ 1305.679434][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.686050][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.701963][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'. [ 1306.163389][ T44] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 1306.171835][ T44] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 1306.192164][ T44] usbhid 3-1:0.0: can't add hid device: -32 [ 1306.205160][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1306.885768][T18738] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1307.098238][ T44] usb 3-1: USB disconnect, device number 97 [ 1307.114691][T18738] usb 2-1: device descriptor read/64, error -71 [ 1307.126231][T19976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.384274][T18738] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1307.514993][T18738] usb 2-1: device descriptor read/64, error -71 [ 1307.625100][T18738] usb usb2-port1: attempt power cycle [ 1307.974406][T18738] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1307.995805][T18738] usb 2-1: device descriptor read/8, error -71 [ 1308.014438][ T6000] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1308.164371][ T6000] usb 3-1: Using ep0 maxpacket: 8 [ 1308.179354][ T6000] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 1308.191252][ T6000] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1308.253146][T18738] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1308.308176][T19990] syz.3.3442 (19990): drop_caches: 2 [ 1308.314338][T19990] syz.3.3442 (19990): drop_caches: 2 [ 1308.402022][T18738] usb 2-1: device descriptor read/8, error -71 [ 1308.439819][ T6000] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1308.454207][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.462365][ T6000] usb 3-1: Product: syz [ 1308.474909][ T6000] usb 3-1: Manufacturer: syz [ 1308.483322][ T6000] usb 3-1: SerialNumber: syz [ 1308.584874][T18738] usb usb2-port1: unable to enumerate USB device [ 1309.350899][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3443'. [ 1310.008310][T20000] fuse: Bad value for 'fd' [ 1310.737918][ T6000] usbhid 3-1:1.0: can't add hid device: -71 [ 1310.744065][ T6000] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1310.793709][ T6000] usb 3-1: USB disconnect, device number 98 [ 1311.215393][T20019] input: syz1 as /devices/virtual/input/input78 [ 1311.994373][ T44] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1312.172162][ T44] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 1312.180768][ T44] usb 3-1: config 0 has no interface number 0 [ 1312.187653][ T44] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1312.324310][ T44] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1312.391441][ T44] usb 3-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1312.409902][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.424314][ T44] usb 3-1: Product: syz [ 1312.428515][ T44] usb 3-1: Manufacturer: syz [ 1312.453518][ T44] usb 3-1: SerialNumber: syz [ 1312.474448][ T44] usb 3-1: config 0 descriptor?? [ 1312.531941][ T44] vmk80xx 3-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 1312.561193][ T44] vmk80xx 3-1:0.255: probe with driver vmk80xx failed with error -22 [ 1312.975409][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3460'. [ 1314.542890][T18738] usb 3-1: USB disconnect, device number 99 [ 1315.068622][T20061] netlink: 'syz.6.3462': attribute type 2 has an invalid length. [ 1316.364922][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1316.374281][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1316.574296][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1316.581640][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1316.592354][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1316.639446][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1316.691708][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1316.724792][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1316.794860][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1316.812112][T20080] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.3468'. [ 1316.852462][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1316.890846][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.136330][T20103] fuse: Bad value for 'fd' [ 1317.266918][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 1317.266972][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1317.420603][T20106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.420850][T20106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.422161][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1317.422246][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1317.422318][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1317.423382][T20106] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1318.253723][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3478'. [ 1319.098530][ T9] usb 3-1: USB disconnect, device number 100 [ 1319.121351][T20121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.185870][T20121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.383335][T20161] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1320.494404][ T44] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1320.648654][ T44] usb 3-1: config 24 has an invalid interface number: 112 but max is 3 [ 1320.662927][ T44] usb 3-1: config 24 has an invalid interface number: 223 but max is 3 [ 1320.671899][ T44] usb 3-1: config 24 has an invalid interface number: 71 but max is 3 [ 1320.681612][ T44] usb 3-1: config 24 contains an unexpected descriptor of type 0x2, skipping [ 1320.694861][ T44] usb 3-1: config 24 contains an unexpected descriptor of type 0x1, skipping [ 1320.704468][ T44] usb 3-1: config 24 contains an unexpected descriptor of type 0x2, skipping [ 1320.715551][ T44] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.741169][ T44] usb 3-1: config 24 has 3 interfaces, different from the descriptor's value: 4 [ 1320.755096][T20186] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3494'. [ 1320.769527][T20186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1320.778313][ T44] usb 3-1: config 24 has no interface number 0 [ 1320.791653][ T44] usb 3-1: config 24 has no interface number 1 [ 1320.822024][ T44] usb 3-1: config 24 has no interface number 2 [ 1320.835237][ T44] usb 3-1: config 24 interface 112 altsetting 212 endpoint 0xC has an invalid bInterval 144, changing to 7 [ 1320.846834][ T44] usb 3-1: config 24 interface 112 altsetting 212 endpoint 0xC has invalid wMaxPacketSize 0 [ 1320.857468][ T44] usb 3-1: config 24 interface 112 altsetting 212 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1320.871023][ T44] usb 3-1: config 24 interface 112 altsetting 212 endpoint 0x83 has invalid maxpacket 52290, setting to 64 [ 1320.882757][ T44] usb 3-1: config 24 interface 112 altsetting 212 has an invalid descriptor for endpoint zero, skipping [ 1320.894042][ T44] usb 3-1: config 24 interface 112 altsetting 212 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1320.911924][ T44] usb 3-1: config 24 interface 112 altsetting 212 has a duplicate endpoint with address 0xB, skipping [ 1320.922968][ T44] usb 3-1: config 24 interface 112 altsetting 212 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1320.939542][ T44] usb 3-1: config 24 interface 112 altsetting 212 has a duplicate endpoint with address 0x2, skipping [ 1320.954087][ T44] usb 3-1: config 24 interface 112 altsetting 212 endpoint 0x7 has invalid maxpacket 511, setting to 64 [ 1320.974053][ T44] usb 3-1: config 24 interface 112 altsetting 212 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 1320.991135][ T44] usb 3-1: config 24 interface 223 altsetting 250 has a duplicate endpoint with address 0x6, skipping [ 1321.009948][ T44] usb 3-1: config 24 interface 223 altsetting 250 has a duplicate endpoint with address 0x6, skipping [ 1321.024806][ T44] usb 3-1: config 24 interface 71 altsetting 182 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1321.045151][ T44] usb 3-1: config 24 interface 112 has no altsetting 0 [ 1321.054061][ T44] usb 3-1: config 24 interface 223 has no altsetting 0 [ 1321.064244][T18738] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1321.072273][ T44] usb 3-1: config 24 interface 71 has no altsetting 0 [ 1321.087858][ T44] usb 3-1: New USB device found, idVendor=04f2, idProduct=aff7, bcdDevice=40.2c [ 1321.097043][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.105172][ T44] usb 3-1: Product: 녑躦睉㕽霣०㻌턠鈾㷽嗷ञ勋曅窍ꐖ᱈홠߹鮺➏绮댩㞳㢔쪖 [ 1321.176958][ T44] usb 3-1: Manufacturer: 訒䍈Ꜻ쮼⒑ᵙ獚ဂᣡꯁ쯀뱤❊녞ᱠ畨뮒ߘ⡖ꜫ蛖뫷箰 [ 1321.189370][ T44] usb 3-1: SerialNumber: syz [ 1321.234803][T18738] usb 7-1: device descriptor read/64, error -71 [ 1321.452238][ T44] usb 3-1: USB disconnect, device number 101 [ 1321.477117][T18738] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 1321.614195][T18738] usb 7-1: device descriptor read/64, error -71 [ 1321.724506][T18738] usb usb7-port1: attempt power cycle [ 1322.074990][T18738] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1322.110222][T18738] usb 7-1: device descriptor read/8, error -71 [ 1322.394814][T18738] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 1322.440316][T18738] usb 7-1: device descriptor read/8, error -71 [ 1322.558331][T18738] usb usb7-port1: unable to enumerate USB device [ 1322.627595][T20196] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1323.609484][T20219] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1323.740914][T20218] kvm: pic: single mode not supported [ 1323.740937][T20218] kvm: pic: level sensitive irq not supported [ 1324.449997][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3512'. [ 1324.492454][T20242] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1324.681354][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3510'. [ 1324.692982][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3510'. [ 1325.108315][T20255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3514'. [ 1325.669299][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1325.679042][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1325.697936][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1325.720243][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1325.722842][T20268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1325.729627][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1325.840378][T20273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.947965][T20273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.976467][ T6000] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1326.014210][ T121] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1326.136566][ T6000] usb 7-1: Using ep0 maxpacket: 32 [ 1326.170017][ T6000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1326.170103][ T121] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.191722][ T6000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1326.217246][ T6000] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1326.250891][ T6000] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1326.261065][ T6000] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1326.271860][ T6000] usb 7-1: Product: syz [ 1326.277356][ T6000] usb 7-1: Manufacturer: syz [ 1326.283311][ T6000] usb 7-1: SerialNumber: syz [ 1326.288758][ T121] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1326.319628][ T6000] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input79 [ 1326.332522][ T121] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1326.389978][ T121] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1326.412923][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.444266][ T121] usb 2-1: Product: syz [ 1326.448477][ T121] usb 2-1: Manufacturer: syz [ 1326.469086][ T121] usb 2-1: SerialNumber: syz [ 1326.550298][T19246] usb 7-1: USB disconnect, device number 16 [ 1326.550379][ C1] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1326.600480][ T5966] udevd[5966]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 1326.740137][ T121] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 1326.748675][ T121] usb 2-1: No valid video chain found. [ 1326.768087][ T121] usb 2-1: USB disconnect, device number 93 [ 1326.792867][T19246] appletouch 7-1:1.0: input: appletouch disconnected [ 1326.872822][T20280] netlink: 'syz.2.3521': attribute type 10 has an invalid length. [ 1326.885880][T20280] veth1_vlan: entered allmulticast mode [ 1326.907332][T20280] team0: Device veth1_vlan failed to register rx_handler [ 1327.620738][T20294] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1327.894550][ T6000] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1328.007467][T18738] IPVS: starting estimator thread 0... [ 1328.056557][ T6000] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1328.107510][T20305] IPVS: using max 33 ests per chain, 79200 per kthread [ 1328.400489][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.516079][ T6000] usb 2-1: config 0 descriptor?? [ 1328.529113][ T6000] cp210x 2-1:0.0: cp210x converter detected [ 1328.815312][ T44] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1328.942960][ T6000] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1328.962346][ T6000] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1328.964332][ T121] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1328.993432][ T44] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1329.018642][ T44] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1329.054232][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1329.144357][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.167474][T20296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.178093][T20312] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1329.214661][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1329.220015][ T121] usb 7-1: Using ep0 maxpacket: 16 [ 1329.222779][T20296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.256194][ T121] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1329.288265][ T121] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1329.352632][ T121] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1329.404987][ T121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.443704][ T121] usb 7-1: Product: syz [ 1329.475901][ T121] usb 7-1: Manufacturer: syz [ 1329.480567][ T121] usb 7-1: SerialNumber: syz [ 1329.525411][T18738] usb 3-1: USB disconnect, device number 102 [ 1329.591451][ T44] usb 2-1: USB disconnect, device number 94 [ 1329.629141][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1329.671105][ T44] cp210x 2-1:0.0: device disconnected [ 1329.742100][ T121] usb 7-1: config 0 descriptor?? [ 1329.757834][ T121] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1329.789333][ T121] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1330.114363][ T44] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1330.206506][T20326] __nla_validate_parse: 49 callbacks suppressed [ 1330.206522][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1330.228635][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1330.285175][ T44] usb 2-1: device descriptor read/64, error -71 [ 1330.361819][ T121] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1330.373180][ T121] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1330.524848][ T44] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1330.724278][ T44] usb 2-1: device descriptor read/64, error -71 [ 1330.799850][T20330] netlink: 'syz.4.3533': attribute type 10 has an invalid length. [ 1330.817292][T20330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3533'. [ 1330.849266][T20330] bridge0: port 3(dummy0) entered blocking state [ 1330.870490][T20330] bridge0: port 3(dummy0) entered disabled state [ 1330.881161][T20330] dummy0: entered allmulticast mode [ 1330.885991][ T44] usb usb2-port1: attempt power cycle [ 1330.907070][T20330] dummy0: entered promiscuous mode [ 1330.914610][T20330] bridge0: port 3(dummy0) entered blocking state [ 1330.921073][T20330] bridge0: port 3(dummy0) entered forwarding state [ 1331.274281][ T121] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1331.314304][ T44] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1331.335656][ T44] usb 2-1: device descriptor read/8, error -71 [ 1331.338130][T20336] netlink: 'syz.3.3536': attribute type 13 has an invalid length. [ 1331.574878][ T44] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1331.605641][ T44] usb 2-1: device descriptor read/8, error -71 [ 1331.736423][ T44] usb usb2-port1: unable to enumerate USB device [ 1331.799395][T20344] loop2: detected capacity change from 0 to 7 [ 1331.823274][T20344] Dev loop2: unable to read RDB block 7 [ 1331.861854][T20344] loop2: unable to read partition table [ 1331.880169][T20344] loop2: partition table beyond EOD, truncated [ 1331.886964][T20344] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1331.925278][ T121] em28xx 7-1:0.0: AC97 command still being executed: not handled properly! [ 1331.938343][ T121] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1332.122677][ T121] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1332.131164][ T121] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1332.141627][ T121] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1332.210238][ T121] usb 7-1: USB disconnect, device number 17 [ 1332.288482][T20352] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1332.377372][T20352] binder: 20349:20352 ioctl c0306201 200000000040 returned -22 [ 1333.074875][T18738] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1333.224876][T18738] usb 7-1: Using ep0 maxpacket: 16 [ 1333.231893][T18738] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1333.248092][T18738] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1333.260776][T18738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.278461][T18738] usb 7-1: Product: syz [ 1333.288287][T18738] usb 7-1: Manufacturer: syz [ 1333.298613][T18738] usb 7-1: SerialNumber: syz [ 1333.314795][T18738] usb 7-1: config 0 descriptor?? [ 1333.350000][T18738] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1333.361332][T18738] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1333.972175][T18738] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1334.388233][T18738] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1334.407319][T18738] em28xx 7-1:0.0: board has no eeprom [ 1334.464376][ T6000] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1334.635004][ T6000] usb 2-1: device descriptor read/64, error -71 [ 1334.668354][T20371] input: syz1 as /devices/virtual/input/input80 [ 1334.693071][T20371] program syz.4.3546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1334.704230][T18738] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1334.744734][T18738] em28xx 7-1:0.0: dvb set to bulk mode. [ 1334.750391][ T5934] em28xx 7-1:0.0: Binding DVB extension [ 1334.881862][T18738] usb 7-1: USB disconnect, device number 18 [ 1334.890412][ T6000] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1334.900910][T20355] em28xx 7-1:0.0: reading from i2c device at 0x0 failed (error=-19) [ 1334.911007][T18738] em28xx 7-1:0.0: Disconnecting em28xx [ 1334.963614][ T5934] em28xx 7-1:0.0: Registering input extension [ 1334.996348][T18738] em28xx 7-1:0.0: Closing input extension [ 1335.094320][ T6000] usb 2-1: device descriptor read/64, error -71 [ 1335.266515][T18738] em28xx 7-1:0.0: Freeing device [ 1335.272735][ T6000] usb usb2-port1: attempt power cycle [ 1335.307630][T20378] ip6tnl0: Caught tx_queue_len zero misconfig [ 1335.644397][ T6000] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1335.664977][ T6000] usb 2-1: device descriptor read/8, error -71 [ 1335.685165][ T44] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1335.710785][T20383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1335.722256][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 1335.740542][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 1335.755307][ T31] INFO: task kworker/1:5:5993 blocked for more than 143 seconds. [ 1335.763188][ T31] Not tainted syzkaller #0 [ 1335.778928][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1335.794245][ T31] task:kworker/1:5 state:D stack:17736 pid:5993 tgid:5993 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 1335.844286][ T31] Workqueue: usb_hub_wq hub_event [ 1335.844424][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 1335.849371][ T31] Call Trace: [ 1335.849382][ T31] [ 1335.849396][ T31] __schedule+0x1798/0x4cc0 [ 1335.870192][ T44] usb 3-1: config 5 has an invalid interface number: 25 but max is 0 [ 1335.887522][ T44] usb 3-1: config 5 has no interface number 0 [ 1335.893830][ T44] usb 3-1: config 5 interface 25 altsetting 128 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1335.908621][ T31] ? __pfx___schedule+0x10/0x10 [ 1335.912955][ T44] usb 3-1: config 5 interface 25 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1335.923723][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1335.925403][ T6000] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1335.929995][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 1335.944900][T20390] netlink: 'syz.3.3552': attribute type 1 has an invalid length. [ 1335.954684][ T31] ? schedule+0x91/0x360 [ 1335.958973][ T31] schedule+0x165/0x360 [ 1335.968614][ T44] usb 3-1: config 5 interface 25 altsetting 128 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1335.986757][ T6000] usb 2-1: device descriptor read/8, error -71 [ 1335.995508][ T44] usb 3-1: config 5 interface 25 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1336.002922][ T31] schedule_timeout+0x9a/0x270 [ 1336.007273][ T44] usb 3-1: config 5 interface 25 altsetting 128 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1336.017431][T20393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1336.023051][ T44] usb 3-1: config 5 interface 25 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1336.051184][ T44] usb 3-1: config 5 interface 25 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1336.063483][ T44] usb 3-1: config 5 interface 25 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 1336.076140][ T44] usb 3-1: config 5 interface 25 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1336.091459][ T44] usb 3-1: config 5 interface 25 altsetting 128 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1336.091834][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1336.107688][ T6000] usb usb2-port1: unable to enumerate USB device [ 1336.113714][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1336.119366][ T44] usb 3-1: config 5 interface 25 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023 [ 1336.129872][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1336.129910][ T31] ? wait_for_completion+0x267/0x5d0 [ 1336.129946][ T31] wait_for_completion+0x2bf/0x5d0 [ 1336.129992][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1336.130041][ T31] i2c_del_adapter+0x581/0x6e0 [ 1336.136386][ T44] usb 3-1: config 5 interface 25 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1336.146502][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 1336.146543][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1336.146582][ T31] ? kfree+0x18e/0x440 [ 1336.146616][ T31] ttusb_disconnect+0x204/0x340 [ 1336.146653][ T31] usb_unbind_interface+0x26b/0x910 [ 1336.146694][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1336.154136][ T44] usb 3-1: config 5 interface 25 altsetting 128 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1336.168658][ T31] device_release_driver_internal+0x4d9/0x800 [ 1336.173817][ T44] usb 3-1: config 5 interface 25 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1336.196925][ T31] bus_remove_device+0x34d/0x410 [ 1336.199962][ T44] usb 3-1: config 5 interface 25 has no altsetting 0 [ 1336.233421][ T31] device_del+0x511/0x8e0 [ 1336.240526][T18738] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1336.251687][ T44] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice= 7.3e [ 1336.253194][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 1336.265216][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.273167][ T31] ? __pfx_device_del+0x10/0x10 [ 1336.280441][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1336.285740][ T44] usb 3-1: Product: 侙䒫冕腡눣㟟▀㩠ꅩ铮㬏婁醼鑰반泝☲⛙쌽钂τ樣ဈ歱ฺ걀፞멎 [ 1336.299850][ T44] usb 3-1: SerialNumber: Ц [ 1336.306677][ T31] usb_disable_device+0x3e9/0x8a0 [ 1336.317688][T20381] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1336.325874][ T31] usb_disconnect+0x330/0x950 [ 1336.330678][ T31] hub_event+0x1cf5/0x4a20 [ 1336.338218][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1336.343421][ T31] ? register_lock_class+0x51/0x320 [ 1336.349098][ T31] ? __pfx_hub_event+0x10/0x10 [ 1336.353989][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1336.360459][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1336.365888][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1336.371680][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1336.377884][ T31] process_scheduled_works+0xae1/0x17b0 [ 1336.383677][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1336.390342][ T31] worker_thread+0x8a0/0xda0 [ 1336.395627][T18738] usb 7-1: Using ep0 maxpacket: 32 [ 1336.400420][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1336.403425][T18738] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1336.410558][ T31] ? __kthread_parkme+0x7b/0x200 [ 1336.419961][T18738] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1336.433215][ T31] kthread+0x70e/0x8a0 [ 1336.435117][T18738] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1336.439161][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1336.449306][T18738] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1336.466924][T18738] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1336.469665][ T31] ? __pfx_kthread+0x10/0x10 [ 1336.477168][T18738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.481885][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1336.488986][T18738] usb 7-1: Product: syz [ 1336.489005][T18738] usb 7-1: Manufacturer: syz [ 1336.489021][T18738] usb 7-1: SerialNumber: syz [ 1336.500024][T18738] usb 7-1: config 0 descriptor?? [ 1336.509491][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1336.522603][ T31] ? __pfx_kthread+0x10/0x10 [ 1336.530747][ T31] ret_from_fork+0x3fc/0x770 [ 1336.532526][T20381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.540119][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1336.551916][T20381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.573134][ T31] ? __switch_to_asm+0x39/0x70 [ 1336.578218][ T31] ? __switch_to_asm+0x33/0x70 [ 1336.583175][ T31] ? __pfx_kthread+0x10/0x10 [ 1336.588065][ T31] ret_from_fork_asm+0x1a/0x30 [ 1336.593173][ T31] [ 1336.599101][ T44] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1336.603774][ T31] [ 1336.603774][ T31] Showing all locks held in the system: [ 1336.608350][ T44] gspca_sn9c2028: read1 error -71 [ 1336.617750][ T31] 1 lock held by khungtaskd/31: [ 1336.623462][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1336.625223][ T44] gspca_sn9c2028: read1 error -71 [ 1336.657239][ T31] 7 locks held by kworker/1:1/44: [ 1336.657724][ T44] gspca_sn9c2028: read1 error -71 [ 1336.662314][ T31] 2 locks held by getty/5629: [ 1336.662331][ T31] #0: ffff8880339ab0a0 [ 1336.679979][ T44] sn9c2028 3-1:5.25: probe with driver sn9c2028 failed with error -71 [ 1336.682044][ T31] (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1336.706701][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1336.722841][ T31] 5 locks held by kworker/1:5/5993: [ 1336.731306][ T31] #0: ffff88801dafd148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1336.741627][ T44] usb 3-1: USB disconnect, device number 103 [ 1336.745355][ T31] #1: ffffc9000ab37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1336.793703][ T5934] usb 7-1: USB disconnect, device number 19 [ 1336.800314][ T31] #2: ffff888027cc4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1336.823753][ T31] #3: ffff888027d80198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 1336.840665][ T31] #4: ffff88805540c160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1336.856965][ T31] 2 locks held by syz.4.3551/20386: [ 1336.862396][ T31] [ 1336.866262][ T31] ============================================= [ 1336.866262][ T31] [ 1336.876188][ T31] NMI backtrace for cpu 0 [ 1336.876205][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1336.876228][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1336.876241][ T31] Call Trace: [ 1336.876249][ T31] [ 1336.876259][ T31] dump_stack_lvl+0x189/0x250 [ 1336.876291][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1336.876317][ T31] ? __pfx__printk+0x10/0x10 [ 1336.876359][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1336.876389][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1336.876418][ T31] ? __pfx__printk+0x10/0x10 [ 1336.876452][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1336.876493][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1336.876523][ T31] watchdog+0xf93/0xfe0 [ 1336.876557][ T31] ? watchdog+0x1de/0xfe0 [ 1336.876591][ T31] kthread+0x70e/0x8a0 [ 1336.876620][ T31] ? __pfx_watchdog+0x10/0x10 [ 1336.876648][ T31] ? __pfx_kthread+0x10/0x10 [ 1336.876675][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1336.876703][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1336.876732][ T31] ? __pfx_kthread+0x10/0x10 [ 1336.876759][ T31] ret_from_fork+0x3fc/0x770 [ 1336.876783][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1336.876811][ T31] ? __switch_to_asm+0x39/0x70 [ 1336.876836][ T31] ? __switch_to_asm+0x33/0x70 [ 1336.876861][ T31] ? __pfx_kthread+0x10/0x10 [ 1336.876888][ T31] ret_from_fork_asm+0x1a/0x30 [ 1336.876931][ T31] [ 1336.876939][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1337.022856][ C1] NMI backtrace for cpu 1 [ 1337.022874][ C1] CPU: 1 UID: 0 PID: 5896 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1337.022894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1337.022905][ C1] RIP: 0010:arch_exit_work+0x0/0x50 [ 1337.022934][ C1] Code: 4f 00 90 0f 0b 90 90 90 c3 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <53> 48 89 fb f7 c3 00 08 00 00 75 17 f7 c3 00 00 40 00 75 1c f7 c3 [ 1337.022949][ C1] RSP: 0018:ffffc9000b0a7ed8 EFLAGS: 00000006 [ 1337.022964][ C1] RAX: ffffffff81688a16 RBX: 0000000000004000 RCX: ffff88802b540000 [ 1337.022977][ C1] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000000004000 [ 1337.022987][ C1] RBP: ffffc9000b0a7f48 R08: ffff88802b540007 R09: 1ffff110056a8000 [ 1337.023000][ C1] R10: dffffc0000000000 R11: ffffed10056a8001 R12: 0000000000000000 [ 1337.023013][ C1] R13: 00000000000000e6 R14: ffffc9000b0a7f58 R15: ffff88802b540000 [ 1337.023025][ C1] FS: 000055558ab66500(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 1337.023040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1337.023052][ C1] CR2: 0000555577e675c8 CR3: 000000007ad9c000 CR4: 00000000003526f0 [ 1337.023067][ C1] Call Trace: [ 1337.023074][ C1] [ 1337.023081][ C1] arch_exit_to_user_mode_prepare+0x2c/0x50 [ 1337.023108][ C1] do_syscall_64+0x177/0x3b0 [ 1337.023126][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.023142][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1337.023160][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1337.023179][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.023195][ C1] RIP: 0033:0x7f3ae55c1463 [ 1337.023210][ C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 1337.023223][ C1] RSP: 002b:00007ffcc9028808 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1337.023240][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3ae55c1463 [ 1337.023251][ C1] RDX: 00007ffcc9028820 RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.023262][ C1] RBP: 0000000000000000 R08: 000000002efd8c53 R09: 7fffffffffffffff [ 1337.023273][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcc9028c70 [ 1337.023284][ C1] R13: 0000000000000004 R14: 00007ffcc902885c R15: 00007ffcc90288f0 [ 1337.023305][ C1] [ 1337.023903][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1337.263290][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1337.272397][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1337.282459][ T31] Call Trace: [ 1337.285757][ T31] [ 1337.288708][ T31] dump_stack_lvl+0x99/0x250 [ 1337.293315][ T31] ? __asan_memcpy+0x40/0x70 [ 1337.297918][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1337.303134][ T31] ? __pfx__printk+0x10/0x10 [ 1337.307763][ T31] vpanic+0x281/0x750 [ 1337.311762][ T31] ? __pfx_vpanic+0x10/0x10 [ 1337.316268][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1337.321823][ T31] ? preempt_schedule+0xae/0xc0 [ 1337.326680][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1337.332157][ T31] panic+0xb9/0xc0 [ 1337.335899][ T31] ? __pfx_panic+0x10/0x10 [ 1337.340324][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1337.345799][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1337.351962][ T31] watchdog+0xfd2/0xfe0 [ 1337.356130][ T31] ? watchdog+0x1de/0xfe0 [ 1337.360476][ T31] kthread+0x70e/0x8a0 [ 1337.364556][ T31] ? __pfx_watchdog+0x10/0x10 [ 1337.369252][ T31] ? __pfx_kthread+0x10/0x10 [ 1337.373844][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1337.379050][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1337.384259][ T31] ? __pfx_kthread+0x10/0x10 [ 1337.388867][ T31] ret_from_fork+0x3fc/0x770 [ 1337.393470][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1337.398719][ T31] ? __switch_to_asm+0x39/0x70 [ 1337.403505][ T31] ? __switch_to_asm+0x33/0x70 [ 1337.408287][ T31] ? __pfx_kthread+0x10/0x10 [ 1337.412897][ T31] ret_from_fork_asm+0x1a/0x30 [ 1337.417694][ T31] [ 1337.421053][ T31] Kernel Offset: disabled [ 1337.425386][ T31] Rebooting in 86400 seconds..