last executing test programs: 13m49.233915839s ago: executing program 4 (id=691): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f0000000240)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006100ed015400637400ba00009500000000000000"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x20, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) 13m46.909489213s ago: executing program 4 (id=700): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8840) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000700)={'nat\x00', 0x4, "dea50c52"}, &(0x7f0000001740)=0x2c) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) (async) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000440)={0x0, 0x14, 0x8, "eb9a47809bf87af0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m44.430593207s ago: executing program 4 (id=710): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = fanotify_init(0x202, 0x400) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) (async) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r7, 0xc17a) (async) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') (async) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) (async, rerun: 64) fanotify_mark(r1, 0x20, 0x8001002, r1, &(0x7f0000000080)='./cgroup/../file0\x00') (rerun: 64) 13m43.666540432s ago: executing program 4 (id=713): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000008ec00000040000000100000000000000", @ANYRES32=r1, @ANYBLOB="000026210100000000005af77b86905e1cbc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000d40), 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) creat(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x10400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x54, 0x0, 0x101, 0x800000000000b4a, 0x9, 0x63b83101, 0x0, 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="3fd97d6447", 0x5}], 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYRES16=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x2, 0x4) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x13, r0, 0x0) 13m42.489576396s ago: executing program 4 (id=718): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) write$dsp(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x4, 0x8, 0x5, 0x4, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c58, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x9, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x9, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x33e00000, 0x8, 0x2, 0x80, 0x0, 0x3, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x1cb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x30f, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x6, 0x9, 0x8, 0x800, 0x4, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x8001, 0xfffffffd, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x80000002], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x80000001, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x5, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x2, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x1, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xe2, 0xce7, 0xb, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x9, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0x8, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x8, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xa, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x81, 0xb1c, 0x1, 0x200, 0xffbf2444, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13m42.202949362s ago: executing program 4 (id=722): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x200408c1}, 0x40080c6) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x2ea}, &(0x7f0000000240), &(0x7f00000001c0)) bind$l2tp6(0xffffffffffffffff, &(0x7f00000013c0)={0xa, 0x0, 0x0, @private0, 0x95, 0x4}, 0x20) r3 = syz_io_uring_setup(0x54f3, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f0000001380)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000000009042902abda66830009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000580)={0x40, 0x15, 0x7, "da5ae6c3b868b6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_usb_control_io(r8, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x23, 0x70, {0x70, 0x30, "60e5eb715e6303157acd41bc70ce9a7e395b1db5a12c20ecccbc6ad0dc6bb5205d0a719aa016eb7b67e33e1053b548a15ca19bed4fa8476b59edf1d790233e60b7d4583dad2dd152e3740c8c3dcea2a0776d57587f179f7882dbc811c136065e36e379a0591b5fcdb518879c7c97"}}, &(0x7f0000001440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0x4, 0xc, "9dab5447", "859a5ac2"}}, &(0x7f0000001500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0x9, 0xf, 0x5, 0x9, 0x7}}}, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x20, 0x0, 0x1, "8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001540)={0x20, 0x0, 0x8, {0x60, 0x2, [0x1e0f0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, "afe9"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "e899"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xae}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x2, "cc17"}, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001900)="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", 0x1000) syz_open_procfs(0x0, 0x0) io_uring_setup(0x4230, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000040)={0x8000aab8, 0x41415270, 0x1, @stepwise={0x5, 0x0, 0x2, 0x5, 0x101}}) 13m41.916976036s ago: executing program 2 (id=723): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4050000000000007110bb000000000006000000000000009500000000000000fca84e4c0c4df01b381321f6afa307c6cc7d9a2b0a99b82c1c83e2f4b3c9480f6911867b1a844a9f11899cdc897b385dfcf2a39475abab092478eadfa9fd48e04ae4b5a0098957cb2a9e54baf819f8cfd603bad8f507951dc32897fb09d0a54df605e0f1ebd6574c8e30b02fc4eb02d713d596de5b4a0f9b20d949bbbeac9a82cb898459bed65cb8f608b110dfa66a6ff10f62e936b8bf083c0d7a1862446dae2bc2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb7, &(0x7f0000000080)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13m41.529732593s ago: executing program 2 (id=724): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000540)=0x1c, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close_range(r0, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x478, 0x0, 0x2d0, 0xffffffff, 0xf0, 0x1e0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x9, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffff00], [], 'dvmrp0\x00', 'veth1_vlan\x00', {}, {}, 0xb9}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 13m40.908793679s ago: executing program 2 (id=726): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r2, 0x0, &(0x7f0000bd9000/0x3000)=nil, 0x3000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0xfffffffd, 0xd65ef, 0x27d104}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0081}, 0x805) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffff6f1}]}, 0x2c}}, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0x57, 0xd5, 0x20, 0xfd9, 0x2c, 0x7101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0x20, 0x0, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0xf6, 0x7b, 0xbf}}]}}]}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f00000002c0)) 13m40.469547311s ago: executing program 2 (id=728): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000500)={0x0, 0x8000040, 0x3f, 0x30315559, 0x7, [], [0x0, 0x400000, 0xfffffffe], [0x0, 0xb57, 0x1000001], [0x9, 0x0, 0x0, 0x2]}) mbind(&(0x7f00009cf000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x9, 0x8, 0x1) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000b15000/0x2000)=nil, 0x3) add_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000680)="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", 0x1000, 0xfffffffffffffffb) 13m37.260116528s ago: executing program 2 (id=739): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x20000400) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r1, 0x2f, 0x0, 0x0, 0x4, 0x1d, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0xba08, 0x0, 0x2}}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) syz_clone3(&(0x7f0000000280)={0x208400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000100), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$isdn(0x22, 0x2, 0x26) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80044944, &(0x7f00000002c0)={'wlan0\x00'}) 13m34.346881485s ago: executing program 2 (id=744): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40851, &(0x7f00000000c0)={0xa, 0x4e22, 0x29a, @remote, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x478, 0x0, 0x2d0, 0xffffffff, 0xf0, 0x1e0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x9, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffff00], [], 'dvmrp0\x00', 'veth1_vlan\x00', {}, {}, 0xb9}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 13m33.201298128s ago: executing program 32 (id=744): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40851, &(0x7f00000000c0)={0xa, 0x4e22, 0x29a, @remote, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x478, 0x0, 0x2d0, 0xffffffff, 0xf0, 0x1e0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x9, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffff00], [], 'dvmrp0\x00', 'veth1_vlan\x00', {}, {}, 0xb9}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 13m26.99894061s ago: executing program 33 (id=722): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x200408c1}, 0x40080c6) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x2ea}, &(0x7f0000000240), &(0x7f00000001c0)) bind$l2tp6(0xffffffffffffffff, &(0x7f00000013c0)={0xa, 0x0, 0x0, @private0, 0x95, 0x4}, 0x20) r3 = syz_io_uring_setup(0x54f3, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f0000001380)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000000009042902abda66830009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000580)={0x40, 0x15, 0x7, "da5ae6c3b868b6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_usb_control_io(r8, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x23, 0x70, {0x70, 0x30, "60e5eb715e6303157acd41bc70ce9a7e395b1db5a12c20ecccbc6ad0dc6bb5205d0a719aa016eb7b67e33e1053b548a15ca19bed4fa8476b59edf1d790233e60b7d4583dad2dd152e3740c8c3dcea2a0776d57587f179f7882dbc811c136065e36e379a0591b5fcdb518879c7c97"}}, &(0x7f0000001440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0x4, 0xc, "9dab5447", "859a5ac2"}}, &(0x7f0000001500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0x9, 0xf, 0x5, 0x9, 0x7}}}, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x20, 0x0, 0x1, "8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001540)={0x20, 0x0, 0x8, {0x60, 0x2, [0x1e0f0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, "afe9"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "e899"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xae}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x2, "cc17"}, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001900)="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", 0x1000) syz_open_procfs(0x0, 0x0) io_uring_setup(0x4230, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000040)={0x8000aab8, 0x41415270, 0x1, @stepwise={0x5, 0x0, 0x2, 0x5, 0x101}}) 9m15.105129773s ago: executing program 0 (id=1697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8582, 0x0) (async) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000280)=ANY=[]}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xc}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}]}]}]}}]}, 0x4c}}, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) (async) socket(0x2b, 0x4, 0xfffffff8) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 9m14.16060154s ago: executing program 0 (id=1701): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0xbbbe, 0x0, 0x2, 0x4, {0x0, 0x0, 0x1}, {0x7, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7, 0x210000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, "706cf5fa3fe3f552162f7544f242a4d4b00b54c579c6a3e667cf30d1ebe5ff40", 0x5, 0x80000001, 0x7, 0xffff0000}, 0x3c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f0000000280)) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000340)=0xb, 0x4) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f00000000c0)=0x3) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000040)) 9m13.849023782s ago: executing program 0 (id=1703): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000300)={0x1d, r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x420000) ioctl$FICLONE(r5, 0x40049409, r7) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_pts(r1, 0x141601) r8 = socket$inet(0x2, 0xa, 0x185) setsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000180)="4de686ccfd5b6f0a919dc66166ca8dc5dbad0da6a6ff852a1d45b85bbb2c860eb4ecdbc975efa651cde90e839adf549910c54c4d31bdbbfaafe8c418c560b8a3f4d3d9a109d8ea762c88644d18d60b3328057db3090b3e3d28c81eceb2aa491cbcf2e3ddcea33ed8500d1940e5", 0x6d) close_range(r0, 0xffffffffffffffff, 0x0) 9m13.30946921s ago: executing program 0 (id=1706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000040), 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r9, 0x80404531, &(0x7f0000000140)=""/4084) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xa1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x4000) fcntl$notify(r3, 0x402, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 9m12.778141522s ago: executing program 0 (id=1710): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1272) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000015c0), 0xc02c0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000001600)=0x2) utimensat(r1, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={{0x77359400}}, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 9m12.033630056s ago: executing program 0 (id=1715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="4801000610001307000000000000080000000000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="000000004c0014007368613100"/80], 0x148}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) munlockall() (async) munlockall() move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44) write$tun(r0, &(0x7f00000005c0)={@val={0x1c, 0xf5}, @val={0x1, 0x4, 0x9, 0x9, 0xa1, 0x6}, @mpls={[], @ipv6=@dccp_packet={0xf, 0x6, '\x00', 0x8d, 0x21, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, "a431cb", 0x3, "20c803"}, "5d8af013d3c983b356b1e251b070dd9637b61d6b55f981dfc9914fd81f0361219518a16691e56ba5238cda4749775560c65ab2786260a6ea23516cfb33efd25e08f02cf6ec90628704aba7fe0da5e4f264eb7b39a2000f6ee2d4b738f65cb2366d216eb4c17fc7c5eeeb8faa17a0b40a2f35dffc41464ad1a78bb2aa1d"}}}}}, 0xc3) (async) write$tun(r0, &(0x7f00000005c0)={@val={0x1c, 0xf5}, @val={0x1, 0x4, 0x9, 0x9, 0xa1, 0x6}, @mpls={[], @ipv6=@dccp_packet={0xf, 0x6, '\x00', 0x8d, 0x21, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, "a431cb", 0x3, "20c803"}, "5d8af013d3c983b356b1e251b070dd9637b61d6b55f981dfc9914fd81f0361219518a16691e56ba5238cda4749775560c65ab2786260a6ea23516cfb33efd25e08f02cf6ec90628704aba7fe0da5e4f264eb7b39a2000f6ee2d4b738f65cb2366d216eb4c17fc7c5eeeb8faa17a0b40a2f35dffc41464ad1a78bb2aa1d"}}}}}, 0xc3) 9m11.38247566s ago: executing program 34 (id=1715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="4801000610001307000000000000080000000000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="000000004c0014007368613100"/80], 0x148}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) munlockall() (async) munlockall() move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44) write$tun(r0, &(0x7f00000005c0)={@val={0x1c, 0xf5}, @val={0x1, 0x4, 0x9, 0x9, 0xa1, 0x6}, @mpls={[], @ipv6=@dccp_packet={0xf, 0x6, '\x00', 0x8d, 0x21, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, "a431cb", 0x3, "20c803"}, "5d8af013d3c983b356b1e251b070dd9637b61d6b55f981dfc9914fd81f0361219518a16691e56ba5238cda4749775560c65ab2786260a6ea23516cfb33efd25e08f02cf6ec90628704aba7fe0da5e4f264eb7b39a2000f6ee2d4b738f65cb2366d216eb4c17fc7c5eeeb8faa17a0b40a2f35dffc41464ad1a78bb2aa1d"}}}}}, 0xc3) (async) write$tun(r0, &(0x7f00000005c0)={@val={0x1c, 0xf5}, @val={0x1, 0x4, 0x9, 0x9, 0xa1, 0x6}, @mpls={[], @ipv6=@dccp_packet={0xf, 0x6, '\x00', 0x8d, 0x21, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x4, "a431cb", 0x3, "20c803"}, "5d8af013d3c983b356b1e251b070dd9637b61d6b55f981dfc9914fd81f0361219518a16691e56ba5238cda4749775560c65ab2786260a6ea23516cfb33efd25e08f02cf6ec90628704aba7fe0da5e4f264eb7b39a2000f6ee2d4b738f65cb2366d216eb4c17fc7c5eeeb8faa17a0b40a2f35dffc41464ad1a78bb2aa1d"}}}}}, 0xc3) 15.836639385s ago: executing program 7 (id=3871): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="830400000000fedbdf250100000004000180"], 0x18}}, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 14.050521781s ago: executing program 7 (id=3878): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x22020400) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) flock(r1, 0x5) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) 12.917538206s ago: executing program 5 (id=3884): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000042000900fc180000fedbdf250300009f2169a719806e12d342a314000858912cafed8929a0f774e53932abc88fe14d6d818b9a442eb06997b2d71250c3886d898c9b05ff9f1ff0c2c1f2bd143037218d12e9a570bd4562b439d872532e5293789447b00238bb7bde4713191dab4d6e93530fa400c9cc776dc942f300041c76f74f1af876d9f035285e99607c81bab45a71a8a7046ec5c329158d36f8ca74a807fe1ce3b2531a39838207cb43227125264f055c81867ff501a47478468262088406"], 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8, 0x504, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)={0x3, 0x0, @auto=[0x10, 0x29, 0x38]}, 0xb, 0xfffffffffffffff8) keyctl$revoke(0x3, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8000000, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xffffff00, 0x0, 0x0, 0xff000000], 'vlan0\x00', 'nicvf0\x00', {}, {}, 0x2e, 0x6, 0x0, 0x61}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x1, 0x0, [0x1000, 0x4bd, 0x7f, 0x6, 0x7, 0x6ee, 0x8, 0x7, 0x6, 0x7, 0x1, 0x2, 0xea56, 0x8, 0x1, 0x3], 0x9}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xff, 0x7, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) syz_emit_ethernet(0xe7, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800b13afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000fe00000000000000000000000000aa0eeaff0000000000000000000000000101112025885a4c6fb77d25a0b6a5f6abf6ac43ba06f246f000aa0e2970e15948450d3c786fc6a93108ab1f30127e6769f258fdea15eb8f8dbf3ca317b07c6f10bcc52aa8d73f76d51f3f9b0c5fb8f81a31f53c16ee1480ade0dc765cc67efa4cd307d10987670d644de6d692be9e9e37b778cc40766a5c19b14d5b"], 0x0) 12.770185463s ago: executing program 5 (id=3885): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x100, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d0002080910030904180202b41d3d0109050e03090000000109058503"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="620320dba189924a0effffffff1b3d59b5748da6d05c4349656ea2b1ddc25505b828d9b136fd45be48c2127480f635c260eae1055245a411ca7f3740fc4de29258cd90d46187946f57fce71a883c09f552550d13a96272611a1885ac2d81cd813507"]}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00') syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x10) pread64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x2) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r4, &(0x7f0000000000)='\x00', 0x2, 0x1100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = socket(0x22, 0x2, 0x24) bind$inet(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="540100001a00130700000000fcffffff00000000000000000000000000000001ac141412000000000000000000000004000000004e2100000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r7 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffe, 0x2) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0xafc, 0x5, 0x4, 0x100000, 0x4, {}, {0x3, 0x2, 0x3, 0x1, 0xc, 0x8, "361ed7dc"}, 0x4, 0x3, {0x0}, 0x9}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) sched_setattr(r9, &(0x7f0000000380)={0x38, 0x0, 0x1000002c, 0xb, 0x8, 0x3, 0x3, 0x3, 0x9, 0x6}, 0x0) io_uring_setup(0x6523, &(0x7f00000007c0)={0x0, 0x9c55, 0x4000, 0x3, 0x304}) 11.443784723s ago: executing program 1 (id=3888): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x18, 0x0, 0x800, 0x0, 0x25dfd3fe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x40) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r3 = msgget$private(0x0, 0x3a9) msgctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{0x2, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 10.531729656s ago: executing program 7 (id=3890): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) preadv2(r7, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/253, 0xfd}, {0x0}], 0x2, 0x7bfe, 0x20024, 0x5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = eventfd2(0x6, 0x80800) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r9, 0xffff, 0x2, 0x5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x430102, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) 9.844992584s ago: executing program 3 (id=3895): r0 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0xb9da000) r1 = userfaultfd(0x801) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x9, 0x0, 0x20363159, 0x6, 0x0, 0x2000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x3}}) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000040010000"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc2, 0x16, 0x88, 0x10, 0x5ac, 0x245, 0xcf45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x80, 0x0, [{{0x9, 0x4, 0xbe, 0x6, 0x0, 0x3, 0xa8, 0x2, 0x7a}}]}}]}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r10, 0x4a9}, 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x6c, 0x65, 0x2, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xf, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) 9.645631747s ago: executing program 5 (id=3896): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x5, 0x30, &(0x7f0000000000)=""/48) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x60, 0x15, 0xd, "b29ab0dd379a5d47b3dbfd0a3d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0x5292, {{0x10, 0x4, 0x1, 0x9, 0x40, 0x64, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xf, 0x64, [@broadcast, @rand_addr=0x64010102, @multicast2]}, @timestamp={0x44, 0x14, 0x1e, 0x0, 0x5, [0xff, 0x6, 0xf2d, 0x0]}, @lsrr={0x83, 0x7, 0x5b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r5, 0x25, 0x2, @void}, 0x10) 9.352554563s ago: executing program 1 (id=3898): ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x100000000000003, r2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x9620}], 0x1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3200) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x6) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) 8.241102347s ago: executing program 6 (id=3900): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040), &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000600"/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3a, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES8=r2], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}]}]}]}}]}, 0x54}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r8, &(0x7f0000000180)={0x6, 0x20, 0x8000000000000001, 0x20, 0xa4dc}, 0x48) fsopen(0x0, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f00000002c0)=0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 7.989501857s ago: executing program 7 (id=3901): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x3000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000000000500000a48000000180a05000000000000000000020000001c000380180003801400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30000000000e2300001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) socket$packet(0x11, 0x3, 0x300) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x1ff, &(0x7f00001a6000/0x3000)=nil, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) 7.905314389s ago: executing program 1 (id=3902): set_mempolicy(0x1, &(0x7f0000000040)=0x2, 0x4) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe03020000052406000005240002000d240f01bfffffff0000000000042413020424130109058103000407100709"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x68, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x16}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x1e8, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8000}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdc9}, {0x6, 0x16, 0x872}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf2f}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7e}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfb}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x5}, {0xfffffffffffffd07}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x7f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x16}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x86e}, {0x8, 0xb, 0x5}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d15, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000001000000000300000018000180100001006574683a73797a5f74756e"], 0x2c}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000780)={0x0, 0x0, r10}) socket$inet(0x2, 0xa, 0x2) 7.292520764s ago: executing program 6 (id=3903): r0 = inotify_init1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x203) ftruncate(r1, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000) 6.612534309s ago: executing program 5 (id=3904): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000006c0)={0x0, 0xf, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x40, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x20, 0x10, 0x1, "82"}, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xfffffffffffffeb8, 0x8, [@typedef={0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @enum64={0xe, 0x8, 0x0, 0x13, 0x0, 0x4, [{0x3, 0x5b6, 0x73}, {0xa, 0x9, 0x3}, {0x3, 0x2, 0x3ff}, {0xb, 0x93, 0x3}, {0xd, 0xb}, {0x1, 0x18, 0xfff}, {0xb, 0x80000000, 0x8}, {0xe, 0x8001, 0xffffff74}]}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x9, 0x1}, {0x7, 0x4}, {0x9}, {0x0, 0x1}, {0xa, 0x4}, {0xd, 0x5}, {0x4, 0x3}, {0x2, 0x5}, {0xa}, {0x4, 0x3}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000180)=""/23, 0x10c, 0x17, 0x1, 0x8, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x41000, 0x0, '\x00', r0, 0xf, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) syz_usb_connect(0x0, 0x96, &(0x7f0000000580)=ANY=[@ANYRES8=r3], &(0x7f0000000680)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x40, 0x2, 0x2, 0x8, 0xb3}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10813}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}}, 0x8000) 6.323315116s ago: executing program 3 (id=3905): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NL80211_CMD_SET_BEACON(r1, 0x0, 0xc020) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2}, 0x40) 6.157150218s ago: executing program 3 (id=3906): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000019580)={0x2020}, 0x2020) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0xf44f, 0x0, 0x0, 0x34d}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) r6 = syz_clone(0x3040100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x420f, r6) mq_open(&(0x7f0000000100)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\x03q\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x91:\x0f\xef\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00q`\x1a_\xcd\x8ck+\x05\x11}*\xf5\r\a\x14\x97B>\x9d\xe6\x81\xf9\xcbE\xa1\xc3\xda\xb6\xfe\rh\xd5\xe3\x9d\x85\xe0;\x90W\xa4\xc1\x1eb;\xa5\x12\xc5\x936k\x18=\xe08\x17\xfc\xf1\xee\xd5\xa7\xab\xd3\x05a\x15?c\xa3\xa8\xd3$\xe8`$\x16\xb4\xd8K\x1bR4s\xab\xedM\xa1\xd4I\x91\x01', 0x6e93ebbbcc0884f2, 0x2c, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x8c01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000c40)={0x8000203d}) 4.787879775s ago: executing program 7 (id=3907): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x43) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, &(0x7f0000000000)="fa803942c7cda31bffef5bf5c27b92d6928dbe85b5b517d3aedb7c9d62d638c85940875c00a596ff78bfb5e08f95006a4e18e68d5e97157c8328b9e9cfbfe32e0a63bba7ca5c5ddc15ac17a2cb15b6771a2c15fbe00ed048d09e9d11cfc8601f2827"}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x3, r2, 0x0, 0x2, 0x1e, &(0x7f0000000100)="383409e130b3dc532f86b007be6d48e5333b6b18b3171b51be2021d7a010"}) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x3, 0x4, "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", 0x7, 0x2, 0xfd, 0x9, 0x5, 0x1, 0x1, 0x1}}}, 0x120) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a7a3ab203512100084590000000109021b000200000000090465020009"], 0x0) 4.537335252s ago: executing program 1 (id=3908): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x54, 0x400000) r3 = syz_clone(0x102000, &(0x7f0000000040)="e9d9430cc03adbd843fd8e5f1f1bdc4af0b0038cd449f8043fe46903", 0x1c, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="af9c8141e2ab10fa07464e85bb9a526be20ca043fce5ea7d3cce84ef59c9f97d570c5608d539499bd8e7c144295b30a5ec75852d1995511422d8b2fdbbdbda3ba9e7682bd0a4cbd2c14aaa773b36bb5c91e8ebb420b93bbd9231762bae5fb83631eb7be2bd42029d0bea6693d8c4d5834e5e505ce053") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000280)={{0x4, 0x4, 0xb, 0xe, '\x00', 0x9}, 0x4, 0x20000000, 0x4, r3, 0x5, 0x2, 'syz0\x00', &(0x7f0000000180)=['^\x00', '\x00', '!\x00', '{,\xca/&,&\x00', '\x00'], 0xe}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc), 0xa, 0x1, 0x0, 0x0, 0x2000000) unshare(0x22020600) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0xfffffffffffffeea, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002280), 0x0, 0x4000000) mbind(&(0x7f00001e5000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000240)=0xb, 0x8, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x204, &(0x7f0000000440)={[{0x2f, 0x4e00, "bf53abc3d5107ca460a8f1063081ac5bcba230c167f92ab1aa88fda139bb42dab395a0e5f0a631a7671f9f1c2f7c7b"}, {0x73, 0x4e00, "dbc0177ed9ba5dd264690eea5f111e0ad2e9d04fcc1c80657b9cfddbd95d94275cc8a14b1dbcb26ec564472f25ce64f4320fd0e5ef3d49e8a270b35f76061bcae513b2924844634f96d5fcb9b0cce4b96bafb71525afdd66eadacbb2f1b9b7e00bde79167df1df74513ad9801b10f4b55be39e"}, {0x8d, 0x4e00, "309e6f4dcb27df9400754654f2142665643b47949f7377a6967c648ff0ad5c69c93ca6c57675bed311553796ec1a915fb4333f404e9a2cd1561f17a1bb91f1f6963389aae15b358a858c23812aab531e000a867207e3817d505cfe3e32b3468d0c1b160a65093ac0b8a5562347d090906804584d2b59ad433997f47b2a42859c1c6a8f08fdfd0bf9500aecba34"}, {0x67, 0x4e00, "e7901e38e9aa8f66d54dfe8db9cf0f79cd6ea56fe1e258feca789bb1f6a0ff8945637e911ec2a32a1a136c02984daa0df11b4830a6f6ff6319ff1270b56ceaa929edcca908bd4cfd4f2609a89f2e0cb7d22cad67070c85983bf1af8fca65b6fe64ab6b77b955bd"}, {0x53, 0x4e00, "35b69dcb891b489a6c4aa86ecf92e6d724e62efef7bc851ad15afaa0f3b89c65c2190a986914edd863201622d0495be0d167212f62b2f806e005736222085ea988310e72547e4c078a6392f8777f86a7b41362"}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4.029747787s ago: executing program 6 (id=3909): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x6}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000040)={0x0, 0x6, 0x5, 0xfff, 0x2, [0x0], [0x80000001, 0x1, 0x4, 0xfffffffd], [0x3ff, 0x9, 0xb1, 0x1], [0x401, 0x76be, 0xf52, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r2}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000100)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000040)={0x0, 0x6, 0x5, 0xfff, 0x2, [], [0x80000001, 0x1, 0x4, 0xfffffffd], [0x3ff, 0x9, 0xb1, 0x1], [0x401, 0x76be, 0xf52, 0x7fffffffffffffff]}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r2}) (async) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000100)=0x8) (async) 3.891744296s ago: executing program 6 (id=3910): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010b404b1070000000000010902240001000000000904000001030000b828ab997735467600092100000001220500090581030004000202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80)) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x0, 0x22, 0x6c, {0x6c, 0x10, "b9ce45529f93f92c2b63fa7b7c849e9969c4fc0f56e9ee1e405edcfb35a06091a991fbcd4ffef35ed1480927eeb2bc8212d00b75cd6faf631be942d2432ad3f0b03a764f018b66e9072f7b583dcfd211cf4dc0cad537cea424596b85372a316929fa52bd904a90d8f48c"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x40, 0x17, 0x7a, "952e4cf0b28f7b93b2a515ce888cfcba62f568a951fca62b9c37848ebd5200086c102b3616079509a53706e2585cf34dce6fc7d482ce5eec52fbcd812ded6bfb253bea62ce79a7902f6c6991d63b90ffae48084f99470f800c1359f88bd43cc61751d91dd24b00392a416ca19b421a09e5b1867dbe7c9d4058f4"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x81, 0x2, "1807"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "c196"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "18c856"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "83"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "fc8f21"}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000001400)=0x3d70, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, &(0x7f0000000000)={0x5a, 0x0, 0x0, 0x0}, 0xfffffffffffffeb1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000780)="e3", 0x1}], 0x2, 0x6) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.06776556s ago: executing program 3 (id=3911): r0 = syz_usb_connect$hid(0x5, 0x8f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = syz_io_uring_setup(0x4220, &(0x7f0000000000)={0x0, 0xd01e, 0x400, 0x2, 0x353}, &(0x7f0000000080), &(0x7f00000000c0)) r2 = epoll_create1(0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r2, r1], 0x2) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)="97", 0x1}], 0x1, 0x0, 0x0, 0x40415}], 0x1, 0x800) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r3], 0x1) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000800)={{r3}, 0x5, 0x9, 0xb497}) syz_usb_control_io(r0, 0x0, 0x0) r6 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x140, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x3, 0xb2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x5c, 0x5c, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x9, 0x6}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xc5, 0x4, 0xff, 0xff, 0x5}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x1, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "edda0329b2e1ad9b6d18b6bc543cd996"}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1801}}, {0x49, &(0x7f0000000140)=@string={0x49, 0x3, "4d119fb092f12e614984a755ff45191603e044b62938d0a46e494fffbbdd7d26a6c073219427b18b318091c780c2d3e69b509d24b633577b0d84c14fa0ab1c50401f4fb8814687"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$printer(r6, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x0, 0x3, 0xc5, {0xc5, 0x23, "7781536dcecaa55a23d04bc256bb4d0ef5665e0f7d15b0a7a6d0ca232fcca06bbefc9010bb9c80ee2ee6639cdcff82d6d190fc844dedc1258c73fab9e379808fdf2c889b432e36922390d17e278045ebc236a817b88b7f99394afcbd3ba30013438be8c27849097eb8f0fb1994824478bc32e15ea3d74f4aaaeceffe4544a2a65c7721362eaa238bd20c724c7920526f82dd656028d8c897e8f56abd63fdaf2065ece86af4e048ea9049b07117f6f1aad97471ed9ce0d336af29435980fae3a3d4ce8a"}}, &(0x7f0000000440)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "bbaebe5cd7fc9994a4651ead95d70db6a4ae0a886f74aa96d336e00e3f20392ebf368156f1d4ac69274beba50abbf569ec24154f1a83f581be45f4"}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000500)={0x20, 0x1, 0x90, "6f4b2caea224d5eed1c265431a81d5bf1bc5813068486c72affa1804e9cac1e9027ce6954beda9068e80dc7a4d3a4c2f3c54c1370ad7ce21e3b24b9964b90a2a046c0a85aca7ae5fbdcd415f2db9cc34e8d4b5aef733935f596aaec0006a2c1d2423233b30cce84188cf9d8073c4d32741baebbe9a790957b483b1e5fc9490fbbed7ca0abeb0ebed71158d2c8d05c509"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x0, 0xdb, {0xd9, "548d76e3f0cec9c5278e54ee446517b3df39f2358f0b9d38fc5a38aab2394103b7673240a94b3d95b2e70eb9aa3402bd1cdb01d1b1a3e73e93621830ada4d21384f1adf0b32a5d208006fd46d3f1833d4fcbeac1e42d3991935e9e1a3ed2ffe4ecb4be7471727344d2ba4595e4626956e77c4cc6db08454dcfe9046a2181dc6c05a08020c9b2fa7f6d9ffcfaebaa02c737273696fc3a10c87d9dc82e2cc85e028cae2792c285a5898dd268ac1b81ac58dad84f5201d1300990971a7bc7c29a47e433c3a7db3a30248dde8ca0d5eb19b433ded8b0ba1628ec6b"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x5a}}) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000980)={0x40, 0x22, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.93735299s ago: executing program 5 (id=3912): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000280)}}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su_\x17(y\xb6\xfb\xb2\x1b\v`\xd7:<\x16\x7f\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\x04\x00(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5S\xa8\xa9P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W', 0x3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004580)={@cgroup, 0xffffffffffffffff, 0x16, 0x10, 0xffffffffffffffff, @void, @value}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='syz1\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r1}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r1}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) 1.6469201s ago: executing program 1 (id=3913): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x24020400) unshare(0x2a020400) listxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @sit={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x801}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x408}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xef4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip6erspan0\x00'}]}, 0x9c}, 0x1, 0xd, 0x0, 0x4000004}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800500150002000000080012"], 0x64}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8002}, 0x4) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x3, 0x8, @remote, 0x7}, 0x1c) sendmsg(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x80) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000100)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r10, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x3, {0x2000000008, 0xfffffffffffffffc, 0x4, 0x0, 0x8, 0x0, {0x4, 0x80, 0x8000000000000001, 0xfffffffffffffffd, 0x2000, 0x4, 0x0, 0x2, 0x5, 0x6000, 0xfffffffd, r12}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x40030, &(0x7f0000000840)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r12}, 0x2c, {'group_id', 0x3d, r13}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x7fff}}]}}, 0x2, 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, r12}}, {@uid_lt={'uid<', r12}}, {@obj_type={'obj_type', 0x3d, 'fd'}}, {@fowner_lt={'fowner<', r12}}, {@obj_type={'obj_type', 0x3d, 'rootcontext'}}]}}, 0xfd, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000340)={0x28, 0x4, 0x0, {0x2, 0x101}}, 0x28) splice(r0, 0x0, r2, 0x0, 0x28, 0xf) socket$kcm(0x2, 0x3, 0x84) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1.420551575s ago: executing program 7 (id=3914): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902faff0100000000090400000190f19c000905f3edb650842a27679c67a81d85dbc6f021b7da388087f66c7fb366dc6e7db5abc0d687e6a99a01125cdc233fbe2ca903ef6a736bfeb0e5b0c481cdbab4de3c8ddbd5aba5d945fcd261979fe696872e0eb10415deef3619689044a1672e8e0748ef983d87bee3101a62effdfbecdb64a43bae4d832238fa2c955dffc8726d6c3b39bc40ea26eb1c5155048132c71d3b33b1f4b224adbdff9c6f1803812f77962462f7c51652791f91f3269f"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000400)={0x40, 0x5, 0x19, "4b21c7dffce559109678ec5e87b15b6c43a11b12314c9fc9c7"}, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000d00)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 829.618655ms ago: executing program 3 (id=3915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb8) (async) openat$pfkey(0xffffffffffffff9c, 0x0, 0x8080, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000001340), 0x0, 0x4004004) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$inet6(0x10, 0x80000, 0x3) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0x9, 0x8, 0x3, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b3019c", 0x3, 0x0, 0x0, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r1], 0x1, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50, 0xffffffffffffffff, 0x0) (async) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) 742.147464ms ago: executing program 6 (id=3916): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)=@ipv4_newaddr={0x58, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xd4}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 677.406802ms ago: executing program 3 (id=3917): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYRES8=0x0], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x5, 0x1, 0x1, 0x3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x20, 0x24, 0xc9, {0xc9, 0x24, "498595630066acc8de3302fdf2f8ca5e1cce8c4d21f3fa0601ba0e68cbdad6a5aa052b37f5d7cb5eb1763fb3769e3d3d05b8ee15c583e940e360f22ea1369573c1e1206b6c1d719785df5e6b963b70187dce399960aa35b7811739893c5ed4083cb3c99182cd20a9f5babfafd4f674d9dbe55ec68e057447987780306f18b93b3ba3d2450bec4a527830b6b9ebdad3df39d76df5421ce6daa1f245f09de9fffc03dcccc40719478c6be3244118c1b3ce6d24b51dd82f4e885161e8ead66de1154cebbcc7342436"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f00000005c0)={0x60, 0x15, 0x100, "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"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000300), 0x0}, 0x20) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 450.51809ms ago: executing program 6 (id=3918): set_mempolicy(0x1, &(0x7f0000000040)=0x2, 0x4) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe03020000052406000005240002000d240f01bfffffff0000000000042413020424130109058103000407100709"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x68, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x16}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x1e8, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8000}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdc9}, {0x6, 0x16, 0x872}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf2f}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7e}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfb}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x5}, {0xfffffffffffffd07}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x7f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x16}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x86e}, {0x8, 0xb, 0x5}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d15, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000001000000000300000018000180100001006574683a73797a5f74756e"], 0x2c}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000780)={0x0, 0x0, r10}) socket$inet(0x2, 0xa, 0x2) 245.529308ms ago: executing program 5 (id=3919): syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504be93"], 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0x2, 0x0, 0xffffffff, 0x20000}, 0x10}}, 0x0) accept4(r2, 0x0, 0x0, 0x80800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES16=r0], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) r6 = add_key$user(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000280)="000003", 0x3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r6}, &(0x7f0000000180)=""/73, 0x49, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101142, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x7, 0xf, 0x8a9e, 0x7cd9}, 0x30, [0x10000, 0x8, 0x28, 0x2, 0x9, 0x8, 0x5, 0x8, 0x10001, 0x9f81, 0x6f9, 0x8, 0x9, 0x0, 0x8d, 0x0, 0x3, 0x7, 0xfcd, 0x4, 0x0, 0x401, 0x4, 0x9, 0x6, 0xc, 0x400, 0x10001, 0x10000, 0x86d, 0xffff, 0x0, 0xfffffffa, 0x3000000, 0x6, 0x8, 0x40, 0x1ef, 0xb687, 0x2, 0x283e, 0xfffffffd, 0x16b, 0x64, 0x5, 0xfffffffa, 0x2, 0x6, 0x13ad, 0x8, 0x8, 0x0, 0x7, 0x0, 0x7f, 0x3, 0x5, 0x9, 0x9, 0x8, 0x2, 0x6, 0xc, 0x3ff], [0x9, 0x4, 0x400, 0x8, 0xfa7, 0xb2, 0x8, 0x40, 0x7, 0x7ff, 0x80, 0x3ff, 0x8, 0x0, 0x10000, 0x2, 0x7f, 0x9, 0x3, 0xd1, 0x7fff, 0x8, 0x1, 0x5, 0x3, 0x0, 0x3, 0x80000000, 0x3, 0x9, 0x6, 0x0, 0x81, 0x1, 0x3, 0x2, 0x7ff, 0xfff, 0x1, 0x9, 0x2, 0xc, 0x7ff, 0x7, 0x2, 0x8, 0x5, 0x8, 0x14c00, 0xffff, 0x4, 0x1, 0x2, 0x5, 0x7ff, 0x80, 0x67add6e9, 0xcf5, 0x9, 0xffff, 0x8000, 0x5, 0x3, 0x7fff], [0x5, 0x10000, 0x6, 0x2, 0xe47, 0x33, 0x7, 0x4, 0x0, 0x7, 0x3268c479, 0xf0b, 0x4, 0x10, 0x80000001, 0x9, 0x0, 0xd, 0x9, 0x2, 0x5, 0x6, 0x8001, 0xffff, 0x2c69, 0x10000, 0x4, 0x750f, 0x8, 0x0, 0x7, 0x3, 0x1, 0x3, 0xba, 0x7, 0x1, 0x9ab2, 0x5, 0x8, 0x10, 0x4, 0x4, 0x5, 0x1, 0x3, 0x9, 0x3f, 0x4, 0x4, 0x2, 0x9, 0xfffffffe, 0x6, 0x5, 0x80, 0x6, 0xb, 0x619, 0x4, 0x7, 0x4, 0x4, 0x6], [0x0, 0x80000001, 0x3, 0xa1, 0x7fffffff, 0x8, 0x8, 0x8, 0xe, 0x6, 0x0, 0xffffffff, 0x8, 0x4, 0x10000, 0x5, 0xe2d, 0xb9, 0x2, 0x1ff, 0x8, 0x8, 0x4, 0x3, 0x7, 0x3, 0x1000, 0x3ff, 0xfffffff9, 0x7ddae13e, 0x200, 0x2, 0x2, 0x200, 0x2, 0x1, 0xf, 0x9, 0x3128, 0x65f, 0x0, 0x36800000, 0xe0, 0x8, 0x7, 0xa, 0x3, 0x162, 0x7, 0x9, 0x3, 0x5, 0x4, 0x7ff, 0x1, 0x1, 0x435e28bd, 0x2, 0x101, 0x2, 0x1, 0x3, 0x4, 0xedcd]}, 0x45c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 0s ago: executing program 1 (id=3920): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0x20, [0x6, 0x5, 0xdfb, 0x4, 0x8, 0x1, 0xc, 0x0, 0x1000, 0xe, 0x6, 0x8, 0x1, 0x7, 0xffffffff, 0x3, 0x0, 0x5, 0xe3, 0x5, 0x1, 0x70, 0x44870968, 0x8001, 0x3, 0x68, 0x80000001, 0x1, 0x1, 0xdb, 0x2, 0x1, 0x9, 0x80000001, 0x0, 0xc78, 0x0, 0x6, 0x4, 0xfffffff9, 0x4, 0x4b0d, 0xfffffffb, 0x10000, 0x1, 0x1, 0x5, 0x3, 0xfb, 0xd3, 0x4, 0x7, 0x7, 0x5, 0x4, 0x8000, 0x0, 0x3edd, 0x6, 0x6, 0x5, 0x2d6, 0x1, 0x6, 0x2, 0xcd44, 0x3ff, 0x0, 0x10001, 0x3, 0x6, 0x6, 0x7, 0x10001, 0x9a, 0xc4, 0xf, 0x0, 0xff, 0x9, 0x10000, 0x100, 0x9, 0x2, 0xf9, 0x1, 0x7d8d, 0x800, 0xed2, 0x7f, 0x5, 0x0, 0x4, 0x3, 0x6, 0x972f, 0x4, 0x7e6a, 0xeca, 0x2, 0x9de, 0x1fd, 0x5, 0x539d, 0x407a, 0x7fff, 0x3, 0x4, 0x1cc, 0x9, 0x0, 0x45, 0xffff0255, 0xfffffffb, 0x58, 0x1000, 0xff, 0x4, 0x8, 0x3, 0x2, 0x6, 0x6, 0xfffffff7, 0x1000000, 0xfffffffc, 0xa950]}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"698999ce660000400000000200", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x5, 0x6, 0x5, 0xfffffffffffffffe, 0x8000000000, 0x10000400, 0x8, 0x2, 0x8, 0x6, 0xfffe, 0x8000081, 0x10, 0x8de, 0x7]}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[{0x0, 0x7, 0x6, 0x7}, {0x16, 0xfa, 0xf7, 0x8}, {0x3, 0x7f, 0x10, 0xffffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0}) r5 = syz_open_dev$I2C(&(0x7f00000006c0), 0x3, 0x109100) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000740)={0x1, 0xcf, 0x2, &(0x7f0000000700)={0x1c, "e9f2584e22e8042d4b6920855d35d2d875a621614a29b2c72070e06dc5154e2ea1"}}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000680)={r4, 0x6, 0x230566e1}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x40010, 0xffffffffffffffff, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000540)=@IORING_OP_ACCEPT={0xd, 0x50, 0x1, r0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r8 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x8, &(0x7f0000000480)=ANY=[@ANYRESOCT=0x0]) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_usb_connect$cdc_ncm(0x1, 0xab, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x2, 0x1, 0xbe, 0x10, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "120c6ef1"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x51, 0x3, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x32}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x800, 0x78, 0x8, 0xa020, 0x9}, @acm={0x4, 0x24, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0xf, 0x2, 0x81, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x1000}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0xc, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x9dd144fd2debd07f, 0xf, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xc, 0xc, 0x6, 0x10, 0xfd}, 0xa1, &(0x7f0000000200)={0x5, 0xf, 0xa1, 0x3, [@generic={0x81, 0x10, 0xb, "58baa6ef415d729dc7afdf7f783194ce331402797a23e073a1d6d071b03299a2f11aa75920f87d0bfc174729fb84ff31220f5ac77f76f2bfe7eac4704ef00fbded9ea189ec83f7dac7001054c66202f232508f2f357541956d40559b309dbc8f96cd2b3ba909ca141aacf643abef66556d692d5d60ab46bb7232395165c1"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "7499ff41012012d861f75c6997eb2f6a"}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="04030600"]}, {0xc2, &(0x7f0000000300)=@string={0xc2, 0x3, "84345b28d6966c972d041e5c7e341ee6cc2d9c39f14f3ad211c49e3665fe8dd88abc00412e129eee4c4d7203dc293a0e18c39c4050e6f101f9245933ef1da6d982e509b1a1ed6526c95585abc945c8d7b104ca386faee4cb8099047d36c9f703f5783cf3ca95794143a7ae53670c8bac7974c6567aea313607236dfbf5599404ad74aaf22c7e9c8efded71fdd0df3fb134d06eaed52427ce6df80e00d4392c938df2eda47df99ef5171301cc3c050420532aa5a0b387a4dd01850a8ec7f05e12"}}]}) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000001c0)={0x7, 0x3, 0x560c, {0x803, 0x5d5}, {0xfff7, 0x1}, @period={0x3, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x7, 0xfffb, 0xa}, 0x0, 0x0}}) kernel console output (not intermixed with test programs): found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 990.867786][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.886908][ T5924] usb 4-1: Product: syz [ 990.902907][ T5924] usb 4-1: Manufacturer: syz [ 990.932112][ T5924] usb 4-1: SerialNumber: syz [ 990.955003][ T5924] usb 4-1: config 0 descriptor?? [ 990.961501][T19704] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 990.971139][ T5924] usb-storage 4-1:0.231: USB Mass Storage device detected [ 992.124583][ T1979] usb 4-1: USB disconnect, device number 88 [ 992.324891][T19718] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 992.331992][ T1979] IPVS: starting estimator thread 0... [ 992.453970][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3522'. [ 992.471425][T19723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3522'. [ 992.475972][T19721] IPVS: using max 26 ests per chain, 62400 per kthread [ 992.640016][T19727] team0: Port device team_slave_0 removed [ 993.140679][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.151890][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.953372][T19749] program syz.5.3529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.314211][ T1979] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 994.488276][ T1979] usb 4-1: Using ep0 maxpacket: 16 [ 994.515218][ T5927] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 994.537486][ T1979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.558038][ T1979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 994.577699][ T1979] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 994.587752][ T1979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.604207][ T1979] usb 4-1: Product: syz [ 994.608621][ T1979] usb 4-1: Manufacturer: syz [ 994.613350][ T1979] usb 4-1: SerialNumber: syz [ 994.716486][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.727683][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.738333][ T5927] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 994.747700][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.759881][ T5927] usb 6-1: config 0 descriptor?? [ 994.767053][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3533'. [ 994.841841][ T1979] usb 4-1: 0:2 : does not exist [ 994.844449][ T978] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 994.878588][ T1979] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 994.904318][ T1979] usb 4-1: USB disconnect, device number 89 [ 994.962372][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.984299][ T978] usb 2-1: device descriptor read/64, error -71 [ 994.994547][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3531'. [ 995.244426][ T978] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 995.256141][T19757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.276826][T19757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.374561][ T978] usb 2-1: device descriptor read/64, error -71 [ 995.495249][ T5927] holtek_mouse 0003:04D9:A067.0037: reserved main item tag 0xd [ 995.504683][ T978] usb usb2-port1: attempt power cycle [ 995.543912][ T5927] holtek_mouse 0003:04D9:A067.0037: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.5-1/input0 [ 995.808518][ T1979] usb 6-1: USB disconnect, device number 19 [ 995.931107][ T978] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 995.982127][ T978] usb 2-1: device descriptor read/8, error -71 [ 996.229167][ T978] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 996.298206][ T978] usb 2-1: device descriptor read/8, error -71 [ 996.472667][ T978] usb usb2-port1: unable to enumerate USB device [ 997.444745][ T978] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 997.617615][ T978] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.655793][ T978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 997.667954][ T978] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 997.681797][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 997.702230][T19790] openvswitch: netlink: Key type 789 is out of range max 32 [ 997.709805][ T978] usb 6-1: SerialNumber: syz [ 997.729738][T19790] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3538'. [ 997.770371][T19792] loop6: detected capacity change from 0 to 7 [ 997.790653][T19792] Dev loop6: unable to read RDB block 7 [ 997.810910][T19792] loop6: unable to read partition table [ 997.823606][T19792] loop6: partition table beyond EOD, truncated [ 997.860791][T19792] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 998.024462][ T5924] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 998.176373][ T978] usb 6-1: 0:2 : does not exist [ 998.188893][ T5924] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 998.199019][ T978] usb 6-1: unit 5: unexpected type 0x09 [ 998.204775][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.214962][ T5924] usb 4-1: Product: syz [ 998.226507][ T5924] usb 4-1: Manufacturer: syz [ 998.239961][ T978] usb 6-1: USB disconnect, device number 20 [ 998.247478][ T5924] usb 4-1: SerialNumber: syz [ 998.318906][ T5924] usb 4-1: config 0 descriptor?? [ 998.328459][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 998.352021][ T5924] hso 4-1:0.0: Not our interface [ 998.358574][ T5924] usb-storage 4-1:0.0: USB Mass Storage device detected [ 998.556235][ T978] usb 4-1: USB disconnect, device number 90 [ 999.054320][ T978] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 999.231764][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 999.251060][ T978] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 999.318634][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.341515][ T978] usb 6-1: Product: syz [ 999.362663][ T978] usb 6-1: Manufacturer: syz [ 999.382774][ T978] usb 6-1: SerialNumber: syz [ 999.412531][T19819] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3546'. [ 999.421796][ T978] usb 6-1: config 0 descriptor?? [ 999.437683][T19819] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3546'. [ 999.459118][T19819] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3546'. [ 999.486478][T19819] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3546'. [ 999.512793][T19819] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 999.564488][ T5927] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 999.714575][ T5927] usb 4-1: device descriptor read/64, error -71 [ 999.742451][ T978] usb 6-1: USB disconnect, device number 21 [ 999.784634][ T5924] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 999.954243][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 999.961410][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 999.974218][ T5927] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 999.982831][ T5924] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 999.992775][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.000980][ T5924] usb 2-1: Product: syz [ 1000.005295][ T5924] usb 2-1: Manufacturer: syz [ 1000.009917][ T5924] usb 2-1: SerialNumber: syz [ 1000.018970][ T5924] usb 2-1: config 0 descriptor?? [ 1000.027383][ T5924] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1000.035973][ T5924] usb 2-1: Detected FT232R [ 1000.104427][ T5927] usb 4-1: device descriptor read/64, error -71 [ 1000.217578][ T5927] usb usb4-port1: attempt power cycle [ 1000.227351][ T5924] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1000.235366][ T5924] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32 [ 1000.243240][ T5924] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1000.290292][T19827] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1000.564386][ T5927] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 1000.595028][ T5927] usb 4-1: device descriptor read/8, error -71 [ 1000.786349][T19820] netlink: 'syz.1.3541': attribute type 10 has an invalid length. [ 1000.794849][T19820] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1000.824660][ T5925] usb 2-1: USB disconnect, device number 101 [ 1000.842010][ T5925] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1000.853804][ T5927] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 1000.862471][ T5925] ftdi_sio 2-1:0.0: device disconnected [ 1000.895133][ T5927] usb 4-1: device descriptor read/8, error -71 [ 1001.004831][ T5927] usb usb4-port1: unable to enumerate USB device [ 1001.511709][T19850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3556'. [ 1001.600703][T19851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'. [ 1001.984665][ T978] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1002.145508][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 1002.158298][ T978] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 1002.173031][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.213565][ T978] usb 2-1: config 0 descriptor?? [ 1002.247816][ T978] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 1002.312399][ T978] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1002.333791][ T978] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 1002.361422][ T978] usb 2-1: media controller created [ 1002.498185][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1002.531138][ T978] usb 2-1: selecting invalid altsetting 1 [ 1002.537208][ T978] set interface failed [ 1002.537512][ T978] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1002.584410][ T978] error writing reg: 0xff, val: 0x00 [ 1002.666719][ T978] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1002.902295][T19867] loop6: detected capacity change from 0 to 7 [ 1002.921529][T19867] Dev loop6: unable to read RDB block 7 [ 1002.932777][T19867] loop6: unable to read partition table [ 1002.945558][T19867] loop6: partition table beyond EOD, truncated [ 1002.962974][T19867] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1003.157241][T19875] bridge_slave_0: left promiscuous mode [ 1003.168746][T19875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.180285][T19875] bridge_slave_1: left promiscuous mode [ 1003.186328][T19875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.200250][T19875] bond0: (slave bond_slave_0): Releasing backup interface [ 1003.210415][T19875] bond0: (slave bond_slave_1): Releasing backup interface [ 1003.228622][T19875] team0: Port device team_slave_1 removed [ 1003.236274][T19875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.245636][T19875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.260891][T19875] team0: Port device geneve0 removed [ 1003.345631][T19881] sctp: [Deprecated]: syz.3.3564 (pid 19881) Use of int in maxseg socket option. [ 1003.345631][T19881] Use struct sctp_assoc_value instead [ 1003.614511][T19865] delete_channel: no stack [ 1004.006690][T19894] pim6reg: entered allmulticast mode [ 1004.069849][T19894] pim6reg: left allmulticast mode [ 1004.285104][ T30] audit: type=1400 audit(1749885264.749:4879): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626203138343436373434303733373039353531363135 pid=19897 comm="syz.3.3567" [ 1004.359764][ T5924] usb 2-1: USB disconnect, device number 102 [ 1004.494334][ T978] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1004.646853][T19909] : renamed from vxcan1 [ 1004.658899][ T978] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 1004.668342][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.760354][T19909] sctp: [Deprecated]: syz.3.3570 (pid 19909) Use of int in maxseg socket option. [ 1004.760354][T19909] Use struct sctp_assoc_value instead [ 1004.792220][ T978] usb 6-1: Product: syz [ 1004.810643][ T978] usb 6-1: Manufacturer: syz [ 1004.867610][ T978] usb 6-1: SerialNumber: syz [ 1004.898987][ T978] usb 6-1: config 0 descriptor?? [ 1004.912937][ T978] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1004.928719][T19915] loop6: detected capacity change from 0 to 7 [ 1004.936928][ T978] usb 6-1: Detected FT2232HP [ 1004.943369][T19915] Dev loop6: unable to read RDB block 7 [ 1004.964604][T19915] loop6: unable to read partition table [ 1004.988722][T19915] loop6: partition table beyond EOD, truncated [ 1005.038734][T19915] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1005.170861][T19920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.624296][ T30] audit: type=1326 audit(1749885265.799:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19918 comm="syz.3.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7d18e929 code=0x7ffc0000 [ 1005.664937][T19920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.677577][ T30] audit: type=1326 audit(1749885265.799:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19918 comm="syz.3.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7d18e929 code=0x7ffc0000 [ 1005.713092][ T30] audit: type=1326 audit(1749885265.799:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19918 comm="syz.3.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f1f7d18e929 code=0x7ffc0000 [ 1005.904338][ T30] audit: type=1326 audit(1749885265.799:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19918 comm="syz.3.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7d18e929 code=0x7ffc0000 [ 1006.074864][ T30] audit: type=1326 audit(1749885265.799:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19918 comm="syz.3.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1f7d18e929 code=0x7ffc0000 [ 1006.315306][ T30] audit: type=1326 audit(1749885265.799:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19918 comm="syz.3.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7d18e929 code=0x7ffc0000 [ 1006.351530][ T30] audit: type=1326 audit(1749885265.799:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19918 comm="syz.3.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1f7d18e929 code=0x7ffc0000 [ 1006.588625][ T30] audit: type=1326 audit(1749885265.799:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19918 comm="syz.3.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7d18e929 code=0x7ffc0000 [ 1006.777527][T19933] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3575'. [ 1006.786764][ T30] audit: type=1326 audit(1749885265.799:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19918 comm="syz.3.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7d18e929 code=0x7ffc0000 [ 1007.333356][T19936] syzkaller0: left allmulticast mode [ 1007.351914][ T978] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1007.396911][T19920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.425855][ T978] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1007.475840][ T978] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1007.514675][ T978] usb 6-1: USB disconnect, device number 22 [ 1007.543350][ T978] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1007.584831][ T978] ftdi_sio 6-1:0.0: device disconnected [ 1008.234222][ T1979] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1008.379234][T19968] binder: BINDER_SET_CONTEXT_MGR already set [ 1008.385954][T19968] binder: 19967:19968 ioctl 40046207 0 returned -16 [ 1008.409150][ T1979] usb 2-1: Using ep0 maxpacket: 32 [ 1008.417862][ T1979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1008.441896][ T1979] usb 2-1: config 244 has an invalid interface number: 68 but max is 0 [ 1008.459648][ T1979] usb 2-1: config 244 has no interface number 0 [ 1008.467548][ T1979] usb 2-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 1008.483194][ T1979] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1008.518395][T19971] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3586'. [ 1008.539390][T19972] tipc: Started in network mode [ 1008.544960][T19972] tipc: Node identity 4, cluster identity 4711 [ 1008.551326][T19972] tipc: Node number set to 4 [ 1008.559395][ T1979] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1008.583608][ T1979] usb 2-1: config 244 interface 68 has no altsetting 0 [ 1008.608109][ T1979] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 1008.620300][ T1979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.641175][ T1979] usb 2-1: Product: syz [ 1008.654845][ T1979] usb 2-1: Manufacturer: syz [ 1008.668590][ T1979] usb 2-1: SerialNumber: syz [ 1008.699857][T19947] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1008.960400][ T1979] comedi comedi0: Endpoint has wrong direction [ 1008.980027][ T1979] dt9812 2-1:244.68: driver 'dt9812' failed to auto-configure device. [ 1009.143518][ T1979] usb 2-1: USB disconnect, device number 103 [ 1010.044334][ T5924] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1010.184259][ T5924] usb 2-1: device descriptor read/64, error -71 [ 1010.232101][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1010.248704][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1010.265592][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1010.280343][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1010.288202][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1010.354387][T11048] tipc: Disabling bearer [ 1010.424368][ T5924] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1010.587790][ T5924] usb 2-1: device descriptor read/64, error -71 [ 1010.704842][ T5924] usb usb2-port1: attempt power cycle [ 1010.900574][T20000] chnl_net:caif_netlink_parms(): no params data found [ 1011.064643][ T5924] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1011.110331][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1011.110352][ T30] audit: type=1400 audit(1749885271.579:4929): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20001 comm="syz.3.3595" [ 1011.143428][ T5924] usb 2-1: device descriptor read/8, error -71 [ 1011.205892][T19286] bridge_slave_1: left promiscuous mode [ 1011.211731][T19286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.232217][T19286] bridge_slave_0: left promiscuous mode [ 1011.286132][T19286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.426164][ T5924] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1011.433978][ T978] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1011.461020][ T5924] usb 2-1: device descriptor read/8, error -71 [ 1011.574901][ T5924] usb usb2-port1: unable to enumerate USB device [ 1011.672915][ T978] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1011.681301][ T978] usb 4-1: config 0 has no interface number 0 [ 1011.733997][ T978] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.798667][ T978] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.808850][ T978] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.830328][ T978] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1011.870517][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.882416][ T978] usb 4-1: config 0 descriptor?? [ 1012.335056][T15494] Bluetooth: hci4: command tx timeout [ 1012.571562][ T978] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0038/input/input72 [ 1012.664464][T20015] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3596'. [ 1012.753692][T20018] fuse: Bad value for 'fd' [ 1012.796645][ T978] uclogic 0003:28BD:0042.0038: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 1013.131663][T19286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.147618][T19286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.158220][T19286] bond0 (unregistering): (slave team0): Releasing backup interface [ 1013.168379][T19286] tipc: Resetting bearer [ 1013.175655][T19286] bond0 (unregistering): Released all slaves [ 1013.195049][T19286] bond1 (unregistering): Released all slaves [ 1013.231125][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3598'. [ 1013.381639][T20030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1013.423614][T19286] tipc: Disabling bearer [ 1013.452282][T19286] tipc: Disabling bearer [ 1013.469111][T19286] tipc: Left network mode [ 1013.505332][T20000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.539366][T20000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.567986][T20000] bridge_slave_0: entered allmulticast mode [ 1013.597749][T20000] bridge_slave_0: entered promiscuous mode [ 1013.711527][T20000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.745255][T20000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.768571][T20000] bridge_slave_1: entered allmulticast mode [ 1013.809281][T20000] bridge_slave_1: entered promiscuous mode [ 1014.194176][ T5927] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1014.223971][T20000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.259258][T20000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.259716][ T5889] usb 4-1: USB disconnect, device number 95 [ 1014.394253][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 1014.418818][T15494] Bluetooth: hci4: command tx timeout [ 1014.442799][ T5927] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 1014.462324][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.487854][ T5927] usb 2-1: Product: syz [ 1014.492390][ T5927] usb 2-1: Manufacturer: syz [ 1014.498636][ T5927] usb 2-1: SerialNumber: syz [ 1014.508441][ T5927] usb 2-1: config 0 descriptor?? [ 1014.516630][ T5927] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1014.748755][ T5927] usb 2-1: USB disconnect, device number 108 [ 1014.782832][T20056] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3603'. [ 1014.876182][T20000] team0: Port device team_slave_0 added [ 1015.121522][T20000] team0: Port device team_slave_1 added [ 1015.573432][T20000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.589365][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3606'. [ 1015.599776][T20000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.702677][T20000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.084021][T20071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1016.106794][T20071] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1016.130642][T20000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.144210][T20000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.187322][T20087] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3611'. [ 1016.244500][T20000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.403694][T20094] raw_sendmsg: syz.7.3612 forgot to set AF_INET. Fix it! [ 1016.494351][T15494] Bluetooth: hci4: command tx timeout [ 1016.673199][T19286] hsr_slave_0: left promiscuous mode [ 1016.760709][T19286] hsr_slave_1: left promiscuous mode [ 1016.827355][T20111] loop6: detected capacity change from 0 to 63 [ 1016.842320][T20111] buffer_io_error: 24 callbacks suppressed [ 1016.842342][T20111] Buffer I/O error on dev loop6, logical block 0, async page read [ 1016.857980][T20111] Buffer I/O error on dev loop6, logical block 1, async page read [ 1016.866612][T20111] Buffer I/O error on dev loop6, logical block 2, async page read [ 1016.875448][T20111] Buffer I/O error on dev loop6, logical block 3, async page read [ 1016.885080][T20111] Buffer I/O error on dev loop6, logical block 0, async page read [ 1016.893700][T20111] Buffer I/O error on dev loop6, logical block 1, async page read [ 1016.902400][T20111] Buffer I/O error on dev loop6, logical block 2, async page read [ 1016.911126][T20111] Buffer I/O error on dev loop6, logical block 3, async page read [ 1016.924439][T20111] Buffer I/O error on dev loop6, logical block 0, async page read [ 1016.932537][T20111] Buffer I/O error on dev loop6, logical block 1, async page read [ 1018.579909][T15494] Bluetooth: hci4: command tx timeout [ 1020.057553][T20140] FAULT_INJECTION: forcing a failure. [ 1020.057553][T20140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.091703][T20140] CPU: 0 UID: 0 PID: 20140 Comm: syz.7.3618 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1020.091736][T20140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.091748][T20140] Call Trace: [ 1020.091757][T20140] [ 1020.091767][T20140] dump_stack_lvl+0x189/0x250 [ 1020.091804][T20140] ? __pfx____ratelimit+0x10/0x10 [ 1020.091835][T20140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1020.091875][T20140] ? __pfx__printk+0x10/0x10 [ 1020.091899][T20140] ? __might_fault+0xb0/0x130 [ 1020.091932][T20140] should_fail_ex+0x414/0x560 [ 1020.091966][T20140] _copy_from_user+0x2d/0xb0 [ 1020.091989][T20140] ___sys_recvmsg+0x12e/0x510 [ 1020.092024][T20140] ? __pfx____sys_recvmsg+0x10/0x10 [ 1020.092079][T20140] ? __fget_files+0x3a0/0x420 [ 1020.092115][T20140] __x64_sys_recvmsg+0x198/0x260 [ 1020.092146][T20140] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1020.092184][T20140] ? __pfx_ksys_write+0x10/0x10 [ 1020.092201][T20140] ? rcu_is_watching+0x15/0xb0 [ 1020.092238][T20140] ? do_syscall_64+0xbe/0x3b0 [ 1020.092263][T20140] do_syscall_64+0xfa/0x3b0 [ 1020.092281][T20140] ? lockdep_hardirqs_on+0x9c/0x150 [ 1020.092310][T20140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.092332][T20140] ? clear_bhb_loop+0x60/0xb0 [ 1020.092358][T20140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.092378][T20140] RIP: 0033:0x7f1ef0d8e929 [ 1020.092397][T20140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.092414][T20140] RSP: 002b:00007f1ef1b98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1020.092437][T20140] RAX: ffffffffffffffda RBX: 00007f1ef0fb5fa0 RCX: 00007f1ef0d8e929 [ 1020.092453][T20140] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 1020.092467][T20140] RBP: 00007f1ef1b98090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.092480][T20140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.092493][T20140] R13: 0000000000000000 R14: 00007f1ef0fb5fa0 R15: 00007f1ef10dfa28 [ 1020.092525][T20140] [ 1021.402854][T19286] team0 (unregistering): Port device team_slave_1 removed [ 1021.469379][T19286] team0 (unregistering): Port device team_slave_0 removed [ 1022.136384][T20133] macsec0: entered promiscuous mode [ 1022.143136][T20133] macsec0: left allmulticast mode [ 1022.154891][T20129] macsec0: left promiscuous mode [ 1022.469182][T20153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1022.500647][T20153] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1022.519637][T20153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1022.541793][T20153] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1022.574538][T20155] netlink: 'syz.6.3625': attribute type 9 has an invalid length. [ 1022.620912][T20000] hsr_slave_0: entered promiscuous mode [ 1022.657467][T20000] hsr_slave_1: entered promiscuous mode [ 1022.663957][T20000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.684516][T20000] Cannot create hsr debugfs directory [ 1022.953563][T19286] IPVS: stop unused estimator thread 0... [ 1023.419561][T20175] FAULT_INJECTION: forcing a failure. [ 1023.419561][T20175] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.453194][T20175] CPU: 1 UID: 0 PID: 20175 Comm: syz.3.3628 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1023.453226][T20175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1023.453239][T20175] Call Trace: [ 1023.453247][T20175] [ 1023.453256][T20175] dump_stack_lvl+0x189/0x250 [ 1023.453294][T20175] ? __pfx____ratelimit+0x10/0x10 [ 1023.453326][T20175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1023.453357][T20175] ? __pfx__printk+0x10/0x10 [ 1023.453388][T20175] ? __pfx___might_resched+0x10/0x10 [ 1023.453425][T20175] should_fail_ex+0x414/0x560 [ 1023.453458][T20175] should_failslab+0xa8/0x100 [ 1023.453483][T20175] __kmalloc_noprof+0xcb/0x4f0 [ 1023.453502][T20175] ? sock_kmalloc+0xd6/0x160 [ 1023.453536][T20175] sock_kmalloc+0xd6/0x160 [ 1023.453567][T20175] af_alg_alloc_areq+0x8d/0x260 [ 1023.453598][T20175] skcipher_recvmsg+0x356/0x11c0 [ 1023.453632][T20175] ? aa_sk_perm+0x81e/0x950 [ 1023.453669][T20175] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1023.453702][T20175] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1023.453727][T20175] ? security_socket_recvmsg+0x7e/0x2e0 [ 1023.453759][T20175] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1023.453788][T20175] sock_recvmsg+0x229/0x270 [ 1023.453814][T20175] ____sys_recvmsg+0x1c9/0x460 [ 1023.453852][T20175] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1023.453906][T20175] ? import_iovec+0x74/0xa0 [ 1023.453933][T20175] ___sys_recvmsg+0x1b5/0x510 [ 1023.453967][T20175] ? __pfx____sys_recvmsg+0x10/0x10 [ 1023.454025][T20175] ? __fget_files+0x3a0/0x420 [ 1023.454066][T20175] __x64_sys_recvmsg+0x198/0x260 [ 1023.454095][T20175] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1023.454132][T20175] ? __pfx_ksys_write+0x10/0x10 [ 1023.454148][T20175] ? rcu_is_watching+0x15/0xb0 [ 1023.454182][T20175] ? do_syscall_64+0xbe/0x3b0 [ 1023.454207][T20175] do_syscall_64+0xfa/0x3b0 [ 1023.454224][T20175] ? lockdep_hardirqs_on+0x9c/0x150 [ 1023.454253][T20175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.454273][T20175] ? clear_bhb_loop+0x60/0xb0 [ 1023.454299][T20175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.454319][T20175] RIP: 0033:0x7f1f7d18e929 [ 1023.454339][T20175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.454356][T20175] RSP: 002b:00007f1f7df6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1023.454377][T20175] RAX: ffffffffffffffda RBX: 00007f1f7d3b5fa0 RCX: 00007f1f7d18e929 [ 1023.454392][T20175] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 1023.454405][T20175] RBP: 00007f1f7df6d090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.454418][T20175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.454430][T20175] R13: 0000000000000000 R14: 00007f1f7d3b5fa0 R15: 00007f1f7d4dfa28 [ 1023.454463][T20175] [ 1024.970986][ T5924] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1025.113597][T20204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1025.128927][T20204] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1025.138425][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 1025.145767][ T5924] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1025.152746][T20204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1025.163553][ T5924] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1025.164058][T20204] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1025.173641][ T5924] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1025.343976][ T5924] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1025.432353][ T5924] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1025.451891][ T5924] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1025.463847][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.842403][T20202] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 1025.872089][T20215] FAULT_INJECTION: forcing a failure. [ 1025.872089][T20215] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.904055][T20215] CPU: 1 UID: 0 PID: 20215 Comm: syz.6.3638 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1025.904094][T20215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1025.904106][T20215] Call Trace: [ 1025.904116][T20215] [ 1025.904125][T20215] dump_stack_lvl+0x189/0x250 [ 1025.904161][T20215] ? __pfx____ratelimit+0x10/0x10 [ 1025.904186][T20215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1025.904215][T20215] ? __pfx__printk+0x10/0x10 [ 1025.904240][T20215] ? __pfx___might_resched+0x10/0x10 [ 1025.904269][T20215] ? fs_reclaim_acquire+0x7d/0x100 [ 1025.904293][T20215] should_fail_ex+0x414/0x560 [ 1025.904313][T20215] should_failslab+0xa8/0x100 [ 1025.904327][T20215] __kmalloc_noprof+0xcb/0x4f0 [ 1025.904338][T20215] ? sock_kmalloc+0xd6/0x160 [ 1025.904370][T20215] sock_kmalloc+0xd6/0x160 [ 1025.904398][T20215] skcipher_recvmsg+0x55c/0x11c0 [ 1025.904444][T20215] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1025.904466][T20215] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1025.904482][T20215] ? security_socket_recvmsg+0x7e/0x2e0 [ 1025.904506][T20215] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1025.904532][T20215] sock_recvmsg+0x229/0x270 [ 1025.904558][T20215] ____sys_recvmsg+0x1c9/0x460 [ 1025.904594][T20215] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1025.904628][T20215] ? import_iovec+0x74/0xa0 [ 1025.904644][T20215] ___sys_recvmsg+0x1b5/0x510 [ 1025.904673][T20215] ? __pfx____sys_recvmsg+0x10/0x10 [ 1025.904727][T20215] ? __fget_files+0x3a0/0x420 [ 1025.904758][T20215] __x64_sys_recvmsg+0x198/0x260 [ 1025.904777][T20215] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1025.904800][T20215] ? __pfx_ksys_write+0x10/0x10 [ 1025.904813][T20215] ? rcu_is_watching+0x15/0xb0 [ 1025.904848][T20215] ? do_syscall_64+0xbe/0x3b0 [ 1025.904871][T20215] do_syscall_64+0xfa/0x3b0 [ 1025.904888][T20215] ? lockdep_hardirqs_on+0x9c/0x150 [ 1025.904913][T20215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.904925][T20215] ? clear_bhb_loop+0x60/0xb0 [ 1025.904940][T20215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.904951][T20215] RIP: 0033:0x7ff59618e929 [ 1025.904966][T20215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.904982][T20215] RSP: 002b:00007ff596f71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1025.905005][T20215] RAX: ffffffffffffffda RBX: 00007ff5963b5fa0 RCX: 00007ff59618e929 [ 1025.905019][T20215] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000004 [ 1025.905031][T20215] RBP: 00007ff596f71090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.905042][T20215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.905053][T20215] R13: 0000000000000000 R14: 00007ff5963b5fa0 R15: 00007ff5964dfa28 [ 1025.905076][T20215] [ 1026.186684][T20202] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1026.544351][ T5924] usb 4-1: GET_CAPABILITIES returned 0 [ 1026.549895][ T5924] usbtmc 4-1:16.0: can't read capabilities [ 1026.597866][T20000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1026.661549][T20000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1026.756709][T20000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1026.816910][T20000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1027.157494][T20216] xt_CT: No such helper "pptp" [ 1027.514182][ T5927] usb 4-1: USB disconnect, device number 96 [ 1027.874688][T20000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.000525][T20000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.060946][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.068106][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.166126][T20246] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3645'. [ 1028.233299][T20246] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3645'. [ 1028.273225][T20246] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3645'. [ 1028.327701][T20246] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3645'. [ 1028.412813][T20246] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1028.495929][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.503088][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.898164][T20000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.096728][T20000] veth0_vlan: entered promiscuous mode [ 1029.106522][T20264] FAULT_INJECTION: forcing a failure. [ 1029.106522][T20264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.154456][T20264] CPU: 1 UID: 0 PID: 20264 Comm: syz.1.3648 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1029.154487][T20264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1029.154510][T20264] Call Trace: [ 1029.154519][T20264] [ 1029.154529][T20264] dump_stack_lvl+0x189/0x250 [ 1029.154564][T20264] ? __pfx____ratelimit+0x10/0x10 [ 1029.154596][T20264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.154628][T20264] ? __pfx__printk+0x10/0x10 [ 1029.154661][T20264] should_fail_ex+0x414/0x560 [ 1029.154693][T20264] _copy_to_user+0x31/0xb0 [ 1029.154717][T20264] simple_read_from_buffer+0xe1/0x170 [ 1029.154743][T20264] proc_fail_nth_read+0x1df/0x250 [ 1029.154771][T20264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1029.154796][T20264] ? rw_verify_area+0x258/0x650 [ 1029.154825][T20264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1029.154850][T20264] vfs_read+0x1fd/0x980 [ 1029.154882][T20264] ? __pfx___mutex_lock+0x10/0x10 [ 1029.154904][T20264] ? __pfx_vfs_read+0x10/0x10 [ 1029.154936][T20264] ? __fget_files+0x2a/0x420 [ 1029.154964][T20264] ? __fget_files+0x3a0/0x420 [ 1029.154986][T20264] ? __fget_files+0x2a/0x420 [ 1029.155018][T20264] ksys_read+0x145/0x250 [ 1029.155041][T20264] ? __pfx_ksys_read+0x10/0x10 [ 1029.155069][T20264] ? rcu_is_watching+0x15/0xb0 [ 1029.155105][T20264] ? do_syscall_64+0xbe/0x3b0 [ 1029.155132][T20264] do_syscall_64+0xfa/0x3b0 [ 1029.155150][T20264] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.155180][T20264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.155201][T20264] ? clear_bhb_loop+0x60/0xb0 [ 1029.155227][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.155246][T20264] RIP: 0033:0x7fb2b358d33c [ 1029.155267][T20264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1029.155285][T20264] RSP: 002b:00007fb2b13f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1029.155308][T20264] RAX: ffffffffffffffda RBX: 00007fb2b37b5fa0 RCX: 00007fb2b358d33c [ 1029.155323][T20264] RDX: 000000000000000f RSI: 00007fb2b13f60a0 RDI: 0000000000000005 [ 1029.155336][T20264] RBP: 00007fb2b13f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.155349][T20264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.155361][T20264] R13: 0000000000000000 R14: 00007fb2b37b5fa0 R15: 00007fb2b38dfa28 [ 1029.155395][T20264] [ 1029.406826][T20000] veth1_vlan: entered promiscuous mode [ 1029.767818][T20000] veth0_macvtap: entered promiscuous mode [ 1029.809261][T20000] veth1_macvtap: entered promiscuous mode [ 1029.934940][T20000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.986917][T20000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.035483][T20000] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.075092][T20000] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.094935][T20000] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.104479][ T5925] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1030.132572][T20000] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.271542][T20258] syz.3.3646: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1030.321680][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.346967][T20258] CPU: 0 UID: 0 PID: 20258 Comm: syz.3.3646 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1030.346998][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1030.347008][T20258] Call Trace: [ 1030.347013][T20258] [ 1030.347019][T20258] dump_stack_lvl+0x189/0x250 [ 1030.347047][T20258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1030.347068][T20258] ? __pfx__printk+0x10/0x10 [ 1030.347083][T20258] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1030.347097][T20258] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1030.347112][T20258] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1030.347128][T20258] warn_alloc+0x214/0x310 [ 1030.347147][T20258] ? __pfx_warn_alloc+0x10/0x10 [ 1030.347167][T20258] ? __get_vm_area_node+0x28f/0x300 [ 1030.347181][T20258] ? hash_ip_create+0x741/0x1410 [ 1030.347200][T20258] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1030.347232][T20258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1030.347248][T20258] ? rcu_is_watching+0x15/0xb0 [ 1030.347269][T20258] ? hash_ip_create+0x741/0x1410 [ 1030.347284][T20258] ? hash_ip_create+0x741/0x1410 [ 1030.347298][T20258] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 1030.347312][T20258] ? hash_ip_create+0x741/0x1410 [ 1030.347328][T20258] ? hash_ip_create+0x6d5/0x1410 [ 1030.347346][T20258] hash_ip_create+0x741/0x1410 [ 1030.347362][T20258] ? __lock_acquire+0xab9/0xd20 [ 1030.347389][T20258] ? __pfx_hash_ip_create+0x10/0x10 [ 1030.347407][T20258] ? __nla_parse+0x40/0x60 [ 1030.347427][T20258] ? __pfx_hash_ip_create+0x10/0x10 [ 1030.347444][T20258] ip_set_create+0xa97/0x1940 [ 1030.347456][T20258] ? ip_set_create+0x4a2/0x1940 [ 1030.347474][T20258] ? __pfx_ip_set_create+0x10/0x10 [ 1030.347516][T20258] nfnetlink_rcv_msg+0xb4a/0x1130 [ 1030.347538][T20258] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1030.347571][T20258] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1030.347610][T20258] ? __lock_acquire+0xab9/0xd20 [ 1030.347637][T20258] netlink_rcv_skb+0x208/0x470 [ 1030.347654][T20258] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1030.347675][T20258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1030.347697][T20258] ? bpf_lsm_capable+0x9/0x20 [ 1030.347709][T20258] ? security_capable+0x7e/0x2e0 [ 1030.347730][T20258] nfnetlink_rcv+0x26a/0x2520 [ 1030.347750][T20258] ? unwind_get_return_address+0x4d/0x90 [ 1030.347770][T20258] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1030.347784][T20258] ? arch_stack_walk+0xfc/0x150 [ 1030.347825][T20258] ? stack_trace_save+0x9c/0xe0 [ 1030.347840][T20258] ? stack_depot_save_flags+0x40/0x900 [ 1030.347860][T20258] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1030.347881][T20258] ? kasan_save_track+0x4f/0x80 [ 1030.347899][T20258] ? kasan_save_track+0x3e/0x80 [ 1030.347922][T20258] ? __lock_acquire+0xab9/0xd20 [ 1030.347953][T20258] ? __lock_acquire+0xab9/0xd20 [ 1030.347977][T20258] ? netlink_deliver_tap+0x2e/0x1b0 [ 1030.347997][T20258] ? netlink_deliver_tap+0x2e/0x1b0 [ 1030.348011][T20258] ? netlink_deliver_tap+0x2e/0x1b0 [ 1030.348030][T20258] netlink_unicast+0x75b/0x8d0 [ 1030.348050][T20258] netlink_sendmsg+0x805/0xb30 [ 1030.348072][T20258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.348090][T20258] ? aa_sock_msg_perm+0x94/0x160 [ 1030.348108][T20258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1030.348124][T20258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.348141][T20258] __sock_sendmsg+0x219/0x270 [ 1030.348155][T20258] ____sys_sendmsg+0x505/0x830 [ 1030.348175][T20258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1030.348198][T20258] ? import_iovec+0x74/0xa0 [ 1030.348214][T20258] ___sys_sendmsg+0x21f/0x2a0 [ 1030.348232][T20258] ? __pfx____sys_sendmsg+0x10/0x10 [ 1030.348271][T20258] ? __fget_files+0x2a/0x420 [ 1030.348285][T20258] ? __fget_files+0x3a0/0x420 [ 1030.348306][T20258] __x64_sys_sendmsg+0x19b/0x260 [ 1030.348324][T20258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1030.348348][T20258] ? rcu_is_watching+0x15/0xb0 [ 1030.348371][T20258] ? do_syscall_64+0xbe/0x3b0 [ 1030.348386][T20258] do_syscall_64+0xfa/0x3b0 [ 1030.348397][T20258] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.348416][T20258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.348429][T20258] ? clear_bhb_loop+0x60/0xb0 [ 1030.348444][T20258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.348456][T20258] RIP: 0033:0x7f1f7d18e929 [ 1030.348469][T20258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.348480][T20258] RSP: 002b:00007f1f7df2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1030.348495][T20258] RAX: ffffffffffffffda RBX: 00007f1f7d3b6160 RCX: 00007f1f7d18e929 [ 1030.348504][T20258] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 000000000000000e [ 1030.348513][T20258] RBP: 00007f1f7d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1030.348520][T20258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.348528][T20258] R13: 0000000000000000 R14: 00007f1f7d3b6160 R15: 00007f1f7d4dfa28 [ 1030.348552][T20258] [ 1030.348560][T20258] Mem-Info: [ 1030.360918][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.360976][ T5925] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1030.394221][T20258] active_anon:14325 inactive_anon:0 isolated_anon:0 [ 1030.394221][T20258] active_file:19703 inactive_file:40321 isolated_file:0 [ 1030.394221][T20258] unevictable:768 dirty:155 writeback:0 [ 1030.394221][T20258] slab_reclaimable:6417 slab_unreclaimable:104891 [ 1030.394221][T20258] mapped:31918 shmem:5496 pagetables:1788 [ 1030.394221][T20258] sec_pagetables:0 bounce:0 [ 1030.394221][T20258] kernel_misc_reclaimable:0 [ 1030.394221][T20258] free:1291758 free_pcp:16524 free_cma:0 [ 1030.816701][T19297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.834290][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.901193][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.982898][T19297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.009519][T20258] Node 0 active_anon:53468kB inactive_anon:0kB active_file:78760kB inactive_file:161080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127624kB dirty:316kB writeback:0kB shmem:20448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13056kB pagetables:7008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1031.134522][T20258] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1031.166277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.187677][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.194196][T20258] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1031.219843][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.282202][ T5925] usb 2-1: config 0 descriptor?? [ 1031.327204][T20258] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 1031.360369][T20258] Node 0 DMA32 free:1259596kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49908kB inactive_anon:0kB active_file:78760kB inactive_file:159256kB unevictable:1536kB writepending:260kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:42084kB local_pcp:22140kB free_cma:0kB [ 1031.462731][T20258] lowmem_reserve[]: 0 0 1 1 1 [ 1031.478117][T20258] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 1031.596121][T20289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.607375][T20289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.652298][T20258] lowmem_reserve[]: 0 0 0 0 0 [ 1031.689997][T20258] Node 1 Normal free:3893496kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:31032kB local_pcp:14492kB free_cma:0kB [ 1031.721974][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.752649][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3651'. [ 1031.783403][ T5925] sony 0003:054C:024B.0039: unknown main item tag 0x0 [ 1031.807097][T20258] lowmem_reserve[]: 0 0 0 0 0 [ 1031.818373][T20258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1031.825792][ T5925] sony 0003:054C:024B.0039: unknown main item tag 0x0 [ 1031.844190][ T5927] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1031.862521][T20258] Node 0 DMA32: 2226*4kB (UME) 1256*8kB (UME) 1454*16kB (UME) 990*32kB (UME) 363*64kB (UME) 160*128kB (UME) 87*256kB (UME) 61*512kB (UM) 49*1024kB (UM) 9*2048kB (UME) 249*4096kB (UM) = 1259624kB [ 1031.914264][T20258] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1031.940517][T20258] Node 1 Normal: 185*4kB (UM) 69*8kB (UME) 56*16kB (UME) 99*32kB (UME) 121*64kB (UME) 42*128kB (UME) 17*256kB (UME) 4*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 943*4096kB (M) = 3893548kB [ 1031.963320][T20283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3651'. [ 1031.965850][ T5925] sony 0003:054C:024B.0039: unexpected long global item [ 1031.980898][ T5925] sony 0003:054C:024B.0039: parse failed [ 1032.026028][T20258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1032.026496][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1032.048108][T20258] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1032.057981][ T5925] sony 0003:054C:024B.0039: probe with driver sony failed with error -22 [ 1032.062381][T20258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1032.078722][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.130711][ T978] usb 2-1: USB disconnect, device number 109 [ 1032.166659][ T5927] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1032.171506][T20258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1032.201694][T20258] 65521 total pagecache pages [ 1032.243814][T20258] 0 pages in swap cache [ 1032.248891][ T5927] usb 6-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1032.271462][ T5927] usb 6-1: Manufacturer: syz [ 1032.278207][T20258] Free swap = 124996kB [ 1032.291007][T20258] Total swap = 124996kB [ 1032.297720][ T5927] usb 6-1: config 0 descriptor?? [ 1032.328151][ T5927] hub 6-1:0.0: USB hub found [ 1032.333233][T20258] 2097051 pages RAM [ 1032.354247][T20258] 0 pages HighMem/MovableOnly [ 1032.371566][T20258] 424689 pages reserved [ 1032.381524][T20258] 0 pages cma reserved [ 1032.516711][ T5927] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1032.549105][ T5927] usbhid 6-1:0.0: can't add hid device: -71 [ 1032.555229][ T5927] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1032.625834][ T5927] usb 6-1: USB disconnect, device number 23 [ 1032.792091][T20306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.833191][T20306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.024556][ T5927] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1033.189526][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1033.219195][ T5927] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 1033.228099][ T5927] usb 4-1: config 0 has no interface number 0 [ 1033.234412][ T978] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1033.242522][ T5927] usb 4-1: config 0 interface 238 has no altsetting 0 [ 1033.262730][ T5927] usb 4-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d [ 1033.274515][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.303324][ T5927] usb 4-1: Product: syz [ 1033.311099][ T5927] usb 4-1: Manufacturer: 쵿ê§ë‡á€×«ê¶‡î¤ä“¼â¼Ÿã»ªîž˜å·žá¹‰ã”šå«žæ³ƒãƒî‘¹å©’畋⑲碚ᡑꖦ㠸‴⪎ïºï„¤å™˜ä¢ƒå§èžÜ⇊抋ã‘駺澺äƒè°âš‘魗გâ¿é§°ë¨œä‚¤á¸±à¯•â‹–ï…½ã„仢â£æ—Œà¹½ìŒî“·å„½à¹«ë‡†ï¤æ¥¯ì¹Œê…Œä†›çŽ¦í•¿ä–®ï‘³á”¥é«—ịì‘ꬱ趟ㅷ军â‡à©¿ï´è¹˜ì‚žãœ³ì¬«ï¤¹ìˆ€â‹ˆä²œæ±¥é—¤çŒƒá°¢ë£ƒíž¡î…§î™Šî¼¼æ§”갲森㺲䴧⣎瓰⻢٧졑ᵄ芗 [ 1033.387953][ T5927] usb 4-1: SerialNumber: syz [ 1033.400894][ T5927] usb 4-1: config 0 descriptor?? [ 1033.430417][T20324] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1033.477719][ T978] usb 2-1: not running at top speed; connect to a high speed hub [ 1033.495922][ T978] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1033.621823][ T5927] gspca_main: spca501-2.14.0 probing 1776:501c [ 1033.650920][ T5927] gspca_spca501: reg write: error -71 [ 1033.656930][ T5927] spca501 4-1:0.238: Reg write failed for 0x02,0x07,0x05 [ 1033.667320][ T5927] spca501 4-1:0.238: probe with driver spca501 failed with error -22 [ 1033.677290][ T978] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1033.683161][ T5927] usb 4-1: USB disconnect, device number 97 [ 1033.884995][ T978] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.40 [ 1033.913871][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.941536][ T978] usb 2-1: Product: 긿⊇躊ͯᔦﱌ跂ç퉻⺴ሧ鯑㈦ä¹â¦³ì»³é¾·è¨†â²Žê±‰æµ¹å—¾ïµ¼ê…‹ç»·ç¯œî´²æ­âƒ˜êœ›ì²’⩜撃㼂튚ä¸ã–ªè§©è¦˜î‚œè颟࣯턽఼씾ᄃ夎詶樯刴â¼è¶½ã™œè—žã™‰ä©é£é§å–릙à¼é“ｹ楉↌椹þ [ 1033.999090][ T978] usb 2-1: Manufacturer: ä€ [ 1034.005172][ T978] usb 2-1: SerialNumber: Ñ [ 1034.314513][T20314] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1034.402907][T20286] delete_channel: no stack [ 1035.103598][T20347] netlink: 'syz.6.3658': attribute type 10 has an invalid length. [ 1035.114548][T20347] team0: Port device macvlan0 added [ 1036.277462][ T978] usbhid 2-1:1.0: can't add hid device: -71 [ 1036.298993][ T978] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1036.544475][ T978] usb 2-1: USB disconnect, device number 110 [ 1036.586082][T20365] netlink: 'syz.1.3661': attribute type 6 has an invalid length. [ 1036.676035][T20370] netlink: 'syz.3.3662': attribute type 10 has an invalid length. [ 1036.711151][T20370] team0: left allmulticast mode [ 1036.736904][T20370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.781379][T20370] team0: entered allmulticast mode [ 1036.823646][T20370] bond0: (slave team0): Enslaving as an active interface with an up link [ 1037.134629][ T5927] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1037.347686][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.592093][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.679131][ T5927] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1037.725721][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.818676][ T5927] usb 6-1: config 0 descriptor?? [ 1038.212666][T20401] delete_channel: no stack [ 1038.257494][ T43] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1038.324271][ T5927] usbhid 6-1:0.0: can't add hid device: -71 [ 1038.341431][ T5927] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1038.385592][ T5927] usb 6-1: USB disconnect, device number 24 [ 1038.396236][ T5924] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1038.614176][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 1038.705167][T20415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3670'. [ 1038.763097][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1038.828859][ T5924] usb 4-1: config 8 has an invalid interface number: 24 but max is 1 [ 1038.886731][T20419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.944732][ T5924] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.997437][ T5924] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 1039.006833][ T5924] usb 4-1: config 8 has no interface number 0 [ 1039.015758][ T5924] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 1039.154640][ T5924] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1039.200584][ T5924] usb 4-1: config 8 interface 24 has no altsetting 0 [ 1039.302856][ T5924] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1039.340922][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.400296][ T5924] usb 4-1: Product: syz [ 1039.414249][ T5924] usb 4-1: Manufacturer: syz [ 1039.429384][ T5924] usb 4-1: SerialNumber: syz [ 1039.684046][ T5924] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 1039.775038][ T5924] vmk80xx 4-1:8.24: probe with driver vmk80xx failed with error -22 [ 1039.840637][ T5924] usb 4-1: USB disconnect, device number 98 [ 1040.674269][ T5927] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1040.874204][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 1040.908372][ T5927] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 1040.927818][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.962172][ T5927] usb 2-1: config 0 descriptor?? [ 1040.993139][ T5927] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 1041.661684][ T5925] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1041.817783][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 1041.921088][ T5927] gspca_sunplus: reg_r err -110 [ 1041.951715][ T5927] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1041.971116][ T5927] usb 2-1: USB disconnect, device number 112 [ 1042.059198][ T5925] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1042.067877][ T5925] usb 6-1: config 0 has no interface number 0 [ 1042.074274][ T5925] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1042.084524][ T5925] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1042.103646][ T5925] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=d7.f4 [ 1042.115404][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.124153][ T5925] usb 6-1: Product: syz [ 1042.138399][ T5925] usb 6-1: Manufacturer: syz [ 1042.143007][ T5925] usb 6-1: SerialNumber: syz [ 1042.168111][ T5925] usb 6-1: config 0 descriptor?? [ 1042.178384][T20459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1042.186924][T20459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1042.398112][T20459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1042.418184][T20459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1042.619036][T20469] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3688'. [ 1042.849916][ T5925] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1042.877353][ T5925] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1042.910311][ T5925] asix 6-1:0.251: probe with driver asix failed with error -71 [ 1042.991720][T20474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1043.006799][ T5925] usb 6-1: USB disconnect, device number 25 [ 1043.008394][T20472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1043.624453][ T5889] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1043.769688][ T5889] usb 4-1: device descriptor read/64, error -71 [ 1043.776356][ T5925] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1043.976854][ T5925] usb 6-1: not running at top speed; connect to a high speed hub [ 1043.988852][ T5925] usb 6-1: config 67 has an invalid interface number: 177 but max is 1 [ 1043.998410][ T5925] usb 6-1: config 67 has an invalid interface number: 37 but max is 1 [ 1044.013022][ T5925] usb 6-1: config 67 contains an unexpected descriptor of type 0x1, skipping [ 1044.014591][ T5889] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1044.024836][ T5925] usb 6-1: config 67 has no interface number 0 [ 1044.032119][T20490] pim6reg9: entered allmulticast mode [ 1044.040570][ T5925] usb 6-1: config 67 has no interface number 1 [ 1044.051673][ T5925] usb 6-1: config 67 interface 177 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1044.063718][ T5925] usb 6-1: config 67 interface 177 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1044.076008][ T5925] usb 6-1: config 67 interface 177 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1044.087733][ T5925] usb 6-1: config 67 interface 177 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 1044.099544][ T5925] usb 6-1: config 67 interface 37 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 1044.114217][ T5925] usb 6-1: config 67 interface 37 altsetting 14 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 1044.126708][ T5925] usb 6-1: config 67 interface 37 altsetting 14 endpoint 0x88 has invalid maxpacket 1024, setting to 64 [ 1044.141117][ T5925] usb 6-1: config 67 interface 37 altsetting 14 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1044.153244][ T5925] usb 6-1: config 67 interface 37 altsetting 14 endpoint 0xD has invalid wMaxPacketSize 0 [ 1044.166252][ T5925] usb 6-1: config 67 interface 37 altsetting 14 endpoint 0x7 has invalid maxpacket 495, setting to 64 [ 1044.177853][ T5925] usb 6-1: config 67 interface 37 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 1044.189113][ T5925] usb 6-1: config 67 interface 37 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 1044.189300][ T5889] usb 4-1: device descriptor read/64, error -71 [ 1044.223273][ T5925] usb 6-1: config 67 interface 177 has no altsetting 0 [ 1044.230434][ T5925] usb 6-1: config 67 interface 37 has no altsetting 0 [ 1044.290941][T20492] netlink: 5360 bytes leftover after parsing attributes in process `syz.6.3695'. [ 1044.303646][ T5925] usb 6-1: New USB device found, idVendor=12d1, idProduct=7a59, bcdDevice=de.e2 [ 1044.313457][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.322350][ T5925] usb 6-1: Product: 䔔쎞괹䪊㶄ì¢Í몥ᾲ䙨륾ꀅꜴé®åš¢å…瀯ⱱሯ䉣ᅠ심㞖᚟窠﵊꽗愉뒓츮명䗾ö郎圤à¢ï§°ì— ê²²ì®¦â‰íšâ¥•îˆÍ™ì„¶äºªç–¿ì¥µì¬˜ç©¸é‡»ä¨†á…™â¯«ã†“姢ｕ斯翷茭犣䅬륣䴥⩰֖诅ǟ서燬⦣턄عéƒæ³™è‹è¯¡îºŒâ¦¶êˆ¦ï® î­»æ§ì»‡ç¾–ꎬ [ 1044.352311][ T5889] usb usb4-port1: attempt power cycle [ 1044.461711][ T5925] usb 6-1: Manufacturer: ည [ 1044.469628][ T5925] usb 6-1: SerialNumber: à  [ 1044.493338][T20484] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1044.694462][ T5889] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1044.715336][ T5889] usb 4-1: device descriptor read/8, error -71 [ 1044.944300][ T5925] option 6-1:67.177: GSM modem (1-port) converter detected [ 1044.953675][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3698'. [ 1044.964850][ T5889] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1044.988721][ T5925] option 6-1:67.37: GSM modem (1-port) converter detected [ 1044.996742][ T5889] usb 4-1: device descriptor read/8, error -71 [ 1045.027180][ T5925] usb 6-1: USB disconnect, device number 26 [ 1045.118041][ T5889] usb usb4-port1: unable to enumerate USB device [ 1045.128710][ T5925] option 6-1:67.177: device disconnected [ 1045.151239][ T5925] option 6-1:67.37: device disconnected [ 1045.555813][T20512] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 1046.129140][T20522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3703'. [ 1046.786228][ T30] audit: type=1326 audit(1749885307.259:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1046.850885][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1046.886474][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1046.901662][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1046.909755][ T30] audit: type=1326 audit(1749885307.259:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1046.923840][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.025352][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.053955][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.062087][ T30] audit: type=1326 audit(1749885307.279:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1047.084022][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.094391][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.109820][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.117917][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.155834][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.164019][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.172434][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.184286][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.193019][ T5927] hid-generic 00A0:0006:0003.003A: unknown main item tag 0x0 [ 1047.212252][ T5927] hid-generic 00A0:0006:0003.003A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1047.362202][ T30] audit: type=1326 audit(1749885307.279:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1047.473621][ T30] audit: type=1326 audit(1749885307.289:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1047.534971][ T30] audit: type=1326 audit(1749885307.299:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1047.672522][ T30] audit: type=1326 audit(1749885307.299:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1047.708727][T20539] fido_id[20539]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1047.880926][ T30] audit: type=1326 audit(1749885307.299:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1047.932443][ T30] audit: type=1326 audit(1749885307.299:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1047.985063][ T30] audit: type=1326 audit(1749885307.299:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.1.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b358e929 code=0x7ffc0000 [ 1048.468200][ T978] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1048.708557][T20555] trusted_key: encrypted_key: insufficient parameters specified [ 1048.721310][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.737011][ T978] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.785851][ T978] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1048.797843][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1048.914403][ T978] usb 2-1: SerialNumber: syz [ 1048.951335][ T978] usb 2-1: bad CDC descriptors [ 1049.015398][ T5927] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1049.021964][ T978] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1049.118792][ T978] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1049.157179][T20563] sctp: [Deprecated]: syz.5.3714 (pid 20563) Use of int in max_burst socket option deprecated. [ 1049.157179][T20563] Use struct sctp_assoc_value instead [ 1049.299056][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1049.312429][T20564] netlink: 'syz.7.3715': attribute type 29 has an invalid length. [ 1049.344499][T20564] netlink: 'syz.7.3715': attribute type 29 has an invalid length. [ 1049.354023][T20564] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1049.408204][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1049.456218][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1049.476771][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1049.505398][ T5927] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1049.519317][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.540935][ T5927] usb 4-1: config 0 descriptor?? [ 1049.649798][T20569] loop8: detected capacity change from 0 to 7 [ 1049.709367][T20569] Dev loop8: unable to read RDB block 7 [ 1049.715351][T20569] loop8: unable to read partition table [ 1049.724880][T20569] loop8: partition table beyond EOD, truncated [ 1049.739716][T20569] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 1049.739716][T20569] ) failed (rc=-5) [ 1051.429217][ T43] usb 2-1: USB disconnect, device number 113 [ 1051.835110][T20594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3721'. [ 1052.082213][ T5927] usbhid 4-1:0.0: can't add hid device: -71 [ 1052.088494][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1052.099859][ T5927] usb 4-1: USB disconnect, device number 103 [ 1052.785084][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 1052.849453][T20606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3724'. [ 1053.439879][T20608] loop7: detected capacity change from 0 to 16384 [ 1053.684297][ T978] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1053.836310][T20620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3729'. [ 1053.858501][ T978] usb 6-1: config 0 has no interfaces? [ 1053.878717][ T978] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1053.888534][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.897634][ T978] usb 6-1: Product: syz [ 1053.902007][ T978] usb 6-1: Manufacturer: syz [ 1053.914968][ T5889] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1053.922954][ T978] usb 6-1: SerialNumber: syz [ 1053.963398][ T978] usb 6-1: config 0 descriptor?? [ 1054.094624][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 1054.103720][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.114545][ T5889] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1054.126528][ T5889] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1054.142973][ T5889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1054.152344][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1054.160608][ T5889] usb 2-1: SerialNumber: syz [ 1054.247259][T20608] I/O error, dev loop7, sector 248 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 1054.296190][T20621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.341133][T20621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.432214][ T5925] usb 6-1: USB disconnect, device number 27 [ 1054.495897][T20623] ptrace attach of "./syz-executor exec"[16339] was attempted by "./syz-executor exec"[20623] [ 1054.578190][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.586894][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.614576][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.729619][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.851542][T20623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3728'. [ 1054.860700][T20623] tipc: Started in network mode [ 1054.865819][T20623] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1054.873307][T20623] tipc: Enabled bearer , priority 10 [ 1055.050103][ T5924] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1055.215442][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 1055.230894][ T5924] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1055.318387][ T5924] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.541624][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1055.562992][ T5924] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1055.706430][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.747374][ T5924] usb 4-1: config 0 descriptor?? [ 1056.004436][ T43] tipc: Node number set to 43690 [ 1056.030107][T20639] netlink: 'syz.5.3733': attribute type 1 has an invalid length. [ 1056.440652][ T5924] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1056.457483][ T5924] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1056.467569][ T5924] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1056.958304][ T5924] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1057.055487][ T5924] corsair-cpro 0003:1B1C:0C10.003B: unknown main item tag 0x0 [ 1057.091854][ T5924] corsair-cpro 0003:1B1C:0C10.003B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1057.258522][ T5924] corsair-cpro 0003:1B1C:0C10.003B: probe with driver corsair-cpro failed with error -38 [ 1057.572633][ T5924] usb 4-1: USB disconnect, device number 104 [ 1057.689952][ T5889] usb 2-1: USB disconnect, device number 114 [ 1058.296732][T20658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3738'. [ 1058.994509][ T5889] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1059.166926][ T5889] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1059.227394][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.275784][ T5889] usb 2-1: config 0 descriptor?? [ 1059.321914][ T5889] cp210x 2-1:0.0: cp210x converter detected [ 1059.546590][ T5889] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1059.840958][T20667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3737'. [ 1060.131550][ T43] usb 2-1: USB disconnect, device number 115 [ 1060.181207][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1060.203241][ T43] cp210x 2-1:0.0: device disconnected [ 1060.520007][T20677] input: syz1 as /devices/virtual/input/input73 [ 1060.704179][ T5889] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 1060.858987][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1060.883833][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.914381][ T5889] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1060.931733][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.168413][ T5889] usb 4-1: config 0 descriptor?? [ 1061.652082][ T5889] steelseries 0003:1038:1410.003C: unbalanced collection at end of report description [ 1061.721110][ T5889] steelseries 0003:1038:1410.003C: parse failed [ 1061.742050][ T5889] steelseries 0003:1038:1410.003C: probe with driver steelseries failed with error -22 [ 1061.836198][ T5889] usb 4-1: USB disconnect, device number 105 [ 1062.284205][ T978] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1062.587669][ T978] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1062.659490][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.800059][ T978] usb 6-1: config 0 descriptor?? [ 1062.927564][ T978] cp210x 6-1:0.0: cp210x converter detected [ 1063.077599][ T5927] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1063.234270][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 1063.251807][ T5927] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1063.261401][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.344401][ T978] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1063.352446][ T5927] usb 4-1: Product: syz [ 1063.357329][ T5927] usb 4-1: Manufacturer: syz [ 1063.372219][ T5927] usb 4-1: SerialNumber: syz [ 1063.379489][ T978] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1063.388206][ T5927] usb 4-1: config 0 descriptor?? [ 1063.564815][ T978] usb 6-1: USB disconnect, device number 28 [ 1063.640788][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1063.670070][ T5927] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1063.767979][ T978] cp210x 6-1:0.0: device disconnected [ 1063.871536][ T5927] usb write operation failed. (-71) [ 1063.892168][ T5927] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1063.910683][ T5927] dvbdev: DVB: registering new adapter (Terratec H7) [ 1063.918593][ T5927] usb 4-1: media controller created [ 1063.926649][ T5927] usb read operation failed. (-71) [ 1063.932549][ T5927] usb write operation failed. (-71) [ 1063.942876][ T5927] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1063.956114][ T5927] usb 4-1: USB disconnect, device number 106 [ 1064.123706][T20721] fuse: Unknown parameter 'rootmo000000000040000' [ 1064.451591][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.466659][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.494783][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.510771][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.523871][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x2 [ 1064.540583][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.553918][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.618363][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.665918][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.673433][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.686437][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.694288][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.701960][ T978] hid-generic 00A0:0006:0003.003D: unknown main item tag 0x0 [ 1064.744502][ T5924] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1064.920175][ T978] hid-generic 00A0:0006:0003.003D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1064.942699][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3761'. [ 1064.974207][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 1064.983963][ T5924] usb 4-1: config 0 has no interfaces? [ 1064.997585][ T5924] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1065.011861][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.091181][ T5924] usb 4-1: Product: syz [ 1065.103587][ T5924] usb 4-1: Manufacturer: syz [ 1065.128448][ T5924] usb 4-1: SerialNumber: syz [ 1065.188468][ T5924] usb 4-1: config 0 descriptor?? [ 1065.416721][T20743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3764'. [ 1065.470827][T20725] netlink: 'syz.3.3759': attribute type 1 has an invalid length. [ 1065.486928][ T5924] usb 4-1: USB disconnect, device number 107 [ 1065.974223][ T5925] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1066.144260][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 1066.160772][ T5925] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.168442][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3769'. [ 1066.187642][ T5925] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1066.204618][ T5925] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1066.219905][ T5925] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1066.230688][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1066.238883][ T5925] usb 6-1: SerialNumber: syz [ 1066.260847][T20761] bond0: (slave team0): Releasing backup interface [ 1066.280068][T20761] team0 (unregistering): left allmulticast mode [ 1066.518223][T20767] tipc: Can't bind to reserved service type 1 [ 1066.745392][T20776] ptrace attach of "./syz-executor exec"[20000] was attempted by "./syz-executor exec"[20776] [ 1066.759456][T20776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.768610][T20776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.792064][T20776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3766'. [ 1066.801197][T20776] tipc: Started in network mode [ 1066.806282][T20776] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1066.813866][T20776] tipc: Enabled bearer , priority 10 [ 1067.367699][T20782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.434789][T20782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.548734][T20785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.561077][T20785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.570460][T20782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.666864][T20782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.814294][ T5927] tipc: Node number set to 43690 [ 1068.275261][T20792] bond1: entered promiscuous mode [ 1068.282503][T20792] bond1: entered allmulticast mode [ 1068.291582][T20792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1068.884309][ T5925] usb 6-1: USB disconnect, device number 29 [ 1068.938827][T20807] loop8: detected capacity change from 0 to 7 [ 1068.970632][T20807] Dev loop8: unable to read RDB block 7 [ 1068.980706][T20807] loop8: AHDI p3 [ 1068.997216][T20807] loop8: partition table partially beyond EOD, truncated [ 1069.182443][T20807] Dev loop8: unable to read RDB block 7 [ 1069.206150][T20807] loop8: AHDI p3 [ 1069.253600][T20807] loop8: partition table partially beyond EOD, truncated [ 1069.696787][T20826] binder: 20825:20826 ioctl c0306201 200000001a80 returned -14 [ 1070.434745][ T5925] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1070.607105][ T5925] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 1070.630406][ T5925] usb 4-1: config 0 has no interface number 0 [ 1070.637265][ T5925] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1070.654082][ T5925] usb 4-1: config 0 interface 11 has no altsetting 0 [ 1070.670656][ T5925] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1070.680399][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.718328][ T5925] usb 4-1: config 0 descriptor?? [ 1070.725126][T20844] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1070.737342][ T5925] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 1070.748084][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 87 [ 1070.766520][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 1070.786824][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 1070.801648][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 1070.812761][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 1070.824005][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 1070.838408][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 1070.870598][ T5925] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1070.918890][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 1070.990257][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 1071.018519][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 1071.047479][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 1071.082268][T20854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1071.123816][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 1071.165992][ T5925] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 1071.191245][ T5925] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1071.213022][ T5925] usb 4-1: USB disconnect, device number 108 [ 1071.224581][ T5925] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1071.269068][ T5925] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1071.327045][ T5925] keyspan 4-1:0.11: device disconnected [ 1072.134259][ T5925] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1072.264180][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1072.515311][ T5925] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1072.654201][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1072.674514][ T978] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1072.785247][ T5925] usb usb4-port1: attempt power cycle [ 1072.854231][ T978] usb 6-1: Using ep0 maxpacket: 8 [ 1072.863207][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1072.885241][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1072.930486][ T978] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1072.961841][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1072.994144][ T978] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1073.031824][ T978] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1073.042554][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.077582][ T978] usb 6-1: config 0 descriptor?? [ 1073.138033][ T5925] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1073.176375][T15494] Bluetooth: hci3: urb ffff8880282cb300 submission failed (90) [ 1073.188530][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1073.312246][T20878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.331885][T20878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.377569][ T43] usb 6-1: USB disconnect, device number 30 [ 1073.435895][ T5925] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1073.485362][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1073.606556][ T5925] usb usb4-port1: unable to enumerate USB device [ 1074.374190][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1074.384158][ T978] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1074.527595][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.538132][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 1074.545282][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1074.546231][ T978] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 1074.567722][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1074.578220][ T10] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1074.591464][ T978] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1074.602715][ T10] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1074.609550][ T978] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1074.621911][ T978] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 56, changing to 7 [ 1074.638457][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1074.647837][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.658411][ T10] usb 6-1: Product: syz [ 1074.663611][ T978] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8512, setting to 1024 [ 1074.675345][ T10] usb 6-1: Manufacturer: syz [ 1074.682648][ T10] usb 6-1: SerialNumber: syz [ 1074.688976][ T978] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1074.726170][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1074.740876][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.749113][ T978] usb 2-1: Product: syz [ 1074.754992][ T978] usb 2-1: Manufacturer: syz [ 1074.761341][ T978] usb 2-1: SerialNumber: syz [ 1075.075969][ T978] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1075.098025][ T978] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1075.273562][ T10] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1075.285198][ T978] usb 2-1: USB disconnect, device number 116 [ 1075.299989][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 1075.454282][ T5925] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1075.799061][ T10] usb 6-1: USB disconnect, device number 31 [ 1075.917088][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1076.048501][ T7196] udevd[7196]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1076.235565][ T5925] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1076.396955][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1076.533485][ T5925] usb usb4-port1: attempt power cycle [ 1076.635698][T20928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.966925][ T5925] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1077.059037][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1077.334220][ T5925] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1077.385159][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1077.545227][ T5925] usb usb4-port1: unable to enumerate USB device [ 1077.949237][T20931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.054448][ T5925] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1078.225052][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.241758][ T5925] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.252860][ T5925] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.294260][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1078.366042][ T5925] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1078.377377][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.415176][ T5925] usb 2-1: config 0 descriptor?? [ 1078.525979][ T978] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1078.604245][ T43] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1078.627849][T20936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.649990][T20936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.737410][ T978] usb 6-1: config 0 has no interfaces? [ 1078.758635][ T978] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1078.776310][ T43] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1078.787973][ T43] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.804122][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1078.823041][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.824133][ T43] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1078.861187][ T978] usb 6-1: Product: syz [ 1078.864092][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.865497][ T978] usb 6-1: Manufacturer: syz [ 1078.881818][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 1078.890465][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 1078.900728][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1078.936233][ T5925] usb 2-1: USB disconnect, device number 117 [ 1078.953668][ T43] usb 4-1: config 0 descriptor?? [ 1078.973610][ T978] usb 6-1: SerialNumber: syz [ 1079.200117][ T978] usb 6-1: config 0 descriptor?? [ 1079.545380][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 1079.554231][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1079.586237][ T43] usb 4-1: USB disconnect, device number 117 [ 1080.264565][ T43] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1080.424751][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1080.438080][ T43] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 1080.450492][ T43] usb 2-1: config 0 has no interface number 1 [ 1080.469803][ T43] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1080.527453][ T43] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1080.643174][ T43] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1080.655672][ T43] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1080.679614][ T43] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1080.693963][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1080.712113][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1080.763167][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1080.783349][ T43] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1080.795625][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.839712][ T43] usb 2-1: Product: syz [ 1080.857086][ T43] usb 2-1: Manufacturer: syz [ 1080.863221][ T43] usb 2-1: SerialNumber: syz [ 1080.882492][ T43] usb 2-1: config 0 descriptor?? [ 1080.895134][T20961] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1080.911913][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1080.932137][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1080.999635][ T43] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1081.112190][ T43] usb 2-1: USB disconnect, device number 118 [ 1081.431965][ T978] usb 6-1: USB disconnect, device number 32 [ 1082.088773][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3823'. [ 1082.576669][T20994] hub 9-0:1.0: USB hub found [ 1082.594568][T20994] hub 9-0:1.0: 1 port detected [ 1084.339582][T21016] bridge_slave_0: mtu less than device minimum [ 1086.693223][T21056] sctp: [Deprecated]: syz.5.3843 (pid 21056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1086.693223][T21056] Use struct sctp_sack_info instead [ 1087.324477][ T43] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 1087.484167][ T43] usb 6-1: device descriptor read/64, error -71 [ 1087.728583][ T978] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1087.744316][ T5925] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1087.752228][ T43] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 1087.885364][ T43] usb 6-1: device descriptor read/64, error -71 [ 1087.904336][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 1087.916570][ T5925] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1087.925611][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1087.928633][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.946765][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1087.946795][ T978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1087.946821][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1087.946844][ T978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1087.946890][ T978] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1087.946914][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.005878][ T43] usb usb6-port1: attempt power cycle [ 1088.006513][ T978] usb 2-1: config 0 descriptor?? [ 1088.014424][ T5925] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1088.026635][ T5925] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1088.042198][T15494] Bluetooth: hci3: urb ffff888025f4aa00 submission failed (90) [ 1088.055606][ T5925] usb 4-1: Manufacturer: syz [ 1088.063294][ T5925] usb 4-1: config 0 descriptor?? [ 1088.144206][ T5925] rc_core: IR keymap rc-hauppauge not found [ 1088.150200][ T5925] Registered IR keymap rc-empty [ 1088.156788][ T5925] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1088.168443][ T5925] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input74 [ 1088.239105][ T978] usb 2-1: USB disconnect, device number 119 [ 1088.301335][T21065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.340426][T21065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.354491][ T43] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 1088.397631][ T43] usb 6-1: device descriptor read/8, error -71 [ 1088.648521][ T43] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1088.677650][ T43] usb 6-1: device descriptor read/8, error -71 [ 1088.786673][ T5927] usb 4-1: USB disconnect, device number 118 [ 1088.796513][ T43] usb usb6-port1: unable to enumerate USB device [ 1089.404338][ T43] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1089.589166][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.602126][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.630499][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1089.641054][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1089.653652][ T43] usb 2-1: SerialNumber: syz [ 1089.668909][ T43] usb 2-1: bad CDC descriptors [ 1089.683710][ T43] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1089.713285][ T43] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1090.529916][T21116] loop8: detected capacity change from 0 to 7 [ 1090.546962][T21116] Dev loop8: unable to read RDB block 7 [ 1090.553247][T21116] loop8: unable to read partition table [ 1090.561481][T21116] loop8: partition table beyond EOD, truncated [ 1090.568523][T21116] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 1090.568523][T21116] ) failed (rc=-5) [ 1091.245664][ T43] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1091.414252][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1091.422062][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1091.433339][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1091.442564][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.460115][ T43] usb 4-1: config 0 descriptor?? [ 1091.471752][ T43] hub 4-1:0.0: bad descriptor, ignoring hub [ 1091.477861][ T5925] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1091.485767][ T43] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1091.496468][ T43] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1091.664370][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 1091.672121][ T5925] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1091.680479][ T5925] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1091.691984][ T5925] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1091.705669][ T5925] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1091.717220][ T5925] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1091.730393][ T5925] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1091.738053][ T5925] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1091.752630][ T5925] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1091.764528][ T5925] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1091.775938][ T5925] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1091.788863][ T5925] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1091.796384][ T5925] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1091.807814][ T5925] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1091.819921][ T5925] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1091.831136][ T5925] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1091.846830][ T5925] usb 6-1: string descriptor 0 read error: -22 [ 1091.853241][ T5925] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1091.862648][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.886782][ T5925] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1092.114218][ T5925] usb 2-1: USB disconnect, device number 120 [ 1092.171552][ T5927] usb 6-1: USB disconnect, device number 37 [ 1092.597368][ T5925] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1092.764419][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 1092.778989][ T5925] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1092.790783][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.803715][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1092.820976][ T5925] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1092.836219][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.850687][ T5925] usb 2-1: Product: syz [ 1092.857553][ T5925] usb 2-1: Manufacturer: syz [ 1092.862249][ T5925] usb 2-1: SerialNumber: syz [ 1093.244422][ T5927] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1093.280441][ T5925] usb 2-1: 0:2 : does not exist [ 1093.414271][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 1093.422006][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.433041][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.442945][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1093.456363][ T5927] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1093.465572][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.477338][ T5927] usb 6-1: config 0 descriptor?? [ 1093.893169][ T5925] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1093.938617][ T5925] usb 2-1: USB disconnect, device number 121 [ 1094.079796][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1094.150643][ T5927] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1094.164494][ T5927] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1094.172296][ T5927] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1094.182160][ T5927] microsoft 0003:045E:07DA.003E: No inputs registered, leaving [ 1094.236013][ T5927] microsoft 0003:045E:07DA.003E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1094.257122][ T5927] microsoft 0003:045E:07DA.003E: no inputs found [ 1094.276334][ T978] usb 4-1: USB disconnect, device number 119 [ 1094.286264][ T5927] microsoft 0003:045E:07DA.003E: could not initialize ff, continuing anyway [ 1095.953614][ T5925] usb 6-1: USB disconnect, device number 38 [ 1096.544168][ T5925] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1096.724118][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1096.732040][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.752701][ T5925] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1096.774651][ T5925] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1096.806254][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1096.810005][T21190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.822749][T21190] IPv6: NLM_F_CREATE should be set when creating new route [ 1096.824187][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1096.854198][ T5925] usb 4-1: SerialNumber: syz [ 1097.203389][T21198] ptrace attach of "./syz-executor exec"[17368] was attempted by "./syz-executor exec"[21198] [ 1097.216743][T21198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.229276][T21198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.290007][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'. [ 1097.300231][T21198] tipc: Enabled bearer , priority 10 [ 1097.364257][ T5927] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1097.557443][ T5927] usb 2-1: config 0 has an invalid interface number: 177 but max is 0 [ 1097.565928][ T5927] usb 2-1: config 0 has no interface number 0 [ 1097.578804][ T5927] usb 2-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=39.5d [ 1097.588103][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.622689][ T5927] usb 2-1: Product: syz [ 1097.634858][ T5927] usb 2-1: Manufacturer: syz [ 1097.639672][ T5927] usb 2-1: SerialNumber: syz [ 1097.661915][ T5927] usb 2-1: config 0 descriptor?? [ 1097.891317][T21194] tipc: Trying to set illegal importance in message [ 1097.932394][T21194] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1098.015116][ T5927] usb 2-1: USB disconnect, device number 122 [ 1098.024283][ T43] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1098.175617][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1098.183841][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1098.195506][ T43] usb 6-1: config 8 has an invalid interface number: 24 but max is 1 [ 1098.204502][ T43] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.215972][ T43] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 1098.230023][ T43] usb 6-1: config 8 has no interface number 0 [ 1098.265299][ T43] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1098.276851][ T43] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1098.289526][ T43] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1098.300610][ T43] usb 6-1: config 8 interface 24 has no altsetting 0 [ 1098.320159][ T43] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1098.331567][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.340826][ T43] usb 6-1: Product: syz [ 1098.345332][ T43] usb 6-1: Manufacturer: syz [ 1098.350320][ T43] usb 6-1: SerialNumber: syz [ 1098.637706][T21203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.676717][T21203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.370047][T21203] could not allocate digest TFM handle poly1305-simd [ 1099.773469][ T5925] usb 4-1: USB disconnect, device number 120 [ 1100.051098][T21223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.252754][T21230] syzkaller0: entered promiscuous mode [ 1100.270311][T21230] syzkaller0: entered allmulticast mode [ 1100.714426][T21203] delete_channel: no stack [ 1100.743157][ T43] vmk80xx 6-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 1100.758319][ T43] vmk80xx 6-1:8.24: probe with driver vmk80xx failed with error -22 [ 1100.820815][ T43] usb 6-1: USB disconnect, device number 39 [ 1101.074339][ T5925] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1101.234240][ T43] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1101.241956][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1101.506052][ T43] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1101.506085][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.508021][ T43] usb 6-1: config 0 descriptor?? [ 1101.511328][ T43] cp210x 6-1:0.0: cp210x converter detected [ 1101.556484][ T5925] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1101.684336][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1101.797154][ T5925] usb usb4-port1: attempt power cycle [ 1101.957854][ T43] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1102.135768][ T5925] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1102.165108][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1102.383741][T21259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3900'. [ 1102.404442][T21259] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3900'. [ 1102.413587][ T5925] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1102.460576][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1102.594471][ T5925] usb usb4-port1: unable to enumerate USB device [ 1102.784399][T21088] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1102.954150][T21088] usb 2-1: Using ep0 maxpacket: 16 [ 1102.965668][T21088] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.981703][T21088] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1103.002320][T21088] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1103.018854][T21088] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1103.029228][T21088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1103.037859][T21088] usb 2-1: SerialNumber: syz [ 1103.396335][T21269] ptrace attach of "./syz-executor exec"[16339] was attempted by "./syz-executor exec"[21269] [ 1103.413376][T21269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.422711][T21269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.440144][T21269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3902'. [ 1103.449321][T21269] tipc: Enabling of bearer rejected, already enabled [ 1103.821779][ T978] usb 6-1: USB disconnect, device number 40 [ 1103.916840][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1103.974711][ T978] cp210x 6-1:0.0: device disconnected [ 1104.294340][ T978] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1104.467746][ T978] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1104.483547][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.503139][ T978] usb 6-1: config 0 descriptor?? [ 1105.889357][T21088] usb 2-1: USB disconnect, device number 123 [ 1106.749498][ T978] pegasus 6-1:0.0: setup Pegasus II specific registers [ 1107.084518][T21088] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1107.262825][T21088] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1107.294977][T21088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.326880][T21088] usb 2-1: Product: syz [ 1107.331191][T21088] usb 2-1: Manufacturer: syz [ 1107.367975][T21088] usb 2-1: SerialNumber: syz [ 1107.418639][T21088] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1107.451911][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1107.664146][ T5925] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1107.766193][T21271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.807367][T21271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.824390][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1107.848047][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.853905][ T978] pegasus 6-1:0.0: can't locate MII phy, using default [ 1107.870099][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.893847][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1107.900468][ T978] pegasus 6-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, ee:54:ce:6c:ef:20 [ 1107.997053][ T5925] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1108.001817][ T978] usb 6-1: USB disconnect, device number 41 [ 1108.019613][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.063180][ T5925] usb 4-1: config 0 descriptor?? [ 1108.504852][T21295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.535073][T21295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.559016][T12914] usb 2-1: USB disconnect, device number 124 [ 1108.588426][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1108.610390][ T10] ath9k_htc: Failed to initialize the device [ 1108.627185][T12914] usb 2-1: ath9k_htc: USB layer deinitialized [ 1108.645630][ T5925] sony 0003:054C:0268.003F: item fetching failed at offset 0/2 [ 1108.683271][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1108.683292][ T30] audit: type=1326 audit(1749885369.149:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1108.733395][ T5925] sony 0003:054C:0268.003F: parse failed [ 1108.745823][ T5925] sony 0003:054C:0268.003F: probe with driver sony failed with error -22 [ 1108.782453][ T30] audit: type=1326 audit(1749885369.159:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1108.824149][ T30] audit: type=1326 audit(1749885369.159:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1108.841037][ T978] usb 4-1: USB disconnect, device number 125 [ 1108.846582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1108.933931][ T30] audit: type=1326 audit(1749885369.159:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1109.044389][ T30] audit: type=1326 audit(1749885369.159:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1109.066780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.143283][ T30] audit: type=1326 audit(1749885369.159:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1109.165703][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.212418][ T30] audit: type=1326 audit(1749885369.159:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1109.234814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.291754][ T30] audit: type=1326 audit(1749885369.159:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1109.314304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.402600][ T30] audit: type=1326 audit(1749885369.159:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1109.464306][ T30] audit: type=1326 audit(1749885369.159:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21303 comm="syz.5.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd33072ab19 code=0x7ffc0000 [ 1109.797356][T21321] deleting an unspecified loop device is not supported. [ 1110.234603][ T5925] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1110.379082][T21338] fuse: Unknown parameter 'dont_measure' [ 1110.379849][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1110.474476][ T978] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1110.624312][ T5925] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1110.644336][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 1110.658201][ T978] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1110.669675][ T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.680292][ T978] usb 6-1: config 0 has no interface number 0 [ 1110.686702][ T978] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1110.698937][ T978] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1110.710911][ T978] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1110.722323][ T978] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 1110.733063][ T978] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1110.746787][ T978] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1110.756168][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.766724][ T978] usb 6-1: config 0 descriptor?? [ 1110.772668][T21335] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1110.774343][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1110.781220][T21335] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1110.797450][ T978] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1110.814579][ T43] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1110.897914][ T5925] usb usb4-port1: attempt power cycle [ 1110.974630][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1110.983457][ T43] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1110.991920][ T43] usb 2-1: config 179 has no interface number 0 [ 1111.000024][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1111.013218][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1111.030809][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1111.042501][ T43] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1111.057614][ T43] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1111.076420][ T43] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1111.085786][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.100833][T21347] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1111.118769][ T978] usb 6-1: USB disconnect, device number 42 [ 1111.244357][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1111.264808][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1111.514198][ T5925] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1111.525019][T21344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.538320][T21344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.547007][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1111.548692][ T978] usb 2-1: USB disconnect, device number 125 [ 1111.553244][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1111.567917][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1111.577102][ C1] ================================================================== [ 1111.585211][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 1111.593062][ C1] Read of size 4 at addr ffff88807efaf05c by task kworker/1:4/5925 [ 1111.600977][ C1] [ 1111.603305][ C1] CPU: 1 UID: 0 PID: 5925 Comm: kworker/1:4 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1111.603321][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1111.603329][ C1] Workqueue: usb_hub_wq hub_event [ 1111.603345][ C1] Call Trace: [ 1111.603351][ C1] [ 1111.603356][ C1] dump_stack_lvl+0x189/0x250 [ 1111.603375][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 1111.603386][ C1] ? rcu_is_watching+0x15/0xb0 [ 1111.603402][ C1] ? __kasan_check_byte+0x12/0x40 [ 1111.603417][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.603433][ C1] ? rcu_is_watching+0x15/0xb0 [ 1111.603449][ C1] ? lock_release+0x4b/0x3e0 [ 1111.603465][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 1111.603476][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 1111.603487][ C1] print_report+0xd2/0x2b0 [ 1111.603501][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1111.603512][ C1] kasan_report+0x118/0x150 [ 1111.603524][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1111.603537][ C1] do_raw_spin_lock+0x23d/0x290 [ 1111.603549][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 1111.603563][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1111.603577][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1111.603593][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1111.603607][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 1111.603622][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 1111.603637][ C1] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1111.603649][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1111.603668][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1111.603682][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1111.603698][ C1] dummy_timer+0x862/0x4550 [ 1111.603717][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1111.603735][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1111.603748][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1111.603758][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1111.603769][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1111.603790][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1111.603807][ C1] ? read_tsc+0x9/0x20 [ 1111.603827][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1111.603855][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1111.603875][ C1] handle_softirqs+0x286/0x870 [ 1111.603901][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1111.603927][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1111.603954][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1111.603977][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1111.604002][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1111.604030][ C1] irq_exit_rcu+0x9/0x30 [ 1111.604054][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1111.604080][ C1] [ 1111.604087][ C1] [ 1111.604095][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1111.604116][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 1111.604139][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 05 24 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 f6 23 1f 00 eb 06 e8 ef 23 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 4a 9b 82 00 48 8b 1b 48 8b 44 24 [ 1111.604156][ C1] RSP: 0018:ffffc90004c87040 EFLAGS: 00000287 [ 1111.604176][ C1] RAX: 1ffffffff1d36aa7 RBX: ffffffff8e9b5538 RCX: 0000000000100000 [ 1111.604190][ C1] RDX: ffffc9001a5a6000 RSI: 000000000005245b RDI: 000000000005245c [ 1111.604205][ C1] RBP: ffffc90004c87190 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe [ 1111.604219][ C1] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: dffffc0000000000 [ 1111.604233][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b54e0 [ 1111.604258][ C1] ? console_flush_all+0x13a/0xc40 [ 1111.604282][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1111.604308][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1111.604334][ C1] console_unlock+0xc4/0x270 [ 1111.604354][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1111.604375][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1111.604401][ C1] vprintk_emit+0x5b7/0x7a0 [ 1111.604421][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1111.604441][ C1] ? __pfx_snprintf+0x10/0x10 [ 1111.604467][ C1] dev_vprintk_emit+0x337/0x3f0 [ 1111.604488][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1111.604506][ C1] ? kfree+0x18e/0x440 [ 1111.604539][ C1] dev_printk_emit+0xe0/0x130 [ 1111.604561][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1111.604584][ C1] ? __dev_printk+0x131/0x190 [ 1111.604610][ C1] _dev_err+0x10a/0x160 [ 1111.604632][ C1] ? __pfx__dev_err+0x10/0x10 [ 1111.604651][ C1] ? kfree+0x18e/0x440 [ 1111.604690][ C1] ? usb_control_msg+0x2bf/0x3e0 [ 1111.604721][ C1] hub_port_init+0x1e0c/0x2800 [ 1111.604749][ C1] hub_event+0x2518/0x4a00 [ 1111.604789][ C1] ? __pfx_hub_event+0x10/0x10 [ 1111.604808][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1111.604840][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1111.604866][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1111.604894][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1111.604922][ C1] process_scheduled_works+0xae1/0x17b0 [ 1111.604963][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1111.604999][ C1] worker_thread+0x8a0/0xda0 [ 1111.605017][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1111.605048][ C1] ? __kthread_parkme+0x7b/0x200 [ 1111.605071][ C1] kthread+0x70e/0x8a0 [ 1111.605094][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1111.605121][ C1] ? __pfx_kthread+0x10/0x10 [ 1111.605143][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1111.605169][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1111.605196][ C1] ? __pfx_kthread+0x10/0x10 [ 1111.605217][ C1] ret_from_fork+0x3fc/0x770 [ 1111.605244][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1111.605274][ C1] ? __switch_to_asm+0x39/0x70 [ 1111.605294][ C1] ? __switch_to_asm+0x33/0x70 [ 1111.605313][ C1] ? __pfx_kthread+0x10/0x10 [ 1111.605330][ C1] ret_from_fork_asm+0x1a/0x30 [ 1111.605356][ C1] [ 1111.605364][ C1] [ 1112.153734][ C1] Allocated by task 43: [ 1112.157891][ C1] kasan_save_track+0x3e/0x80 [ 1112.162581][ C1] __kasan_kmalloc+0x93/0xb0 [ 1112.167181][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 1112.172566][ C1] xpad_probe+0x428/0x1fc0 [ 1112.177004][ C1] usb_probe_interface+0x641/0xbc0 [ 1112.182118][ C1] really_probe+0x26a/0x9a0 [ 1112.186624][ C1] __driver_probe_device+0x18c/0x2f0 [ 1112.191922][ C1] driver_probe_device+0x4f/0x430 [ 1112.196952][ C1] __device_attach_driver+0x2ce/0x530 [ 1112.202332][ C1] bus_for_each_drv+0x251/0x2e0 [ 1112.207189][ C1] __device_attach+0x2b8/0x400 [ 1112.211954][ C1] bus_probe_device+0x185/0x260 [ 1112.216814][ C1] device_add+0x7b6/0xb50 [ 1112.221144][ C1] usb_set_configuration+0x1a87/0x20e0 [ 1112.226605][ C1] usb_generic_driver_probe+0x8d/0x150 [ 1112.232158][ C1] usb_probe_device+0x1c4/0x390 [ 1112.237015][ C1] really_probe+0x26a/0x9a0 [ 1112.241528][ C1] __driver_probe_device+0x18c/0x2f0 [ 1112.246814][ C1] driver_probe_device+0x4f/0x430 [ 1112.251840][ C1] __device_attach_driver+0x2ce/0x530 [ 1112.257217][ C1] bus_for_each_drv+0x251/0x2e0 [ 1112.262164][ C1] __device_attach+0x2b8/0x400 [ 1112.266930][ C1] bus_probe_device+0x185/0x260 [ 1112.271787][ C1] device_add+0x7b6/0xb50 [ 1112.276123][ C1] usb_new_device+0xa39/0x16c0 [ 1112.280890][ C1] hub_event+0x2941/0x4a00 [ 1112.285394][ C1] process_scheduled_works+0xae1/0x17b0 [ 1112.290952][ C1] worker_thread+0x8a0/0xda0 [ 1112.295546][ C1] kthread+0x70e/0x8a0 [ 1112.299619][ C1] ret_from_fork+0x3fc/0x770 [ 1112.304288][ C1] ret_from_fork_asm+0x1a/0x30 [ 1112.309068][ C1] [ 1112.311402][ C1] Freed by task 978: [ 1112.315314][ C1] kasan_save_track+0x3e/0x80 [ 1112.320100][ C1] kasan_save_free_info+0x46/0x50 [ 1112.325137][ C1] __kasan_slab_free+0x62/0x70 [ 1112.329907][ C1] kfree+0x18e/0x440 [ 1112.333808][ C1] xpad_disconnect+0x350/0x480 [ 1112.338611][ C1] usb_unbind_interface+0x26b/0x8f0 [ 1112.343918][ C1] device_release_driver_internal+0x4d9/0x7c0 [ 1112.350003][ C1] bus_remove_device+0x34d/0x410 [ 1112.354974][ C1] device_del+0x511/0x8e0 [ 1112.359340][ C1] usb_disable_device+0x3e9/0x8a0 [ 1112.364393][ C1] usb_disconnect+0x330/0x910 [ 1112.369370][ C1] hub_event+0x1cdb/0x4a00 [ 1112.373806][ C1] process_scheduled_works+0xae1/0x17b0 [ 1112.379367][ C1] worker_thread+0x8a0/0xda0 [ 1112.384008][ C1] kthread+0x70e/0x8a0 [ 1112.388092][ C1] ret_from_fork+0x3fc/0x770 [ 1112.392691][ C1] ret_from_fork_asm+0x1a/0x30 [ 1112.397478][ C1] [ 1112.399814][ C1] The buggy address belongs to the object at ffff88807efaf000 [ 1112.399814][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 1112.413973][ C1] The buggy address is located 92 bytes inside of [ 1112.413973][ C1] freed 1024-byte region [ffff88807efaf000, ffff88807efaf400) [ 1112.427785][ C1] [ 1112.430117][ C1] The buggy address belongs to the physical page: [ 1112.436530][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7efa8 [ 1112.445293][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1112.453796][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1112.461354][ C1] page_type: f5(slab) [ 1112.465352][ C1] raw: 00fff00000000040 ffff88801a441dc0 ffffea0001f96c00 dead000000000002 [ 1112.473936][ C1] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1112.482524][ C1] head: 00fff00000000040 ffff88801a441dc0 ffffea0001f96c00 dead000000000002 [ 1112.491204][ C1] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1112.499879][ C1] head: 00fff00000000003 ffffea0001fbea01 00000000ffffffff 00000000ffffffff [ 1112.508556][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1112.517226][ C1] page dumped because: kasan: bad access detected [ 1112.523641][ C1] page_owner tracks the page as allocated [ 1112.529355][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5851, tgid 5851 (syz-executor), ts 90681894528, free_ts 60352681406 [ 1112.548655][ C1] post_alloc_hook+0x240/0x2a0 [ 1112.553452][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 1112.559017][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 1112.564843][ C1] alloc_pages_mpol+0x232/0x4a0 [ 1112.569716][ C1] allocate_slab+0x8a/0x3b0 [ 1112.574225][ C1] ___slab_alloc+0xbfc/0x1480 [ 1112.578906][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 1112.584285][ C1] batadv_hard_if_event+0x11b7/0x1a50 [ 1112.589667][ C1] notifier_call_chain+0x1b3/0x3e0 [ 1112.594793][ C1] register_netdevice+0x1608/0x1ae0 [ 1112.600005][ C1] veth_newlink+0x42f/0xa50 [ 1112.604608][ C1] rtnl_newlink_create+0x30d/0xb00 [ 1112.609722][ C1] rtnl_newlink+0x16d6/0x1c70 [ 1112.614409][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1112.619356][ C1] netlink_rcv_skb+0x208/0x470 [ 1112.624123][ C1] netlink_unicast+0x75b/0x8d0 [ 1112.628891][ C1] page last free pid 5589 tgid 5589 stack trace: [ 1112.635242][ C1] __free_frozen_pages+0xc71/0xe70 [ 1112.640357][ C1] __put_partials+0x161/0x1c0 [ 1112.645041][ C1] put_cpu_partial+0x17c/0x250 [ 1112.649809][ C1] __slab_free+0x2f7/0x400 [ 1112.654263][ C1] qlist_free_all+0x97/0x140 [ 1112.658871][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1112.664340][ C1] __kasan_slab_alloc+0x22/0x80 [ 1112.669195][ C1] __kmalloc_noprof+0x224/0x4f0 [ 1112.674067][ C1] tomoyo_supervisor+0xbd5/0x1480 [ 1112.679105][ C1] tomoyo_path_permission+0x25a/0x380 [ 1112.684486][ C1] tomoyo_check_open_permission+0x24d/0x3b0 [ 1112.690382][ C1] security_file_open+0xb1/0x270 [ 1112.695322][ C1] do_dentry_open+0x35e/0x1970 [ 1112.700089][ C1] vfs_open+0x3b/0x340 [ 1112.704169][ C1] path_openat+0x2ee5/0x3830 [ 1112.708769][ C1] do_filp_open+0x1fa/0x410 [ 1112.713278][ C1] [ 1112.715604][ C1] Memory state around the buggy address: [ 1112.721254][ C1] ffff88807efaef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1112.729318][ C1] ffff88807efaef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1112.737380][ C1] >ffff88807efaf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1112.745463][ C1] ^ [ 1112.752397][ C1] ffff88807efaf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1112.760456][ C1] ffff88807efaf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1112.768516][ C1] ================================================================== [ 1112.776582][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1112.783778][ C1] CPU: 1 UID: 0 PID: 5925 Comm: kworker/1:4 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1112.795848][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1112.805907][ C1] Workqueue: usb_hub_wq hub_event [ 1112.810947][ C1] Call Trace: [ 1112.814243][ C1] [ 1112.817098][ C1] dump_stack_lvl+0x99/0x250 [ 1112.821702][ C1] ? __asan_memcpy+0x40/0x70 [ 1112.826304][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1112.831511][ C1] ? __pfx__printk+0x10/0x10 [ 1112.836111][ C1] panic+0x2db/0x790 [ 1112.840134][ C1] ? __pfx_panic+0x10/0x10 [ 1112.844649][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1112.850583][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1112.856934][ C1] ? print_memory_metadata+0x314/0x400 [ 1112.862410][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1112.867448][ C1] check_panic_on_warn+0x89/0xb0 [ 1112.872393][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1112.877425][ C1] end_report+0x78/0x160 [ 1112.881673][ C1] kasan_report+0x129/0x150 [ 1112.886187][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1112.891226][ C1] do_raw_spin_lock+0x23d/0x290 [ 1112.896084][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 1112.901476][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1112.906945][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1112.912153][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1112.918057][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 1112.923005][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 1112.928223][ C1] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1112.934038][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1112.939861][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1112.946197][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1112.951574][ C1] dummy_timer+0x862/0x4550 [ 1112.956094][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1112.961480][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1112.966423][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1112.971368][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1112.976321][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1112.981534][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1112.987265][ C1] ? read_tsc+0x9/0x20 [ 1112.991340][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1112.997159][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1113.002273][ C1] handle_softirqs+0x286/0x870 [ 1113.007047][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1113.011847][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1113.017175][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1113.022391][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1113.026998][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1113.032209][ C1] irq_exit_rcu+0x9/0x30 [ 1113.036463][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1113.042117][ C1] [ 1113.045055][ C1] [ 1113.047988][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1113.053973][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 1113.059699][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 05 24 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 f6 23 1f 00 eb 06 e8 ef 23 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 4a 9b 82 00 48 8b 1b 48 8b 44 24 [ 1113.079315][ C1] RSP: 0018:ffffc90004c87040 EFLAGS: 00000287 [ 1113.085397][ C1] RAX: 1ffffffff1d36aa7 RBX: ffffffff8e9b5538 RCX: 0000000000100000 [ 1113.093379][ C1] RDX: ffffc9001a5a6000 RSI: 000000000005245b RDI: 000000000005245c [ 1113.101356][ C1] RBP: ffffc90004c87190 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe [ 1113.109335][ C1] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: dffffc0000000000 [ 1113.117400][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b54e0 [ 1113.125394][ C1] ? console_flush_all+0x13a/0xc40 [ 1113.130523][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1113.135997][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1113.141552][ C1] console_unlock+0xc4/0x270 [ 1113.146149][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1113.151356][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1113.156916][ C1] vprintk_emit+0x5b7/0x7a0 [ 1113.161430][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1113.166461][ C1] ? __pfx_snprintf+0x10/0x10 [ 1113.171165][ C1] dev_vprintk_emit+0x337/0x3f0 [ 1113.176025][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1113.181495][ C1] ? kfree+0x18e/0x440 [ 1113.185670][ C1] dev_printk_emit+0xe0/0x130 [ 1113.190353][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1113.195644][ C1] ? __dev_printk+0x131/0x190 [ 1113.200332][ C1] _dev_err+0x10a/0x160 [ 1113.204498][ C1] ? __pfx__dev_err+0x10/0x10 [ 1113.209176][ C1] ? kfree+0x18e/0x440 [ 1113.213260][ C1] ? usb_control_msg+0x2bf/0x3e0 [ 1113.218231][ C1] hub_port_init+0x1e0c/0x2800 [ 1113.223032][ C1] hub_event+0x2518/0x4a00 [ 1113.227481][ C1] ? __pfx_hub_event+0x10/0x10 [ 1113.232265][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1113.238108][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1113.243327][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1113.249067][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1113.254808][ C1] process_scheduled_works+0xae1/0x17b0 [ 1113.260376][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1113.266381][ C1] worker_thread+0x8a0/0xda0 [ 1113.270981][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1113.277333][ C1] ? __kthread_parkme+0x7b/0x200 [ 1113.282283][ C1] kthread+0x70e/0x8a0 [ 1113.286364][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1113.291489][ C1] ? __pfx_kthread+0x10/0x10 [ 1113.296086][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1113.301299][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1113.306509][ C1] ? __pfx_kthread+0x10/0x10 [ 1113.311105][ C1] ret_from_fork+0x3fc/0x770 [ 1113.315707][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1113.320830][ C1] ? __switch_to_asm+0x39/0x70 [ 1113.325674][ C1] ? __switch_to_asm+0x33/0x70 [ 1113.330479][ C1] ? __pfx_kthread+0x10/0x10 [ 1113.335091][ C1] ret_from_fork_asm+0x1a/0x30 [ 1113.339894][ C1] [ 1113.343211][ C1] Kernel Offset: disabled [ 1113.347549][ C1] Rebooting in 86400 seconds..