last executing test programs: 4m19.072465828s ago: executing program 2 (id=2060): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f0000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m15.934864717s ago: executing program 2 (id=2067): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="4005bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m12.716022358s ago: executing program 2 (id=2078): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x7727a000) socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008e}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r0, 0x0, 0x40008d4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_int(r3, 0x6, 0xb, 0x0, &(0x7f0000000300)) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000740)=0x7) 4m12.163817486s ago: executing program 2 (id=2081): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a4640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) cachestat(r2, 0x0, &(0x7f0000000080), 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0x10, 0x424, 0x828, 0xffffffffffffffff, 0xf423f, 0xfffffffdfffffff9, 0x7, 0x4000000000000002, 0x1000000081, 0x5, 0x0, 0x6, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0xd, 0x5, 0x4}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) 4m10.821222541s ago: executing program 2 (id=2084): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x20, 0x18, 0x1, "a3"}, 0x0, 0x0, 0x0, 0x0}) 4m7.68219213s ago: executing program 0 (id=2094): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a4640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) cachestat(r2, 0x0, &(0x7f0000000080), 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0x10, 0x424, 0x828, 0xffffffffffffffff, 0xf423f, 0xfffffffdfffffff9, 0x7, 0x4000000000000002, 0x1000000081, 0x5, 0x0, 0x6, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0xd, 0x5, 0x4}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r3) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) 4m7.641913197s ago: executing program 4 (id=2095): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904620000d1d8a3ff72699780f01ae70d3676cd8af1eb2b7cc1e3e31da5f7ad"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/88) 4m7.564141552s ago: executing program 2 (id=2096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000240)="63cd5c1672914cd2d5c5ab9c"}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r3 = inotify_init1(0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0xfffffffd, 0x7, "20ab9809006ea4a7446c180000cd681ec267a0", 0x6, 0x6}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x7, 0x9) write$P9_RWRITE(r8, &(0x7f0000000040)={0xb}, 0x11000) read(r7, &(0x7f0000032440)=""/102364, 0x18fdc) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x64000ba6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 4m6.350529643s ago: executing program 0 (id=2098): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m4.417624017s ago: executing program 4 (id=2102): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="20280100000020"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4m3.682694199s ago: executing program 0 (id=2103): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r6, 0x1, 0x2, &(0x7f0000000380)=[{}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r7, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xd, 0x9}}, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x80, 0x1300) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m2.283244368s ago: executing program 0 (id=2105): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r6, 0x1, 0x2, &(0x7f0000000380)=[{}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r7, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xd, 0x9}}, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x80, 0x1300) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m1.213892695s ago: executing program 4 (id=2107): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x20, 0x18, 0x1, "a3"}, 0x0, 0x0, 0x0, 0x0}) 4m1.116761176s ago: executing program 0 (id=2109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r5}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000452300b00064000004119078ac1414bb7f0000014e214e23009c9078010000000300000025f731185abc881859558b2926b5fea2a440955a1940cdd761a916cb2827da0dd070519abd0f4755094fb34499d9fe7ef7566fa473f84bee62e24ed6043a717b4547d4944119a8020d14e600180f765b6458dab75fde5630183ecdf757fcdcd3844f184ebe1fef5bde237cb580122b3eca159f9f582bbbce7fcd66a0b313dcdeb9868443a11f02fd14292d63"], 0xb8) 4m0.849877405s ago: executing program 0 (id=2110): syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f0682b946") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x50}}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m58.143804552s ago: executing program 4 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="600290780000898a67090000980fa9486b8f8e1ceeb31f3509c53ceb3fc0085240"], 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {0xff}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x19}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x15}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000003e000701feffffff00000000017c0000040042806d0001807edd346e2799b34f6b5c8c6e8a677385fbb2c9297edd97b1ef9f383303a13f83f6f24b1b348f48075361c8847f14afdf2ddcc997f9dadd78ac89a9cefea6444f8bf0da1f79201819e5a9dc4fee30abe567e8d92a08000000946b257568b0f177f471fc4d05ab93a3412dd6874e00000008000280"], 0x90}, 0x1, 0x0, 0x0, 0x404c0c0}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, 0x0, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r7 = semget$private(0x0, 0x3, 0x0) semop(r7, &(0x7f0000000240)=[{0x2, 0xd5db}], 0x1) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYRES64=r7], 0x0, 0xfffffffffffffd73, 0x0, 0x0, 0x4002}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3m57.11884624s ago: executing program 4 (id=2118): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) 3m53.711253271s ago: executing program 4 (id=2124): syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000"], 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m52.267869064s ago: executing program 32 (id=2096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000240)="63cd5c1672914cd2d5c5ab9c"}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r3 = inotify_init1(0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0xfffffffd, 0x7, "20ab9809006ea4a7446c180000cd681ec267a0", 0x6, 0x6}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x7, 0x9) write$P9_RWRITE(r8, &(0x7f0000000040)={0xb}, 0x11000) read(r7, &(0x7f0000032440)=""/102364, 0x18fdc) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x64000ba6) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 3m45.688145153s ago: executing program 33 (id=2110): syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f0682b946") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x50}}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m42.036728337s ago: executing program 3 (id=2143): socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff"], 0x98}}, 0x0) io_setup(0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) 3m41.945959174s ago: executing program 3 (id=2144): socket$inet6(0xa, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0) (fail_nth: 1) 3m41.918276409s ago: executing program 3 (id=2145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0xb) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x1f, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x100}}, 0xe8) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c00280600fe8000000000000000000000000000aafe8000000000000000000000000000aafffa4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000b90780000051200000003ffffffff00000001000000020000e8a1761f77b90ccdc98529c468f324a9a53ef86a338f16d6094a17d97d50402eb4bbf18268a7aa"], 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x80) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x43ca0f2b) socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 3m41.638012615s ago: executing program 3 (id=2146): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f260102030109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3m38.679015423s ago: executing program 34 (id=2124): syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000"], 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m38.574753689s ago: executing program 3 (id=2149): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000040), 0x80203, 0x230080) io_uring_enter(r0, 0x7947, 0x9, 0x4c, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa040) close_range(r0, r0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x8, 0x14100) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz1\x00', {0x0, 0x5df8}, 0x43, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd283], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdffd], [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x3e82, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x927, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 3m38.0610198s ago: executing program 3 (id=2151): ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000005e0000000000000000000f300f222566baf80c7741364a81143a3d420f07b8010000000f01c1f20f22e666b8530000000000d95d22dc"], 0x5e}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000070000000000000001000000000000006b00000000000000"], 0x2de}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x184, 0x4, 0x18, 0xf1, 0x0, 0x7fffffffffffe, 0x8, 0x5, 0xb, 0x0, 0x45, 0x0, 0xbdb], 0x1, 0x1c4213}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x56}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x61, 0x1, 0x8, 0x1, 0x31, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m22.660233683s ago: executing program 35 (id=2151): ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000005e0000000000000000000f300f222566baf80c7741364a81143a3d420f07b8010000000f01c1f20f22e666b8530000000000d95d22dc"], 0x5e}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000070000000000000001000000000000006b00000000000000"], 0x2de}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x184, 0x4, 0x18, 0xf1, 0x0, 0x7fffffffffffe, 0x8, 0x5, 0xb, 0x0, 0x45, 0x0, 0xbdb], 0x1, 0x1c4213}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x56}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x61, 0x1, 0x8, 0x1, 0x31, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m21.29536357s ago: executing program 1 (id=2167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000"], 0x92fc}}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20300) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x200001d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r4, 0x80184153, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[&(0x7f00000004c0)="1fea6b6383858b2bae48cd55cdcc39fe730125fcee98f068dd21bc6fb6699339e35e8e5c63cc03301b3d546708c5b50acf328ac5a81f2d9ddd44cbd17f8b567e2724dc47f39d26a05a163f60bcd923c38a2ee1792fba2812fa354362abc599b92fb87f28b171d7d997882af401e679f2c230a28a6f37d18a6af5920b0a12bbe2e365e6469026dc5ff0437810ce72d5a33c1f04bb578e03154bed18ac3a93bc640c6f46f0344f0e05ccff4fb3bcbbc1b1e32865c481b4a83ad39af500f5f0627bda38141a1528b1774ebb9a2029eb0e6fdf1ce166a0e1ba15a0c1fe0e637ed66df76fd966f88aa6379ce147724faa22e2f76d39cc41703f4d9ec2d291a144abd699b53aa1bce9c89311f048c917454b15f2649fbcdda432211ba9460e4c07a8f7463f50fd6be94ef91037e21713e59c8e9592278fede4a22e17073e8d3bcf871824a58b12ce62dae2f6aa9df21e8434e560be1ec21ee003471bd83b3014ba5689b61106830a1b60569225253a075a305168edbc5bf63e3dde4d7209c2cb6f7878ca30ee759aed34b36ea4d8db5239839c98d1cdb3f015191b0df2a24c9d92523c4d9b6283b175981ed0c7f673b35797fcc526b3817f7e3c0b7a05d9b98278fb7e1961f953dd4c607df7fc84088e1fc1975c7b47f00d973afa86f103caadd1d5bc8d3f9ff1628ddeb8585519416edc2c9d9af0b93416dd1b24453a1511a6e62eb4fdeffea9757921c44ddec279df045a63ae4b0f5595ee77a1883b7517d5a44086ba66ed350af1523c66a2a82b44c3e5461da6cfaed5e266678c62123af950e8a4f90fdbd8f6797407d76606587c5668c0abfadacbc9bb7421b0afbc83cd601554cfcb21a148a90cb18fe82d08fd4db9c98adc0df51cfb843e774e95dca49b9313aff74a2027fa6e581ba2da1287817948aa55f59794c78a12f73a765767a9b7abc17418c05116b674324c535e26c056dc6b2f15923ed9889353132aa1394d10c6b4444f65f35658d494a5fada9ffc6abeafbbeb698bafd6ca728a088f1b4902a4fd42c2d816e9f72b3dfe02d23c837512db91fbf68066a329a5710153d42b40380ce1e0ed8324e3e72394eed1cc679712dd62b3805d1eb4f45e42deb86a4180359bc365247e4766c55c235c9f03e31320a29ccd8e17c406f2fe64b10ba91b31dcb6f60dc8387b190249d3d562e51b32e01133db1c4835c612c9a9f7a89d282c0276e59b97b5914f8512f878d4c9197508b96f87fe467bcb285bd5f67a0fa5440009dad979de6bf494765a65a9c1412928a6d7863804c92885605a2f16e10e9a9eed3668c4fa6fa981bc952c94db9b8e1769df3737a1545dd14c6d7c67197c490cee71b21fad9e301ab8794e31fb699e78b4719f46a33035a6469e67c649187535ee9e308556c062456f4b665ac89ee69a76caf5b2ed3005041edf4ba0658ebfc3ad3e14ac6b188473f19be5b4aa6c28055fc0635f6cbf305eecfd4e7049c8e6b073d6b691ccbd9bacf1e34b6dd82bd8dcb0e2b372bcb941ecb760ee0970d8a0a05f418d2f1bf67d5f4817a620e8d6b8cccc6f2a23a553a05f3d5ee57c4814d02fd010dc509669fa13f08c22d7adf88bdb4d853a30862d33d8c188104d78099f306fa6a592ef98b732cb03013b3ef5ec61a6d888af5b45d281f788955ef9aae5223781af7db178d100eb67b3ac6c49cf4598c80231806e9159307919faf5f1ef5ee38b817fe1ad06ecb97a7579b5d345d3e9fb66ce1b31dda7684e55f2cc8f7d4e70ff92c7401188504821b0ee48c361208ae435c54de1d25a7fe5a2cd037f49a80f8e8b47c8a4a43750713e7160bb6b2af2c3d05386f3abd8861b3d1e02bb32dc4aaf2556b6c593c503e7d7ee6db487956b5f3f4141a3880e36f97266b7dad0d61f72bbc95cb3e47feab9332a8de6ea7c315a370d96be2022d0496b7a4b280ec5adad5dad48893ac3f32b30b2e3df26ad9284903a6e4b5e5856cf448c182d2d269eb2aab977ecf390fb1d2713318b2942cc3c34bc57f68bb5967d0faa566fd1a258b3a0c12b75481b55cceb7a7a2b8af755139ef7b2788b9aa9e30f50d4994c462a335fb8c3cff4a452a94ee2136bfaa9cd6a8ac8faacd661c2b0f4851ff9d34faec27545390fc65302cdf71633f5b82326f73796916997e9ab783792fde2614f56f2a92f35f6628ff0ac7a7e689297b28846c62c9b2676f0a5cdd858eeaac8599ca4e27ef1b60e6451d54c3888a134e74eeaf5c987eb6bda636aae2106e2e975339ce59501a3e9f7599c543b049e7546a01424a8f961b8025f355999b94da998ba4607a3261b3111beb6fe15e7732e6d85100cca6d79e727c1419c7a7aca909a8348155df809f74f3ca23d1cb7f10ade0951256672b9d8aaf1ea2798ecd12b89845a6c50b2d455d3cd3d9df7810e3c9e1282d74614cbd5857a3a48338e4a5a5a0832633461ad8c7b27cbbabc48607499cc6563e5e5f6a8b52c62f7c6ebb39c694f72fd7a61b2dea164c3ec327a0c5b7a273671d08b0b91bddc972cf0c01918f0a4d574e90f626983505e25a4dbcd28f91758242a9ec650930909a66f6f58f07a3e0ac6a7daa2132f6b1b478e2b347eb1550373feb0cf5e76b3a6c818c805efa4e6e0b135db0f3cb4fb1459f6e46803745a69623276d4fe68ddfc6a58bb4d4684d52c5ced4d9d9909749da7ba5524779b5b8b998d97d2f3b82cfbd500d11a50791cab67c38f003eea0f982f092e0160fcf9c28a560180182d49af08f4f788c72a51c41a811a5738c3642514b47ed74e5de4bc67020ed2f7261d38b7e8208fd4e94c70301fcf4f8ec9b1aaec2c13b5f8edde986cd17fbf06e24b6b58d3ea7686134b761fdbd2d887a4d35376295215f668a5842f5470ed68751e736e42a24cafb32dc7f89c46d327e68ac811a61b4b116e0342cd27619afd12665faff93e2714532d7710e7fa926ba23d57ebb9db6902bee5c8d2c153b003d5e05fa06787fe832c73ca49ac0e76236044aabdfc0e8028159b1d77439e72f9e72c33a656d946b7596604999829d964ee14587ad3ea5200cfca9b58f713c38e3ed64df595651d7e14403e098b43a536448d79345da105019e641274eeaefbdba254bdba36ec18779499de588cfaea7871ca9eea0c936cce683e766c14e3d25997f9bebece01276f08a4eb5f8e1d40e4b6dc1b4e9f5b4ffd59fa583a9d98b677500b4d2567f7a44f7c35f4f665db770f4284888810c4f5548f6471dd9194aa83788efaeb62fb7d9f7ac311d5e228c5c135b2bb6bef51deebc236040e0d671b58a120d3fba0f176a619a167772fd4ed1624de211cf75ab3c1e0b8915df6dea2489705341ed76d77d35131e242347332526899cc921b73e379aa63e59bd4b89f34fff7709a7d152670cceb0f0786a508f5494551d88224013fcfb28a2f375e796d6df7bac7e92bdbcc3ed99042329927f3f95a1edb20cae3ced318b33cba5ba11ce9ea5591fc6391a9e77f16474ffeebafd7b7adb39f9ff08cd2fdfc11cf61f853566e35f6a55ad9f1a4949b63bab27ddbce35a07813f379c3cb943e79f76011f810b1b21c1fb9acc81a04621bca9ed7a086e93b57536957a0493ec04bf7e5f4a559f18d7d80988c1fa5537ff3f8e8cd6ee79da3ae6a3a49db84362a14e4b520ecde6d6aa48b7f25c837326624dd5cf6e40a4c0d000f55ea6385b10e39f6efdad0629036f4076ee0c60d57d86c2fce65461beb7b5e70ed63e079d66036b321dba871dc070f34682296a6725b82e2a7e085bfc70817b6c92695740fb9376821a21a5ca8f44b16aa38546c46c37229c9c91caac5e374a3532d99b106ab5296e39dfcd359fa85631f4d0f429e61604b317e016194a751a07c8ba74505f759e6c2f7d2dc0a5e048ce5564af3d796943ba8c5e668aee808e1f75aa8bb3fed93777d40bcb21b2a36dd30718d030a9ecabc9d9655868ae60fbd24ba4a2c2c7850cac67979f543a371446ce1ec3928974c46e25d656ff7dc9910ed67f55e1bc093d6ca426567a55c71af92aa527f7096b8322499d6c8fabb0900da7c7fc3906d03bc94d446f0577174f7b3a566997aa873146dfe1d55ea1846b9fcc2702b7e356901da51ded415d6de59ee8ddda38bab425e79e2115b2d47f7601353e5ccab8068e9fd0081a692c3a9082d6f3f36db86e80b5638c6f97dc5eca5c96c190dfea3b950cc126121dfe3bbe11a277fcb9349dfc5c9360595a0ec16f94698f87328393618ea667ef9d12f2567c6ed5892550c7dfeeeb840182de2e1288e2525fc7e06cdf3b51633de2376d233bdc499824c82202d9e703a16d1f64b01c1ff44a6b64658255eba8040db1be2724fcea2ca4274c84fb5765031a3f7421034f9b3e9353966ad3e35b3d4a4ed81f4eade0b8af97f7a4554a6109a081e6f64295575e6bde98e19431daa887a16dac2aca3968325ac38a293345a2f2baec5dd4f53efa559c5a0580812570ee26899df461c67c3aa722d52cf48397c78c44118a2c91114ce9f8ff77f65c17ec5d1d27686db8b1733cf5ec5e0e20acdb493d3fff390f5f144147dd7e6269a562f72cc5a86907970e56ad388b6132d4c9d3e53a844faa0562bc9fd01a171a7e29daf207e1cdd3f6bcfaa1bdef970254602e8e5ef8e5c61674c8c759fa00914e90c79f98b61e2926bc0f13097bdd1c1f8c2971926615676a02d9f1804ca9b44941157596b4ed142e207169289a3601b15e82dbc5ffef613a8c19b5a8a4688525b8fa78428677eec8a80ca740f73259d62bcadcf794e939a4a788cf6f88610592cc53ffca0d5b7597f8487a62bb099a3346e8ad3ff7df7d0c3fc7577ff1c0d2a9ed39cf331bf3b8d173ca60b82b66e824feb7c7986463c7b83843e48f89534b0dfd8e974d3c2f54882aa87d2b491552ebb3acfd1adf2059e1b85378bf29927d2623e288a86a4592a6f99b729ead6037b856f762bc91df6bbf8a54f6cadda95e843237c974136229e2b016e2876e4b2ccd429941034d201a9eaec379419de7a17b80aabf1135fcd923ded3498cbd7660292aef91ec2f87af0900f7942fca91ef3a0dc7d79334de12209e90d64e23ad030e4802750a00447446a1c3e2f7cef2259ed440e94824d568968b53f9a494287a0803e70d0124d8c7b6b914ebd2a25a604c1d88fe18c3ee715e7cc98b99568c1262b231140bda01a5d10c6dcad04e530d97e5050fd22cd20c11337c4c42c756d3fcd9516ad272a7225c351a2544ab86a43273d6d70636451c77402fe849c9fa6cfb8fd484e9d2938db066b38a015d13bdda9d115927d518989c4c8bed91f27f457fd110306d9da93fe84343a0f31fd2e125eed095572e584b9656ad2a13bf61311600764953a0b48366ccb9165a8dca53192a6fc0a96105e19ddb94afd74fce948cb4bddaae4a454bfd6516b0b7ef272bd32057b54a45271ead5fbe202f80fd76a91de3026bd2eed374dd3e70f0654e1b2ce94a1a66d7d43b21314371c28ed15685bd52afd22dfafbed5f52adf3a535770adf937fc31f5dff83b5cc1e67afbe69fc658f1b542e3b4874386e59c8430ad5537827d7c8e8ee2fd6527586651640145c1ac0cb0fc19e0c883af924f0bb5c8c8ce75193e15a617fda68dc6b1c76f56cc00d40ce6bff7fe9c3f01f9f70aacf8d294f7f9e9245482b75f8e116450ae74704b34a5140f75214c85393fbdf52d51922a9a0435c51567ab3a2a40bcc6a0807dfeda678f9bae60083da4b3ca3770a6f2ea4a7b38582f54cae1f39d45f7fd0a616c6278a9fd9caf7a9e14453c969ccf4c87f4d6634f3ecec359", &(0x7f0000000340)="e1826ef72da83144719a0e6990256790dc8ef71a8e0d76725de0cc1939bbfc5ef3b821b6db62a4d5796e272e9e4ba951fba304ce7206c73d5cf071ecac098df6b6a156ea1fa618faf4abe56f08b59ebd9099ef877c", &(0x7f00000003c0)="032405be7151eac8d6546192d55ed31d81d6d24c1aa356d55673beee8acf418ffd52a2497d", &(0x7f00000014c0)="92925548063f462c8ba222828ef54af0d76e7417a48fb59825a60ce669d7bb8e60cbd324f5a537b6893eb2927e3c3b164a8187f3c09c32c8e22f3735844afe6c32626c1f2840482c60383b2bfcdd7e8a7430e3a8ba6b4bcaf4ed75d50a3c28506add3f5ff033981961900a5a361994b31632dbb43281f4f5fb862673425cee65648af3cd5d8bfbb03ee33c52f7939dac530f95cce536fea32af65473d462c7a387f0a05722f2a3b07da51639e5cb21a53a99eab35dd86c3be5d78804e8e9481d4de4ebd01a4fb1ace1b0b0483d17150ce8295e88ef9bfbbd4d6696"]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x84, &(0x7f0000001640)={[{0x7e, 0x4e00, "24f748cf52bca7b4aa430add29285343b3120fe3797f00e655cb6f4c553f38959e990907c5a204b75edf5622d2a6a979b7429fd6373e14e6ff31e660785a06f21248029a8a3254fe9433b865bc1b4d25c8fd8db154d869a79a88c8c8154896720f27906914628fb6e3558d5364b5f1278443c90e056e971e5ecaca1d7911"}]}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r7, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m19.798017839s ago: executing program 1 (id=2168): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x20, 0x18, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x40, 0xe, 0x2, "1dd4"}, 0x0, 0x0, 0x0, 0x0}) 3m16.791235485s ago: executing program 1 (id=2169): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x7727a000) socket$nl_generic(0x10, 0x3, 0x10) statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008e}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r0, 0x0, 0x40008d4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_int(r3, 0x6, 0xb, 0x0, &(0x7f0000000300)) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000140)=0x6b) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000740)=0x7) 3m16.357370769s ago: executing program 1 (id=2170): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(0x0, 0x14) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x830200) mkdir(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x100000000) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000100)={{0x3, 0x8}, {0xe, 0xfc}, 0x7, 0x1, 0x9c}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r7, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001e80), 0x100, 0x0) 3m15.525247693s ago: executing program 1 (id=2171): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x3da8, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4, &(0x7f0000001080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) recvmmsg(r2, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}, 0x3dcf}], 0x1, 0x2100, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x80, 0x47, 0x1, 0x4, {{0xc, 0x4, 0x2, 0x20, 0x30, 0x68, 0x0, 0xce, 0x4, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x1c, 0xd9, 0x0, 0xc, [0x7, 0x1, 0x2, 0x3, 0x4b, 0x94f7]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) pread64(r7, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000005640)={0x7fff, "aa8f48b25576dad0d52439d5b10814a2eb08a516ceb61ce16e62f11bc291062f", 0x3, 0xffffffff, 0x4, 0x7, 0x200, 0xa}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r8, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000055c0)={&(0x7f00000003c0)=@newtaction={0x51e8, 0x30, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{0xf8, 0x1, [@m_ctinfo={0xf4, 0x1a, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0xb5, 0x6, "2df37bbb43dcc6168c605050de363f13ae179b7d3379bd575687f982d94c86267cc3b804be742068680759c35faf9b8ba35776e87159a85d83fea6c21f93e81b718e5185c92a1a56c201c4e5c3206c03a613860a12168af3850cdb181cbe3ed88bd7a03f6dee688698d3a67439cf0c82adea6911b96362be059e4e63c35fdaac8777dc6718c5582832d95a4529e9482728bb567c7bf68861e6a062db743ccd3ecf1f857c48ed9091c80ef9bece89e618af"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x4d0, 0x1, [@m_connmark={0x180, 0x1, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x6, 0x5, 0x90}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x5, 0x1c, 0x8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0xb, 0x4, 0x8, 0x8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5cf, 0x7, 0x80, 0x757}, 0x7}}]}, {0xe0, 0x6, "689a0ea327422a928c9a9b261dc1b49eb2049f0853843131e78671ebb81fef6b0d6a84c68ab01fb9c756c289e9068dfa0e063e6eafb6e28ba6d8521b9ca59213c5ee3d63dc69eb78636bf629f996b143dbf6e18aea6933b2a457108e619828a871455c9bdd4c8045bccf73c3e922ad82930d48f31f5f1b063793ed1d7781125c8820735b84e2a1e8cd79621f4acffc35d4bdabea5dbc95b92bddaecaa4179fa597cb885fc056ac862022f1d03207567bd4efcd38c80461aac1400e31f65b6c6d321ea105837f94db23fa39cf276771986832146a86be21ac564f155c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x148, 0xf, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x1, 0x3d0f44c03155cb9f, 0x8}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4, 0x9, 0x7fffffff}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xb1f, 0xffffffffffffffff, 0x1000}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8001, 0x5, 0x2, 0xfff}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x5, 0x6, 0x0, 0x6}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0xfffffffb, 0x8, 0xfff, 0x6}, 0x3a}}]}, {0x73, 0x6, "0573e99296a262d0bccc658bb5fefd52ce9a6997e074ceeff609e3ebc17bbddc6a4cb3e368f98c1336c2a120e59e41429bd9abe3ed5dc3a7df32345402930dff964b48d6af131f9f1daed4e6ffe885393d29b300f864caf11fed8b34c6a804b33a38f0ea943a2d6fa8c0484fcb3c73"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x78, 0x1e, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x507a2}]}, {0x3a, 0x6, "c869b3bb43d1f1b6149ecb62f479568763ec8d5549c3bcc2f59d75ef37c7db10817988b9ee49720394f178360ac439b6c2cb4ff5bd2b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x48, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x1a, 0x6, "7d6312d1576ef870fbfb8594326359f8da6114482559"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_bpf={0x144, 0x5, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x40, 0x4, 0x3, 0x0, 0xc}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa93, 0x81, 0x6, 0x1}, {0x8, 0x6f, 0xf, 0x5}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0xe8, 0x6, "376ca011c0fb21bcbe042bd083fdfe4c2209864308c2a5357714d3cae666b24a22b91b5711c964197bc0b3525d114c3aae64d15d382254295d94fe07c25fbb6f583b6a933538d609b8f05a08e7584d7da6ca32545e012a16b9ba58c7b2131517d814625975a9d5fcfd08b68c8418f67f90e430c09e8c266a3e6dad895da45c925ca1b00564e72cba62c3217376d81576a8215738b2d042e379b7eb69b05bd2ea64b50c88c1f6abba8e095cd6563ad0b63c3d15771aad09b2622c68d09b657dee9e6559798db7062cd947829e3392dc167f2a2f582f26049708e48e9e3705b8d17859f216"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4614, 0x1, [@m_ctinfo={0x88, 0x2, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x7, 0x7, 0x47a6}]}, {0x53, 0x6, "47b50c0e1ed2335a78af7d7f016a8af1c747b94b93507283f706cd87af8e5d6ca57db052ab150f72433f218c26dd3a98324311b6fc8619acca8c986339e38bbec858ab4aaf8b723df3fc7c245c1be6"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0x134, 0xe, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x91, 0x2}}]}, {0xfa, 0x6, "f448132f9d565613b177677d90f1f428f43c001ce9429703332bed947b8b058560edaf0095ce34deaf7d1f10ade5ab68287ccb0a9012b81bf4bd1239ea85d369cc482fba63b1590ef17e1eb8b0502a4b67dcb30dd50d7f38b054bcf1bde0ab2ea2d4a1c903c8e476ad817ea5f10d8b0e7234d6c55825ce42b6897a85c9853631d906743fc9a07b4746bb1197a794e7bbcc7788df2408c6c8a96b4d62987500ae50f73718f98647e3315c554f6cfc2a786847a8d3c7219e61c8535e4c711bb5bc97e93ad70f50359e7985797af88b6537199c7af1273b1560375d5d9e7945d64edf6ba5ac6d2c73069dd125b2bebabc6d08ad3bcd4709"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0xd0, 0xb, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0x5, 0x0, 0x6f0f, 0xffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3fc}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000001, 0x9, 0x20000000, 0xdb28, 0xff}}]}, {0x5a, 0x6, "88ec2f8296260a6573093986e329a814343d1cecdd03fde42bcae3328eeb5819776bfda9e394420c04fadb1fdb05b602f63f333dcc44fa02e7f04989a33cff918c9a7da3a5027e2ad38fca43b3868dd03609047740c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x228, 0x15, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x2, 0x408, 0xc7f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7fffffff, 0x10000000, 0x5, 0x317}, @broadcast, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2f1, 0x6, 0x80000000, 0xfdd}, @multicast1, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xef3c, 0x0, 0x3, 0x1}, @rand_addr=0x64010102, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0x3, 0x10000000, 0xfa6a, 0x9}, @private=0xa010102, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x1be2, 0x6, 0x8, 0xbb6b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1fe, 0x20000000, 0x7, 0x7}, @rand_addr=0x64010100, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x5, 0x4, 0x7fffffff, 0x7f}, @empty, @broadcast, 0xffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x2, 0x401, 0xff}, @multicast1, @private=0xa010102, 0xff000000}}]}, {0x98, 0x6, "2e7798ab297790acba3d60e734b568351233def99e1cb9d63886a39e559c9435296ad9208ca58422d2c498760d8e722ab11d35056bd15707382289403220b985dcb441e113521eace52c7cc0f31fd78e0699ba0bf58e2c71d1508863f1614c6d59d03542a92ef47147659f59b9a1a146650aeb51e70ac3243b03d7043a567a5b35813a26392a4635b56cc791c3d104ec503a767c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x21f4, 0x9, 0x0, 0x0, {{0xb}, {0x11c8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x7307}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x4, 0x5, 0x7, {0x40, 0x1, 0x6, 0x400, 0x7, 0x84}, {0xc, 0x1, 0x8, 0x5, 0x6, 0x8d0}, 0x5, 0x80000000, 0x9}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0xd, 0x6, 0x0, 0x4, {0x45, 0x1, 0x3, 0xc1b, 0x3, 0x401}, {0x1, 0x0, 0x130, 0x4, 0x101, 0x3}, 0x9, 0x1, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3f6, 0x7, 0x7fffffff, 0x8, 0xffffffff, 0x4, 0xf, 0x7, 0xc8ea, 0x5, 0x8, 0x10000, 0x6, 0x86, 0x10001, 0xffff8001, 0xe, 0x7, 0x30bf, 0x9, 0x6, 0x5, 0x4e5, 0x5, 0x0, 0xfffffff7, 0x80000000, 0xc00, 0x17, 0x8, 0x6, 0x8, 0x6, 0x0, 0xe, 0x7, 0x400, 0x8, 0x4, 0xa769, 0x97, 0xf, 0x0, 0x5, 0x3, 0x5, 0x5, 0x9, 0x7, 0x7ff, 0x5036, 0x3, 0x4, 0x4, 0x4, 0x6, 0x1, 0x6, 0x6e3b27c3, 0xffffffff, 0xffffffff, 0x5, 0x0, 0x9, 0x6, 0x4, 0x5, 0x7fff, 0x9, 0xa0000000, 0x6f, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x38a, 0x5, 0x2, 0x80000000, 0x8, 0x4, 0x40, 0x100, 0x2, 0xff, 0x0, 0x0, 0xd9c6, 0x0, 0x9, 0x3, 0x1, 0x400, 0x6, 0x40, 0x2, 0x4, 0x1, 0x6, 0x9, 0x9, 0x2, 0x8, 0x101, 0x401, 0x0, 0x5, 0x4, 0x7fffffff, 0x4c7, 0x0, 0x20000000, 0x0, 0xfffffff8, 0x1, 0x0, 0x80, 0x6, 0x9, 0x1, 0x3d56, 0xffffffff, 0xff, 0x7, 0x1000, 0x4, 0x2, 0xfffffffd, 0xc, 0x7, 0x2000, 0x8, 0x100, 0x5, 0x5, 0xb, 0x7498aedd, 0x1, 0xffffffff, 0x1, 0x1, 0x1, 0x3, 0x1, 0x7941, 0x24, 0x40, 0xf, 0x4, 0x8, 0x3, 0x1000, 0x6, 0x4, 0x8, 0x40, 0x7fff, 0x7ea43967, 0x0, 0x0, 0x4, 0xe, 0x6, 0x6, 0x7, 0x273a9ba0, 0x0, 0x6, 0x84, 0x6d, 0x7fff, 0x10001, 0x7, 0x7, 0xdd7c, 0x0, 0x2, 0xfff, 0x5, 0xc, 0x0, 0x5, 0x401, 0xefff, 0x5094ae6, 0xfffffffb, 0x6, 0xf, 0x1000, 0x4, 0xa36, 0xffffff34, 0x6, 0x9, 0x2f17, 0x6, 0xcb7, 0x3, 0x7, 0xe, 0x5, 0x4, 0x6, 0x5, 0x35f, 0x38, 0x6, 0x1, 0x7fff, 0xa556, 0x4, 0x40, 0xc1ce, 0x7fff800, 0x5, 0x1000, 0xe33a, 0x9, 0x401, 0x4, 0x37ad, 0x1, 0x7, 0x2, 0x8000, 0x8, 0x6, 0x5, 0x8, 0x0, 0x4, 0xffffffd8, 0x8, 0x3ff, 0x9, 0x5, 0x5, 0x3, 0x81, 0x9, 0x2, 0xff, 0xe, 0x0, 0xfffffffb, 0x479, 0x7, 0xf, 0x3, 0x8, 0x1, 0xfff, 0x1, 0x1d]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x384}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff01, 0x9, 0x400, 0x1000, 0x5, 0xf, 0x9, 0x295, 0x6, 0x9, 0x0, 0x2, 0x0, 0x8, 0x4, 0x5, 0x8, 0xfffff000, 0x10001, 0xffffffff, 0x6, 0x1, 0x1, 0x0, 0x6, 0x9, 0x1, 0xffffffff, 0xd, 0xffff5280, 0x7, 0x0, 0x7f, 0x6, 0x8, 0x2bee, 0xc727, 0x8, 0x401, 0x5, 0x0, 0xfffffe00, 0x5, 0x7, 0x6, 0x0, 0x7ff, 0x2, 0x8, 0x0, 0x7ff, 0x6, 0x0, 0x7, 0x8, 0x8, 0x5, 0x0, 0x5, 0x3, 0x5, 0x7, 0x1, 0x12e, 0x3, 0x3, 0x7, 0x5, 0x200, 0xa3, 0x5, 0x40, 0xffffffff, 0xfffffffa, 0x13, 0x7, 0x1, 0xe0, 0x3, 0xa, 0x9f, 0x800, 0x200, 0x8001, 0x9, 0xc75f, 0x8, 0xbd53, 0x0, 0x4, 0x1, 0x62a0, 0x5a32, 0x9, 0x8, 0x4, 0x0, 0x3208, 0xaef, 0x81, 0x3, 0xc, 0x2, 0x9a0, 0x6, 0xff, 0x8001, 0x2c, 0xf, 0x65f3, 0xf392, 0x3, 0x3, 0x8, 0x0, 0x1, 0x3, 0x6, 0x8, 0x6, 0x40, 0x5, 0xffff, 0x8000, 0x7, 0x8, 0x0, 0x4, 0x0, 0x6, 0x5, 0xb97, 0x0, 0x10000, 0xff, 0x6, 0x9, 0x1, 0x1, 0x1, 0x7fffffff, 0x3, 0x80000001, 0x9, 0x3, 0x5, 0x3b, 0x7, 0x80, 0x5, 0x8, 0x6, 0x1c00000, 0x9, 0x7, 0xff, 0x2e1, 0x3, 0x8, 0x3, 0x4, 0x3ff, 0x100, 0x5db, 0xffffff81, 0x2, 0x9, 0x7, 0x6f289415, 0xd, 0x8, 0x75, 0x8001, 0x0, 0x2, 0x6, 0x0, 0x7ff, 0x3, 0x3, 0x7f, 0x1, 0x5, 0x3, 0xe, 0x5, 0xff, 0x7fff, 0x2, 0x3, 0x43, 0x6, 0xd99, 0x4be, 0x7, 0x6, 0xfffffffa, 0x8001, 0x81, 0xd54f, 0x3ff, 0x0, 0xffff, 0x9, 0x4, 0x2, 0x8, 0x400, 0x4, 0xfffffff7, 0x6, 0x6, 0x400, 0x9, 0x1, 0x6, 0x9, 0x453, 0x10, 0x1f, 0xa, 0xa88, 0x10, 0x5, 0xd, 0x9, 0x100, 0xfff, 0x1, 0x1, 0x7, 0xf, 0x3, 0x4, 0x7ff, 0x5524, 0xe7c2, 0x3, 0x2, 0x0, 0xfd, 0x5, 0x9, 0x1, 0x1, 0x40, 0x9, 0x3, 0x9, 0x2, 0xb059, 0x4, 0x7, 0x7fff, 0x37, 0x12]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4632}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}], [@TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x61, 0x4, 0x7f, 0x3, 0x8, {0x2f, 0x2, 0x8, 0x0, 0x1, 0x7f}, {0x4, 0x0, 0x6, 0xad20, 0x9, 0x7}, 0x8, 0x401, 0xfffffff8}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x401, 0x4106, 0x8, 0x3, 0x8, 0x81, 0x59, 0xfff, 0x57ac, 0x9, 0x2, 0x9, 0x3, 0xf, 0x7, 0x4, 0x1, 0x0, 0x1, 0x800, 0xffffff81, 0x101, 0x62, 0xce04, 0x5, 0xfffffc2b, 0x8, 0x8, 0x5, 0x8000, 0xf, 0x4, 0x345, 0x5, 0x4, 0x9, 0x101, 0x4, 0xb, 0x1ff, 0x400, 0x0, 0xb01, 0x3, 0x1, 0xa, 0x3, 0x1, 0x3, 0xffffff80, 0x4, 0x9, 0x2, 0x0, 0x7, 0x0, 0xfff, 0x7fff, 0x5, 0x5, 0xfff, 0x2, 0x4, 0x8, 0x5, 0xf83, 0x8, 0x2, 0x8, 0xfffffff8, 0x9, 0xc885, 0x1, 0x52, 0x10000, 0x7, 0x1000, 0x0, 0x3, 0x0, 0x80000000, 0x4, 0x1000, 0x10000000, 0xfffffffa, 0x0, 0x2, 0x2, 0x79, 0x6cc, 0x4, 0x440, 0xfffffff9, 0x9, 0x3, 0xffff, 0xe277, 0xe7e4, 0xdf0, 0x3ff, 0x9, 0x3, 0x3, 0x2, 0x90, 0x7f, 0xf5cc, 0x0, 0x1, 0x237e, 0x7, 0x2, 0x7, 0x99782f2, 0x8, 0x6, 0x7, 0x9, 0x1, 0x2, 0x5, 0xfffffff8, 0x8000, 0xfe, 0x7, 0x3, 0xffffffff, 0x8001, 0x5, 0x7, 0xffffff98, 0x4, 0x3ff, 0x1c1, 0x9e5, 0xee3d, 0x3, 0xfffffff8, 0x1000, 0x6, 0x8, 0x9, 0xfff, 0xe, 0x6de4, 0x8, 0x101, 0x80, 0xf1b9, 0x121a518a, 0x6, 0x8, 0x3, 0x8, 0xfffffff8, 0x5, 0x10000, 0x9, 0x3ff, 0x3, 0x400, 0x0, 0x200, 0x832, 0x4, 0x2, 0x1000, 0x9, 0x2, 0xfffffff9, 0x9, 0xeb, 0x9, 0x8000, 0xfffffff8, 0xbf7b8a1, 0x49, 0x9, 0xe, 0x2, 0x6, 0x4, 0x80, 0x5, 0x200, 0x401, 0x0, 0x1b55, 0x8, 0x2, 0x5, 0x1, 0x86c, 0x100, 0x800, 0x1b58227e, 0x8, 0x10001, 0x6, 0x4501, 0x0, 0xf5, 0x6, 0x210, 0xd4, 0x2, 0x0, 0xa20a, 0x8, 0x8, 0x4, 0x6, 0x3, 0x8, 0x6, 0x8, 0x416, 0x64, 0x4, 0x262, 0x2a4d3b31, 0x2, 0xbb00000, 0x0, 0x81c, 0x3, 0x0, 0x4000, 0x3c65, 0x8, 0x5, 0x20c, 0x7f, 0x0, 0x0, 0x3, 0x1, 0xc, 0x4, 0x80, 0xa, 0x0, 0xfffffc00, 0x10, 0x7, 0x2e, 0x8, 0x200, 0x3, 0x0, 0x313a, 0x7, 0x8000, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x3, 0x6, 0x4, {0x8a, 0x2, 0xfee, 0x81, 0x10d, 0x8}, {0x40, 0x1, 0xbb, 0x7, 0x7, 0x34c}, 0x40, 0x10, 0xee6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7ff, 0x2, 0x7, 0x6, 0x3, 0x8, 0x0, 0xfffffff4, 0x9, 0x3, 0xe00000, 0x7, 0x9, 0xfffffffc, 0x33b, 0x7, 0xff, 0x400, 0x8, 0xe, 0x5, 0x10001, 0x4, 0xac, 0xffffffe9, 0x8000, 0x5, 0x5, 0x5c83, 0xff, 0x1, 0x1fb, 0x5, 0xe, 0x2, 0x0, 0x0, 0x6, 0xfffff001, 0x0, 0xfffffffd, 0xff, 0x4fda, 0x4e, 0x8, 0x1, 0x0, 0x1000, 0x1, 0x8, 0x8, 0x5, 0x2, 0xd9, 0x57a0, 0x5, 0xfff, 0xe2, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x10001, 0x3f69, 0x1, 0x0, 0x3, 0x1, 0x152906ac, 0x2, 0x3, 0x10001, 0x5dc7, 0x8398, 0xfffffffa, 0x6e6e6de4, 0x4c, 0x2, 0xb, 0x8000, 0x78, 0x3, 0x6, 0x3, 0x7, 0x6, 0x5, 0x1, 0x6, 0x7fff, 0x0, 0x4, 0x800, 0xfffffffc, 0x0, 0x800, 0x3, 0x40, 0x2, 0x2, 0x6, 0x6, 0x1004, 0x2, 0x10000, 0x4, 0x5, 0x5, 0xc29d669, 0xffffff80, 0x63a9aa0, 0x5, 0xec0, 0x1, 0x5, 0x1, 0x8, 0x8, 0x0, 0x0, 0x1, 0x60000000, 0x4, 0x401, 0x6, 0x7e88, 0x6d, 0x8, 0x5, 0x3124, 0x8, 0x1, 0x7fffffff, 0x1000, 0x2, 0x7, 0x9, 0xeda, 0xd, 0x933, 0x1ff, 0x9d8, 0x0, 0x5, 0x2, 0x0, 0x200, 0x5, 0x1, 0x5b3, 0xd02, 0x8001, 0x9, 0x0, 0xfffffff9, 0x3, 0x1, 0x6, 0x0, 0x3ff, 0xfffffffd, 0x5, 0x8, 0x2, 0x3c, 0x7, 0x3, 0x652, 0x1, 0x6, 0x0, 0x6, 0x144, 0xcc4, 0x4, 0xfffffff7, 0xffffffa5, 0x0, 0x3, 0x1, 0x1, 0x6, 0x5574, 0x6, 0xf, 0x180000, 0x1, 0x7, 0x7, 0x7ff, 0x7ff, 0x10, 0x869, 0x40, 0xb, 0x7, 0x1, 0x9, 0x7, 0x1, 0x8, 0xb9, 0x1000, 0x8, 0x7, 0x2, 0x7fffffff, 0xffffffa0, 0x2, 0x4, 0x3, 0xe, 0xffffffff, 0x5, 0x0, 0x200, 0x4, 0x4, 0x2, 0x2, 0x2, 0xaa, 0x7, 0xd52, 0x3, 0x401, 0x9, 0x9, 0x9, 0x1, 0x3, 0x8, 0x2, 0x9, 0x0, 0x6, 0xb8, 0x0, 0xffffffe8, 0xff, 0xfffff545, 0xc0000000, 0x6, 0x4, 0x78, 0x1, 0x7fffffff, 0xa, 0x80, 0x9, 0x900000, 0x37df, 0xfffffff7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xeaa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff0000, 0x5, 0x9, 0x401, 0x1, {0x8, 0x0, 0x0, 0x7, 0x600a, 0x7}, {0x7f, 0x0, 0xc, 0x1000, 0x5, 0xffffffff}, 0x0, 0x6, 0xb}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x1db0, 0x3, 0x0, 0x0, {{0xb}, {0x1d5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x10000, 0xff, 0xff, 0xffffff80, 0x1, 0xfffffff9, 0x8, 0x3, 0xfffffffd, 0x3, 0x5, 0x7, 0x0, 0x1ff, 0xffff, 0x3, 0x7fffffff, 0x2, 0xdde93e30, 0x6, 0x0, 0xad2, 0xff02, 0x5, 0xb, 0x1, 0x1, 0xffffffed, 0x480, 0x7f, 0x7fffffff, 0x2, 0x2, 0x7, 0x1000, 0x1, 0x9, 0x101, 0x6, 0x130a, 0x1d, 0x7, 0x4, 0x2, 0x10001, 0x5, 0xd, 0x10000000, 0x6ae8d118, 0x8, 0x80000001, 0x4, 0xec6, 0x10001, 0xbf, 0xfffffeff, 0x2, 0x8, 0x7, 0x0, 0x2, 0x3fd, 0xfffffffd, 0x4, 0x4, 0x77b6, 0xffffffff, 0xdf6, 0x40, 0x2, 0x2, 0x4, 0x5b6c, 0x6, 0x7ff, 0x1, 0xe26e, 0x30d5, 0x0, 0xff, 0x1ff, 0x4, 0x80000000, 0x1, 0x1b, 0x0, 0x10001, 0x6, 0x1aa573, 0x62f0c41a, 0x6, 0x7cb9dd73, 0x4, 0xf761, 0xa, 0x3, 0x0, 0x9, 0xbe, 0x9, 0x5, 0x8, 0x3, 0x5, 0x81, 0x7, 0x9, 0x7, 0x5, 0x5, 0x0, 0x6, 0x80, 0xed, 0x1, 0x5d, 0x2000, 0x7, 0x3, 0x4000, 0x0, 0x1, 0x4c70, 0x1, 0x7fff, 0x0, 0x81e4, 0x69ad, 0x8, 0x2, 0x6, 0x10000, 0x8, 0x7, 0xffffffc0, 0x7f, 0x3, 0x1, 0xfffffffc, 0x69, 0x1, 0x3d, 0x7ff, 0x2, 0x1, 0x2, 0x5d, 0x6, 0x6, 0xfffffff9, 0x6, 0x8, 0x8001, 0x7, 0x80000000, 0xe, 0x7, 0x6, 0x1, 0x9, 0x8000, 0x7, 0x4, 0xab6, 0x1, 0x6, 0x8001, 0x14e, 0xfffffffb, 0x8, 0x1, 0xdd6, 0x7, 0x9, 0x7fff, 0x6, 0x4, 0xf, 0x8, 0x6, 0x9, 0x2, 0x7, 0x4ca6, 0xfffffff2, 0xfffffffa, 0x2, 0x80000001, 0x8, 0x40, 0x1, 0x800, 0x9, 0x6, 0x8001, 0x4, 0x4, 0x0, 0xfffffff0, 0x6, 0x3, 0xfffffc01, 0x0, 0x9, 0x7, 0x0, 0x6, 0x400f, 0xfffffffe, 0x6, 0x1, 0xd, 0x5, 0x2, 0xaac, 0x6, 0x6, 0x54d, 0x4, 0x80000001, 0x2, 0x3, 0x5, 0x5, 0x3, 0x718d0cca, 0x8000, 0x3, 0x4, 0xffffffff, 0x8, 0x5, 0x16, 0x2f, 0x0, 0x1, 0x10, 0xc00, 0x9, 0xc, 0x5, 0x8, 0xffffffff, 0x3, 0x9, 0x3, 0x4c28, 0x8, 0x9, 0xbc, 0x40, 0xb, 0x8, 0x7, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x5, 0x9, 0x4bb, 0x0, 0x50, 0x200, 0x7ff, 0x7, 0x8, 0xffffffff, 0x4, 0x8372, 0x9, 0x6, 0x6, 0x2, 0x5, 0x2, 0x9, 0x660, 0x9, 0x8000, 0x7f, 0xca91, 0x2, 0xfff, 0x400, 0x8, 0x6, 0x800, 0x0, 0x81, 0xd22b, 0x0, 0x80000001, 0x1, 0x0, 0xfffffffa, 0x1, 0x7, 0x4, 0xffff, 0xffffffc0, 0x8, 0x9, 0x46, 0x1, 0x6, 0x1000, 0x4, 0x3, 0x7fffffff, 0x7, 0x420b, 0x3, 0x2, 0x8, 0xfffffff7, 0xab, 0x7fffffff, 0x1666, 0x2, 0x2, 0x4, 0xf2a9, 0x10001, 0x40000, 0x8882, 0x1, 0x6, 0xfff, 0x72da, 0x8001, 0x9, 0x4, 0x9, 0xeb11, 0x1d, 0xfc36, 0x5, 0x4, 0xd, 0x8, 0x3, 0x100, 0xa9cc, 0x40, 0x3, 0x4, 0x7fc, 0x2, 0x2, 0x2, 0x2, 0xe, 0x58c3, 0x3, 0x7, 0x1, 0x949, 0x1ff, 0x0, 0x1, 0x1000, 0x5, 0x1000, 0x0, 0x3403a825, 0x9fc8, 0x3ea, 0x8000, 0x80000001, 0x4, 0x3, 0x8000000, 0x0, 0x1, 0x400, 0x4, 0xef, 0x400, 0x1, 0x2, 0xa2b, 0xa0, 0x9, 0x8, 0xac, 0x8, 0x6, 0x6, 0x95e, 0x6, 0x1000, 0x10, 0xfab, 0x0, 0x6, 0x19, 0x5, 0x3, 0xd6, 0x81, 0x9, 0x0, 0x2cb, 0x624, 0xf7f, 0x2, 0x6, 0x5, 0x7c, 0x80000000, 0x4, 0x8001, 0x7, 0x3, 0x0, 0xd, 0x1, 0xdb05, 0xd6c, 0x7fff, 0x5, 0x80000000, 0xa6, 0xfffffffc, 0xfffffff8, 0x8, 0x4, 0x3, 0x9, 0xffff1c01, 0x4, 0x1, 0x111c04ca, 0x0, 0xfffffff8, 0x4, 0x2, 0x8, 0x8, 0x54, 0xffffffae, 0x6, 0x1000, 0x8, 0xfffffffd, 0x9, 0x4181, 0x0, 0x1335, 0x3, 0x7, 0x0, 0x4, 0xdcbe, 0x0, 0x9, 0x2, 0x7fff, 0x7, 0x100, 0x81, 0xf0200, 0x5, 0xfff, 0xffffffff, 0x0, 0x5, 0xe11, 0xad0f, 0x5, 0x3, 0x5, 0x9, 0xf, 0x2e, 0x1ca8, 0x88fc, 0x1, 0x5, 0x7fffffff, 0x3ff, 0x1ff, 0xc, 0xffffc03d, 0x6, 0xff, 0x80000001, 0x1, 0x9, 0x6a4, 0x1a0, 0x83, 0x5, 0x7, 0x7f, 0x2, 0x5, 0x7, 0x1, 0x8001, 0x6, 0xfffffff8, 0x3, 0x80000000, 0x5, 0x1ff, 0x7, 0x5, 0x0, 0x40, 0x7, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcd06, 0x9, 0x3, 0x2, 0x80000001, 0x7ff, 0x5, 0x69c4, 0x7, 0x1, 0x2, 0x318, 0x3, 0x3, 0x5596a8f3, 0x0, 0x6, 0x4, 0x5, 0x2, 0x2, 0x470, 0x7fffffff, 0x4, 0x1, 0x400, 0x3000, 0x0, 0x5, 0xe, 0x200, 0x8, 0x2, 0x600000, 0xffff, 0x0, 0xfffffff7, 0x4, 0x5, 0x8, 0x8, 0x1000, 0x8, 0x6, 0x0, 0x1, 0x10000, 0x80, 0x2, 0x5, 0x5, 0x6, 0x80000001, 0x4, 0x1e, 0xa81, 0x29026485, 0x1ff, 0x3, 0x5, 0x5bea, 0xd, 0x26ac28a0, 0x101, 0x9, 0x6, 0xffffffff, 0x4, 0x3, 0x6, 0x8, 0x7, 0x6, 0x9, 0x6, 0x3, 0xdb, 0x5, 0x1, 0xaee4ef1, 0x5, 0x40, 0x6, 0x7ff, 0xffff, 0x1, 0x10, 0x401, 0x0, 0xc, 0x8, 0xeee5, 0xd85, 0xfffffffb, 0xc6c, 0x7, 0x2, 0x9, 0x707e5823, 0x100, 0x638, 0x7, 0x1, 0x6, 0xf872, 0xf8f, 0x400, 0x5, 0x8, 0x7fff, 0xffff8001, 0xfffffffd, 0x2609, 0xfffffff8, 0x7fffffff, 0x8, 0x9, 0x2, 0x2, 0x401, 0x7fff, 0xa21a, 0x1c, 0x5, 0x10, 0x200, 0x2, 0x1000, 0x7ff, 0x3, 0x2, 0x3b9, 0x80000000, 0x3, 0x59f, 0xa2eb, 0x2, 0xa, 0x3, 0x61, 0x8000, 0x73b0ed45, 0x9, 0x6, 0x6010, 0x71f3b930, 0x9, 0x1ff, 0x8, 0xe, 0x9, 0x4, 0x2, 0x5, 0xdc9, 0x4, 0xf67, 0x60000000, 0x1, 0x4, 0x6, 0x5, 0xfffffffa, 0x6, 0xfffff746, 0x3, 0x7fffffff, 0x8, 0xc, 0x2, 0x8000, 0x8, 0x800, 0x10, 0xe400, 0x10001, 0x9, 0x5, 0x0, 0x610, 0xc143, 0x70, 0x95, 0xd, 0x9, 0x9, 0x0, 0x88a, 0x6d8, 0x7, 0x80000001, 0x6, 0xed, 0xc57, 0x0, 0x0, 0x2, 0x8, 0x7, 0x5, 0x8, 0x5, 0x80, 0x101, 0x7, 0x4, 0x1, 0xa, 0x0, 0x2, 0x9, 0xffffffff, 0x3, 0x8, 0xf3d5, 0x1, 0x9, 0xffffaa4c, 0xfffffff4, 0x7ab1, 0x46, 0x9, 0xccce, 0xe, 0x3, 0x8001, 0x4, 0x1ff, 0x3, 0x2, 0x6, 0x2, 0x1, 0x4, 0x5, 0x5, 0x2, 0xff, 0x100, 0x0, 0xa, 0x9, 0x2, 0x3, 0x5, 0x9, 0x0, 0x3, 0x7, 0x1, 0x8, 0x100, 0x6, 0x1, 0x80, 0xeb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x10001, 0x400, 0x0, 0x10001, 0x9, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x1, 0x10001, 0xb, 0xffffff80, 0x8, 0x3, 0x4, 0xd, 0x36, 0x20, 0x6, 0x9ff, 0x7, 0xb55, 0x9, 0x3ff, 0x2, 0xfa, 0x5, 0x8000, 0x0, 0x53b, 0x0, 0x4a44, 0x3ff, 0x9, 0x7, 0x3, 0x6, 0x4, 0x7, 0x81, 0x6f, 0x8, 0x7, 0x8000, 0x4, 0x0, 0x1, 0x2, 0xff, 0x6, 0xa268, 0x8, 0x2, 0xc, 0x5, 0x1000, 0x2, 0x3, 0x7fffffff, 0xcd91, 0x459c, 0x1, 0x80000000, 0x0, 0xfffffffa, 0x3, 0x5c, 0x1, 0x8, 0x80000000, 0x3, 0x9ad, 0x3600000, 0x9, 0x6000000, 0x3ff, 0x4, 0xffff7fff, 0xa5d5, 0x95, 0x2, 0x9, 0x80000001, 0xfffffff1, 0x0, 0x9, 0x2, 0xffff, 0x5, 0x69d, 0x40, 0xfff, 0xb, 0x1, 0xffffff46, 0x0, 0x80000000, 0x7, 0x81, 0xa6, 0x6, 0x0, 0x8, 0x2, 0x7, 0x8000, 0x7, 0x28, 0xfffffffe, 0x4, 0x2, 0x43, 0xffff, 0x7ff, 0x40, 0x2, 0x6, 0x8, 0xfc9, 0x1, 0x3, 0x215, 0x2, 0x5, 0x1, 0x6, 0x226c, 0xda1, 0xffffff7f, 0x10000, 0xffffffc0, 0x8, 0x7, 0xe, 0x8, 0x6, 0x61, 0xc, 0x3ff, 0x60, 0x14a4, 0x0, 0x9, 0x3, 0x6, 0x7, 0xfe, 0xbd, 0x9, 0x5, 0x0, 0x4, 0x9, 0x101, 0x3, 0x2, 0x38c, 0xf2, 0x10, 0x9, 0x9, 0x101, 0x2, 0x9, 0x2, 0x3, 0x7, 0x4, 0x658, 0x3, 0x4, 0x9, 0x0, 0x4, 0x10, 0x7, 0x4, 0x9, 0x2, 0x0, 0x7, 0xa2, 0x4, 0x20, 0x4, 0xf, 0x81, 0x400, 0x5, 0x6, 0x3ff, 0xa, 0x5, 0x5, 0x9, 0x7be9, 0x80, 0x7, 0x2, 0x5, 0xfffffff9, 0x6, 0x8, 0x101, 0x0, 0x3ff, 0x5, 0x1, 0x967b, 0x800, 0x2, 0xff, 0x6, 0x6, 0x4b, 0x1, 0x6, 0x2, 0xef, 0x4, 0x0, 0x1, 0x8, 0x0, 0x7, 0x1, 0x0, 0x80000000, 0x40, 0x6a, 0x7, 0x0, 0x7e08, 0x7ff, 0x4, 0x5, 0x7, 0xb, 0x6, 0x3b, 0xb27, 0xfffffffd, 0x7f, 0x10001, 0x7fff, 0x0, 0x9, 0x3, 0x2, 0x7, 0x200, 0xb, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x7, 0x8001, 0xffffffe0, 0x4, {0x7, 0x2, 0xf75, 0x8, 0x5, 0x6}, {0x6, 0x2, 0x4, 0x10, 0xdf7e, 0x22f}, 0x5, 0x9, 0x1000000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x7, 0x0, 0x0, {0x6, 0x1, 0x5, 0x7, 0x80, 0x4bd}, {0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4}, 0x2, 0x0, 0xfffffff8}}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1000, 0x2, 0x6bef8ec5, 0x8001, 0x80, 0x7fff, 0x8, 0x0, 0x2, 0xffffff00, 0x200, 0x8, 0x6, 0x9, 0xa1d, 0x8, 0x5, 0x2, 0xfffff516, 0x10001, 0x9, 0x7, 0x55, 0x91f0, 0x6, 0x1, 0x101, 0x200, 0x8, 0x3, 0x2005, 0x1, 0x9, 0x2, 0x8, 0x7, 0x6, 0xffffffff, 0x1, 0x4, 0x2, 0x5, 0xf6, 0x4, 0x9, 0x5, 0x0, 0x4, 0x10000, 0xc5, 0x5, 0x0, 0x1, 0x7, 0x9, 0x40, 0x5, 0x811, 0x6, 0x9, 0x4, 0x7, 0x0, 0x1000, 0x8, 0x80000001, 0x4, 0x5, 0x6, 0x705e, 0x10000, 0x7be, 0x8, 0x0, 0x3, 0x77, 0x48c6b50a, 0x8001, 0x4, 0xf, 0x80000000, 0x5, 0x50e3bca5, 0x6, 0x9, 0x3, 0x4, 0x80000000, 0x7, 0x7, 0x586, 0x29, 0x7, 0xe, 0x1, 0x3, 0xf83, 0x1, 0x8001, 0x8, 0x1, 0x2, 0x3, 0x7, 0x6, 0x12c, 0x0, 0x3, 0x8, 0x3, 0x6a, 0x0, 0x3, 0x10000, 0x1, 0x96, 0xff, 0xd02, 0x7ff, 0xfffffff7, 0x6da5, 0x9, 0x4, 0x0, 0x3ff, 0x2, 0xeb4e, 0x1000000, 0x5cc711b4, 0x5, 0x2, 0x9, 0x4, 0x8, 0x8, 0x2, 0x2, 0x0, 0x8, 0x1ff, 0xfffffffc, 0x618, 0x6, 0x7, 0xb, 0x200, 0x0, 0xf3, 0xe4, 0x0, 0x2, 0xfffffffc, 0x101, 0x0, 0x4, 0x3, 0xff, 0x4, 0xe, 0x6, 0x2, 0x8000, 0x1, 0x7, 0x8, 0x3, 0x7ff, 0x6, 0x0, 0x4, 0x2, 0x554cfc2, 0x4, 0x3, 0x6, 0x8, 0x2, 0x9, 0xa1, 0x151, 0x7d, 0x8, 0x3ff, 0x1, 0xbb, 0x0, 0xc82a, 0x1, 0x6, 0xfff, 0x1, 0x0, 0xbe, 0x5, 0xa, 0x7, 0x7fff, 0x4, 0x0, 0x7f, 0x6, 0x5, 0x10001, 0x9, 0x9, 0x1000, 0x7f, 0x0, 0x6, 0x9, 0x9, 0x80000001, 0x6, 0x8001, 0xffffff25, 0x2, 0x2d, 0xb5b, 0x0, 0x9, 0x40000000, 0x6, 0x1, 0x7, 0x3ff, 0x9, 0xb94, 0xae63, 0xb4a, 0x10, 0x34c, 0x3, 0xffffffff, 0xfffffff8, 0x4, 0x8, 0x84, 0xfffffc00, 0xa9d, 0x80, 0x8f, 0x8, 0xa592, 0x1, 0x6, 0x2, 0x6c1, 0x8, 0x100, 0xfff, 0x8, 0x9, 0x100, 0x2, 0x7f]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xeae}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0xa0a5, 0x3, 0x10001, {0x0, 0x1, 0x6, 0xf9e, 0x0, 0xffffff2b}, {0xa, 0x0, 0x552, 0x1, 0x5a5, 0x1}, 0x2, 0x3, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf8e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xfffffffd, 0x0, 0x3, 0x9, 0x7, 0xabc, 0x7fff, 0x1, 0x7fff, 0x12d0, 0x70ba, 0x5, 0x1, 0x6, 0x9, 0x1574, 0x9, 0x8, 0x3, 0x800, 0x1, 0x8000, 0x81, 0x3, 0x3, 0x5d4, 0x100, 0x7, 0x80, 0xe5bd, 0x5, 0x8, 0xb3a, 0x8e, 0x81, 0x9, 0x5, 0x3ff, 0x1, 0x8, 0x9, 0x8, 0x8, 0x0, 0x464e, 0x82b0, 0xbde54e7, 0x8, 0x1a, 0x6, 0x9, 0x100, 0xef, 0x200, 0x5, 0x3, 0x1, 0x3, 0x8, 0x9, 0x80, 0x40, 0x8, 0xd1, 0x6, 0x5, 0x0, 0xa7, 0xd9, 0x4, 0x10000, 0x5, 0x9, 0x2, 0xf, 0x51ba521f, 0x3, 0x6, 0x1, 0x86, 0x0, 0x6, 0x9, 0xfffeffff, 0x6, 0xd, 0x6, 0x5, 0x2, 0x2, 0x10, 0xc, 0x8, 0x5, 0xe, 0x2, 0x7fffffff, 0x1, 0x3, 0xc, 0x9, 0xffff06db, 0x8, 0xfffffff7, 0x22, 0x81, 0x5, 0x62, 0x0, 0x5, 0x8001, 0xd8, 0x2, 0x81, 0xade, 0x1, 0xc0000000, 0x80, 0x60, 0x2, 0x0, 0x8, 0x1c1d, 0x17, 0x7, 0x401, 0x2, 0x8, 0x9, 0x7f, 0xfffffffb, 0x6, 0xfffffff8, 0x8, 0x7, 0x9, 0x3, 0x3ff, 0x8, 0x5, 0x6, 0x5, 0x2, 0x80000001, 0x9, 0x3, 0x200, 0x7, 0x9, 0xc, 0x3, 0x0, 0x7ff, 0x0, 0x8, 0x9, 0x1, 0x0, 0x3ff, 0x7fffffff, 0xffffff94, 0x4, 0x3ff, 0x1, 0x7577b788, 0x101, 0xfffffe01, 0x5, 0x3, 0x9, 0xffff7fff, 0xb, 0xb, 0x83, 0x4, 0x3, 0xfffff000, 0x2, 0x4c8, 0x1be48, 0xc0000000, 0x6d, 0x6, 0x6, 0x6, 0x0, 0x6, 0x8, 0x561c, 0x6, 0x1a, 0x9, 0x9, 0x3, 0x4, 0xe48, 0x5965, 0xff, 0x2, 0x2, 0x8001, 0xfffffffd, 0x7, 0xa0, 0x6, 0x10001, 0x80, 0x4, 0xf9, 0x6, 0x5, 0xc, 0x80, 0x7, 0x2, 0x7, 0x6, 0x10, 0xe, 0xa, 0x3, 0x6, 0x0, 0x5, 0x80, 0x0, 0x0, 0xc029, 0x4, 0x7, 0x0, 0x401, 0x0, 0x38, 0x7ff, 0x0, 0x7, 0xc9, 0x6, 0x3, 0x2, 0xff, 0x9, 0x3, 0x1, 0x3000000, 0x80000001, 0xb, 0x2, 0x9, 0x7fffffff, 0x80000000, 0x10001, 0x80000000, 0xb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x3, 0x1f, 0x80000001, {0x6, 0x0, 0x2, 0xffff, 0x390c, 0x8}, {0xb2, 0x1, 0x77, 0x7d6, 0x8, 0x3}, 0x3, 0x8, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2a3, 0x5, 0x4, 0xfffffffb, 0x16, 0xffff, 0x6, 0x5, 0x9, 0x1, 0x37c, 0x4, 0xc, 0xd1, 0x40, 0xe000000, 0xeb, 0x6, 0xe, 0x1c50, 0x0, 0x1, 0x278bcae1, 0x78, 0xd46, 0x2, 0xb71, 0x0, 0x4, 0x80000001, 0x0, 0x80000001, 0x97, 0x11, 0x7ff, 0x401, 0x0, 0x9, 0x7, 0xffffffff, 0x9, 0x6, 0x78bc, 0x9dd1, 0x8, 0x7fffffff, 0xa, 0x2, 0xc1c, 0x1, 0x41, 0x6, 0x7, 0xffffffff, 0x9, 0x1, 0x35b, 0x8000, 0x5, 0x4, 0x0, 0x7, 0x4, 0x0, 0x7fffffff, 0xc, 0x1, 0x6, 0xffffff81, 0x200, 0x7, 0x6, 0xb, 0xfff, 0x0, 0x9, 0x100, 0x9, 0x5, 0xffffffff, 0x400, 0xb, 0x101, 0x8001, 0x7, 0x1da543dc, 0x4, 0x9, 0x9, 0x5, 0xa23, 0x1, 0x200, 0x200, 0x7, 0x39, 0x6, 0x4, 0x5, 0xd, 0x615, 0x4, 0x86, 0xfffffff8, 0x4, 0x7fff, 0x8, 0x5, 0x6, 0xfffffff7, 0x1, 0x4, 0x9, 0xeac, 0x80, 0x9, 0x0, 0xf, 0x101, 0xf, 0x1, 0x7fffffff, 0x3, 0x0, 0x2b876149, 0x1, 0x8af, 0x7f, 0x6, 0x3, 0x6, 0xffffffff, 0x6, 0xff, 0x8, 0x7ff, 0x9, 0x8, 0x10000, 0x7, 0x0, 0x5c4, 0x2a, 0x9, 0x800, 0xfda3, 0x5, 0x8, 0x4, 0x1, 0xd, 0x7, 0x3, 0x41c6, 0x7, 0x0, 0x200, 0x1, 0x4, 0x7, 0x9, 0x6, 0x6, 0x40, 0x4, 0x1000, 0xf, 0x1, 0x2, 0x4, 0x1, 0x800, 0x1, 0x8f8, 0x3, 0x5, 0xfffffff8, 0xc, 0x6, 0x7fff, 0x8, 0x3, 0x4, 0x5, 0x8, 0x4, 0x6, 0x3ff, 0x81, 0x7, 0x8f2, 0x10000, 0x0, 0xfffffff9, 0xfe2c, 0x800, 0x2, 0x5, 0xafc4, 0x200, 0x8, 0x10000, 0x2, 0x5, 0x2, 0x10000, 0x0, 0xd4, 0xfffffeff, 0x0, 0x7, 0xffffffff, 0x100, 0xb8db, 0x5, 0x3, 0x10000, 0x6, 0x400, 0xb, 0x7ff, 0x7fff, 0x6, 0x1, 0x5, 0x507c, 0x7, 0x2, 0xffffffff, 0x6, 0xa, 0xf, 0x8, 0xe7, 0x1, 0x4, 0x400, 0x7fff, 0x9, 0x0, 0xfc000000, 0x6, 0xc545, 0x0, 0x5, 0x6, 0x1, 0x7fffffff, 0x6c7, 0x4, 0x6, 0x81, 0x33, 0x5, 0x2, 0x8]}]]}, {0x2b, 0x6, "2682564510ff826a13dd7c001892e557fa6fedfeb938d024e0abda001aee8e1cfac3b7da7508b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xbc, 0x13, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x5, 0x1d, 0x9}}, @TCA_DEF_DATA={0x7, 0x3, '**\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x800, 0x10000000, 0x2, 0x7}}]}, {0x57, 0x6, "3909fff795fbddaf5a9612150c83decbfcd5863d47d3e82166ffea303538fd9ae09e60bbbbde8cb42c2f09e3a2b1425c5e7de0bed977ee9511cb5da0aab6083d43974d41fdab0528bb3470a8c645696471740b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xfc, 0x5, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x8, 0x5, 0x7, 0xa0}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x0, 0xffffffffeffffffe, 0x7, 0xf7c}, 0x6d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x93, 0x3, 0x401, 0x54}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa10, 0xb, 0x7, 0x9, 0x1}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x10000000, 0xffff0000, 0x9}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3be, 0x0, 0x8000, 0x8}, 0x5}}]}, {0x22, 0x6, "bc4ee54cd1e3c488857447d0ade4558aab03190a12b87144873adda23c41"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x5f8, 0x1, [@m_tunnel_key={0xf0, 0x19, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x9a, 0x6, "c69b31b865a20d7e21654f85a06c975637cc3b251403523256c529576f309b001a90816a4016c7331d30a9095a9572136efb4c7ea62a609767013f7ab12be42a181d668917f27123c38c3a1a787336c5fa7a6fd822d6221a670a59a1f563dfb3d04dcad91c6bcd1327afb988d7aa3dc2a15c26b6f6d228a4ddb2386a804f77541aa1df72c986b2dadc24f0f7544ab550a19e059cd043"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x180, 0x1c, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x401, 0x1, 0x5, 0x99}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe40, 0xfffff467, 0x8, 0x5, 0x80000000}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5, 0x6, 0xffffffff, 0x8}, 0x2, r8}}]}, {0xf4, 0x6, "b011f95867db050a12b10341bd7ec036190d28b61a3c88c95365113ac4f703a55cfc85b61bdacf9801416fe6d1698363ff37bfaa463cbc3088ef55c96702c04a910272f5f56e4cdf38ea2c84a45b57a9c119c80630d154d9d41f2346e3c4b29513e4c13f2252b50d9d591f02b93973c5c2a84cb9fd4ccaed79e3b63cff43ac82042cf60cb65cd62312fc2c09320f8686a7a8361a01f260eeaf6fde57037c12ac0cab336f04824f2fe8c443607fb429c1ea1329721e8f73e8e908b3846762fabe26fa77da7a764487a669b3cfc3a46cf07d4baa4624fb5ac7e2189fd35f38a8d9e64661899ba9898645628a537527fffa"}, {0xc}, {0xc}}}, @m_mpls={0xdc, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0xb0, 0x6, "305c6cf0117a35d54f8a9a89d4b524826405274be4c533744e6bee72bac7e6e48c2c83c0fb1ef25e3f95e22fbe1abc6191d055dddff6b1a23a12ab8b576528d8cf8e0176765f826acf97fad5fb6f9450581d797c5a14a93d5d6802df2f13adf05fd866c6ceffa4864c3bddc2a03d24f9c6c0524d3d59770dc01754576d65ffa4d302d04ab1af7bc6c11ac311825b7d7b5dc5c7e591978fd15b10db95b52ca6810cd347b1cae56d2ae0a13c9f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x54, 0xa, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3cc7}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xec, 0x1, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff7}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x8, 0x7, 0x4, 0x9}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x1, 0x10000000, 0xfffffff8, 0xffffffaa}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x36, 0x6, "26272c6c2918cee290684d5e9921859c1f43c8d52866282470689836b817fc82bcecec272ce7e2070e8aac7b6b7412fa7416"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x168, 0x0, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x81, 0x3, 0x7, 0xffffffff, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xbf6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xaf}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0xe9, 0x6, "afb8b62907f124beb7a6609390e3067faebabb98b83062124aa5d1d98e354719f1686a0d7af2d8e1d89dd272a1b3b538f58ef6fcdfffaa82a10c150c18f97e6205ef0d673cc8a950bb9b9cf399935d369720438d65ccf77239e2e86792c343d7affea988655d64d452910d0204e45685f2845acef17787e19bd5141a377c0c954f6f2f5ca89c0331b2819301bf9d8e2d405affea2f0ead5d40d53344fe50a118a3149e75184b1a68cb002f4647619dddcf4225d75e463995322670f747053e8c24a380dce90f153dfcf7a09031a40eccaad5db2f7aaf1fb98e0e505dabd2ee9f8fc718096b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x51e8}, 0x1, 0x0, 0x0, 0x8804}, 0x44000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0x40002) ioctl$LOOP_SET_DIRECT_IO(r10, 0x301, 0x7) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r11, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22028219}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r12, 0x4, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x4020003) 3m14.269842848s ago: executing program 1 (id=2172): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 2m58.632172789s ago: executing program 36 (id=2172): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 11.981071103s ago: executing program 5 (id=2558): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) (async) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x84) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r5, 0x540b, 0xfffffffffffeffff) (async) ioctl$TCFLSH(r5, 0x540b, 0xfffffffffffeffff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x3) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x3) rmdir(&(0x7f0000000000)='./file0\x00') (async) rmdir(&(0x7f0000000000)='./file0\x00') r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f0000000340)='/\x00\x01\x00H\x98', 0x0) 9.16380663s ago: executing program 9 (id=2570): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x219, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r2}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x800, 0x0, 0x3}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) io_uring_enter(r3, 0x1a41, 0xe417, 0x1, &(0x7f0000000040)={[0x9]}, 0x8) 9.057007792s ago: executing program 9 (id=2571): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x66ac2) inotify_init() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee4, 0x1000, 0x6, 0x39b, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008080) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 8.16848712s ago: executing program 9 (id=2572): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) 7.882376352s ago: executing program 6 (id=2574): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x800) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x6, 0x7, 0xd326}) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000140)={'syz_tun\x00', @ifru_ivalue=0xbe6d}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r3], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) epoll_create1(0x0) getsockname$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000003c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7d, "dc820c23b44f61"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000013c0)={0x0, r6, "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", "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"}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000023c0)={@private, @multicast2, 0x0}, &(0x7f0000002400)=0xc) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000002440)={r7, 0x1, 0x6, @random="2613369ebba1"}, 0x10) r8 = creat(&(0x7f0000002480)='./file0\x00', 0x80) ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) io_uring_enter(r8, 0xa0c, 0x434b, 0x28, &(0x7f00000024c0)={[0x3]}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000002540)={0x8000000, 0x0, 0x1}) r9 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r9, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002580)=""/232, 0xe8}], 0x1, &(0x7f00000026c0)=""/109, 0x6d}, 0x8}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002740)=""/34, 0x22}, {&(0x7f0000002780)=""/119, 0x77}, {&(0x7f0000002800)=""/193, 0xc1}, {&(0x7f0000002900)=""/219, 0xdb}, {&(0x7f0000002a00)=""/6, 0x6}], 0x5, &(0x7f0000002ac0)=""/139, 0x8b}, 0xe6e}, {{&(0x7f0000002b80)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002c00)=""/30, 0x1e}, {&(0x7f0000002c40)=""/144, 0x90}], 0x2, &(0x7f0000002d40)=""/20, 0x14}, 0xfffffeff}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002d80)=""/107, 0x6b}, {&(0x7f0000002e00)=""/236, 0xec}, {&(0x7f0000002f00)=""/149, 0x95}, {&(0x7f0000002fc0)=""/76, 0x4c}], 0x4, &(0x7f0000003080)=""/229, 0xe5}}, {{&(0x7f0000003180)=@in6, 0x80, &(0x7f0000003240)=[{&(0x7f0000003200)=""/48, 0x30}], 0x1, &(0x7f0000003280)=""/29, 0x1d}, 0x2}, {{&(0x7f00000032c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003340)=""/99, 0x63}, {&(0x7f00000033c0)=""/15, 0xf}, {&(0x7f0000003400)=""/247, 0xf7}, {&(0x7f0000003500)=""/121, 0x79}], 0x4, &(0x7f00000035c0)=""/72, 0x48}, 0x7f}, {{&(0x7f0000003640)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000036c0)=""/85, 0x55}, {&(0x7f0000003740)=""/225, 0xe1}, {&(0x7f0000003840)=""/120, 0x78}], 0x3, &(0x7f0000003900)=""/233, 0xe9}, 0x2}, {{&(0x7f0000003a00)=@generic, 0x80, &(0x7f0000004d40)=[{&(0x7f0000003a80)=""/29, 0x1d}, {&(0x7f0000003ac0)=""/162, 0xa2}, {&(0x7f0000003b80)=""/238, 0xee}, {&(0x7f0000003c80)=""/191, 0xbf}, {&(0x7f0000003d40)=""/4096, 0x1000}], 0x5, &(0x7f0000004dc0)=""/4096, 0x1000}, 0x60f63aa0}], 0x8, 0x0, &(0x7f0000005fc0)) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000006000)={{0x2, 0x7}, 0x100, './file0\x00'}) syz_emit_ethernet(0x56, &(0x7f0000006140)={@empty, @empty, @void, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0x39, 0x2, 0x0, 0x0, "4176adb3a75f353bbd3bae8ca7c9b7ba82aa9dcb6131e48acf4c17980d65440cbee7cafbaa8bd6c4931937483c4b34aadf8f5393f5b906286abf791be6454fe7"}}}}, &(0x7f00000061c0)={0x0, 0x1, [0x0, 0xd7c, 0x826, 0x3ed]}) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000006200), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000006240)={0x0, 0xffffffff, 0x3}) sendmsg$inet_sctp(r8, &(0x7f0000008800)={&(0x7f0000006280)=@in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f00000086c0)=[{&(0x7f00000062c0)="babddb7eecb526dbc2c41577cef098f6f9b70d85f205598ff6976a63b3ff2783f4155a4d610d7f6796531fc2e97876e4d9d51b60d7bc5048f2c923901da063c22a826d402f0e1493ffd31a45acbd0b5c7a2d8c5788ebcfc8d3", 0x59}, {&(0x7f0000006340)="e70c574ea705d36aa15d098a9f7e46abc3142598147fbc0c29474515ade0e7c4048833f6553beec4b0fbc859a5b755b879c6c8e9fafae70e1e0f4b6c5956dcf85c19c1b755b4fa80c670ba5437b26b22937df0f06daa4c9f1164d181f7416fcdf2caaa6f62c3b21b31ca66b1805ccaf87a6f544e720bb16231a6fa6a01492d4c95355144b797bd0459a44f2f91b45b4fd960dc23bae8e1ce83c4a56a3f826e82e9a279b04a106953f5bbe46b6048adc7d9892d06d1def39e68d8bad326d17079d92643eee2d2ed2a2986a88c6ee5c8012278fdf05df185b027bfc43c9f509d", 0xdf}, {&(0x7f0000006440)="881d31114b9650662f2ed3bdf18cf118330d670ab3818b81118e730dee0107d505a33aed6ca33d0cdfe17b83bfcc155d095e9801f86ad78ef84dcade547501a55cf1ebbb305aae711b2d99404d758de653756c02", 0x54}, {&(0x7f00000064c0)="e53685955344fd8131804a9497c64940029a1ab970eeea5ea0267f9e1fb0a40b9d354d6d", 0x24}, {&(0x7f0000006500)="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", 0x1000}, {&(0x7f0000007500)="07f62fb50ddb389927f3f5c98cdaa1eedf68e3ef9fea2e8d47899245c7486d0cf4b26cb6f8da43abbd0cf08a318fb9432243de23a86e1e14a1700f45b6c9510c17c2778dbdcf9386", 0x48}, {&(0x7f0000007580)="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", 0x1000}, {&(0x7f0000008580)="bf40837866f541f26d946572cf2c39159b8b456f30f5054867828dffa176c9b91db436b3cd96bb02521da30b58e6e81f2b9037b3084cfaff1f3f75b0342394ac8ccc169acc92530620b24438a9598dce873ff146f44e928a22b6e1a1c320b7ebac3305f4823c85e4a4066840333587e387764df1088924d548535100973750698349e07d0c0815e54eb4495de17b82f4bd4bf320313b5e201323277e5d355be90c298cd272e5d2300db4ec", 0xab}, {&(0x7f0000008640)="624bd4e22a433227e7d19e568e8c1d98784144189e91ecff82d4d139171fbdf4ac44282813c9c8921489ba8fd5528929633622edf4522d473ad9eef69af420267fcc6e9193ac80a931b4252c754e83ad3918632058e2d1f7472e1541b08f17225da0493fb72687c675853edf711d25a5428d1145a9c2c8f4b01013e37d3f595b", 0x80}], 0x9, &(0x7f0000008780)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x22b}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x80, 0xc040}, 0x4000000) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000008840), 0x600, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000008880)={0x0, 0x71, "d45a21af4f6d5e936f4ae91a9fab0b7a5b15efec99a85859e4bde4f35fe1f3d9da059f78f885567f294928f2ec7d183dc294ad78d39c4855b320be2bcd2b6c13d86638287232240664ef6556c145bf59984d079d37fdc384f8f81d26ddc350169d1af0f0543dd45514292addf3da9a3c45"}, &(0x7f0000008900)=0x79) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000008940)={r12, 0x9}, &(0x7f0000008980)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f00000089c0), 0x1c1002, 0x0) 7.818418896s ago: executing program 7 (id=2575): recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x8}], 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)=[{0x18, 0x4000, 0x0, 0x0}, {0x642e, 0x6a01, 0x1b, &(0x7f00000001c0)="35c5494b3bad284a421b83aaf8314160e66e2db430ae012f6462dd"}], 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x840, &(0x7f0000000200)={0x0, 0xac34, 0x800, 0x1, 0xda}, &(0x7f00000000c0), &(0x7f0000000280)) r1 = socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) r3 = getpid() prlimit64(r3, 0xe, &(0x7f00000000c0)={0x88, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_unix(0x0, 0x0, 0x0, 0x802ca2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24040800) listen(r2, 0x2000fff) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7.605924564s ago: executing program 5 (id=2577): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x6f, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0x5, {0x5, 0xf, "60d411"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904620000d1d8a3ff72699780f01ae70d3676cd8af1eb2b7cc1e3e31da5f7ad"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/88) 6.872947402s ago: executing program 6 (id=2579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90c0}, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="5c0b00000084cca45b714722a11cea23bfaff2080000000001000109000000000000000000c204000000030730000000010a1cede40800000000000000080000000000000002000000000000000100316edfba0d667060ecd094d44b02d1000000000000020000005c9babc5731b1702596cd09d5999c25c21740e5b0cee06a7537fc1c4f1a1c961dfb1972d1bd3cff4d51464a925ac97afa345892b35a22823ad01d65f898d"], 0x68) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0x5df0, 0x20000, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x2, &(0x7f0000000240)=0x38000002, 0x4) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)) recvfrom(r8, 0x0, 0x0, 0x40002050, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0025040000000800090038eac21a00"/28], 0x1c}}, 0x20000000) 6.476523104s ago: executing program 6 (id=2581): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) 5.285818601s ago: executing program 5 (id=2583): syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0xffffffffffffffff, 0x380502) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f0000000300)=[{0x101, 0xa800, 0x0, 0x0}, {0xff7d, 0x10, 0x0, 0x0}], 0x2}) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8], 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0xffffffffffffffff, 0x380502) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f0000000300)=[{0x101, 0xa800, 0x0, 0x0}, {0xff7d, 0x10, 0x0, 0x0}], 0x2}) (async) 5.177203944s ago: executing program 8 (id=2584): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000fffffffffffffff902000000000000000000000004"], 0x0, 0x56}, 0x28) 5.108468112s ago: executing program 8 (id=2585): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000005600000066ba2100b066ee"], 0x56}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xfe, 0x4, 0x0, 0x0, @adapter={0x8001, 0x8, 0x6, 0x0, 0x2}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x0) 5.055706133s ago: executing program 9 (id=2586): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="b2", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000002cc0)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x440, 0x100) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x1c4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000480)=@assoc_value, &(0x7f0000000280)=0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x81, 0xfffffffd, 0x68, 0x84, 0xfffffffffffffffe, 0x0, 0x1}, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000380)=[0x747, 0x1, 0x0, 0xfff, 0x402, 0x7, 0x4], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.689248001s ago: executing program 7 (id=2587): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.688598811s ago: executing program 5 (id=2588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r3, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r3, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00004b2000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1ff, 0x4, 0x3000, 0x2000, &(0x7f000060b000/0x2000)=nil, 0x2}) 4.494319191s ago: executing program 5 (id=2589): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x20, 0x18, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x40, 0xe, 0x2, "1dd4"}, 0x0, 0x0, 0x0, 0x0}) 4.115052411s ago: executing program 8 (id=2590): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(0xffffffffffffffff, 0x221, 0x8, r0, 0x0) 4.02956998s ago: executing program 8 (id=2591): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r6, 0x1, 0x2, &(0x7f0000000380)=[{}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r7, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xd, 0x9}}, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x80, 0x1300) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.272689589s ago: executing program 6 (id=2592): socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000440), 0x1, 0x2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x20, 0xdc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@timestamp={0x44, 0x4, 0x7f, 0x0, 0x9}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0xfffffffc, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x4000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 3.263775792s ago: executing program 9 (id=2593): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x480) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = eventfd(0x5) r4 = eventfd2(0x6, 0x80001) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000001c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000000)={0x1, 0xca}, 0x2) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000240)={0x28, 0x2, 0x0, r9, 0x3, 0x9, 0x4}) r10 = syz_open_dev$audion(&(0x7f00000002c0), 0x6, 0x202000) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r12 = eventfd(0x401) io_submit(r1, 0x7, &(0x7f00000006c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000000)="b446ecc80d85c0676f0e17b16eb47098e9aea4", 0x13, 0xe, 0x0, 0x3, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000140)="d07f8ff9a69cf46af12c53c721c2f3dfc11a157c12a3772c9375470ba328004f4921a9f05086860d0862bd9ab33b76222ab86ca9edc80d353d006fba93d50caafa46b8748361220e53145eb6d92477332dcbe29be17d3dff300ad23aaa5e4d631da1bd8bcc998b4fde7599bcc913cd1530a517ab37c527e063c2c911622049fff14895707af96fed475a5080d3eede442385", 0x92, 0x1, 0x0, 0x4, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x100, r0, &(0x7f0000000240)="4103aea800827acf8a86e2d8bb1f80bfc72ee77b106f94c916d1e5e5b8309e44fabe21ce1bf56d6186318ae47d691ff874d18312bc5ff605120801213afd890b7a895d7c404d9f02061d19", 0x4b, 0x0, 0x0, 0x2, r10}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0xe, r0, &(0x7f0000000340)="a8b868acb47ace1ed3bd246b5efd64e6a41b7a94bd506b74e640c23445c9ba72b8a8e9a477387216101bc9c8d27b7bb3e8acd38ee23664b0fec11dd81e709cc5f9abd7d5b31df35de2d17b7cdbe8e18c9f20569a2b76aacbbee3c5c22bd7e27c3429cf29fb79265f2dc3b2d4666b337ccc639ecb93fa04948193be0d745569f0388feb6eb81887d15af12ec0e846ee6702c11f7bf2090f910d2b8b3d389ec1457fca79eca78f46cc6dd6", 0xaa, 0x54, 0x0, 0x3, r11}, 0xfffffffffffffffc, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xd6ad, r0, &(0x7f0000000480)="cc32f0b750fd755c51108011b01df084e6ba0b777f5b7b76ddb8a75db0b1b2ebd9357d07fedb7cbc4055afa7933626714500b8b6249a1ff60c8fcbf7b724aa733b5a44d56613948a5507bc9934d3bd65b6", 0x51, 0x4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x4a9b, r0, &(0x7f0000000540)="bef0b21880c27b2a289be341350fb1f48b86e6d9ca1e8d98b81ed3427c9b4f4f16a9ff0b6b0a78b625903895ed7ec5b8979a6d2029982c865372f62c7bd787227e20dea697a57d3f68341cbb3f23088fee584a568ff5eb78fcd8677b0b11277c056905824acb7ecb052f09a71e7d2d5f599e9968245cee54c00ce93e724d57c2f5101cd3ab92a8f6dbbeb197835a7e5f9774ea72069b3fe3f04f05268895984f7122f3c4be7fb4ae0026e5c68c2e37f639414f62eb420789276decbc01a7689d24c6d0a927bc5c483967f5e18fc44177e9a41d41a0faa27cf903c39c261425542c33d5e141c9", 0xe6, 0x40, 0x0, 0x2, r12}]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x9c}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r13, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000800)=[@textreal={0x8, &(0x7f0000000740)="baf80c66b8dc6c738a66efbafc0c66b80400000066efdc560066b96709000066b80000000066ba000000800f30baf80c66b8c41ba68366efbafc0cb00dee660f3a0fae00302e0f6fba931f0f07b800008ec02636b80000672e653e0f30", 0x5d}], 0x1, 0x38, &(0x7f0000000880)=[@cr4={0x1, 0x2}], 0x1) 2.96531881s ago: executing program 8 (id=2594): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, "23f50000adb4004408020e90d1beaa82dc1ecf", 0x3}) ioctl(0xffffffffffffffff, 0x8b22, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$loop(0x0, 0x8f, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x7) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x80800) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0x1, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x502, 'syz0\x00', 0x0}) 2.874682379s ago: executing program 6 (id=2595): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x20, 0x18, 0x1, "a3"}, 0x0, 0x0, 0x0, 0x0}) 2.22984663s ago: executing program 8 (id=2596): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) 2.203515242s ago: executing program 9 (id=2597): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4106, 0x100a, 0x4b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x5, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c1) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000100)={0x0}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f0000001040)={0x40, 0x18, 0x1, "a3"}, 0x0, 0x0, 0x0, 0x0}) 1.685570413s ago: executing program 7 (id=2598): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c00fbff0000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) 1.605893625s ago: executing program 7 (id=2599): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000005600000066ba2100b066ee"], 0x56}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xfe, 0x4, 0x0, 0x0, @adapter={0x8001, 0x8, 0x6, 0x0, 0x2}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x0) 1.383667195s ago: executing program 5 (id=2600): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) lsm_list_modules(&(0x7f0000000000)=[0x0], &(0x7f0000000080)=0x8, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)={0x40, 0x0, 0x3, "54b93f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 660.326399ms ago: executing program 7 (id=2601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x855c81b}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x3e0, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="f38b6c267464"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x10}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1ac, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, "52846d3d7cba05fd"}, @NL80211_BAND_6GHZ={0x86, 0x3, "09870452fb84b42fdbc34e170cb99a9da65dbafc215d17f6709c966d23f387bdcc9736a0538d6ae5a05d9c70103d1bd35637e8dcfa70cb3eecf1f093a463c8936030b6bb7857623fb00654039cd5ffc988f04838389a18902db79cfdbca287beb61a1ce1b3e50eb9c163ce479a4e1364be11e063a582cc8eafdf0598e9dc44afff3b"}, @NL80211_BAND_6GHZ={0x18, 0x3, "47194df09491019e136ddac9513d6d376abb9c6b"}, @NL80211_BAND_5GHZ={0x3a, 0x1, "d83120208d5856d320de5790cd02eaf075f8cbe674d88a072c166d5f45c95c8055214c24340d650d5a1b2aeb8444c838b3fd0249718b"}, @NL80211_BAND_5GHZ={0xbd, 0x1, "c500f0e9b74f857f70ded58902281128968e3ca3a6def687c908338f6191a1ecfd116ffac3869c136536499a55fe65029826d8dd03259eba103d7abd3fa52e28bb886a07d75687774659cfd53b3391838c203300676d65148a010fb73fbe51f98ceda17549174d46f3f4482481ab26552e3a437c331cfadad1a964de8549032dcde83d031a9fe43651251749e423ade3b669b1d7bc208736c7b6582b12f6b7ab33b79dc4ef08e673540aa8ec2c24b8863a71b519a3a554fecc"}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x21, 0x2a, [@chsw_timing={0x68, 0x4, {0x1, 0xe}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @link_id={0x65, 0x12, {@from_mac}}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x1a9, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x40, 0x2, @device_b, 0x9e1, @value=@broadcast, 0x0, 0x2000000, @device_b, 0x10001}}, @random={0x9, 0x5c, "ddcf3369544e907640e2c1c5605d158169130640a6b0747017763e027a0c6628024aca95946e4b404e365c090b86d3437ccc5e93437dfbdc3b344287ecd5dcb482e6cd0db33e671ab423bf87bbfcf320bbf5f3f9b754ca01f8f1203d"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x81, 0x1}}, @random={0x2, 0xf3, "ea78b2b141fb9980d18781199ba16cd41cfcb73e7de0221abb5f163aa7682c4307348c2e20c6838f1cdd726cb570419b2c90dbdafba74e3fde96af2af4155ea26fe153843262aafba833c93406b08ec5a4116624b93b1eee09904c1413869dfd8fcb55165c5d5ebccf51c9c49e8dc95f8258ad0bda136e06bc1af75f24cd452c343bc26901470ed832c0a3dedde969278ccae582d524d0592c6590abf03afdc797dddfd7789e118592c54cd3336683ad18c3eed9b1c4366a99146c6bf1268dac033a086f4d43845129a7fa0590b5b97a96caba004a93471fa3ed9098b016c56d6ee8b1ec846aac5924babe27357b1d4e87b343"}, @mic={0x8c, 0x18, {0x8d3, "dd2439f42b1f", @long="c0bf21fe379def306ca6f9667c45a626"}}, @gcr_ga={0xbd, 0x6}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4001}, 0x10) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000540)={0x72, @tick=0x4, 0xb4, {0x0, 0xfe}, 0x0, 0x0, 0x5}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03032abd7000937449250a0000f508"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r9, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r10, @ANYBLOB="000096000a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') 453.33571ms ago: executing program 7 (id=2602): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=2603): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b1a0100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x44, &(0x7f0000000a00)={[{0x3d, 0x4e00, "d13eeb64962f49e1bd834f5028461b9026a675c02ae969b5e251bfa42f0b37236736bfc7276547f3ae91d48127e83544487eeafa27bfed40ef281a4947"}]}) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800600180000003f0005001600020000c304001200050017"], 0x54}}, 0x20040080) kernel console output (not intermixed with test programs): be with driver cx231xx failed with error -71 [ 818.652215][ T5901] usb 7-1: USB disconnect, device number 12 [ 818.683895][ T5939] usb 9-1: Using ep0 maxpacket: 8 [ 818.696350][ T5939] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 818.705918][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.715850][ T5939] usb 9-1: Product: syz [ 818.720203][ T5939] usb 9-1: Manufacturer: syz [ 818.725834][ T5939] usb 9-1: SerialNumber: syz [ 818.733245][T14562] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 818.734268][ T5939] usb 9-1: config 0 descriptor?? [ 818.915620][T14562] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.930654][T14562] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.955598][ T5939] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 818.959560][T14562] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.002669][T14562] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 819.021383][T14562] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 819.044346][T14562] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.054786][T14562] usb 10-1: config 0 descriptor?? [ 819.193618][ T5901] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 819.375254][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 819.381948][ T5901] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.396041][ T5901] usb 7-1: config 0 has no interface number 0 [ 819.402168][ T5901] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 819.413114][ T5901] usb 7-1: config 0 interface 1 has no altsetting 0 [ 819.421859][ T5901] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 819.433688][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.441709][ T5901] usb 7-1: Product: syz [ 819.447051][ T5901] usb 7-1: Manufacturer: syz [ 819.451671][ T5901] usb 7-1: SerialNumber: syz [ 819.467407][ T5901] usb 7-1: config 0 descriptor?? [ 819.481478][T14562] keytouch 0003:0926:3333.003D: fixing up Keytouch IEC report descriptor [ 819.513617][T14562] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.003D/input/input91 [ 819.641558][T14562] keytouch 0003:0926:3333.003D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 819.689723][T14862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.702363][ T5901] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 819.723112][ T5901] cx231xx 7-1:0.1: Failed to read PCB config [ 819.723557][T14862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.735715][ T5901] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -32 [ 819.767193][ T5901] usb 7-1: USB disconnect, device number 13 [ 819.885864][T14562] usb 10-1: USB disconnect, device number 3 [ 820.041890][T13245] usb 6-1: USB disconnect, device number 6 [ 820.188762][ T30] audit: type=1400 audit(1752808537.996:742): avc: denied { node_bind } for pid=14906 comm="syz.5.2239" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 820.261363][ T30] audit: type=1400 audit(1752808538.066:743): avc: denied { setopt } for pid=14906 comm="syz.5.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 820.789199][T14926] Cannot find del_set index 0 as target [ 821.291926][ T5939] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 821.633602][ T5939] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 822.613533][ T5939] usb 7-1: device descriptor read/64, error -71 [ 822.828157][T14520] usb 9-1: USB disconnect, device number 14 [ 822.963539][ T5939] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 823.124998][ T5939] usb 7-1: device descriptor read/64, error -71 [ 823.246701][ T5939] usb usb7-port1: attempt power cycle [ 823.583678][T14974] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 823.608550][T14974] binder: BINDER_SET_CONTEXT_MGR already set [ 823.622519][T14974] binder: 14958:14974 ioctl 4018620d 200000000040 returned -16 [ 823.633092][T13245] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 823.693233][ T5939] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 823.724716][ T5939] usb 7-1: device descriptor read/8, error -71 [ 823.885663][T13245] usb 10-1: Using ep0 maxpacket: 16 [ 823.895376][T13245] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 823.908264][T13245] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.947561][T13245] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 823.963343][ T5939] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 824.011886][T13245] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 824.013988][ T5939] usb 7-1: device descriptor read/8, error -71 [ 824.043046][T13245] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.068587][T13245] usb 10-1: config 0 descriptor?? [ 824.100510][T13245] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input92 [ 824.161805][ T5939] usb usb7-port1: unable to enumerate USB device [ 824.364661][T14968] wg1 speed is unknown, defaulting to 1000 [ 824.545765][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2248'. [ 824.567848][T14968] input: syz0 as /devices/virtual/input/input93 [ 825.114252][ T30] audit: type=1400 audit(1752808542.929:744): avc: denied { read } for pid=14989 comm="syz.6.2250" name="file1" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 825.159113][ T30] audit: type=1400 audit(1752808542.949:745): avc: denied { open } for pid=14989 comm="syz.6.2250" path="/18/file0/file1" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 825.640334][T15015] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 826.615329][ T5940] usb 10-1: USB disconnect, device number 4 [ 826.723500][ T30] audit: type=1400 audit(1752808544.539:746): avc: denied { listen } for pid=15027 comm="syz.7.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 827.043746][T15035] Device name cannot be null; rc = [-22] [ 829.111749][T15071] syzkaller1: entered promiscuous mode [ 829.152724][T15071] syzkaller1: entered allmulticast mode [ 829.866719][T15088] FAULT_INJECTION: forcing a failure. [ 829.866719][T15088] name failslab, interval 1, probability 0, space 0, times 0 [ 829.879459][T15088] CPU: 1 UID: 0 PID: 15088 Comm: syz.8.2266 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 829.879485][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 829.879495][T15088] Call Trace: [ 829.879503][T15088] [ 829.879510][T15088] dump_stack_lvl+0x16c/0x1f0 [ 829.879542][T15088] should_fail_ex+0x512/0x640 [ 829.879573][T15088] should_failslab+0xc2/0x120 [ 829.879592][T15088] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 829.879619][T15088] ? skb_clone+0x190/0x3f0 [ 829.879640][T15088] skb_clone+0x190/0x3f0 [ 829.879772][T15088] netlink_deliver_tap+0xabd/0xd30 [ 829.879799][T15088] netlink_unicast+0x62f/0x850 [ 829.879824][T15088] ? __pfx_netlink_unicast+0x10/0x10 [ 829.879853][T15088] netlink_sendmsg+0x8d1/0xdd0 [ 829.879877][T15088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.879907][T15088] ____sys_sendmsg+0xa95/0xc70 [ 829.879930][T15088] ? copy_msghdr_from_user+0x10a/0x160 [ 829.879957][T15088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.879980][T15088] ? __lock_acquire+0xb8a/0x1c90 [ 829.880000][T15088] ? find_lowest_rq+0x17c/0x710 [ 829.880030][T15088] ___sys_sendmsg+0x134/0x1d0 [ 829.880058][T15088] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.880083][T15088] ? __lock_acquire+0x622/0x1c90 [ 829.880132][T15088] __sys_sendmsg+0x16d/0x220 [ 829.880159][T15088] ? __pfx___sys_sendmsg+0x10/0x10 [ 829.880203][T15088] do_syscall_64+0xcd/0x4c0 [ 829.880222][T15088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.880241][T15088] RIP: 0033:0x7f688eb8e929 [ 829.880257][T15088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.880274][T15088] RSP: 002b:00007f688f9f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.880291][T15088] RAX: ffffffffffffffda RBX: 00007f688edb6160 RCX: 00007f688eb8e929 [ 829.880303][T15088] RDX: 0000000002000000 RSI: 0000200000000300 RDI: 000000000000000a [ 829.880313][T15088] RBP: 00007f688f9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 829.880324][T15088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.880334][T15088] R13: 0000000000000000 R14: 00007f688edb6160 R15: 00007ffc5b779718 [ 829.880359][T15088] [ 830.100230][T15086] x_tables: ip_tables: osf match: only valid for protocol 6 [ 830.233148][ T30] audit: type=1400 audit(1752808548.019:747): avc: denied { create } for pid=15081 comm="syz.5.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 830.804478][T14325] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 830.813321][T14325] Bluetooth: hci1: Injecting HCI hardware error event [ 830.822132][T14325] Bluetooth: hci1: hardware error 0x00 [ 830.833053][ T30] audit: type=1400 audit(1752808548.019:748): avc: denied { listen } for pid=15081 comm="syz.5.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 830.877024][ T30] audit: type=1400 audit(1752808548.019:749): avc: denied { accept } for pid=15081 comm="syz.5.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 831.233351][T13245] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 831.693321][T13245] usb 9-1: Using ep0 maxpacket: 16 [ 831.715689][T13245] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 831.735686][T13245] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.786898][T13245] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.836320][T13245] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 831.875755][T13245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.930751][T13245] usb 9-1: config 0 descriptor?? [ 831.982287][T13245] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input94 [ 832.124497][ T10] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 832.214799][T15122] binder: BINDER_SET_CONTEXT_MGR already set [ 832.220833][T15122] binder: 15121:15122 ioctl 4018620d 200000000040 returned -16 [ 832.425923][ T10] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 832.437773][ T10] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 832.453374][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.461489][ T10] usb 7-1: Product: syz [ 832.627833][ T10] usb 7-1: Manufacturer: syz [ 832.638196][ T10] usb 7-1: SerialNumber: syz [ 832.651694][ T10] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 832.864814][T14562] usb 9-1: USB disconnect, device number 15 [ 833.153162][T14325] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 833.169931][ T10] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 833.483902][ T7412] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 833.658298][ T7412] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.686352][ T7412] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 833.699161][ T7412] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 833.716712][ T7412] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.739160][ T7412] usb 9-1: config 0 descriptor?? [ 833.777875][ T7412] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 833.793369][ T5894] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 833.819031][ T7412] dvb-usb: bulk message failed: -22 (3/0) [ 833.851289][ T7412] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 833.887668][ T7412] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 833.911802][ T7412] usb 9-1: media controller created [ 833.935093][ T7412] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 833.957717][ T5894] usb 10-1: Using ep0 maxpacket: 8 [ 833.970778][ T7412] dvb-usb: bulk message failed: -22 (6/0) [ 833.988608][ T5894] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 834.005252][T15137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.027807][ T7412] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 834.032167][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.052825][T15137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.070978][ T7412] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input95 [ 834.081913][ T5894] usb 10-1: config 0 descriptor?? [ 834.136357][ T7412] dvb-usb: schedule remote query interval to 150 msecs. [ 834.146833][ T7412] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 834.169119][ T7412] usb 9-1: USB disconnect, device number 16 [ 834.249322][ T7412] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 834.316414][ T5894] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 834.344645][ T5894] asix 10-1:0.0: probe with driver asix failed with error -32 [ 834.857738][ T5894] usb 7-1: USB disconnect, device number 18 [ 834.933219][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 834.961330][T15183] fuse: Bad value for 'group_id' [ 834.968736][T15183] fuse: Bad value for 'group_id' [ 835.114886][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 835.135925][ T10] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 835.153946][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.171913][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.189896][ T10] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 835.338188][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.366898][ T10] usb 9-1: config 0 descriptor?? [ 835.433988][T15191] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2284'. [ 835.694484][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input96 [ 835.827088][T15193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.843630][T15193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.886149][T14562] usb 9-1: USB disconnect, device number 17 [ 835.892108][ C1] pxrc 9-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 835.964550][T14690] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 836.108898][T14592] udevd[14592]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 836.500632][T15214] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 836.513376][ T5894] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 836.673019][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 836.686375][ T5894] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 836.699327][ T5894] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.778119][T13245] usb 10-1: USB disconnect, device number 5 [ 836.818127][ T5894] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 836.857152][ T5894] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 836.888548][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.898493][ T5894] usb 7-1: Product: syz [ 836.902721][ T5894] usb 7-1: Manufacturer: syz [ 836.933360][ T5894] usb 7-1: SerialNumber: syz [ 837.373311][T14562] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 837.512837][T15239] wg1 speed is unknown, defaulting to 1000 [ 837.616377][T14562] usb 10-1: Using ep0 maxpacket: 32 [ 837.621947][ T5894] usb 7-1: 0:2 : does not exist [ 837.640875][T14562] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 837.669288][T14562] usb 10-1: config 0 has no interface number 0 [ 837.678202][T14562] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 837.700831][T14562] usb 10-1: config 0 interface 1 has no altsetting 0 [ 837.747446][T14562] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 837.773056][T14562] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.791598][T14562] usb 10-1: Product: syz [ 837.822392][T14562] usb 10-1: Manufacturer: syz [ 837.832589][T14562] usb 10-1: SerialNumber: syz [ 837.845393][T14562] usb 10-1: config 0 descriptor?? [ 838.013195][ T5894] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 838.031081][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2294'. [ 838.061204][ T5894] usb 7-1: USB disconnect, device number 19 [ 838.078938][T14562] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 838.108696][T14562] cx231xx 10-1:0.1: Failed to read PCB config [ 838.138207][T14562] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -71 [ 838.187149][T14562] usb 10-1: USB disconnect, device number 6 [ 838.588315][T15262] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 839.073328][ T7412] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 839.233835][ T7412] usb 10-1: Using ep0 maxpacket: 32 [ 839.242489][ T7412] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 839.266764][ T7412] usb 10-1: config 0 has no interface number 0 [ 839.346973][ T7412] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 839.376095][ T7412] usb 10-1: config 0 interface 1 has no altsetting 0 [ 839.385079][ T7412] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 839.558828][T15273] FAULT_INJECTION: forcing a failure. [ 839.558828][T15273] name failslab, interval 1, probability 0, space 0, times 0 [ 839.571844][T15273] CPU: 1 UID: 0 PID: 15273 Comm: syz.7.2297 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 839.571869][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 839.571879][T15273] Call Trace: [ 839.571886][T15273] [ 839.571893][T15273] dump_stack_lvl+0x16c/0x1f0 [ 839.571925][T15273] should_fail_ex+0x512/0x640 [ 839.571952][T15273] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 839.571982][T15273] should_failslab+0xc2/0x120 [ 839.572000][T15273] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 839.572027][T15273] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 839.572056][T15273] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 839.572085][T15273] idr_get_free+0x528/0xa30 [ 839.572120][T15273] idr_alloc_u32+0x190/0x2f0 [ 839.572147][T15273] ? __pfx_idr_alloc_u32+0x10/0x10 [ 839.572182][T15273] tcf_idr_check_alloc+0x136/0x770 [ 839.572205][T15273] ? find_held_lock+0x2b/0x80 [ 839.572228][T15273] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 839.572254][T15273] ? __nla_parse+0x40/0x60 [ 839.572277][T15273] tcf_police_init+0x22f/0x1510 [ 839.572307][T15273] ? __pfx_tcf_police_init+0x10/0x10 [ 839.572347][T15273] ? tcf_action_init_1+0x2d2/0x6c0 [ 839.572376][T15273] ? __asan_memcpy+0x3c/0x60 [ 839.572403][T15273] tcf_action_init_1+0x45d/0x6c0 [ 839.572431][T15273] ? __pfx_tcf_action_init_1+0x10/0x10 [ 839.572475][T15273] tcf_action_init+0x432/0xa50 [ 839.572509][T15273] ? __pfx_tcf_action_init+0x10/0x10 [ 839.572531][T15273] ? __lock_acquire+0xb8a/0x1c90 [ 839.572568][T15273] ? finish_task_switch.isra.0+0x221/0xc10 [ 839.572592][T15273] ? lockdep_hardirqs_on+0x7c/0x110 [ 839.572617][T15273] ? finish_task_switch.isra.0+0x221/0xc10 [ 839.572668][T15273] ? __lock_acquire+0x622/0x1c90 [ 839.572687][T15273] tcf_action_add+0xee/0x5c0 [ 839.572716][T15273] ? __pfx_tcf_action_add+0x10/0x10 [ 839.572781][T15273] ? __nla_parse+0x40/0x60 [ 839.572804][T15273] tc_ctl_action+0x35b/0x470 [ 839.572829][T15273] ? __pfx_tc_ctl_action+0x10/0x10 [ 839.572863][T15273] ? __pfx_tc_ctl_action+0x10/0x10 [ 839.572889][T15273] rtnetlink_rcv_msg+0x3c9/0xe90 [ 839.572910][T15273] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 839.572926][T15273] ? __lock_acquire+0xb8a/0x1c90 [ 839.572957][T15273] netlink_rcv_skb+0x158/0x420 [ 839.572975][T15273] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 839.572993][T15273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.573008][T15273] ? rcu_is_watching+0x12/0xc0 [ 839.573044][T15273] netlink_unicast+0x58a/0x850 [ 839.573066][T15273] ? __pfx_netlink_unicast+0x10/0x10 [ 839.573093][T15273] netlink_sendmsg+0x8d1/0xdd0 [ 839.573118][T15273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.573163][T15273] ____sys_sendmsg+0xa95/0xc70 [ 839.573186][T15273] ? copy_msghdr_from_user+0x10a/0x160 [ 839.573213][T15273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.573247][T15273] ___sys_sendmsg+0x134/0x1d0 [ 839.573272][T15273] ? irqentry_exit+0x3b/0x90 [ 839.573300][T15273] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.573324][T15273] ? __lock_acquire+0x622/0x1c90 [ 839.573379][T15273] __sys_sendmsg+0x16d/0x220 [ 839.573407][T15273] ? __pfx___sys_sendmsg+0x10/0x10 [ 839.573451][T15273] do_syscall_64+0xcd/0x4c0 [ 839.573470][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.573489][T15273] RIP: 0033:0x7f614ed8e929 [ 839.573504][T15273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.573521][T15273] RSP: 002b:00007f614cbb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.573538][T15273] RAX: ffffffffffffffda RBX: 00007f614efb6160 RCX: 00007f614ed8e929 [ 839.573550][T15273] RDX: 0000000002000000 RSI: 0000200000000300 RDI: 000000000000000a [ 839.573561][T15273] RBP: 00007f614cbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 839.573572][T15273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.573583][T15273] R13: 0000000000000000 R14: 00007f614efb6160 R15: 00007ffeb6ba9428 [ 839.573607][T15273] [ 839.956181][T15271] x_tables: ip_tables: osf match: only valid for protocol 6 [ 840.099259][ T7412] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.256451][ T7412] usb 10-1: Product: syz [ 840.293462][ T5894] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 840.376414][ T7412] usb 10-1: Manufacturer: syz [ 840.414731][T15289] netlink: 'syz.9.2301': attribute type 1 has an invalid length. [ 840.424641][T15289] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2301'. [ 840.485990][ T5894] usb 9-1: Using ep0 maxpacket: 16 [ 840.499003][ T5894] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 840.508299][ T5894] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.519561][ T5894] usb 9-1: config 0 has no interface number 0 [ 840.526498][ T5894] usb 9-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 840.533309][ T7412] usb 10-1: SerialNumber: syz [ 840.539960][ T5894] usb 9-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.622585][ T5894] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 840.636458][ T7412] usb 10-1: config 0 descriptor?? [ 840.657461][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.666276][ T7412] usb 10-1: can't set config #0, error -71 [ 840.678406][ T5894] usb 9-1: Product: syz [ 840.695005][ T5894] usb 9-1: Manufacturer: syz [ 840.853294][ T5894] usb 9-1: SerialNumber: syz [ 840.860076][ T7412] usb 10-1: USB disconnect, device number 7 [ 840.866301][ T5894] usb 9-1: config 0 descriptor?? [ 840.878088][ T5894] asix 9-1:0.251: probe with driver asix failed with error -22 [ 840.913234][ T5901] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 841.436298][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 841.460949][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 841.485073][T15309] netlink: 'syz.6.2304': attribute type 1 has an invalid length. [ 841.494406][T15309] netlink: 'syz.6.2304': attribute type 2 has an invalid length. [ 841.503346][ T7412] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 841.512832][ T30] audit: type=1400 audit(1752808559.299:750): avc: denied { write } for pid=15305 comm="syz.6.2304" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 841.567121][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 841.625132][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 841.687119][ T5901] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 841.701603][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.745025][ T5901] usb 6-1: Product: syz [ 841.772517][ T5901] usb 6-1: Manufacturer: syz [ 841.795146][ T5901] usb 6-1: SerialNumber: syz [ 841.852876][ T5901] usb 6-1: config 0 descriptor?? [ 842.162147][ T5901] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 842.372624][T15296] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 842.386669][ T5894] usb 6-1: USB disconnect, device number 7 [ 842.393268][ T7412] usb 10-1: device descriptor read/64, error -71 [ 842.543094][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 842.633156][ T7412] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 842.700253][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 842.707536][ T10] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 842.716295][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.729415][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 842.742494][ T10] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 842.751578][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.766598][ T7412] usb 10-1: device descriptor read/64, error -71 [ 842.773871][ T10] usb 7-1: config 0 descriptor?? [ 842.783964][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input97 [ 842.883844][ T7412] usb usb10-port1: attempt power cycle [ 843.193516][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2305'. [ 843.283534][ T7412] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 843.384144][ T7412] usb 10-1: device descriptor read/8, error -71 [ 843.431624][T14520] usb 9-1: USB disconnect, device number 18 [ 843.905905][T15351] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 843.967865][ T30] audit: type=1400 audit(1752808561.779:751): avc: denied { name_connect } for pid=15352 comm="syz.7.2310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 843.990184][ T5901] usb 7-1: USB disconnect, device number 20 [ 844.234335][T15363] wg1 speed is unknown, defaulting to 1000 [ 845.003890][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 845.173745][ T116] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 845.264592][ T10] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.352263][ T10] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.614352][ T116] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 845.672916][T15385] x_tables: ip_tables: osf match: only valid for protocol 6 [ 845.836949][ T116] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.837182][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 845.890625][ T116] usb 9-1: config 0 descriptor?? [ 845.898529][ T10] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 845.916660][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.971139][ T10] usb 7-1: config 0 descriptor?? [ 846.019077][T15386] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 846.753267][ T7412] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 846.767835][T15375] syzkaller1: entered promiscuous mode [ 846.773425][T15375] syzkaller1: entered allmulticast mode [ 846.823155][ T5901] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 846.904814][ T7412] usb 10-1: Using ep0 maxpacket: 32 [ 846.922878][ T7412] usb 10-1: unable to get BOS descriptor or descriptor too short [ 846.942242][ T7412] usb 10-1: config 2 has an invalid interface number: 43 but max is 0 [ 846.957108][ T7412] usb 10-1: config 2 has no interface number 0 [ 846.972772][ T7412] usb 10-1: config 2 interface 43 has no altsetting 0 [ 847.003116][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 847.003921][ T7412] usb 10-1: New USB device found, idVendor=05ac, idProduct=821b, bcdDevice= 8.dd [ 847.009896][ T5901] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 847.069250][ T7412] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.076342][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.091882][ T7412] usb 10-1: Product: syz [ 847.114767][ T7412] usb 10-1: Manufacturer: syz [ 847.119942][ T5901] usb 6-1: config 0 has no interface number 0 [ 847.120774][ T7412] usb 10-1: SerialNumber: syz [ 847.131623][ T5901] usb 6-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 847.146534][ T5901] usb 6-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.154039][ T10] uclogic 0003:256C:006D.003E: failed retrieving Huion firmware version: -71 [ 847.163014][ T5901] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 847.262509][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.318233][ T5901] usb 6-1: Product: syz [ 847.362789][ T5901] usb 6-1: Manufacturer: syz [ 847.376654][ T5901] usb 6-1: SerialNumber: syz [ 847.392884][ T10] uclogic 0003:256C:006D.003E: failed probing parameters: -71 [ 847.407510][ T5901] usb 6-1: config 0 descriptor?? [ 847.426791][ T10] uclogic 0003:256C:006D.003E: probe with driver uclogic failed with error -71 [ 847.440037][ T5901] asix 6-1:0.251: probe with driver asix failed with error -22 [ 847.521913][ T10] usb 7-1: USB disconnect, device number 21 [ 847.540281][ T7412] usb 10-1: USB disconnect, device number 12 [ 847.607857][ T116] pegasus 9-1:0.0: probe with driver pegasus failed with error -110 [ 848.080310][ T5894] usb 9-1: USB disconnect, device number 19 [ 848.115441][ T7412] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 848.375766][ T7412] usb 7-1: Using ep0 maxpacket: 32 [ 848.396570][ T7412] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 848.406359][ T7412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.645416][ T7412] usb 7-1: config 0 descriptor?? [ 848.924891][T14322] Bluetooth: hci11: command 0x0405 tx timeout [ 849.134311][T15439] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2327'. [ 849.275095][ T7412] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 849.283492][ T30] audit: type=1400 audit(1752808567.099:752): avc: denied { bind } for pid=15437 comm="syz.8.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 849.305592][T15439] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 849.309079][ T7412] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 849.312243][T15439] binder: 15437:15439 ioctl 4018620d 2000000000c0 returned -1 [ 849.385192][ T7412] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 849.405562][ T7412] usb 7-1: media controller created [ 849.469001][ T7412] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 849.536972][ T7412] az6027: usb out operation failed. (-71) [ 849.553487][ T7412] az6027: usb out operation failed. (-71) [ 849.621346][ T5940] usb 6-1: USB disconnect, device number 8 [ 849.643739][ T7412] stb0899_attach: Driver disabled by Kconfig [ 849.752514][T15452] x_tables: ip_tables: osf match: only valid for protocol 6 [ 849.766647][T15452] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 850.125699][ T7412] az6027: no front-end attached [ 850.125699][ T7412] [ 850.141392][ T7412] az6027: usb out operation failed. (-71) [ 850.154820][ T7412] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 850.170087][ T7412] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input98 [ 850.224664][ T7412] dvb-usb: schedule remote query interval to 400 msecs. [ 850.256629][ T7412] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 850.291903][ T7412] usb 7-1: USB disconnect, device number 22 [ 850.396408][ T5940] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 850.551923][ T7412] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 850.593468][ T5940] usb 6-1: Using ep0 maxpacket: 32 [ 850.616658][ T5940] usb 6-1: config 0 has an invalid interface number: 74 but max is 0 [ 850.625505][ T5940] usb 6-1: config 0 has no interface number 0 [ 850.631659][ T5940] usb 6-1: config 0 interface 74 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 850.645481][ T5940] usb 6-1: config 0 interface 74 has no altsetting 0 [ 850.660800][ T5940] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 850.680801][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.695976][ T5940] usb 6-1: config 0 descriptor?? [ 850.803521][ T10] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 850.823183][ T5939] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 850.987011][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2331'. [ 850.996020][ T5939] usb 10-1: Using ep0 maxpacket: 16 [ 851.003931][ T10] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 851.030818][ T5940] usb 6-1: string descriptor 0 read error: -71 [ 851.044523][ T5939] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 851.053841][ T5939] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.075954][ T5940] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 851.084883][ T10] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 851.103506][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.111511][ T10] usb 9-1: Product: syz [ 851.125372][ T5939] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 851.139200][ T5940] gspca_vc032x: reg_r err -71 [ 851.144424][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.149718][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.155108][ T5939] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 851.167638][ T10] usb 9-1: Manufacturer: syz [ 851.172249][ T10] usb 9-1: SerialNumber: syz [ 851.176992][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.182282][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.189273][ T5939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.205793][ T10] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 851.214955][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.233840][ T5939] usb 10-1: config 0 descriptor?? [ 851.276415][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.357769][T15486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=15486 comm=syz.7.2336 [ 851.588337][ T5939] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input99 [ 851.600745][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.606562][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.612300][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.618879][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.651048][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.665620][ T5939] usb 10-1: USB disconnect, device number 13 [ 851.672733][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.681867][ T5186] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 851.696234][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.711690][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.722904][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.757519][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.777357][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.798395][ T5940] gspca_vc032x: I2c Bus Busy Wait 00 [ 851.838727][ T5940] gspca_vc032x: Unknown sensor... [ 851.877923][ T5940] vc032x 6-1:0.74: probe with driver vc032x failed with error -22 [ 852.190336][ T10] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 852.282927][ T5940] usb 6-1: USB disconnect, device number 9 [ 852.743513][ T10] usb 9-1: USB disconnect, device number 20 [ 852.880783][T15507] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 853.383134][ T5894] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 853.892849][T15521] x_tables: ip_tables: osf match: only valid for protocol 6 [ 853.905729][T15521] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 854.264584][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 854.295775][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.321416][ T5894] usb 10-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 854.337033][ T30] audit: type=1400 audit(1752808572.139:753): avc: denied { map } for pid=15513 comm="syz.5.2342" path="socket:[53735]" dev="sockfs" ino=53735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 854.337340][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.426025][ T5894] usb 10-1: config 0 descriptor?? [ 854.673085][ T5939] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 855.547273][ T5894] hid-generic 0003:04F3:0754.003F: unknown main item tag 0x1 [ 855.627143][ T5894] hid-generic 0003:04F3:0754.003F: item fetching failed at offset 3/5 [ 855.676456][ T5894] hid-generic 0003:04F3:0754.003F: probe with driver hid-generic failed with error -22 [ 855.708849][ T5939] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.722161][ T5939] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 855.839903][ T5939] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 855.881593][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.921396][ T5939] usb 9-1: config 0 descriptor?? [ 855.921748][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.937104][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.938854][ T5939] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 856.251584][ T5939] dvb-usb: bulk message failed: -22 (3/0) [ 856.263331][T15528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.292280][T15528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.295574][ T5939] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 856.352829][ T5894] usb 10-1: USB disconnect, device number 14 [ 856.381332][ T5939] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 856.418372][ T5939] usb 9-1: media controller created [ 856.444154][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.495892][ T5939] dvb-usb: bulk message failed: -22 (6/0) [ 856.514349][ T5939] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 856.592769][T15552] tmpfs: Unknown parameter 'mqol' [ 856.640893][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input100 [ 856.688833][ T5939] dvb-usb: schedule remote query interval to 150 msecs. [ 856.958118][T14325] Bluetooth: hci10: Controller not accepting commands anymore: ncmd = 0 [ 856.976436][T14325] Bluetooth: hci10: Injecting HCI hardware error event [ 856.989584][T14322] Bluetooth: hci10: hardware error 0x00 [ 857.018023][ T5939] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 857.036564][ T5939] usb 9-1: USB disconnect, device number 21 [ 857.183535][ T5939] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 857.262798][ T7412] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 857.403278][ T7412] usb 6-1: device descriptor read/64, error -71 [ 857.552895][ T5939] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 857.556440][ T5894] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 857.887282][ T5894] usb 10-1: Using ep0 maxpacket: 32 [ 857.902367][ T5894] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 857.916364][ T5894] usb 10-1: config 0 has no interface number 0 [ 857.938961][ T5894] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 857.970503][ T5894] usb 10-1: config 0 interface 1 has no altsetting 0 [ 857.997651][ T7412] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 858.003655][ T5894] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 858.014695][T15577] netlink: 'syz.7.2355': attribute type 39 has an invalid length. [ 858.019098][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.022884][ T5939] usb 9-1: Using ep0 maxpacket: 16 [ 858.032540][ T5894] usb 10-1: Product: syz [ 858.049198][ T5894] usb 10-1: Manufacturer: syz [ 858.059178][ T5894] usb 10-1: SerialNumber: syz [ 858.174045][ T5894] usb 10-1: config 0 descriptor?? [ 858.295640][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 858.311785][ T5939] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 858.321743][ T5939] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.338453][ T5939] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.350848][ T5939] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 858.360182][ T7412] usb 6-1: device descriptor read/64, error -71 [ 858.371553][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.380591][ T5939] usb 9-1: Product: syz [ 858.385374][ T5939] usb 9-1: Manufacturer: syz [ 858.391926][ T5939] usb 9-1: SerialNumber: syz [ 858.412666][T15566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.423988][T15566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.442851][ T5894] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 858.453873][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 858.472541][ T10] usb 7-1: config 0 has no interfaces? [ 858.520284][ T7412] usb usb6-port1: attempt power cycle [ 858.542642][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=4216, bcdDevice=e4.c0 [ 858.543659][ T5894] cx231xx 10-1:0.1: Failed to read PCB config [ 858.566741][ T5894] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -71 [ 858.583177][ T5894] usb 10-1: USB disconnect, device number 15 [ 858.584977][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.618842][ T10] usb 7-1: Product: syz [ 858.628704][ T10] usb 7-1: Manufacturer: syz [ 858.640345][ T10] usb 7-1: SerialNumber: syz [ 858.671246][ T10] usb 7-1: config 0 descriptor?? [ 858.829927][ T5939] usb 9-1: 0:2 : does not exist [ 858.903379][ T7412] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 858.928615][T15576] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 858.933665][ T7412] usb 6-1: device descriptor read/8, error -71 [ 858.947135][T15576] overlayfs: overlapping lowerdir path [ 859.083402][ T5894] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 859.193090][T14322] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 859.199752][ T7412] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 859.223052][ T5894] usb 10-1: device descriptor read/64, error -71 [ 859.245414][ T7412] usb 6-1: device descriptor read/8, error -71 [ 859.383401][ T7412] usb usb6-port1: unable to enumerate USB device [ 859.442721][ T5939] usb 9-1: 1:0: cannot get min/max values for control 4 (id 1) [ 859.503307][ T5894] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 859.503393][ T5939] usb 9-1: USB disconnect, device number 22 [ 859.641653][T14690] udevd[14690]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.695922][ T5894] usb 10-1: device descriptor read/64, error -71 [ 859.803359][ T5894] usb usb10-port1: attempt power cycle [ 860.006015][ T116] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 860.163400][ T5894] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 860.193139][ T116] usb 6-1: Using ep0 maxpacket: 16 [ 860.199356][ T5894] usb 10-1: device descriptor read/8, error -71 [ 860.240861][ T116] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 860.261828][ T116] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.316712][ T116] usb 6-1: config 0 has no interface number 0 [ 860.345772][ T116] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 860.367036][ T116] usb 6-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.464486][ T116] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 860.496134][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.528431][ T116] usb 6-1: Product: syz [ 860.532745][ T116] usb 6-1: Manufacturer: syz [ 860.561518][ T116] usb 6-1: SerialNumber: syz [ 860.586084][ T116] usb 6-1: config 0 descriptor?? [ 860.607785][T15625] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 860.979917][ T116] asix 6-1:0.251: probe with driver asix failed with error -22 [ 861.045849][T15647] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 861.264096][ T10] usb 7-1: USB disconnect, device number 23 [ 861.623729][ T5894] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 861.643575][ T5939] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 861.896322][T15683] x_tables: ip_tables: osf match: only valid for protocol 6 [ 861.923849][ T5894] usb 10-1: Using ep0 maxpacket: 8 [ 862.001598][ T5894] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 862.045164][ T5894] usb 10-1: config 0 has no interface number 0 [ 862.233042][ T5939] usb 9-1: Using ep0 maxpacket: 8 [ 862.252077][ T5939] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 862.255331][ T5894] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 862.270884][ T5939] usb 9-1: config 0 has no interface number 0 [ 862.281592][ T5939] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 862.296811][ T5939] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 862.306449][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.339407][ T5939] usb 9-1: config 0 descriptor?? [ 862.363411][ T5894] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 862.376297][ T5939] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 862.401348][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.438616][ T5894] usb 10-1: config 0 descriptor?? [ 862.538402][ T5894] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 862.739639][ T5894] usb 6-1: USB disconnect, device number 14 [ 862.783368][ T5939] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 863.022785][ T5939] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 863.042371][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.056904][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.065706][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.086126][ T5939] usb 7-1: config 0 descriptor?? [ 863.148226][T15703] xt_limit: Overflow, try lower: 687865856/40 [ 863.218629][ T5894] usb 9-1: USB disconnect, device number 23 [ 863.366620][T15656] delete_channel: no stack [ 863.381964][ T5901] usb 10-1: USB disconnect, device number 20 [ 864.143645][ T5939] pegasus 7-1:0.0: probe with driver pegasus failed with error -121 [ 864.336808][T15738] lo: entered promiscuous mode [ 864.342210][T15738] tunl0: entered promiscuous mode [ 864.350485][ T5894] usb 7-1: USB disconnect, device number 24 [ 864.360717][T15738] gre0: entered promiscuous mode [ 864.369511][T15738] gretap0: entered promiscuous mode [ 864.386420][T15738] erspan0: entered promiscuous mode [ 864.392595][T15738] ip_vti0: entered promiscuous mode [ 864.405840][ T116] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 864.423513][T15738] ip6_vti0: entered promiscuous mode [ 864.441841][T15738] sit0: entered promiscuous mode [ 864.447275][T15738] ip6tnl0: entered promiscuous mode [ 864.465238][T15738] ip6gre0: entered promiscuous mode [ 864.491909][T15738] syz_tun: entered promiscuous mode [ 864.511577][T15738] ip6gretap0: entered promiscuous mode [ 864.536650][T15738] bridge0: entered promiscuous mode [ 864.551024][T15738] vcan0: entered promiscuous mode [ 864.571149][T15738] bond0: entered promiscuous mode [ 864.585130][ T116] usb 10-1: Using ep0 maxpacket: 32 [ 864.587648][T15738] bond_slave_0: entered promiscuous mode [ 864.598841][ T116] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 864.608835][T15738] bond_slave_1: entered promiscuous mode [ 864.618780][ T116] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.630138][T15738] team0: entered promiscuous mode [ 864.655107][ T116] usb 10-1: config 0 descriptor?? [ 864.676819][T15738] team_slave_0: entered promiscuous mode [ 864.687572][ T116] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 864.750482][T15738] team_slave_1: entered promiscuous mode [ 864.781267][T15738] dummy0: entered promiscuous mode [ 864.787996][T15738] nlmon0: entered promiscuous mode [ 864.819080][T15738] caif0: entered promiscuous mode [ 864.825043][T15738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 865.423615][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 865.571256][ T10] usb 7-1: device descriptor read/64, error -71 [ 866.063057][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 866.210681][ T10] usb 7-1: device descriptor read/64, error -71 [ 866.313916][T15779] Cannot find del_set index 0 as target [ 866.325351][ T10] usb usb7-port1: attempt power cycle [ 866.716215][ T116] gspca_vc032x: reg_r err -71 [ 866.720951][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.728032][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.747379][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.752683][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.800013][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.818728][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.836710][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.842257][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.858505][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.867019][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.872321][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.881930][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.952305][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.957848][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.963455][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.968742][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.974111][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.979396][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 866.984722][ T116] gspca_vc032x: Unknown sensor... [ 866.992659][ T116] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 866.993018][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 867.008293][ T116] usb 10-1: USB disconnect, device number 21 [ 867.044522][ T10] usb 7-1: device descriptor read/8, error -71 [ 867.143025][ T5939] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 867.273442][ T5894] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 867.287272][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 867.327811][ T5939] usb 9-1: Using ep0 maxpacket: 8 [ 867.413072][ T10] usb 7-1: device descriptor read/8, error -71 [ 867.445181][ T5939] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 867.575471][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 867.581197][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.583506][ T5894] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 867.604267][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.614257][ T5939] usb 9-1: config 0 descriptor?? [ 867.630635][ T5894] usb 6-1: config 0 has no interface number 0 [ 867.640670][ T5894] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 867.665945][ T5894] usb 6-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.681756][ T5894] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 867.683504][ T10] usb usb7-port1: unable to enumerate USB device [ 867.697303][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.707513][ T5894] usb 6-1: Product: syz [ 867.711686][ T5894] usb 6-1: Manufacturer: syz [ 867.717094][ T5894] usb 6-1: SerialNumber: syz [ 867.724773][ T5894] usb 6-1: config 0 descriptor?? [ 867.732129][T15786] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 867.741894][ T5894] asix 6-1:0.251: probe with driver asix failed with error -22 [ 867.826242][ T5939] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 867.903175][T13245] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 868.027495][ T5939] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 868.038039][ T5939] asix 9-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 868.048494][ T5939] asix 9-1:0.0: probe with driver asix failed with error -32 [ 868.073003][T13245] usb 10-1: Using ep0 maxpacket: 8 [ 868.083869][T13245] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 868.091950][T13245] usb 10-1: config 0 has no interface number 0 [ 868.102095][T13245] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 868.122130][T13245] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 868.131329][T13245] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.144492][T13245] usb 10-1: config 0 descriptor?? [ 868.155634][T13245] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 868.747571][T15799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.773332][T15799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.598036][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.961330][ T5894] usb 10-1: USB disconnect, device number 22 [ 869.985591][ T10] usb 9-1: USB disconnect, device number 24 [ 870.032049][T15809] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.039805][T15809] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.113504][T15809] bridge0: entered allmulticast mode [ 870.124507][T15813] bridge_slave_1: left allmulticast mode [ 870.134278][T15813] bridge_slave_1: left promiscuous mode [ 870.140144][T13245] usb 6-1: USB disconnect, device number 15 [ 870.225485][T15813] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.593189][ T5894] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 870.732895][T15813] bridge_slave_0: left allmulticast mode [ 870.739443][T15813] bridge_slave_0: left promiscuous mode [ 870.748069][T15813] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.893313][ T5894] usb 10-1: Using ep0 maxpacket: 16 [ 870.915080][ T5894] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 870.947372][ T5894] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.963171][ T5939] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 870.975274][ T5894] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.999155][ T5894] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 871.018894][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.034585][ T5894] usb 10-1: Product: syz [ 871.038835][ T5894] usb 10-1: Manufacturer: syz [ 871.052657][ T5894] usb 10-1: SerialNumber: syz [ 871.124675][ T5939] usb 7-1: Using ep0 maxpacket: 32 [ 871.135281][ T5939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.156891][ T5939] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 871.167232][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.178436][ T5939] usb 7-1: Product: syz [ 871.185104][ T5939] usb 7-1: Manufacturer: syz [ 871.191851][ T5939] usb 7-1: SerialNumber: syz [ 871.219146][ T5939] usb 7-1: config 0 descriptor?? [ 871.227981][ T5939] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 871.283335][ T7412] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 871.473221][ T7412] usb 6-1: Using ep0 maxpacket: 32 [ 871.486097][ T5901] IPVS: starting estimator thread 0... [ 871.486826][ T5939] gspca_sunplus: reg_r err -32 [ 871.513100][ T5894] usb 10-1: 0:2 : does not exist [ 871.528790][ T7412] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 871.538205][ T7412] usb 6-1: config 0 has no interface number 0 [ 871.545318][ T7412] usb 6-1: config 0 interface 12 has no altsetting 0 [ 871.571258][ T7412] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 871.591514][T15831] IPVS: using max 41 ests per chain, 98400 per kthread [ 871.604272][ T7412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.614692][ T7412] usb 6-1: Product: syz [ 871.618933][ T7412] usb 6-1: Manufacturer: syz [ 871.625307][ T7412] usb 6-1: SerialNumber: syz [ 871.682182][ T7412] usb 6-1: config 0 descriptor?? [ 871.843671][T15838] SELinux: policydb string length 1492603249 does not match expected length 8 [ 871.852689][T15838] SELinux: failed to load policy [ 871.860045][T15838] fuse: Bad value for 'group_id' [ 871.865197][T15838] fuse: Bad value for 'group_id' [ 872.115459][T15841] wg1 speed is unknown, defaulting to 1000 [ 872.563262][ T5894] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1) [ 872.626084][ T5894] usb 10-1: USB disconnect, device number 23 [ 872.660800][T14592] udevd[14592]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.683209][ T5939] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 873.323375][T15849] x_tables: ip_tables: osf match: only valid for protocol 6 [ 873.961111][T15853] binder_alloc: 15852: binder_alloc_buf size 12280 failed, no address space [ 873.963333][ T5939] usb 7-1: USB disconnect, device number 29 [ 873.969961][T15853] binder_alloc: allocated: 72 (num: 1 largest: 72), free: 12216 (num: 1 largest: 12216) [ 874.403322][ T5940] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 874.591659][ T7412] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 874.601917][ T7412] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 874.627399][ T7412] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 874.638225][ T7412] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 874.667127][ T7412] usb 6-1: USB disconnect, device number 16 [ 874.693071][ T5940] usb 9-1: Using ep0 maxpacket: 8 [ 874.708120][ T5940] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 874.718934][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.766698][ T5940] usb 9-1: config 0 descriptor?? [ 874.991935][ T5940] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 875.202406][ T5940] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 875.226900][ T5940] asix 9-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 875.260971][ T5940] asix 9-1:0.0: probe with driver asix failed with error -32 [ 875.698317][ T30] audit: type=1400 audit(1752808593.459:754): avc: denied { remount } for pid=15872 comm="syz.5.2398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 875.748242][T15882] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2398'. [ 876.063159][T13245] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 876.070798][ T5901] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 876.224671][T13245] usb 7-1: Using ep0 maxpacket: 16 [ 876.260308][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 876.303604][T13245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.366438][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.394535][T13245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.407864][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 876.421428][T13245] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 876.440078][ T5901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 876.450595][T13245] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 876.461011][T13245] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.480078][ T5901] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 876.503036][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.519916][T13245] usb 7-1: config 0 descriptor?? [ 876.544073][ T5901] usb 10-1: Product: syz [ 876.584699][ T5901] usb 10-1: Manufacturer: syz [ 876.607460][ T5901] usb 10-1: SerialNumber: syz [ 876.663574][ T5901] usb 10-1: config 0 descriptor?? [ 876.755581][T13245] usbhid 7-1:0.0: can't add hid device: -71 [ 876.761622][T13245] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 876.778203][T13245] usb 7-1: USB disconnect, device number 30 [ 876.878558][ T5901] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 876.903239][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 877.053010][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 877.061576][ T10] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 877.073168][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.083140][ T10] usb 6-1: Product: syz [ 877.087307][ T10] usb 6-1: Manufacturer: syz [ 877.091895][ T10] usb 6-1: SerialNumber: syz [ 877.099299][ T10] usb 6-1: config 0 descriptor?? [ 877.108846][T15876] usb 10-1: Couldn't submit interrupt_out_urb -90 [ 877.111391][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 877.123133][T13245] usb 10-1: USB disconnect, device number 24 [ 877.166244][ T5894] usb 9-1: USB disconnect, device number 25 [ 877.521880][T15911] syzkaller1: entered promiscuous mode [ 877.550343][T15911] syzkaller1: entered allmulticast mode [ 877.590594][T15898] syzkaller0: entered promiscuous mode [ 877.602522][T15898] syzkaller0: entered allmulticast mode [ 877.687165][ T5901] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 877.867820][ T5901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.882125][ T5901] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 877.895225][ T5901] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 877.908446][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.921594][ T5901] usb 7-1: config 0 descriptor?? [ 877.973441][T13245] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 878.133133][T13245] usb 10-1: Using ep0 maxpacket: 32 [ 878.147066][T13245] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 878.165089][T13245] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.181712][T13245] usb 10-1: Product: syz [ 878.190896][T13245] usb 10-1: Manufacturer: syz [ 878.196812][T13245] usb 10-1: SerialNumber: syz [ 878.216289][T13245] usb 10-1: config 0 descriptor?? [ 878.233848][T13245] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 878.620095][T15916] misc userio: Can't change port type on an already running userio instance [ 878.633488][ T30] audit: type=1400 audit(1752808596.439:755): avc: denied { ioctl } for pid=15912 comm="syz.9.2406" path="socket:[55146]" dev="sockfs" ino=55146 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 878.864050][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.873664][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.986610][ T10] gspca_stk1135: reg_w 0x2ff err -110 [ 880.008952][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 880.031194][ T10] gspca_stk1135: Sensor write failed [ 880.038655][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 880.053060][ T10] gspca_stk1135: Sensor write failed [ 880.058604][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 880.065009][ T10] gspca_stk1135: Sensor read failed [ 880.070545][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 880.077594][ T10] gspca_stk1135: Sensor read failed [ 880.083225][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 880.090212][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 880.100112][ T10] gspca_stk1135: Sensor read failed [ 880.109746][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 880.117246][ T10] gspca_stk1135: Sensor read failed [ 880.217802][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 880.228909][ T10] gspca_stk1135: Sensor write failed [ 880.238647][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 880.249875][ T10] gspca_stk1135: Sensor write failed [ 880.691105][ T116] usb 7-1: USB disconnect, device number 31 [ 880.802758][ T10] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 880.830412][ T10] usb 6-1: USB disconnect, device number 17 [ 880.897362][T13245] gspca_stk1135: reg_w 0x2ff err -71 [ 880.904728][T13245] gspca_stk1135: serial bus timeout: status=0x00 [ 880.911188][T13245] gspca_stk1135: Sensor write failed [ 880.918459][T13245] gspca_stk1135: serial bus timeout: status=0x00 [ 880.925213][T13245] gspca_stk1135: Sensor write failed [ 880.930599][T13245] gspca_stk1135: serial bus timeout: status=0x00 [ 880.937097][T13245] gspca_stk1135: Sensor read failed [ 880.942456][T13245] gspca_stk1135: serial bus timeout: status=0x00 [ 880.948987][T13245] gspca_stk1135: Sensor read failed [ 880.954436][T13245] gspca_stk1135: Detected sensor type unknown (0x0) [ 880.961430][T13245] gspca_stk1135: serial bus timeout: status=0x00 [ 880.967948][T13245] gspca_stk1135: Sensor read failed [ 880.973608][T13245] gspca_stk1135: serial bus timeout: status=0x00 [ 880.980225][T13245] gspca_stk1135: Sensor read failed [ 880.985918][T13245] gspca_stk1135: serial bus timeout: status=0x00 [ 880.992350][T13245] gspca_stk1135: Sensor write failed [ 880.998060][T13245] gspca_stk1135: serial bus timeout: status=0x00 [ 881.004545][T13245] gspca_stk1135: Sensor write failed [ 881.010779][T13245] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 881.071257][T13245] usb 10-1: USB disconnect, device number 25 [ 881.843563][ T10] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 881.977149][T15946] netlink: 'syz.6.2416': attribute type 1 has an invalid length. [ 881.985102][T15946] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2416'. [ 882.013013][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 882.020058][ T10] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 882.031189][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.058803][ T10] usb 10-1: config 0 descriptor?? [ 882.301587][ T10] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 882.343193][T13245] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 882.344614][T15948] overlayfs: failed to resolve './file1': -2 [ 882.498830][ T10] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 882.513018][ T10] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 882.523731][ T10] asix 10-1:0.0: probe with driver asix failed with error -32 [ 882.999571][T13245] usb 9-1: Using ep0 maxpacket: 16 [ 883.018629][T13245] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.040681][T13245] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.053935][T13245] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 883.079185][T13245] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 883.096206][T13245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.150359][T13245] usb 9-1: config 0 descriptor?? [ 883.543638][T13245] usbhid 9-1:0.0: can't add hid device: -71 [ 883.557128][T13245] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 883.571643][T13245] usb 9-1: USB disconnect, device number 26 [ 883.606509][T15958] sp0: Synchronizing with TNC [ 884.798611][ T7412] usb 10-1: USB disconnect, device number 26 [ 885.503121][ T5894] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 885.663648][ T5894] usb 6-1: device descriptor read/64, error -71 [ 885.695534][T15994] tipc: Started in network mode [ 885.706010][T15994] tipc: Node identity 4, cluster identity 4711 [ 885.712266][T15994] tipc: Node number set to 4 [ 886.063747][ T5894] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 886.162735][T15997] lo: entered promiscuous mode [ 886.171828][T15997] tunl0: entered promiscuous mode [ 886.183994][T15997] gre0: entered promiscuous mode [ 886.194882][T15997] gretap0: entered promiscuous mode [ 886.200716][T15997] erspan0: entered promiscuous mode [ 886.209255][T15997] ip_vti0: entered promiscuous mode [ 886.223193][ T5894] usb 6-1: device descriptor read/64, error -71 [ 886.243923][T15997] ip6_vti0: entered promiscuous mode [ 886.313540][T16005] x_tables: ip_tables: osf match: only valid for protocol 6 [ 886.333946][ T5894] usb usb6-port1: attempt power cycle [ 886.477913][T15997] sit0: entered promiscuous mode [ 886.565671][T15997] ip6tnl0: entered promiscuous mode [ 886.576771][T15997] ip6gre0: entered promiscuous mode [ 886.583872][T15997] syz_tun: entered promiscuous mode [ 886.590301][T15997] ip6gretap0: entered promiscuous mode [ 886.597394][T15997] bridge0: entered promiscuous mode [ 886.603483][T15997] vcan0: entered promiscuous mode [ 886.608955][T15997] bond0: entered promiscuous mode [ 886.615219][T15997] bond_slave_0: entered promiscuous mode [ 886.621133][T15997] bond_slave_1: entered promiscuous mode [ 886.629150][T15997] team0: entered promiscuous mode [ 886.635208][T15997] team_slave_0: entered promiscuous mode [ 886.642499][T15997] team_slave_1: entered promiscuous mode [ 886.652068][T15997] dummy0: entered promiscuous mode [ 886.664684][T15997] nlmon0: entered promiscuous mode [ 886.678829][T15997] caif0: entered promiscuous mode [ 886.690858][T15997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 886.713368][ T5894] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 886.748409][ T5894] usb 6-1: device descriptor read/8, error -71 [ 886.850197][T16011] sp0: Synchronizing with TNC [ 886.999104][ T5894] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 887.003375][ T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 887.044423][ T5894] usb 6-1: device descriptor read/8, error -71 [ 887.156892][ T5894] usb usb6-port1: unable to enumerate USB device [ 887.163132][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 887.172505][ T10] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 887.185847][ T10] usb 9-1: config 0 has no interface number 0 [ 887.192662][ T10] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 887.206685][ T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 887.216099][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.233216][ T10] usb 9-1: config 0 descriptor?? [ 887.246071][ T10] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 887.743027][ T10] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 887.893095][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 887.915480][ T10] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 887.927159][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.966366][ T10] usb 10-1: Product: syz [ 887.978766][ T10] usb 10-1: Manufacturer: syz [ 887.994980][ T5940] usb 9-1: USB disconnect, device number 27 [ 888.014069][ T10] usb 10-1: SerialNumber: syz [ 888.032360][ T10] usb 10-1: config 0 descriptor?? [ 888.256838][ T10] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 888.273137][ T116] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 888.434576][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 888.450870][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.469116][ T116] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 888.485985][ T116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.535590][ T116] usb 7-1: config 0 descriptor?? [ 888.834241][ T5940] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 889.006801][ T116] hid-generic 0003:04F3:0754.0040: failed to start in urb: -90 [ 889.045655][ T116] hid-generic 0003:04F3:0754.0040: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.6-1/input0 [ 889.094439][ T5940] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.124183][ T5940] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.134282][ T5940] usb 9-1: config 0 interface 0 has no altsetting 0 [ 889.140937][ T5940] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 889.166309][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.182262][ T5940] usb 9-1: config 0 descriptor?? [ 889.226584][ T7412] usb 7-1: USB disconnect, device number 32 [ 889.271376][T16018] x_tables: duplicate underflow at hook 1 [ 889.308794][T16033] fido_id[16033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 889.387407][T16035] binder: BINDER_SET_CONTEXT_MGR already set [ 889.393649][T16035] binder: 16034:16035 ioctl 4018620d 200000000040 returned -16 [ 889.783156][ T5901] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 889.855264][ T5940] usb 9-1: string descriptor 0 read error: -22 [ 890.081870][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.092673][ T5901] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 890.281895][ T5940] uclogic 0003:256C:006D.0041: failed retrieving string descriptor #100: -71 [ 890.376261][ T5901] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 890.382078][ T5940] uclogic 0003:256C:006D.0041: failed retrieving pen parameters: -71 [ 890.392999][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.431848][ T10] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 890.463304][ T5940] uclogic 0003:256C:006D.0041: failed probing pen v1 parameters: -71 [ 890.471448][ T5940] uclogic 0003:256C:006D.0041: failed probing parameters: -71 [ 890.640338][ T5901] usb 6-1: config 0 descriptor?? [ 890.901350][ T5940] uclogic 0003:256C:006D.0041: probe with driver uclogic failed with error -71 [ 890.932237][ T5940] usb 9-1: USB disconnect, device number 28 [ 891.303858][ T5901] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 891.491445][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2446'. [ 891.505883][T16059] fuse: Unknown parameter 'ˆ¿Ò\Õ' [ 891.534648][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 891.568927][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 891.582566][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 891.604173][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 891.616825][ T5901] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 891.626978][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.635632][ T5901] usb 7-1: Product: syz [ 891.639981][ T5901] usb 7-1: Manufacturer: syz [ 891.645059][ T5901] usb 7-1: SerialNumber: syz [ 891.661630][ T5901] usb 7-1: config 0 descriptor?? [ 891.687945][T16064] binder_alloc: 16063: binder_alloc_buf size 12280 failed, no address space [ 891.697528][T16064] binder_alloc: allocated: 72 (num: 1 largest: 72), free: 12216 (num: 1 largest: 12216) [ 891.853253][ T5894] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 891.877976][ T5901] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 891.907491][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.916668][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.054862][ T5894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 892.100557][T16055] usb 7-1: Couldn't submit interrupt_out_urb -90 [ 892.106126][ T5894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 892.113213][ T5940] usb 7-1: USB disconnect, device number 33 [ 892.118294][ T5894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 892.134131][ T5894] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 892.224771][ T5894] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 892.242108][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.278863][ T5894] usb 9-1: Product: syz [ 892.335860][ T1206] usb 10-1: USB disconnect, device number 27 [ 892.337993][ T5894] usb 9-1: Manufacturer: syz [ 892.348375][ T5894] usb 9-1: SerialNumber: syz [ 892.363984][ T5894] usb 9-1: config 0 descriptor?? [ 892.467434][T16070] lo: entered promiscuous mode [ 892.472726][T16070] tunl0: entered promiscuous mode [ 892.478664][T16070] gre0: entered promiscuous mode [ 892.484775][T16070] gretap0: entered promiscuous mode [ 892.493361][T16070] erspan0: entered promiscuous mode [ 892.499500][T16070] ip_vti0: entered promiscuous mode [ 892.505664][T16070] ip6_vti0: entered promiscuous mode [ 892.511428][T16070] sit0: entered promiscuous mode [ 892.517751][T16070] ip6tnl0: entered promiscuous mode [ 892.528204][T16070] ip6gre0: entered promiscuous mode [ 892.542644][T16070] syz_tun: entered promiscuous mode [ 892.555523][T16070] ip6gretap0: entered promiscuous mode [ 892.569546][T16070] bridge0: entered promiscuous mode [ 892.580177][ T5894] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 892.597273][T16070] vcan0: entered promiscuous mode [ 892.632454][T16070] bond0: entered promiscuous mode [ 892.661100][T16070] bond_slave_0: entered promiscuous mode [ 892.697225][T16070] bond_slave_1: entered promiscuous mode [ 892.706103][T16070] team0: entered promiscuous mode [ 892.728805][T16070] team_slave_0: entered promiscuous mode [ 892.840468][T16070] team_slave_1: entered promiscuous mode [ 892.931479][T16062] program syz.8.2447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 893.009830][T16070] dummy0: entered promiscuous mode [ 893.122276][T16070] nlmon0: entered promiscuous mode [ 893.269880][T16070] caif0: entered promiscuous mode [ 893.361648][T16070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 893.563352][ T7412] usb 6-1: USB disconnect, device number 22 [ 893.570639][T16082] usb 9-1: Couldn't submit interrupt_out_urb -90 [ 893.650649][T16075] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2451'. [ 893.932748][T16080] syzkaller0: entered promiscuous mode [ 893.943354][T16080] syzkaller0: entered allmulticast mode [ 894.568076][ T7412] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 894.742789][ T7412] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 894.760382][ T7412] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.781249][ T7412] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 894.798005][ T7412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.818557][ T7412] usb 7-1: config 0 descriptor?? [ 894.973463][ T10] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 895.162257][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 895.174123][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 895.184426][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 895.199177][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 895.213530][ T10] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 895.223182][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.231296][ T10] usb 10-1: Product: syz [ 895.236253][ T10] usb 10-1: Manufacturer: syz [ 895.240965][ T10] usb 10-1: SerialNumber: syz [ 895.256835][ T7412] hid-generic 0003:04F3:0754.0042: failed to start in urb: -90 [ 895.276725][ T10] usb 10-1: config 0 descriptor?? [ 895.289141][ T7412] hid-generic 0003:04F3:0754.0042: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.6-1/input0 [ 895.471694][ T7412] usb 7-1: USB disconnect, device number 34 [ 895.500412][ T10] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 895.722149][ T7412] usb 10-1: USB disconnect, device number 28 [ 896.156311][ T5894] usb 9-1: USB disconnect, device number 29 [ 897.976014][T16120] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 899.432145][T16131] x_tables: ip_tables: osf match: only valid for protocol 6 [ 899.441001][T16131] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 900.505069][ T5901] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 900.663020][ T5901] usb 9-1: Using ep0 maxpacket: 8 [ 900.674815][T16138] sp0: Synchronizing with TNC [ 900.692854][T16136] wg1 speed is unknown, defaulting to 1000 [ 900.698625][ T5901] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 900.738146][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.753251][ T5901] usb 9-1: Product: syz [ 900.758345][ T5901] usb 9-1: Manufacturer: syz [ 900.777713][ T5901] usb 9-1: SerialNumber: syz [ 900.796509][ T5901] usb 9-1: config 0 descriptor?? [ 900.923248][ T116] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 901.011124][ T5901] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 901.084618][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 901.097127][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 901.117310][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 901.143472][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 901.167544][ T116] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 901.177337][ T116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.186993][ T116] usb 7-1: Product: syz [ 901.197093][ T116] usb 7-1: Manufacturer: syz [ 901.253540][ T116] usb 7-1: SerialNumber: syz [ 901.283581][ T116] usb 7-1: config 0 descriptor?? [ 901.519915][ T116] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 901.825284][ T116] usb 7-1: USB disconnect, device number 35 [ 902.075397][T14325] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 902.085956][T14325] Bluetooth: hci8: Injecting HCI hardware error event [ 902.401781][T14325] Bluetooth: hci9: command 0x0406 tx timeout [ 902.401798][T14327] Bluetooth: hci8: command 0x0406 tx timeout [ 902.712644][T12375] Bluetooth: hci8: hardware error 0x00 [ 902.766286][T16170] tipc: Started in network mode [ 902.773334][T16170] tipc: Node identity 4, cluster identity 4711 [ 902.803854][T16170] tipc: Node number set to 4 [ 903.012308][ T1206] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 903.137563][T16175] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 903.268321][T16176] lo: left promiscuous mode [ 903.283265][ T1206] usb 7-1: Using ep0 maxpacket: 32 [ 903.290053][ T1206] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 903.298345][ T1206] usb 7-1: config 0 has no interface number 0 [ 903.307024][ T1206] usb 7-1: config 0 interface 12 has no altsetting 0 [ 903.316079][ T1206] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 903.326771][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.341855][ T1206] usb 7-1: Product: syz [ 903.359888][ T1206] usb 7-1: Manufacturer: syz [ 903.365187][ T1206] usb 7-1: SerialNumber: syz [ 903.516272][ T5901] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 903.569292][ T5901] usb 9-1: USB disconnect, device number 30 [ 903.606154][ T1206] usb 7-1: config 0 descriptor?? [ 904.097535][T16194] x_tables: ip_tables: osf match: only valid for protocol 6 [ 904.714177][ T5901] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 904.793695][T12375] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 904.896244][ T5901] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.908877][ T5901] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 904.920171][ T5901] usb 10-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 904.946435][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.014074][ T5901] usb 10-1: config 0 descriptor?? [ 905.672883][T16205] misc userio: Can't change port type on an already running userio instance [ 905.779355][ T30] audit: type=1400 audit(1752808623.583:756): avc: denied { getopt } for pid=16208 comm="syz.8.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 906.013380][ T7412] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 906.063820][T16210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.072478][T16210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.143023][ T7412] usb 9-1: device descriptor read/64, error -71 [ 906.257910][ T1206] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 906.430360][ T1206] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 906.441524][ T1206] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 906.453496][ T1206] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 906.480025][ T1206] usb 7-1: USB disconnect, device number 36 [ 906.553226][ T7412] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 906.844711][ T7412] usb 9-1: device descriptor read/64, error -71 [ 906.975991][ T7412] usb usb9-port1: attempt power cycle [ 907.293090][ T5940] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 907.343000][ T116] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 907.343151][ T7412] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 907.374615][ T7412] usb 9-1: device descriptor read/8, error -71 [ 907.569877][ T116] usb 6-1: Using ep0 maxpacket: 8 [ 907.571130][ T5940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.578547][ T116] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 907.603261][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.611309][ T116] usb 6-1: Product: syz [ 907.775894][T16226] x_tables: ip_tables: osf match: only valid for protocol 6 [ 908.103463][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.129098][ T1206] usb 10-1: USB disconnect, device number 29 [ 908.129911][ T116] usb 6-1: Manufacturer: syz [ 908.135685][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.149995][ T7412] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 908.159457][ T116] usb 6-1: SerialNumber: syz [ 908.179866][ T116] usb 6-1: config 0 descriptor?? [ 908.202597][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 908.216701][ T7412] usb 9-1: device descriptor read/8, error -71 [ 908.231169][ T5940] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 908.258521][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.284506][ T5940] usb 7-1: config 0 descriptor?? [ 908.378144][ T7412] usb usb9-port1: unable to enumerate USB device [ 908.481243][ T116] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 908.634104][T16241] SET target dimension over the limit! [ 909.023455][T16243] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 909.033746][ T5940] keytouch 0003:0926:3333.0043: fixing up Keytouch IEC report descriptor [ 909.181910][ T5940] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0043/input/input106 [ 909.252268][ T116] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 909.287266][T16248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.316968][T16248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.357929][ T5940] keytouch 0003:0926:3333.0043: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 909.448892][ T5940] usb 7-1: USB disconnect, device number 37 [ 909.513099][T13245] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 909.565550][ T1206] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 909.683084][T13245] usb 10-1: Using ep0 maxpacket: 16 [ 909.694646][T13245] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 909.703568][T13245] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.714022][T13245] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 909.724810][T13245] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 909.731143][ T1206] usb 9-1: Using ep0 maxpacket: 8 [ 909.734065][T13245] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.734087][T13245] usb 10-1: Product: syz [ 909.734100][T13245] usb 10-1: Manufacturer: syz [ 909.734114][T13245] usb 10-1: SerialNumber: syz [ 909.741762][ T1206] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 909.781705][ T1206] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.796143][ T1206] usb 9-1: config 0 descriptor?? [ 910.006717][ T1206] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 910.188151][T13245] usb 10-1: 0:2 : does not exist [ 910.446321][ T1206] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 910.458797][ T5894] usb 6-1: USB disconnect, device number 23 [ 910.479464][ T1206] asix 9-1:0.0: probe with driver asix failed with error -32 [ 910.668551][T13245] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1) [ 910.696882][T13245] usb 10-1: USB disconnect, device number 30 [ 910.758504][T14592] udevd[14592]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.110675][T16273] x_tables: ip_tables: osf match: only valid for protocol 6 [ 912.208353][T16285] x_tables: ip_tables: osf match: only valid for protocol 6 [ 912.221080][T16285] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 912.613903][T13245] usb 9-1: USB disconnect, device number 35 [ 912.886053][T16290] x_tables: ip_tables: osf match: only valid for protocol 6 [ 913.752608][ T1206] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 914.243068][ T1206] usb 7-1: Using ep0 maxpacket: 16 [ 914.264732][ T1206] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 914.285204][ T1206] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.354363][ T1206] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.373092][T13245] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 914.373919][ T1206] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.477335][T16315] input: syz1 as /devices/virtual/input/input107 [ 915.163140][T13245] usb 9-1: Using ep0 maxpacket: 8 [ 915.168803][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.208568][T13245] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 915.243763][T13245] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.251860][T13245] usb 9-1: Product: syz [ 915.251931][ T1206] usb 7-1: Product: syz [ 915.256237][T13245] usb 9-1: Manufacturer: syz [ 915.265114][T13245] usb 9-1: SerialNumber: syz [ 915.265166][ T1206] usb 7-1: Manufacturer: syz [ 915.272147][T13245] usb 9-1: config 0 descriptor?? [ 915.336609][ T1206] usb 7-1: SerialNumber: syz [ 915.594668][T13245] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 916.145916][ T1206] usb 7-1: 0:2 : does not exist [ 916.210915][T13245] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 917.107402][ T1206] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 917.353608][T16346] x_tables: ip_tables: osf match: only valid for protocol 6 [ 917.366194][T16346] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 917.735905][ T1206] usb 7-1: USB disconnect, device number 38 [ 917.801787][T14592] udevd[14592]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 917.981578][T13245] usb 9-1: USB disconnect, device number 36 [ 918.312995][ T116] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 918.363225][ T5940] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 918.413000][T13245] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 918.443031][ T116] usb 10-1: device descriptor read/64, error -71 [ 918.573253][T13245] usb 9-1: Using ep0 maxpacket: 8 [ 918.713109][ T116] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 918.769604][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 918.781530][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.785061][T13245] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 918.800742][ T5940] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 918.810813][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.837978][ T5940] usb 7-1: config 0 descriptor?? [ 918.870677][T13245] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.881935][T13245] usb 9-1: Product: syz [ 918.886513][ T116] usb 10-1: device descriptor read/64, error -71 [ 918.892032][ T30] audit: type=1400 audit(1752808636.703:757): avc: denied { mount } for pid=16360 comm="syz.7.2525" name="/" dev="autofs" ino=56268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 918.897374][T13245] usb 9-1: Manufacturer: syz [ 918.927419][T13245] usb 9-1: SerialNumber: syz [ 918.950435][T13245] usb 9-1: config 0 descriptor?? [ 918.967231][T13245] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 918.968476][ T30] audit: type=1400 audit(1752808636.733:758): avc: denied { mounton } for pid=16360 comm="syz.7.2525" path="/64/file0" dev="autofs" ino=56268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 919.014672][ T30] audit: type=1400 audit(1752808636.803:759): avc: denied { unmount } for pid=14379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 919.014935][ T116] usb usb10-port1: attempt power cycle [ 919.175773][T16364] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 919.269839][ T5940] hid-generic 0003:04F3:0754.0044: failed to start in urb: -90 [ 919.293771][ T5940] hid-generic 0003:04F3:0754.0044: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.6-1/input0 [ 919.466962][ T116] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 919.507713][ T5940] usb 7-1: USB disconnect, device number 39 [ 919.524216][ T116] usb 10-1: device descriptor read/8, error -71 [ 919.611345][T16370] x_tables: ip_tables: osf match: only valid for protocol 6 [ 920.152438][T13245] gspca_sonixj: reg_r err -32 [ 920.158224][T13245] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 920.225598][ T116] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 920.263602][ T116] usb 10-1: device descriptor read/8, error -71 [ 920.573313][ T116] usb usb10-port1: unable to enumerate USB device [ 920.954308][ T116] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 921.183150][ T116] usb 6-1: Using ep0 maxpacket: 16 [ 921.190148][ T116] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 921.199350][ T116] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.209848][ T116] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.220734][ T116] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 921.231515][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.240526][ T116] usb 6-1: Product: syz [ 921.266618][ T116] usb 6-1: Manufacturer: syz [ 921.312721][T16385] x_tables: ip_tables: osf match: only valid for protocol 6 [ 921.325296][T16385] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 921.348231][ T5894] usb 9-1: USB disconnect, device number 37 [ 921.373606][ T116] usb 6-1: SerialNumber: syz [ 921.704145][T16389] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2534'. [ 922.190027][ T116] usb 6-1: 0:2 : does not exist [ 922.581136][T16403] lo: entered promiscuous mode [ 922.588048][T16403] tunl0: entered promiscuous mode [ 922.609183][T16403] gre0: entered promiscuous mode [ 922.651746][T16403] gretap0: entered promiscuous mode [ 922.664234][T16403] erspan0: entered promiscuous mode [ 922.670536][T16403] ip_vti0: entered promiscuous mode [ 922.676992][T16403] ip6_vti0: entered promiscuous mode [ 922.684000][T16403] sit0: entered promiscuous mode [ 922.705171][T16403] ip6tnl0: entered promiscuous mode [ 922.711203][T16403] ip6gre0: entered promiscuous mode [ 922.746597][T16403] syz_tun: entered promiscuous mode [ 922.763605][T16403] ip6gretap0: entered promiscuous mode [ 922.845145][T16403] vcan0: entered promiscuous mode [ 922.862800][ T116] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 922.884820][T16403] bond0: entered promiscuous mode [ 922.911414][ T116] usb 6-1: USB disconnect, device number 24 [ 922.945813][T16403] bond_slave_0: entered promiscuous mode [ 923.017043][T16403] bond_slave_1: entered promiscuous mode [ 923.048418][T16403] team0: entered promiscuous mode [ 923.089303][T16403] team_slave_0: entered promiscuous mode [ 923.125715][T16403] team_slave_1: entered promiscuous mode [ 923.210694][T16403] dummy0: entered promiscuous mode [ 923.285372][T16403] nlmon0: entered promiscuous mode [ 923.335139][T16403] caif0: entered promiscuous mode [ 923.362051][T16403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 923.873255][ T116] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 923.929527][ T30] audit: type=1400 audit(1752808641.733:760): avc: denied { write } for pid=16423 comm="syz.9.2542" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 924.033197][ T116] usb 7-1: Using ep0 maxpacket: 8 [ 924.040000][ T116] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 924.056249][ T116] usb 7-1: config 0 has no interface number 0 [ 924.074019][ T116] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 924.092838][ T116] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 924.102240][ T116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.117494][ T116] usb 7-1: config 0 descriptor?? [ 924.132417][ T116] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 924.508826][T16419] binder: BINDER_SET_CONTEXT_MGR already set [ 924.546153][T16419] binder: 16418:16419 ioctl 4018620d 200000000280 returned -16 [ 924.574392][T16419] binder: 16418:16419 ioctl c0306201 200000000240 returned -11 [ 924.587248][ T7412] usb 7-1: USB disconnect, device number 40 [ 925.062783][T16441] tipc: Started in network mode [ 925.068209][T16441] tipc: Node identity 4, cluster identity 4711 [ 925.093055][ T5940] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 925.100675][T16441] tipc: Node number set to 4 [ 925.128569][T16446] loop2: detected capacity change from 0 to 7 [ 925.130797][T16445] overlayfs: workdir and upperdir must be separate subtrees [ 925.154078][T14592] Dev loop2: unable to read RDB block 7 [ 925.164433][T14592] loop2: AHDI p1 p2 p3 [ 925.174820][T14592] loop2: partition table partially beyond EOD, truncated [ 925.322652][T14592] loop2: p1 start 1601398130 is beyond EOD, truncated [ 925.343005][T14592] loop2: p2 start 1702059890 is beyond EOD, truncated [ 925.373706][ T5940] usb 9-1: Using ep0 maxpacket: 16 [ 925.591207][ T5940] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 925.619757][T16446] Dev loop2: unable to read RDB block 7 [ 925.637596][T16446] loop2: AHDI p1 p2 p3 [ 925.647922][ T5940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 925.679271][T16446] loop2: partition table partially beyond EOD, truncated [ 925.684585][ T5940] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 925.695843][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.706076][T16446] loop2: p1 start 1601398130 is beyond EOD, truncated [ 925.714157][T16446] loop2: p2 start 1702059890 is beyond EOD, truncated [ 925.726165][ T5940] usb 9-1: Product: syz [ 925.840414][ T5940] usb 9-1: Manufacturer: syz [ 925.848739][ T5940] usb 9-1: SerialNumber: syz [ 925.865986][ T5940] usb 9-1: config 0 descriptor?? [ 925.883260][ T116] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 925.890576][ T5940] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 925.921756][ T5940] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 926.172942][ T116] usb 7-1: Using ep0 maxpacket: 8 [ 926.187278][ T116] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 926.197234][ T116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.205357][ T116] usb 7-1: Product: syz [ 926.209645][ T116] usb 7-1: Manufacturer: syz [ 926.214313][ T116] usb 7-1: SerialNumber: syz [ 926.227956][ T116] usb 7-1: config 0 descriptor?? [ 926.432980][ T5901] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 926.450228][ T116] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 926.500570][ T5940] em28xx 9-1:0.0: unknown em28xx chip ID (70) [ 926.600497][ T5901] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.612347][ T5901] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.624931][ T5901] usb 10-1: config 0 interface 0 has no altsetting 0 [ 926.631682][ T5901] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 926.640886][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.652529][ T116] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 926.662140][ T5901] usb 10-1: config 0 descriptor?? [ 926.701359][ T5940] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 926.719376][ T30] audit: type=1400 audit(1752808644.523:761): avc: denied { setattr } for pid=16435 comm="syz.8.2547" name="secretmem" dev="secretmem" ino=57303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 927.370044][ T5901] usb 10-1: string descriptor 0 read error: -22 [ 927.465675][ T5940] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 927.472740][ T5940] em28xx 9-1:0.0: No AC97 audio processor [ 927.497391][ T5940] usb 9-1: USB disconnect, device number 38 [ 927.508188][ T5940] em28xx 9-1:0.0: Disconnecting em28xx [ 927.530064][ T5940] em28xx 9-1:0.0: Freeing device [ 927.785781][ T5901] uclogic 0003:256C:006D.0045: failed retrieving string descriptor #100: -71 [ 927.794972][ T5901] uclogic 0003:256C:006D.0045: failed retrieving pen parameters: -71 [ 927.803917][ T5901] uclogic 0003:256C:006D.0045: failed probing pen v1 parameters: -71 [ 927.812051][ T5901] uclogic 0003:256C:006D.0045: failed probing parameters: -71 [ 927.821374][ T5901] uclogic 0003:256C:006D.0045: probe with driver uclogic failed with error -71 [ 927.836212][ T5901] usb 10-1: USB disconnect, device number 35 [ 928.315630][ T5901] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 928.347580][T16478] wg1 speed is unknown, defaulting to 1000 [ 928.493101][ T5901] usb 9-1: Using ep0 maxpacket: 32 [ 928.505524][ T5901] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 928.513765][ T5901] usb 9-1: config 0 has no interface number 0 [ 928.520012][ T5901] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 928.534390][ T5901] usb 9-1: config 0 interface 1 has no altsetting 0 [ 928.595448][ T5901] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 928.634718][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.719586][ T5901] usb 9-1: Product: syz [ 928.760681][ T5901] usb 9-1: Manufacturer: syz [ 928.796011][ T5901] usb 9-1: SerialNumber: syz [ 928.828681][ T5901] usb 9-1: config 0 descriptor?? [ 928.863337][ T7412] usb 7-1: USB disconnect, device number 41 [ 929.069226][ T5901] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 929.262537][ T5901] cx231xx 9-1:0.1: Failed to read PCB config [ 929.271090][ T5901] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -71 [ 929.492307][ T5901] usb 9-1: USB disconnect, device number 39 [ 929.501240][T16487] vlan2: entered promiscuous mode [ 929.538551][T16487] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 929.558207][T16487] vlan2: entered allmulticast mode [ 929.571363][T16487] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 929.853306][ T5901] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 930.097176][T16497] overlayfs: workdir and upperdir must be separate subtrees [ 930.213173][ T5901] usb 9-1: Using ep0 maxpacket: 32 [ 930.234619][ T5901] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 930.244428][T16502] 9pnet_fd: Insufficient options for proto=fd [ 930.267263][T16502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.283842][ T5901] usb 9-1: config 0 has no interface number 0 [ 930.292184][ T5901] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 930.305007][ T5901] usb 9-1: config 0 interface 1 has no altsetting 0 [ 930.321986][ T5901] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 930.338436][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.352372][ T30] audit: type=1400 audit(1752808648.153:762): avc: denied { ioctl } for pid=16509 comm="syz.9.2569" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 930.358718][ T5901] usb 9-1: Product: syz [ 930.392093][ T5901] usb 9-1: Manufacturer: syz [ 930.405186][ T5901] usb 9-1: SerialNumber: syz [ 930.446476][ T5901] usb 9-1: config 0 descriptor?? [ 930.727235][ T5901] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 930.761633][ T5901] cx231xx 9-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 930.873215][ T5901] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 930.881913][ T5901] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 930.901706][ T5901] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 930.920214][ T5901] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 930.944259][ T5901] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 930.952201][ T5901] cx231xx 9-1:0.1: Failed to set devmode to analog: error: -32 [ 931.124861][ T5901] i2c i2c-2: Added multiplexed i2c bus 4 [ 931.165878][ T5901] i2c i2c-2: Added multiplexed i2c bus 5 [ 931.262803][ T5901] cx231xx 9-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 931.394424][ T5901] cx231xx 9-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 931.411039][T16502] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 931.435630][T16502] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 931.469321][T16502] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 931.477811][ T5901] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -71 [ 931.500519][T16502] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 931.518886][ T5901] usb 9-1: USB disconnect, device number 40 [ 931.565804][T16502] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 931.742194][ T30] audit: type=1400 audit(1752808649.503:763): avc: denied { watch watch_reads } for pid=16520 comm="syz.8.2573" path="/syzcgroup/cpu/syz8/cgroup.procs" dev="cgroup" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 931.767712][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.851364][ T30] audit: type=1400 audit(1752808649.653:764): avc: denied { ioctl } for pid=16523 comm="syz.6.2574" path="socket:[58443]" dev="sockfs" ino=58443 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 931.876003][T16528] tipc: Started in network mode [ 931.880899][T16528] tipc: Node identity 06c5efbdedaf, cluster identity 4711 [ 931.888362][ T5894] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 931.905498][T16528] tipc: Enabled bearer , priority 0 [ 931.931661][T16528] syzkaller0: entered promiscuous mode [ 931.946725][T16528] syzkaller0: entered allmulticast mode [ 931.966803][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2577'. [ 931.991123][T16528] tipc: Resetting bearer [ 932.062965][ T5894] usb 10-1: Using ep0 maxpacket: 8 [ 932.083789][ T5894] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 932.094601][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.121266][ T5894] usb 10-1: Product: syz [ 932.129407][ T5894] usb 10-1: Manufacturer: syz [ 932.136891][ T5894] usb 10-1: SerialNumber: syz [ 932.152245][ T5894] usb 10-1: config 0 descriptor?? [ 932.218613][ T7412] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 932.368773][ T5894] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 932.393267][T12375] Bluetooth: hci9: command 0x0406 tx timeout [ 932.464925][T16527] tipc: Resetting bearer [ 932.489828][T16527] tipc: Disabling bearer [ 932.578995][ T5894] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 932.597271][ T7412] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.607730][ T7412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.618984][ T7412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.619886][T16534] overlayfs: workdir and upperdir must be separate subtrees [ 932.631897][ T7412] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 932.650460][ T7412] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 932.661735][ T7412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.679855][ T7412] usb 6-1: config 0 descriptor?? [ 932.737303][T16536] tipc: Started in network mode [ 932.742207][T16536] tipc: Node identity 4, cluster identity 4711 [ 932.753091][T16536] tipc: Node number set to 4 [ 933.252620][ T7412] keytouch 0003:0926:3333.0046: fixing up Keytouch IEC report descriptor [ 933.278358][ T7412] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0046/input/input108 [ 933.398779][T13245] IPVS: starting estimator thread 0... [ 933.426757][T16531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.513559][T12375] Bluetooth: hci11: command 0x0405 tx timeout [ 933.525626][T16546] IPVS: using max 39 ests per chain, 93600 per kthread [ 933.536307][T16531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.770550][ T7412] keytouch 0003:0926:3333.0046: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 933.783335][ T1206] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 933.807111][ T7412] usb 6-1: USB disconnect, device number 25 [ 933.860649][T16549] fido_id[16549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 933.963115][ T1206] usb 7-1: Using ep0 maxpacket: 8 [ 933.970836][ T1206] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 933.980385][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.988555][ T1206] usb 7-1: Product: syz [ 933.993134][ T1206] usb 7-1: Manufacturer: syz [ 933.997730][ T1206] usb 7-1: SerialNumber: syz [ 934.016138][ T1206] usb 7-1: config 0 descriptor?? [ 934.237492][ T1206] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 934.440737][ T1206] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 934.473157][T12375] Bluetooth: hci9: command 0x0406 tx timeout [ 934.504459][T13245] usb 10-1: USB disconnect, device number 36 [ 935.353732][ T5940] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 935.472494][T16577] overlayfs: workdir and upperdir must be separate subtrees [ 935.520915][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 935.536617][ T5940] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 935.545227][ T5940] usb 6-1: config 0 has no interface number 0 [ 935.551325][ T5940] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 935.561395][ T5940] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 935.594309][T12375] Bluetooth: hci11: command 0x0405 tx timeout [ 935.603819][ T5940] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 935.673163][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.686631][ T5940] usb 6-1: Product: syz [ 935.691084][ T5940] usb 6-1: Manufacturer: syz [ 935.696503][ T5940] usb 6-1: SerialNumber: syz [ 935.710636][ T5940] usb 6-1: config 0 descriptor?? [ 935.716289][T16574] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 935.723846][T16574] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 936.243449][T16574] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 936.256649][T16574] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 936.293406][ T7412] usb 7-1: USB disconnect, device number 42 [ 936.466993][T16587] netlink: 'syz.9.2593': attribute type 2 has an invalid length. [ 936.476510][T16585] syz_tun: entered allmulticast mode [ 936.483025][T16585] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 936.491734][T16585] mroute: pending queue full, dropping entries [ 936.502159][T16585] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 936.510660][T16585] mroute: pending queue full, dropping entries [ 936.521769][T16584] syz_tun: left allmulticast mode [ 936.583365][ T5940] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 936.586865][T16587] misc userio: Can't change port type on an already running userio instance [ 936.613668][ T5940] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 936.633372][ T5940] asix 6-1:0.251: probe with driver asix failed with error -5 [ 936.698061][T16591] sp0: Synchronizing with TNC [ 937.002970][ T5894] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 937.153020][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 937.160903][ T5894] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 937.170288][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.178307][ T5894] usb 7-1: Product: syz [ 937.182487][ T5894] usb 7-1: Manufacturer: syz [ 937.187209][ T5894] usb 7-1: SerialNumber: syz [ 937.193362][ T5894] usb 7-1: config 0 descriptor?? [ 937.406628][ T5894] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 937.573210][T13245] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 937.633066][ T5901] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 937.673092][T12375] Bluetooth: hci11: command 0x0405 tx timeout [ 937.733186][T13245] usb 9-1: Using ep0 maxpacket: 8 [ 937.741159][T13245] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 937.751727][T13245] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.759987][T13245] usb 9-1: Product: syz [ 937.764203][T13245] usb 9-1: Manufacturer: syz [ 937.768811][T13245] usb 9-1: SerialNumber: syz [ 937.776368][T13245] usb 9-1: config 0 descriptor?? [ 937.793055][ T5901] usb 10-1: Using ep0 maxpacket: 8 [ 937.801744][ T5901] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 937.811144][ T5901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.819917][ T5901] usb 10-1: Product: syz [ 937.824251][ T5901] usb 10-1: Manufacturer: syz [ 937.828952][ T5901] usb 10-1: SerialNumber: syz [ 937.836870][ T5901] usb 10-1: config 0 descriptor?? [ 937.991060][T13245] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 938.062805][ T5901] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 938.167253][ T116] usb 6-1: USB disconnect, device number 26 [ 938.203224][T13245] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 938.703128][ T116] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 938.874375][ T116] usb 6-1: Using ep0 maxpacket: 32 [ 938.886624][ T116] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 938.899279][ T116] usb 6-1: config 0 has no interface number 0 [ 938.907750][ T116] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 938.924744][ T116] usb 6-1: config 0 interface 1 has no altsetting 0 [ 938.935949][ T116] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 938.951252][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.951797][T16618] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2601'. [ 938.963449][ T116] usb 6-1: Product: syz [ 938.971505][T16618] bridge0: port 3(wlan1) entered blocking state [ 938.972791][ T116] usb 6-1: Manufacturer: syz [ 938.981012][T16618] bridge0: port 3(wlan1) entered disabled state [ 938.991911][T16618] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 938.999120][ T116] usb 6-1: SerialNumber: syz [ 939.006075][ T116] usb 6-1: config 0 descriptor?? [ 939.009718][T16618] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 939.027008][ T5894] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 939.039124][ T5894] usb 7-1: USB disconnect, device number 43 [ 939.228569][ T116] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 939.237859][ T116] cx231xx 6-1:0.1: Failed to read PCB config [ 939.244531][ T116] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 939.260184][ T116] usb 6-1: USB disconnect, device number 27 [ 939.733054][ T116] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 939.823064][ T1206] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 939.893008][ T116] usb 6-1: Using ep0 maxpacket: 32 [ 939.901920][ T116] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 939.910131][ T116] usb 6-1: config 0 has no interface number 0 [ 939.917798][ T116] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 939.928613][ T116] usb 6-1: config 0 interface 1 has no altsetting 0 [ 939.937425][ T116] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 939.946737][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.954794][ T116] usb 6-1: Product: syz [ 939.958975][ T116] usb 6-1: Manufacturer: syz [ 939.963645][ T116] usb 6-1: SerialNumber: syz [ 939.973127][ T1206] usb 7-1: Using ep0 maxpacket: 32 [ 939.973611][ T116] usb 6-1: config 0 descriptor?? [ 939.983230][ T1206] usb 7-1: config index 0 descriptor too short (expected 6683, got 27) [ 939.983255][ T1206] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 939.983274][ T1206] usb 7-1: config 0 has no interface number 0 [ 939.983309][ T1206] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 940.003352][ T31] INFO: task syz.0.2110:14076 blocked for more than 143 seconds. [ 940.016327][ T1206] usb 7-1: config 0 interface 85 has no altsetting 0 [ 940.018803][ T31] Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 [ 940.031051][ T1206] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 940.032104][ T31] Blocked by coredump. [ 940.045269][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.049045][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.057615][ T1206] usb 7-1: Product: syz [ 940.061632][ T31] task:syz.0.2110 state:D stack:27336 pid:14076 tgid:14075 ppid:5824 task_flags:0x40044c flags:0x00004002 [ 940.078220][ T1206] usb 7-1: Manufacturer: syz [ 940.086845][ T31] Call Trace: [ 940.086856][ T31] [ 940.086867][ T31] __schedule+0x116a/0x5de0 [ 940.086907][ T31] ? __lock_acquire+0x622/0x1c90 [ 940.097139][ T1206] usb 7-1: SerialNumber: syz [ 940.097835][ T31] ? __pfx___schedule+0x10/0x10 [ 940.118610][ T31] ? find_held_lock+0x2b/0x80 [ 940.119382][ T1206] usb 7-1: config 0 descriptor?? [ 940.123346][ T31] ? schedule+0x2d7/0x3a0 [ 940.123380][ T31] schedule+0xe7/0x3a0 [ 940.123405][ T31] schedule_timeout+0x257/0x290 [ 940.123429][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 940.147066][ T31] ? rcu_is_watching+0x12/0xc0 [ 940.151853][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 940.157579][ T31] __wait_for_common+0x2ff/0x4e0 [ 940.162543][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 940.167998][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 940.174363][ T31] ? find_held_lock+0x2b/0x80 [ 940.179072][ T31] ? __flush_work+0x938/0xcc0 [ 940.183815][ T31] ? __flush_work+0x4d0/0xcc0 [ 940.188530][ T31] __flush_work+0x7d7/0xcc0 [ 940.193071][ T31] ? __pfx___flush_work+0x10/0x10 [ 940.199460][ T31] ? try_to_grab_pending+0x450/0x850 [ 940.207514][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 940.213204][ T31] ? __pfx___might_resched+0x10/0x10 [ 940.218654][ T31] ? cleanup_srcu_struct+0x35b/0x560 [ 940.225053][ T31] __cancel_work_sync+0x10c/0x130 [ 940.230216][ T31] hci_cmd_sync_clear+0x33/0x100 [ 940.235449][ T31] hci_unregister_dev+0x1cc/0x640 [ 940.242122][ T116] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 940.251146][ T31] ? __pfx_vhci_release+0x10/0x10 [ 940.256225][ T31] vhci_release+0x79/0xf0 [ 940.260582][ T31] __fput+0x402/0xb70 [ 940.264896][ T31] task_work_run+0x14d/0x240 [ 940.269530][ T31] ? __pfx_task_work_run+0x10/0x10 [ 940.274796][ T116] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 940.283167][ T31] do_exit+0x86c/0x2bd0 [ 940.287351][ T31] ? lock_acquire+0x179/0x350 [ 940.292036][ T31] ? __pfx_do_exit+0x10/0x10 [ 940.297060][ T31] ? find_held_lock+0x2b/0x80 [ 940.301802][ T31] do_group_exit+0xd3/0x2a0 [ 940.310041][ T31] get_signal+0x2673/0x26d0 [ 940.314870][ T31] ? __pfx_get_signal+0x10/0x10 [ 940.320017][ T31] ? __pfx_task_work_add+0x10/0x10 [ 940.354579][ T5894] usb 9-1: USB disconnect, device number 41 [ 940.356432][ T1206] appletouch 7-1:0.85: Failed to read mode from device. [ 940.363145][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 940.375458][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 940.382684][ T31] ? __fput_deferred+0x213/0x480 [ 940.387866][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 940.394996][ T31] exit_to_user_mode_loop+0x84/0x110 [ 940.399672][ T1206] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 940.403125][ T31] do_syscall_64+0x3f6/0x4c0 [ 940.415579][ T116] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 940.428187][ T116] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 940.437844][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.443958][ T116] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 940.451984][ T31] RIP: 0033:0x7f74dd98e929 [ 940.456521][ T116] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 940.468701][ T31] RSP: 002b:00007f74db7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 940.484697][ T31] RAX: 0000000000000004 RBX: 00007f74ddbb5fa0 RCX: 00007f74dd98e929 [ 940.492778][ T116] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 940.501961][ T31] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 940.510181][ T116] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -71 [ 940.522417][ T31] RBP: 00007f74dda10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 940.532400][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.542272][ T31] R13: 0000000000000000 R14: 00007f74ddbb5fa0 R15: 00007fffa6412968 [ 940.557024][ T116] i2c i2c-2: Added multiplexed i2c bus 4 [ 940.565193][ T5901] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 940.573098][ T31] [ 940.578988][ T116] i2c i2c-2: Added multiplexed i2c bus 5 [ 940.584445][ T31] [ 940.584445][ T31] Showing all locks held in the system: [ 940.586893][ T116] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 940.594995][ T31] 1 lock held by khungtaskd/31: [ 940.605284][ T116] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 940.612709][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 940.638664][ T31] 7 locks held by kworker/1:2/116: [ 940.641942][ T116] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 940.644309][ T31] 5 locks held by kworker/0:2/1206: [ 940.658468][ T31] #0: ffff88801f28c948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 940.665507][ T116] usb 6-1: USB disconnect, device number 28 [ 940.669651][ T31] #1: ffffc9000432fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 940.710591][ T31] #2: ffff888029a4c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 940.727306][ T31] #3: ffff8880233ec198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 940.737298][ T31] #4: ffff888059a4f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 940.746814][ T31] 1 lock held by klogd/5190: [ 940.751676][ T31] #0: ffff8880b853a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 940.767625][ T31] 2 locks held by getty/5586: [ 940.772358][ T31] #0: ffff8880370810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 940.790021][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 940.793617][ T7412] usb 10-1: USB disconnect, device number 37 [ 940.801656][ T31] 3 locks held by kworker/u9:2/5828: [ 940.824669][ T31] #0: ffff88802897d148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 940.848924][ T31] #1: ffffc9000428fd10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 940.861367][ T31] #2: ffff888025080dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 940.874957][ T31] 3 locks held by kworker/0:7/7412: [ 940.880220][ T31] #0: ffff88801f28c948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 940.892818][ T31] #1: ffffc90003f4fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 940.912761][ T31] #2: ffff888145703198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 940.924438][ T31] 2 locks held by kworker/u8:13/12336: [ 940.930442][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 940.943185][ T31] #1: ffffc900106efd10 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 940.955618][ T31] 4 locks held by udevd/16253: [ 940.960409][ T31] #0: ffff8880445511c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 940.969412][ T31] #1: ffff88803950d088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 940.978873][ T31] #2: ffff88805ea21b48 (kn->active#21){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 940.988503][ T31] #3: ffff8880233ec198 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 940.997332][ T31] [ 940.999723][ T31] ============================================= [ 940.999723][ T31] [ 941.011653][ T31] NMI backtrace for cpu 1 [ 941.011667][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 941.011687][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 941.011696][ T31] Call Trace: [ 941.011701][ T31] [ 941.011708][ T31] dump_stack_lvl+0x116/0x1f0 [ 941.011732][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 941.011746][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 941.011762][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 941.011777][ T31] watchdog+0xf70/0x12c0 [ 941.011798][ T31] ? __pfx_watchdog+0x10/0x10 [ 941.011814][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.011839][ T31] ? __kthread_parkme+0x19e/0x250 [ 941.011863][ T31] ? __pfx_watchdog+0x10/0x10 [ 941.011875][ T31] kthread+0x3c5/0x780 [ 941.011886][ T31] ? __pfx_kthread+0x10/0x10 [ 941.011896][ T31] ? rcu_is_watching+0x12/0xc0 [ 941.011911][ T31] ? __pfx_kthread+0x10/0x10 [ 941.011921][ T31] ret_from_fork+0x5d7/0x6f0 [ 941.011943][ T31] ? __pfx_kthread+0x10/0x10 [ 941.011959][ T31] ret_from_fork_asm+0x1a/0x30 [ 941.011987][ T31] [ 941.011993][ T31] Sending NMI from CPU 1 to CPUs 0: [ 941.135654][ C0] NMI backtrace for cpu 0 [ 941.135669][ C0] CPU: 0 UID: 0 PID: 12336 Comm: kworker/u8:13 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 941.135688][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 941.135697][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 941.135720][ C0] RIP: 0010:__lock_acquire+0x562/0x1c90 [ 941.135735][ C0] Code: 85 e8 0a 00 00 85 c0 74 16 48 8d 04 80 41 0f b6 44 c4 f9 41 32 45 21 a8 60 0f 85 f3 05 00 00 48 89 c8 89 4c 24 28 48 c1 e8 20 <89> c6 89 44 24 18 01 c1 c1 c6 04 89 74 24 20 41 0f b7 45 20 66 25 [ 941.135752][ C0] RSP: 0018:ffffc900106ef538 EFLAGS: 00000003 [ 941.135763][ C0] RAX: 00000000586a5d54 RBX: 0000000000000004 RCX: 586a5d54e8b824e1 [ 941.135772][ C0] RDX: 0000000000000000 RSI: ffff8880284bafd0 RDI: ffff8880284ba440 [ 941.135781][ C0] RBP: ffff8880284ba440 R08: 0000000000000000 R09: 0000000000000000 [ 941.135790][ C0] R10: 00000000000000a0 R11: 0000000000000001 R12: ffff8880284baf30 [ 941.135799][ C0] R13: ffff8880284bafd0 R14: 0000000000000004 R15: 0000000000000001 [ 941.135808][ C0] FS: 0000000000000000(0000) GS:ffff888124722000(0000) knlGS:0000000000000000 [ 941.135822][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.135830][ C0] CR2: 00007f8a6ef83178 CR3: 000000000e382000 CR4: 00000000003526f0 [ 941.135839][ C0] DR0: 0000000000000007 DR1: 0000000000104e69 DR2: 00000000000007ff [ 941.135848][ C0] DR3: 0000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 941.135857][ C0] Call Trace: [ 941.135862][ C0] [ 941.135869][ C0] ? lock_acquire+0x179/0x350 [ 941.135884][ C0] lock_acquire+0x179/0x350 [ 941.135895][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 941.135910][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 941.135923][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 941.135942][ C0] unwind_next_frame+0xd1/0x20a0 [ 941.135954][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 941.135966][ C0] ? kasan_save_free_info+0x3b/0x60 [ 941.135984][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 941.136002][ C0] arch_stack_walk+0x94/0x100 [ 941.136017][ C0] ? kasan_save_free_info+0x3b/0x60 [ 941.136034][ C0] stack_trace_save+0x8e/0xc0 [ 941.136051][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 941.136069][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 941.136081][ C0] kasan_save_stack+0x33/0x60 [ 941.136100][ C0] ? kasan_save_stack+0x33/0x60 [ 941.136117][ C0] ? kasan_save_track+0x14/0x30 [ 941.136135][ C0] ? kasan_save_free_info+0x3b/0x60 [ 941.136162][ C0] kasan_save_track+0x14/0x30 [ 941.136184][ C0] kasan_save_free_info+0x3b/0x60 [ 941.136200][ C0] __kasan_slab_free+0x51/0x70 [ 941.136219][ C0] kfree+0x2b4/0x4d0 [ 941.136235][ C0] ? e100_watchdog+0xb95/0x1680 [ 941.136251][ C0] ? skb_free_head+0x114/0x210 [ 941.136268][ C0] ? devlink_trap_report+0x1d3/0x700 [ 941.136288][ C0] skb_free_head+0x114/0x210 [ 941.136305][ C0] skb_release_data+0x776/0x9c0 [ 941.136327][ C0] consume_skb+0xbf/0x100 [ 941.136340][ C0] nsim_dev_trap_report_work+0x8bd/0xcf0 [ 941.136362][ C0] process_one_work+0x9cf/0x1b70 [ 941.136379][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 941.136400][ C0] ? __pfx_process_one_work+0x10/0x10 [ 941.136416][ C0] ? assign_work+0x1a0/0x250 [ 941.136430][ C0] worker_thread+0x6c8/0xf10 [ 941.136448][ C0] ? __pfx_worker_thread+0x10/0x10 [ 941.136462][ C0] kthread+0x3c5/0x780 [ 941.136474][ C0] ? __pfx_kthread+0x10/0x10 [ 941.136487][ C0] ? rcu_is_watching+0x12/0xc0 [ 941.136504][ C0] ? __pfx_kthread+0x10/0x10 [ 941.136518][ C0] ret_from_fork+0x5d7/0x6f0 [ 941.136542][ C0] ? __pfx_kthread+0x10/0x10 [ 941.136555][ C0] ret_from_fork_asm+0x1a/0x30 [ 941.136574][ C0] [ 941.141831][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 941.506817][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 941.518602][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 941.528641][ T31] Call Trace: [ 941.531903][ T31] [ 941.534823][ T31] dump_stack_lvl+0x3d/0x1f0 [ 941.539408][ T31] panic+0x71c/0x800 [ 941.543299][ T31] ? __pfx_panic+0x10/0x10 [ 941.547719][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 941.553080][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 941.559050][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 941.564424][ T31] ? watchdog+0xdda/0x12c0 [ 941.568841][ T31] ? watchdog+0xdcd/0x12c0 [ 941.573253][ T31] watchdog+0xdeb/0x12c0 [ 941.577496][ T31] ? __pfx_watchdog+0x10/0x10 [ 941.582169][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.587374][ T31] ? __kthread_parkme+0x19e/0x250 [ 941.592404][ T31] ? __pfx_watchdog+0x10/0x10 [ 941.597074][ T31] kthread+0x3c5/0x780 [ 941.601131][ T31] ? __pfx_kthread+0x10/0x10 [ 941.605710][ T31] ? rcu_is_watching+0x12/0xc0 [ 941.610463][ T31] ? __pfx_kthread+0x10/0x10 [ 941.615044][ T31] ret_from_fork+0x5d7/0x6f0 [ 941.619621][ T31] ? __pfx_kthread+0x10/0x10 [ 941.624194][ T31] ret_from_fork_asm+0x1a/0x30 [ 941.628951][ T31] [ 941.632166][ T31] Kernel Offset: disabled [ 941.636646][ T31] Rebooting in 86400 seconds..