last executing test programs: 23m32.738448112s ago: executing program 4 (id=224): syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12015002c9825f2082057400702a0102030109021b000205e820040904000000ffdda50309040006"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 23m31.253786588s ago: executing program 4 (id=237): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x8}}, 0x20) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42) sendmsg$nl_route(r3, 0x0, 0x24000000) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 23m29.754761942s ago: executing program 4 (id=243): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xb}, 0x5e) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe7073000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905e80aff03f7070909058702"], 0x0) 23m27.993422372s ago: executing program 4 (id=255): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c464a030403ff0700000000000002000100040000003e03000038000000d6000000977000007e03162000000007000800070000000000"], 0x38) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23m27.850531924s ago: executing program 4 (id=256): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x3010000}, 0x1e}, 0x48) 23m27.597330361s ago: executing program 4 (id=259): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000003c0), &(0x7f00000006c0)=0x4) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000040)={0x400}, 0x1) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x755ffd38) 23m12.565806087s ago: executing program 32 (id=259): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000003c0), &(0x7f00000006c0)=0x4) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000040)={0x400}, 0x1) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x755ffd38) 17m42.309661396s ago: executing program 3 (id=1764): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, 0x0, 0x0) recvmsg(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0xf}]}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0xfffffffd, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 17m41.387957759s ago: executing program 3 (id=1767): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r4, 0x0, 0x61, 0x0, &(0x7f0000d23000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf25150000000c00018008000100", @ANYRES32=r9, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41004) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) 17m38.064021024s ago: executing program 3 (id=1780): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x20}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a0300000000000000000007000000080002400000000374000000090a0104000000000000001c0700000008000a40000000000900020073797a30000000000900a60073797a3000000000080005400000000d3000128020000180080001006e61740014000280080002400000000208000340000000090c00018007000100636700000800034000000110140000001000010000000000000000000184000a57ab85c5e43ffd50387ad42d8052647e71ede232c2dd198ac0cec0e513f699831ebbb4633183a03f0ec427bbaba013373fca0b055b35728b61bf1cbf6b109ad162f209f283f8d0b7a418c4ebe2cda7b26ba03626359f417848b95c4805a675718903c9c96b5c9e0b52451631321144cda01abd76811302f0fbe405aa8bff78cbb8fba2e7e5e3d550a8605cdcb0c0994631b3f7b20e1c751e9ddd326ca8b9a9fd8ecf9f6b2012f361cfd511e4b332692988aeda76f1cb243a", @ANYRES8=r1, @ANYRES16=0x0, @ANYRES32=r1], 0xb8}}, 0x20050800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000), 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 17m36.705567861s ago: executing program 3 (id=1783): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0x3, 0x6, 0x3, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 17m33.80967956s ago: executing program 3 (id=1787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "7c667758d1a18f1d", "147c828d84e02e279ff1d7419d9e57a2", "c428b11a", "8791a7acc688c6eb"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0xffffff77) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) (fail_nth: 13) 17m33.567726294s ago: executing program 3 (id=1790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x240, 0x0) (async) fanotify_init(0x240, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/181, 0xb5}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r8, 0x0, r7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000002c0)={0xa0000013}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000580)) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) 17m33.088669984s ago: executing program 33 (id=1790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x240, 0x0) (async) fanotify_init(0x240, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/181, 0xb5}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r8, 0x0, r7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000002c0)={0xa0000013}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000580)) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) 13m34.86865424s ago: executing program 1 (id=2848): socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000140)={0x5, 0x61}) 13m34.652602287s ago: executing program 1 (id=2849): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x400) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x3, 0x0, 0x4, 0x3}}, 0x26) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000002400)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000100)="b8adcfae40d85c6894fa61189541c85cb686765c34cdfe31376d7edb92590c0011b7a505565e2c82b6e04e161e761c29fe7cc4f7d4b34f178e8a2a9d0c7e49850416fc282151b2ab2d7a3e7424cbfc984db4d218d9", 0x55}, {&(0x7f0000000180)="83249edb01136ba291ffc01b9301f0b5a2bb3db5ee2be0eae94a7d1f5070d6bb89ec89192dddf729caf0342d1360b38dc9c16521c63fa2beb4e17c15beee0a85a1fa4079f82037810fa1f224777a4499eda2e9ba78363e8f5214a2fb4237c0f63a9e43e7f0bed671488b0a0623a6570c16530633a5cbac09ecb9fc87ea4af4b882", 0x81}, {&(0x7f0000000240)="c9f8bb1c391148c95c417c4b423814ffdb5b92119a80fd7ba26f119c8d231564c29c437de2229a1ac41e726e8ad29ac77481aa8d5f8b938fa35b6576511f11f87f3a6e4a089896d5280653a008fb066d893697d141c05f26133a77b61ef39740b18529b8b75c2fbd7a7a8176001d02c36cf7f41ee0d08a11da39cc66f9f64e31df77485719d5f4e25847137228e2947f61551a04a23415ee319d75924c3d0b9282827ae417e438bcc434aa64741d405211f91ccab9fcbe02488f8e9a705b1a894e59f37603f6d62052322a3ed72878a8688c9ce827f6a698a10ee7bbe2f0db99cae9924e930332936588da9b8d3add6a9308930f4882de77df662c3023d5913c64106d5f33a7e39578e72087749fe0c73a075eaf31e70d2ed246022d9772539f55af75b36af088b8b544fc0997a8622cbc7dcde34fe04961a0a02d67104b5f99399aab432c9524895f08274c04a792a3b08497db778bf48bf320024808c73a74185442a8ddf4753bc984ce4cf2e364b99141cb9f55ee465b0479e5fd7e7a835ea0d44dadcbaf7ecaea37a261605b0fe473a8d3fedd8f3228af56794ae0a7be27d86e562bbb48396c4c5e202b739a5329099eac7961dbdb0c6f144c39ef9fba4dd15b7e21e0b624df54fa3abc15afd03e554af1402bd50eb02f83b3ae63750479bbd32f2de8e8123a9992c38a771fa6cac4abd47c98112282043c44638817540b488b325dff7db0f2d893f4f5f188f7587c06cf2141b0bca283836cc282b418d8e872886d51230b84a816e0f0d0802cccd5943fc8c80debcaf0753b37a7db9053eb93ee156e59e66d07f7ac43ba167f0464e5a397fc281c0ed354c1a9107c895b9c6ba1d1edbf5450cd706c44811dc616cfaa66dd29db6f18aada215b7008472755d5bfadc1f0090b7a76e870cf1941f8df4a61ad395e3e22264fadf38072538e1ee1f3db9774655b2f02f68146e614475e704097eb1b6e4da6c4143f1e0ada05af325763d590995686f08b4d57f1622745c5795ef16bc8ff19206134b263e1b0b69da20a161fb866f743f6dc90f7f466cfd5d7d261fdd743d70e240fc882b2284d3f8feb60d1cde7b7afa1b880c86a65046455eb5abe7ff881662d64510c1245b26f7cd31717d00fd5aec143ebfa5d8164845ab064f7bbad9390d1c2e1ac19f7b568e2d2cbfaa15153ca11c9728545235b7ea237984dd1c6d33427d0194c53e415d245d73ee0bd94f6f4dc3549f044c462fa1ad2b8faed2797d09e03b6d4bc1cc6455ed1cdb193245da7e3b904d23504a422b90e8d0a51a9aba7def8bc2eb27a938a8e8d425de79e2b4d9bb29b12160313b6bd6a678b00587b324bff48815b2c9ca0191d8c615637d17511072283c46c467ad1ac521cec9dd06ced09c7db4f03fb9373450e7035b236bb82c28fc24754588a9b809a494867bd708dd6834e1eccd42600921a9b6923a1f83a97aa1cacbbc7f9b8f0c63bde3cfc04e890583b163cc1828536a27e9dd3f3bc224214214b6790a3b0a8a926c80093895c24b8ef74185493b243987631543f561a49e28777dea289e47ae4ee7da68e972e99e1c6908dae8ddca2b4483fa959c72a195910a5cfeae5f38687fb83411762b75eea62c82c36eb686bf5c47f963d77c06e84e3a191b0050d26deb97c839a99de8b949425209793382867747759a158eb980f3c33176037218bb55e6bbbf3ecf7ab2f246eb26fb487aa2abcdccec9e876cd1c0f972bd7037e42f9fb790112f3d081106aaa1a410627929c5b276614b8ddbc2209d42e4e5d40aca44d935c02e4ae0234e35066364c6533f5ffa4776ab3f2d4bd97967c3d14bdecae88e810e8b63858a284215bed1e5c8e815f92642c87514082bb625c023ae177a16b7db6f454f0d5a6f6d1010532aec7c7618dbf438a65ec1cad5644ee2c65134070ba09636466e3cb94afc41d3175444cb1d534553050ae624c2c94f2037936603341c110872c7b266b55573f67b80b9e580a59efd9a6a25947e32db1919bcd62b07112260f39a11a9ddb56fa92d8d820800bcf4eac625010dab8819f39cad075383a4b8dc92904e5622048e9a50e606b73f361b0d021419b73e9d1ad898640a518e3739e67ec2da2d82b5d7035d44cf48c20d7a8f5acd454456e4f3dfb14b59dee04d30ef2b199ebd58467b9dcea83098cecbea99d9749154be7641cf3b7cdbef55820a9b5b33b5518c4331d56324a4e04bfb985f9be5adc66f167d5bfcaaeaa6dfd62d11a91191bd1be5eef757fefe7d71eb47276168097ee4a2a8ba0b348100fc94a30d161e93b3a7a2a6aeebe80afaa945c019efc11ff774f76bdd6223b802aedd2393ec1a8e97988ed17773a1cb5fe07347d33ca419c71d3e5faf00f613266589ee24bfe5f92cd6037c163d434439405b06941581c29917b7de0de0dbcc79d2699667c464416a068660f7cdb7e19b5e29313b8e382148a320b2ddc2b955befb40ac4672e0ca364a020bc15f57c0425ae20ea5fd57011436adc637d5bb3057010bb7086814169796605e275237c291547a52cf98bc1d51eece49edb67a0e27547dfaaa149c76e83fe5619a49ee1899ac321082083cf4aec439b369c982b46c806d1ac567acec58781326dfd516709d2d3111aafd6b422ef000cbb2f22233d7a33209920794b64e8548177f1d4a847b48733fe23a51e80d2b7b73f28db6d0897bb7c123af79e9520d33d951964a39b138f1a5a8a7e43644cd58a27f8efdb8832b5fc886e0870376e73d818a9b7d7c3bf269b2848381a0ce8124e63277715a4fe9d6914d02424b1d95699af5523596e9dd27bc9b62ba99042355a6a88b33cb25a76f31b403309ee6ae17173e5e8caed6648a3e36a0a8854869251b157e2582d7638d5302401f00eec9a646f3c567c33103f5e68d3d7921b22fb063fac4699b56460d56e55fe7023f666d58aad3cd314d5d7f8afcce2e53a5855abe09fe444f96c0d6288f54e25a8764ab3d00be88cb8679faec7592bcf1433d6be2e82b3ee560da6e203cc48c189a656bae8a6b22baf2939ddbe306a8e964b4c70752ebf929ea0d430e9b15efa374406d50d71722972c8514175d194d3058788a9fc5fc80f1099756034eba4991522aac4ffa7e8d7b2a6e727739eef9f5f8299ff79cbf1c7e78c0a566c8a31745586137c3d22a726bf385a9f0710e1239c0050136fd291a4845c6f0bb98b5f152218304cd2a4a5683ab98ff426e581d07bc150dc6283471a3046052befe1c99c56b5bd53b4868c26ec3227a11689402a828a6a7a437cf91d195aaaa6daae17ee3384890a821b2a5f4f97f7748e51d713fa560194b2b64297c2c9df9c60ded9854adb7811c1d51ce969a88df8c15e655f691252ae312cbfeefdc8220f35499a95487b39b83351fedd049eb3d2db8f8d1edf758bf5964f4794a1f708e37f07f7d81295a265151310482d61c1dd516c80a8e67be03d71a69db8f2789afd97f09f5a5a86baf5a74ec7d1e2e4aa900f0ba0c689152f66f421cb2551e5c78047ecea5387b30311f14d74397c6ebf087a11a8b2470c3d52a4198fb0bd7bb56dd9feaf77436f3ee52dd3752db71376c99637cec461f8a35845c1802d9bf0b517632e56b83fef9a6885195a0ada56e12e7427fcd5856803217b2c9b30258a9b3b713badf103d82319cf66d667baecd5745d0658a83168def3933557dcbac68b13b4c15ac57ddbc874799a8030fe0b6cc3066a662d0bdc2d2969a42d4960a27dbd1cc24e734c0377c1ea87a8f3ff3c268ae30ddbb6b7448178647aebb34164732127daffb114464b15a2d2235c6a79f0b8af61ed323067408205f9580ab43bc44ad29f92291e312fb0485a33551f91266157c2bfb48d3044e8785a3d1ddf88c6ae5c58cd296de0d0170da64d7b4e8ac385b1b27a809fd424783fb0e012d9509fa8bad80be0f74de24bc4174301780ebc2b3f6ed1b5fecb193b45f5e286c62d74abb53ad1e3e60cbca2ff2d9832d3821728b652ceb53bd9ee133477e14197e4ad4db8a69c515c98e4414423525b698029a24c535e4af253ec92eb610b5bc329f88fffbc1b7ac061b5b198389e929649bab1f83691d687cdb72af7c1b5b07703375ca5d007bde2c930e2b0f5cb1a7b874394475dedd1feb67dba3ee3a4c24da9e30139fafb0e3a404e03948fda3a4b39d80172ffedfa0716dafdcce569e5254a15509789e7370ea978015721e3c2b3423385a838fffb3b71df60dd0748301e42a15cabf158082fc6e9783a763841bb925ba23dea77ad9ff9d56667553bef73576e428da98a8d15413a398c50f80e749b2ef0153b80f25bd88a54f162d0357a120c531cdec82c3cb8c1c0890cc7c56b71be84b655015af91673b0c4cb52ea189a035f15a0a656693eeae061a9b05db056ed275f6159e35e9aeb895ad3d30fd61eee03a1fccaa2b931381966618ec36e3af38ec7ce807d7363b9fa73186539824c611de04eefd1c521363d4452cc8f075832ab84a1a68c25e6ebab0e4b26f0a417c2b5cff44ff1a921cf4d21154a5fae221e400891a22c771834e139eb6c9400d64c8dc3cdc56ad5d08b54974c1668f1920d1cbbfeb6f3133bd2e2a6856b436430005048f7ac4bfeb333c9e885fa476d45cd846986a70f4db03f4df2252979a52fb3837c3d9b8cf3ea0e77388ab1a56863101ea47adcbbf456c33f33e45aad4938e60090a7649f248b88d3ae24b7efc6a0746316dc93565d81a0391bc62aa64d321f1add847e6e3bca2d81571246a175db20b5119021452b8eb72a9041bb8aae4fffa8ff6b41503140e5b0a19ed54b1e924a2d7172b1c86ed26c7e0f49e855f0e2e5a8c898b167892f06b9280c4b39bc9a751770ae042aaab4356bb425946374b4a5ea5120f302240a282fce60a79070ceba0f092e3e424495b3bbaf2c700e89a7b11dfd230c638e2dcacd1ad87e02debb8844c355a44c388dfa83164dfc8d6c28eeb3ecc2bb99bd441e82d771a0e7caa8c547ae35c8aa017c6d71ad8d4848f15046077f6495e1509cb4d3ddcc6075b27e3126826937a3a2cee7da5da270d7f07eb4a8a78bb2ea646d581b6117a60df07dbd8f388fa3a01103ec66dbf754d63268fd1f556fe4c21d46f9dbb05307e638a9d55d0554311e67103095d69302baf8e31ead5e9c1d378665c8447a89502f26dc4014e3805d9d29bc95d71271d3505d2ae6660c3a9fed812f93f58ad60e53c6ae679cfecaf3ab7dfde0cb857bf663d3c0f98ab816056d6994949614648344b962db054baa04519d10948203a2707dae5ed15b0bd3d0f8737daf1a1c3defde487d3579eb7ea07fc748273de57f12004f40d96893b226696d6fca3fd5e2dc03e59ed37255924ee17fa8ef2ccefe6244fe8d5d953cfd2672cbd0ca8e87f7ecf66a0f904f9821910dfa847deebf4961614bff0cf5f447d40d732e237f27730a6169fd9a6fa65d7ec626374ffea1cd5a0b3ef0ce0686e4daa25344cdd4ebd63fc21bffec66a6fd7e32735c94ec01daccad16ec2c519aa1e025087688682088396a1e0902c2283b58118d4aa4fb29d53799680cdcd0bc47208229b18f44fbca6199f0d28efd429f90fc6e2269aebbb57c5c85e6c944207d382e75ab7e38decb1c6c3ff4760b1ad95b30fb20be24d8d0ef3193b90adb708dfb359283c03520d9ed8f10f98b43cebd9c3fcbdffcbe630493e0c12d26fe129de52aafce014f4931b8cf9bc458491797dcd01da3db7e64694551b88b882593489573eba7d7be8d758ed213b99c67c37a3f6b077f8c79bbf705769e1c2c8d72a585203ac55198", 0x1000}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="801aa75a0f53", 0x6}], 0x5, &(0x7f0000002300)="cb99f885ab3ea61d0f7037a944fa3f9f347184c390c7c08b00a12f57c382627cb8139d66c2464139fbc12b792514db6cbe56cfe935c09419405dab42e33d47e4979d547a401c0bdfbd1ed38b4e946053a73a38c9d738eabe2128038e393049b708ad4eaace9c0c16b86796a1fafdb7d848b98b2e30c45df1aebb6bb87e1d15b6b749a1c705677f338948b53aed6a8adeda8dcd0a871806cc5ec6728a1bb16af3483e5a39b9b3ebb106813ceeb9e9a023bb7a8a0878107afa0c8c56abb2f25ea1a80b4ce7d1", 0xc5, 0x20040800}, 0x24004010) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002440), 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000002480)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@base={0x17, 0x51d, 0x3, 0xf, 0x24021, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000002640)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x38, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x59, 0x20, 0xf, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x0, 0x83, {0x9, 0x21, 0x100, 0xff, 0x1, {0x22, 0xedf}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x2, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0xa}}]}}}]}}]}}, &(0x7f00000028c0)={0xa, &(0x7f0000002680)={0xa, 0x6, 0x310, 0x1, 0x40, 0xe, 0x40, 0xf8}, 0x126, &(0x7f00000026c0)={0x5, 0xf, 0x126, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x3, 0xf000, 0x6, [0xffff00, 0xff0000]}, @ptm_cap={0x3}, @generic={0x100, 0x10, 0xb, "d81987bd26db6a0df1a4a436ec34da424d01ea09b7a41fe096146ef5f727b114a4b7234d3f936e4242565c65feba80637782a02125f1df4a78334b92b8e9b6e7d63c50753cd87398733df14a01e2dceb3fd02f0837cb852fd5e3b673b439bb017ca8f84a4297462cfdd7914d33630ed428e14a39e9e7a3e4e75af31971b19e89d0f39bea332d60da54b3910046064cbcf1959f3f28d7d80761ebb95655276caaf11ed140038dbe991d2166c9c41b15af5508e2ed5f94487b62f2f97cae1fa68b105e9296c409fda1710f4958ddfb702ec1cf031c0ff29530d2890f78d1d39d382f8d6d8803c84bd08b19ba537eed9c125799ca9e5b3c20988bab27380f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0xfe, 0x8}]}, 0x3, [{0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x41d}}, {0x1e, &(0x7f0000002840)=@string={0x1e, 0x3, "7844f1ee13f635174123406cdb14d718d70e410c260b869801ed0123"}}, {0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x449}}]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002900)={0x2, 0x0, {0x2, @usage=0x8, 0x0, 0xd4f6, 0xfffffffffffffe00, 0x0, 0x200, 0x2, 0x4c4, @struct={0x0, 0x4}, 0x200, 0xf1, [0x81, 0x40, 0x2, 0x1ff, 0x9, 0x9]}, {0x8000000000000001, @struct={0xbd, 0xfffffff7}, 0x0, 0x8000, 0x5000000, 0x4, 0x5, 0x8001, 0x9, @usage, 0x3, 0x6e, [0x5, 0x401, 0x6, 0x7, 0x6, 0x6]}, {0x0, @struct={0x800, 0xb}, 0x0, 0xc, 0x6, 0x7, 0x7fff, 0x8, 0x8, @usage, 0x1e9, 0x0, [0x7, 0x0, 0xf5, 0x9, 0x100, 0x100]}, {0x1, 0xfffffffffffffff7, 0xffffffff}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000002d00)={r4, 0x9, 0x200, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000003100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$tipc(r5, &(0x7f00000042c0)={&(0x7f0000003140)=@name={0x1e, 0x2, 0x2, {{}, 0x1}}, 0x10, &(0x7f0000004200)=[{&(0x7f0000003180)="b0e8ee593eb4e1ac5cab809bef02842070c771cc9d5815260be0076292550b6792da5eee162f049e66fc4dacb3a2d122ad9a6472f63374fb81898cd3943d0c752049e332838288ea", 0x48}, {&(0x7f0000003200)="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", 0x1000}], 0x2, &(0x7f0000004240)="97a109dd2d06c5412c1fb724ce5cacbac00d9a1c1c4d5ddb93bb8243aacc3c869c998b48d4e82a3c254472e77e01c1e7bee1dd5c42c7e4e8495cbaf83ff7e9286db511a0c6dd7584356f69bd2b546f05f54d4986956154490a01318d461450413f8db516fee2d768e0f646fda71235ab0352924be7eb6006afc648ed45", 0x7d, 0x40}, 0x20000800) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000004340), r5) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000004400)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x3c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x100) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000004440)=0x1, 0x0, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000004480)={0x4e, r3}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000044c0)={0xffffffffffffff81, r7, 0x20, {0x80000001, 0x401}, 0x1}, 0x1) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000045c0)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004580)={&(0x7f0000004540)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008094}, 0xc080) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005640)={&(0x7f0000004600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x2ab}}]}, {0x0, [0x5f]}}, &(0x7f0000004640)=""/4096, 0x33, 0x1000, 0x1, 0x2, 0x10000, @value=r2}, 0x28) ioctl$FIONCLEX(r8, 0x5450) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000005680)=0xf93) stat(&(0x7f00000056c0)='./file0\x00', &(0x7f0000005700)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r5, 0x0, r9, &(0x7f0000005780)={0x2fb3, 0x3, 0x1}) symlinkat(&(0x7f00000057c0)='./file0\x00', r5, &(0x7f0000005800)='./file0\x00') r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x10000000) pipe2$watch_queue(&(0x7f0000005840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_submit(0x0, r10, &(0x7f0000005880)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd=r11, 0x0, {0x0, r3}, 0x2, 0x1, 0x0, {0x0, 0x0, r0}}) 13m33.170431962s ago: executing program 1 (id=2858): socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000140)={0x5, 0x61}) 13m33.007757439s ago: executing program 1 (id=2860): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8000, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x2}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x2b, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r7, 0x541e, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0xcd44, 0x8, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 13m31.056014611s ago: executing program 1 (id=2868): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019ffffffffffffaa550000000000001800", [0x0, 0x2000000000001]}}) 13m30.22097389s ago: executing program 1 (id=2871): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x503, 0x40000, 0x35dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}}, 0x20}, 0x1, 0x0, 0x0, 0x4001800}, 0x4000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000000c0)={0xff, 0x2, 0x2, 0x7, 0x0, [@local]}, 0x18) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000f00)="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", 0x2000, &(0x7f0000005440)={&(0x7f00000001c0)={0x50, 0x0, 0x6, {0x7, 0x2d, 0xff, 0x1402c004, 0xcd, 0x6, 0x6, 0x7ff, 0x0, 0x0, 0x8, 0x8}}, &(0x7f0000000140)={0x18, 0x0, 0x3ff, {0x1}}, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x3, {0x60d8f271}}, &(0x7f00000002c0)={0x18, 0x0, 0x80, {0xfffffffd}}, &(0x7f0000000300)={0x18, 0x0, 0x6f70000000000, {0x9169}}, &(0x7f0000000380)={0x28, 0x0, 0x8001, {{0x3, 0x4}}}, &(0x7f00000003c0)={0x60, 0x0, 0x6830, {{0xfffffffffffffff9, 0x1f, 0x0, 0x7, 0x7, 0x9, 0x2, 0xf}}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0x6, {0x53}}, &(0x7f0000000480)={0x16, 0x0, 0x8, {'{/}-}\x00'}}, &(0x7f00000004c0)={0x20, 0x0, 0xd626, {0x0, 0x8}}, &(0x7f0000000640)={0x78, 0xffffffffffffffda, 0x7, {0x6, 0xe2af, 0x0, {0x2, 0x3, 0x1000, 0x4, 0x3, 0x4, 0x800, 0x4b79, 0x4, 0x8000, 0xe48, 0x0, 0x0, 0x4, 0xfffffffc}}}, &(0x7f00000006c0)={0x90, 0xfffffffffffffff5, 0x6, {0x4, 0x3, 0xfffffffffffffff8, 0x100, 0x7, 0xa, {0x0, 0x0, 0x4b, 0x4, 0x5, 0x196, 0x1ff, 0x2ad, 0xe, 0x2000, 0x4, 0x0, 0x0, 0x3, 0x9}}}, &(0x7f0000000780)={0x10, 0xfffffffffffffffe, 0x7ff}, &(0x7f0000000940)=ANY=[@ANYBLOB="3803000000000000c00d000000000000010000000000000002000000000000000100008000000000de0e00000000000000000500ffffff7f0000000000000000080000000000000031f800000000000000020000000000000e00000000000000665a000000000000fbffffff04000000fa00000000800000ff070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="d1000000ffffff7f000000000008000000890000006272696467653000010000000000000001000000000000000000000000000000a603000000000000000100000f0000000200000000000000443a0000000000000100000000000000ffff000000000000080000000000000009000000000000001000000006000000000000000020000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a3a6e01e40000000000000000600000000000000090000000000000003000000060000007d2e250000000000000000000000000000000000000000000200000000000000f90700000000000000020000e6060000050000000000000006000000000000000300000000000000ffffffffffffff7f03000000000000000400000000000000ff0f000001000000080000000020000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00080000020000000000000005000000000000008ea2ffffffffffff040000000104000066756c6c00000000020000000000000003000000000000004f0b000000000000000000000000000004000000a0c90000040000000000000008000000000000001300000000000000000000000100000003000000000000008e0e0000000000009c7500000c000000010000000010000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000080000000000000000000000000000000100008000000000090000000e0000002f6465762f7367230000000000000000060000000000000002000000000000000b0000000000000002000000000000000900000009000000000000000000000002000000000000000800000000000000fa0300000000000004000000000000000700000000000000ffffffff06000000c10700000020000004000000", @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="0e000000090000000000000000000000000000000000010000000000040000000100010066756c6c00000000"], &(0x7f0000000cc0)={0xa0, 0xfffffffffffffff5, 0x930b, {{0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x8, {0x1, 0x0, 0x100000001, 0xb, 0xcc, 0x2, 0xfffffaca, 0xd9, 0x7, 0x2000, 0x9, 0x0, 0x0, 0x6, 0x8}}, {0x0, 0x17}}}, &(0x7f0000000d80)={0x20, 0x0, 0xfff, {0x3, 0x4, 0xd0a, 0x1ff}}, &(0x7f0000005300)={0x130, 0x0, 0x5, {0x7a2c90, 0x4, 0x0, '\x00', {0x800, 0xff, 0x4, 0x4, 0x0, 0x0, 0xc000, '\x00', 0x7, 0xff, 0x1, 0x4, {0x3, 0x200}, {0x6, 0x1}, {0xffffffff, 0x3}, {0x8, 0x7fff}, 0x2, 0x8, 0x200, 0x2}}}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x6, "58d761a99ef702f8066485d7947206c192671f79dda31a7875af68e91c4a4269"}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) write$cgroup_pressure(r3, &(0x7f0000000180)={'full', 0x20, 0x3, 0x20, 0x10000000fffff}, 0x10) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x30, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0xfff}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 13m29.564093281s ago: executing program 34 (id=2871): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x503, 0x40000, 0x35dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}}, 0x20}, 0x1, 0x0, 0x0, 0x4001800}, 0x4000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000000c0)={0xff, 0x2, 0x2, 0x7, 0x0, [@local]}, 0x18) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000f00)="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", 0x2000, &(0x7f0000005440)={&(0x7f00000001c0)={0x50, 0x0, 0x6, {0x7, 0x2d, 0xff, 0x1402c004, 0xcd, 0x6, 0x6, 0x7ff, 0x0, 0x0, 0x8, 0x8}}, &(0x7f0000000140)={0x18, 0x0, 0x3ff, {0x1}}, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x3, {0x60d8f271}}, &(0x7f00000002c0)={0x18, 0x0, 0x80, {0xfffffffd}}, &(0x7f0000000300)={0x18, 0x0, 0x6f70000000000, {0x9169}}, &(0x7f0000000380)={0x28, 0x0, 0x8001, {{0x3, 0x4}}}, &(0x7f00000003c0)={0x60, 0x0, 0x6830, {{0xfffffffffffffff9, 0x1f, 0x0, 0x7, 0x7, 0x9, 0x2, 0xf}}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0x6, {0x53}}, &(0x7f0000000480)={0x16, 0x0, 0x8, {'{/}-}\x00'}}, &(0x7f00000004c0)={0x20, 0x0, 0xd626, {0x0, 0x8}}, &(0x7f0000000640)={0x78, 0xffffffffffffffda, 0x7, {0x6, 0xe2af, 0x0, {0x2, 0x3, 0x1000, 0x4, 0x3, 0x4, 0x800, 0x4b79, 0x4, 0x8000, 0xe48, 0x0, 0x0, 0x4, 0xfffffffc}}}, &(0x7f00000006c0)={0x90, 0xfffffffffffffff5, 0x6, {0x4, 0x3, 0xfffffffffffffff8, 0x100, 0x7, 0xa, {0x0, 0x0, 0x4b, 0x4, 0x5, 0x196, 0x1ff, 0x2ad, 0xe, 0x2000, 0x4, 0x0, 0x0, 0x3, 0x9}}}, &(0x7f0000000780)={0x10, 0xfffffffffffffffe, 0x7ff}, &(0x7f0000000940)=ANY=[@ANYBLOB="3803000000000000c00d000000000000010000000000000002000000000000000100008000000000de0e00000000000000000500ffffff7f0000000000000000080000000000000031f800000000000000020000000000000e00000000000000665a000000000000fbffffff04000000fa00000000800000ff070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="d1000000ffffff7f000000000008000000890000006272696467653000010000000000000001000000000000000000000000000000a603000000000000000100000f0000000200000000000000443a0000000000000100000000000000ffff000000000000080000000000000009000000000000001000000006000000000000000020000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a3a6e01e40000000000000000600000000000000090000000000000003000000060000007d2e250000000000000000000000000000000000000000000200000000000000f90700000000000000020000e6060000050000000000000006000000000000000300000000000000ffffffffffffff7f03000000000000000400000000000000ff0f000001000000080000000020000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00080000020000000000000005000000000000008ea2ffffffffffff040000000104000066756c6c00000000020000000000000003000000000000004f0b000000000000000000000000000004000000a0c90000040000000000000008000000000000001300000000000000000000000100000003000000000000008e0e0000000000009c7500000c000000010000000010000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000080000000000000000000000000000000100008000000000090000000e0000002f6465762f7367230000000000000000060000000000000002000000000000000b0000000000000002000000000000000900000009000000000000000000000002000000000000000800000000000000fa0300000000000004000000000000000700000000000000ffffffff06000000c10700000020000004000000", @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="0e000000090000000000000000000000000000000000010000000000040000000100010066756c6c00000000"], &(0x7f0000000cc0)={0xa0, 0xfffffffffffffff5, 0x930b, {{0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x8, {0x1, 0x0, 0x100000001, 0xb, 0xcc, 0x2, 0xfffffaca, 0xd9, 0x7, 0x2000, 0x9, 0x0, 0x0, 0x6, 0x8}}, {0x0, 0x17}}}, &(0x7f0000000d80)={0x20, 0x0, 0xfff, {0x3, 0x4, 0xd0a, 0x1ff}}, &(0x7f0000005300)={0x130, 0x0, 0x5, {0x7a2c90, 0x4, 0x0, '\x00', {0x800, 0xff, 0x4, 0x4, 0x0, 0x0, 0xc000, '\x00', 0x7, 0xff, 0x1, 0x4, {0x3, 0x200}, {0x6, 0x1}, {0xffffffff, 0x3}, {0x8, 0x7fff}, 0x2, 0x8, 0x200, 0x2}}}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x6, "58d761a99ef702f8066485d7947206c192671f79dda31a7875af68e91c4a4269"}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) write$cgroup_pressure(r3, &(0x7f0000000180)={'full', 0x20, 0x3, 0x20, 0x10000000fffff}, 0x10) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x30, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0xfff}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 13m2.793684825s ago: executing program 5 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xee43}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a01010000000000d900000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13m2.583685118s ago: executing program 5 (id=2981): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (fail_nth: 6) 13m2.016836722s ago: executing program 5 (id=2983): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='!#\'\x00', 0x10080, &(0x7f0000000040)={@align=0x4, {0xe, 0x1, 0xfffffffc, 0x200}}, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) (async) r1 = mq_open(&(0x7f0000000140)='#}\x00', 0x80, 0xc, &(0x7f0000000180)={0x7, 0x9, 0x80000000, 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xe}}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x9, 0x401, 0x2, 0x5, 0xffff, 0x1000}, {0x7, 0x401, 0x1949, 0x10001, 0xccce, 0x80000000}], ['\x00', '\x00']}) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000000340)=0x10000) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000380)={0x0, 0x23, 0xf9, {0xf9, 0x6, "10cab48ea43ee74122191792b15d3bafd4f4a5b1237fa20260ec3272d279b8600aed311fa7289e8700893565e88ce19f8f6c3a1da0667189769f28d39f7392469dbd37a771690c66911a7e66eae82a3d0e40c3dff8f6ef90c86a5394b0af2029969101a821125ae31aebf15ad310bc21cb17e8f824822ac81d18831717455c3fb673a2c09039dab8fa340c3765f19d67ad34a06e2ff35365dd85987b8530a8d3114b7ff436010c5f46b1b9ca366854bcff54ad9fe5c394863b4a604a67abf709f8105c1e2cf070c0c27f65d36067e8c8f3e0fb7914e8e0c03dbd3404ffcccaaaa109db836ce6000f4497567c6a6546786f57d493f74ef3"}}, &(0x7f0000000480)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "1449449021c9d6079435a4dd9358da02361e0a49406fea9bc22ed26be78bc76ff17be1644f3c9a5a67110ccc1d4e6c6d7f083de53499946d33421548285c09c5408164454a13001dd9043f9964917aa46c96cb8ab05ff432df4d1dee5061f22893fb0a092d61781a12c781e72ab6710fc926a79964f733bb8b509fe94789cf14876b4c0b22b423f2f1850a850f3a2c3352afd9ab31c4e55983a15d7103a3aa58a06a483fd436b0e0b15bd3fe92c0f32e4e6c847f6214ed3db3c3a1ca54b3e64525205bcd0893c81400b0c30d368f4a63"}}}, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x40, 0x14, 0xf9, "3147ba9a81a214f946e0b7211bef19b63411bd38c127064282b503a862ed3395aa4e348f8d7632bc2ef064a675f499208afacc8d7c23a68199490ac090d102ce6de5d8c14ac3c4a3dbd56bacbd82b0f5a9a03c60c43d34b5d7a704ce05e9eacf7d7a9881c7c7495bab8a272edf18a9b7fe68e6241dda1ae8527b0b06185a3459750f25d4094adb5465ee9971c78f400867f4a485cfabdffed2139c9ab4c9e2d35d2844898287b2869616dae32ad79f727deeb7a0680adb775cd2c458620e8125380ecba6e5f67769696c57c29008ef8c810a9540caa8577f9815a9d7a0ec9b69e654a3dd6f951b1063bc0f4f0da6bbb5450eb955e14227e4f1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000740)={0x20, 0x81, 0x1, 'Y'}, &(0x7f0000000780)={0x20, 0x82, 0x2, "1c80"}, &(0x7f00000007c0)={0x20, 0x83, 0x1, '7'}, &(0x7f0000000800)={0x20, 0x84, 0x2, "b510"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "9e4faf"}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@map=r2, 0x34, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)={@fallback=r2, r0, 0x1, 0x4, 0x0, @void, @value=r2, @void, @void, r4}, 0x20) (async) socket$kcm(0x29, 0x5, 0x0) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000a80), 0x4000, 0x0) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000000ac0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000b00)={0x0, 0x0}) capset(&(0x7f0000000b80)={0x20071026, r6}, &(0x7f0000000bc0)={0x6, 0x4, 0x2, 0x4, 0x2, 0x40}) r7 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x7f, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x400, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x9, 0xc7}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x4, 0x9, 0xa}}}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x110, 0xa6, 0x4, 0x6, 0x10, 0x4}, 0x1d6, &(0x7f0000000cc0)={0x5, 0xf, 0x1d6, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa0, "2a35a22afe6462674c131f96a76a8480"}, @generic={0xef, 0x10, 0x3, "84ac4dc40cc5f70d13342087bf4423306d3c2bd2a8cc944edd3a3b5b737a1f7fa052378e90291e0273368d6a6c323cfafd2f7e64c1adcc3be08123d6c12a1e94de08fa622cc280386dc2c5e6a3cac080d3bf4af5569da35106571adcfae1355b6d988d705a0a4f4e375660345cf584ea7be81f9644953d15f800cc6ded66918c1346e4991c0e5a95affc38fc122d779913b13308a4b39502ea86104583a317d6c6f66a8372d7df99b7380de6fa4d55f76dbdea81663367bc1ff4999f1aefb4f9a37f6fc70c4ca3c34bf0a630f99db94be4a2c04694ba0aff3aec0a6252cd0c1562193bda7b2dd689ca95c513"}, @ptm_cap={0x3}, @generic={0xc5, 0x10, 0x3, "a659b855a4c5f9df8ee191d1fa0f0355017ac52bba1158886168098fd63799030c77c05145aaeb57972a4397a137476ad54642f55f226c9c3d226b46070e83a994733bfbe63689e6af6274ffac856ddd3b5895d3dcf436759ea580064eafd1c0c80e2518ec1b16654e6852cca79503ed09c614aa8e6d6bb7f1ff00e07592a0b47953ae3c2e44a4b9b68aaa8d684dfa9e2713b0b7a989e8c0db60a30f0c093bc292eb146b091ef82852368e8d896fbb021e1901805e9b9dd701a11a4826edb8c37101"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000001080)={0x14, &(0x7f0000000f80)={0x0, 0x23, 0x7c, {0x7c, 0x10, "281380e0c81b6bfae779812ea3aebdccea301042e121ffe23ab36d4693ca9cce10304d63cb409ee4d1ea034b0facb043888b5122113ee04a61acdae5e128a3301e1c1ad8d97f6ccb949bf81232cc9ebaaebae50a456eca5763ced4a0338a090a08d1c6d987b08718758a927f56ca7659ecc79d709d1134ed4817"}}, &(0x7f0000001040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x1c, &(0x7f00000010c0)={0x40, 0x3, 0xb8, "3a4f2a2d5412bb96b8d621593973da5a887fd58ef7793dd08257a34fe6eae1e5d670a052170322c9d27bc7e5ca98b1d7f6b188da0bcd0ea86b63f331db7f4b13de703fab0a6e36fd42ca59d731f0c2c3e9d2094ed77fc558a67020589a3a957e0c5c0eb3d69647c212c038e49f6babea367964e40eb4558a0efbfaee75d515c05f8bc8ae31929c3262bec27c19c52d9871818c3261ab537061ec1b975226a4a2f9117a64b0173d74ada9e88570b13aeb3ac857c1369013e3"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x6}}) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) (async) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000001240)={0x2, 0x3}) (async) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000001280)) (async) r8 = syz_open_dev$loop(&(0x7f00000012c0), 0x3, 0x1) ioctl$BLKFRAGET(r8, 0x1265, &(0x7f0000001300)) capget(&(0x7f0000001340)={0x19980330, r6}, &(0x7f0000001380)={0xe5d, 0x2, 0x25, 0xd47, 0x200, 0x10000}) (async) r9 = accept4(r2, &(0x7f00000013c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000001440)=0x80, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r9) (async) syz_open_dev$usbfs(&(0x7f0000001480), 0x8, 0x301000) (async) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000014c0)) (async) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000001500)={0x0, 0x0, @pic={0xe, 0x3, 0x9, 0x6, 0x6, 0x6, 0x8, 0xf9, 0x8d, 0x8, 0x9, 0x2, 0xb0, 0x1, 0xf, 0x2}}) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000001740)={0x1, 'wlan0\x00', 0x3}, 0x18) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001780)={0xf001, 0xc3b, 0x8204, 0xa, 0x1ff, 0x5, 0x0, 0x94, 0x0}, &(0x7f00000017c0)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000001800)={r10, 0xfff7, 0x10, 0x81, 0x1}, &(0x7f0000001840)=0x18) 13m1.277643463s ago: executing program 5 (id=2986): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) socket(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0x3, 0x6, 0x0, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0xb, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x4, 0xff, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = socket(0x5, 0x80000, 0xff) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="a905da880c353700000000000000000000007a", 0x13}, {&(0x7f0000000200)="81902c4276db7f84468e07d22427a3fef2", 0x11}], 0x2}}], 0x1, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 12m57.163142326s ago: executing program 5 (id=3000): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)=ANY=[@ANYBLOB="3400000040000701feffffef00000000017c0000040042800c00018006000600800a00001000028009000b8004"], 0x34}, 0x1, 0x0, 0x0, 0x4004894}, 0xc000) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80, 0x0}, 0x4044) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ff"], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x7, 0x1, 0x1, 0x3, 0x3e, 0xfffffff9, 0x382, 0x40, 0x8f, 0xd32, 0x5, 0x38, 0x0, 0x5, 0x7, 0x9}, [], "3bc9cae9ed809933019d76a5"}, 0x4c) close(r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000600)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18) file_getattr(r3, 0x0, &(0x7f0000000040), 0x64, 0x1000) r6 = socket$kcm(0x2a, 0x6, 0x0) r7 = dup3(r6, r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x891c, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000540)=@add_del={0x2, &(0x7f0000000500)='erspan0\x00'}) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0100000400000000000003000000587f839e12886ccac76ada95ef2d41024fdacd631a5a05c5b2035890ff747a4afd6e9f6cc0ff00000000000000110e8ac2b9fe12b8588164aa45d113a63806a9ba2b7941a981370f1831e9971b5f114779a20a67f6790912634339afa5d2e8f65d94005393bcfff04a0b4beac31e077cf423f6fe7e240dc24bc0c3ed17e7b98e35a3c6f2f6d0df6a233349f2762b2164e06cf8"], 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c020000285cd30b1a7816ba192b3a82cc0de3e76a20e52b79d37758a34f03000000e03e78a9884119c1377fce744688a4f983315fa1bdd92d2a0898eee3a504c3c1d2e23f64fb0c", @ANYRES16=r9, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0xc000}, 0xc1) sendmsg$kcm(r6, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000002, 0x30, r3, 0x3aacc000) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x25, &(0x7f0000000000), 0x20000010) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) syz_open_dev$dvb_frontend(&(0x7f0000000580), 0x2e5e, 0x200) 12m56.353381726s ago: executing program 5 (id=3005): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40802, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x5}, {0x7f, 0x4, 0x6, 0x1}}}]}]}]}}]}, 0x60}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3a}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="16", 0x1}], 0x1}, 0x80) fcntl$setstatus(r0, 0x4, 0x2400) write$FUSE_LK(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, {{0x80, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)='\x00\x00\x00\x00', 0x4) accept4(r8, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000040)=ANY=[@ANYRES8=r8], 0x0) 12m55.759945471s ago: executing program 35 (id=3005): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40802, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x5}, {0x7f, 0x4, 0x6, 0x1}}}]}]}]}}]}, 0x60}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3a}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="16", 0x1}], 0x1}, 0x80) fcntl$setstatus(r0, 0x4, 0x2400) write$FUSE_LK(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, {{0x80, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)='\x00\x00\x00\x00', 0x4) accept4(r8, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000040)=ANY=[@ANYRES8=r8], 0x0) 10.995195285s ago: executing program 6 (id=6431): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24040000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8.83800427s ago: executing program 6 (id=6438): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a3000000000090001007379"], 0xe4}}, 0x20050840) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000980)=ANY=[@ANYRESDEC=r0], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, 0x0) write$binfmt_misc(r2, &(0x7f0000000700)="ec62f37af30708ce0a000000000000223b8a966dde256d0f19e8170d22ca46d83c9283e729fe26cd91393b5855", 0xffffffbc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1e, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = dup2(r5, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) recvmsg$kcm(r6, &(0x7f0000002cc0)={&(0x7f0000000740)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000840)=""/179, 0xb3}, {&(0x7f00000019c0)=""/172, 0xac}, {&(0x7f0000001a80)=""/215, 0xd7}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000900)=""/88, 0x58}], 0x6, &(0x7f0000002c00)=""/192, 0xc0}, 0x140) r7 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000000080)={0x14, &(0x7f0000000240)={0x0, 0x8, 0x53, {0x53, 0x5e10d500e26baa16, "31b12e2d73b2ce8fc941ce001b388acfd44534a93a697b9c31ab730a86b2c6d80c5f60a56e703b11073892f2836176c5128545e62d5545215444db85815e4a904e921be27350161d9393fecb94b4bd1e6b"}}, &(0x7f0000000400)={0x0, 0x3, 0x46, @string={0x46, 0x3, "e06403d9c9bac8d1690405455f1de0d4d02d020bc5a701313399ea6e87dc8609426bd6e92c7f9e0f0ebde2cea3847019fef4e31258fd82a8cb41b34ef24560b1aa8b9a3a"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0x15, 0xf8, "9604ded7e31aa8734f654ba0697e57ae0e355aa8c97c7fb4554798e7cb3c0e93313b25aeb6c6f6f73239bdadd77285559c3bfb5db927b121a48865bdc7f5077704d92c8818cb1a9d590160907e7038d0152007f1dd0468e0668c14349273905ce9b6bf5e0fb6009859ecd35722f019b6c6ffff2d73728591f611c8637940624017f0dbc901e93fc249386ea5dd18c1cb032f0629d22855322ada6f3567e081882ffb781a810666d07ed2f5c7d7c7de15e39e0efdb08d3e4d85122f0228084bf852b3c30a86758049e82746db1e770fd1867a507e8b210c30beed4c30bee165ee4fe62ddeee2d3c166b81883fe13447d273e1db0cf8bd4618"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0xc0, 0x5, 0x4, "877028fa"}, &(0x7f0000000600)={0x40, 0x5, 0x2, "ebb7"}}) splice(r0, &(0x7f0000000680)=0x3, r0, &(0x7f00000006c0)=0x2, 0x7, 0xf) syz_usb_ep_read(r1, 0x8, 0x1000, &(0x7f00000009c0)=""/4096) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 7.699143235s ago: executing program 0 (id=6443): set_mempolicy(0x1, 0x0, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00020c00eb00c1a189"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x1000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0xbf, 0x3b, 0x49, 0x20, 0x4b3, 0x4001, 0x110, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0xe, 0x3, 0x0, 0x18, 0x7e, 0xe5, 0xe8}}]}}]}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc, 0x2, 0x5, 0x6, 0x586, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) close(r5) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xf, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x800}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000021}, 0x4048800) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000002280)=ANY=[@ANYBLOB="401004000000aceb7a"], 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000100)={0x42b21080, &(0x7f00000000c0), 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80003, 0x0) 6.796439095s ago: executing program 2 (id=6447): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002840)={'ip6_vti0\x00', &(0x7f00000027c0)={'ip6tnl0\x00', 0x0, 0x6, 0x2, 0x5, 0x6, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, 0x20, 0x80, 0xca, 0x3}}) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{&(0x7f0000000740)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000007c0)="ea23327f3eb617e23572f057128cf8b93fe102b1cdae24ca5f7263c25b51f879f3595426ee0090beb8afbe703665969a3e96a1e9b894655eabfd7506e4f1a216c77716e27eec2a33d6643cf4c1f86a0e2791915d6d15a81d788e109b03894dcd9525ef74c1c048624f660f9422f3f1776d4547d2a80f74267c10ff758d03ca2c8c5d8751b8f5553822e3f68a7fa882b44627c7507883b3", 0x97}], 0x1}}, {{&(0x7f0000000a00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000a40)="f250c6a2f0e4b0bcaa5e1b03010dc9db2e6955cdad4697f37674317be1885527738de578f4fd6b61636fffe332a5bb36be3aa26429d15321ef81012993e82a0125bffdbe7cec6ea987efa48b4a31aebefb8778f896be8b1059cf705f28277f69e628c33a8c2fb6a8", 0x68}, {&(0x7f0000000ac0)="208e39c74d909320cda91bfb667add567fc95dbe31adf5450820518ba830930fcb672f18427afad81434316f12687fcc78571b35590d87d4cf685d3d2e3648027a92bdd02a97c802e8d1684eee47ba27f6dca3605a8ecbba5ede", 0x5a}, {&(0x7f0000000b40)="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", 0xfe}, {&(0x7f0000000c40)="a62c8bb837f558d381240f84cd46e9bd735ece542aab00020c2e7c83c1dd4b8be331aae94e2684e5acbe500414b17f20d4ec6301be4803450a89061b7726402cd0a25f6c0c86bad46e342a40a2207b5d067702e8a2fa5d562ac52d4c8fd05dd1cd2e770226fba1db2b13fb82ffd1e3db3b6d90350159d86159f964f92204449da42064a9de7a38f06ac37acc10bf6084285e2b99a212d781fbc26cd03d4441daad6653968c1b4e5800c986e610d9e05b4df32130b9307ce8", 0xb8}], 0x4, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffff81}}, @ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0x12, 0x1, [{0x7, 0x2}, {0x6, 0xa, "34a2a248edf04326"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbc3}}], 0x70}}, {{&(0x7f0000000dc0)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000e00)="f2da5d03a55320950591500f26f6e97768a34d188944601075767dcc3ec6fd6d6d25fadb2063aef2d445cb585c89c51fa8330cba7b26ad4142e7c8224e7f20d1e8dfcb47f35b6e69666efb53c67e03cc6614858ecc13709aa1db2a6dea6b48520ac8f532c4cf7632bc089106b199abe4f5e0e8154ea9c0d8ecce6b02486be0ce383cd1d516047691315b58ec762a6016e453472b37a4dafe0b75", 0x9a}, {&(0x7f0000000ec0)="dd310681d0586775aa2db9e8945f5139ff4c6e3bba03cc32106273b4f26af4f875d28766434e853c5556e5edefe721f15bb92893d700c7593a7368333fe224cfb27944807310963fb60f7aba6175862b64890cdeed223910384a213e6d203cf59e01ee1fc6be650b91b9e1950265d0f537b75ba81d116f330a24a292", 0x7c}, {&(0x7f0000000f40)="864b32b3d2be0d5810596aec55738d7b887f4b294666edc9d4eda4fd1eb0219b15a1376a7a992bb8c2cacdc1965453841521246a9bccb7764d8cfa85dc1f1428df7fb5f9243a96aa9e51e0b7845e4e883b3f96f3520dd424af4790537e47ebc2b09ae8d169db8da76552bd72580ca35865492a29d17d465adb327b9dd25d2cfa4ce236e7d1b9c17c567847", 0x8b}, {&(0x7f0000001000)="7cea7a64802c64d8fb1e95c13afe16b9628dc93b25481016e617c8b50f3357902ed8842e762b60c79c47e935775b2a8a9408859b3933608442c342264b32c9b767404f69548c1b026fd20210f453bc940fdcdac2f1a55b37eeebc0f649240199ba135e2658326a08", 0x68}, {&(0x7f0000001080)="605c9df095b42d4a249d5c4af0ebadab35c415120f1bdf59e59b70a3ec1137e0f5983afe89162fc4756f8e4fa5d7ac2e8b45f5a51afc5b93fb664f", 0x3b}, {&(0x7f00000010c0)="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", 0x1000}], 0x6, &(0x7f0000002140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x31, 0x0, [{0x6, 0xe, "b36ffbb27a8c96573f34f79d"}, {0x0, 0x4, "2606"}, {0x7, 0xf, "84aaa8cd084e3fdd8ec79a38e8"}, {0x2, 0xa, "e125e66f11e16574"}]}, @end, @timestamp={0x44, 0xc, 0xb1, 0x0, 0x3, [0x9, 0xb]}]}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000021c0)="efd3d5ea11a402c3a28157e8b2fd7ebe1676112098326c544640812a2d301373f5c3f76698400092909ece709fd402255367d85eeef4a6c14225a2de", 0x3c}, {&(0x7f0000002200)="9e7550a80aec94891e331b599a8f92b7083d110d8b55e9680f3ab3695c9c227ab4cd7ea4551a0211f7d117ca71", 0x2d}], 0x2}}, {{&(0x7f0000002280)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002740)=[{&(0x7f00000022c0)="6b4c574fa27f90", 0x7}, {&(0x7f0000002300)="7157460b4482147ea2c7325ce8103ac1baf0b7e1f10b8a63400b3db09b11025a84cc68e7ea283b71dd0926ee54384a973b2ec5c610ef443ac90e994be3bcf360c4b560a529b8a2e2bf316919f5c6c01960a1ca03a0b1992e634342dba7ef882ba441485bf5454d22ff548a6c3502d30cf7b85255ded467e989082be7de6918c463d6b239ee0378cce520230e06e5c468cdfb14d484379d685441aa58c0d5d254bbb971147193e2776bb46901d01f42afcdab27fd7aa5a76abe6b0f74bf845b6b40d7be1899198d9a94a32ee63ca2b1da2d426ae42f9dc36fc13abfd3b698bacab9427d28e5420b24b919424f95eeda94f2e1a8", 0xf3}, {&(0x7f0000002400)="b66f2062f9306694c714da76131517869bc46f0683c848d11e0a4c3ccbfdcdf72c41776c6b9b8a5e50e18b40b7750bfa299bde33e4bf4f3342a807a1c39e3131a368e6109af436631a7fbec7bb033fe5447b9328f6e213d2fbc6b799fffdee40d7fe29497a5a085b19f8cbbedd35e87d831a1ac0c83aaa", 0x77}, {&(0x7f0000002480)="597ab5bb70e2f9bc1eb2cf16028c42070394dabde3a0dd8ef07b1e2c86759fb4480d7f7f423c43565aadbb5bf67aeebaf626bb6cb5aa1d0c7935a61f73058bccb919d5f3a72fb85b845116a1befa5afaeb407b0d1b18d1040cf5747db1af583155517cc1db3c9ae58346a0aca45318c2fac575d73975de449aef6ad346ab5bb13152827dbb75e0da9458ee4475e956b3f2e0d64e899e9c594df1f627cfdce46f1ec60b9d334aa1f55efe983ad086e32b95a226340d07aa969d148fe55058dd", 0xbf}, {&(0x7f0000002540)="43c96cdc12f30c9223a5c23df0a1eb4cd188f1c0aedb710d974f90a10cfb83b438730bab329bca35a886d4ebc66c1dfea5447f03bf7ac55ba5626a431dd3e8829fce4073e1c4265770644cac274b8cc161a0e4ab53d6c644a0244f4d237d36c95aebac28dba69c89c702e87ad66369a9b3a838e51e0388c3c6b121b6934f5bc0295c1d4fd88150bb114e0efb30300d0175ca39f452b8b00ebd4ba4910752b33e9559e28301", 0xa5}, {&(0x7f0000002600)}, {&(0x7f0000002640)="c973bb07078b6ac454098006a755a79168bbe5be0e99f90fd6dd328545472aa81900166ba267f4119ded4c8efd59bf64b798235e1ade50f331095ac55c66b5ab2a482446dddfa5b6c1e536988ce5d4dc8161116e008755d2d0776cd05de7457e0a229638b4ce280b7800cb0d4fe1b9949cd2e38393142dffa72fcf3d6b3efee457b5e77197c94ffaa66fa2a14dfdf158f2f512a9e8fb733bac4436e731f72fc1bb25a813a0f8abc96a0fc0f70a17bf978e542fec505f92d1871339e76039d68869cce245f2cd9ad0f0a36ecf926cdbd4e3418efd69a6a2e80fe3484c021dce0d3aaf5e0d38f6", 0xe6}], 0x7, &(0x7f0000002880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}], 0x5, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=@ipv4_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a}, 0x18}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x8) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000080)=0x7, &(0x7f0000000280)=0xa) 6.759721367s ago: executing program 2 (id=6448): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24040000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5.782550205s ago: executing program 2 (id=6449): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r2 = syz_io_uring_setup(0x133d, &(0x7f0000000480)={0x0, 0x7aef, 0x80, 0x20000001, 0x3da}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f000046c000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0xcd3, 0x0, 0x0, &(0x7f0000000140)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r6, 0x3516, 0x483, 0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4dcd48df42964a3c}) io_uring_enter(r2, 0x47f3, 0xfffffffe, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000040048856000000000000000000e052156fca558ec31bdd19f02a1debb803ba5b68d12090472cec02000000a92fd185ac3a6b7514dbc0f6f28b64fd188b390c3b1e472cdbd223"], 0x18}, 0x440e0) 5.681838838s ago: executing program 6 (id=6450): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000ac0)={0x2, 0x4}, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0xb0, {0xb, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0xd, 0x1003, 0x6, 0x1}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)=""/156, 0x9c}], 0x1}, 0x80}], 0x1, 0x12142, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000000540)) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0x100000000000f7) r5 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39) keyctl$revoke(0x3, r0) 5.320169042s ago: executing program 6 (id=6453): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae519469151e1320a39aa5b710f6db7c6082ab968972cf44f65f0028bf798d9530deb3e3f37c0cdc57a2c8771e0db66357b8c397daaaf82dc55731ee1ae417e402fcd60b3831e0a3b25b488d1ca51bd930e6ec0a97810837c1f86c856236c3a6e38d83aa2fcc0d6bc5435b93250d3fef0a10580f01bb5f4bf119e9c12ddbb490f28433d7dc29059163ffcb35b5aa1a6c07366a67b5701eb2de067879ab58b41e53e13b9f493339871fecad82c1732bdab4a20e1ff0f502b835c132f977a9ad6d255392b6d07483e6696c36f195b816c5b88986b2b635661596a389af06e58cbbc3"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r1, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r1, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x408}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000280)=""/4100, 0x1004}, {&(0x7f0000000240)=""/53, 0x35}], 0x3}, 0x2b}], 0x3, 0x2000, 0x0) openat(0xffffffffffffffff, 0x0, 0x60000, 0x51) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23", 0x64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000900)=[{0x30, 0x0, 0x0, 0xfffff03c}, {0x6, 0x4, 0x4, 0x4001}]}, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="20110000a6ef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.65314331s ago: executing program 0 (id=6460): syz_usb_connect(0x5, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ba71d120410e4d53d658010203010902900001000000000904"], 0x0) (async) syz_usb_connect(0x5, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ba71d120410e4d53d658010203010902900001000000000904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(0x0, 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0", 0x4d, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000103551aa64586b06cd5558b74b024fe98e42a93a2fd5e88ae8ac0e35d4bd4e03f646c859353aa614f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcff7fff000000002abd700005350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000103551aa64586b06cd5558b74b024fe98e42a93a2fd5e88ae8ac0e35d4bd4e03f646c859353aa614f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcff7fff000000002abd700005350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101500, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101500, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x60000, 0xa000}}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ptrace$cont(0x1f, r3, 0x100, 0x4) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) (async) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d11, 0x9, 0x0, 0xe], [0x10000, 0x80000000, 0x4, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x7, 0xffffffff, 0x0, 0xfffffffc, 0xc6df]], '\x00', [{}, {0x3, 0x8}, {0x5}, {0x0, 0x80000000}, {0x3, 0x100004, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xffffffff}, {0x0, 0x6}, {0x0, 0xffffffff}, {0x8, 0xfffffffe}, {0x7, 0xbd0}, {0x8000000, 0x5}], '\x00', 0x1000}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000480)=0x1d, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$nl_route(r8, 0x0, 0x800) (async) sendmsg$nl_route(r8, 0x0, 0x800) socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210440, 0x0) 4.541835438s ago: executing program 0 (id=6461): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e62, 0x4, @private0, 0x8001}], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r3, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd2d, 0xfffffffd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20002003}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8000, 0x6d}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x73}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x14000010) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0xfffffffc, 0x4) listen(r0, 0xfff) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000000)=0x1c) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000380)={0x1, 0x12, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0x5, [0x5, 0x5, 0x8000, 0x10001, 0x101]}}, @jumbo={0xc2, 0x4, 0x8000}, @pad1, @generic={0x6, 0x1a, "5f346cb9ca1feca1f20099ea24dbea0f6ca62547bf1a2f9a9e54"}, @generic={0xe1, 0x1, ':'}, @pad1, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0xfffffe69, @private2}]}, 0xa0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 4.368412554s ago: executing program 8 (id=6463): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x420, 0x3e0, 0x1c0, 0xffffffff, 0x1c0, 0x3e0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x1d9, 0xec000000, 0xfffffffffffffff8}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESOCT=0x0], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.983502245s ago: executing program 8 (id=6464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) userfaultfd(0x800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0100001a001307fdffffff00000000fe8000000000000000000000000000aae0430000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101000000000000000000000000000000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000060000000200000000000000000000000a00020060000000000000008900010073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080200008ad957b65964f40189fd88c98a3b09ecbd5b9eeb6c"], 0x17c}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@multicast1, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.620332247s ago: executing program 0 (id=6466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800) 3.469647242s ago: executing program 2 (id=6467): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x2d0, 0x228, 0xfeffffff, 0x2d0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x600, {}, [@common=@set={{0x40}, {{0x0, [0x300]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r4, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xfc, 0x4}) splice(r4, 0x0, r2, 0x0, 0xfea8, 0xa) 2.743879629s ago: executing program 0 (id=6469): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000ffffefff000000000000001800", [0x0, 0x2000000000001]}}) 2.243811944s ago: executing program 6 (id=6470): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x1338c0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x1338c0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040), 0x4) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2.177907433s ago: executing program 0 (id=6471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$FUSE(r1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge0\x00', @broadcast}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000003040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xdd65, @local, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='7', 0x1}], 0x1}}], 0x1, 0xd8) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8, 0x2, 0x7322}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) close(0x3) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) read$FUSE(r1, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge0\x00', @broadcast}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r2, &(0x7f0000003040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xdd65, @local, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='7', 0x1}], 0x1}}], 0x1, 0xd8) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8, 0x2, 0x7322}, 0x10) (async) 2.065094143s ago: executing program 8 (id=6472): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x300, {0x2, @link_local, 'gre0\x00'}}, 0x1e) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100207010310b804020240000102030109021b0001010010090904000000073201"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 2.017450848s ago: executing program 2 (id=6473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3b5cc370465e24f6, 0x84}}}, 0xa8}}, 0x0) 1.940938369s ago: executing program 6 (id=6474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$uac1(r3, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x30, 0x6, {0x6, 0x9, "d88abaf8"}}, 0x0}, 0x0) r5 = accept4$tipc(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x10, 0x80800) sendfile(r5, r4, &(0x7f0000000180)=0x4, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000200)={0x1, 0x3, 0x7, &(0x7f0000000040)={0x12, "cc9efc7ddb01702fa9a7ff7d040b00000000000700"}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001080)={0x64, 0x13, 0x210, 0x70bd2c, 0x25dfdbfc, "", [@generic="66677f594bd3200a8cb74da029a0870aeb4db37c46f4056ec84444df5e6f884b5e3ccffd61d09c39246add046b6a7718f3a5b1f286cefdabce73f7e64f7386327c396febd55f0cd6b7edda92fac1f5aa33e5"]}, 0x64}], 0x1, &(0x7f0000005100), 0x0, 0x40000}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.88007816s ago: executing program 2 (id=6475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140010000406010226bd7000fbdbdf25050000f45db780d6b869ad27420a18e08a4f03"], 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x4052) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 910.772943ms ago: executing program 7 (id=6477): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003bf000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="260f20470f186d710fc79f0c000f01cbbaf80c66b8c84a598166efbafc0cb80800efbaa100edbad104ed0f01df660f38295309ba400066b80080000066ef", 0x3e}], 0x1, 0x46, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x3, 0x0, [0xffffffffffffff50, 0x7f, 0x7, 0x128], 0x0}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000240), 0x40300, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 862.301749ms ago: executing program 7 (id=6478): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb700fe7f0000000081000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 685.030588ms ago: executing program 8 (id=6479): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x10000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d04}]}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103944, 0x0) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=""/201, &(0x7f0000000000)=0xc9) 560.755582ms ago: executing program 8 (id=6480): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) dup3(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x18001, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ppoll(&(0x7f0000000100)=[{r4, 0x8002}, {r1}, {r2, 0x1000}, {r3, 0x4468}, {r1, 0x100}, {r2, 0x4080}, {0xffffffffffffffff, 0x4000}, {r4}], 0x8, &(0x7f0000000180), &(0x7f00000001c0)={[0x4]}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x1, 0x9, 0x4f565559, 0x2, 0x4, 0xfffffff7, 0x5, 0xfffffffc, 0x0, 0x3, 0x2, 0x3}}) 494.434213ms ago: executing program 8 (id=6481): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x15e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r8 = syz_io_uring_setup(0x10d4, &(0x7f0000000540)={0x0, 0x1b8e, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r11, r11}, &(0x7f0000000600), &(0x7f0000000640), 0xa00}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) io_uring_enter(r8, 0x47bc, 0x273c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d}, 0x94) 381.313607ms ago: executing program 7 (id=6482): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xd0ff}, 0x48) 379.277899ms ago: executing program 7 (id=6483): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000002061b0000000000000000000000000005000400000000000900020073797a3100000000140007800500150020000000080012400000002e0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendfile(r0, r0, 0x0, 0xb) 105.957049ms ago: executing program 7 (id=6484): openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r0 = syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x0, 0x1}, &(0x7f0000000780)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0xa}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='smb3\x00', 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=6485): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000003000100000000000170100000200000015000000bbdb18fc1c73f32fe7adc3a78b984d030aca27e2df00000000000000110000000000000017010000040000000400000000000000"], 0x60, 0x80}], 0x1, 0x0) kernel console output (not intermixed with test programs): turer: syz [ 1397.084995][T21528] usb 3-1: config 0 descriptor?? [ 1397.120658][T25092] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1397.270483][T25092] usb 9-1: Using ep0 maxpacket: 32 [ 1397.440278][T25092] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1397.449652][T25092] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.461788][T25092] usb 9-1: config 0 descriptor?? [ 1397.678153][T25092] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1397.690132][T25092] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1397.749171][T25092] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1397.757290][T25092] usb 9-1: media controller created [ 1397.827448][T25092] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1397.974255][T25092] az6027: usb out operation failed. (-71) [ 1397.984274][T25092] az6027: usb out operation failed. (-71) [ 1398.007092][T25092] stb0899_attach: Driver disabled by Kconfig [ 1398.028576][T25092] az6027: no front-end attached [ 1398.028576][T25092] [ 1398.142784][T25092] az6027: usb out operation failed. (-71) [ 1398.152022][T25092] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1398.165262][T25092] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input83 [ 1398.189993][T25092] dvb-usb: schedule remote query interval to 400 msecs. [ 1398.197220][T25092] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1398.258020][T25092] usb 9-1: USB disconnect, device number 71 [ 1398.509847][T25092] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1398.884834][T24141] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1399.470433][ T5882] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1399.631862][ T5882] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1399.638609][ T5882] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1399.647948][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.659787][ T5882] usb 9-1: config 0 descriptor?? [ 1399.765719][T28007] netlink: 'syz.7.5869': attribute type 11 has an invalid length. [ 1399.834377][T28009] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1400.038793][T28019] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001 [ 1400.095234][T28021] sch_fq: defrate 16 ignored. [ 1400.255868][T28024] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5875'. [ 1400.333219][ T5882] video4linux radio48: keene_cmd_set failed (-71) [ 1400.360079][ T5882] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 1400.388113][ T5882] usb 9-1: USB disconnect, device number 72 [ 1400.444714][T21528] usb 3-1: USB disconnect, device number 54 [ 1400.526866][T28032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5876'. [ 1400.624246][T28048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5881'. [ 1400.788930][T28049] pic_ioport_write: 41 callbacks suppressed [ 1400.788950][T28049] kvm: pic: level sensitive irq not supported [ 1400.795158][T28049] picdev_read: 41 callbacks suppressed [ 1400.795175][T28049] kvm: pic: non byte read [ 1400.811751][T28049] kvm: pic: level sensitive irq not supported [ 1400.811817][T28049] kvm: pic: non byte read [ 1400.909100][T28049] kvm: pic: level sensitive irq not supported [ 1400.909164][T28049] kvm: pic: non byte read [ 1400.926898][T28049] kvm: pic: level sensitive irq not supported [ 1400.926969][T28049] kvm: pic: non byte read [ 1400.976835][T28049] kvm: pic: level sensitive irq not supported [ 1400.976906][T28049] kvm: pic: non byte read [ 1400.992330][T28049] kvm: pic: level sensitive irq not supported [ 1400.992390][T28049] kvm: pic: non byte read [ 1401.004355][T28049] kvm: pic: level sensitive irq not supported [ 1401.004414][T28049] kvm: pic: non byte read [ 1401.015750][T28049] kvm: pic: level sensitive irq not supported [ 1401.015819][T28049] kvm: pic: non byte read [ 1401.026728][T28049] kvm: pic: level sensitive irq not supported [ 1401.026787][T28049] kvm: pic: non byte read [ 1401.037514][T28049] kvm: pic: level sensitive irq not supported [ 1401.037572][T28049] kvm: pic: non byte read [ 1401.185586][T28058] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5883'. [ 1401.747341][ T5952] IPVS: starting estimator thread 0... [ 1401.993849][T28073] IPVS: using max 35 ests per chain, 84000 per kthread [ 1402.287914][T28080] blktrace: Concurrent blktraces are not allowed on nbd0 [ 1403.207807][T28088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.230513][ T5882] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1403.238507][T28088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.413807][ T5882] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1403.430486][T21528] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1403.442882][ T5882] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1403.527158][ T5882] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1403.542366][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.553570][ T5882] usb 3-1: Product: syz [ 1403.557857][ T5882] usb 3-1: Manufacturer: syz [ 1403.563713][ T5882] usb 3-1: SerialNumber: syz [ 1403.578815][ T5882] usb 3-1: config 0 descriptor?? [ 1403.583952][T21528] usb 9-1: device descriptor read/64, error -71 [ 1403.607835][ T5882] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1403.840745][T21528] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1403.981049][T21528] usb 9-1: device descriptor read/64, error -71 [ 1404.111628][T21528] usb usb9-port1: attempt power cycle [ 1404.470671][T21528] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1404.491483][T21528] usb 9-1: device descriptor read/8, error -71 [ 1404.740609][T21528] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1404.781322][T21528] usb 9-1: device descriptor read/8, error -71 [ 1404.864719][ T5952] usb 3-1: USB disconnect, device number 55 [ 1404.902270][T21528] usb usb9-port1: unable to enumerate USB device [ 1406.479528][T28120] pic_ioport_write: 79 callbacks suppressed [ 1406.479541][T28120] kvm: pic: level sensitive irq not supported [ 1406.494058][T28120] picdev_read: 79 callbacks suppressed [ 1406.494073][T28120] kvm: pic: non byte read [ 1406.522494][T28120] kvm: pic: level sensitive irq not supported [ 1406.522565][T28120] kvm: pic: non byte read [ 1406.534871][T28120] kvm: pic: level sensitive irq not supported [ 1406.534932][T28120] kvm: pic: non byte read [ 1406.546888][T28120] kvm: pic: level sensitive irq not supported [ 1406.546948][T28120] kvm: pic: non byte read [ 1406.558260][T28120] kvm: pic: level sensitive irq not supported [ 1406.558317][T28120] kvm: pic: non byte read [ 1406.569891][T28120] kvm: pic: level sensitive irq not supported [ 1406.569952][T28120] kvm: pic: non byte read [ 1406.581225][T28120] kvm: pic: level sensitive irq not supported [ 1406.581294][T28120] kvm: pic: non byte read [ 1406.592985][T28120] kvm: pic: level sensitive irq not supported [ 1406.593044][T28120] kvm: pic: non byte read [ 1406.604642][T28120] kvm: pic: level sensitive irq not supported [ 1406.604713][T28120] kvm: pic: non byte read [ 1406.616182][T28120] kvm: pic: level sensitive irq not supported [ 1406.616241][T28120] kvm: pic: non byte read [ 1406.970614][T25092] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1407.120629][T25092] usb 3-1: Using ep0 maxpacket: 16 [ 1407.127688][T25092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.139478][T25092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.153373][T25092] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1407.168074][T25092] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1407.177654][T25092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.189263][T25092] usb 3-1: config 0 descriptor?? [ 1407.273918][T28127] syzkaller0: entered promiscuous mode [ 1407.279679][T28127] syzkaller0: entered allmulticast mode [ 1407.509293][T28135] netlink: 'syz.7.5904': attribute type 4 has an invalid length. [ 1407.540658][T28135] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5904'. [ 1407.555912][T28135] .`: renamed from bond0 [ 1407.657960][T24141] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 1407.804701][T28125] tipc: Started in network mode [ 1407.809657][T28125] tipc: Node identity 5, cluster identity 3 [ 1407.815887][T28125] tipc: Node number set to 5 [ 1407.824670][T28125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5900'. [ 1407.840086][T25092] usbhid 3-1:0.0: can't add hid device: -71 [ 1407.847013][T25092] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1407.859022][T25092] usb 3-1: USB disconnect, device number 56 [ 1409.560650][T28136] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1409.567436][T28136] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1409.911004][ T5882] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1410.073229][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.083645][ T5882] usb 3-1: config 0 has no interfaces? [ 1410.089320][ T5882] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1410.098917][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.111440][ T5882] usb 3-1: config 0 descriptor?? [ 1410.474315][T28136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1410.481430][T28136] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1410.498631][T28136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1410.504869][T28136] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1410.526901][T28136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1410.533918][T28136] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1410.688035][T28198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5921'. [ 1410.705893][T28199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1410.719429][T28199] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1410.729058][T28198] bond0: option tlb_dynamic_lb: invalid value (16) [ 1410.737145][T28198] bond0 (unregistering): Released all slaves [ 1411.319876][T28213] xt_connbytes: Forcing CT accounting to be enabled [ 1411.327107][T28213] xt_NFQUEUE: number of total queues is 0 [ 1411.606546][T28220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.399953][T28222] netlink: 'syz.8.5928': attribute type 8 has an invalid length. [ 1412.602504][ T5882] usb 3-1: USB disconnect, device number 57 [ 1412.797048][T28228] pic_ioport_write: 168 callbacks suppressed [ 1412.797068][T28228] kvm: pic: level sensitive irq not supported [ 1412.803487][T28228] picdev_read: 168 callbacks suppressed [ 1412.803504][T28228] kvm: pic: non byte read [ 1412.822041][T28228] kvm: pic: level sensitive irq not supported [ 1412.822099][T28228] kvm: pic: non byte read [ 1412.833300][T28228] kvm: pic: level sensitive irq not supported [ 1412.833421][T28228] kvm: pic: non byte read [ 1412.844772][T28228] kvm: pic: level sensitive irq not supported [ 1412.844830][T28228] kvm: pic: non byte read [ 1412.856407][T28228] kvm: pic: level sensitive irq not supported [ 1412.856562][T28228] kvm: pic: non byte read [ 1412.867390][T28228] kvm: pic: level sensitive irq not supported [ 1412.867449][T28228] kvm: pic: non byte read [ 1412.878449][T28228] kvm: pic: level sensitive irq not supported [ 1412.878507][T28228] kvm: pic: non byte read [ 1412.889482][T28228] kvm: pic: level sensitive irq not supported [ 1412.889548][T28228] kvm: pic: non byte read [ 1412.900908][T28228] kvm: pic: level sensitive irq not supported [ 1412.900966][T28228] kvm: pic: non byte read [ 1412.911790][T28228] kvm: pic: level sensitive irq not supported [ 1412.911854][T28228] kvm: pic: non byte read [ 1413.189022][T28235] syzkaller1: entered promiscuous mode [ 1413.194946][T28235] syzkaller1: entered allmulticast mode [ 1413.341941][ T29] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1413.510763][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 1413.618959][ T29] usb 9-1: config 127 has an invalid interface number: 124 but max is 0 [ 1413.628283][ T29] usb 9-1: config 127 has no interface number 0 [ 1413.756287][ T29] usb 9-1: config 127 interface 124 has no altsetting 0 [ 1413.777136][ T29] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1413.789110][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.829822][ T29] usb 9-1: Product: syz [ 1413.842981][ T29] usb 9-1: Manufacturer: syz [ 1413.860065][ T29] usb 9-1: SerialNumber: syz [ 1413.956741][T28246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5935'. [ 1414.241526][T28254] qrtr: Invalid version 47 [ 1414.338403][T28250] blktrace: Concurrent blktraces are not allowed on nbd2 [ 1414.707739][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1414.718950][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1414.728416][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1414.735645][ T29] usb 9-1: reset high-speed USB device number 77 using dummy_hcd [ 1414.747758][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1414.755894][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1414.781119][T24141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1414.790724][T24141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1414.801524][T24141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1414.862473][T24141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1414.904836][T24141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1414.970147][ T30] audit: type=1326 audit(1773877367.566:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.000914][T28233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.056225][T28233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.152222][ T30] audit: type=1326 audit(1773877367.566:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.190506][ T29] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1415.210517][ T29] usb 9-1: device firmware changed [ 1415.239131][ T29] usb 9-1: USB disconnect, device number 77 [ 1415.249059][ T30] audit: type=1326 audit(1773877367.566:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.325970][ T30] audit: type=1326 audit(1773877367.576:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.378359][ T30] audit: type=1326 audit(1773877367.576:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.410125][ T30] audit: type=1326 audit(1773877367.576:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.433226][ T30] audit: type=1326 audit(1773877367.576:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.541512][ T30] audit: type=1326 audit(1773877367.576:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.610095][T28267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1415.627846][ T30] audit: type=1326 audit(1773877367.576:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.643449][T28261] chnl_net:caif_netlink_parms(): no params data found [ 1415.651314][ T30] audit: type=1326 audit(1773877367.576:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28232 comm="syz.8.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1415.840218][T28272] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1416.183159][T25654] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1416.220609][T25654] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1416.358431][T28261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.390816][T28261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.398139][T28261] bridge_slave_0: entered allmulticast mode [ 1416.423449][T28261] bridge_slave_0: entered promiscuous mode [ 1416.498966][T25654] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1416.530585][T25654] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1416.611079][T28261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.618301][T28261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.690802][T28261] bridge_slave_1: entered allmulticast mode [ 1416.705669][T28261] bridge_slave_1: entered promiscuous mode [ 1417.005896][ T5827] Bluetooth: hci5: command tx timeout [ 1417.051885][T25654] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1417.093009][T25654] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1417.196020][T28317] syzkaller0: entered promiscuous mode [ 1417.205211][T28317] syzkaller0: entered allmulticast mode [ 1417.235321][T28261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.280253][T28261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.453515][T25654] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1417.470481][T25654] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1417.653930][T28328] netlink: 'syz.6.5954': attribute type 4 has an invalid length. [ 1417.781636][T28261] team0: Port device team_slave_0 added [ 1417.793080][T28261] team0: Port device team_slave_1 added [ 1419.027213][T28342] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5957'. [ 1419.081864][ T5827] Bluetooth: hci5: command tx timeout [ 1419.101912][T28261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.110501][T28261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.167880][T28261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.226319][T28261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.273056][T28261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.318166][T28261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.757222][T25654] bridge_slave_1: left allmulticast mode [ 1419.777841][T25654] bridge_slave_1: left promiscuous mode [ 1419.784305][T25654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.915679][T25654] bridge_slave_0: left allmulticast mode [ 1419.926097][T25654] bridge_slave_0: left promiscuous mode [ 1419.938541][T25654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.564050][T25654] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1420.800775][T25654] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.858918][T25654] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.872654][T25654] .` (unregistering): Released all slaves [ 1420.915537][T25654] bond1 (unregistering): Released all slaves [ 1420.975278][T25654] bond2 (unregistering): Released all slaves [ 1421.033987][T25654] bond3 (unregistering): Released all slaves [ 1421.115065][T25654] bond4 (unregistering): Released all slaves [ 1421.154857][T25654] bond5 (unregistering): Released all slaves [ 1421.161297][ T5827] Bluetooth: hci5: command tx timeout [ 1421.245468][T28261] hsr_slave_0: entered promiscuous mode [ 1421.266493][T28261] hsr_slave_1: entered promiscuous mode [ 1421.273969][T28261] debugfs: 'hsr0' already exists in 'hsr' [ 1421.279946][T28261] Cannot create hsr debugfs directory [ 1421.302179][T25654] tipc: Disabling bearer [ 1421.308469][T25654] tipc: Disabling bearer [ 1421.332451][T25654] tipc: Left network mode [ 1421.710493][ T5952] usb 9-1: new low-speed USB device number 78 using dummy_hcd [ 1421.825563][T25654] hsr_slave_0: left promiscuous mode [ 1421.840099][T25654] hsr_slave_1: left promiscuous mode [ 1421.853710][T25654] batman_adv: batadv0: Interface deactivated: dummy0 [ 1421.865838][T25654] batman_adv: batadv0: Removing interface: dummy0 [ 1421.874773][ T5952] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1421.882909][ T5952] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1421.907031][ T5952] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1421.937515][T25654] ` (unregistering): Port device batadv1 removed [ 1421.944291][ T5952] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1421.970885][ T5952] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1422.017595][ T5952] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1422.025647][ T5952] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1422.042445][ T5952] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1422.054604][ T5952] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1422.090262][ T5952] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1422.123543][ T5952] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1422.140624][ T5952] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1422.170385][ T5952] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1422.189454][ T5952] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1422.220493][ T5952] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1422.254788][ T5952] usb 9-1: string descriptor 0 read error: -22 [ 1422.265092][ T5952] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1422.294203][ T5952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.307858][T25654] ` (unregistering): Port device team_slave_1 removed [ 1422.329493][ T5952] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1422.382516][T25654] ` (unregistering): Port device team_slave_0 removed [ 1422.454150][T28409] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5969'. [ 1422.480520][T21528] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1422.649864][T21528] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1422.670640][T21528] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1422.674799][T28415] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5965'. [ 1422.689173][T25092] usb 9-1: USB disconnect, device number 78 [ 1422.706711][T21528] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1422.726241][T21528] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1422.747367][T21528] usb 3-1: Product: syz [ 1422.757779][T21528] usb 3-1: Manufacturer: syz [ 1422.777792][T21528] usb 3-1: SerialNumber: syz [ 1422.801309][T21528] usb 3-1: config 0 descriptor?? [ 1422.844536][T21528] usb 3-1: selecting invalid altsetting 0 [ 1423.103437][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.109891][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.242152][ T5827] Bluetooth: hci5: command tx timeout [ 1423.515956][T28261] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1423.519639][T25654] IPVS: stop unused estimator thread 0... [ 1423.547147][T28261] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1423.606854][T28261] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1423.664789][T28261] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1423.843076][T28443] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5974'. [ 1423.859360][T28443] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5974'. [ 1424.114708][T28261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.190049][T28261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.224496][T25647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.231643][T25647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.278812][T25654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.286245][T25654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.552023][T28261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1424.625635][T28261] veth0_vlan: entered promiscuous mode [ 1424.663928][T28261] veth1_vlan: entered promiscuous mode [ 1424.735738][T28261] veth0_macvtap: entered promiscuous mode [ 1424.790062][T28261] veth1_macvtap: entered promiscuous mode [ 1424.823992][T28468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1424.927628][T28261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.944801][T28469] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1424.974675][T28468] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1425.277087][T21528] usb 3-1: USB disconnect, device number 58 [ 1425.295966][T28261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.532521][T25647] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.594719][T25647] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.603810][T25647] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.612634][T25647] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.174264][T25654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.211050][T25654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.343642][T23139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.446768][T23139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.888653][T28506] kvm: user requested TSC rate below hardware speed [ 1426.922550][T28506] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1426.999410][T28510] pic_ioport_write: 79 callbacks suppressed [ 1426.999430][T28510] kvm: pic: level sensitive irq not supported [ 1427.006351][T28510] picdev_read: 79 callbacks suppressed [ 1427.006392][T28510] kvm: pic: non byte read [ 1427.034067][T28510] kvm: pic: level sensitive irq not supported [ 1427.034611][T28510] kvm: pic: non byte read [ 1427.089142][T28510] kvm: pic: level sensitive irq not supported [ 1427.089200][T28510] kvm: pic: non byte read [ 1427.123293][T28510] kvm: pic: level sensitive irq not supported [ 1427.123356][T28510] kvm: pic: non byte read [ 1427.135239][T28510] kvm: pic: level sensitive irq not supported [ 1427.135299][T28510] kvm: pic: non byte read [ 1427.206183][T28510] kvm: pic: level sensitive irq not supported [ 1427.206244][T28510] kvm: pic: non byte read [ 1427.217841][T28510] kvm: pic: level sensitive irq not supported [ 1427.217962][T28510] kvm: pic: non byte read [ 1427.229613][T28510] kvm: pic: level sensitive irq not supported [ 1427.229940][T28510] kvm: pic: non byte read [ 1427.241592][T28510] kvm: pic: level sensitive irq not supported [ 1427.241716][T28510] kvm: pic: non byte read [ 1427.252602][T28510] kvm: pic: level sensitive irq not supported [ 1427.252687][T28510] kvm: pic: non byte read [ 1427.852825][T21527] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1427.982925][T28531] bond1: Removing last ns target with arp_interval on [ 1428.082029][T21527] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1428.098988][T21527] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.116707][T21527] usb 9-1: config 0 descriptor?? [ 1428.770407][T25092] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1428.928030][T25092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.939429][T25092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.943345][T28527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.950833][T25092] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1428.976737][T28527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.298871][T25092] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1429.318391][T25092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.341482][T25092] usb 3-1: config 0 descriptor?? [ 1429.548278][T28548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5993'. [ 1429.764697][T25092] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1431.551163][T21527] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -22 [ 1431.573114][T21527] usb 9-1: USB disconnect, device number 79 [ 1431.682299][T28576] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6001'. [ 1431.905724][ T5952] usb 3-1: USB disconnect, device number 59 [ 1432.177065][T28586] vivid-004: disconnect [ 1432.193651][T28586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1432.610093][T28578] vivid-004: reconnect [ 1434.754836][T28633] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1434.826441][T28633] bond2 (unregistering): Released all slaves [ 1435.200108][T28647] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6014'. [ 1435.421528][T28661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6017'. [ 1435.610479][ T5952] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1435.760460][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 1435.770135][ T5952] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1435.778698][ T5952] usb 3-1: config 0 has no interface number 0 [ 1435.785108][ T5952] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1435.796312][ T5952] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1435.808214][ T5952] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1435.819604][ T5952] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1435.833047][ T5952] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1435.842391][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.853179][ T5952] usb 3-1: config 0 descriptor?? [ 1435.865671][ T5952] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1436.177337][T21527] usb 3-1: USB disconnect, device number 60 [ 1436.179872][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 1436.200230][T28662] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1436.249823][T21527] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1437.070645][T21525] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1437.233123][T21525] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1437.243721][T21525] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1437.261018][T21525] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.271990][T21525] usb 9-1: config 220 has no interface number 2 [ 1437.278462][T21525] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1437.292491][T21525] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1437.299793][T21525] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1437.308886][T21525] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1437.318774][T21525] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1437.329029][T21525] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.337542][T21525] usb 9-1: Product: syz [ 1437.341951][T21525] usb 9-1: Manufacturer: syz [ 1437.346564][T21525] usb 9-1: SerialNumber: syz [ 1437.385918][T28686] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6028'. [ 1437.395136][T28686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6028'. [ 1437.406416][T28686] fuse: Bad value for 'fd' [ 1437.563783][T28679] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6025'. [ 1437.593215][T28690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6030'. [ 1437.962354][T28700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6033'. [ 1438.343144][T28712] FAULT_INJECTION: forcing a failure. [ 1438.343144][T28712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.375059][T28712] CPU: 1 UID: 0 PID: 28712 Comm: syz.0.6036 Tainted: G L syzkaller #0 PREEMPT(full) [ 1438.375087][T28712] Tainted: [L]=SOFTLOCKUP [ 1438.375093][T28712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1438.375103][T28712] Call Trace: [ 1438.375110][T28712] [ 1438.375118][T28712] dump_stack_lvl+0xe8/0x150 [ 1438.375144][T28712] should_fail_ex+0x412/0x560 [ 1438.375170][T28712] _copy_from_iter+0x1d3/0x1670 [ 1438.375195][T28712] ? rcu_is_watching+0x15/0xb0 [ 1438.375219][T28712] ? __pfx__copy_from_iter+0x10/0x10 [ 1438.375246][T28712] ? netlink_sendmsg+0x650/0xb40 [ 1438.375268][T28712] ? skb_put+0x11b/0x210 [ 1438.375285][T28712] netlink_sendmsg+0x6c0/0xb40 [ 1438.375311][T28712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.375333][T28712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1438.375354][T28712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1438.375374][T28712] ____sys_sendmsg+0x972/0x9f0 [ 1438.375399][T28712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1438.375423][T28712] ? import_iovec+0x73/0xa0 [ 1438.375442][T28712] ___sys_sendmsg+0x2a5/0x360 [ 1438.375463][T28712] ? __pfx____sys_sendmsg+0x10/0x10 [ 1438.375511][T28712] ? __fget_files+0x2a/0x420 [ 1438.375531][T28712] ? __fget_files+0x3a0/0x420 [ 1438.375555][T28712] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1438.375572][T28712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1438.375596][T28712] ? __pfx_ksys_write+0x10/0x10 [ 1438.375619][T28712] do_syscall_64+0x14d/0xf80 [ 1438.375637][T28712] ? trace_irq_disable+0x3b/0x150 [ 1438.375666][T28712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.375683][T28712] ? clear_bhb_loop+0x40/0x90 [ 1438.375702][T28712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.375717][T28712] RIP: 0033:0x7f189799c799 [ 1438.375734][T28712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.375745][T28712] RSP: 002b:00007f1898780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.375762][T28712] RAX: ffffffffffffffda RBX: 00007f1897c15fa0 RCX: 00007f189799c799 [ 1438.375773][T28712] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1438.375783][T28712] RBP: 00007f1898780090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.375792][T28712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.375802][T28712] R13: 00007f1897c16038 R14: 00007f1897c15fa0 R15: 00007f1897d3fa48 [ 1438.375824][T28712] [ 1439.978041][T21525] usb 9-1: selecting invalid altsetting 0 [ 1440.033991][T21525] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1440.090957][T21525] uvcvideo 9-1:220.0: No valid video chain found. [ 1440.114553][T21525] usb 9-1: selecting invalid altsetting 0 [ 1440.120919][T21525] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1440.150592][T21525] usb 9-1: USB disconnect, device number 80 [ 1440.300111][T28746] FAULT_INJECTION: forcing a failure. [ 1440.300111][T28746] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.318526][T28746] CPU: 0 UID: 0 PID: 28746 Comm: syz.2.6048 Tainted: G L syzkaller #0 PREEMPT(full) [ 1440.318551][T28746] Tainted: [L]=SOFTLOCKUP [ 1440.318556][T28746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1440.318566][T28746] Call Trace: [ 1440.318573][T28746] [ 1440.318581][T28746] dump_stack_lvl+0xe8/0x150 [ 1440.318607][T28746] should_fail_ex+0x412/0x560 [ 1440.318632][T28746] should_failslab+0xa8/0x100 [ 1440.318655][T28746] __kmalloc_cache_noprof+0x88/0x660 [ 1440.318672][T28746] ? netlink_lookup+0x30/0x200 [ 1440.318692][T28746] ? genl_start+0x1c9/0x6c0 [ 1440.318721][T28746] genl_start+0x1c9/0x6c0 [ 1440.318736][T28746] ? netlink_lookup+0x30/0x200 [ 1440.318758][T28746] __netlink_dump_start+0x469/0x7e0 [ 1440.318784][T28746] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1440.318805][T28746] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1440.318819][T28746] ? genl_get_cmd+0x7f4/0x930 [ 1440.318839][T28746] ? __pfx_genl_start+0x10/0x10 [ 1440.318853][T28746] ? __pfx_genl_dumpit+0x10/0x10 [ 1440.318867][T28746] ? __pfx_genl_done+0x10/0x10 [ 1440.318897][T28746] genl_rcv_msg+0x5e8/0x7a0 [ 1440.318918][T28746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1440.318934][T28746] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 1440.319031][T28746] ? __lock_acquire+0x6b5/0x2cf0 [ 1440.319061][T28746] netlink_rcv_skb+0x232/0x4b0 [ 1440.319083][T28746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1440.319102][T28746] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1440.319140][T28746] ? down_read+0x272/0x2e0 [ 1440.319157][T28746] ? genl_rcv+0xd/0x40 [ 1440.319176][T28746] genl_rcv+0x28/0x40 [ 1440.319192][T28746] netlink_unicast+0x80f/0x9b0 [ 1440.319219][T28746] ? __pfx_netlink_unicast+0x10/0x10 [ 1440.319240][T28746] ? netlink_sendmsg+0x650/0xb40 [ 1440.319260][T28746] ? skb_put+0x11b/0x210 [ 1440.319279][T28746] netlink_sendmsg+0x813/0xb40 [ 1440.319309][T28746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1440.319334][T28746] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1440.319357][T28746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1440.319379][T28746] ____sys_sendmsg+0x972/0x9f0 [ 1440.319406][T28746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1440.319431][T28746] ? import_iovec+0x73/0xa0 [ 1440.319452][T28746] ___sys_sendmsg+0x2a5/0x360 [ 1440.319475][T28746] ? __pfx____sys_sendmsg+0x10/0x10 [ 1440.319525][T28746] ? __fget_files+0x2a/0x420 [ 1440.319545][T28746] ? __fget_files+0x3a0/0x420 [ 1440.319575][T28746] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1440.319595][T28746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1440.319621][T28746] ? __pfx_ksys_write+0x10/0x10 [ 1440.319650][T28746] do_syscall_64+0x14d/0xf80 [ 1440.319667][T28746] ? trace_irq_disable+0x3b/0x150 [ 1440.319687][T28746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.319710][T28746] ? clear_bhb_loop+0x40/0x90 [ 1440.319730][T28746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.319746][T28746] RIP: 0033:0x7f88cef9c799 [ 1440.319763][T28746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.319777][T28746] RSP: 002b:00007f88cff28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1440.319795][T28746] RAX: ffffffffffffffda RBX: 00007f88cf215fa0 RCX: 00007f88cef9c799 [ 1440.319806][T28746] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1440.319817][T28746] RBP: 00007f88cff28090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.319827][T28746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.319836][T28746] R13: 00007f88cf216038 R14: 00007f88cf215fa0 R15: 00007f88cf33fa48 [ 1440.319864][T28746] [ 1440.766020][T28752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.832751][T28752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.010502][T21525] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 1441.199396][T21525] usb 3-1: device descriptor read/all, error -71 [ 1441.890550][T21525] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1442.080720][T21525] usb 3-1: Using ep0 maxpacket: 16 [ 1442.111830][T21525] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 1442.121612][T21525] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1442.164426][T21525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1442.211360][T21525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1442.276645][T21525] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1442.350746][T21525] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1442.510452][T21525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.560943][T21525] usb 3-1: config 0 descriptor?? [ 1442.569470][T28771] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1442.612545][T21525] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input84 [ 1442.639565][T28788] loop8: detected capacity change from 0 to 7 [ 1442.668653][T28788] Dev loop8: unable to read RDB block 7 [ 1442.776585][T28788] loop8: unable to read partition table [ 1442.851281][T28788] loop8: partition table beyond EOD, truncated [ 1442.868817][T28788] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1442.884792][T28767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.893712][T28767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.906081][T28791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6060'. [ 1442.925167][ T5882] usb 3-1: USB disconnect, device number 63 [ 1443.401038][T28805] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6064'. [ 1443.578977][T28780] fuse: Bad value for 'group_id' [ 1443.673600][T28810] binder: 28809:28810 ioctl c0286687 200000000380 returned -22 [ 1443.690583][T28780] fuse: Bad value for 'group_id' [ 1443.702114][T28812] Invalid option length (0) for dns_resolver key [ 1445.037597][T28842] loop3: detected capacity change from 0 to 7 [ 1445.063039][ T5919] Dev loop3: unable to read RDB block 7 [ 1445.068728][ T5919] loop3: unable to read partition table [ 1445.079117][ T5919] loop3: partition table beyond EOD, truncated [ 1445.109643][T28842] Dev loop3: unable to read RDB block 7 [ 1445.119743][T28842] loop3: unable to read partition table [ 1445.136111][T28842] loop3: partition table beyond EOD, truncated [ 1445.152933][T28842] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1445.585984][T28848] sctp: [Deprecated]: syz.8.6080 (pid 28848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1445.585984][T28848] Use struct sctp_sack_info instead [ 1445.633272][T28848] dummy0: mtu less than device minimum [ 1446.060014][T28855] Cannot find set identified by id 1 to match [ 1446.757681][T28864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6085'. [ 1446.960467][T28868] netlink: 'syz.6.6087': attribute type 1 has an invalid length. [ 1447.024514][T28868] gretap1: entered allmulticast mode [ 1447.042418][T28868] bond1: (slave gretap1): making interface the new active one [ 1447.089197][T28868] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1447.133639][T28868] input: syz1 as /devices/virtual/input/input85 [ 1447.510541][T21525] usb 9-1: new full-speed USB device number 81 using dummy_hcd [ 1447.672481][T21525] usb 9-1: config 2 has an invalid interface number: 52 but max is 2 [ 1447.680963][T21525] usb 9-1: config 2 has an invalid interface number: 89 but max is 2 [ 1447.794414][T21525] usb 9-1: config 2 has an invalid interface number: 67 but max is 2 [ 1447.804524][T21525] usb 9-1: config 2 has an invalid interface number: 224 but max is 2 [ 1447.816980][T21525] usb 9-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1447.829289][T21525] usb 9-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 1447.847619][T21525] usb 9-1: config 2 has no interface number 0 [ 1447.861856][T21525] usb 9-1: config 2 has no interface number 1 [ 1447.872801][T21525] usb 9-1: config 2 has no interface number 2 [ 1447.888349][T21525] usb 9-1: config 2 has no interface number 3 [ 1447.906833][T21525] usb 9-1: config 2 interface 52 altsetting 6 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1447.928761][T21525] usb 9-1: config 2 interface 52 altsetting 6 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1447.952739][T21525] usb 9-1: config 2 interface 52 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1447.980090][T21525] usb 9-1: config 2 interface 52 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 1447.999876][T21525] usb 9-1: config 2 interface 52 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 1448.028301][T21525] usb 9-1: config 2 interface 52 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 16 [ 1448.059600][T21525] usb 9-1: too many endpoints for config 2 interface 89 altsetting 82: 91, using maximum allowed: 30 [ 1448.094099][T21525] usb 9-1: config 2 interface 89 altsetting 82 has a duplicate endpoint with address 0xA, skipping [ 1448.127596][T21525] usb 9-1: config 2 interface 89 altsetting 82 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 1448.200144][T21525] usb 9-1: config 2 interface 89 altsetting 82 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 1448.246081][T21525] usb 9-1: config 2 interface 89 altsetting 82 has a duplicate endpoint with address 0x85, skipping [ 1448.330510][T21525] usb 9-1: config 2 interface 89 altsetting 82 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1448.359699][T21525] usb 9-1: config 2 interface 89 altsetting 82 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1448.420068][T21525] usb 9-1: config 2 interface 89 altsetting 82 has a duplicate endpoint with address 0x8, skipping [ 1448.463935][T21525] usb 9-1: config 2 interface 89 altsetting 82 has a duplicate endpoint with address 0xA, skipping [ 1448.488977][T21525] usb 9-1: config 2 interface 89 altsetting 82 has 10 endpoint descriptors, different from the interface descriptor's value: 91 [ 1448.554270][T28904] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1448.559821][T21525] usb 9-1: config 2 interface 67 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 1448.582922][ T29] IPVS: starting estimator thread 0... [ 1448.583589][T21525] usb 9-1: config 2 interface 67 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1448.677076][T28906] kvm: pic: single mode not supported [ 1448.677091][T28906] pic_ioport_write: 79 callbacks suppressed [ 1448.677100][T28906] kvm: pic: level sensitive irq not supported [ 1448.693898][T28906] kvm: pic: single mode not supported [ 1448.701380][T28906] kvm: pic: single mode not supported [ 1448.707323][T28906] kvm: pic: level sensitive irq not supported [ 1448.716185][T21525] usb 9-1: config 2 interface 67 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 1448.722907][T28908] IPVS: using max 39 ests per chain, 93600 per kthread [ 1448.741931][T28906] kvm: pic: single mode not supported [ 1448.741946][T28906] kvm: pic: level sensitive irq not supported [ 1448.753185][T21525] usb 9-1: config 2 interface 67 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1448.773661][T28906] kvm: pic: single mode not supported [ 1448.774616][T28906] kvm: pic: single mode not supported [ 1448.781188][T28906] kvm: pic: level sensitive irq not supported [ 1448.799465][T21525] usb 9-1: config 2 interface 67 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1448.817594][T28906] kvm: pic: single mode not supported [ 1448.822208][T28906] kvm: pic: single mode not supported [ 1448.833045][T28906] kvm: pic: single mode not supported [ 1448.838467][T28906] kvm: pic: level sensitive irq not supported [ 1448.848269][T21525] usb 9-1: config 2 interface 67 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 1448.888967][T28906] kvm: pic: single mode not supported [ 1448.898176][T21525] usb 9-1: config 2 interface 67 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 1449.161373][T21525] usb 9-1: config 2 interface 67 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 1449.286882][T21525] usb 9-1: config 2 interface 67 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 1449.317549][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1449.390440][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1449.472674][T21525] usb 9-1: config 2 interface 224 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1449.500468][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 1449.539832][T21525] usb 9-1: config 2 interface 224 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1449.553297][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1449.564881][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 1449.576915][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 1449.588515][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 1449.642384][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1449.671930][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1449.721974][T21525] usb 9-1: config 2 interface 224 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 1449.751893][T28927] netlink: 'syz.7.6104': attribute type 29 has an invalid length. [ 1449.762455][T21525] usb 9-1: config 2 interface 52 has no altsetting 0 [ 1449.769192][T21525] usb 9-1: config 2 interface 89 has no altsetting 0 [ 1449.774769][T28926] netlink: 'syz.2.6105': attribute type 8 has an invalid length. [ 1449.780419][T21525] usb 9-1: config 2 interface 67 has no altsetting 0 [ 1449.810923][T21525] usb 9-1: config 2 interface 224 has no altsetting 0 [ 1449.830123][T21525] usb 9-1: New USB device found, idVendor=12d1, idProduct=56c9, bcdDevice=bd.57 [ 1449.845172][T21525] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.860527][T21525] usb 9-1: Product: င [ 1449.869422][T21525] usb 9-1: Manufacturer: ဉ [ 1449.884006][T21525] usb 9-1: SerialNumber: 㠁 [ 1449.914235][T28877] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1450.124813][T28877] netlink: 'syz.8.6089': attribute type 3 has an invalid length. [ 1450.141086][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1450.141101][ T30] audit: type=1326 audit(1773877402.736:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.176753][ T30] audit: type=1326 audit(1773877402.736:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.211082][T21525] option 9-1:2.52: GSM modem (1-port) converter detected [ 1450.225433][ T30] audit: type=1326 audit(1773877402.736:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.279833][ T30] audit: type=1326 audit(1773877402.736:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.300721][T21525] usb 9-1: USB disconnect, device number 81 [ 1450.333779][ T30] audit: type=1326 audit(1773877402.736:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.370038][T21525] option 9-1:2.52: device disconnected [ 1450.391272][ T30] audit: type=1326 audit(1773877402.736:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.419394][T28940] fuse: Bad value for 'rootmode' [ 1450.457896][ T30] audit: type=1326 audit(1773877402.736:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.508903][ T30] audit: type=1326 audit(1773877402.736:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.568934][ T30] audit: type=1326 audit(1773877402.736:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.622646][ T30] audit: type=1326 audit(1773877402.736:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28930 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1450.942762][T28942] can: request_module (can-proto-0) failed. [ 1451.163778][T25092] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1451.332932][T25092] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.347493][T25092] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1451.373567][T25092] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1451.391240][T25092] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1451.401113][T25092] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.411232][T25092] usb 9-1: config 0 descriptor?? [ 1451.481515][T28959] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6114'. [ 1451.497914][T21525] IPVS: starting estimator thread 0... [ 1451.590434][T28960] IPVS: using max 58 ests per chain, 139200 per kthread [ 1451.827039][T25092] hid_parser_main: 1 callbacks suppressed [ 1451.827139][T25092] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1451.845113][T25092] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1451.857282][T25092] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1451.865389][T25092] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1451.876987][T25092] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1451.886675][T25092] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1451.894523][T25092] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1451.902794][T25092] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1451.910694][T25092] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1452.022261][T25092] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1452.182158][T25092] usb 9-1: USB disconnect, device number 82 [ 1452.813483][T28979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6123'. [ 1452.844003][T28979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6123'. [ 1453.231990][T28992] futex_wake_op: syz.0.6127 tries to shift op by -1; fix this program [ 1453.950465][T21527] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1454.123779][T21527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.134903][T21527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.145551][T21527] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1454.159238][T21527] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1454.170247][T21527] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.181059][T21527] usb 9-1: config 0 descriptor?? [ 1454.260573][T25092] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1454.420509][T25092] usb 3-1: Using ep0 maxpacket: 32 [ 1454.427441][T25092] usb 3-1: config 49 has an invalid descriptor of length 54, skipping remainder of the config [ 1454.438529][T25092] usb 3-1: config 49 has 0 interfaces, different from the descriptor's value: 1 [ 1454.455802][T25092] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1454.465863][T25092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.473997][T25092] usb 3-1: Product: syz [ 1454.478170][T25092] usb 3-1: Manufacturer: syz [ 1454.483217][T25092] usb 3-1: SerialNumber: syz [ 1454.595209][T21527] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1454.615070][T21527] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1454.852289][T21527] usb 9-1: USB disconnect, device number 83 [ 1456.410501][T29038] netlink: 884 bytes leftover after parsing attributes in process `syz.7.6141'. [ 1456.439068][T29042] netlink: 'syz.8.6142': attribute type 14 has an invalid length. [ 1456.447793][T29038] openvswitch: netlink: Tunnel attr 92 out of range max 16 [ 1456.729735][T25092] usb 3-1: USB disconnect, device number 65 [ 1456.835306][T29050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6144'. [ 1457.790536][T25092] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1457.940727][ T797] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1457.950846][T25092] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1457.958871][T25092] usb 3-1: config 0 has no interface number 0 [ 1457.965557][T25092] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1457.976885][T25092] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.987447][T25092] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.001579][T25092] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1458.008213][T25092] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1458.017705][T25092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.027934][T25092] usb 3-1: config 0 descriptor?? [ 1458.110601][ T797] usb 9-1: Using ep0 maxpacket: 32 [ 1458.118059][ T797] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1458.127346][ T797] usb 9-1: config 0 has no interface number 0 [ 1458.133565][ T797] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1458.143863][ T797] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1458.153607][ T797] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.161886][ T797] usb 9-1: Product: syz [ 1458.166079][ T797] usb 9-1: Manufacturer: syz [ 1458.171958][ T797] usb 9-1: SerialNumber: syz [ 1458.179242][ T797] usb 9-1: config 0 descriptor?? [ 1458.448073][T25092] uclogic 0003:145F:0212.003F: failed retrieving string descriptor #100: -71 [ 1458.458194][T25092] uclogic 0003:145F:0212.003F: failed retrieving pen parameters: -71 [ 1458.466614][T25092] uclogic 0003:145F:0212.003F: pen probing failed: -71 [ 1458.474165][T25092] uclogic 0003:145F:0212.003F: failed probing parameters: -71 [ 1458.482118][T25092] uclogic 0003:145F:0212.003F: probe with driver uclogic failed with error -71 [ 1458.495428][T25092] usb 3-1: USB disconnect, device number 66 [ 1458.795092][ T797] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1458.806229][ T797] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1458.816774][ T797] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1458.827765][ T797] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1458.837745][ T797] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1458.848744][ T797] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1458.859379][ T797] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 1459.220609][T21525] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1459.360565][T21525] usb 3-1: device descriptor read/64, error -71 [ 1459.620571][T21525] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1459.760493][T21525] usb 3-1: device descriptor read/64, error -71 [ 1459.881842][T21525] usb usb3-port1: attempt power cycle [ 1460.191796][T24141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1460.204361][T24141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1460.220981][T24141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1460.231064][T24141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1460.240504][T21525] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1460.251661][T24141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1460.300988][T21525] usb 3-1: device descriptor read/8, error -71 [ 1460.504327][T29099] chnl_net:caif_netlink_parms(): no params data found [ 1460.560503][T21525] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1460.596377][T29099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.603936][T29099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.611591][T21525] usb 3-1: device descriptor read/8, error -71 [ 1460.618470][T29099] bridge_slave_0: entered allmulticast mode [ 1460.627420][T29099] bridge_slave_0: entered promiscuous mode [ 1460.639818][T29099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.648457][T29099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.657443][T29099] bridge_slave_1: entered allmulticast mode [ 1460.664839][T29099] bridge_slave_1: entered promiscuous mode [ 1460.691270][T29099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.703878][T29099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.725267][ T797] usb 9-1: USB disconnect, device number 84 [ 1460.730746][T21525] usb usb3-port1: unable to enumerate USB device [ 1460.783884][T29099] team0: Port device team_slave_0 added [ 1460.805747][T29099] team0: Port device team_slave_1 added [ 1460.846146][T29099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.853323][T29099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.881006][T29099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1460.893414][T29099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1460.900478][T29099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.927290][T29099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.972093][T29099] hsr_slave_0: entered promiscuous mode [ 1460.978652][T29099] hsr_slave_1: entered promiscuous mode [ 1460.985407][T29099] debugfs: 'hsr0' already exists in 'hsr' [ 1460.991901][T29099] Cannot create hsr debugfs directory [ 1461.134089][T29099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.237386][T29099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.316982][T29099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.410289][T29099] team0: Port device netdevsim0 removed [ 1461.419534][T29099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.550646][T29099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1461.560445][T29099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1461.569952][T29099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1461.584084][T29099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1461.661392][T29099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.687049][T29099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.699299][T25644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.706712][T25644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.734302][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.741844][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.898496][T29099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.258772][T29099] veth0_vlan: entered promiscuous mode [ 1462.282996][T29132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1462.297306][T29129] binder: 29126:29129 ioctl c0306201 0 returned -14 [ 1462.302802][T29099] veth1_vlan: entered promiscuous mode [ 1462.361522][T24141] Bluetooth: hci0: command tx timeout [ 1462.462828][T29099] veth0_macvtap: entered promiscuous mode [ 1462.487094][T29099] veth1_macvtap: entered promiscuous mode [ 1462.566804][T29129] syz.8.6164 (29129): drop_caches: 2 [ 1462.596954][T29099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.639863][T29099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1462.671275][T25644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.683417][T25644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.700886][T25644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.715283][T25644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.812485][T29135] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6166'. [ 1462.903423][T23139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.918467][T23139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.953525][T23139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.964290][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6167'. [ 1462.974050][T23139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.225456][T29150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6171'. [ 1463.380668][T25092] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1463.540673][T25092] usb 3-1: Using ep0 maxpacket: 32 [ 1463.549002][T25092] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.575407][T25092] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1463.680069][T25092] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1463.700534][T25092] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1463.709640][T25092] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 1463.719903][T25092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.770643][T25092] usb 3-1: Product: syz [ 1463.795741][T25092] usb 3-1: Manufacturer: syz [ 1463.811878][T25092] usb 3-1: SerialNumber: syz [ 1463.834756][T25092] usb 3-1: config 0 descriptor?? [ 1464.017778][T29163] syzkaller1: entered promiscuous mode [ 1464.044303][T29163] syzkaller1: entered allmulticast mode [ 1464.214064][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1464.214079][ T30] audit: type=1326 audit(1773877416.826:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1464.252634][ T30] audit: type=1326 audit(1773877416.866:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d8893db19 code=0x7ffc0000 [ 1464.278023][ T30] audit: type=1326 audit(1773877416.866:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d8893db19 code=0x7ffc0000 [ 1464.308280][ T30] audit: type=1326 audit(1773877416.866:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1464.309354][ T5882] usb 3-1: USB disconnect, device number 71 [ 1464.337921][ T30] audit: type=1326 audit(1773877416.866:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1464.393701][ T30] audit: type=1326 audit(1773877416.866:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1464.416996][ T30] audit: type=1326 audit(1773877416.886:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d8893db19 code=0x7ffc0000 [ 1464.460685][T24141] Bluetooth: hci0: command tx timeout [ 1464.468815][ T30] audit: type=1326 audit(1773877416.886:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d8893db19 code=0x7ffc0000 [ 1464.492219][ T30] audit: type=1326 audit(1773877416.886:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d8893db19 code=0x7ffc0000 [ 1464.516789][ T30] audit: type=1326 audit(1773877416.886:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d8893db19 code=0x7ffc0000 [ 1464.654328][T29178] syzkaller0: entered promiscuous mode [ 1464.659843][T29178] syzkaller0: entered allmulticast mode [ 1464.783043][T29184] loop9: detected capacity change from 0 to 7 [ 1464.791185][ T5919] Dev loop9: unable to read RDB block 7 [ 1464.796842][ T5919] loop9: AHDI p2 p3 [ 1464.804377][ T5919] loop9: partition table partially beyond EOD, truncated [ 1464.831341][ T5919] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1464.863448][T29184] Dev loop9: unable to read RDB block 7 [ 1464.863623][T29187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.883663][T29184] loop9: AHDI p2 p3 [ 1464.893702][T29184] loop9: partition table partially beyond EOD, truncated [ 1464.905895][T29187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.916061][T29184] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1465.049678][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1465.080593][ T29] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1465.124384][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1465.221478][ T29] usb 9-1: device descriptor read/64, error -71 [ 1465.490722][ T29] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1465.510465][ T797] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1465.620478][ T29] usb 9-1: device descriptor read/64, error -71 [ 1465.664262][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.676690][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.687219][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1465.700545][ T797] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1465.709596][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.719982][ T797] usb 3-1: config 0 descriptor?? [ 1465.731150][ T29] usb usb9-port1: attempt power cycle [ 1466.082693][ T29] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1466.111633][ T29] usb 9-1: device descriptor read/8, error -71 [ 1466.146236][ T797] hid_parser_main: 8 callbacks suppressed [ 1466.146257][ T797] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1466.160259][ T797] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1466.167987][ T797] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1466.175862][ T797] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1466.184485][ T797] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1466.192190][ T797] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1466.199600][ T797] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1466.207764][ T797] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1466.215364][ T797] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1466.234000][ T797] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1466.350566][ T29] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1466.371276][ T29] usb 9-1: device descriptor read/8, error -71 [ 1466.401962][T28482] usb 3-1: USB disconnect, device number 72 [ 1466.480869][ T29] usb usb9-port1: unable to enumerate USB device [ 1466.519489][T29213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1466.527691][T24141] Bluetooth: hci0: command tx timeout [ 1467.049012][T29219] Cannot find set identified by id 0 to match [ 1468.613147][T24141] Bluetooth: hci0: command tx timeout [ 1469.392955][T29257] netlink: 'syz.6.6206': attribute type 7 has an invalid length. [ 1469.612835][T29257] netlink: 'syz.6.6206': attribute type 8 has an invalid length. [ 1469.644806][T29259] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6207'. [ 1469.966251][T29265] bond2: option downdelay: invalid value (18446744073709551615) [ 1469.976680][T29265] bond2: option downdelay: allowed values 0 - 2147483647 [ 1469.988222][T29265] bond2 (unregistering): Released all slaves [ 1470.609264][T29278] blktrace: Concurrent blktraces are not allowed on nbd6 [ 1470.838363][T29269] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6210'. [ 1471.061124][T29292] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1471.084359][T29294] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1471.190566][T21525] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1471.242521][T29296] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6218'. [ 1471.376635][T21525] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 1471.400580][T21525] usb 3-1: config 0 has no interface number 0 [ 1471.418161][T21525] usb 3-1: config 0 interface 30 has no altsetting 0 [ 1471.454243][T21525] usb 3-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 1471.468871][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.478557][T21525] usb 3-1: Product: syz [ 1471.484124][T21525] usb 3-1: Manufacturer: syz [ 1471.489153][T21525] usb 3-1: SerialNumber: syz [ 1471.503528][T21525] usb 3-1: config 0 descriptor?? [ 1471.517937][T21525] hub 3-1:0.30: bad descriptor, ignoring hub [ 1471.527072][T21525] hub 3-1:0.30: probe with driver hub failed with error -5 [ 1471.535844][T21525] keyspan 3-1:0.30: Keyspan - (without firmware) converter detected [ 1472.710427][ T29] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1472.723236][T29327] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.6228'. [ 1472.761854][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6229'. [ 1472.860501][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 1472.867333][ T29] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1472.875578][ T29] usb 9-1: config 0 has no interface number 0 [ 1472.888059][ T29] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1472.973930][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.982036][ T29] usb 9-1: Product: syz [ 1472.982051][ T29] usb 9-1: Manufacturer: syz [ 1472.982063][ T29] usb 9-1: SerialNumber: syz [ 1472.987796][ T29] usb 9-1: config 0 descriptor?? [ 1473.023219][ T29] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1473.049036][ T29] usb 9-1: selecting invalid altsetting 1 [ 1473.056834][ T29] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1473.078576][ T29] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1473.099916][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1473.108871][ T29] usb 9-1: media controller created [ 1473.166711][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1473.226187][T29318] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1473.233386][T29318] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1473.243464][T29318] vhci_hcd vhci_hcd.0: Device attached [ 1473.254757][T29318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.290877][T29318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.301642][T29319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.312044][T29319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.330609][T29337] vhci_hcd: connection closed [ 1473.330963][T23142] vhci_hcd vhci_hcd.8: stop threads [ 1473.334016][ T29] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1473.336096][T23142] vhci_hcd vhci_hcd.8: release socket [ 1473.341974][ T29] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1473.352749][T23142] vhci_hcd vhci_hcd.8: disconnect device [ 1473.379608][ T29] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1473.457930][ T29] usb 9-1: USB disconnect, device number 89 [ 1473.893867][T29356] tipc: Started in network mode [ 1473.898780][T29356] tipc: Node identity 3a8be503a47b, cluster identity 4711 [ 1473.906476][T29356] tipc: Enabled bearer , priority 0 [ 1473.915098][T29356] syzkaller0: entered promiscuous mode [ 1473.920969][T29356] syzkaller0: entered allmulticast mode [ 1473.958967][T29356] tipc: Resetting bearer [ 1473.972604][T29355] tipc: Resetting bearer [ 1473.978569][T21525] usb 3-1: USB disconnect, device number 73 [ 1473.986152][T21525] keyspan 3-1:0.30: device disconnected [ 1474.024142][T29355] tipc: Disabling bearer [ 1474.280580][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6240'. [ 1475.166839][T29387] netlink: 211792 bytes leftover after parsing attributes in process `syz.0.6246'. [ 1475.455708][T29393] could not allocate digest TFM handle blake2s-128-generic [ 1476.235760][T29411] input: syz0 as /devices/virtual/input/input87 [ 1477.720864][ T29] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1477.880955][ T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.910433][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1477.950600][ T29] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1477.960894][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1477.969091][ T29] usb 9-1: SerialNumber: syz [ 1478.221942][ T29] usb 9-1: 0:2 : does not exist [ 1478.355405][ T29] usb 9-1: USB disconnect, device number 90 [ 1478.408239][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.846822][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6264'. [ 1478.930773][T29454] futex_wake_op: syz.8.6263 tries to shift op by 32; fix this program [ 1479.073042][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1479.073058][ T30] audit: type=1326 audit(1773877431.526:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1479.217688][ T30] audit: type=1326 audit(1773877431.526:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1479.270832][ T30] audit: type=1326 audit(1773877431.536:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1479.403769][ T30] audit: type=1326 audit(1773877431.536:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1479.537403][ T30] audit: type=1326 audit(1773877431.536:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1479.612683][ T30] audit: type=1326 audit(1773877431.536:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1479.676975][ T30] audit: type=1326 audit(1773877431.536:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1480.100640][ T30] audit: type=1326 audit(1773877431.536:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1480.185596][ T30] audit: type=1326 audit(1773877431.536:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1480.279632][ T30] audit: type=1326 audit(1773877431.536:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29447 comm="syz.8.6263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f3b9c799 code=0x7ffc0000 [ 1480.719965][T29480] binder: 29478:29480 ioctl c018620c 0 returned -14 [ 1481.016968][T29497] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1481.062120][T29499] syz.6.6276: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1481.079246][T29499] CPU: 0 UID: 0 PID: 29499 Comm: syz.6.6276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1481.079275][T29499] Tainted: [L]=SOFTLOCKUP [ 1481.079281][T29499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1481.079293][T29499] Call Trace: [ 1481.079300][T29499] [ 1481.079308][T29499] dump_stack_lvl+0xe8/0x150 [ 1481.079339][T29499] warn_alloc+0x249/0x340 [ 1481.079361][T29499] ? stack_trace_save+0xa9/0x100 [ 1481.079382][T29499] ? __pfx_warn_alloc+0x10/0x10 [ 1481.079405][T29499] ? kasan_save_track+0x4f/0x80 [ 1481.079420][T29499] ? kasan_save_track+0x3e/0x80 [ 1481.079435][T29499] ? __kasan_kmalloc+0x93/0xb0 [ 1481.079451][T29499] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1481.079466][T29499] ? xskq_create+0x56/0x170 [ 1481.079581][T29499] ? xsk_setsockopt+0x54c/0x990 [ 1481.079628][T29499] ? do_sock_setsockopt+0x17c/0x1b0 [ 1481.079646][T29499] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1481.079663][T29499] ? do_syscall_64+0x14d/0xf80 [ 1481.079684][T29499] __vmalloc_node_range_noprof+0x132/0x1730 [ 1481.079729][T29499] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1481.079753][T29499] ? __kasan_kmalloc+0x93/0xb0 [ 1481.079777][T29499] vmalloc_user_noprof+0xad/0xe0 [ 1481.079795][T29499] ? xskq_create+0xbf/0x170 [ 1481.079811][T29499] xskq_create+0xbf/0x170 [ 1481.079829][T29499] xsk_init_queue+0x8a/0xe0 [ 1481.079854][T29499] xsk_setsockopt+0x54c/0x990 [ 1481.079879][T29499] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1481.079901][T29499] ? __pfx_aa_sk_perm+0x10/0x10 [ 1481.079926][T29499] ? aa_sock_opt_perm+0xff/0x1a0 [ 1481.079961][T29499] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1481.079980][T29499] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1481.080005][T29499] do_sock_setsockopt+0x17c/0x1b0 [ 1481.080027][T29499] __x64_sys_setsockopt+0x13d/0x1b0 [ 1481.080051][T29499] do_syscall_64+0x14d/0xf80 [ 1481.080069][T29499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.080086][T29499] ? clear_bhb_loop+0x40/0x90 [ 1481.080106][T29499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.080123][T29499] RIP: 0033:0x7f6cfcb9c799 [ 1481.080140][T29499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.080154][T29499] RSP: 002b:00007f6cfda85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1481.080172][T29499] RAX: ffffffffffffffda RBX: 00007f6cfce16090 RCX: 00007f6cfcb9c799 [ 1481.080186][T29499] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1481.080197][T29499] RBP: 00007f6cfcc32c99 R08: 0000000000000004 R09: 0000000000000000 [ 1481.080207][T29499] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.080217][T29499] R13: 00007f6cfce16128 R14: 00007f6cfce16090 R15: 00007f6cfcf3fa48 [ 1481.080245][T29499] [ 1481.080259][T29499] Mem-Info: [ 1481.381868][T29499] active_anon:4221 inactive_anon:10 isolated_anon:0 [ 1481.381868][T29499] active_file:23091 inactive_file:539 isolated_file:0 [ 1481.381868][T29499] unevictable:768 dirty:102 writeback:0 [ 1481.381868][T29499] slab_reclaimable:7228 slab_unreclaimable:108353 [ 1481.381868][T29499] mapped:30423 shmem:789 pagetables:2896 [ 1481.381868][T29499] sec_pagetables:0 bounce:0 [ 1481.381868][T29499] kernel_misc_reclaimable:0 [ 1481.381868][T29499] free:1106300 free_pcp:22732 free_cma:0 [ 1481.458644][T29499] Node 0 active_anon:14376kB inactive_anon:40kB active_file:70728kB inactive_file:2024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:23424kB dirty:160kB writeback:0kB shmem:1620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15072kB pagetables:11400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1481.631127][T29499] Node 1 active_anon:2408kB inactive_anon:0kB active_file:21636kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98268kB dirty:248kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1481.717757][T29508] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6277'. [ 1481.748785][T29499] Node 0 DMA free:10352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1481.807194][T29499] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1481.832050][T29499] Node 0 DMA32 free:743856kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16376kB inactive_anon:40kB active_file:70728kB inactive_file:2024kB unevictable:1536kB writepending:160kB zspages:0kB present:3129332kB managed:2552732kB mlocked:0kB bounce:0kB free_pcp:49204kB local_pcp:24968kB free_cma:0kB [ 1481.923347][T29509] openvswitch: netlink: Message has 8 unknown bytes. [ 1481.952872][T29499] lowmem_reserve[]: 0 0 0 0 0 [ 1481.957815][T29499] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.002073][T29499] lowmem_reserve[]: 0 0 0 0 0 [ 1482.006883][T29499] Node 1 Normal free:3671376kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2408kB inactive_anon:0kB active_file:21636kB inactive_file:132kB unevictable:1536kB writepending:248kB zspages:4892kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39856kB local_pcp:11740kB free_cma:0kB [ 1482.045549][T29499] lowmem_reserve[]: 0 0 0 0 0 [ 1482.050411][T29499] Node 0 DMA: 4*4kB (U) 4*8kB (U) 2*16kB (U) 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 4*2048kB (UM) 0*4096kB = 10352kB [ 1482.071155][T29499] Node 0 DMA32: 5181*4kB (UME) 2106*8kB (UME) 888*16kB (UME) 757*32kB (UME) 266*64kB (UME) 592*128kB (UME) 644*256kB (UME) 442*512kB (UME) 153*1024kB (UM) 4*2048kB (UM) 5*4096kB (U) = 745316kB [ 1482.253345][T29499] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1482.285345][ T5910] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1482.315761][T29499] Node 1 Normal: 1146*4kB (UME) 1001*8kB (UME) 622*16kB (UME) 1182*32kB (UME) 810*64kB (UME) 802*128kB (UME) 646*256kB (UME) 470*512kB (UME) 311*1024kB (UM) 184*2048kB (UME) 575*4096kB (UM) = 3671376kB [ 1482.449937][T29499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.481179][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.493348][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.505373][T29499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1482.526655][ T5910] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1482.546191][T29499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.567270][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.587825][T29499] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1482.618652][ T5910] usb 3-1: config 0 descriptor?? [ 1482.630792][T29499] 25845 total pagecache pages [ 1482.659319][T29499] 1428 pages in swap cache [ 1482.670791][T29499] Free swap = 101064kB [ 1482.675090][T29499] Total swap = 124996kB [ 1482.699886][T29499] 2097051 pages RAM [ 1482.710036][T29499] 0 pages HighMem/MovableOnly [ 1482.735366][T29499] 427033 pages reserved [ 1482.739852][T29499] 0 pages cma reserved [ 1482.862008][T29511] kvm: kvm [29510]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 1482.876107][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 1482.903205][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1482.982299][ T5910] usb 3-1: USB disconnect, device number 74 [ 1483.086950][T29528] binder: 29527:29528 ioctl c0306201 200000000380 returned -14 [ 1483.258820][T29530] syzkaller0: entered promiscuous mode [ 1483.266578][T29530] syzkaller0: entered allmulticast mode [ 1483.296244][T29530] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6286'. [ 1483.309425][T29530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6286'. [ 1483.410454][ T5910] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1483.572082][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.590758][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.626509][ T5910] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1483.651180][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.687633][ T5910] usb 3-1: config 0 descriptor?? [ 1483.829573][T29543] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6289'. [ 1484.039526][T29546] netlink: 'syz.8.6290': attribute type 1 has an invalid length. [ 1484.105549][ T5910] steelseries 0003:1038:12B6.0041: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1484.143115][T29546] bond2: entered promiscuous mode [ 1484.149419][T29546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1484.524908][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.531839][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.612326][ T5910] usb 3-1: USB disconnect, device number 75 [ 1485.218724][T29571] loop5: detected capacity change from 0 to 7 [ 1485.226306][T29571] loop5: [ 1485.230022][T29571] loop5: partition table partially beyond EOD, truncated [ 1485.356246][T29575] FAULT_INJECTION: forcing a failure. [ 1485.356246][T29575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1485.370406][T29575] CPU: 0 UID: 0 PID: 29575 Comm: syz.2.6300 Tainted: G L syzkaller #0 PREEMPT(full) [ 1485.370434][T29575] Tainted: [L]=SOFTLOCKUP [ 1485.370440][T29575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1485.370450][T29575] Call Trace: [ 1485.370458][T29575] [ 1485.370466][T29575] dump_stack_lvl+0xe8/0x150 [ 1485.370494][T29575] should_fail_ex+0x412/0x560 [ 1485.370521][T29575] _copy_from_user+0x2d/0xb0 [ 1485.370547][T29575] ___sys_sendmsg+0x1c6/0x360 [ 1485.370569][T29575] ? __pfx____sys_sendmsg+0x10/0x10 [ 1485.370611][T29575] ? __fget_files+0x2a/0x420 [ 1485.370631][T29575] ? __fget_files+0x3a0/0x420 [ 1485.370659][T29575] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1485.370678][T29575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1485.370702][T29575] ? __pfx_ksys_write+0x10/0x10 [ 1485.370728][T29575] do_syscall_64+0x14d/0xf80 [ 1485.370745][T29575] ? trace_irq_disable+0x3b/0x150 [ 1485.370775][T29575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.370791][T29575] ? clear_bhb_loop+0x40/0x90 [ 1485.370810][T29575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.370825][T29575] RIP: 0033:0x7f88cef9c799 [ 1485.370841][T29575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.370854][T29575] RSP: 002b:00007f88cff28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1485.370871][T29575] RAX: ffffffffffffffda RBX: 00007f88cf215fa0 RCX: 00007f88cef9c799 [ 1485.370883][T29575] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1485.370896][T29575] RBP: 00007f88cff28090 R08: 0000000000000000 R09: 0000000000000000 [ 1485.370905][T29575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.370914][T29575] R13: 00007f88cf216038 R14: 00007f88cf215fa0 R15: 00007f88cf33fa48 [ 1485.370938][T29575] [ 1485.631164][T29579] netlink: 140 bytes leftover after parsing attributes in process `syz.8.6299'. [ 1485.940695][T25092] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1486.070655][T25092] usb 3-1: device descriptor read/64, error -71 [ 1486.310488][T25092] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1486.444387][T25092] usb 3-1: device descriptor read/64, error -71 [ 1486.566301][T25092] usb usb3-port1: attempt power cycle [ 1486.910414][T25092] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1486.941080][T25092] usb 3-1: device descriptor read/8, error -71 [ 1486.990531][ T5882] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1487.154184][ T5882] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1487.168248][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.183634][ T5882] usb 9-1: Product: syz [ 1487.190095][ T5882] usb 9-1: Manufacturer: syz [ 1487.190420][T25092] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1487.205433][ T5882] usb 9-1: SerialNumber: syz [ 1487.219259][ T5882] usb 9-1: config 0 descriptor?? [ 1487.221026][T25092] usb 3-1: device descriptor read/8, error -71 [ 1487.342579][T25092] usb usb3-port1: unable to enumerate USB device [ 1487.440886][T29601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.449830][T29601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.868582][ T5882] usb 9-1: Firmware version (0.0) predates our first public release. [ 1487.881103][ T5882] usb 9-1: Please update to version 0.2 or newer [ 1487.969599][ T5882] usb 9-1: USB disconnect, device number 91 [ 1488.234728][T29608] cgroup: fork rejected by pids controller in /syz7 [ 1488.884715][T29658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6317'. [ 1489.233087][T25092] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1489.380465][T25092] usb 3-1: device descriptor read/64, error -71 [ 1489.710686][T25092] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1489.853080][T29676] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6322'. [ 1489.900616][T25092] usb 3-1: device descriptor read/64, error -71 [ 1490.010862][T25092] usb usb3-port1: attempt power cycle [ 1490.376835][T25092] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1490.447505][T25092] usb 3-1: device descriptor read/8, error -71 [ 1490.710470][T25092] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1490.751253][T25092] usb 3-1: device descriptor read/8, error -71 [ 1490.862754][T25092] usb usb3-port1: unable to enumerate USB device [ 1490.881876][T29691] netlink: get zone limit has 4 unknown bytes [ 1490.895805][T29691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6327'. [ 1492.568232][T29715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1492.690160][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1492.690180][ T30] audit: type=1326 audit(1773877445.136:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1492.926627][ T30] audit: type=1326 audit(1773877445.136:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1492.989314][ T30] audit: type=1326 audit(1773877445.146:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1493.070506][ T30] audit: type=1326 audit(1773877445.146:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1493.196524][ T30] audit: type=1326 audit(1773877445.146:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1493.221871][ T30] audit: type=1326 audit(1773877445.146:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1493.302914][ T30] audit: type=1326 audit(1773877445.146:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1493.356774][ T30] audit: type=1326 audit(1773877445.146:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1493.458985][ T30] audit: type=1326 audit(1773877445.146:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1493.540631][ T30] audit: type=1326 audit(1773877445.236:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29719 comm="syz.7.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1493.660493][T29727] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1493.667069][T29727] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1493.723789][T29727] vhci_hcd vhci_hcd.0: Device attached [ 1493.735540][T29729] vhci_hcd: connection closed [ 1493.737105][T25657] vhci_hcd vhci_hcd.8: stop threads [ 1493.753225][T25657] vhci_hcd vhci_hcd.8: release socket [ 1493.758960][T25657] vhci_hcd vhci_hcd.8: disconnect device [ 1494.580609][ T797] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1494.610422][T21525] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1494.731679][ T797] usb 9-1: Using ep0 maxpacket: 8 [ 1494.738838][ T797] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.749506][ T797] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1494.763399][T21525] usb 3-1: Using ep0 maxpacket: 32 [ 1494.770809][ T797] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1494.771109][T21525] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 1494.788786][ T797] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1494.825595][T21525] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.830394][ T797] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.846077][T21525] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1494.858959][ T797] usb 9-1: Product: syz [ 1494.860631][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.875938][ T797] usb 9-1: Manufacturer: syz [ 1494.880420][T21525] usb 3-1: Product: syz [ 1494.883238][ T797] usb 9-1: SerialNumber: syz [ 1494.890447][T21525] usb 3-1: Manufacturer: syz [ 1494.900626][T21525] usb 3-1: SerialNumber: syz [ 1494.912817][ T797] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1494.925527][T21525] usb 3-1: config 0 descriptor?? [ 1494.943712][T21525] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1494.944006][ T797] usbtest 9-1:1.0: couldn't get endpoints, -22 [ 1494.968613][ T797] usbtest 9-1:1.0: probe with driver usbtest failed with error -22 [ 1495.038315][T29752] loop9: detected capacity change from 0 to 7 [ 1495.046981][ T5919] Dev loop9: unable to read RDB block 7 [ 1495.054196][ T5919] loop9: AHDI p2 p3 [ 1495.058353][ T5919] loop9: partition table partially beyond EOD, truncated [ 1495.068105][ T5919] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1495.095486][T29752] Dev loop9: unable to read RDB block 7 [ 1495.101921][T29752] loop9: AHDI p2 p3 [ 1495.105918][T29752] loop9: partition table partially beyond EOD, truncated [ 1495.124043][T29752] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1495.135259][T29742] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6341'. [ 1495.151688][T29742] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6341'. [ 1495.180611][T28482] usb 9-1: USB disconnect, device number 92 [ 1495.227308][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1495.259736][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1496.101197][ T797] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1496.286478][ T797] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.310612][ T797] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.331853][ T797] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1496.370487][ T797] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1496.379653][ T797] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.424117][ T797] usb 9-1: config 0 descriptor?? [ 1496.457286][T28482] IPVS: starting estimator thread 0... [ 1496.590669][T29772] IPVS: using max 35 ests per chain, 84000 per kthread [ 1496.877241][ T797] usbhid 9-1:0.0: can't add hid device: -71 [ 1496.893687][ T797] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1496.941251][ T797] usb 9-1: USB disconnect, device number 93 [ 1497.260610][T21525] gspca_sunplus: reg_r err -71 [ 1497.266599][T21525] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1497.277877][T21525] usb 3-1: USB disconnect, device number 84 [ 1497.577768][T29785] loop9: detected capacity change from 0 to 7 [ 1497.633943][T29785] Dev loop9: unable to read RDB block 7 [ 1497.640954][T29785] loop9: AHDI p2 p3 [ 1497.649433][T29785] loop9: partition table partially beyond EOD, truncated [ 1497.699179][T29785] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1497.865913][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1498.212000][T29799] vivid-000: disconnect [ 1498.228653][T29798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1498.530705][ T5882] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 1498.710476][ T5882] usb 3-1: Invalid ep0 maxpacket: 64 [ 1498.825139][T29792] vivid-000: reconnect [ 1498.887609][ T5882] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 1499.070983][ T5882] usb 3-1: Invalid ep0 maxpacket: 64 [ 1499.104758][ T5882] usb usb3-port1: attempt power cycle [ 1499.460984][ T5882] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1499.513001][ T5882] usb 3-1: Invalid ep0 maxpacket: 64 [ 1499.620211][T29835] netlink: 'syz.8.6367': attribute type 10 has an invalid length. [ 1499.640525][ T5882] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 1499.661482][ T5882] usb 3-1: Invalid ep0 maxpacket: 64 [ 1499.673450][ T5882] usb usb3-port1: unable to enumerate USB device [ 1499.841199][T29845] tipc: Enabled bearer , priority 10 [ 1500.549241][T29848] syzkaller0: entered promiscuous mode [ 1500.560471][T29848] syzkaller0: entered allmulticast mode [ 1500.582610][T29855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1500.897497][T28482] tipc: Node number set to 2666587395 [ 1501.660437][ T5882] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1501.721802][T29870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6378'. [ 1501.842564][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 1501.854733][ T5882] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1501.871123][ T5882] usb 3-1: config 0 has no interface number 0 [ 1501.889881][ T5882] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1501.917318][ T5882] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1501.957339][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.982931][T28482] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1501.992978][ T5882] usb 3-1: Product: syz [ 1501.997170][ T5882] usb 3-1: Manufacturer: syz [ 1502.024290][ T5882] usb 3-1: SerialNumber: syz [ 1502.044543][ T5882] usb 3-1: config 0 descriptor?? [ 1502.170604][T28482] usb 9-1: Using ep0 maxpacket: 8 [ 1502.185498][T28482] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1502.197242][T28482] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.206489][T28482] usb 9-1: Product: syz [ 1502.211149][T28482] usb 9-1: Manufacturer: syz [ 1502.215799][T28482] usb 9-1: SerialNumber: syz [ 1502.224403][T28482] usb 9-1: config 0 descriptor?? [ 1502.443888][T28482] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1502.668284][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1502.679887][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1503.411468][T29885] syzkaller0: entered promiscuous mode [ 1503.416964][T29885] syzkaller0: entered allmulticast mode [ 1503.927515][T28482] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1503.941153][T28482] usb 9-1: USB disconnect, device number 94 [ 1504.627176][T29898] netlink: 'syz.6.6387': attribute type 10 has an invalid length. [ 1505.149176][T29905] fuse: Unknown parameter 'user_id}00000000000000000000' [ 1505.274678][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 1505.307550][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 1505.319948][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1505.329924][ T5882] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1505.343404][ T5882] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1505.357841][ T5882] usb 3-1: USB disconnect, device number 89 [ 1506.258473][T29918] syzkaller0: entered promiscuous mode [ 1506.264365][T29918] syzkaller0: entered allmulticast mode [ 1508.195688][T29944] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6401'. [ 1509.515980][T29966] syzkaller0: entered promiscuous mode [ 1509.552213][T29966] syzkaller0: entered allmulticast mode [ 1509.656456][T29965] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6408'. [ 1509.666507][T29965] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1509.878441][T29969] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1510.370786][T29974] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6411'. [ 1510.382434][T29974] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6411'. [ 1510.730430][ T5910] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1510.904938][ T5910] usb 9-1: Using ep0 maxpacket: 8 [ 1510.924043][ T5910] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1510.988912][ T5910] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1511.015303][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.023763][ T5910] usb 9-1: Product: syz [ 1511.071162][ T5910] usb 9-1: Manufacturer: syz [ 1511.092531][ T5910] usb 9-1: SerialNumber: syz [ 1511.109339][ T5910] usb 9-1: config 0 descriptor?? [ 1511.537415][ T5910] msi2500 9-1:0.0: Registered as swradio24 [ 1511.544096][ T5910] msi2500 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1511.720720][T21527] usb 9-1: USB disconnect, device number 95 [ 1513.373186][T30009] netlink: 388 bytes leftover after parsing attributes in process `syz.8.6419'. [ 1514.789054][T30024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6422'. [ 1514.993879][T30028] Cannot find del_set index 4 as target [ 1515.287150][T30028] netlink: 'syz.2.6423': attribute type 2 has an invalid length. [ 1516.060265][T30032] x_tables: duplicate underflow at hook 2 [ 1516.392859][T30044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6429'. [ 1518.397103][T30066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6433'. [ 1518.776461][T30078] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6437'. [ 1518.803149][T30078] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6437'. [ 1518.817017][T30078] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6437'. [ 1518.863555][T30078] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6437'. [ 1519.160809][ T29] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1519.322139][ T29] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1519.333339][ T29] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1519.350046][ T29] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.364245][ T29] usb 9-1: config 220 has no interface number 2 [ 1519.375707][ T29] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1519.389275][ T29] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1519.412208][ T29] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1519.420438][ T29] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1519.433055][ T29] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1519.451277][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.466225][ T29] usb 9-1: Product: syz [ 1519.491526][ T29] usb 9-1: Manufacturer: syz [ 1519.498494][ T29] usb 9-1: SerialNumber: syz [ 1519.725056][ T29] usb 9-1: selecting invalid altsetting 0 [ 1519.739871][ T29] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1519.748907][ T29] uvcvideo 9-1:220.0: No valid video chain found. [ 1519.774894][ T29] usb 9-1: selecting invalid altsetting 0 [ 1519.789141][ T29] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1519.818950][ T29] usb 9-1: USB disconnect, device number 96 [ 1520.416453][T30104] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6445'. [ 1520.711381][ T5882] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1520.870412][ T5882] usb 9-1: Using ep0 maxpacket: 32 [ 1520.878671][ T5882] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1520.964013][ T5882] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1520.993004][ T5882] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1521.009164][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.024654][ T5882] usb 9-1: Product: 뫮퀮䢝拢燠ϙᔅȾヴ珓먬迧஦텴ꔻق魣淊犩륌裡篜⟲猪빿■ၟ꺗ꐁﻲ寺叐억뒨ꞝ顼鑻㾦켝ڈ簘됩㐉ꇼ [ 1521.050788][ T5882] usb 9-1: Manufacturer: ㍽ꈧ围뙴⣈፵ὡ鰰䊅筬죆Ḵ춋樼韻﯑눴蠏ࣕ▂쿡ํ컛텝ꮞ꣪깣ᶖ㍝蛾ꆥ债蓤暭鿔顉簤歔▲瞏祽Ꭹ⦘挆춺燏蕶矱晟碸閆愤阾懵쓞㢁牾ಁ櫅裂ߛ篨･ [ 1521.073309][ T5882] usb 9-1: SerialNumber: 倊 [ 1521.163058][T30106] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1521.178055][T30106] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1521.596242][T30106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.607114][T30106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.618815][T30106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.635355][T30106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.677695][ T5882] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1521.721608][ T5882] usb 9-1: USB disconnect, device number 97 [ 1522.040566][T25092] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1522.064231][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 1522.064249][ T30] audit: type=1326 audit(1773877474.676:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1522.112194][ T30] audit: type=1326 audit(1773877474.676:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1522.136546][ T30] audit: type=1326 audit(1773877474.686:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1522.161032][ T30] audit: type=1326 audit(1773877474.686:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1522.202818][T25092] usb 3-1: Using ep0 maxpacket: 32 [ 1522.202962][ T30] audit: type=1326 audit(1773877474.686:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d8899c42b code=0x7ffc0000 [ 1522.232788][ T30] audit: type=1326 audit(1773877474.686:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1522.257139][ T30] audit: type=1326 audit(1773877474.686:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1522.261680][T25092] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1522.281576][ T30] audit: type=1326 audit(1773877474.686:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1522.321494][ T30] audit: type=1326 audit(1773877474.686:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1522.347806][T25092] usb 3-1: config 0 has no interface number 0 [ 1522.365892][T25092] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1522.378592][ T30] audit: type=1326 audit(1773877474.686:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30118 comm="syz.7.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d8899c799 code=0x7ffc0000 [ 1522.427754][T25092] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1522.440413][T25092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.458869][T25092] usb 3-1: Product: syz [ 1522.463586][T25092] usb 3-1: Manufacturer: syz [ 1522.468562][T25092] usb 3-1: SerialNumber: syz [ 1522.504979][T25092] usb 3-1: config 0 descriptor?? [ 1522.529948][T30115] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1522.559976][T30138] loop4: detected capacity change from 0 to 1 [ 1522.592893][ T5965] Dev loop4: unable to read RDB block 1 [ 1522.598551][ T5965] loop4: unable to read partition table [ 1522.598913][T30140] loop9: detected capacity change from 0 to 7 [ 1522.605269][ T5965] loop4: partition table beyond EOD, truncated [ 1522.620509][T30140] Dev loop9: unable to read RDB block 7 [ 1522.628713][T30138] Dev loop4: unable to read RDB block 1 [ 1522.630207][T30140] loop9: AHDI p2 p3 [ 1522.635230][T30138] loop4: unable to read partition table [ 1522.639846][T30140] loop9: partition table partially beyond EOD, truncated [ 1522.649610][T30138] loop4: partition table beyond EOD, truncated [ 1522.653533][T30140] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1522.658989][T30138] loop_reread_partitions: partition scan of loop4 (ݷU@:B${Wɴ) failed (rc=-5) [ 1522.698465][T30138] [U] V3Fپ"S/4:XTZWTLW= [ 1522.719659][ T5965] udevd[5965]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1522.790919][T30114] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1522.817223][T30145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.827630][T30145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.043193][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6461'. [ 1523.173554][T25092] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1523.197312][T25092] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1523.228300][T25092] usb 3-1: USB disconnect, device number 90 [ 1523.498244][T30135] [U] J"E:" [ 1524.170630][T30186] Cannot find set identified by id 0 to match [ 1524.257466][T30187] Cannot find set identified by id 0 to match [ 1525.006766][T30189] loop9: detected capacity change from 0 to 7 [ 1525.067925][T30189] Dev loop9: unable to read RDB block 7 [ 1525.073987][T30189] loop9: AHDI p2 p3 [ 1525.081428][T30189] loop9: partition table partially beyond EOD, truncated [ 1525.112327][T30189] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1525.235036][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1525.740451][T21525] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1525.773055][T30208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1525.850424][ T5882] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1525.891435][T21525] usb 9-1: Using ep0 maxpacket: 16 [ 1525.900873][T21525] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1525.911381][T21525] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.933413][T21525] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1525.944696][T21525] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.956213][T21525] usb 9-1: Product: syz [ 1525.960984][T21525] usb 9-1: Manufacturer: syz [ 1525.966979][T21525] usb 9-1: SerialNumber: syz [ 1526.000447][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 1526.013174][ T5882] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1526.026564][ T5882] usb 3-1: config 0 has no interface number 0 [ 1526.042916][ T5882] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1526.056847][ T5882] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1526.071204][ T5882] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1526.086699][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.099444][ T5882] usb 3-1: Product: syz [ 1526.107253][ T5882] usb 3-1: Manufacturer: syz [ 1526.116601][ T5882] usb 3-1: SerialNumber: syz [ 1526.130689][ T5882] usb 3-1: config 0 descriptor?? [ 1526.148222][ T5882] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1526.165418][ T5882] em28xx 3-1:0.89: Video interface 89 found: [ 1526.184349][ T797] usb 9-1: USB disconnect, device number 98 [ 1526.568006][T30211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6477'. [ 1526.613389][T30213] netlink: 'syz.7.6478': attribute type 4 has an invalid length. [ 1526.621420][T30213] netlink: 17 bytes leftover after parsing attributes in process `syz.7.6478'. [ 1526.774190][ T5882] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1527.249451][ T5882] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1527.261111][ T5882] em28xx 3-1:0.89: board has no eeprom [ 1527.401398][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 1527.401416][ T30] audit: type=1800 audit(1773877480.006:4738): pid=30230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6484" name="file1" dev="tmpfs" ino=530 res=0 errno=0 [ 1527.550392][ T5882] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1527.557897][ T5882] em28xx 3-1:0.89: analog set to bulk mode. [ 1527.564858][T21525] em28xx 3-1:0.89: Registering V4L2 extension [ 1527.678941][T21525] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1527.679221][ T29] usb 3-1: USB disconnect, device number 91 [ 1527.700888][ T29] em28xx 3-1:0.89: Disconnecting em28xx [ 1527.707234][T21525] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1527.716734][T21525] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1527.726270][T21525] em28xx 3-1:0.89: No AC97 audio processor [ 1527.774403][T21525] usb 3-1: Decoder not found [ 1527.787358][T21525] em28xx 3-1:0.89: failed to create media graph [ 1527.801894][T21525] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1527.832117][T21525] em28xx 3-1:0.89: Registering snapshot button... [ 1527.832203][T30234] ================================================================== [ 1527.846624][T30234] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1527.854117][T30234] Read of size 8 at addr ffff88803eb28748 by task v4l_id/30234 [ 1527.861659][T30234] [ 1527.864061][T30234] CPU: 1 UID: 0 PID: 30234 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1527.864098][T30234] Tainted: [L]=SOFTLOCKUP [ 1527.864104][T30234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1527.864115][T30234] Call Trace: [ 1527.864124][T30234] [ 1527.864133][T30234] dump_stack_lvl+0xe8/0x150 [ 1527.864160][T30234] print_report+0xba/0x230 [ 1527.864191][T30234] ? v4l2_fh_open+0xac/0x420 [ 1527.864210][T30234] kasan_report+0x117/0x150 [ 1527.864231][T30234] ? v4l2_fh_open+0xac/0x420 [ 1527.864252][T30234] v4l2_fh_open+0xac/0x420 [ 1527.864285][T30234] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1527.864308][T30234] em28xx_v4l2_open+0x157/0x9a0 [ 1527.864387][T30234] ? do_raw_spin_lock+0x12b/0x2f0 [ 1527.864407][T30234] v4l2_open+0x1bf/0x3a0 [ 1527.864457][T30234] chrdev_open+0x4cd/0x5e0 [ 1527.864484][T30234] ? __pfx_chrdev_open+0x10/0x10 [ 1527.864501][T30234] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1527.864521][T30234] ? __pfx_chrdev_open+0x10/0x10 [ 1527.864538][T30234] do_dentry_open+0x785/0x14e0 [ 1527.864563][T30234] vfs_open+0x3b/0x340 [ 1527.864581][T30234] ? path_openat+0x2df0/0x3860 [ 1527.864598][T30234] path_openat+0x2e08/0x3860 [ 1527.864619][T30234] ? __pfx_stack_trace_save+0x10/0x10 [ 1527.864637][T30234] ? stack_depot_save_flags+0x33/0x810 [ 1527.864663][T30234] ? __pfx_path_openat+0x10/0x10 [ 1527.864678][T30234] ? __x64_sys_openat+0x138/0x170 [ 1527.864697][T30234] ? do_syscall_64+0x14d/0xf80 [ 1527.864712][T30234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.864732][T30234] ? __lock_acquire+0x6b5/0x2cf0 [ 1527.864753][T30234] do_file_open+0x23e/0x4a0 [ 1527.864771][T30234] ? __pfx_do_file_open+0x10/0x10 [ 1527.864794][T30234] ? _raw_spin_unlock+0x28/0x50 [ 1527.864814][T30234] ? alloc_fd+0x64b/0x6c0 [ 1527.864837][T30234] do_sys_openat2+0x113/0x200 [ 1527.864858][T30234] ? __pfx_do_sys_openat2+0x10/0x10 [ 1527.864879][T30234] ? exc_page_fault+0x6a/0xc0 [ 1527.864895][T30234] ? do_user_addr_fault+0xc6f/0x1340 [ 1527.864918][T30234] __x64_sys_openat+0x138/0x170 [ 1527.864939][T30234] do_syscall_64+0x14d/0xf80 [ 1527.864955][T30234] ? trace_irq_disable+0x3b/0x150 [ 1527.864977][T30234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.864992][T30234] ? clear_bhb_loop+0x40/0x90 [ 1527.865010][T30234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.865025][T30234] RIP: 0033:0x7fb8ab2a7407 [ 1527.865041][T30234] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1527.865055][T30234] RSP: 002b:00007ffe14c3a4b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1527.865073][T30234] RAX: ffffffffffffffda RBX: 00007fb8aba87880 RCX: 00007fb8ab2a7407 [ 1527.865085][T30234] RDX: 0000000000000000 RSI: 00007ffe14c3af1b RDI: ffffffffffffff9c [ 1527.865096][T30234] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1527.865106][T30234] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1527.865115][T30234] R13: 00007ffe14c3a700 R14: 00007fb8abbee000 R15: 000055ccc0c694d8 [ 1527.865133][T30234] [ 1527.865139][T30234] [ 1528.168133][T30234] Allocated by task 21525: [ 1528.172540][T30234] kasan_save_track+0x3e/0x80 [ 1528.177229][T30234] __kasan_kmalloc+0x93/0xb0 [ 1528.181808][T30234] __kmalloc_cache_noprof+0x31c/0x660 [ 1528.187173][T30234] em28xx_v4l2_init+0x10b/0x2e70 [ 1528.192266][T30234] em28xx_init_extension+0x120/0x1c0 [ 1528.197577][T30234] process_scheduled_works+0xb6e/0x18c0 [ 1528.203207][T30234] worker_thread+0xa53/0xfc0 [ 1528.207903][T30234] kthread+0x388/0x470 [ 1528.211989][T30234] ret_from_fork+0x51e/0xb90 [ 1528.216588][T30234] ret_from_fork_asm+0x1a/0x30 [ 1528.221376][T30234] [ 1528.223681][T30234] Freed by task 21525: [ 1528.227730][T30234] kasan_save_track+0x3e/0x80 [ 1528.232568][T30234] kasan_save_free_info+0x46/0x50 [ 1528.237579][T30234] __kasan_slab_free+0x5c/0x80 [ 1528.242320][T30234] kfree+0x1c1/0x630 [ 1528.246204][T30234] em28xx_v4l2_init+0x1683/0x2e70 [ 1528.251215][T30234] em28xx_init_extension+0x120/0x1c0 [ 1528.256567][T30234] process_scheduled_works+0xb6e/0x18c0 [ 1528.262195][T30234] worker_thread+0xa53/0xfc0 [ 1528.266766][T30234] kthread+0x388/0x470 [ 1528.270812][T30234] ret_from_fork+0x51e/0xb90 [ 1528.275565][T30234] ret_from_fork_asm+0x1a/0x30 [ 1528.280330][T30234] [ 1528.282647][T30234] The buggy address belongs to the object at ffff88803eb28000 [ 1528.282647][T30234] which belongs to the cache kmalloc-8k of size 8192 [ 1528.296863][T30234] The buggy address is located 1864 bytes inside of [ 1528.296863][T30234] freed 8192-byte region [ffff88803eb28000, ffff88803eb2a000) [ 1528.310825][T30234] [ 1528.313136][T30234] The buggy address belongs to the physical page: [ 1528.319649][T30234] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3eb28 [ 1528.328421][T30234] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1528.336913][T30234] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1528.344625][T30234] page_type: f5(slab) [ 1528.348694][T30234] raw: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000 [ 1528.357383][T30234] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1528.366252][T30234] head: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000 [ 1528.374912][T30234] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1528.383571][T30234] head: 00fff00000000003 ffffea0000faca01 00000000ffffffff 00000000ffffffff [ 1528.392307][T30234] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1528.400973][T30234] page dumped because: kasan: bad access detected [ 1528.407384][T30234] page_owner tracks the page as allocated [ 1528.413096][T30234] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 30215, tgid 30214 (syz.8.6479), ts 1526802782818, free_ts 1526606991341 [ 1528.436270][T30234] post_alloc_hook+0x231/0x280 [ 1528.441049][T30234] get_page_from_freelist+0x24dc/0x2580 [ 1528.446755][T30234] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1528.452542][T30234] allocate_slab+0x77/0x660 [ 1528.457739][T30234] refill_objects+0x331/0x3c0 [ 1528.462403][T30234] __pcs_replace_empty_main+0x2e6/0x730 [ 1528.467953][T30234] __kmalloc_noprof+0x474/0x760 [ 1528.472804][T30234] snd_seq_oss_readq_new+0x86/0x230 [ 1528.478082][T30234] snd_seq_oss_open+0x81e/0xfc0 [ 1528.482974][T30234] odev_open+0x67/0xd0 [ 1528.487043][T30234] chrdev_open+0x4cd/0x5e0 [ 1528.491453][T30234] do_dentry_open+0x785/0x14e0 [ 1528.496294][T30234] vfs_open+0x3b/0x340 [ 1528.500608][T30234] path_openat+0x2e08/0x3860 [ 1528.505175][T30234] do_file_open+0x23e/0x4a0 [ 1528.509680][T30234] do_sys_openat2+0x113/0x200 [ 1528.514336][T30234] page last free pid 30212 tgid 30212 stack trace: [ 1528.521119][T30234] __free_frozen_pages+0xc2b/0xdb0 [ 1528.526238][T30234] __slab_free+0x263/0x2b0 [ 1528.530835][T30234] qlist_free_all+0x97/0x100 [ 1528.535446][T30234] kasan_quarantine_reduce+0x148/0x160 [ 1528.540918][T30234] __kasan_slab_alloc+0x22/0x80 [ 1528.545770][T30234] __kmalloc_noprof+0x316/0x760 [ 1528.550635][T30234] tomoyo_encode+0x28b/0x550 [ 1528.555343][T30234] tomoyo_path_perm+0x318/0x560 [ 1528.560206][T30234] tomoyo_path_symlink+0xab/0xf0 [ 1528.565151][T30234] security_path_symlink+0x16f/0x360 [ 1528.570684][T30234] filename_symlinkat+0x134/0x410 [ 1528.575864][T30234] __se_sys_symlinkat+0x4e/0x2b0 [ 1528.580784][T30234] do_syscall_64+0x14d/0xf80 [ 1528.585437][T30234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.591310][T30234] [ 1528.593716][T30234] Memory state around the buggy address: [ 1528.599346][T30234] ffff88803eb28600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.607861][T30234] ffff88803eb28680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.616075][T30234] >ffff88803eb28700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.624588][T30234] ^ [ 1528.631168][T30234] ffff88803eb28780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.639362][T30234] ffff88803eb28800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1528.647692][T30234] ================================================================== [ 1528.656753][T21525] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input90 [ 1528.679273][T30234] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1528.686778][T30234] CPU: 1 UID: 0 PID: 30234 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1528.697465][T30234] Tainted: [L]=SOFTLOCKUP [ 1528.701789][T30234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1528.711846][T30234] Call Trace: [ 1528.715128][T30234] [ 1528.718131][T30234] vpanic+0x56c/0xa60 [ 1528.722292][T30234] ? __pfx_vpanic+0x10/0x10 [ 1528.726810][T30234] panic+0xc5/0xd0 [ 1528.730617][T30234] ? __pfx_panic+0x10/0x10 [ 1528.735053][T30234] ? preempt_schedule_thunk+0x16/0x30 [ 1528.740466][T30234] ? preempt_schedule_thunk+0x16/0x30 [ 1528.745935][T30234] ? v4l2_fh_open+0xac/0x420 [ 1528.750530][T30234] check_panic_on_warn+0x89/0xb0 [ 1528.755732][T30234] ? v4l2_fh_open+0xac/0x420 [ 1528.760315][T30234] end_report+0x73/0x180 [ 1528.764599][T30234] ? v4l2_fh_open+0xac/0x420 [ 1528.769436][T30234] kasan_report+0x128/0x150 [ 1528.773951][T30234] ? v4l2_fh_open+0xac/0x420 [ 1528.778532][T30234] v4l2_fh_open+0xac/0x420 [ 1528.782932][T30234] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1528.788921][T30234] em28xx_v4l2_open+0x157/0x9a0 [ 1528.793930][T30234] ? do_raw_spin_lock+0x12b/0x2f0 [ 1528.799123][T30234] v4l2_open+0x1bf/0x3a0 [ 1528.803355][T30234] chrdev_open+0x4cd/0x5e0 [ 1528.807959][T30234] ? __pfx_chrdev_open+0x10/0x10 [ 1528.812880][T30234] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1528.819453][T30234] ? __pfx_chrdev_open+0x10/0x10 [ 1528.824558][T30234] do_dentry_open+0x785/0x14e0 [ 1528.829320][T30234] vfs_open+0x3b/0x340 [ 1528.833377][T30234] ? path_openat+0x2df0/0x3860 [ 1528.838127][T30234] path_openat+0x2e08/0x3860 [ 1528.842795][T30234] ? __pfx_stack_trace_save+0x10/0x10 [ 1528.848182][T30234] ? stack_depot_save_flags+0x33/0x810 [ 1528.853632][T30234] ? __pfx_path_openat+0x10/0x10 [ 1528.858733][T30234] ? __x64_sys_openat+0x138/0x170 [ 1528.863746][T30234] ? do_syscall_64+0x14d/0xf80 [ 1528.868495][T30234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.874549][T30234] ? __lock_acquire+0x6b5/0x2cf0 [ 1528.879561][T30234] do_file_open+0x23e/0x4a0 [ 1528.884095][T30234] ? __pfx_do_file_open+0x10/0x10 [ 1528.889154][T30234] ? _raw_spin_unlock+0x28/0x50 [ 1528.893998][T30234] ? alloc_fd+0x64b/0x6c0 [ 1528.898516][T30234] do_sys_openat2+0x113/0x200 [ 1528.903203][T30234] ? __pfx_do_sys_openat2+0x10/0x10 [ 1528.908400][T30234] ? exc_page_fault+0x6a/0xc0 [ 1528.913065][T30234] ? do_user_addr_fault+0xc6f/0x1340 [ 1528.918346][T30234] __x64_sys_openat+0x138/0x170 [ 1528.923309][T30234] do_syscall_64+0x14d/0xf80 [ 1528.927890][T30234] ? trace_irq_disable+0x3b/0x150 [ 1528.932917][T30234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.939056][T30234] ? clear_bhb_loop+0x40/0x90 [ 1528.943724][T30234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.949621][T30234] RIP: 0033:0x7fb8ab2a7407 [ 1528.954022][T30234] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1528.973619][T30234] RSP: 002b:00007ffe14c3a4b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1528.982031][T30234] RAX: ffffffffffffffda RBX: 00007fb8aba87880 RCX: 00007fb8ab2a7407 [ 1528.990275][T30234] RDX: 0000000000000000 RSI: 00007ffe14c3af1b RDI: ffffffffffffff9c [ 1528.998583][T30234] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1529.006537][T30234] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1529.014670][T30234] R13: 00007ffe14c3a700 R14: 00007fb8abbee000 R15: 000055ccc0c694d8 [ 1529.022645][T30234] [ 1529.025948][T30234] Kernel Offset: disabled [ 1529.030258][T30234] Rebooting in 86400 seconds..