last executing test programs: 49m16.783007519s ago: executing program 32 (id=24): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x7caa, 0x2001) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x7, 0xf252, 0x7, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba54, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x10000, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x20, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x100003, 0x1, 0x297, 0x5, 0x0, 0x1981, 0x4, 0x100, 0x83ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0x2, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf22, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x102005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0xfff, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x1, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 48m31.547651456s ago: executing program 33 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf", @ANYRES32=r3, @ANYBLOB="24002380050011000000000006000a00030000000a001a000200000006000300fe000000040018"], 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40) 47m25.040864049s ago: executing program 34 (id=190): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) 40m4.58552051s ago: executing program 35 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 36m38.342021665s ago: executing program 36 (id=2208): r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x80000) splice(r4, 0x0, r2, 0x0, 0x9, 0x1200000000000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0000000906010100000000000000000500000105000100070000000900020073797a3000000000080009404000000030000880100007800c00194000000000000000060c000780050003000c000000100007800900130073797a30000000007c000880100007800cea184000000000000000000c000780060005404e2100000c00078006001d4000090000100007800900120073797a3000000000100007800900130073797a31000000000c00078005001500030000000c00078006001d4000080011ef9bec2714000c0007800800064000", @ANYRES16=r5, @ANYRES16=r5, @ANYRES64=r5, @ANYRES32=r5], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x80c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27}, 0x6e) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000380)=0x2c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r9, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) accept4$ax25(r9, &(0x7f0000000300)={{0x3, @null}, [@remote, @null, @bcast, @null, @rose, @remote, @default, @netrom]}, &(0x7f0000000080)=0x48, 0x80000) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r10, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) bind$inet6(r9, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100000}, 0x1c) 33m18.105380946s ago: executing program 37 (id=3101): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x22, 0x0, 0x0) 32m59.004017493s ago: executing program 38 (id=3118): syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 32m0.813965752s ago: executing program 39 (id=3302): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000040)={[{@nobh}, {@auto_da_alloc}, {@errors_remount}, {@acl}]}, 0x1, 0x4cc, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232emWfmeZ6ZeWaffZ7OBtCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5YrudeWS4FFH6MmnaYd301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUId1r3S3q8feroZwsvg43djQwrBsA/llXcna//Xq4bObXSBgw6Rpmva3Xz2bNru5aAmwZSWx2SUANkfxQZ99/y1eG9T1eCzcO13/ApTV+2H+qq8pRylPU2n6fruWhiLi49l/v8le0Wkc4s91KgAA0HN+OV30BJv7f6XY25Du//kcymBEPB0RuyPimYjYExHPRtTSPhcRzzdnkESkHfLf0xSfz//HfBahdHfVlewg6/+9lc9tLez/Fb2/GOzLY7siig7z1NH8mAxHpf+T89WpY232v22J/Bv7f9kry7/oC+bluFtuGqCbHJ8ZX1ltF7t3M2J/ubn+STk7ccU0ThIR+yJifxf7HWwIn3/tuwNzkUr+/nX9ben616QtpvS6no9rJf024tX6+Z+NBed/Psek8/zk6EBUp46OZlfB0ZZ5/Pb7rQ/a5b9k/X/6q3mTd07+fGa11Z6Tnf8dDdd/FPO38/UfTCKSufna6Yi0r7s8bv3RfoOVXv/bko9q4aJ9fT4+M3PlWMS25L3Fy8fmty3iRfqs/sNHWrf/3fk22ZF4ISKyi/jFiHgpIg7mZT8UEYcj4kiH+v/69sufrrz+6yur/2TL+9+C8z8/X7/MQLFxtqTvwqE7j9rcPJZ3/k/UQsP5ktb3v2TBLWK5JV3d0QMAAICtoRS1//0vjcyFS6WRkfoY0J7YUapenp45GBGXJuvPCAxGpVSMdNXHgytJMf452BAfa4ofz8eNv+rbXouPTFyuTm525aHH7ay1+WRR+8/83eU4L7AFrcE8GrBFLdX+997eoIIAG87nP/SuhvY/2ybJrP+UgSeTz3/oXa3a/434vuOzC+4ZsPWl2jL0NO0felc5PpwL1x57bvm0LfAk8vkPPanb5/q7C6T9rVcNRItfDBhYn2Jsb5HXpgSyntUa7rASEctLvH0lWRRdwPa/8FDqbof9sXhVX3TaKunidxyKQHZUlkx8bu+aX/zFb6Ks9WXzw3w7rTSci/JSZ2f1gQ2/FQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKyL/wIAAP//VkzSeQ==") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21m57.095635716s ago: executing program 40 (id=5281): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x8001, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 14m20.166918028s ago: executing program 1 (id=6818): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000040)={0x0, 0x7, 0x1, 0xfffffffd, 0x5, 0x9, "3000000502000000000000000400", 0x0, 0x0, 0x4a, 0x8, 0x0, 0x4, 0xe}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x48001) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x8, 0x800007, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x5}, {0x9}}}}, 0xd) socket$netlink(0x10, 0x3, 0x14) 14m17.750704964s ago: executing program 1 (id=6823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f0008000000000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f0000001e40)=[{}], 0x1, 0x0) 14m17.34282528s ago: executing program 1 (id=6826): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8774da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdf06375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d68f1c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361b851de34ccb3c8071b96f1128d7ee79b41246e5628e70272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0ff22321e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6beffffffff5e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf21dad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d1150129176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040fa0200000000000000002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x10000, {0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x400001, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xff, {0xfffffffffffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x1, {0x3, 0x1, 0x0, 0x1, 0x2, 0x7, {0x2, 0x2, 0x6a, 0x920, 0x2, 0x6, 0x5, 0xfff, 0xfff, 0x8000, 0x8, r2, 0x0, 0x15b, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m16.444919418s ago: executing program 1 (id=6831): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x40, 0x0, 0x0}) 14m12.415446347s ago: executing program 1 (id=6848): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 14m10.528524314s ago: executing program 1 (id=6853): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000040)={0x0, 0x7, 0x1, 0xfffffffd, 0x5, 0x9, "3000000502000000000000000400", 0x0, 0x0, 0x4a, 0x8, 0x0, 0x4, 0xe}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x48001) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x8, 0x800007, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x5}, {0x9}}}}, 0xd) socket$netlink(0x10, 0x3, 0x14) 13m54.417803345s ago: executing program 41 (id=6853): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000040)={0x0, 0x7, 0x1, 0xfffffffd, 0x5, 0x9, "3000000502000000000000000400", 0x0, 0x0, 0x4a, 0x8, 0x0, 0x4, 0xe}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x48001) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x8, 0x800007, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x5}, {0x9}}}}, 0xd) socket$netlink(0x10, 0x3, 0x14) 11m22.407896933s ago: executing program 8 (id=7270): fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x0, 0x83, 0x2, 0x3, 0x200007f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454c, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x4038, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xffffffff, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11m21.151905905s ago: executing program 8 (id=7272): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000180), 0x0}, 0x20) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 11m20.267513757s ago: executing program 8 (id=7275): syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a90308072501"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000003c0)={'\x00', 0x2}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x24, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a1000004001000000800000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x30000805}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) poll(&(0x7f0000000080)=[{r6, 0x1410}], 0x1, 0xc) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 11m16.563616974s ago: executing program 8 (id=7290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x5c2, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x620, 0x1, 0x0, 0x0) 11m15.259073657s ago: executing program 8 (id=7296): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 11m13.578474739s ago: executing program 8 (id=7302): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000100), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11m6.221393245s ago: executing program 9 (id=7318): syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000000c0)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x48, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) 10m59.377585734s ago: executing program 9 (id=7324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 10m58.25184049s ago: executing program 42 (id=7302): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000100), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10m56.631260325s ago: executing program 9 (id=7331): syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d28200819201300000102030109027e0080ffffff000904ae0e051966858f0b240600013a6af75c828205240009000d020000000000000400fdff0606241a8d000809050308000402080607250182070100090509001000a90308072501"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x24, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 10m55.763783221s ago: executing program 9 (id=7333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 10m53.510188201s ago: executing program 9 (id=7339): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x20080, 0x0) 10m50.210206249s ago: executing program 9 (id=7347): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 10m35.041185119s ago: executing program 43 (id=7347): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 6m21.727732184s ago: executing program 6 (id=8074): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 6m20.554028934s ago: executing program 6 (id=8077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m18.794244432s ago: executing program 6 (id=8084): syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 6m17.635231052s ago: executing program 6 (id=8089): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x22, 0xe1db, 0x1101, 0xff}) 6m16.970146723s ago: executing program 6 (id=8093): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0xc0844123, &(0x7f0000000180)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6m15.19111309s ago: executing program 6 (id=8096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m59.962392855s ago: executing program 44 (id=8096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12.940391908s ago: executing program 5 (id=9136): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3013528e0c30c499aa3a0c2"], 0x0}, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000100)={0x1, 0x9, 0x9, 0x7}) 10.599809224s ago: executing program 4 (id=9142): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000600)=@ethernet={0x306}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="9b468da99267a99aed5f6b48ad03b7c825ecb32adffc80ff47af98a3741169ea2fcaa8de0120079173a79cbc6b3e4ef87d968b9bfd711da55a06467ae7196c92aeb550695c643a2eb3d0ce6ec6c56ba80e0fd32e8d2c4151045ca0c0e4ae46503bcef27a4a62957c4b4f633201531d45c0cca9b2f56ca07363743dbc323021a0c2a659b941e96290725f3c874b2081955f0cdf6d99782e5c0d18318b474c51", 0x9f}], 0x1, &(0x7f00000013c0)=[{0xc10, 0x119, 0x9, "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"}, {0x28, 0x13, 0x7, "877e97e30e80b348e3ecaa1ddfb1a3a2b6"}], 0xc38}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f00000002c0)=@isdn, &(0x7f0000000580)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.304849618s ago: executing program 4 (id=9143): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.92459475s ago: executing program 7 (id=9145): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x27) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, r1, 0x4, r1}, 0x10) 9.900137178s ago: executing program 0 (id=9146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/49) 9.678887931s ago: executing program 5 (id=9147): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file3\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x10, 0x0, 0xf2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000300)='/dev/comedi1\x00', 0x200040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 9.630291002s ago: executing program 7 (id=9148): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1224, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) 9.040170084s ago: executing program 0 (id=9149): syz_usb_connect(0x2, 0x137, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 8.487538744s ago: executing program 4 (id=9151): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000080)={[{@nogrpid}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nodioread_nolock}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @b}}) write$UHID_INPUT(r0, 0x0, 0x0) 8.358363426s ago: executing program 3 (id=9152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$dri(&(0x7f00000066c0), 0x61121b81, 0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 7.006082851s ago: executing program 4 (id=9154): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, r1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) 6.115672011s ago: executing program 3 (id=9156): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f0000000380)) r1 = eventfd2(0x0, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r1) shutdown(r3, 0x0) write$sndseq(r3, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x199, &(0x7f0000006940)="$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") 5.767031218s ago: executing program 0 (id=9158): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x9, 0x9, 0xa, 0xee, 0x7, 0x3, 0x4, 0xd, 0xcf2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r4], 0x1, r2, r3, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 5.763002024s ago: executing program 3 (id=9159): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000680)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.736800695s ago: executing program 5 (id=9160): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3013528e0c30c499aa3a0c2"], 0x0}, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000100)={0x1, 0x9, 0x9, 0x7}) 4.727066609s ago: executing program 0 (id=9161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f00000006c0)=[{0x30, 0x7f, 0x86, 0xfffff00f}]}) 4.574040087s ago: executing program 2 (id=9162): socket(0xa, 0x3, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70700000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.528940783s ago: executing program 7 (id=9163): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r2 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x2c, &(0x7f0000000e80)={0x0, 0x14, 0x4, "0f4a66e4"}, 0x0, 0x0, 0x0, 0x0}) 4.49126099s ago: executing program 0 (id=9164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "acba0a68"}]}}, 0x0}, 0x0) 4.243060611s ago: executing program 2 (id=9165): r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x0, "e89c5b0900f8ff0000000007000000000000005b00"}) pselect6(0x40, &(0x7f0000000000)={0x0, 0x8000, 0x5e, 0xfffffffffffffffd, 0x5, 0x4, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x4, 0x2400000, 0x9, 0xfffffffffffffffb, 0x7effffff}, 0x0, 0x0) 3.82296489s ago: executing program 4 (id=9166): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000900)='environ\x00') syz_read_part_table(0x405b, &(0x7f0000004080)="$eJzszjFKA1EUBdCbxMGvDARBK0EM9jJ2VrOL6SVrsFZxdmIZXIArsnQLIyhGEkW0CKicU73P5b1/wx9RltMoycP8fi/J8Sx907yGW2/5zvtSc5Zqt4xTJ7n8eLNbbL43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS41XXtdraVlO88P0V23O66QcTJPbSar2aJT9ZHb6yd1J8phklOQpSTfdUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J+5WHltr8f1F6t3J+nb6mW8STIMw/Dtb0vSLX7SE57ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKMCAAD//wx/Es8=") read$FUSE(r3, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) mremap(&(0x7f000074e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000eb000/0x2000)=nil) recvmmsg$unix(r0, &(0x7f0000002380), 0x0, 0x0, 0x0) 3.297801902s ago: executing program 2 (id=9167): socket(0x2, 0x3, 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x20048000) 2.927020801s ago: executing program 5 (id=9168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$dri(&(0x7f00000066c0), 0x61121b81, 0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 2.205876328s ago: executing program 2 (id=9169): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$overlay(0x0, 0x0, 0x0, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) rmdir(0x0) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000140)='./control\x00') 2.146497711s ago: executing program 3 (id=9170): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000600)=@ethernet={0x306}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="9b468da99267a99aed5f6b48ad03b7c825ecb32adffc80ff47af98a3741169ea2fcaa8de0120079173a79cbc6b3e4ef87d968b9bfd711da55a06467ae7196c92aeb550695c643a2eb3d0ce6ec6c56ba80e0fd32e8d2c4151045ca0c0e4ae46503bcef27a4a62957c4b4f633201531d45c0cca9b2f56ca07363743dbc323021a0c2a659b941e96290725f3c874b2081955f0cdf6d99782e5c0d18318b474c51", 0x9f}], 0x1, &(0x7f00000013c0)=[{0xc10, 0x119, 0x9, "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"}, {0x28, 0x13, 0x7, "877e97e30e80b348e3ecaa1ddfb1a3a2b6"}], 0xc38}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f00000002c0)=@isdn, &(0x7f0000000580)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.495018768s ago: executing program 0 (id=9171): syz_usb_connect(0x2, 0x137, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 1.351254083s ago: executing program 5 (id=9172): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r3}, 0x18) 1.250910531s ago: executing program 7 (id=9173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000050) 1.188393276s ago: executing program 3 (id=9174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001800cd8d26bd700000000000020080000000000600290000"], 0x1c}}, 0x8c0) 1.071439561s ago: executing program 4 (id=9175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1224, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) 1.019028434s ago: executing program 2 (id=9176): r0 = socket(0x11, 0xa, 0x8) recvmsg$unix(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0}, 0x40) 1.004494741s ago: executing program 7 (id=9177): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f00000004c0)=0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, 0xffffffffffffffff, 0x0) 899.270206ms ago: executing program 2 (id=9178): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, r1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) 827.140814ms ago: executing program 3 (id=9179): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40044583, &(0x7f00000001c0)={0x51, 0xfffd, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x7, 0xfffb, 0xa}, 0x0, 0x0}}) 228.641379ms ago: executing program 5 (id=9180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x2000000a}}, 0x10) close_range(r0, r4, 0x0) 0s ago: executing program 7 (id=9181): socket(0x2, 0x3, 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) kernel console output (not intermixed with test programs): syz [ 2643.358662][T20109] usb 4-1: Manufacturer: syz [ 2643.405322][T20109] usb 4-1: SerialNumber: syz [ 2643.483002][T20109] usb 4-1: bad CDC descriptors [ 2643.501609][T20109] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 2643.527303][T20109] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 2643.692638][T20109] usb 4-1: USB disconnect, device number 6 [ 2644.835819][T31615] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2644.849356][T31615] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2645.128397][T31615] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 2645.796641][T31615] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 2645.809328][T31615] usb 6-1: USB disconnect, device number 110 [ 2646.480422][ T43] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2646.641289][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 2646.678140][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2646.695716][ T43] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2646.741645][ T43] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 2646.769062][T31683] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2646.784679][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2646.831243][ T43] usb 6-1: Product: syz [ 2646.849908][ T43] usb 6-1: Manufacturer: syz [ 2646.889820][ T43] usb 6-1: SerialNumber: syz [ 2646.953474][ T43] usb 6-1: config 0 descriptor?? [ 2647.339738][ T43] usb 6-1: USB disconnect, device number 111 [ 2651.338405][T31716] ALSA: mixer_oss: invalid OSS volume './file0' [ 2651.582212][T31718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7877'. [ 2655.421304][T31781] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7894'. [ 2659.266148][T31821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7904'. [ 2661.570880][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2661.736884][T31844] ALSA: mixer_oss: invalid OSS volume './file0' [ 2670.282822][T31899] ALSA: mixer_oss: invalid OSS volume './file0' [ 2672.887420][T31922] netlink: 'syz.7.7932': attribute type 8 has an invalid length. [ 2672.909550][T31922] netlink: 'syz.7.7932': attribute type 9 has an invalid length. [ 2672.939383][T31922] netlink: 'syz.7.7932': attribute type 10 has an invalid length. [ 2673.233986][T31922] netlink: 'syz.7.7932': attribute type 11 has an invalid length. [ 2673.242018][T31922] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7932'. [ 2674.924244][T31959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7942'. [ 2675.817258][T31959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2675.865493][T31961] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2675.924769][T31966] bond1: entered promiscuous mode [ 2675.936422][T31966] geneve2: entered promiscuous mode [ 2675.966049][ T6357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.027653][ T6357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.062565][ T6357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2676.339018][ T6357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2677.086541][T31975] ALSA: mixer_oss: invalid OSS volume './file0' [ 2681.282258][T32014] tipc: Enabling of bearer rejected, failed to enable media [ 2681.337695][T32014] syzkaller0: entered promiscuous mode [ 2681.387116][T32014] syzkaller0: entered allmulticast mode [ 2692.060650][T32092] pim6reg1: entered promiscuous mode [ 2692.782048][T32092] pim6reg1: entered allmulticast mode [ 2692.832210][T28450] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2693.433065][T28450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2693.487562][T28450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2693.530227][T28450] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2693.548625][T28450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2693.574800][T28450] usb 4-1: config 0 descriptor?? [ 2694.837310][T28450] cp2112 0003:10C4:EA90.0067: unknown main item tag 0x0 [ 2694.856524][T28450] cp2112 0003:10C4:EA90.0067: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 2695.872135][T28450] cp2112 0003:10C4:EA90.0067: error requesting version [ 2695.896055][T28450] cp2112 0003:10C4:EA90.0067: probe with driver cp2112 failed with error -5 [ 2696.021379][T32128] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2696.884630][T28450] usb 4-1: USB disconnect, device number 7 [ 2703.815514][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2703.815540][ T30] audit: type=1326 audit(2703.792:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2704.257154][ T30] audit: type=1326 audit(2704.102:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2704.281495][ T30] audit: type=1326 audit(2704.142:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2704.353887][ T30] audit: type=1326 audit(2704.142:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2704.434640][ T30] audit: type=1326 audit(2704.142:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2704.514507][ T30] audit: type=1326 audit(2704.142:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2704.574993][ T30] audit: type=1326 audit(2704.142:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2704.636985][ T30] audit: type=1326 audit(2704.142:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2704.693750][ T30] audit: type=1326 audit(2704.152:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2704.733958][ T30] audit: type=1326 audit(2704.152:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.7.8009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60318efc9 code=0x7ffc0000 [ 2706.892197][T32229] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8020'. [ 2708.510563][ T43] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2709.180764][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 2709.266540][T32246] netlink: 548 bytes leftover after parsing attributes in process `syz.4.8025'. [ 2709.716907][ T43] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2709.753703][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2709.830321][ T43] usb 8-1: Product: syz [ 2709.860457][ T43] usb 8-1: Manufacturer: syz [ 2709.873764][ T43] usb 8-1: SerialNumber: syz [ 2709.895341][ T43] usb 8-1: config 0 descriptor?? [ 2710.591077][ T43] dvb_usb_dtv5100 8-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 2713.230271][T32269] comedi comedi0: reset error (fatal) [ 2713.238330][ T6106] usb 8-1: USB disconnect, device number 7 [ 2715.370281][ T6106] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2715.623323][T32309] tipc: Enabling of bearer rejected, failed to enable media [ 2715.633336][T32309] syzkaller0: entered promiscuous mode [ 2715.638908][T32309] syzkaller0: entered allmulticast mode [ 2715.750535][ T6106] usb 8-1: Using ep0 maxpacket: 32 [ 2716.894950][ T6106] usb 8-1: unable to read config index 0 descriptor/all [ 2716.924650][ T6106] usb 8-1: can't read configurations, error -71 [ 2717.003708][T32323] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 2717.031437][T32327] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8050'. [ 2717.230603][ T43] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2717.549787][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2717.589573][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2717.618304][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2717.679629][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2717.778751][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2717.848464][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.869379][ T43] usb 5-1: config 0 descriptor?? [ 2719.981109][ T43] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2721.299008][ T43] usb 5-1: USB disconnect, device number 86 [ 2722.074812][T32371] tipc: Enabling of bearer rejected, failed to enable media [ 2722.120638][T32371] syzkaller0: entered promiscuous mode [ 2722.146175][T32371] syzkaller0: entered allmulticast mode [ 2722.904767][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2725.748077][T32402] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 2726.248236][T28450] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 2726.306582][T28450] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2734.943371][T13876] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 2734.955802][T13876] CPU: 0 UID: 0 PID: 13876 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 2734.955843][T13876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2734.955865][T13876] Workqueue: hci6 hci_rx_work [ 2734.955905][T13876] Call Trace: [ 2734.955917][T13876] [ 2734.955929][T13876] dump_stack_lvl+0x16c/0x1f0 [ 2734.955967][T13876] sysfs_warn_dup+0x7f/0xa0 [ 2734.956004][T13876] sysfs_create_dir_ns+0x24b/0x2b0 [ 2734.956041][T13876] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2734.956075][T13876] ? find_held_lock+0x2b/0x80 [ 2734.956123][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.956163][T13876] ? do_raw_spin_unlock+0x172/0x230 [ 2734.956203][T13876] kobject_add_internal+0x2c4/0x9b0 [ 2734.956253][T13876] kobject_add+0x16e/0x240 [ 2734.956295][T13876] ? __pfx_kobject_add+0x10/0x10 [ 2734.956339][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.956382][T13876] ? do_raw_spin_unlock+0x172/0x230 [ 2734.956426][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.956471][T13876] ? kobject_put+0xab/0x5a0 [ 2734.956535][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.956591][T13876] device_add+0x288/0x1aa0 [ 2734.956650][T13876] ? __pfx_dev_set_name+0x10/0x10 [ 2734.956686][T13876] ? __pfx_device_add+0x10/0x10 [ 2734.956747][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.956792][T13876] ? mgmt_send_event_skb+0x2fb/0x460 [ 2734.956846][T13876] hci_conn_add_sysfs+0x17e/0x230 [ 2734.956894][T13876] le_conn_complete_evt+0x1260/0x2150 [ 2734.956945][T13876] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2734.956983][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.957038][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.957092][T13876] hci_le_conn_complete_evt+0x23c/0x370 [ 2734.957143][T13876] hci_le_meta_evt+0x357/0x5e0 [ 2734.957185][T13876] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2734.957232][T13876] hci_event_packet+0x685/0x11c0 [ 2734.957271][T13876] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2734.957317][T13876] ? __pfx_hci_event_packet+0x10/0x10 [ 2734.957356][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.957406][T13876] ? kcov_remote_start+0x3c9/0x6d0 [ 2734.957455][T13876] ? lockdep_hardirqs_on+0x7c/0x110 [ 2734.957493][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.957537][T13876] hci_rx_work+0x2c5/0x16b0 [ 2734.957573][T13876] ? rcu_is_watching+0x12/0xc0 [ 2734.957617][T13876] process_one_work+0x9cf/0x1b70 [ 2734.957665][T13876] ? __pfx_process_one_work+0x10/0x10 [ 2734.957697][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.957741][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.957775][T13876] ? assign_work+0x1a0/0x250 [ 2734.957807][T13876] worker_thread+0x6c8/0xf10 [ 2734.957857][T13876] ? __pfx_worker_thread+0x10/0x10 [ 2734.957889][T13876] kthread+0x3c5/0x780 [ 2734.957918][T13876] ? __pfx_kthread+0x10/0x10 [ 2734.957949][T13876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2734.957983][T13876] ? rcu_is_watching+0x12/0xc0 [ 2734.958020][T13876] ? __pfx_kthread+0x10/0x10 [ 2734.958051][T13876] ret_from_fork+0x675/0x7d0 [ 2734.958095][T13876] ? __pfx_kthread+0x10/0x10 [ 2734.958124][T13876] ret_from_fork_asm+0x1a/0x30 [ 2734.958187][T13876] [ 2734.958254][T13876] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2735.280754][T13876] Bluetooth: hci6: failed to register connection device [ 2739.677915][T32547] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2742.130721][ T6106] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 2743.748431][ T6106] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2744.147886][ T6106] usb 8-1: config 0 has no interfaces? [ 2744.402221][ T6106] usb 8-1: string descriptor 0 read error: -71 [ 2744.408580][ T6106] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2744.630339][ T6106] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.653780][ T6106] usb 8-1: config 0 descriptor?? [ 2744.659147][ T6106] usb 8-1: can't set config #0, error -71 [ 2744.697253][ T6106] usb 8-1: USB disconnect, device number 10 [ 2745.570252][T32577] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8128'. [ 2747.735191][T32600] loop6: detected capacity change from 0 to 524287999 [ 2747.824348][T13876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2747.834957][T13876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2747.843366][T13876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2747.853796][T13876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2747.865904][T13876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2749.940376][T17606] Bluetooth: hci3: command tx timeout [ 2752.037292][T17606] Bluetooth: hci3: command tx timeout [ 2752.863621][T32601] chnl_net:caif_netlink_parms(): no params data found [ 2754.100489][T17606] Bluetooth: hci3: command tx timeout [ 2756.185714][T17606] Bluetooth: hci3: command tx timeout [ 2757.367079][T32673] pim6reg: entered allmulticast mode [ 2757.372567][T31615] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2757.381496][T32675] pim6reg: left allmulticast mode [ 2757.534815][T31615] usb 4-1: Using ep0 maxpacket: 8 [ 2757.545518][T32601] bridge0: port 1(bridge_slave_0) entered blocking state [ 2757.547034][T31615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2757.591073][T31615] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 2757.608349][T31615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2757.628261][T31615] usb 4-1: Product: syz [ 2757.638119][T31615] usb 4-1: Manufacturer: syz [ 2757.643862][T32601] bridge0: port 1(bridge_slave_0) entered disabled state [ 2757.660605][T32601] bridge_slave_0: entered allmulticast mode [ 2757.668550][T32601] bridge_slave_0: entered promiscuous mode [ 2757.682971][T31615] usb 4-1: SerialNumber: syz [ 2757.698805][T32601] bridge0: port 2(bridge_slave_1) entered blocking state [ 2757.708913][T31615] usb 4-1: config 0 descriptor?? [ 2757.719106][T32601] bridge0: port 2(bridge_slave_1) entered disabled state [ 2757.764741][T31615] gspca_main: t613-2.14.0 probing 17a1:0128 [ 2757.774160][T32601] bridge_slave_1: entered allmulticast mode [ 2757.799370][T32601] bridge_slave_1: entered promiscuous mode [ 2758.325644][T31615] gspca_t613: unknown sensor 0000 [ 2758.330817][T31615] t613 4-1:0.0: probe with driver t613 failed with error -22 [ 2758.676869][T32601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2758.787244][T32601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2759.592377][ T5914] usb 4-1: USB disconnect, device number 8 [ 2759.616688][T32601] team0: Port device team_slave_0 added [ 2759.671977][T32601] team0: Port device team_slave_1 added [ 2760.068312][T32601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2760.123993][T32601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2760.783744][T32601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2760.809818][T32601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2760.818852][T32601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2760.844884][ C1] vkms_vblank_simulate: vblank timer overrun [ 2761.556307][T32601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2762.034118][T32601] hsr_slave_0: entered promiscuous mode [ 2762.055683][T32601] hsr_slave_1: entered promiscuous mode [ 2762.084522][T32601] debugfs: 'hsr0' already exists in 'hsr' [ 2762.109330][T32601] Cannot create hsr debugfs directory [ 2766.596197][T32601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.024237][T32601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.058311][ T6106] libceph: connect (1)[c::]:6789 error -101 [ 2767.066290][ T6106] libceph: mon0 (1)[c::]:6789 connect error [ 2767.344208][T31615] libceph: connect (1)[c::]:6789 error -101 [ 2767.362384][T31615] libceph: mon0 (1)[c::]:6789 connect error [ 2767.557061][T32759] ceph: No mds server is up or the cluster is laggy [ 2768.824008][T32601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.850914][ T5914] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 2769.027647][ T5914] usb 8-1: config 7 has an invalid interface number: 101 but max is 0 [ 2769.042059][T32601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2769.060425][ T5914] usb 8-1: config 7 has no interface number 0 [ 2769.076689][ T5914] usb 8-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2769.154894][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2769.265832][ T5914] usb 8-1: Product: syz [ 2769.675314][ T5914] usb 8-1: Manufacturer: syz [ 2769.679972][ T5914] usb 8-1: SerialNumber: syz [ 2769.926608][ T328] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2770.127508][T32601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2770.373139][T32601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2770.434628][T32601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2770.498338][T32601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2770.660118][ T5914] as10x_usb: device has been detected [ 2770.677030][ T5914] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2770.726567][ T5914] usb 8-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2771.041310][ T5914] as10x_usb: error during firmware upload part1 [ 2771.061119][T32601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2771.066736][ T5914] Registered device Elgato EyeTV DTT Deluxe [ 2771.084878][ T5914] usb 8-1: USB disconnect, device number 11 [ 2771.111643][T32601] 8021q: adding VLAN 0 to HW filter on device team0 [ 2771.142423][T21218] bridge0: port 1(bridge_slave_0) entered blocking state [ 2771.149588][T21218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2771.203788][T21218] bridge0: port 2(bridge_slave_1) entered blocking state [ 2771.210990][T21218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2771.287526][ T5914] Unregistered device Elgato EyeTV DTT Deluxe [ 2771.289332][ T5914] as10x_usb: device has been disconnected [ 2772.096857][T21601] libceph: connect (1)[c::]:6789 error -101 [ 2772.115460][T21601] libceph: mon0 (1)[c::]:6789 connect error [ 2772.219481][ T351] ceph: No mds server is up or the cluster is laggy [ 2774.089701][T32601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2774.320472][T23106] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2774.476258][T32601] veth0_vlan: entered promiscuous mode [ 2774.515067][T23106] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2774.531851][T23106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2774.578529][T32601] veth1_vlan: entered promiscuous mode [ 2774.620612][T23106] usb 6-1: Product: syz [ 2774.630370][T23106] usb 6-1: Manufacturer: syz [ 2774.644686][T23106] usb 6-1: SerialNumber: syz [ 2774.681691][T28450] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 2774.700833][T23106] usb 6-1: config 0 descriptor?? [ 2774.738797][T32601] veth0_macvtap: entered promiscuous mode [ 2774.754977][T32601] veth1_macvtap: entered promiscuous mode [ 2775.043490][T32601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2775.056411][T32601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2775.102458][T28450] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2775.113325][T28450] usb 4-1: config 0 has no interface number 0 [ 2775.126009][T28450] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2775.193896][T31561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2775.235849][T31561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2775.252786][T28450] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2775.277750][T23106] hso 6-1:0.0: Can't find BULK IN endpoint [ 2775.316754][T31561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2775.331725][T23106] usb-storage 6-1:0.0: USB Mass Storage device detected [ 2775.338778][T28450] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2775.362478][T28450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2775.385033][T31561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2775.501319][T28450] usb 4-1: config 0 descriptor?? [ 2775.508741][ T388] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2775.611992][T28450] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2776.110012][ T405] 9pnet_fd: Insufficient options for proto=fd [ 2776.205972][ T406] 9pnet: Unknown protocol version 9p200 [ 2776.881866][T28450] usb 6-1: USB disconnect, device number 112 [ 2777.246027][T21218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2777.263379][ T43] usb 4-1: USB disconnect, device number 9 [ 2777.330720][T21218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2777.670779][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2777.727031][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2783.560723][ T5914] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2783.625301][ T471] veth0_to_team: entered promiscuous mode [ 2783.791583][ T5914] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2783.853910][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2783.931105][ T5914] usb 4-1: Product: syz [ 2783.954309][ T5914] usb 4-1: Manufacturer: syz [ 2783.983696][ T5914] usb 4-1: SerialNumber: syz [ 2784.104522][ T5914] usb 4-1: config 0 descriptor?? [ 2784.352710][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2784.413491][ T5914] hso 4-1:0.0: Can't find BULK IN endpoint [ 2784.455416][ T5914] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2784.610085][ T5914] usb 4-1: USB disconnect, device number 10 [ 2791.142022][ T515] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2791.360320][T21601] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2791.538818][T21601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2791.594764][T21601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2791.666353][T21601] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2791.722944][T21601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.791443][T21601] usb 3-1: config 0 descriptor?? [ 2792.704696][T21601] cp2112 0003:10C4:EA90.006A: unknown main item tag 0x0 [ 2792.852925][T21601] cp2112 0003:10C4:EA90.006A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2793.275710][T21601] cp2112 0003:10C4:EA90.006A: Part Number: 0x82 Device Version: 0xFE [ 2794.203751][T21601] cp2112 0003:10C4:EA90.006A: error requesting SMBus config [ 2794.222564][T21601] cp2112 0003:10C4:EA90.006A: probe with driver cp2112 failed with error -32 [ 2794.241531][T31615] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2794.695539][T31615] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2794.711671][T31615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2794.729274][T31615] usb 4-1: Product: syz [ 2794.740535][T31615] usb 4-1: Manufacturer: syz [ 2795.710509][T31615] usb 4-1: SerialNumber: syz [ 2795.729324][T31615] usb 4-1: config 0 descriptor?? [ 2795.881428][ T5914] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2795.973220][T31615] usb 4-1: can't set config #0, error -71 [ 2795.991820][T31615] usb 4-1: USB disconnect, device number 11 [ 2796.090232][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 2796.106974][ T5914] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2796.131309][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2796.153362][ T5914] usb 6-1: Product: syz [ 2796.169318][ T5914] usb 6-1: Manufacturer: syz [ 2796.359136][T20665] usb 3-1: USB disconnect, device number 65 [ 2796.445690][ T5914] usb 6-1: SerialNumber: syz [ 2796.571755][ T5914] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2797.180578][ T5914] r8152-cfgselector 6-1: config 0 descriptor?? [ 2797.415988][ T5914] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2797.436409][ T5914] r8152-cfgselector 6-1: bad CDC descriptors [ 2797.504621][ T5914] r8152-cfgselector 6-1: USB disconnect, device number 113 [ 2800.435098][ T608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8283'. [ 2800.643590][T31615] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2800.671726][ T611] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2801.345697][T31615] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2801.453109][T31615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2801.700556][T31615] usb 6-1: Product: syz [ 2801.704772][T31615] usb 6-1: Manufacturer: syz [ 2801.721119][T31615] usb 6-1: SerialNumber: syz [ 2801.729450][T31615] usb 6-1: config 0 descriptor?? [ 2807.090255][T31615] usb-storage 6-1:0.0: USB Mass Storage device detected [ 2809.228722][ T655] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8298'. [ 2810.798374][T27653] usb 6-1: USB disconnect, device number 114 [ 2811.376358][ T673] netlink: 548 bytes leftover after parsing attributes in process `syz.4.8302'. [ 2812.500370][T31615] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2812.780322][T31615] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2812.803730][T31615] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2812.856270][T31615] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2813.036603][T31615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2813.423199][ T682] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2813.444164][T31615] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2813.930378][T31615] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2814.098228][T31615] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 2814.137028][T31615] usb 1-1: config 1 has no interface number 0 [ 2814.167624][T31615] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2814.230707][T31615] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2814.277857][T31615] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 2814.314447][ T700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8314'. [ 2814.334256][T31615] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 2814.409305][T31615] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2814.456557][T31615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2814.571095][T31615] usb 1-1: Product: syz [ 2814.575327][T31615] usb 1-1: Manufacturer: syz [ 2814.640615][T31615] usb 1-1: SerialNumber: syz [ 2814.708213][ T696] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2814.745452][ T696] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2814.767070][T20109] libceph: connect (1)[c::]:6789 error -101 [ 2814.773301][T20109] libceph: mon0 (1)[c::]:6789 connect error [ 2814.799742][T20665] usb 3-1: USB disconnect, device number 66 [ 2814.888364][ T693] ceph: No mds server is up or the cluster is laggy [ 2816.556078][T31615] usb 1-1: Error in usbnet_get_endpoints (-71) [ 2816.603322][T31615] usb 1-1: USB disconnect, device number 51 [ 2818.096861][ T745] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8328'. [ 2818.572985][T20665] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2818.795404][T20665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2818.938157][T20665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2818.950867][T20665] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2818.960940][T20665] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2818.972124][T20665] usb 6-1: config 0 descriptor?? [ 2819.768816][T20665] cp2112 0003:10C4:EA90.006B: unknown main item tag 0x0 [ 2820.031829][T20665] cp2112 0003:10C4:EA90.006B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 2820.393782][T20665] cp2112 0003:10C4:EA90.006B: Part Number: 0x82 Device Version: 0xFE [ 2820.470237][T27653] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 2820.505136][ T773] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2820.642611][T27653] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2820.669615][T27653] usb 5-1: not running at top speed; connect to a high speed hub [ 2820.692591][T27653] usb 5-1: config 4 has an invalid interface number: 111 but max is 0 [ 2820.715603][T27653] usb 5-1: config 4 has no interface number 0 [ 2820.739707][T27653] usb 5-1: config 4 interface 111 has no altsetting 0 [ 2820.783338][T27653] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 2820.812368][T27653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2820.853746][T27653] usb 5-1: Product: syz [ 2820.880265][T20665] cp2112 0003:10C4:EA90.006B: error requesting SMBus config [ 2820.888141][T27653] usb 5-1: Manufacturer: syz [ 2820.909590][T20665] cp2112 0003:10C4:EA90.006B: probe with driver cp2112 failed with error -32 [ 2820.917997][T27653] usb 5-1: SerialNumber: syz [ 2821.324397][T27653] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2821.356522][T27653] pvrusb2: ********** [ 2821.374834][T27653] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2821.420304][T27653] pvrusb2: Important functionality might not be entirely working. [ 2821.465204][T27653] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2821.509619][T27653] pvrusb2: ********** [ 2821.520359][T27653] usb 5-1: selecting invalid altsetting 0 [ 2821.557483][ T2341] pvrusb2: control-write URB failure, status=-71 [ 2821.568341][T27653] usb 5-1: USB disconnect, device number 87 [ 2821.596967][ T2341] pvrusb2: Device being rendered inoperable [ 2821.633611][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2821.670534][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2821.886921][ T787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8343'. [ 2822.652517][T27653] usb 6-1: USB disconnect, device number 115 [ 2828.072203][ T836] hfs: can't find a HFS filesystem on dev nullb0 [ 2829.080381][T20109] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2829.799651][ T852] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2829.892409][T20109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2830.110306][T20109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2830.136067][T20109] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2830.149540][T20109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2830.193036][T20109] usb 5-1: config 0 descriptor?? [ 2832.018330][T20109] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 2832.453604][T20109] cp2112 0003:10C4:EA90.006C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 2833.349993][ T867] netlink: 548 bytes leftover after parsing attributes in process `syz.5.8365'. [ 2833.668637][T20109] cp2112 0003:10C4:EA90.006C: error requesting version [ 2833.709353][T20109] cp2112 0003:10C4:EA90.006C: probe with driver cp2112 failed with error -71 [ 2833.760483][T20109] usb 5-1: USB disconnect, device number 88 [ 2835.958250][ T898] netlink: 'syz.2.8376': attribute type 12 has an invalid length. [ 2835.998800][ T898] netlink: 'syz.2.8376': attribute type 29 has an invalid length. [ 2836.048582][ T898] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8376'. [ 2837.220628][T21601] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2837.394545][ T935] netlink: 548 bytes leftover after parsing attributes in process `syz.4.8383'. [ 2837.855362][T21601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2837.876865][T21601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2837.938107][T21601] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2837.999034][T21601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2838.111649][T21601] usb 6-1: config 0 descriptor?? [ 2838.381662][T31615] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2838.534686][T21601] cp2112 0003:10C4:EA90.006D: unknown main item tag 0x0 [ 2838.566037][T31615] usb 5-1: Using ep0 maxpacket: 32 [ 2838.574356][T21601] cp2112 0003:10C4:EA90.006D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 2838.602868][T31615] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 2838.625206][T31615] usb 5-1: config 0 has no interface number 1 [ 2838.672089][T31615] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 2838.681594][T31615] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 2838.693758][T31615] usb 5-1: Product: syz [ 2838.701648][T31615] usb 5-1: Manufacturer: syz [ 2838.713948][T31615] usb 5-1: SerialNumber: syz [ 2838.731385][T21601] cp2112 0003:10C4:EA90.006D: Part Number: 0x82 Device Version: 0xFE [ 2838.732175][T31615] usb 5-1: config 0 descriptor?? [ 2838.943619][T21601] cp2112 0003:10C4:EA90.006D: error requesting SMBus config [ 2838.984614][T31615] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 2838.996323][T21601] cp2112 0003:10C4:EA90.006D: probe with driver cp2112 failed with error -5 [ 2839.026470][T31615] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 2839.333875][T31615] usb 5-1: USB disconnect, device number 89 [ 2840.431031][ T958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8391'. [ 2840.711123][ T965] netlink: 'syz.7.8393': attribute type 12 has an invalid length. [ 2840.729357][ T965] netlink: 'syz.7.8393': attribute type 29 has an invalid length. [ 2840.748564][ T965] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8393'. [ 2841.700534][T23106] usb 6-1: USB disconnect, device number 116 [ 2841.904922][ T979] netlink: 548 bytes leftover after parsing attributes in process `syz.7.8399'. [ 2845.786699][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2846.528312][T31615] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2848.667453][T31615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2848.709480][T31615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2848.743019][T31615] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2848.802378][T31615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2848.856988][T31615] usb 3-1: config 0 descriptor?? [ 2849.469779][T31615] usbhid 3-1:0.0: can't add hid device: -71 [ 2849.508930][T31615] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2850.773689][T31615] usb 3-1: USB disconnect, device number 67 [ 2854.720875][ T1097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8437'. [ 2855.348058][ T1115] delete_channel: no stack [ 2857.940737][ T1134] ufs: You didn't specify the type of your ufs filesystem [ 2857.940737][ T1134] [ 2857.940737][ T1134] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2857.940737][ T1134] [ 2857.940737][ T1134] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2857.972535][ C1] vkms_vblank_simulate: vblank timer overrun [ 2857.978986][ T1134] ufs: ufstype=old is supported read-only [ 2861.883647][ T1154] fuse: Bad value for 'user_id' [ 2861.930540][ T1154] fuse: Bad value for 'user_id' [ 2871.852362][T31615] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2872.790713][T31615] usb 6-1: Using ep0 maxpacket: 16 [ 2872.832859][T31615] usb 6-1: config 0 has no interfaces? [ 2872.845945][T31615] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2872.889769][T31615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.166314][T31615] usb 6-1: Product: syz [ 2873.176308][T31615] usb 6-1: Manufacturer: syz [ 2873.190231][T31615] usb 6-1: SerialNumber: syz [ 2873.208479][T31615] usb 6-1: config 0 descriptor?? [ 2873.394679][ T1265] IPVS: Error connecting to the multicast addr [ 2873.460329][T13876] Bluetooth: hci3: command 0x0406 tx timeout [ 2874.311886][ T1225] usb 6-1: USB disconnect, device number 117 [ 2874.710837][ T1225] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 2874.903750][ T1225] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2874.941021][ T1225] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2875.012553][ T1225] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2875.039543][ T1225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2875.073495][ T1225] usb 6-1: Product: syz [ 2875.085952][ T1225] usb 6-1: Manufacturer: syz [ 2875.100401][ T1225] usb 6-1: SerialNumber: syz [ 2876.619499][ T1225] usb 6-1: 0:2 : does not exist [ 2876.639228][ T1225] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2876.770655][ T1225] usb 6-1: USB disconnect, device number 118 [ 2882.036268][ T1342] IPVS: Error connecting to the multicast addr [ 2882.978460][ T1355] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2883.045298][ T1355] @0Ù: renamed from bond_slave_1 [ 2883.136413][ C0] vkms_vblank_simulate: vblank timer overrun [ 2888.879610][ T1390] IPVS: Error connecting to the multicast addr [ 2889.574857][ T1404] tipc: Started in network mode [ 2889.579916][ T1404] tipc: Node identity 3e8facd2e11d, cluster identity 4711 [ 2889.633372][ T1405] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2890.311976][ T1404] tipc: Enabled bearer , priority 0 [ 2890.330932][ T1406] syzkaller0: entered promiscuous mode [ 2890.336446][ T1406] syzkaller0: entered allmulticast mode [ 2890.452708][ T1404] tipc: Resetting bearer [ 2890.492880][ T1397] tipc: Resetting bearer [ 2890.739495][ T1397] tipc: Disabling bearer [ 2892.949402][ T1439] IPVS: Error connecting to the multicast addr [ 2893.124436][ T1443] 9pnet_fd: Insufficient options for proto=fd [ 2895.603558][ T1472] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8551'. [ 2896.652399][ T1480] block nbd7: Dead connection, failed to find a fallback [ 2896.659473][ T1480] block nbd7: shutting down sockets [ 2896.716816][ T1480] blk_print_req_error: 22 callbacks suppressed [ 2896.716842][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2896.738289][ T1481] tipc: Enabled bearer , priority 0 [ 2896.759008][ T1481] syzkaller0: entered promiscuous mode [ 2896.775733][ T1480] buffer_io_error: 22 callbacks suppressed [ 2896.775768][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2896.779031][ T1481] syzkaller0: entered allmulticast mode [ 2896.822822][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2896.865992][ T1481] tipc: Resetting bearer [ 2896.899381][ T1479] tipc: Resetting bearer [ 2896.914994][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2896.947721][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2896.988863][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2896.989183][ T1479] tipc: Disabling bearer [ 2897.038407][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2897.080668][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2897.133347][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2897.195325][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2897.250636][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2897.259701][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2897.358227][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2897.728374][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2897.745343][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2897.999469][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2898.010411][ T1480] ldm_validate_partition_table(): Disk read failed. [ 2898.017124][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2898.026550][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2898.036133][ T1480] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2898.045224][ T1480] Buffer I/O error on dev nbd7, logical block 0, async page read [ 2898.083150][ T1480] Dev nbd7: unable to read RDB block 0 [ 2898.106374][ T1480] nbd7: unable to read partition table [ 2904.266770][T17606] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2905.321179][ T1550] blktrace: Concurrent blktraces are not allowed on loop10 [ 2907.238141][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2908.270755][ T1225] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2908.450290][ T1225] usb 4-1: Using ep0 maxpacket: 8 [ 2908.469196][ T1225] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2908.539089][ T1225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2908.587231][ T1225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2908.617596][ T1225] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2908.670530][ T1225] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2908.679591][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2908.966968][ T1225] usb 4-1: GET_CAPABILITIES returned 0 [ 2908.989735][ T1225] usbtmc 4-1:16.0: can't read capabilities [ 2910.399453][ T1225] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2911.125683][T31615] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2911.214407][ T5914] usb 4-1: USB disconnect, device number 12 [ 2911.216471][ T1225] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2911.229656][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2911.250203][ T1225] usb 5-1: Product: syz [ 2911.254394][ T1225] usb 5-1: Manufacturer: syz [ 2911.280359][ T1225] usb 5-1: SerialNumber: syz [ 2911.299207][T31615] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2911.311763][ T1225] usb 5-1: config 0 descriptor?? [ 2911.336635][T31615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2911.381945][T31615] usb 1-1: Product: syz [ 2911.386136][T31615] usb 1-1: Manufacturer: syz [ 2911.407032][T31615] usb 1-1: SerialNumber: syz [ 2911.421410][T31615] usb 1-1: config 0 descriptor?? [ 2911.736490][T31615] hso 1-1:0.0: Can't find BULK IN endpoint [ 2911.743050][T31615] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2912.608845][T31615] usb 1-1: USB disconnect, device number 52 [ 2912.657129][ T7724] usb 5-1: USB disconnect, device number 90 [ 2912.726190][T17606] Bluetooth: hci5: unexpected event for opcode 0x0404 [ 2922.606350][ T1690] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8616'. [ 2924.971854][ T1715] netlink: 'syz.7.8624': attribute type 13 has an invalid length. [ 2926.604598][ T1734] netlink: 548 bytes leftover after parsing attributes in process `syz.2.8629'. [ 2927.236160][ T1739] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8631'. [ 2928.602826][ T1749] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2930.590626][ T43] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2930.763141][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 2930.788296][ T43] usb 5-1: config 0 has no interfaces? [ 2930.813127][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2930.844236][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2930.860250][ T43] usb 5-1: Product: syz [ 2930.870294][ T43] usb 5-1: Manufacturer: syz [ 2930.885755][ T43] usb 5-1: SerialNumber: syz [ 2930.908749][ T43] usb 5-1: config 0 descriptor?? [ 2931.203703][ T43] usb 5-1: USB disconnect, device number 91 [ 2931.259914][ T1766] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 2931.266717][ T1766] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2931.280814][ T1766] vhci_hcd vhci_hcd.0: Device attached [ 2931.301582][ T1766] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2931.308197][ T1766] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2931.327156][ T1766] vhci_hcd vhci_hcd.0: Device attached [ 2931.436233][ T1766] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 2931.442774][ T1766] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2931.452604][ T1766] vhci_hcd vhci_hcd.0: Device attached [ 2931.459963][ T1767] vhci_hcd: connection closed [ 2931.460077][ T1775] vhci_hcd: connection closed [ 2931.466367][ T6229] vhci_hcd: stop threads [ 2931.475378][ T1771] vhci_hcd: connection closed [ 2931.476733][ T6229] vhci_hcd: release socket [ 2931.487764][ T6229] vhci_hcd: disconnect device [ 2931.499680][ T6229] vhci_hcd: stop threads [ 2931.504014][ T6229] vhci_hcd: release socket [ 2931.509273][ T6229] vhci_hcd: disconnect device [ 2931.515266][ T6229] vhci_hcd: stop threads [ 2931.522253][ T6229] vhci_hcd: release socket [ 2931.526696][ T6229] vhci_hcd: disconnect device [ 2932.280609][ T7724] vhci_hcd: vhci_device speed not set [ 2934.778593][ T1808] IPVS: Error connecting to the multicast addr [ 2935.919532][ T1819] input: syz1 as /devices/virtual/input/input78 [ 2936.476532][ T1830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8660'. [ 2936.578533][ T1830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2936.600357][ T1834] bond1: Unable to set up delay as MII monitoring is disabled [ 2943.645049][ T1882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8675'. [ 2943.663914][ T1882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8675'. [ 2946.832909][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2946.832935][ T30] audit: type=1326 audit(2946.812:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9498efc9 code=0x7ffc0000 [ 2946.875997][ T1916] IPVS: Error connecting to the multicast addr [ 2946.939917][ T30] audit: type=1326 audit(2946.812:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9498efc9 code=0x7ffc0000 [ 2947.040305][ T30] audit: type=1326 audit(2946.812:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fbc9498efc9 code=0x7ffc0000 [ 2947.117419][ T30] audit: type=1326 audit(2946.812:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9498efc9 code=0x7ffc0000 [ 2947.205020][ T30] audit: type=1326 audit(2946.812:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.5.8684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9498efc9 code=0x7ffc0000 [ 2952.439498][ T1970] tipc: Enabled bearer , priority 0 [ 2952.469924][ T1970] syzkaller0: entered promiscuous mode [ 2952.495704][ T1970] syzkaller0: entered allmulticast mode [ 2952.555411][ T1970] tipc: Resetting bearer [ 2952.597134][ T1973] netlink: 592 bytes leftover after parsing attributes in process `syz.3.8704'. [ 2952.624738][ T1968] tipc: Resetting bearer [ 2952.783541][ T1968] tipc: Disabling bearer [ 2953.384046][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8709'. [ 2955.244584][ T2013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8716'. [ 2955.497728][ T2016] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8716'. [ 2956.606242][ T2028] netlink: 592 bytes leftover after parsing attributes in process `syz.0.8722'. [ 2957.162564][ T2031] tipc: Started in network mode [ 2957.167513][ T2031] tipc: Node identity 966aa0c73512, cluster identity 4711 [ 2957.209682][ T2031] tipc: Enabled bearer , priority 0 [ 2957.260812][ T2032] syzkaller0: entered promiscuous mode [ 2957.306919][ T2032] syzkaller0: entered allmulticast mode [ 2957.382598][ T2031] tipc: Resetting bearer [ 2957.513508][ T2030] tipc: Resetting bearer [ 2957.702194][ T2030] tipc: Disabling bearer [ 2958.413215][ T2037] trusted_key: encrypted_key: keyword 'upd' not recognized [ 2958.806441][ T2048] netlink: 548 bytes leftover after parsing attributes in process `syz.4.8729'. [ 2960.176927][ T2055] hub 9-0:1.0: USB hub found [ 2960.188122][ T2055] hub 9-0:1.0: 1 port detected [ 2962.124742][ T2072] tipc: Started in network mode [ 2962.132068][ T2072] tipc: Node identity 3210d5fa961f, cluster identity 4711 [ 2962.151469][ T2072] tipc: Enabled bearer , priority 0 [ 2962.247901][ T2072] syzkaller0: entered promiscuous mode [ 2962.265773][ T2072] syzkaller0: entered allmulticast mode [ 2963.316509][ T1225] tipc: Node number set to 2752501242 [ 2963.324660][ T2074] tipc: Resetting bearer [ 2963.383712][ T2071] tipc: Resetting bearer [ 2963.533040][ T2071] tipc: Disabling bearer [ 2965.283038][ T2096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8742'. [ 2965.321385][ T2096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2966.198223][ T2107] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117.87.150326315.2007.15776.1 [ 2966.233812][ T2107] PKCS7: Only support pkcs7_signedData type [ 2966.300780][ T2107] net_ratelimit: 31 callbacks suppressed [ 2966.300811][ T2107] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2968.665889][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2969.326848][ T2128] netlink: 548 bytes leftover after parsing attributes in process `syz.7.8755'. [ 2971.279428][ T2133] bridge0: port 2(bridge_slave_1) entered disabled state [ 2971.286787][ T2133] bridge0: port 1(bridge_slave_0) entered disabled state [ 2971.819148][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2971.895413][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2972.270972][ T2165] 9pnet_fd: Insufficient options for proto=fd [ 2972.305407][ T2165] 9pnet: Unknown protocol version 9p200 [ 2973.361201][T17628] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2973.418351][T17628] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2973.547992][T17628] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2973.629427][ T1181] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2976.795098][ T1225] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 2976.817078][ T2201] pim6reg: entered allmulticast mode [ 2977.010460][ T1225] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 2977.054496][ T1225] usb 3-1: config 7 has no interface number 0 [ 2977.136420][ T1225] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2977.154874][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2977.175301][ T1225] usb 3-1: Product: syz [ 2977.179485][ T1225] usb 3-1: Manufacturer: syz [ 2977.194269][ T1225] usb 3-1: SerialNumber: syz [ 2979.753328][ T1225] as10x_usb: device has been detected [ 2979.822617][ T1225] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2979.864419][ T2229] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2979.879945][ T2229] block device autoloading is deprecated and will be removed. [ 2979.997294][ T1225] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2980.050565][ T1225] as10x_usb: error during firmware upload part1 [ 2980.119780][ T1225] Registered device Elgato EyeTV DTT Deluxe [ 2980.132437][ T1225] usb 3-1: USB disconnect, device number 68 [ 2980.278440][ T1225] Unregistered device Elgato EyeTV DTT Deluxe [ 2980.287902][ T1225] as10x_usb: device has been disconnected [ 2982.177715][ T2248] netlink: 548 bytes leftover after parsing attributes in process `syz.7.8786'. [ 2986.587367][T28450] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 2986.776273][T28450] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 2986.796986][T28450] usb 1-1: config 7 has no interface number 0 [ 2986.818025][T28450] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2986.844783][T28450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.900873][T28450] usb 1-1: Product: syz [ 2986.905334][T28450] usb 1-1: Manufacturer: syz [ 2986.909945][T28450] usb 1-1: SerialNumber: syz [ 2990.911734][T28450] as10x_usb: device has been detected [ 2990.931353][T28450] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2991.401945][ T2321] ALSA: mixer_oss: invalid OSS volume './file0' [ 2992.200857][T28450] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2992.340563][T28450] as10x_usb: error during firmware upload part1 [ 2992.349230][T28450] Registered device Elgato EyeTV DTT Deluxe [ 2992.399867][T28450] usb 1-1: USB disconnect, device number 53 [ 2992.586554][T28450] Unregistered device Elgato EyeTV DTT Deluxe [ 2992.591088][T28450] as10x_usb: device has been disconnected [ 2992.720668][ T2331] kAFS: No cell specified [ 2992.758631][ T2333] ufs: You didn't specify the type of your ufs filesystem [ 2992.758631][ T2333] [ 2992.758631][ T2333] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2992.758631][ T2333] [ 2992.758631][ T2333] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2992.789747][ T2333] ufs: ufstype=old is supported read-only [ 2993.109134][ T2337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8808'. [ 2994.156978][ T2343] tipc: Started in network mode [ 2994.373799][ T2343] tipc: Node identity 3648956b43ac, cluster identity 4711 [ 2994.400566][ T2343] tipc: Enabled bearer , priority 0 [ 2994.422561][ T2346] syzkaller0: entered promiscuous mode [ 2994.438352][ T2346] syzkaller0: entered allmulticast mode [ 2994.472868][ T2347] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 2994.553514][ T2350] tipc: Resetting bearer [ 2994.575948][ T2339] tipc: Resetting bearer [ 2994.630984][ T2339] tipc: Disabling bearer [ 2995.659074][ T2363] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2995.840349][ T5938] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 2996.025467][ T5938] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 2996.075365][ T5938] usb 3-1: config 7 has no interface number 0 [ 2996.108296][ T5938] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2996.150324][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2996.170753][ T5938] usb 3-1: Product: syz [ 2996.176336][ T5938] usb 3-1: Manufacturer: syz [ 2996.200465][ T5938] usb 3-1: SerialNumber: syz [ 2996.783880][ T2370] ALSA: mixer_oss: invalid OSS volume './file0' [ 2999.130430][ T5938] as10x_usb: device has been detected [ 2999.167177][ T5938] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2999.270090][ T5938] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2999.411793][ T2390] kAFS: No cell specified [ 2999.555315][ T5938] as10x_usb: error during firmware upload part1 [ 2999.562732][ T5938] Registered device Elgato EyeTV DTT Deluxe [ 2999.567453][ T5938] usb 3-1: USB disconnect, device number 69 [ 3000.928824][ T5938] Unregistered device Elgato EyeTV DTT Deluxe [ 3000.945949][ T5938] as10x_usb: device has been disconnected [ 3001.620494][T28450] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 3001.718843][ T2421] ALSA: mixer_oss: invalid OSS volume './file0' [ 3002.520268][T28450] usb 6-1: Using ep0 maxpacket: 8 [ 3002.832833][T28450] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3002.868673][T28450] usb 6-1: config 4 interface 0 has no altsetting 0 [ 3003.134762][T28450] usb 6-1: string descriptor 0 read error: -22 [ 3003.141726][T28450] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 3003.150955][T28450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3003.183675][T28450] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 3004.011906][T28450] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3004.060541][T28450] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 3004.091643][T28450] usb 6-1: media controller created [ 3004.232604][T28450] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3004.412822][ T2439] netlink: 548 bytes leftover after parsing attributes in process `syz.7.8837'. [ 3004.422314][T28450] zl10353_read_register: readreg error (reg=127, ret==0) [ 3004.664456][T28450] usb 6-1: USB disconnect, device number 119 [ 3005.066850][ T2449] 9pnet_fd: Insufficient options for proto=fd [ 3005.103649][ T2449] 9pnet: Unknown protocol version 9p200 [ 3005.875359][ T2450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8840'. [ 3006.891248][ T2464] netlink: 'syz.0.8843': attribute type 13 has an invalid length. [ 3008.183945][ T2467] kAFS: No cell specified [ 3009.124778][ T2480] syz2: rxe_newlink: already configured on veth1_to_team [ 3009.537359][ T2484] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 3009.588810][ T2484] team0: Port device batadv1 added [ 3010.154998][ T2484] hub 9-0:1.0: USB hub found [ 3010.163053][ T2484] hub 9-0:1.0: 1 port detected [ 3011.906011][T13876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3011.923207][T13876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3011.934378][T13876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3011.958119][T13876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3011.965988][T13876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3014.271852][T13876] Bluetooth: hci1: command tx timeout [ 3016.443277][T13876] Bluetooth: hci1: command tx timeout [ 3016.557462][ T2508] chnl_net:caif_netlink_parms(): no params data found [ 3018.530429][T13876] Bluetooth: hci1: command tx timeout [ 3018.577862][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 3018.600403][ T2508] bridge0: port 1(bridge_slave_0) entered disabled state [ 3019.405890][ T2508] bridge_slave_0: entered allmulticast mode [ 3019.470619][ T2508] bridge_slave_0: entered promiscuous mode [ 3019.491763][ T2508] bridge0: port 2(bridge_slave_1) entered blocking state [ 3019.530824][ T2508] bridge0: port 2(bridge_slave_1) entered disabled state [ 3019.538007][ T2508] bridge_slave_1: entered allmulticast mode [ 3019.549978][ T2508] bridge_slave_1: entered promiscuous mode [ 3019.964469][ T2508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3020.082588][ T2508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3020.337846][ T2508] team0: Port device team_slave_0 added [ 3020.373707][ T2508] team0: Port device team_slave_1 added [ 3020.590371][T13876] Bluetooth: hci1: command tx timeout [ 3021.049120][ T2508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3021.109109][ T2508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3021.360233][ T2508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3021.454880][ T2508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3021.493380][ T2508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3021.616587][ T2508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3022.217551][ T2508] hsr_slave_0: entered promiscuous mode [ 3022.923446][ T2508] hsr_slave_1: entered promiscuous mode [ 3022.930028][ T2508] debugfs: 'hsr0' already exists in 'hsr' [ 3023.110277][ T2508] Cannot create hsr debugfs directory [ 3026.686345][ T2639] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 3027.068951][ T2508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3029.375668][ T2508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3029.958082][ T2508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3030.106613][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 3030.258132][ T2508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3031.108663][ T2508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3031.807539][ T2508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3031.867477][ T2508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3031.954691][ T2508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3032.189215][ T2737] binder: BINDER_SET_CONTEXT_MGR already set [ 3032.204253][ T2737] binder: 2733:2737 ioctl 4018620d 200000000100 returned -16 [ 3033.145923][ T2508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3033.179772][ T2508] 8021q: adding VLAN 0 to HW filter on device team0 [ 3033.259519][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 3033.266760][ T6229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3033.319915][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 3033.327152][ T6229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3034.069456][ T2508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3034.144527][ T2508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3037.251729][ T2508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3038.567973][ T2508] veth0_vlan: entered promiscuous mode [ 3038.717132][ T2508] veth1_vlan: entered promiscuous mode [ 3039.333266][ T2508] veth0_macvtap: entered promiscuous mode [ 3040.353659][ T2508] veth1_macvtap: entered promiscuous mode [ 3040.720323][T28450] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 3040.813313][ T2508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3040.816315][ T2860] binder: BINDER_SET_CONTEXT_MGR already set [ 3040.842406][ T2508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3040.850370][ T2860] binder: 2859:2860 ioctl 4018620d 200000000100 returned -16 [ 3040.901509][T17628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3040.917082][T17628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3040.950851][T17628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3040.986192][T17628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3041.672684][ T2864] 9pnet_fd: Insufficient options for proto=fd [ 3041.681808][ T2864] 9pnet: Unknown protocol version 9p200 [ 3041.927525][T28450] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3041.973390][T28450] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3042.011421][T28450] usb 4-1: Product: syz [ 3042.018206][T28450] usb 4-1: Manufacturer: syz [ 3042.031341][T28450] usb 4-1: SerialNumber: syz [ 3042.052115][T28450] usb 4-1: config 0 descriptor?? [ 3043.367811][T28450] usb-storage 4-1:0.0: USB Mass Storage device detected [ 3043.525257][ T6357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3043.539396][T28450] usb 4-1: USB disconnect, device number 13 [ 3043.559432][ T6357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3043.810275][T26082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3043.832550][T26082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3045.676855][ T2913] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 3046.048474][ T2915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8953'. [ 3046.073241][ T2915] bridge_slave_1: left allmulticast mode [ 3046.079008][ T2915] bridge_slave_1: left promiscuous mode [ 3046.085150][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state [ 3046.928330][ T2917] 9pnet_fd: Insufficient options for proto=fd [ 3046.939114][ T2917] 9pnet: Unknown protocol version 9p200 [ 3047.073139][ T2915] bridge_slave_0: left allmulticast mode [ 3047.078863][ T2915] bridge_slave_0: left promiscuous mode [ 3047.113439][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state [ 3049.109286][ T5938] IPVS: starting estimator thread 0... [ 3049.210317][ T2935] IPVS: using max 28 ests per chain, 67200 per kthread [ 3049.238768][ T5914] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 3049.450254][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 3049.468409][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3049.487554][ T5914] usb 4-1: config 159 has an invalid interface number: 195 but max is 0 [ 3049.508793][ T5914] usb 4-1: config 159 has no interface number 0 [ 3049.552110][ T5914] usb 4-1: config 159 interface 195 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 3049.602408][ T5914] usb 4-1: config 159 interface 195 has no altsetting 0 [ 3049.624518][ T5914] usb 4-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 3049.640371][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3049.648770][ T5914] usb 4-1: Product: syz [ 3049.653287][ T5914] usb 4-1: Manufacturer: syz [ 3049.658942][ T5914] usb 4-1: SerialNumber: syz [ 3049.673168][ T2930] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3049.680668][ T5938] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 3049.858113][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3049.902700][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3049.943495][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3049.980647][ T5914] udl 4-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 3050.000633][ T5914] [drm:udl_init] *ERROR* Selecting channel failed [ 3050.019021][ T5938] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3050.053054][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3050.077079][ T5914] [drm] Initialized udl 0.0.1 for 4-1:159.195 on minor 2 [ 3050.099084][ T5938] usb 5-1: config 0 descriptor?? [ 3050.117870][ T5914] [drm] Initialized udl on minor 2 [ 3050.153396][ T5914] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3050.198095][ T5914] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 3050.230056][ T43] udl 4-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3050.249884][ T5914] usb 4-1: USB disconnect, device number 14 [ 3050.271325][ T43] udl 4-1:159.195: [drm] Cannot find any crtc or sizes [ 3050.706820][ T5938] plantronics 0003:047F:FFFF.006E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 3051.560409][ T2945] netlink: 548 bytes leftover after parsing attributes in process `syz.7.8963'. [ 3051.682732][ T5938] usb 5-1: USB disconnect, device number 92 [ 3051.992263][ T43] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 3052.290305][T20665] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 3052.332566][ T1225] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3052.385837][ T2960] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 3052.422814][ T43] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 3052.433661][ T43] usb 6-1: config 7 has no interface number 0 [ 3052.443017][ T43] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 3052.454197][ T5938] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 3052.462323][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.470604][ T43] usb 6-1: Product: syz [ 3052.476205][ T43] usb 6-1: Manufacturer: syz [ 3052.481073][ T43] usb 6-1: SerialNumber: syz [ 3052.632947][ T5938] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 3052.644044][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3052.666170][ T5938] usb 4-1: config 0 descriptor?? [ 3052.670254][T20665] usb 1-1: Using ep0 maxpacket: 16 [ 3052.681615][T20665] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=a2.43 [ 3052.690738][T20665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.698769][T20665] usb 1-1: Product: syz [ 3052.703019][T20665] usb 1-1: Manufacturer: syz [ 3052.707629][T20665] usb 1-1: SerialNumber: syz [ 3052.730315][ T1225] usb 3-1: Using ep0 maxpacket: 8 [ 3052.753243][ T1225] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 3052.784357][T20665] usb 1-1: config 0 descriptor?? [ 3052.814821][ T1225] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3052.868432][ T1225] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3052.895367][ T1225] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3052.909306][ T1225] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3053.289406][ T1225] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3053.310636][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3053.392467][T20665] usb 1-1: Cannot retrieve CPort count: -110 [ 3053.398628][T20665] usb 1-1: Cannot retrieve CPort count: -110 [ 3053.425597][T20665] es2_ap_driver 1-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 3053.916503][ T1225] usb 3-1: GET_CAPABILITIES returned 0 [ 3053.928285][ T1225] usbtmc 3-1:16.0: can't read capabilities [ 3054.876722][ T2957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3054.887016][ T2957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.899290][ T2957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3054.919357][ T2957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.960468][T27653] usb 3-1: USB disconnect, device number 70 [ 3055.021890][ T43] as10x_usb: device has been detected [ 3055.028433][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 3055.136095][ T7724] usb 1-1: USB disconnect, device number 54 [ 3055.162622][ T43] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 3055.201419][ T43] as10x_usb: error during firmware upload part1 [ 3055.210344][ T1225] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 3055.212168][ T43] Registered device Elgato EyeTV DTT Deluxe [ 3055.244768][ T43] usb 6-1: USB disconnect, device number 120 [ 3055.394111][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3055.567607][ T43] Unregistered device Elgato EyeTV DTT Deluxe [ 3055.568539][ T1225] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3055.590577][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3055.694163][ T7724] IPVS: starting estimator thread 0... [ 3055.800788][ T2984] IPVS: using max 22 ests per chain, 52800 per kthread [ 3056.352411][ T43] as10x_usb: device has been disconnected [ 3056.368832][ T1225] usb 5-1: config 0 descriptor?? [ 3056.851519][ T5938] pegasus 4-1:0.0: setup Pegasus II specific registers [ 3056.930414][ T43] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 3057.074952][ T1225] keytouch 0003:0926:3333.006F: fixing up Keytouch IEC report descriptor [ 3057.160435][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 3057.269544][ T43] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 3057.296628][ T5938] pegasus 4-1:0.0: can't locate MII phy, using default [ 3057.327220][ T1225] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.006F/input/input80 [ 3057.335620][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3057.397544][ T5938] pegasus 4-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 0a:0e:55:71:dd:17 [ 3057.411670][ T43] usb 6-1: Product: syz [ 3057.430215][ T43] usb 6-1: Manufacturer: syz [ 3057.447571][ T43] usb 6-1: SerialNumber: syz [ 3057.459207][ T5938] usb 4-1: USB disconnect, device number 15 [ 3057.487113][ T43] usb 6-1: config 0 descriptor?? [ 3057.575232][ T43] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 3057.615155][ T1225] keytouch 0003:0926:3333.006F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 3058.150479][ T1762] usb 5-1: USB disconnect, device number 93 [ 3058.157808][ T3002] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 3058.202734][ T2979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3058.494978][ T2979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3058.754448][ T2979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3058.783303][ T2979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3058.817924][ T43] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 3058.840580][ T43] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3058.862253][ T43] usb 6-1: USB disconnect, device number 121 [ 3058.930318][ T5938] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 3059.104608][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 3059.123483][ T5938] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3059.145780][ T5938] usb 1-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 3059.802020][T28450] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 3059.810648][ T1225] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 3059.846136][ T5938] usb 1-1: config 1 interface 0 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3059.859255][ T5938] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3059.870518][ T5938] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3059.879571][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3059.887910][ T5938] usb 1-1: Product: syz [ 3059.892141][ T5938] usb 1-1: Manufacturer: syz [ 3059.896747][ T5938] usb 1-1: SerialNumber: syz [ 3059.960293][ T7724] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3059.970574][T20665] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 3059.979122][ T1225] usb 5-1: Using ep0 maxpacket: 16 [ 3059.986333][T28450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3059.997977][T28450] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3060.007375][T28450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.016236][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3060.030871][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3060.041712][T28450] usb 4-1: config 0 descriptor?? [ 3060.046925][ T1225] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 3060.056073][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.071704][ T1225] usb 5-1: config 0 descriptor?? [ 3060.113009][ T7724] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3060.120098][ T5938] cdc_ether 1-1:1.0: skipping garbage [ 3060.124865][ T7724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3060.130346][ T5938] cdc_ether 1-1:1.0: skipping garbage [ 3060.142523][ T7724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3060.157788][ T5938] cdc_ether 1-1:1.0: skipping garbage [ 3060.160874][ T7724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3060.176316][ T5938] cdc_ether 1-1:1.0: skipping garbage [ 3060.176931][ T7724] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3060.182828][ T5938] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 3060.192259][T20665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3060.211734][T20665] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3060.221164][ T7724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.229379][T20665] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.230854][ T5938] usb 1-1: USB disconnect, device number 55 [ 3060.248235][ T7724] usb 3-1: config 0 descriptor?? [ 3060.254957][T20665] usb 6-1: config 0 descriptor?? [ 3060.308459][T28450] usbhid 4-1:0.0: can't add hid device: -71 [ 3060.314795][T28450] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3060.326034][T28450] usb 4-1: USB disconnect, device number 16 [ 3060.519917][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.527454][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.534730][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.543656][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.551289][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.558417][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.565499][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.572676][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.579767][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.596576][ T1225] macally 0003:060B:0001.0070: unknown main item tag 0x0 [ 3060.614136][ T1225] macally 0003:060B:0001.0070: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 3060.675261][T20665] keytouch 0003:0926:3333.0071: fixing up Keytouch IEC report descriptor [ 3060.688948][T20665] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0071/input/input81 [ 3060.735175][ T7724] plantronics 0003:047F:FFFF.0072: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3060.770355][ T5938] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 3060.787589][ T7724] usb 5-1: USB disconnect, device number 94 [ 3060.798955][T20665] keytouch 0003:0926:3333.0071: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 3061.067055][ T7724] usb 3-1: USB disconnect, device number 71 [ 3061.211016][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 3061.219180][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3061.230517][ T5938] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3061.240148][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3061.251865][ T5938] usb 4-1: config 0 descriptor?? [ 3061.265438][ T5938] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3061.278990][ T5938] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3061.972151][ T3011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3061.998963][ T3011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3062.023209][ T3011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3062.385475][ T3011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3062.440310][ T7724] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 3062.730980][ T7724] usb 3-1: Using ep0 maxpacket: 8 [ 3062.886903][T20665] usb 6-1: USB disconnect, device number 122 [ 3062.924375][ T7724] usb 3-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 3062.962020][ T7724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3063.165338][ T7724] usb 3-1: Product: syz [ 3063.169555][ T7724] usb 3-1: Manufacturer: syz [ 3063.189330][ T1225] usb 4-1: USB disconnect, device number 17 [ 3063.202897][ T7724] usb 3-1: SerialNumber: syz [ 3063.226177][ T7724] usb 3-1: config 0 descriptor?? [ 3063.236117][ T1225] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 3063.255360][ T7724] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 3064.031498][ T3052] syz2: rxe_newlink: already configured on veth1_to_team [ 3064.109947][ T3028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3064.132586][ T3028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3064.250297][ T1225] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 3064.410454][ T7724] gspca_zc3xx: reg_w_i err -110 [ 3064.423277][ T1225] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3064.443918][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3064.470649][ T1225] usb 4-1: config 0 descriptor?? [ 3064.489187][ T1225] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3064.592284][ T3028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3064.610622][ T3028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3065.270449][ T7724] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 3065.294967][ T7724] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 3065.384772][ T7724] usb 3-1: USB disconnect, device number 72 [ 3066.408188][ T1225] usb 4-1: USB disconnect, device number 18 [ 3067.367088][ T5938] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 3067.651711][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 3067.708191][ T5938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3067.782788][ T5938] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3067.970383][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3067.978602][ T5938] usb 5-1: Product: syz [ 3068.010669][ T5938] usb 5-1: Manufacturer: syz [ 3068.015297][ T5938] usb 5-1: SerialNumber: syz [ 3068.056284][ T5938] usb 5-1: config 0 descriptor?? [ 3068.068986][ T3075] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3068.094933][ T5938] hub 5-1:0.0: bad descriptor, ignoring hub [ 3068.130385][ T5938] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3068.257964][ T3085] syzkaller0: entered promiscuous mode [ 3068.267430][ T3085] syzkaller0: entered allmulticast mode [ 3069.143585][ T1762] usb 5-1: USB disconnect, device number 95 [ 3069.332520][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 3069.403067][T31615] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 3069.500358][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 3069.515347][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3069.535028][ T1762] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 3069.548280][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3069.564844][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3069.565004][T31615] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3069.575148][T31615] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3069.598856][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.618279][ T43] usb 4-1: config 0 descriptor?? [ 3069.621053][T31615] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3069.632915][T31615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.666969][T31615] usb 1-1: config 0 descriptor?? [ 3069.685089][T31615] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 3069.724162][ T1762] usb 5-1: Using ep0 maxpacket: 32 [ 3069.733557][ T1762] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3069.748564][ T1762] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3069.759739][ T1762] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3069.770019][ T1762] usb 5-1: Product: syz [ 3069.788777][ T1762] usb 5-1: Manufacturer: syz [ 3069.798139][ T1762] usb 5-1: SerialNumber: syz [ 3069.807828][ T1762] usb 5-1: config 0 descriptor?? [ 3069.814201][ T3075] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3069.823909][ T1762] hub 5-1:0.0: bad descriptor, ignoring hub [ 3069.831205][ T1762] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3070.067752][ T43] savu 0003:1E7D:2D5A.0073: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 3070.301855][ T1225] usb 4-1: USB disconnect, device number 19 [ 3070.469670][ T3108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3070.492185][ T3108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3071.771094][ T43] usb 5-1: USB disconnect, device number 96 [ 3072.492619][ T7724] usb 1-1: USB disconnect, device number 56 [ 3072.562651][T31615] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 3072.697047][ T3142] tipc: Enabled bearer , priority 0 [ 3072.724647][ T3142] syzkaller0: entered promiscuous mode [ 3072.733325][T31615] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 3072.756492][ T3142] syzkaller0: entered allmulticast mode [ 3072.772322][T31615] usb 4-1: config 0 has no interface number 0 [ 3072.790921][ T1225] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 3072.810384][T31615] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3072.861990][T31615] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3072.895851][T31615] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3072.918529][T31615] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3072.946757][ T3145] tipc: Resetting bearer [ 3072.974865][ T3141] tipc: Resetting bearer [ 3073.001738][T31615] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3073.012888][ T1225] usb 5-1: config 48 has an invalid interface number: 213 but max is 0 [ 3073.021453][ T1225] usb 5-1: config 48 has no interface number 0 [ 3073.040407][T31615] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3073.063998][ T1225] usb 5-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=a5.79 [ 3073.080767][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3073.084828][ T3141] tipc: Disabling bearer [ 3073.094513][T31615] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3073.110387][ T1225] usb 5-1: Product: syz [ 3073.117311][ T1225] usb 5-1: Manufacturer: syz [ 3073.130373][T31615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3073.152308][ T1225] usb 5-1: SerialNumber: syz [ 3073.188211][T31615] usb 4-1: config 0 descriptor?? [ 3073.198319][ T1225] uvcvideo 5-1:48.213: Found Unit with invalid ID 0 [ 3073.213243][ T1225] uvcvideo 5-1:48.213: Found UVC 0.00 device syz (05a9:264a) [ 3073.214053][ T3137] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3073.236574][ T1225] uvcvideo 5-1:48.213: No valid video chain found. [ 3073.252703][ T3137] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3073.280472][T31615] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3073.431765][ T1225] usb 5-1: USB disconnect, device number 97 [ 3073.572912][ T43] usb 4-1: USB disconnect, device number 20 [ 3073.589834][ T43] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 3073.650421][T31615] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 3073.810456][T31615] usb 1-1: Using ep0 maxpacket: 32 [ 3073.821673][T31615] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3073.829785][T31615] usb 1-1: config 0 has no interface number 0 [ 3073.849101][T31615] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3073.885747][T31615] usb 1-1: config 0 interface 1 has no altsetting 0 [ 3073.907608][T31615] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3073.926993][T31615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3073.947217][T31615] usb 1-1: Product: syz [ 3073.952779][T31615] usb 1-1: Manufacturer: syz [ 3073.967956][T31615] usb 1-1: SerialNumber: syz [ 3073.994683][T31615] usb 1-1: config 0 descriptor?? [ 3074.772614][T31615] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3074.790866][ T1225] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 3074.813975][T31615] cx231xx 1-1:0.1: Failed to read PCB config [ 3074.835695][T31615] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 3074.853022][T31615] usb 1-1: USB disconnect, device number 57 [ 3076.198862][T31615] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 3076.218777][ T1225] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3076.253502][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3076.276572][ T1225] usb 5-1: Product: syz [ 3076.285570][ T1225] usb 5-1: Manufacturer: syz [ 3076.290380][ T1225] usb 5-1: SerialNumber: syz [ 3076.299684][ T1225] usb 5-1: config 0 descriptor?? [ 3076.305408][ T3165] 9pnet_fd: Insufficient options for proto=fd [ 3076.308653][ T3165] 9pnet: Unknown protocol version 9p200 [ 3076.390298][T31615] usb 1-1: Using ep0 maxpacket: 32 [ 3076.403308][T31615] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3076.414175][T31615] usb 1-1: config 0 has no interface number 0 [ 3076.440473][T31615] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3076.478458][T31615] usb 1-1: config 0 interface 1 has no altsetting 0 [ 3076.564052][ T1225] hso 5-1:0.0: Can't find BULK IN endpoint [ 3076.571171][T31615] usb 1-1: string descriptor 0 read error: -71 [ 3076.597729][ T1225] usb-storage 5-1:0.0: USB Mass Storage device detected [ 3076.606659][T31615] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3076.645011][T31615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3076.687156][T31615] usb 1-1: config 0 descriptor?? [ 3076.719353][T31615] usb 1-1: can't set config #0, error -71 [ 3076.741375][T31615] usb 1-1: USB disconnect, device number 58 [ 3076.832317][ T1762] usb 5-1: USB disconnect, device number 98 [ 3077.486514][ T3183] netlink: 548 bytes leftover after parsing attributes in process `syz.2.9045'. [ 3078.380584][ T5914] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 3078.588266][ T5914] usb 4-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3078.612514][ T5914] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3078.636924][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3078.647055][ T5914] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 3078.673579][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3078.701440][ T5914] usb 4-1: config 0 descriptor?? [ 3078.860748][ T1762] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 3079.035995][ T1762] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3079.060842][ T1762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3079.103303][ T1762] usb 3-1: config 0 descriptor?? [ 3079.121691][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 3079.127734][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3079.138929][ T1762] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3079.164641][ T5914] usb 4-1: USB disconnect, device number 21 [ 3079.231401][ T3220] netlink: 548 bytes leftover after parsing attributes in process `syz.4.9061'. [ 3080.301046][ T1225] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 3081.037404][ T1762] usb 3-1: USB disconnect, device number 73 [ 3081.074031][ T1225] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3081.101276][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3081.130593][ T1225] usb 4-1: Product: syz [ 3081.134799][ T1225] usb 4-1: Manufacturer: syz [ 3081.139409][ T1225] usb 4-1: SerialNumber: syz [ 3081.163733][ T1225] usb 4-1: config 0 descriptor?? [ 3081.389480][ T1225] hso 4-1:0.0: Can't find BULK IN endpoint [ 3081.409023][ T1225] usb-storage 4-1:0.0: USB Mass Storage device detected [ 3081.626488][ T5914] usb 4-1: USB disconnect, device number 22 [ 3081.860380][ T1225] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 3082.050829][ T1225] usb 6-1: Using ep0 maxpacket: 16 [ 3082.059779][ T1225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3082.071775][ T1225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3082.082067][ T1225] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3082.093494][ T1225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3082.124923][ T1225] usb 6-1: config 0 descriptor?? [ 3082.220305][ T1762] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3082.387761][ T1762] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3082.420145][ T1762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3082.439227][ T1762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3082.458698][ T1762] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3082.473261][ T1762] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3082.483093][ T1762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3082.525258][ T1762] usb 3-1: config 0 descriptor?? [ 3082.578561][ T1225] usbhid 6-1:0.0: can't add hid device: -71 [ 3082.585223][ T1225] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3082.596336][ T1225] usb 6-1: USB disconnect, device number 123 [ 3082.823549][ T7724] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 3083.001941][ T7724] usb 4-1: Using ep0 maxpacket: 16 [ 3083.012632][ T7724] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 3083.027607][ T7724] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 3083.036066][T28450] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3083.044005][ T7724] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 3083.057937][ T7724] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 3083.068495][ T7724] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3083.087917][ T7724] usb 4-1: config 0 has no interface number 0 [ 3083.094227][ T7724] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 3083.113710][ T1762] hid_parser_main: 1261 callbacks suppressed [ 3083.113820][ T1762] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 3083.120885][ T7724] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 3083.184642][ T1762] plantronics 0003:047F:FFFF.0074: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3083.193773][ T7724] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3083.218424][T28450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3083.249277][ T7724] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3083.262641][T28450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3083.276704][T28450] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3083.286043][ T7724] usb 4-1: config 0 interface 125 has no altsetting 0 [ 3083.293091][T28450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3083.301261][ T7724] usb 4-1: config 0 interface 125 has no altsetting 2 [ 3083.315178][ T7724] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 3083.324699][ T7724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3083.333676][T28450] usb 1-1: config 0 descriptor?? [ 3083.340610][ T7724] usb 4-1: Product: syz [ 3083.348053][ T7724] usb 4-1: Manufacturer: syz [ 3083.356138][ T7724] usb 4-1: SerialNumber: syz [ 3083.374599][ T7724] usb 4-1: config 0 descriptor?? [ 3083.395530][ T7724] usb 4-1: selecting invalid altsetting 2 [ 3083.402152][ T43] usb 3-1: USB disconnect, device number 74 [ 3083.799463][T28450] cm6533_jd 0003:0D8C:0022.0075: unknown main item tag 0x0 [ 3083.809621][T28450] cm6533_jd 0003:0D8C:0022.0075: unknown main item tag 0x0 [ 3083.818737][T28450] cm6533_jd 0003:0D8C:0022.0075: unknown main item tag 0x0 [ 3083.828993][T28450] cm6533_jd 0003:0D8C:0022.0075: unknown main item tag 0x0 [ 3083.829066][ T3265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3083.837648][T28450] cm6533_jd 0003:0D8C:0022.0075: unknown main item tag 0x0 [ 3083.845371][ T3265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3083.916708][T28450] cm6533_jd 0003:0D8C:0022.0075: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 3083.975072][ T3265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3084.059108][ T3265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.313464][ T3265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3084.353011][ T3265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.429066][ T7724] get_1284_register timeout [ 3084.430614][ T43] usb 1-1: USB disconnect, device number 59 [ 3084.458693][ C0] usb 4-1: async_complete: urb error -104 [ 3084.464584][ C0] usb 4-1: async_complete: urb error -104 [ 3084.470457][ C0] usb 4-1: async_complete: urb error -104 [ 3084.538255][ T3265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3084.572488][ T7724] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 3084.591427][ T3265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.692294][ T7724] usb 4-1: USB disconnect, device number 23 [ 3085.288874][ T3290] netlink: 548 bytes leftover after parsing attributes in process `syz.5.9088'. [ 3085.690681][ T7724] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3085.852040][ T7724] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3085.874534][ T5914] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 3085.900516][ T7724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3085.960283][ T7724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3086.013850][ T7724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3086.050353][ T7724] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3086.067313][ T7724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3086.091253][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 3086.108688][ T7724] usb 1-1: config 0 descriptor?? [ 3086.118528][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3086.156253][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3086.190263][ T5914] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 3086.218370][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3086.241366][ T5914] usb 6-1: config 0 descriptor?? [ 3086.470446][ T1225] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 3086.563704][ T7724] plantronics 0003:047F:FFFF.0076: unknown main item tag 0x0 [ 3086.640294][ T1225] usb 4-1: Using ep0 maxpacket: 8 [ 3086.667580][ T7724] plantronics 0003:047F:FFFF.0076: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3086.688485][ T1225] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 3086.708406][ T1225] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3086.736202][ T1225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3086.768030][ T1225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3086.795243][ T1225] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3086.825111][ T1225] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3086.849112][ T7724] usb 1-1: USB disconnect, device number 60 [ 3086.876704][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3087.070341][ T5914] usbhid 6-1:0.0: can't add hid device: -71 [ 3087.076432][ T5914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3087.132804][ T5914] usb 6-1: USB disconnect, device number 124 [ 3087.142108][ T1225] usb 4-1: usb_control_msg returned -32 [ 3087.155132][ T1225] usbtmc 4-1:16.0: can't read capabilities [ 3087.741140][ T5914] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3087.910394][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 3087.927758][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3087.971841][ T5914] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3087.996005][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3088.014869][ T5914] usb 3-1: Product: syz [ 3088.025075][ T5914] usb 3-1: Manufacturer: syz [ 3088.029729][ T5914] usb 3-1: SerialNumber: syz [ 3088.047722][ T5914] usb 3-1: config 0 descriptor?? [ 3088.057228][ T3317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3088.066360][ T5914] hub 3-1:0.0: bad descriptor, ignoring hub [ 3088.072655][ T5914] hub 3-1:0.0: probe with driver hub failed with error -5 [ 3088.320645][ T1225] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3088.501543][ T1225] usb 1-1: Using ep0 maxpacket: 16 [ 3088.515803][ T1225] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 3088.534879][ T1225] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 3088.553611][ T1225] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 3088.568598][ T1225] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 3088.577374][ T1225] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3088.589003][ T1225] usb 1-1: config 0 has no interface number 0 [ 3088.605505][ T1225] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 3088.619749][ T1225] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 3088.630397][ T1225] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3088.643230][ T1225] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3088.666865][ T1225] usb 1-1: config 0 interface 125 has no altsetting 0 [ 3088.682951][ T1225] usb 1-1: config 0 interface 125 has no altsetting 2 [ 3088.705113][ T1225] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 3088.716295][ T3317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3088.729346][ T1225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3088.740729][ T3317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3088.758809][ T1225] usb 1-1: Product: syz [ 3088.763148][ T1225] usb 1-1: Manufacturer: syz [ 3088.767767][ T1225] usb 1-1: SerialNumber: syz [ 3088.776019][ T1225] usb 1-1: config 0 descriptor?? [ 3088.785891][ T1225] usb 1-1: selecting invalid altsetting 2 [ 3088.990318][ T5914] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 3089.203586][ T3331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3089.223661][ T3331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.294748][ T3331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3089.335116][ T3331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.408895][T28450] usb 4-1: USB disconnect, device number 24 [ 3089.494916][T31615] usb 3-1: USB disconnect, device number 75 [ 3089.585675][ T3331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3089.621560][ T3331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.653899][ T3331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3089.673166][ T3331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.694313][ C0] usb 1-1: async_complete: urb error -71 [ 3089.700112][ C0] usb 1-1: async_complete: urb error -71 [ 3089.705896][ C0] usb 1-1: async_complete: urb error -71 [ 3089.740769][ T1225] get_1284_register: usb error -71 [ 3089.746034][ T1225] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 3089.764457][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3089.775574][ T1225] usb 1-1: USB disconnect, device number 61 [ 3089.802014][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3089.850301][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3089.860088][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3089.880275][T20665] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3089.899609][ T5914] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3089.911874][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3089.925495][ T5914] usb 6-1: config 0 descriptor?? [ 3090.060547][T20665] usb 3-1: Using ep0 maxpacket: 32 [ 3090.072204][T20665] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3090.092438][T20665] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3090.103615][T20665] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3090.114447][T20665] usb 3-1: Product: syz [ 3090.118621][T20665] usb 3-1: Manufacturer: syz [ 3090.123293][T20665] usb 3-1: SerialNumber: syz [ 3090.131489][T20665] usb 3-1: config 0 descriptor?? [ 3090.141589][ T3317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3090.155242][T20665] hub 3-1:0.0: bad descriptor, ignoring hub [ 3090.161461][T20665] hub 3-1:0.0: probe with driver hub failed with error -5 [ 3090.447286][ T3317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3090.466294][ T3317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3090.514411][ T3317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3090.543112][ T3317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3090.700851][T20665] usb 3-1: USB disconnect, device number 76 [ 3091.031998][ T5914] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0 [ 3091.107435][ T3369] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 3091.591014][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 3091.860635][ T5914] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3091.893643][ T5914] usb 6-1: USB disconnect, device number 125 [ 3094.130326][ T5914] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 3094.151091][ T1225] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 3095.196614][ T1225] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3095.234635][ T1225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3095.271754][ T1225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3095.300925][ T1225] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3095.346964][ T5914] usb 1-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3095.365019][ T1225] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3095.380716][ T5914] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3095.400240][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3095.406877][ T5914] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 3095.410601][ T1225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3095.461617][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3095.492099][ T1225] usb 6-1: config 0 descriptor?? [ 3095.502979][ T5914] usb 1-1: config 0 descriptor?? [ 3095.924843][ T1225] plantronics 0003:047F:FFFF.0078: unknown main item tag 0x0 [ 3095.974556][ T1225] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3095.984654][ T3436] 9pnet_fd: Insufficient options for proto=fd [ 3096.006535][ T5914] usbhid 1-1:0.0: can't add hid device: -71 [ 3096.031417][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3096.080097][ T3436] 9pnet: Unknown protocol version 9p200 [ 3096.089365][ T5914] usb 1-1: USB disconnect, device number 62 [ 3096.169518][T20665] usb 6-1: USB disconnect, device number 126 [ 3096.590278][T28450] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 3096.793621][T28450] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3096.840325][T28450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3096.880418][T28450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3096.930332][T28450] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3096.970565][T28450] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3097.000058][T28450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3097.044119][T28450] usb 5-1: config 0 descriptor?? [ 3097.434021][ T3455] ufs: You didn't specify the type of your ufs filesystem [ 3097.434021][ T3455] [ 3097.434021][ T3455] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 3097.434021][ T3455] [ 3097.434021][ T3455] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 3097.464739][ C1] vkms_vblank_simulate: vblank timer overrun [ 3097.479345][T28450] usbhid 5-1:0.0: can't add hid device: -71 [ 3097.489498][T28450] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3097.560714][T28450] usb 5-1: USB disconnect, device number 99 [ 3097.592463][ T3455] ufs: ufstype=old is supported read-only [ 3097.919356][ T3459] loop3: detected capacity change from 0 to 512 [ 3097.950276][ T5914] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 3097.971848][ T3459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3098.096626][ T3464] loop4: detected capacity change from 0 to 512 [ 3098.110245][ T3464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3098.120382][ T5914] usb 1-1: device descriptor read/64, error -71 [ 3098.153065][T29922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3098.193531][ T3464] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 3098.272392][ T3464] EXT4-fs (loop4): 1 truncate cleaned up [ 3098.307532][ T3464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3098.350688][ T3464] EXT4-fs error (device loop4): ext4_lookup:1787: inode #16: comm syz.4.9151: iget: bad i_size value: 5497558147880 [ 3098.380455][ T5914] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 3098.402151][ T3467] EXT4-fs (loop4): shut down requested (2) [ 3098.540505][ T5914] usb 1-1: device descriptor read/64, error -71 [ 3098.661470][ T5914] usb usb1-port1: attempt power cycle [ 3099.033113][ T5914] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 3099.116604][ T5914] usb 1-1: device descriptor read/8, error -71 [ 3099.410621][ T5914] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 3099.553395][T28678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3099.584975][ T5914] usb 1-1: device descriptor read/8, error -71 [ 3100.452953][ C1] vkms_vblank_simulate: vblank timer overrun [ 3100.532239][ T5914] usb usb1-port1: unable to enumerate USB device [ 3100.603117][ T3478] loop3: detected capacity change from 0 to 8 [ 3100.644575][ T3478] squashfs image failed sanity check [ 3101.130479][T20665] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 3101.362701][T20665] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3101.478507][T20665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.741004][T20665] usb 4-1: config 0 descriptor?? [ 3101.776282][T20665] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3101.965704][ T43] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 3102.144635][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3102.174339][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3102.205366][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3102.230250][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3102.252850][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3102.267300][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3102.282780][ T43] usb 6-1: config 0 descriptor?? [ 3102.440371][T31615] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 3102.614648][T31615] usb 1-1: Using ep0 maxpacket: 16 [ 3102.623993][T31615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3102.638593][T31615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3102.649403][T31615] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3102.659068][T31615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3102.676114][T31615] usb 1-1: config 0 descriptor?? [ 3102.711573][ T43] plantronics 0003:047F:FFFF.0079: unknown main item tag 0x0 [ 3102.743274][ T43] plantronics 0003:047F:FFFF.0079: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3102.800780][ T3505] bridge_slave_0: left allmulticast mode [ 3102.806519][ T3505] bridge_slave_0: left promiscuous mode [ 3102.812740][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 3102.827699][ T3505] bridge_slave_1: left allmulticast mode [ 3102.859349][ T3505] bridge_slave_1: left promiscuous mode [ 3102.865936][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 3102.883363][ T3505] bond0: (slave bond_slave_0): Releasing backup interface [ 3102.912230][ T3505] bond0: (slave bond_slave_1): Releasing backup interface [ 3102.930863][ T43] usb 6-1: USB disconnect, device number 127 [ 3102.953810][ T3505] team0: Port device team_slave_0 removed [ 3102.994097][ T3505] team0: Port device team_slave_1 removed [ 3103.021906][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3103.029366][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3103.068293][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3103.086879][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3103.099684][ T3505] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3103.101029][T31615] usbhid 1-1:0.0: can't add hid device: -71 [ 3103.147050][T31615] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3103.150372][T27653] syz2: Port: 1 Link DOWN [ 3103.188861][T31615] usb 1-1: USB disconnect, device number 67 [ 3103.215228][T20665] usb 4-1: USB disconnect, device number 25 [ 3105.099630][ T3518] loop2: detected capacity change from 0 to 256 [ 3105.159216][ T3518] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3105.237689][ T3518] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 3105.283409][ T3518] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 3105.334877][ T3518] exFAT-fs (loop2): failed to load alloc-bitmap [ 3105.360747][ T3518] exFAT-fs (loop2): failed to recognize exfat type [ 3105.372500][ T3526] loop5: detected capacity change from 0 to 128 [ 3105.404095][ T3526] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 3105.430367][T31615] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 3105.474960][ T3526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3105.590377][T31615] usb 1-1: device descriptor read/64, error -71 [ 3105.780485][ T43] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 3105.938651][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3105.950295][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3105.961410][ T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3105.970901][T27653] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 3105.978535][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3105.990255][ T43] usb 5-1: config 0 descriptor?? [ 3105.990275][T31615] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 3106.130662][T27653] usb 4-1: Using ep0 maxpacket: 8 [ 3106.130842][T31615] usb 1-1: device descriptor read/64, error -71 [ 3106.147925][T27653] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 3106.157485][T27653] usb 4-1: config 179 has no interface number 0 [ 3106.168378][T27653] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3106.180375][T27653] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3106.193467][T27653] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3106.223853][T27653] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 3106.250850][T31615] usb usb1-port1: attempt power cycle [ 3106.254564][T27653] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3106.292002][T27653] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3106.313172][T27653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3106.359861][ T3540] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 3106.455819][ T43] cm6533_jd 0003:0D8C:0022.007A: unknown main item tag 0x0 [ 3106.477083][ T43] cm6533_jd 0003:0D8C:0022.007A: unknown main item tag 0x0 [ 3106.560316][ T43] cm6533_jd 0003:0D8C:0022.007A: unknown main item tag 0x0 [ 3106.567872][ T43] cm6533_jd 0003:0D8C:0022.007A: unknown main item tag 0x0 [ 3106.576754][ T43] cm6533_jd 0003:0D8C:0022.007A: unknown main item tag 0x0 [ 3106.600417][T31615] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 3106.615199][ T43] cm6533_jd 0003:0D8C:0022.007A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 3106.642304][T31615] usb 1-1: device descriptor read/8, error -71 [ 3106.838944][T28450] usb 4-1: USB disconnect, device number 26 [ 3106.838985][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 3106.853353][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3106.862932][ C1] ================================================================== [ 3106.871002][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x26f/0x2b0 [ 3106.878838][ C1] Read of size 4 at addr ffff88807f07e05c by task syz.7.9181/3546 [ 3106.886657][ C1] [ 3106.888986][ C1] CPU: 1 UID: 0 PID: 3546 Comm: syz.7.9181 Not tainted syzkaller #0 PREEMPT(full) [ 3106.889035][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3106.889061][ C1] Call Trace: [ 3106.889074][ C1] [ 3106.889090][ C1] dump_stack_lvl+0x116/0x1f0 [ 3106.889146][ C1] print_report+0xcd/0x630 [ 3106.889181][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.889230][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.889276][ C1] ? __phys_addr+0xe8/0x180 [ 3106.889334][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 3106.889378][ C1] kasan_report+0xe0/0x110 [ 3106.889416][ C1] ? do_raw_spin_lock+0x26f/0x2b0 [ 3106.889467][ C1] do_raw_spin_lock+0x26f/0x2b0 [ 3106.889512][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3106.889558][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.889611][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 3106.889651][ C1] ? __wake_up+0x1c/0x60 [ 3106.889703][ C1] __wake_up+0x1c/0x60 [ 3106.889758][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 3106.889815][ C1] __usb_hcd_giveback_urb+0x3d5/0x610 [ 3106.889863][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 3106.889906][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.889958][ C1] dummy_timer+0x1809/0x3a00 [ 3106.890019][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 3106.890068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.890124][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.890173][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.890220][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3106.890258][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.890302][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 3106.890351][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 3106.890396][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 3106.890457][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.890504][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3106.890554][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3106.890603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.890651][ C1] ? mark_held_locks+0x49/0x80 [ 3106.890712][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3106.890757][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3106.890826][ C1] __hrtimer_run_queues+0x202/0xad0 [ 3106.890885][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 3106.890933][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.890990][ C1] hrtimer_run_softirq+0x17d/0x350 [ 3106.891043][ C1] handle_softirqs+0x219/0x8e0 [ 3106.891104][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3106.891155][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.891207][ C1] __irq_exit_rcu+0x109/0x170 [ 3106.891254][ C1] irq_exit_rcu+0x9/0x30 [ 3106.891301][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3106.891343][ C1] [ 3106.891356][ C1] [ 3106.891372][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3106.891415][ C1] RIP: 0010:filemap_map_pages+0x1db/0x1b70 [ 3106.891469][ C1] Code: da 48 8d 84 24 00 01 00 00 48 89 c7 48 89 44 24 78 e8 29 b0 ff ff 49 89 c7 48 85 c0 0f 84 96 15 00 00 e8 c8 85 c8 ff 4c 89 f2 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 17 [ 3106.891509][ C1] RSP: 0018:ffffc9000f01f670 EFLAGS: 00000246 [ 3106.891541][ C1] RAX: 0000000000080000 RBX: 000000000000030f RCX: ffffc9001613b000 [ 3106.891566][ C1] RDX: ffffc9000f01f9a0 RSI: ffffffff81f47438 RDI: 0000000000000006 [ 3106.891592][ C1] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000300 [ 3106.891616][ C1] R10: 0000000000000b36 R11: 0000000000000001 R12: ffffc9000f01f9b0 [ 3106.891641][ C1] R13: 0000000000000100 R14: ffffc9000f01f9a0 R15: ffffea00004a7680 [ 3106.891677][ C1] ? filemap_map_pages+0x1d8/0x1b70 [ 3106.891731][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 3106.891789][ C1] ? folio_add_file_rmap_ptes+0xa1f/0xdb0 [ 3106.891840][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.891892][ C1] ? __lock_acquire+0x622/0x1c90 [ 3106.891958][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3106.892014][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.892070][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3106.892124][ C1] do_pte_missing+0xe33/0x3ba0 [ 3106.892171][ C1] ? find_held_lock+0x2b/0x80 [ 3106.892221][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.892275][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 3106.892328][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.892377][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 3106.892426][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.892472][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 3106.892533][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.892580][ C1] ? find_held_lock+0x2b/0x80 [ 3106.892638][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.892684][ C1] ? follow_page_pte+0x5cf/0x1390 [ 3106.892728][ C1] handle_mm_fault+0x589/0xd10 [ 3106.892780][ C1] __get_user_pages+0x54e/0x3530 [ 3106.892833][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 3106.892874][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.892927][ C1] populate_vma_page_range+0x267/0x3f0 [ 3106.892973][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 3106.893014][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 3106.893080][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.893133][ C1] ? do_mmap+0x69c/0x1210 [ 3106.893172][ C1] __mm_populate+0x1d8/0x380 [ 3106.893214][ C1] ? __pfx___mm_populate+0x10/0x10 [ 3106.893256][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.893304][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.893350][ C1] ? up_write+0x1b2/0x520 [ 3106.893394][ C1] vm_mmap_pgoff+0x37f/0x470 [ 3106.893460][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3106.893530][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.893576][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.893621][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 3106.893664][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 3106.893726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3106.893779][ C1] __x64_sys_mmap+0x125/0x190 [ 3106.893846][ C1] do_syscall_64+0xcd/0xfa0 [ 3106.893893][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3106.893932][ C1] RIP: 0033:0x7fd60318efc9 [ 3106.893963][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3106.894002][ C1] RSP: 002b:00007fd6040ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3106.894037][ C1] RAX: ffffffffffffffda RBX: 00007fd6033e5fa0 RCX: 00007fd60318efc9 [ 3106.894064][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 3106.894090][ C1] RBP: 00007fd603211f91 R08: ffffffffffffffff R09: 0000000000000000 [ 3106.894123][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 3106.894148][ C1] R13: 00007fd6033e6038 R14: 00007fd6033e5fa0 R15: 00007fff19f89938 [ 3106.894193][ C1] [ 3106.894208][ C1] [ 3106.901542][T31615] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 3106.903475][ C1] Allocated by task 27653: [ 3106.903497][ C1] kasan_save_stack+0x33/0x60 [ 3107.559063][ C1] kasan_save_track+0x14/0x30 [ 3107.563776][ C1] __kasan_kmalloc+0xaa/0xb0 [ 3107.568396][ C1] xpad_probe+0x286/0x1ff0 [ 3107.572831][ C1] usb_probe_interface+0x303/0xa40 [ 3107.577955][ C1] really_probe+0x241/0xa90 [ 3107.582470][ C1] __driver_probe_device+0x1de/0x440 [ 3107.587773][ C1] driver_probe_device+0x4c/0x1b0 [ 3107.592821][ C1] __device_attach_driver+0x1df/0x310 [ 3107.598213][ C1] bus_for_each_drv+0x159/0x1e0 [ 3107.603063][ C1] __device_attach+0x1e4/0x4b0 [ 3107.607839][ C1] bus_probe_device+0x17f/0x1c0 [ 3107.612698][ C1] device_add+0x1148/0x1aa0 [ 3107.617222][ C1] usb_set_configuration+0x1187/0x1e20 [ 3107.622705][ C1] usb_generic_driver_probe+0xb1/0x110 [ 3107.628181][ C1] usb_probe_device+0xef/0x3e0 [ 3107.632949][ C1] really_probe+0x241/0xa90 [ 3107.637463][ C1] __driver_probe_device+0x1de/0x440 [ 3107.642763][ C1] driver_probe_device+0x4c/0x1b0 [ 3107.647799][ C1] __device_attach_driver+0x1df/0x310 [ 3107.653192][ C1] bus_for_each_drv+0x159/0x1e0 [ 3107.658045][ C1] __device_attach+0x1e4/0x4b0 [ 3107.662818][ C1] bus_probe_device+0x17f/0x1c0 [ 3107.667675][ C1] device_add+0x1148/0x1aa0 [ 3107.672197][ C1] usb_new_device+0xd07/0x1a60 [ 3107.676979][ C1] hub_event+0x2f34/0x4fe0 [ 3107.681500][ C1] process_one_work+0x9cf/0x1b70 [ 3107.686440][ C1] worker_thread+0x6c8/0xf10 [ 3107.691030][ C1] kthread+0x3c5/0x780 [ 3107.695096][ C1] ret_from_fork+0x675/0x7d0 [ 3107.699708][ C1] ret_from_fork_asm+0x1a/0x30 [ 3107.704488][ C1] [ 3107.706807][ C1] Freed by task 28450: [ 3107.710865][ C1] kasan_save_stack+0x33/0x60 [ 3107.715571][ C1] kasan_save_track+0x14/0x30 [ 3107.720268][ C1] __kasan_save_free_info+0x3b/0x60 [ 3107.725475][ C1] __kasan_slab_free+0x5f/0x80 [ 3107.730258][ C1] kfree+0x2b8/0x6d0 [ 3107.734159][ C1] xpad_disconnect+0x1cf/0x580 [ 3107.738940][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 3107.744139][ C1] device_remove+0x125/0x170 [ 3107.748738][ C1] device_release_driver_internal+0x44b/0x620 [ 3107.754877][ C1] bus_remove_device+0x22f/0x420 [ 3107.759837][ C1] device_del+0x396/0x9f0 [ 3107.764203][ C1] usb_disable_device+0x355/0x7d0 [ 3107.769252][ C1] usb_disconnect+0x2e1/0x9c0 [ 3107.773947][ C1] hub_event+0x1c81/0x4fe0 [ 3107.778386][ C1] process_one_work+0x9cf/0x1b70 [ 3107.783334][ C1] worker_thread+0x6c8/0xf10 [ 3107.787928][ C1] kthread+0x3c5/0x780 [ 3107.791999][ C1] ret_from_fork+0x675/0x7d0 [ 3107.796611][ C1] ret_from_fork_asm+0x1a/0x30 [ 3107.801403][ C1] [ 3107.803716][ C1] The buggy address belongs to the object at ffff88807f07e000 [ 3107.803716][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 3107.817767][ C1] The buggy address is located 92 bytes inside of [ 3107.817767][ C1] freed 1024-byte region [ffff88807f07e000, ffff88807f07e400) [ 3107.831565][ C1] [ 3107.833880][ C1] The buggy address belongs to the physical page: [ 3107.840282][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f078 [ 3107.849042][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3107.857537][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3107.865083][ C1] page_type: f5(slab) [ 3107.869069][ C1] raw: 00fff00000000040 ffff88813ffa6dc0 ffffea00016d0000 dead000000000002 [ 3107.877656][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3107.886245][ C1] head: 00fff00000000040 ffff88813ffa6dc0 ffffea00016d0000 dead000000000002 [ 3107.894926][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3107.903600][ C1] head: 00fff00000000003 ffffea0001fc1e01 00000000ffffffff 00000000ffffffff [ 3107.912275][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3107.920937][ C1] page dumped because: kasan: bad access detected [ 3107.927344][ C1] page_owner tracks the page as allocated [ 3107.933046][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6359, tgid 6359 (kworker/u8:20), ts 2440160727312, free_ts 2439723887140 [ 3107.952779][ C1] post_alloc_hook+0x1c0/0x230 [ 3107.957580][ C1] get_page_from_freelist+0x10a3/0x3a30 [ 3107.963143][ C1] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 3107.969052][ C1] alloc_pages_mpol+0x1fb/0x550 [ 3107.973902][ C1] new_slab+0x24a/0x360 [ 3107.978064][ C1] ___slab_alloc+0xdc4/0x1ae0 [ 3107.982746][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 3107.988216][ C1] __kmalloc_noprof+0x501/0x880 [ 3107.993079][ C1] ieee802_11_parse_elems_full+0x1db/0x3780 [ 3107.999000][ C1] ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 3108.005089][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 3108.010399][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 3108.015521][ C1] process_one_work+0x9cf/0x1b70 [ 3108.020461][ C1] worker_thread+0x6c8/0xf10 [ 3108.025054][ C1] kthread+0x3c5/0x780 [ 3108.029123][ C1] ret_from_fork+0x675/0x7d0 [ 3108.033742][ C1] page last free pid 1332 tgid 1332 stack trace: [ 3108.040061][ C1] __free_frozen_pages+0x7df/0x1160 [ 3108.045267][ C1] __put_partials+0x130/0x170 [ 3108.049969][ C1] qlist_free_all+0x4d/0x120 [ 3108.054580][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 3108.060072][ C1] __kasan_slab_alloc+0x69/0x90 [ 3108.064965][ C1] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 3108.070800][ C1] sock_alloc_inode+0x25/0x1c0 [ 3108.075666][ C1] alloc_inode+0x64/0x240 [ 3108.080005][ C1] sock_alloc+0x40/0x280 [ 3108.084254][ C1] __sock_create+0xc1/0x8d0 [ 3108.088766][ C1] rds_tcp_conn_path_connect+0x2d0/0x7f0 [ 3108.094405][ C1] rds_connect_worker+0x1af/0x2c0 [ 3108.099446][ C1] process_one_work+0x9cf/0x1b70 [ 3108.104387][ C1] worker_thread+0x6c8/0xf10 [ 3108.108983][ C1] kthread+0x3c5/0x780 [ 3108.113053][ C1] ret_from_fork+0x675/0x7d0 [ 3108.117668][ C1] [ 3108.119982][ C1] Memory state around the buggy address: [ 3108.125601][ C1] ffff88807f07df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3108.133663][ C1] ffff88807f07df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3108.141739][ C1] >ffff88807f07e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3108.149808][ C1] ^ [ 3108.156743][ C1] ffff88807f07e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3108.164811][ C1] ffff88807f07e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3108.172869][ C1] ================================================================== [ 3108.180926][ C1] Disabling lock debugging due to kernel taint [ 3108.187064][ C1] ================================================================== [ 3108.195138][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x27f/0x2b0 [ 3108.202998][ C1] Read of size 8 at addr ffff88807f07e068 by task syz.7.9181/3546 [ 3108.210829][ C1] [ 3108.213176][ C1] CPU: 1 UID: 0 PID: 3546 Comm: syz.7.9181 Tainted: G B syzkaller #0 PREEMPT(full) [ 3108.213226][ C1] Tainted: [B]=BAD_PAGE [ 3108.213239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3108.213261][ C1] Call Trace: [ 3108.213275][ C1] [ 3108.213291][ C1] dump_stack_lvl+0x116/0x1f0 [ 3108.213337][ C1] print_report+0xcd/0x630 [ 3108.213369][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.213411][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.213451][ C1] ? __phys_addr+0xe8/0x180 [ 3108.213503][ C1] ? do_raw_spin_lock+0x27f/0x2b0 [ 3108.213541][ C1] kasan_report+0xe0/0x110 [ 3108.213574][ C1] ? do_raw_spin_lock+0x27f/0x2b0 [ 3108.213619][ C1] do_raw_spin_lock+0x27f/0x2b0 [ 3108.213657][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3108.213697][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.213744][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 3108.213777][ C1] ? __wake_up+0x1c/0x60 [ 3108.213823][ C1] __wake_up+0x1c/0x60 [ 3108.213876][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 3108.213925][ C1] __usb_hcd_giveback_urb+0x3d5/0x610 [ 3108.213967][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 3108.214004][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.214048][ C1] dummy_timer+0x1809/0x3a00 [ 3108.214100][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 3108.214143][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.214186][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.214229][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.214269][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3108.214305][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.214346][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 3108.214388][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 3108.214428][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 3108.214483][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.214525][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3108.214570][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3108.214612][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.214653][ C1] ? mark_held_locks+0x49/0x80 [ 3108.214705][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3108.214744][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3108.214787][ C1] __hrtimer_run_queues+0x202/0xad0 [ 3108.214840][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 3108.214883][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.214932][ C1] hrtimer_run_softirq+0x17d/0x350 [ 3108.214977][ C1] handle_softirqs+0x219/0x8e0 [ 3108.215024][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3108.215068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.215113][ C1] __irq_exit_rcu+0x109/0x170 [ 3108.215154][ C1] irq_exit_rcu+0x9/0x30 [ 3108.215194][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3108.215233][ C1] [ 3108.215244][ C1] [ 3108.215257][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3108.215296][ C1] RIP: 0010:filemap_map_pages+0x1db/0x1b70 [ 3108.215343][ C1] Code: da 48 8d 84 24 00 01 00 00 48 89 c7 48 89 44 24 78 e8 29 b0 ff ff 49 89 c7 48 85 c0 0f 84 96 15 00 00 e8 c8 85 c8 ff 4c 89 f2 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 17 [ 3108.215378][ C1] RSP: 0018:ffffc9000f01f670 EFLAGS: 00000246 [ 3108.215406][ C1] RAX: 0000000000080000 RBX: 000000000000030f RCX: ffffc9001613b000 [ 3108.215429][ C1] RDX: ffffc9000f01f9a0 RSI: ffffffff81f47438 RDI: 0000000000000006 [ 3108.215452][ C1] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000300 [ 3108.215474][ C1] R10: 0000000000000b36 R11: 0000000000000001 R12: ffffc9000f01f9b0 [ 3108.215496][ C1] R13: 0000000000000100 R14: ffffc9000f01f9a0 R15: ffffea00004a7680 [ 3108.215528][ C1] ? filemap_map_pages+0x1d8/0x1b70 [ 3108.215576][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 3108.215628][ C1] ? folio_add_file_rmap_ptes+0xa1f/0xdb0 [ 3108.215673][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.215719][ C1] ? __lock_acquire+0x622/0x1c90 [ 3108.215776][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3108.215825][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.215877][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3108.215919][ C1] do_pte_missing+0xe33/0x3ba0 [ 3108.215960][ C1] ? find_held_lock+0x2b/0x80 [ 3108.216002][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.216049][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 3108.216094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.216138][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 3108.216179][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.216220][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 3108.216273][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.216314][ C1] ? find_held_lock+0x2b/0x80 [ 3108.216364][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.216404][ C1] ? follow_page_pte+0x5cf/0x1390 [ 3108.216443][ C1] handle_mm_fault+0x589/0xd10 [ 3108.216489][ C1] __get_user_pages+0x54e/0x3530 [ 3108.216534][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 3108.216570][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.216616][ C1] populate_vma_page_range+0x267/0x3f0 [ 3108.216655][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 3108.216692][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 3108.216748][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.216789][ C1] ? do_mmap+0x69c/0x1210 [ 3108.216822][ C1] __mm_populate+0x1d8/0x380 [ 3108.216862][ C1] ? __pfx___mm_populate+0x10/0x10 [ 3108.216898][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.216940][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.216981][ C1] ? up_write+0x1b2/0x520 [ 3108.217019][ C1] vm_mmap_pgoff+0x37f/0x470 [ 3108.217081][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3108.217142][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.217183][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.217223][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 3108.217260][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 3108.217314][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3108.217359][ C1] __x64_sys_mmap+0x125/0x190 [ 3108.217418][ C1] do_syscall_64+0xcd/0xfa0 [ 3108.217459][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3108.217494][ C1] RIP: 0033:0x7fd60318efc9 [ 3108.217522][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3108.217556][ C1] RSP: 002b:00007fd6040ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3108.217588][ C1] RAX: ffffffffffffffda RBX: 00007fd6033e5fa0 RCX: 00007fd60318efc9 [ 3108.217611][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 3108.217634][ C1] RBP: 00007fd603211f91 R08: ffffffffffffffff R09: 0000000000000000 [ 3108.217657][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 3108.217679][ C1] R13: 00007fd6033e6038 R14: 00007fd6033e5fa0 R15: 00007fff19f89938 [ 3108.217717][ C1] [ 3108.217729][ C1] [ 3108.872546][ C1] Allocated by task 27653: [ 3108.876957][ C1] kasan_save_stack+0x33/0x60 [ 3108.881669][ C1] kasan_save_track+0x14/0x30 [ 3108.886371][ C1] __kasan_kmalloc+0xaa/0xb0 [ 3108.890977][ C1] xpad_probe+0x286/0x1ff0 [ 3108.895413][ C1] usb_probe_interface+0x303/0xa40 [ 3108.900530][ C1] really_probe+0x241/0xa90 [ 3108.905057][ C1] __driver_probe_device+0x1de/0x440 [ 3108.910364][ C1] driver_probe_device+0x4c/0x1b0 [ 3108.915400][ C1] __device_attach_driver+0x1df/0x310 [ 3108.920791][ C1] bus_for_each_drv+0x159/0x1e0 [ 3108.925646][ C1] __device_attach+0x1e4/0x4b0 [ 3108.930431][ C1] bus_probe_device+0x17f/0x1c0 [ 3108.935311][ C1] device_add+0x1148/0x1aa0 [ 3108.939835][ C1] usb_set_configuration+0x1187/0x1e20 [ 3108.945320][ C1] usb_generic_driver_probe+0xb1/0x110 [ 3108.950816][ C1] usb_probe_device+0xef/0x3e0 [ 3108.955587][ C1] really_probe+0x241/0xa90 [ 3108.960097][ C1] __driver_probe_device+0x1de/0x440 [ 3108.965392][ C1] driver_probe_device+0x4c/0x1b0 [ 3108.970427][ C1] __device_attach_driver+0x1df/0x310 [ 3108.975813][ C1] bus_for_each_drv+0x159/0x1e0 [ 3108.980672][ C1] __device_attach+0x1e4/0x4b0 [ 3108.985447][ C1] bus_probe_device+0x17f/0x1c0 [ 3108.990299][ C1] device_add+0x1148/0x1aa0 [ 3108.994820][ C1] usb_new_device+0xd07/0x1a60 [ 3108.999606][ C1] hub_event+0x2f34/0x4fe0 [ 3109.004043][ C1] process_one_work+0x9cf/0x1b70 [ 3109.009000][ C1] worker_thread+0x6c8/0xf10 [ 3109.013593][ C1] kthread+0x3c5/0x780 [ 3109.017659][ C1] ret_from_fork+0x675/0x7d0 [ 3109.022274][ C1] ret_from_fork_asm+0x1a/0x30 [ 3109.027058][ C1] [ 3109.029367][ C1] Freed by task 28450: [ 3109.033420][ C1] kasan_save_stack+0x33/0x60 [ 3109.038116][ C1] kasan_save_track+0x14/0x30 [ 3109.042809][ C1] __kasan_save_free_info+0x3b/0x60 [ 3109.048022][ C1] __kasan_slab_free+0x5f/0x80 [ 3109.052806][ C1] kfree+0x2b8/0x6d0 [ 3109.056712][ C1] xpad_disconnect+0x1cf/0x580 [ 3109.061493][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 3109.066696][ C1] device_remove+0x125/0x170 [ 3109.071293][ C1] device_release_driver_internal+0x44b/0x620 [ 3109.077377][ C1] bus_remove_device+0x22f/0x420 [ 3109.082321][ C1] device_del+0x396/0x9f0 [ 3109.086664][ C1] usb_disable_device+0x355/0x7d0 [ 3109.091707][ C1] usb_disconnect+0x2e1/0x9c0 [ 3109.096402][ C1] hub_event+0x1c81/0x4fe0 [ 3109.100837][ C1] process_one_work+0x9cf/0x1b70 [ 3109.105789][ C1] worker_thread+0x6c8/0xf10 [ 3109.110383][ C1] kthread+0x3c5/0x780 [ 3109.114450][ C1] ret_from_fork+0x675/0x7d0 [ 3109.119065][ C1] ret_from_fork_asm+0x1a/0x30 [ 3109.123845][ C1] [ 3109.126161][ C1] The buggy address belongs to the object at ffff88807f07e000 [ 3109.126161][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 3109.140299][ C1] The buggy address is located 104 bytes inside of [ 3109.140299][ C1] freed 1024-byte region [ffff88807f07e000, ffff88807f07e400) [ 3109.154190][ C1] [ 3109.156508][ C1] The buggy address belongs to the physical page: [ 3109.162925][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f078 [ 3109.171697][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3109.180197][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3109.187745][ C1] page_type: f5(slab) [ 3109.191729][ C1] raw: 00fff00000000040 ffff88813ffa6dc0 ffffea00016d0000 dead000000000002 [ 3109.200320][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3109.208909][ C1] head: 00fff00000000040 ffff88813ffa6dc0 ffffea00016d0000 dead000000000002 [ 3109.217584][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3109.226263][ C1] head: 00fff00000000003 ffffea0001fc1e01 00000000ffffffff 00000000ffffffff [ 3109.234939][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3109.243603][ C1] page dumped because: kasan: bad access detected [ 3109.250005][ C1] page_owner tracks the page as allocated [ 3109.255709][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6359, tgid 6359 (kworker/u8:20), ts 2440160727312, free_ts 2439723887140 [ 3109.275432][ C1] post_alloc_hook+0x1c0/0x230 [ 3109.280210][ C1] get_page_from_freelist+0x10a3/0x3a30 [ 3109.285769][ C1] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 3109.291680][ C1] alloc_pages_mpol+0x1fb/0x550 [ 3109.296532][ C1] new_slab+0x24a/0x360 [ 3109.300696][ C1] ___slab_alloc+0xdc4/0x1ae0 [ 3109.305382][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 3109.310934][ C1] __kmalloc_noprof+0x501/0x880 [ 3109.315791][ C1] ieee802_11_parse_elems_full+0x1db/0x3780 [ 3109.321714][ C1] ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 3109.327804][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 3109.333114][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 3109.338237][ C1] process_one_work+0x9cf/0x1b70 [ 3109.343180][ C1] worker_thread+0x6c8/0xf10 [ 3109.347818][ C1] kthread+0x3c5/0x780 [ 3109.351890][ C1] ret_from_fork+0x675/0x7d0 [ 3109.356513][ C1] page last free pid 1332 tgid 1332 stack trace: [ 3109.362839][ C1] __free_frozen_pages+0x7df/0x1160 [ 3109.368050][ C1] __put_partials+0x130/0x170 [ 3109.372824][ C1] qlist_free_all+0x4d/0x120 [ 3109.377435][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 3109.382911][ C1] __kasan_slab_alloc+0x69/0x90 [ 3109.387783][ C1] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 3109.393609][ C1] sock_alloc_inode+0x25/0x1c0 [ 3109.398378][ C1] alloc_inode+0x64/0x240 [ 3109.402713][ C1] sock_alloc+0x40/0x280 [ 3109.406953][ C1] __sock_create+0xc1/0x8d0 [ 3109.411462][ C1] rds_tcp_conn_path_connect+0x2d0/0x7f0 [ 3109.417099][ C1] rds_connect_worker+0x1af/0x2c0 [ 3109.422139][ C1] process_one_work+0x9cf/0x1b70 [ 3109.427084][ C1] worker_thread+0x6c8/0xf10 [ 3109.432122][ C1] kthread+0x3c5/0x780 [ 3109.436189][ C1] ret_from_fork+0x675/0x7d0 [ 3109.440798][ C1] [ 3109.443109][ C1] Memory state around the buggy address: [ 3109.448730][ C1] ffff88807f07df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3109.456790][ C1] ffff88807f07df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3109.464847][ C1] >ffff88807f07e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3109.472901][ C1] ^ [ 3109.480344][ C1] ffff88807f07e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3109.488403][ C1] ffff88807f07e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3109.496460][ C1] ================================================================== [ 3109.504508][ C1] ================================================================== [ 3109.512731][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x265/0x2b0 [ 3109.520550][ C1] Read of size 4 at addr ffff88807f07e060 by task syz.7.9181/3546 [ 3109.529127][ C1] [ 3109.531449][ C1] CPU: 1 UID: 0 PID: 3546 Comm: syz.7.9181 Tainted: G B syzkaller #0 PREEMPT(full) [ 3109.531498][ C1] Tainted: [B]=BAD_PAGE [ 3109.531513][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3109.531534][ C1] Call Trace: [ 3109.531547][ C1] [ 3109.531562][ C1] dump_stack_lvl+0x116/0x1f0 [ 3109.531604][ C1] print_report+0xcd/0x630 [ 3109.531635][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.531676][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.531717][ C1] ? __phys_addr+0xe8/0x180 [ 3109.531767][ C1] ? do_raw_spin_lock+0x265/0x2b0 [ 3109.531804][ C1] kasan_report+0xe0/0x110 [ 3109.531838][ C1] ? do_raw_spin_lock+0x265/0x2b0 [ 3109.531887][ C1] do_raw_spin_lock+0x265/0x2b0 [ 3109.531926][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3109.531966][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.532013][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 3109.532046][ C1] ? __wake_up+0x1c/0x60 [ 3109.532091][ C1] __wake_up+0x1c/0x60 [ 3109.532139][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 3109.532188][ C1] __usb_hcd_giveback_urb+0x3d5/0x610 [ 3109.532230][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 3109.532267][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.532312][ C1] dummy_timer+0x1809/0x3a00 [ 3109.532364][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 3109.532406][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.532449][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.532492][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.532533][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3109.532569][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.532610][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 3109.532653][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 3109.532693][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 3109.532747][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.532790][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3109.532834][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3109.532882][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.532923][ C1] ? mark_held_locks+0x49/0x80 [ 3109.532976][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3109.533015][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3109.533058][ C1] __hrtimer_run_queues+0x202/0xad0 [ 3109.533108][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 3109.533150][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.533199][ C1] hrtimer_run_softirq+0x17d/0x350 [ 3109.533244][ C1] handle_softirqs+0x219/0x8e0 [ 3109.533292][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3109.533336][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.533380][ C1] __irq_exit_rcu+0x109/0x170 [ 3109.533422][ C1] irq_exit_rcu+0x9/0x30 [ 3109.533462][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3109.533500][ C1] [ 3109.533511][ C1] [ 3109.533524][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3109.533563][ C1] RIP: 0010:filemap_map_pages+0x1db/0x1b70 [ 3109.533609][ C1] Code: da 48 8d 84 24 00 01 00 00 48 89 c7 48 89 44 24 78 e8 29 b0 ff ff 49 89 c7 48 85 c0 0f 84 96 15 00 00 e8 c8 85 c8 ff 4c 89 f2 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 17 [ 3109.533644][ C1] RSP: 0018:ffffc9000f01f670 EFLAGS: 00000246 [ 3109.533672][ C1] RAX: 0000000000080000 RBX: 000000000000030f RCX: ffffc9001613b000 [ 3109.533695][ C1] RDX: ffffc9000f01f9a0 RSI: ffffffff81f47438 RDI: 0000000000000006 [ 3109.533718][ C1] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000300 [ 3109.533740][ C1] R10: 0000000000000b36 R11: 0000000000000001 R12: ffffc9000f01f9b0 [ 3109.533762][ C1] R13: 0000000000000100 R14: ffffc9000f01f9a0 R15: ffffea00004a7680 [ 3109.533794][ C1] ? filemap_map_pages+0x1d8/0x1b70 [ 3109.533841][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 3109.533900][ C1] ? folio_add_file_rmap_ptes+0xa1f/0xdb0 [ 3109.533945][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.533991][ C1] ? __lock_acquire+0x622/0x1c90 [ 3109.534048][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3109.534097][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.534144][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3109.534187][ C1] do_pte_missing+0xe33/0x3ba0 [ 3109.534227][ C1] ? find_held_lock+0x2b/0x80 [ 3109.534270][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.534317][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 3109.534363][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.534405][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 3109.534447][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.534488][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 3109.534541][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.534582][ C1] ? find_held_lock+0x2b/0x80 [ 3109.534632][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.534672][ C1] ? follow_page_pte+0x5cf/0x1390 [ 3109.534711][ C1] handle_mm_fault+0x589/0xd10 [ 3109.534757][ C1] __get_user_pages+0x54e/0x3530 [ 3109.534802][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 3109.534839][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.534888][ C1] populate_vma_page_range+0x267/0x3f0 [ 3109.534928][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 3109.534964][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 3109.535021][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.535062][ C1] ? do_mmap+0x69c/0x1210 [ 3109.535095][ C1] __mm_populate+0x1d8/0x380 [ 3109.535131][ C1] ? __pfx___mm_populate+0x10/0x10 [ 3109.535167][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.535210][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.535250][ C1] ? up_write+0x1b2/0x520 [ 3109.535287][ C1] vm_mmap_pgoff+0x37f/0x470 [ 3109.535345][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3109.535405][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.535446][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.535486][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 3109.535523][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 3109.535576][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3109.535621][ C1] __x64_sys_mmap+0x125/0x190 [ 3109.535679][ C1] do_syscall_64+0xcd/0xfa0 [ 3109.535719][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3109.535754][ C1] RIP: 0033:0x7fd60318efc9 [ 3109.535780][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3109.535814][ C1] RSP: 002b:00007fd6040ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3109.535846][ C1] RAX: ffffffffffffffda RBX: 00007fd6033e5fa0 RCX: 00007fd60318efc9 [ 3109.535874][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 3109.535897][ C1] RBP: 00007fd603211f91 R08: ffffffffffffffff R09: 0000000000000000 [ 3109.535920][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 3109.535941][ C1] R13: 00007fd6033e6038 R14: 00007fd6033e5fa0 R15: 00007fff19f89938 [ 3109.535979][ C1] [ 3109.535991][ C1] [ 3110.193020][ C1] Allocated by task 27653: [ 3110.197433][ C1] kasan_save_stack+0x33/0x60 [ 3110.202146][ C1] kasan_save_track+0x14/0x30 [ 3110.206848][ C1] __kasan_kmalloc+0xaa/0xb0 [ 3110.211464][ C1] xpad_probe+0x286/0x1ff0 [ 3110.215902][ C1] usb_probe_interface+0x303/0xa40 [ 3110.221018][ C1] really_probe+0x241/0xa90 [ 3110.225535][ C1] __driver_probe_device+0x1de/0x440 [ 3110.230837][ C1] driver_probe_device+0x4c/0x1b0 [ 3110.235874][ C1] __device_attach_driver+0x1df/0x310 [ 3110.241256][ C1] bus_for_each_drv+0x159/0x1e0 [ 3110.246114][ C1] __device_attach+0x1e4/0x4b0 [ 3110.250893][ C1] bus_probe_device+0x17f/0x1c0 [ 3110.255751][ C1] device_add+0x1148/0x1aa0 [ 3110.260274][ C1] usb_set_configuration+0x1187/0x1e20 [ 3110.265758][ C1] usb_generic_driver_probe+0xb1/0x110 [ 3110.271234][ C1] usb_probe_device+0xef/0x3e0 [ 3110.275999][ C1] really_probe+0x241/0xa90 [ 3110.280511][ C1] __driver_probe_device+0x1de/0x440 [ 3110.285809][ C1] driver_probe_device+0x4c/0x1b0 [ 3110.290847][ C1] __device_attach_driver+0x1df/0x310 [ 3110.296232][ C1] bus_for_each_drv+0x159/0x1e0 [ 3110.301084][ C1] __device_attach+0x1e4/0x4b0 [ 3110.305866][ C1] bus_probe_device+0x17f/0x1c0 [ 3110.310727][ C1] device_add+0x1148/0x1aa0 [ 3110.315268][ C1] usb_new_device+0xd07/0x1a60 [ 3110.320055][ C1] hub_event+0x2f34/0x4fe0 [ 3110.324496][ C1] process_one_work+0x9cf/0x1b70 [ 3110.329441][ C1] worker_thread+0x6c8/0xf10 [ 3110.334033][ C1] kthread+0x3c5/0x780 [ 3110.338107][ C1] ret_from_fork+0x675/0x7d0 [ 3110.342718][ C1] ret_from_fork_asm+0x1a/0x30 [ 3110.347505][ C1] [ 3110.349816][ C1] Freed by task 28450: [ 3110.353879][ C1] kasan_save_stack+0x33/0x60 [ 3110.358581][ C1] kasan_save_track+0x14/0x30 [ 3110.363284][ C1] __kasan_save_free_info+0x3b/0x60 [ 3110.368494][ C1] __kasan_slab_free+0x5f/0x80 [ 3110.373283][ C1] kfree+0x2b8/0x6d0 [ 3110.377189][ C1] xpad_disconnect+0x1cf/0x580 [ 3110.381969][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 3110.387248][ C1] device_remove+0x125/0x170 [ 3110.391869][ C1] device_release_driver_internal+0x44b/0x620 [ 3110.397961][ C1] bus_remove_device+0x22f/0x420 [ 3110.402915][ C1] device_del+0x396/0x9f0 [ 3110.407262][ C1] usb_disable_device+0x355/0x7d0 [ 3110.412316][ C1] usb_disconnect+0x2e1/0x9c0 [ 3110.417022][ C1] hub_event+0x1c81/0x4fe0 [ 3110.421462][ C1] process_one_work+0x9cf/0x1b70 [ 3110.426410][ C1] worker_thread+0x6c8/0xf10 [ 3110.431266][ C1] kthread+0x3c5/0x780 [ 3110.435337][ C1] ret_from_fork+0x675/0x7d0 [ 3110.440034][ C1] ret_from_fork_asm+0x1a/0x30 [ 3110.444825][ C1] [ 3110.447144][ C1] The buggy address belongs to the object at ffff88807f07e000 [ 3110.447144][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 3110.461207][ C1] The buggy address is located 96 bytes inside of [ 3110.461207][ C1] freed 1024-byte region [ffff88807f07e000, ffff88807f07e400) [ 3110.475100][ C1] [ 3110.478200][ C1] The buggy address belongs to the physical page: [ 3110.484599][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f078 [ 3110.493370][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3110.501908][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3110.509469][ C1] page_type: f5(slab) [ 3110.513457][ C1] raw: 00fff00000000040 ffff88813ffa6dc0 ffffea00016d0000 dead000000000002 [ 3110.522136][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3110.530733][ C1] head: 00fff00000000040 ffff88813ffa6dc0 ffffea00016d0000 dead000000000002 [ 3110.539414][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3110.548099][ C1] head: 00fff00000000003 ffffea0001fc1e01 00000000ffffffff 00000000ffffffff [ 3110.556875][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3110.565538][ C1] page dumped because: kasan: bad access detected [ 3110.571986][ C1] page_owner tracks the page as allocated [ 3110.577686][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6359, tgid 6359 (kworker/u8:20), ts 2440160727312, free_ts 2439723887140 [ 3110.597411][ C1] post_alloc_hook+0x1c0/0x230 [ 3110.602192][ C1] get_page_from_freelist+0x10a3/0x3a30 [ 3110.607796][ C1] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 3110.613707][ C1] alloc_pages_mpol+0x1fb/0x550 [ 3110.618565][ C1] new_slab+0x24a/0x360 [ 3110.622739][ C1] ___slab_alloc+0xdc4/0x1ae0 [ 3110.627429][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 3110.632899][ C1] __kmalloc_noprof+0x501/0x880 [ 3110.637767][ C1] ieee802_11_parse_elems_full+0x1db/0x3780 [ 3110.643699][ C1] ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 3110.649798][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 3110.655120][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 3110.660254][ C1] process_one_work+0x9cf/0x1b70 [ 3110.665200][ C1] worker_thread+0x6c8/0xf10 [ 3110.669795][ C1] kthread+0x3c5/0x780 [ 3110.673868][ C1] ret_from_fork+0x675/0x7d0 [ 3110.678491][ C1] page last free pid 1332 tgid 1332 stack trace: [ 3110.684809][ C1] __free_frozen_pages+0x7df/0x1160 [ 3110.690017][ C1] __put_partials+0x130/0x170 [ 3110.694714][ C1] qlist_free_all+0x4d/0x120 [ 3110.699339][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 3110.704930][ C1] __kasan_slab_alloc+0x69/0x90 [ 3110.709860][ C1] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 3110.715682][ C1] sock_alloc_inode+0x25/0x1c0 [ 3110.720455][ C1] alloc_inode+0x64/0x240 [ 3110.724796][ C1] sock_alloc+0x40/0x280 [ 3110.729043][ C1] __sock_create+0xc1/0x8d0 [ 3110.733557][ C1] rds_tcp_conn_path_connect+0x2d0/0x7f0 [ 3110.739198][ C1] rds_connect_worker+0x1af/0x2c0 [ 3110.744254][ C1] process_one_work+0x9cf/0x1b70 [ 3110.749284][ C1] worker_thread+0x6c8/0xf10 [ 3110.753890][ C1] kthread+0x3c5/0x780 [ 3110.757968][ C1] ret_from_fork+0x675/0x7d0 [ 3110.762594][ C1] [ 3110.764918][ C1] Memory state around the buggy address: [ 3110.770536][ C1] ffff88807f07df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3110.778594][ C1] ffff88807f07df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3110.786649][ C1] >ffff88807f07e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3110.794703][ C1] ^ [ 3110.801894][ C1] ffff88807f07e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3110.809955][ C1] ffff88807f07e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3110.818011][ C1] ================================================================== [ 3110.826062][ C1] ================================================================== [ 3110.834113][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x11d/0x2b0 [ 3110.841933][ C1] Write of size 4 at addr ffff88807f07e058 by task syz.7.9181/3546 [ 3110.849822][ C1] [ 3110.852148][ C1] CPU: 1 UID: 0 PID: 3546 Comm: syz.7.9181 Tainted: G B syzkaller #0 PREEMPT(full) [ 3110.852202][ C1] Tainted: [B]=BAD_PAGE [ 3110.852215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3110.852238][ C1] Call Trace: [ 3110.852250][ C1] [ 3110.852266][ C1] dump_stack_lvl+0x116/0x1f0 [ 3110.852307][ C1] print_report+0xcd/0x630 [ 3110.852338][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.852380][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.852421][ C1] ? __phys_addr+0xe8/0x180 [ 3110.852472][ C1] ? do_raw_spin_lock+0x11d/0x2b0 [ 3110.852510][ C1] kasan_report+0xe0/0x110 [ 3110.852543][ C1] ? do_raw_spin_lock+0x11d/0x2b0 [ 3110.852588][ C1] kasan_check_range+0x100/0x1b0 [ 3110.852629][ C1] do_raw_spin_lock+0x11d/0x2b0 [ 3110.852668][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3110.852708][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.852755][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 3110.852790][ C1] ? __wake_up+0x1c/0x60 [ 3110.852838][ C1] __wake_up+0x1c/0x60 [ 3110.852885][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 3110.852936][ C1] __usb_hcd_giveback_urb+0x3d5/0x610 [ 3110.852977][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 3110.853015][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.853059][ C1] dummy_timer+0x1809/0x3a00 [ 3110.853112][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 3110.853159][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.853203][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.853247][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.853287][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3110.853323][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.853365][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 3110.853408][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 3110.853448][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 3110.853504][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.853546][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3110.853591][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3110.853634][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.853675][ C1] ? mark_held_locks+0x49/0x80 [ 3110.853729][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3110.853776][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3110.853829][ C1] __hrtimer_run_queues+0x202/0xad0 [ 3110.853890][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 3110.853941][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.854002][ C1] hrtimer_run_softirq+0x17d/0x350 [ 3110.854057][ C1] handle_softirqs+0x219/0x8e0 [ 3110.854114][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3110.854172][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.854227][ C1] __irq_exit_rcu+0x109/0x170 [ 3110.854277][ C1] irq_exit_rcu+0x9/0x30 [ 3110.854326][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3110.854372][ C1] [ 3110.854386][ C1] [ 3110.854401][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3110.854448][ C1] RIP: 0010:filemap_map_pages+0x1db/0x1b70 [ 3110.854503][ C1] Code: da 48 8d 84 24 00 01 00 00 48 89 c7 48 89 44 24 78 e8 29 b0 ff ff 49 89 c7 48 85 c0 0f 84 96 15 00 00 e8 c8 85 c8 ff 4c 89 f2 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 17 [ 3110.854543][ C1] RSP: 0018:ffffc9000f01f670 EFLAGS: 00000246 [ 3110.854575][ C1] RAX: 0000000000080000 RBX: 000000000000030f RCX: ffffc9001613b000 [ 3110.854603][ C1] RDX: ffffc9000f01f9a0 RSI: ffffffff81f47438 RDI: 0000000000000006 [ 3110.854631][ C1] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000300 [ 3110.854657][ C1] R10: 0000000000000b36 R11: 0000000000000001 R12: ffffc9000f01f9b0 [ 3110.854683][ C1] R13: 0000000000000100 R14: ffffc9000f01f9a0 R15: ffffea00004a7680 [ 3110.854721][ C1] ? filemap_map_pages+0x1d8/0x1b70 [ 3110.854779][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 3110.854843][ C1] ? folio_add_file_rmap_ptes+0xa1f/0xdb0 [ 3110.854899][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.854956][ C1] ? __lock_acquire+0x622/0x1c90 [ 3110.855026][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3110.855086][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.855145][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3110.855201][ C1] do_pte_missing+0xe33/0x3ba0 [ 3110.855249][ C1] ? find_held_lock+0x2b/0x80 [ 3110.855302][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.855359][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 3110.855416][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.855469][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 3110.855520][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.855570][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 3110.855635][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.855686][ C1] ? find_held_lock+0x2b/0x80 [ 3110.855747][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.855798][ C1] ? follow_page_pte+0x5cf/0x1390 [ 3110.855843][ C1] handle_mm_fault+0x589/0xd10 [ 3110.855889][ C1] __get_user_pages+0x54e/0x3530 [ 3110.855935][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 3110.855971][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.856018][ C1] populate_vma_page_range+0x267/0x3f0 [ 3110.856057][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 3110.856094][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 3110.856151][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.856196][ C1] ? do_mmap+0x69c/0x1210 [ 3110.856230][ C1] __mm_populate+0x1d8/0x380 [ 3110.856267][ C1] ? __pfx___mm_populate+0x10/0x10 [ 3110.856303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.856345][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.856386][ C1] ? up_write+0x1b2/0x520 [ 3110.856424][ C1] vm_mmap_pgoff+0x37f/0x470 [ 3110.856483][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3110.856544][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.856585][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.856626][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 3110.856663][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 3110.856717][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3110.856763][ C1] __x64_sys_mmap+0x125/0x190 [ 3110.856822][ C1] do_syscall_64+0xcd/0xfa0 [ 3110.856863][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3110.856898][ C1] RIP: 0033:0x7fd60318efc9 [ 3110.856925][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3110.856959][ C1] RSP: 002b:00007fd6040ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3110.856990][ C1] RAX: ffffffffffffffda RBX: 00007fd6033e5fa0 RCX: 00007fd60318efc9 [ 3110.857014][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 3110.857037][ C1] RBP: 00007fd603211f91 R08: ffffffffffffffff R09: 0000000000000000 [ 3110.857060][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 3110.857082][ C1] R13: 00007fd6033e6038 R14: 00007fd6033e5fa0 R15: 00007fff19f89938 [ 3110.857120][ C1] [ 3110.857132][ C1] [ 3111.517345][ C1] Allocated by task 27653: [ 3111.521758][ C1] kasan_save_stack+0x33/0x60 [ 3111.526467][ C1] kasan_save_track+0x14/0x30 [ 3111.531165][ C1] __kasan_kmalloc+0xaa/0xb0 [ 3111.535780][ C1] xpad_probe+0x286/0x1ff0 [ 3111.540248][ C1] usb_probe_interface+0x303/0xa40 [ 3111.545412][ C1] really_probe+0x241/0xa90 [ 3111.549934][ C1] __driver_probe_device+0x1de/0x440 [ 3111.555320][ C1] driver_probe_device+0x4c/0x1b0 [ 3111.560447][ C1] __device_attach_driver+0x1df/0x310 [ 3111.565835][ C1] bus_for_each_drv+0x159/0x1e0 [ 3111.570692][ C1] __device_attach+0x1e4/0x4b0 [ 3111.575480][ C1] bus_probe_device+0x17f/0x1c0 [ 3111.580345][ C1] device_add+0x1148/0x1aa0 [ 3111.584872][ C1] usb_set_configuration+0x1187/0x1e20 [ 3111.590372][ C1] usb_generic_driver_probe+0xb1/0x110 [ 3111.595862][ C1] usb_probe_device+0xef/0x3e0 [ 3111.600728][ C1] really_probe+0x241/0xa90 [ 3111.605265][ C1] __driver_probe_device+0x1de/0x440 [ 3111.610565][ C1] driver_probe_device+0x4c/0x1b0 [ 3111.615604][ C1] __device_attach_driver+0x1df/0x310 [ 3111.620995][ C1] bus_for_each_drv+0x159/0x1e0 [ 3111.625851][ C1] __device_attach+0x1e4/0x4b0 [ 3111.630630][ C1] bus_probe_device+0x17f/0x1c0 [ 3111.635486][ C1] device_add+0x1148/0x1aa0 [ 3111.640027][ C1] usb_new_device+0xd07/0x1a60 [ 3111.644818][ C1] hub_event+0x2f34/0x4fe0 [ 3111.649287][ C1] process_one_work+0x9cf/0x1b70 [ 3111.654239][ C1] worker_thread+0x6c8/0xf10 [ 3111.658936][ C1] kthread+0x3c5/0x780 [ 3111.663006][ C1] ret_from_fork+0x675/0x7d0 [ 3111.667642][ C1] ret_from_fork_asm+0x1a/0x30 [ 3111.672451][ C1] [ 3111.674819][ C1] Freed by task 28450: [ 3111.678877][ C1] kasan_save_stack+0x33/0x60 [ 3111.683592][ C1] kasan_save_track+0x14/0x30 [ 3111.688323][ C1] __kasan_save_free_info+0x3b/0x60 [ 3111.693535][ C1] __kasan_slab_free+0x5f/0x80 [ 3111.698321][ C1] kfree+0x2b8/0x6d0 [ 3111.702228][ C1] xpad_disconnect+0x1cf/0x580 [ 3111.707103][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 3111.712310][ C1] device_remove+0x125/0x170 [ 3111.716910][ C1] device_release_driver_internal+0x44b/0x620 [ 3111.722993][ C1] bus_remove_device+0x22f/0x420 [ 3111.727947][ C1] device_del+0x396/0x9f0 [ 3111.732295][ C1] usb_disable_device+0x355/0x7d0 [ 3111.737366][ C1] usb_disconnect+0x2e1/0x9c0 [ 3111.742151][ C1] hub_event+0x1c81/0x4fe0 [ 3111.746590][ C1] process_one_work+0x9cf/0x1b70 [ 3111.751531][ C1] worker_thread+0x6c8/0xf10 [ 3111.756127][ C1] kthread+0x3c5/0x780 [ 3111.760202][ C1] ret_from_fork+0x675/0x7d0 [ 3111.764822][ C1] ret_from_fork_asm+0x1a/0x30 [ 3111.769622][ C1] [ 3111.771936][ C1] The buggy address belongs to the object at ffff88807f07e000 [ 3111.771936][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 3111.786082][ C1] The buggy address is located 88 bytes inside of [ 3111.786082][ C1] freed 1024-byte region [ffff88807f07e000, ffff88807f07e400) [ 3111.799909][ C1] [ 3111.802250][ C1] The buggy address belongs to the physical page: [ 3111.808742][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f078 [ 3111.817512][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3111.826026][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3111.833576][ C1] page_type: f5(slab) [ 3111.837559][ C1] raw: 00fff00000000040 ffff88813ffa6dc0 ffffea00016d0000 dead000000000002 [ 3111.846155][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3111.854761][ C1] head: 00fff00000000040 ffff88813ffa6dc0 ffffea00016d0000 dead000000000002 [ 3111.863450][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 3111.872246][ C1] head: 00fff00000000003 ffffea0001fc1e01 00000000ffffffff 00000000ffffffff [ 3111.880926][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3111.889591][ C1] page dumped because: kasan: bad access detected [ 3111.896095][ C1] page_owner tracks the page as allocated [ 3111.901807][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6359, tgid 6359 (kworker/u8:20), ts 2440160727312, free_ts 2439723887140 [ 3111.921546][ C1] post_alloc_hook+0x1c0/0x230 [ 3111.926339][ C1] get_page_from_freelist+0x10a3/0x3a30 [ 3111.931903][ C1] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 3111.937845][ C1] alloc_pages_mpol+0x1fb/0x550 [ 3111.942714][ C1] new_slab+0x24a/0x360 [ 3111.946900][ C1] ___slab_alloc+0xdc4/0x1ae0 [ 3111.951599][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 3111.957089][ C1] __kmalloc_noprof+0x501/0x880 [ 3111.961978][ C1] ieee802_11_parse_elems_full+0x1db/0x3780 [ 3111.968184][ C1] ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 3111.974306][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 3111.979719][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 3111.984848][ C1] process_one_work+0x9cf/0x1b70 [ 3111.989801][ C1] worker_thread+0x6c8/0xf10 [ 3111.994413][ C1] kthread+0x3c5/0x780 [ 3111.998493][ C1] ret_from_fork+0x675/0x7d0 [ 3112.003124][ C1] page last free pid 1332 tgid 1332 stack trace: [ 3112.009447][ C1] __free_frozen_pages+0x7df/0x1160 [ 3112.014661][ C1] __put_partials+0x130/0x170 [ 3112.019364][ C1] qlist_free_all+0x4d/0x120 [ 3112.023990][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 3112.029823][ C1] __kasan_slab_alloc+0x69/0x90 [ 3112.034701][ C1] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 3112.040530][ C1] sock_alloc_inode+0x25/0x1c0 [ 3112.045305][ C1] alloc_inode+0x64/0x240 [ 3112.049641][ C1] sock_alloc+0x40/0x280 [ 3112.053892][ C1] __sock_create+0xc1/0x8d0 [ 3112.058417][ C1] rds_tcp_conn_path_connect+0x2d0/0x7f0 [ 3112.064056][ C1] rds_connect_worker+0x1af/0x2c0 [ 3112.069103][ C1] process_one_work+0x9cf/0x1b70 [ 3112.074054][ C1] worker_thread+0x6c8/0xf10 [ 3112.078655][ C1] kthread+0x3c5/0x780 [ 3112.082724][ C1] ret_from_fork+0x675/0x7d0 [ 3112.087433][ C1] [ 3112.089751][ C1] Memory state around the buggy address: [ 3112.095378][ C1] ffff88807f07df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3112.103454][ C1] ffff88807f07df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3112.111515][ C1] >ffff88807f07e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3112.119572][ C1] ^ [ 3112.126514][ C1] ffff88807f07e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3112.134594][ C1] ffff88807f07e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3112.142737][ C1] ================================================================== [ 3112.150812][ C1] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 3112.158545][ C1] CPU: 1 UID: 0 PID: 3546 Comm: syz.7.9181 Tainted: G B syzkaller #0 PREEMPT(full) [ 3112.169446][ C1] Tainted: [B]=BAD_PAGE [ 3112.173626][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3112.183687][ C1] Call Trace: [ 3112.187083][ C1] [ 3112.189923][ C1] dump_stack_lvl+0x3d/0x1f0 [ 3112.194531][ C1] vpanic+0x640/0x6f0 [ 3112.198553][ C1] panic+0xca/0xd0 [ 3112.202298][ C1] ? __pfx_panic+0x10/0x10 [ 3112.206752][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.212400][ C1] ? rcu_is_watching+0x12/0xc0 [ 3112.217185][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.222837][ C1] ? lock_release+0x201/0x2f0 [ 3112.227718][ C1] ? print_report+0x2bd/0x630 [ 3112.232401][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.238118][ C1] end_report+0x159/0x170 [ 3112.242485][ C1] kasan_report+0xee/0x110 [ 3112.246912][ C1] ? do_raw_spin_lock+0x11d/0x2b0 [ 3112.251968][ C1] kasan_check_range+0x100/0x1b0 [ 3112.256926][ C1] do_raw_spin_lock+0x11d/0x2b0 [ 3112.261795][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3112.267183][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.273015][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 3112.278308][ C1] ? __wake_up+0x1c/0x60 [ 3112.282571][ C1] __wake_up+0x1c/0x60 [ 3112.286753][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 3112.292238][ C1] __usb_hcd_giveback_urb+0x3d5/0x610 [ 3112.297624][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 3112.302861][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.308514][ C1] dummy_timer+0x1809/0x3a00 [ 3112.313137][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 3112.318178][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.323841][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.329486][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.335504][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3112.341340][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.346986][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 3112.352633][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 3112.358627][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 3112.363599][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.369246][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3112.374199][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3112.379152][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.384795][ C1] ? mark_held_locks+0x49/0x80 [ 3112.389588][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3112.395490][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 3112.400442][ C1] __hrtimer_run_queues+0x202/0xad0 [ 3112.405665][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 3112.411397][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.417050][ C1] hrtimer_run_softirq+0x17d/0x350 [ 3112.422178][ C1] handle_softirqs+0x219/0x8e0 [ 3112.427225][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3112.432525][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.438436][ C1] __irq_exit_rcu+0x109/0x170 [ 3112.443130][ C1] irq_exit_rcu+0x9/0x30 [ 3112.447384][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3112.453025][ C1] [ 3112.455949][ C1] [ 3112.458886][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3112.464964][ C1] RIP: 0010:filemap_map_pages+0x1db/0x1b70 [ 3112.470789][ C1] Code: da 48 8d 84 24 00 01 00 00 48 89 c7 48 89 44 24 78 e8 29 b0 ff ff 49 89 c7 48 85 c0 0f 84 96 15 00 00 e8 c8 85 c8 ff 4c 89 f2 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c2 17 [ 3112.490513][ C1] RSP: 0018:ffffc9000f01f670 EFLAGS: 00000246 [ 3112.496584][ C1] RAX: 0000000000080000 RBX: 000000000000030f RCX: ffffc9001613b000 [ 3112.504558][ C1] RDX: ffffc9000f01f9a0 RSI: ffffffff81f47438 RDI: 0000000000000006 [ 3112.512530][ C1] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000300 [ 3112.520590][ C1] R10: 0000000000000b36 R11: 0000000000000001 R12: ffffc9000f01f9b0 [ 3112.528561][ C1] R13: 0000000000000100 R14: ffffc9000f01f9a0 R15: ffffea00004a7680 [ 3112.536576][ C1] ? filemap_map_pages+0x1d8/0x1b70 [ 3112.541803][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 3112.548161][ C1] ? folio_add_file_rmap_ptes+0xa1f/0xdb0 [ 3112.554093][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.559841][ C1] ? __lock_acquire+0x622/0x1c90 [ 3112.564840][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3112.570340][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.576092][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 3112.581670][ C1] do_pte_missing+0xe33/0x3ba0 [ 3112.586457][ C1] ? find_held_lock+0x2b/0x80 [ 3112.591240][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.596905][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 3112.602054][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.607807][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 3112.613466][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.619214][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 3112.624716][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.630386][ C1] ? find_held_lock+0x2b/0x80 [ 3112.635094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.640745][ C1] ? follow_page_pte+0x5cf/0x1390 [ 3112.645795][ C1] handle_mm_fault+0x589/0xd10 [ 3112.650675][ C1] __get_user_pages+0x54e/0x3530 [ 3112.655720][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 3112.661099][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.666762][ C1] populate_vma_page_range+0x267/0x3f0 [ 3112.672245][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 3112.678235][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 3112.684099][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.689759][ C1] ? do_mmap+0x69c/0x1210 [ 3112.694188][ C1] __mm_populate+0x1d8/0x380 [ 3112.698879][ C1] ? __pfx___mm_populate+0x10/0x10 [ 3112.704096][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.709761][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.715417][ C1] ? up_write+0x1b2/0x520 [ 3112.719759][ C1] vm_mmap_pgoff+0x37f/0x470 [ 3112.724400][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3112.729822][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.735469][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.741134][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 3112.746091][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 3112.750830][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3112.756483][ C1] __x64_sys_mmap+0x125/0x190 [ 3112.761195][ C1] do_syscall_64+0xcd/0xfa0 [ 3112.765719][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3112.771623][ C1] RIP: 0033:0x7fd60318efc9 [ 3112.776040][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3112.795655][ C1] RSP: 002b:00007fd6040ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3112.804087][ C1] RAX: ffffffffffffffda RBX: 00007fd6033e5fa0 RCX: 00007fd60318efc9 [ 3112.812072][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 3112.820049][ C1] RBP: 00007fd603211f91 R08: ffffffffffffffff R09: 0000000000000000 [ 3112.828108][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 3112.836083][ C1] R13: 00007fd6033e6038 R14: 00007fd6033e5fa0 R15: 00007fff19f89938 [ 3112.844082][ C1] [ 3112.847428][ C1] Kernel Offset: disabled [ 3112.851752][ C1] Rebooting in 86400 seconds..