last executing test programs: 16.056881298s ago: executing program 3 (id=1587): socket(0x2, 0x80805, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xf01}], 0x3) 15.713937835s ago: executing program 3 (id=1588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}]}}]}}]}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 15.592143193s ago: executing program 2 (id=1590): lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x406f413, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380100001000130726bd70000000000064010101000000000000000000000000ac1414130000000000000000000000004e2200004e200003020000003a000000", @ANYRES32=0x0, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x40004) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x26, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_crypto(0x10, 0x3, 0x15) 15.310335197s ago: executing program 2 (id=1592): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x10000006, 0x0, 0x0, 0xb49, 0x9, 0x200000008, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x23a, 0x0, &(0x7f0000000180), 0x0) timer_create(0x7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_gettime(0x0, &(0x7f0000000100)) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40881) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r1, 0x0, 0x2c, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4000001, @mcast1={0xff, 0x7}, 0x800017}}, {{0xa, 0x0, 0x440000, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x104) socket(0x80000000000000a, 0x2, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) recvfrom$inet(r1, 0x0, 0x0, 0x52, 0x0, 0x20) 14.456165534s ago: executing program 4 (id=1593): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000040)) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x8000, 0x10, 0x80, 0x7fffffffffffffff}, &(0x7f00000002c0)=0x18) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f00000000c0)={"4739a9a4d2d7a028d599f3164e1a1083", 0x0, 0x0, {0x2, 0x6}, {0x6, 0x1}, 0x10, [0x6, 0x2, 0xffffffffffffffff, 0x8000000000000001, 0x8, 0x5, 0x8, 0x3e, 0x5, 0x2, 0xfffffffffffff801, 0x81, 0x8, 0x2, 0x7c1, 0x12]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f00000001c0)={"e3686c3c5f9969783ad6c6ebeb7d41d3", r3, r4, {0x800, 0x4}, {0x7, 0x2}, 0x2, [0x0, 0x2, 0x6, 0x2, 0x7fff, 0x8, 0x4, 0x6, 0x800, 0xe, 0x7, 0x5, 0x10000, 0x4, 0x4, 0x2]}) 13.96026468s ago: executing program 4 (id=1594): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x28000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x23a, 0x0, &(0x7f0000000180), 0x0) timer_create(0x7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_gettime(0x0, &(0x7f0000000100)) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40881) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6000}, 0x40000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r1, 0x0, 0x2c, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x800017}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x104) r6 = socket(0x80000000000000a, 0x2, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) recvfrom$inet(r6, 0x0, 0x3b, 0x101, 0x0, 0x0) 13.898111718s ago: executing program 1 (id=1595): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000000)="03020000008002ff", 0x8) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000000c0), &(0x7f00000003c0)="f29ddbcac9919c910f5a42cd7679f620eaf447595dfe0599a8cb00b05c180cefc8882010d31389183428abf59625f422c1a3a4a7791e4b0f34b7774ef0786b2f11a53abb664aed7bf66c21577d368a26cde1403746851306329bdde730345dea3f79ac0bd54899710fffc43d5e1b9133a939cc775cf1d6db9c1f8dd56143071684d47051b1f3e7f911a3ad611ca41071e931e51c05436a0b083d00"/169, 0xa9, 0xfffffffffffffffd) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x54, r3, 0x1, 0x70bd24, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x137f}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000001600), 0x1, r5}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef2, 0xe7, 0x8, 0x0, 0x0}}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r4}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00usted./dev/rnullb0\x00']) syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x2, 0x3}}, 0x20) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 13.684101155s ago: executing program 2 (id=1596): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) fcntl$setstatus(r0, 0x4, 0x42000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xfffffffe) writev(r3, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(r6, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x60, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 12.639353311s ago: executing program 0 (id=1597): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0xc, 0x29, 0x2}], 0xc}}], 0x1, 0x4000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000008c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.294615935s ago: executing program 3 (id=1598): socket(0x2, 0x80805, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b9174", 0xf01}], 0x3) 12.292647705s ago: executing program 4 (id=1599): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000008740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100001000000", @ANYRES32=r1], 0x10, 0x20000000}}], 0x1, 0x42805) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a00000044000180241cc269edf4e62c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000100000040000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x9c}}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r8, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3, 0x5, 0x4, 0x4}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x14000840) r9 = syz_usb_connect(0x6, 0x24, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRESOCT=r6, @ANYRES16, @ANYRES8=r0, @ANYRES32=r4, @ANYRESOCT=r8], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r11, 0x21, &(0x7f0000000440), 0x1) r12 = openat$kvm(0xffffff9c, &(0x7f00000004c0), 0x511e40, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0xfffffffe) r14 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xafa3f5779ae44674) fchdir(r14) close(r14) statfs(&(0x7f0000000400)='.\x00', &(0x7f0000000440)=""/112) ioctl$KVM_SET_IRQCHIP(r13, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}]}}) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000500)=ANY=[@ANYBLOB="31b7d2024c674ba3682ce2b9187f6ddd12acae00d4bed1659e4116d3e1c69cf3ecfd05346e4d686c1465b5d75ed0c6a5c15150729d6d651424e943b0577d1d473abce91c491a6d1b061ebc37431c78dc3779"]) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x761c02) 12.156051145s ago: executing program 1 (id=1600): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r1}, 0x0, 0x8, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000002000)="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", 0xb61}], 0x2) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x1}, &(0x7f0000000200)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x28040600) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0xd0800, 0x100) fchown(r8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="4400000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002000000b0012800b00010062726964676500001400028005002a000000000005002b0004000000"], 0x44}}, 0x0) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) readv(r7, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r8, 0x5502) 12.116979707s ago: executing program 3 (id=1601): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @sliced={0x7, [0x7, 0x9, 0xf, 0xfff7, 0xfe05, 0x6, 0x1, 0x1, 0x9, 0x7, 0x4c3, 0x9, 0x9, 0x5, 0x7, 0x5, 0x9, 0xb476, 0x1, 0x2, 0x100, 0x0, 0x4, 0x6244, 0x5, 0xe438, 0x5, 0x8, 0x0, 0x80, 0x401, 0x140, 0x7ff, 0x878a, 0x3, 0x5, 0xfdba, 0x8000, 0x2, 0xffbb, 0x176, 0x9fb3, 0x4, 0x8, 0xa032, 0x3, 0x2, 0x2c52], 0x9f8}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073060000000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000034000000060a010400000000000000000100000008000b40000000000c000640000000000000000409000100730000140000001100010000000000000000000000000a0000000000"], 0xa8}}, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0xa000032a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe", 0x1a}], 0x1}, 0x4004) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$hiddev(r5, &(0x7f0000000000)=""/149, 0x95) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) 12.065319656s ago: executing program 2 (id=1602): lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x406f413, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380100001000130726bd70000000000064010101000000000000000000000000ac1414130000000000000000000000004e2200004e200003020000003a000000", @ANYRES32=0x0, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x40004) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x26, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_crypto(0x10, 0x3, 0x15) 11.730643142s ago: executing program 2 (id=1603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000004c0)=0x2, 0x4) 11.127975183s ago: executing program 3 (id=1604): pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000596d7829320000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendfile(r5, r5, 0x0, 0xffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x39c, 0x0, 0x28c, 0x28c, 0x28c, 0x94, 0x32c, 0x32c, 0x32c, 0x32c, 0x32c, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2000000, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3f8) 11.12732597s ago: executing program 4 (id=1605): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x800, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) shmget$private(0x0, 0x1000, 0x401, &(0x7f000005c000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000300"/28], 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESDEC, @ANYBLOB=',audit,\x00']) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002"], 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={r5, 0x7fffffffffffffff, 0xb, 0xf2}) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x44}, 0x40034) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x150, 0x1a, 0xffffffffffffffff, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in=@loopback, {0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x970, 0x8, 0x0, 0xa80}, {0x0, 0x3, 0x0, 0xa6}, {0x4}, 0x70bd2a, 0x3503, 0xa, 0x0, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e20, @in=@empty}}]}, 0x150}}, 0x0) setsockopt$inet_int(r5, 0x29, 0x1a, 0x0, 0x0) 9.979418085s ago: executing program 1 (id=1606): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[], 0x27) 9.841425828s ago: executing program 1 (id=1607): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xffffffff8602201a, 0x0, 0x7, 0x3}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x2b, 0x5, 0xffffffff2c000000, 0x4, 0x1, 0x1, 0xd, 0x0, 0x0, 0x0, 0x3}}, 0x50) creat(0x0, 0x182) rename(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @broadcast}, 0x3}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d030020000000000000130000004c00098007009365a4b8ffff080002001d00"], 0x60}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0x73, 0x9f, 0x20, 0x4a4, 0x14, 0xc957, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x4, 0xce, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0xa4, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3, 0xfc, 0x1, [@generic={0x7, 0x5, "910e3a85ea"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x7, 0x1}}]}}]}}]}}, 0x0) socket$inet6(0xa, 0xa, 0xfffffffe) syz_open_dev$video(&(0x7f0000000140), 0x0, 0xa00c00) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x3) 9.746174311s ago: executing program 3 (id=1608): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}]}}]}}]}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 8.236213938s ago: executing program 0 (id=1609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 8.16438302s ago: executing program 0 (id=1610): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x440) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000017010000040000000c"], 0x18}}], 0x2, 0x8810) timer_create(0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = signalfd(r0, &(0x7f0000000140)={[0x300, 0x5]}, 0x8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5bacabb8d965689422588ee102d6a6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80cee51e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf44c92026b5be1ad6933ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b6", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x7fff, 0x0, 0x6000, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000701, r7, &(0x7f0000001200)) r8 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000040)={0x2, 0x8, 0x1000, &(0x7f0000000200)=""/4096}) write$binfmt_script(r8, 0x0, 0x0) write$P9_RFLUSH(r8, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0xca80) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x3, "625f94f0000000000302009024165d61e196ffc700004b1cd9ae00", 0x1, 0x9, 0x1, 0xb000, 0x200, 0x2}) 8.044235107s ago: executing program 0 (id=1611): socket(0x2, 0x80805, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b9174", 0xf01}], 0x3) 7.800616789s ago: executing program 4 (id=1612): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000019400)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000019500)=0xe4) sendmmsg$unix(r2, &(0x7f000001ba40)=[{{&(0x7f0000019080)=@file={0x1, '.\x00'}, 0x6e, &(0x7f00000193c0)=[{&(0x7f0000019100)="b25079be326b2c49149b422910904bb357ab69cf2729fdde92525f25f9004c976b512cf77e187dfb525990f00ea7189e09061eb95dfef88db2adafa9f308ec104a4a0ff3c9bb76", 0x47}, {&(0x7f0000019180)="19e7e693886c5cfa84e6018c70eff8d1b7d86fa457e357522037c26699473acfb4d7ef57f44d13dac956eaf711545bb8e6beabf14e08f4987a0613ff1302d7dbaaec2936cb8b2782125768c9f6228110730800eb40090a4ef42f6bf0d858bf57f20fda3993891884bb03adada251434df621a94e9a712b3f1ebfdb997191adb15f2de57c5f9ad98cf68d1bcf3cbc337e8210876584b22a2eefe56ea80aecbe07", 0xa0}, {&(0x7f0000019240)="11cfc73e87b9f576df2ea9aad190e580b9b78d00d87f10500a1cbf78c145423812a5b58108c8be446d0563b3cef538e0a16bb5f067d98de124db48a7d2aaa79bfc7d3255d6efbf02449d53", 0x4b}, {&(0x7f00000192c0)="5c32ae8b35b57934e309b77b45e4f3950468fd0139bb51516a81b4d3acc2f6805a55c9d14eff043803f4cf9e45c87be8df1c2851edc62ea904668aadd6891a426b8433267a00fe9818b9db200c1bf086685a12afca9867a866e16e3aebe2f4d20aa1f3047e5fbdc7fa549ebe0baf6de44244712ead753ea0600747167b7f3672f559704bd9c7e3c39462352732998c", 0x8f}, {&(0x7f0000019380)="bcd3ab920011636fe64da9e3c1acde3162f843000f956ba9ef6bde5a25670736c9f3d3146c28b8b10df871eefe9baff9", 0x30}], 0x5, &(0x7f00000195c0)=[@cred={{0x18, 0x1, 0x2, {r3, r4}}}], 0x18, 0x8000}}, {{0x0, 0x0, &(0x7f000001ba00), 0x0, 0x0, 0x0, 0x20040040}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) readv(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_getaffinity(0x0, 0x8, &(0x7f0000000240)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x80000004, 0x4) setns(r7, 0x24020000) r9 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x39) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x800, 0xf3, 0x2}}, 0x20, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, &(0x7f0000000780), 0x4) 7.752002827s ago: executing program 0 (id=1613): lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x406f413, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380100001000130726bd70000000000064010101000000000000000000000000ac1414130000000000000000000000004e2200004e200003020000003a000000", @ANYRES32=0x0, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x40004) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x26, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_crypto(0x10, 0x3, 0x15) 7.743786945s ago: executing program 1 (id=1614): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000002000010029bd7000fedbdf250280000400000000030000000800010064010101140003006c6f000000000000000029d19e2a148e"], 0x1c}}, 0x40010) 7.643752694s ago: executing program 1 (id=1615): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000"], 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0x2000000000a, 0x0, 0x3}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4c, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x45, 0x1, 0x2, "6040a7170200ff0120000000fcff00ff1057e31e940000000000000000aeff00", 0x50313134}) read$FUSE(r2, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) capget(&(0x7f0000000140)={0x20080522}, &(0x7f00000001c0)={0x0, 0x1, 0x2e7, 0x4, 0x1, 0x86d7}) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f010000000000000002000724140000000004241300052406000005240000000d240f"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xe737}}, 0x10) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f59190200867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358", 0xe0}, {&(0x7f0000001480)="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", 0x7c1}], 0x3) timerfd_create(0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x36) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 7.56000529s ago: executing program 2 (id=1616): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005f4000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$evdev(0x0, 0x0, 0x28000) socket$alg(0x26, 0x5, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c06", 0x3, 0xfffffffffffffffe) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x15, 0xfffffffffffffec9, 0x0}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000001c0)="c683c320bb386bce45eb641122", 0xd, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$update(0x2, r3, &(0x7f0000000340)="097c54fc37b886bd04d47f27a627e3fcb5adf2af5878909217d05f7a85e42c0f12ed5cacc1f32a2658c6ec0000410307bb5289925b934bdcd7c38da91c1fd6037fd7f955277887000000006c6fc059d574f7b50fe210777f2c0edd324762b4", 0x5f) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r6 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x17b}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r9}}, 0x48) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r10 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r10, 0x29, 0x24, &(0x7f00000000c0), 0x4) 7.397830453s ago: executing program 4 (id=1617): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[], 0x27) 0s ago: executing program 0 (id=1618): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xffffffff8602201a, 0x0, 0x7, 0x3}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x2b, 0x5, 0xffffffff2c000000, 0x4, 0x1, 0x1, 0xd, 0x0, 0x0, 0x0, 0x3}}, 0x50) creat(0x0, 0x182) rename(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @broadcast}, 0x3}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d030020000000000000130000004c00098007009365a4b8ffff080002001d00"], 0x60}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0x73, 0x9f, 0x20, 0x4a4, 0x14, 0xc957, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x4, 0xce, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0xa4, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3, 0xfc, 0x1, [@generic={0x7, 0x5, "910e3a85ea"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x7, 0x1}}]}}]}}]}}, 0x0) socket$inet6(0xa, 0xa, 0xfffffffe) syz_open_dev$video(&(0x7f0000000140), 0x0, 0xa00c00) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x3) kernel console output (not intermixed with test programs): 1062] populate_vma_page_range+0x29f/0x3a0 [ 479.106101][T11062] ? __pfx_populate_vma_page_range+0x10/0x10 [ 479.106119][T11062] ? apply_vma_lock_flags+0x31b/0x390 [ 479.106144][T11062] ? down_read+0x1ad/0x2e0 [ 479.106171][T11062] __mm_populate+0x24c/0x380 [ 479.106192][T11062] ? __pfx___mm_populate+0x10/0x10 [ 479.106215][T11062] ? up_write+0x1c4/0x420 [ 479.106242][T11062] do_mlock+0x612/0x720 [ 479.106270][T11062] ? __pfx_do_mlock+0x10/0x10 [ 479.106288][T11062] ? fput+0xa0/0xd0 [ 479.106307][T11062] ? ksys_write+0x22a/0x250 [ 479.106327][T11062] ? exc_page_fault+0x82/0x100 [ 479.106349][T11062] ? __pfx_ksys_write+0x10/0x10 [ 479.106373][T11062] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 479.106400][T11062] __ia32_sys_mlock+0x5f/0x70 [ 479.106420][T11062] __do_fast_syscall_32+0xb6/0x2b0 [ 479.106450][T11062] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.106474][T11062] do_fast_syscall_32+0x34/0x80 [ 479.106497][T11062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.106517][T11062] RIP: 0023:0xf703d539 [ 479.106531][T11062] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 479.106545][T11062] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000096 [ 479.106564][T11062] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 479.106577][T11062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.106587][T11062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.106597][T11062] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 479.106607][T11062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.106632][T11062] [ 479.921296][T11084] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1327'. [ 480.852735][ T30] audit: type=1326 audit(1762065447.412:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 480.902710][ T30] audit: type=1326 audit(1762065447.432:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 480.926186][ T30] audit: type=1326 audit(1762065447.442:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 480.949658][ T30] audit: type=1326 audit(1762065447.442:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 480.994320][ T30] audit: type=1326 audit(1762065447.442:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 481.125730][ T30] audit: type=1326 audit(1762065447.442:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 481.178843][ T30] audit: type=1326 audit(1762065447.442:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 481.358658][ T5909] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 481.528727][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 481.557634][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.574045][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.586021][ T5909] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 481.598159][ T5909] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 481.598993][ T5933] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 481.610228][ T5909] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 481.640904][ T5909] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 481.650472][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 481.658609][ T5909] usb 4-1: SerialNumber: syz [ 481.670782][T11100] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.686568][ T5909] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 481.696627][ T5909] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 481.738861][ T5888] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 481.758712][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 481.766633][ T5933] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 481.776680][ T5933] usb 5-1: config 0 has no interface number 0 [ 481.783411][ T5933] usb 5-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.794944][ T5933] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 481.805045][ T5933] usb 5-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 481.816672][ T5933] usb 5-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 481.828308][ T5933] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 481.838648][ T5933] usb 5-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.854633][ T5933] usb 5-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 481.863945][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.872103][ T5933] usb 5-1: Product: syz [ 481.876459][ T5933] usb 5-1: Manufacturer: syz [ 481.882094][ T5933] usb 5-1: SerialNumber: syz [ 481.890794][ T5888] usb 3-1: config 0 has no interfaces? [ 481.891894][ T5933] usb 5-1: config 0 descriptor?? [ 481.908563][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.918129][T11107] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 481.927367][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.927705][T11107] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 481.947223][ T5933] ipaq 5-1:0.19: PocketPC PDA converter detected [ 481.948855][ T5888] usb 3-1: config 0 descriptor?? [ 481.954219][ T5933] usb 5-1: active config #0 != 1 ?? [ 481.998582][ T5909] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 482.148571][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 482.159539][ T5909] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 482.168677][ T5933] usb 5-1: USB disconnect, device number 69 [ 482.174874][ T5909] usb 2-1: config 0 has no interface number 0 [ 482.193650][ T5909] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.213166][ T5909] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 482.225178][ T5909] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 482.239103][ T5909] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 482.250839][ T5909] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 482.261918][ T5909] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.279076][ T5909] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 482.288408][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.299086][ T5909] usb 2-1: Product: syz [ 482.303342][ T5909] usb 2-1: Manufacturer: syz [ 482.308051][ T5909] usb 2-1: SerialNumber: syz [ 482.323210][ T5909] usb 2-1: config 0 descriptor?? [ 482.330550][T11114] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 482.338092][T11114] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 482.350830][ T5909] ipaq 2-1:0.19: PocketPC PDA converter detected [ 482.360915][ T5909] usb 2-1: active config #0 != 1 ?? [ 482.487196][ T5909] usb 3-1: USB disconnect, device number 57 [ 482.595235][ T939] usb 2-1: USB disconnect, device number 69 [ 482.998552][ T5909] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 483.158686][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 483.170424][ T5909] usb 5-1: config 0 has an invalid interface number: 168 but max is 1 [ 483.178964][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.189694][ T5909] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 483.198901][ T5909] usb 5-1: config 0 has no interface number 0 [ 483.205137][ T5909] usb 5-1: config 0 interface 168 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.220732][ T5909] usb 5-1: config 0 interface 168 has no altsetting 0 [ 483.227549][ T5909] usb 5-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=15.32 [ 483.237266][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.264854][ T5909] usb 5-1: config 0 descriptor?? [ 483.443809][T11135] netlink: 'syz.1.1341': attribute type 3 has an invalid length. [ 483.451706][T11135] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1341'. [ 483.572552][ T5909] kaweth 5-1:0.168: Firmware present in device. [ 483.582025][ T5909] kaweth 5-1:0.168: Error reading configuration (-71), no net device created [ 483.591594][ T5909] kaweth 5-1:0.168: probe with driver kaweth failed with error -5 [ 483.601822][ T5909] cdc_ether 5-1:0.168: skipping garbage [ 483.607478][ T5909] usb 5-1: bad CDC descriptors [ 483.620056][ T5909] usb 5-1: USB disconnect, device number 70 [ 483.694376][ T5933] usb 4-1: USB disconnect, device number 70 [ 484.243137][ T5933] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 484.581329][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 484.591606][ T5933] usb 4-1: config 102 has an invalid descriptor of length 20, skipping remainder of the config [ 484.624506][ T5933] usb 4-1: config 102 has 0 interfaces, different from the descriptor's value: 1 [ 484.712254][ T5933] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 484.721881][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 484.730298][ T5933] usb 4-1: Product: syz [ 484.734610][ T5933] usb 4-1: Manufacturer: syz [ 484.739566][ T5933] usb 4-1: SerialNumber: syz [ 485.488725][ T855] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 485.555019][ T5933] usb 4-1: USB disconnect, device number 71 [ 485.571266][T11162] netlink: 'syz.2.1347': attribute type 4 has an invalid length. [ 485.579184][T11162] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1347'. [ 485.649242][ T5916] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 485.670502][ T855] usb 5-1: Using ep0 maxpacket: 32 [ 485.680079][ T855] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 485.689479][ T855] usb 5-1: config 0 has no interface number 0 [ 485.695717][ T855] usb 5-1: config 0 interface 184 has no altsetting 0 [ 485.707110][ T855] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 485.723844][ T855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.732908][ T855] usb 5-1: Product: syz [ 485.737102][ T855] usb 5-1: Manufacturer: syz [ 485.742005][ T855] usb 5-1: SerialNumber: syz [ 485.748673][ T855] usb 5-1: config 0 descriptor?? [ 485.755758][ T855] smsc75xx v1.0.0 [ 485.760082][ T855] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 485.771629][ T855] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 485.810669][ T5916] usb 1-1: config 0 has no interfaces? [ 485.816800][ T5916] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.827835][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.838617][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 485.847434][ T5916] usb 1-1: config 0 descriptor?? [ 485.967940][ T5909] usb 5-1: USB disconnect, device number 71 [ 486.010498][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 486.021265][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 486.032527][ T24] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.045957][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 486.055292][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.072880][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.081432][ T24] usb 3-1: invalid MIDI out EP 0 [ 486.174478][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 486.289964][ T24] usb 3-1: USB disconnect, device number 58 [ 486.695105][T11172] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1350'. [ 486.939186][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 487.078530][ T5916] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 487.118557][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 487.128005][ T24] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 487.137565][ T24] usb 2-1: config 0 has no interface number 0 [ 487.146918][ T24] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 487.163396][ T24] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 487.179730][ T24] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 487.218049][ T24] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 487.238965][ T24] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 487.250928][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 487.289663][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.308662][ T24] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.349925][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 487.410395][ T5916] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 487.432400][ T24] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 487.442681][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.459218][ T24] usb 2-1: Product: syz [ 487.469817][ T5916] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 487.484443][ T24] usb 2-1: Manufacturer: syz [ 487.502181][ T24] usb 2-1: SerialNumber: syz [ 487.513456][ T5916] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 487.685200][ T5916] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 487.695257][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 487.705250][ T5916] usb 4-1: SerialNumber: syz [ 487.719523][ T24] usb 2-1: config 0 descriptor?? [ 487.742136][T11172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 487.751701][T11180] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 487.772317][ T5916] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 487.789364][T11172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 487.802422][ T5916] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 487.839460][ T24] ipaq 2-1:0.19: PocketPC PDA converter detected [ 487.853853][ T24] usb 2-1: active config #0 != 1 ?? [ 487.954995][T11187] netlink: 'syz.2.1356': attribute type 8 has an invalid length. [ 488.064003][ T5916] usb 2-1: USB disconnect, device number 70 [ 488.317872][T11191] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1358'. [ 488.345905][T11191] : renamed from batadv_slave_1 (while UP) [ 488.363724][ T5916] usb 1-1: USB disconnect, device number 67 [ 489.679734][ T5888] usb 4-1: USB disconnect, device number 72 [ 490.298778][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 490.371708][ T5916] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 490.498724][ T939] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 490.539751][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 490.549003][ T5916] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 490.557458][ T5916] usb 3-1: config 0 has no interface number 0 [ 490.564102][ T5916] usb 3-1: config 0 interface 184 has no altsetting 0 [ 490.571220][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 490.714171][ T939] usb 2-1: config 0 has no interfaces? [ 490.716500][ T24] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 490.719993][ T939] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 490.730531][ T5916] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 490.749219][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.757960][ T24] usb 1-1: Product: syz [ 490.758826][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.768552][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.779269][ T5916] usb 3-1: Product: syz [ 490.783513][ T24] usb 1-1: Manufacturer: syz [ 490.937434][ T5916] usb 3-1: Manufacturer: syz [ 490.947525][ T24] usb 1-1: SerialNumber: syz [ 490.955136][ T5916] usb 3-1: SerialNumber: syz [ 490.966734][ T5916] usb 3-1: config 0 descriptor?? [ 490.976256][ T24] usb 1-1: config 0 descriptor?? [ 490.989737][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 490.999978][ T5916] smsc75xx v1.0.0 [ 491.005159][ T5916] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 491.015902][ T24] usb 1-1: setting power ON [ 491.021117][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 491.027440][ T5916] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 491.055804][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 491.071566][ T939] usb 2-1: config 0 descriptor?? [ 491.084232][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 491.093903][ T24] usb 1-1: media controller created [ 491.134137][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.179279][ T24] usb 1-1: selecting invalid altsetting 6 [ 491.270585][ T24] usb 1-1: digital interface selection failed (-22) [ 491.280895][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 491.308711][ T855] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 491.313335][ T939] usb 3-1: USB disconnect, device number 59 [ 491.333602][ T24] usb 1-1: setting power OFF [ 491.349775][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 491.361225][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 491.385000][ T24] (NULL device *): no alternate interface [ 491.538053][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 492.469948][T11244] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1372'. [ 492.614397][T11247] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1373'. [ 492.718607][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 492.873364][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 492.881421][ T24] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 492.894101][ T24] usb 3-1: config 0 has no interface number 0 [ 492.917559][ T24] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 492.964418][ T24] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 493.007251][ T24] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 493.067581][ T24] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 493.088887][ T855] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 493.108881][ T855] usb 5-1: can't read configurations, error -71 [ 493.128141][ T24] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 493.146884][ T24] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.162814][ T5933] usb 2-1: USB disconnect, device number 71 [ 493.230017][ T24] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 493.239690][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.247854][ T24] usb 3-1: Product: syz [ 493.256691][ T5909] usb 1-1: USB disconnect, device number 68 [ 493.274220][ T24] usb 3-1: Manufacturer: syz [ 493.306910][ T24] usb 3-1: SerialNumber: syz [ 493.368271][ T24] usb 3-1: config 0 descriptor?? [ 493.384390][T11244] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 493.397288][T11244] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 493.408398][ T24] ipaq 3-1:0.19: PocketPC PDA converter detected [ 493.419433][ T24] usb 3-1: active config #0 != 1 ?? [ 493.612421][ T5916] usb 3-1: USB disconnect, device number 60 [ 493.778604][ T855] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 494.268624][ T939] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 494.350563][ T855] usb 5-1: Using ep0 maxpacket: 16 [ 494.389921][ T855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.427769][ T855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 494.558671][ T855] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 494.571097][ T939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.598572][ T855] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 494.623396][ T855] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 494.625101][ T939] usb 2-1: config 0 has no interfaces? [ 494.673316][ T855] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 494.685173][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 494.728876][ T939] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 494.747794][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.751315][ T855] usb 5-1: SerialNumber: syz [ 494.759457][ T939] usb 2-1: config 0 descriptor?? [ 494.841943][T11261] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 494.992233][ T855] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 495.001153][ T855] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 495.055605][T11276] netlink: 'syz.3.1380': attribute type 4 has an invalid length. [ 495.063748][T11276] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1380'. [ 495.288259][T11279] syzkaller0: entered promiscuous mode [ 495.293854][T11279] syzkaller0: entered allmulticast mode [ 495.440427][ T5909] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 495.488657][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.498596][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.509128][ T5951] usb 5-1: USB disconnect, device number 73 [ 495.532950][ T24] usb 2-1: USB disconnect, device number 72 [ 495.654509][ T5909] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 495.678731][ T5909] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 495.738337][ T5909] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.752039][ T5909] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 495.761913][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.817257][ T5909] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.832626][ T5909] usb 4-1: invalid MIDI out EP 0 [ 495.838598][ T5916] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 496.024838][ T5909] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 496.039359][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 496.047717][ T5916] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 496.066793][ T5909] usb 4-1: USB disconnect, device number 73 [ 496.074989][ T5916] usb 3-1: config 0 has no interface number 0 [ 496.088559][ T5916] usb 3-1: config 0 interface 184 has no altsetting 0 [ 496.146429][ T5916] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 496.171686][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.229729][ T5916] usb 3-1: Product: syz [ 496.233931][ T5916] usb 3-1: Manufacturer: syz [ 496.260488][ T5916] usb 3-1: SerialNumber: syz [ 496.291684][ T5916] usb 3-1: config 0 descriptor?? [ 496.304300][ T5916] smsc75xx v1.0.0 [ 496.312769][ T5916] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 496.478005][ T5916] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 496.553478][ T5916] usb 3-1: USB disconnect, device number 61 [ 496.658799][ T939] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 496.820546][ T939] usb 2-1: Using ep0 maxpacket: 32 [ 496.837074][ T939] usb 2-1: config 0 has an invalid interface number: 166 but max is 0 [ 496.852312][ T939] usb 2-1: config 0 has no interface number 0 [ 496.858755][ T939] usb 2-1: config 0 interface 166 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 496.872524][ T939] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=19.a8 [ 496.886923][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.908822][ T5933] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 496.910289][ T939] usb 2-1: Product: syz [ 496.922918][ T939] usb 2-1: Manufacturer: syz [ 496.928027][ T939] usb 2-1: SerialNumber: syz [ 496.943885][ T939] usb 2-1: config 0 descriptor?? [ 496.951148][T11288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 496.962420][ T939] ti_usb_3410_5052 2-1:0.166: TI USB 3410 1 port adapter converter detected [ 496.974754][ T939] ti_usb_3410_5052 2-1:0.166: missing endpoints [ 497.083537][ T5933] usb 5-1: config 0 has no interfaces? [ 497.089885][ T5933] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 497.100013][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.112118][ T5933] usb 5-1: config 0 descriptor?? [ 497.677103][ T939] usb 2-1: USB disconnect, device number 73 [ 498.498628][ T5951] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 498.794371][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 499.009731][ T5951] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 499.192260][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.328736][ T5951] usb 4-1: Product: syz [ 499.338603][ T5951] usb 4-1: Manufacturer: syz [ 499.354917][ T5951] usb 4-1: SerialNumber: syz [ 499.375434][ T5951] usb 4-1: config 0 descriptor?? [ 499.410464][ T5951] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 499.447690][T11310] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1391'. [ 499.548976][ T5951] usb 4-1: setting power ON [ 499.553554][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 499.593314][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.643191][ T5951] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 499.662572][ T5951] usb 4-1: media controller created [ 499.681111][ T24] usb 5-1: USB disconnect, device number 74 [ 499.698568][ T5933] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 499.858814][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 499.866162][ T5933] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 499.883169][ T5933] usb 2-1: config 0 has no interface number 0 [ 499.921080][ T5933] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.939606][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.955223][ T5933] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 500.009680][ T5933] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 500.065204][ T5951] usb 4-1: selecting invalid altsetting 6 [ 500.083058][ T5951] usb 4-1: digital interface selection failed (-22) [ 500.087383][ T5933] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 500.171988][ T5933] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 500.172030][ T5951] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 500.173405][ T5951] usb 4-1: setting power OFF [ 500.224844][ T5933] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.255365][ T24] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 500.292969][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 500.304081][ T5951] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 500.327745][ T5951] (NULL device *): no alternate interface [ 500.358639][ T5951] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 500.438925][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 500.470324][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.487001][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 500.499158][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 500.511194][ T5933] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 500.523017][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.540562][ T5933] usb 2-1: Product: syz [ 500.550967][ T5933] usb 2-1: Manufacturer: syz [ 500.556909][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 500.574190][ T5933] usb 2-1: SerialNumber: syz [ 500.586727][ T5933] usb 2-1: config 0 descriptor?? [ 500.593488][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 500.622870][T11310] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 500.631311][T11310] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 500.653170][ T5933] ipaq 2-1:0.19: PocketPC PDA converter detected [ 500.661369][ T24] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 500.679989][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 500.693017][ T5933] usb 2-1: active config #0 != 1 ?? [ 500.706350][ T24] usb 5-1: SerialNumber: syz [ 500.738193][T11318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.790149][ T24] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 500.866760][ T24] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 500.883233][ T5916] usb 2-1: USB disconnect, device number 74 [ 501.017466][ T5933] usb 5-1: USB disconnect, device number 75 [ 501.108915][ T24] usb 4-1: USB disconnect, device number 74 [ 501.445165][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.452104][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.583602][T11357] FAULT_INJECTION: forcing a failure. [ 502.583602][T11357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.693971][T11357] CPU: 1 UID: 0 PID: 11357 Comm: syz.0.1401 Not tainted syzkaller #0 PREEMPT(full) [ 502.694009][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.694021][T11357] Call Trace: [ 502.694029][T11357] [ 502.694037][T11357] dump_stack_lvl+0x189/0x250 [ 502.694066][T11357] ? __pfx____ratelimit+0x10/0x10 [ 502.694088][T11357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.694121][T11357] ? __pfx__printk+0x10/0x10 [ 502.694155][T11357] should_fail_ex+0x414/0x560 [ 502.694186][T11357] strncpy_from_user+0x36/0x290 [ 502.694215][T11357] getname_flags+0xf3/0x540 [ 502.694238][T11357] user_path_at+0x24/0x60 [ 502.694260][T11357] __se_sys_chroot+0x90/0x3b0 [ 502.694278][T11357] ? __pfx___se_sys_chroot+0x10/0x10 [ 502.694300][T11357] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 502.694324][T11357] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.694350][T11357] __do_fast_syscall_32+0xb6/0x2b0 [ 502.694383][T11357] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.694409][T11357] do_fast_syscall_32+0x34/0x80 [ 502.694433][T11357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.694454][T11357] RIP: 0023:0xf703d539 [ 502.694469][T11357] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 502.694484][T11357] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 000000000000003d [ 502.694506][T11357] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000000000000 [ 502.694519][T11357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.694530][T11357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.694541][T11357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.694552][T11357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.694580][T11357] [ 503.371299][T11364] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1404'. [ 503.624769][ T5909] syz_tun: tun_net_xmit 90 [ 503.790500][T11376] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1407'. [ 503.868576][ T5909] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 503.919547][ T939] syz_tun: tun_net_xmit 90 [ 504.158763][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 504.164231][ T5916] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 504.170674][ T5909] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 504.234092][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.245319][ T5909] usb 5-1: Product: syz [ 504.251986][ T5909] usb 5-1: Manufacturer: syz [ 504.267336][ T5909] usb 5-1: SerialNumber: syz [ 504.288584][ T5909] usb 5-1: config 0 descriptor?? [ 504.321398][ T5909] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 504.335729][ T5909] usb 5-1: setting power ON [ 504.345837][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 504.358605][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 504.365182][ T5916] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 504.373986][ T5916] usb 1-1: config 0 has no interface number 0 [ 504.382431][ T5916] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 504.408313][ T5916] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 504.435462][ T5916] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 504.463085][ T5916] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 504.475067][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.504199][ T5916] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 504.525866][ T5909] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 504.543127][ T5916] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.578137][ T5909] usb 5-1: media controller created [ 504.596376][ T5916] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 504.607850][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.617280][ T5916] usb 1-1: Product: syz [ 504.651264][ T5916] usb 1-1: Manufacturer: syz [ 504.663397][ T5916] usb 1-1: SerialNumber: syz [ 504.735190][ T5916] usb 1-1: config 0 descriptor?? [ 504.744332][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.769713][T11376] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 504.868229][T11376] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 504.882321][ T5916] ipaq 1-1:0.19: PocketPC PDA converter detected [ 504.896957][ T5916] usb 1-1: active config #0 != 1 ?? [ 504.961203][ T24] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 505.058248][ T5909] usb 5-1: selecting invalid altsetting 6 [ 505.070464][ T5909] usb 5-1: digital interface selection failed (-22) [ 505.086066][ T5909] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 505.104733][ T5909] usb 5-1: setting power OFF [ 505.108034][ T5933] usb 1-1: USB disconnect, device number 69 [ 505.115787][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 505.130926][ T5909] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 505.147984][ T5909] (NULL device *): no alternate interface [ 505.159898][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 505.174780][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.187101][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.214730][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 505.236886][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 505.247855][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 505.267957][ T24] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 505.278226][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 505.296166][ T5909] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 505.300768][ T24] usb 2-1: SerialNumber: syz [ 505.374930][T11387] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 505.398284][ T24] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 505.410364][ T24] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 505.617154][ T5909] usb 2-1: USB disconnect, device number 75 [ 505.892410][T11400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1413'. [ 505.901790][T11400] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1413'. [ 506.088550][ T5909] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 506.238819][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 506.249704][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.278634][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 506.300761][ T5909] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 506.322182][ T5909] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 506.347382][ T5909] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 506.385656][ T5909] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 506.406455][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 506.428106][ T5909] usb 1-1: SerialNumber: syz [ 506.434679][T11411] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1418'. [ 506.454646][T11398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 506.469040][ T5909] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 506.490057][ T5909] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 506.926423][ T5916] usb 5-1: USB disconnect, device number 76 [ 506.960701][ T5933] syz_tun: tun_net_xmit 90 [ 507.038641][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 507.204311][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 507.220382][ T24] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 507.233784][ T24] usb 3-1: config 0 has no interface number 0 [ 507.254322][ T24] usb 3-1: config 0 interface 166 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 507.385932][ T24] usb 3-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=19.a8 [ 507.413466][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.428411][ T24] usb 3-1: Product: syz [ 507.438618][ T24] usb 3-1: Manufacturer: syz [ 507.445690][ T24] usb 3-1: SerialNumber: syz [ 507.457061][ T24] usb 3-1: config 0 descriptor?? [ 507.476910][T11419] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 507.492108][ T24] ti_usb_3410_5052 3-1:0.166: TI USB 3410 1 port adapter converter detected [ 507.518978][ T24] ti_usb_3410_5052 3-1:0.166: missing endpoints [ 507.672336][T11429] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1422'. [ 507.682097][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1422'. [ 507.813595][T11428] netlink: 'syz.3.1422': attribute type 3 has an invalid length. [ 507.899042][ T24] syz_tun: tun_net_xmit 90 [ 508.115869][T11431] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1423'. [ 508.272163][ T5909] usb 3-1: USB disconnect, device number 62 [ 508.351411][T11435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1424'. [ 508.361068][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 508.371304][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1424'. [ 508.518562][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 508.534887][ T24] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 508.552051][ T24] usb 2-1: config 0 has no interface number 0 [ 508.563877][ T24] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.584394][T11443] netlink: 'syz.3.1425': attribute type 4 has an invalid length. [ 508.592301][T11443] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1425'. [ 508.743213][ T24] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 508.834204][ T24] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 508.837466][ T939] usb 1-1: USB disconnect, device number 70 [ 508.864997][ T24] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 508.911592][ T24] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 508.979798][ T5916] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 509.001205][ T24] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.100151][ T24] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 509.160971][ T5916] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 509.179029][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.203499][ T5916] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 509.209905][T11452] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1430'. [ 509.237248][ T24] usb 2-1: Product: syz [ 509.260403][ T24] usb 2-1: Manufacturer: syz [ 509.265035][ T24] usb 2-1: SerialNumber: syz [ 509.324364][ T5916] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.378810][ T24] usb 2-1: config 0 descriptor?? [ 509.388979][T11431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.398733][T11431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.423249][ T5916] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 509.431996][T11456] sg_write: process 1069 (syz.2.1432) changed security contexts after opening file descriptor, this is not allowed. [ 509.450605][ T24] ipaq 2-1:0.19: PocketPC PDA converter detected [ 509.453355][T11456] fuse: Bad value for 'fd' [ 509.471706][ T24] usb 2-1: active config #0 != 1 ?? [ 509.477065][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.515664][ T5916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.535252][ T5916] usb 4-1: invalid MIDI out EP 0 [ 509.619212][ T939] usb 2-1: USB disconnect, device number 76 [ 509.667741][ T5916] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 509.698574][ T5951] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 509.848622][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 509.855461][ T5951] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.878804][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 509.887616][ T5951] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 509.897668][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.911774][ T5951] usb 3-1: config 0 descriptor?? [ 509.920704][ T5951] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 509.937237][ T939] usb 4-1: USB disconnect, device number 75 [ 510.408676][ T939] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 510.418823][ T5951] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 510.558915][ T939] usb 5-1: Using ep0 maxpacket: 16 [ 510.566325][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.578170][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.588356][ T939] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 510.598835][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.607707][ T5951] usb 1-1: config 0 has no interfaces? [ 510.615591][ T5951] usb 1-1: New USB device found, idVendor=0bda, idProduct=8178, bcdDevice=ae.2e [ 510.625703][ T939] usb 5-1: config 0 descriptor?? [ 510.630806][ T5964] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 510.645362][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.663271][ T5951] usb 1-1: Product: syz [ 510.667600][ T5951] usb 1-1: Manufacturer: syz [ 510.673120][ T5951] usb 1-1: SerialNumber: syz [ 510.699430][ T5951] usb 1-1: config 0 descriptor?? [ 510.818737][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 510.825537][ T5964] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.837044][ T5964] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 510.848579][ T5964] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 510.859700][ T5964] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 510.892662][ T5964] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 510.908594][ T5964] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 510.918378][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 510.927981][ T5964] usb 2-1: SerialNumber: syz [ 510.942586][T11471] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 510.953969][ T5951] usb 1-1: USB disconnect, device number 71 [ 510.962586][ T939] usbhid 5-1:0.0: can't add hid device: -71 [ 510.971766][ T5964] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 510.983740][ T939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 510.994291][ T5964] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 511.008031][ T939] usb 5-1: USB disconnect, device number 77 [ 511.188596][ T24] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 511.338587][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 511.346521][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.358036][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 511.367953][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 511.378112][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 511.388270][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 511.402808][ T24] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 511.412201][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 511.420421][ T24] usb 4-1: SerialNumber: syz [ 511.427883][T11475] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 511.436940][ T24] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 511.446267][ T24] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 511.521779][ T5847] cgroup: fork rejected by pids controller in /syz0 [ 511.567486][T11480] syzkaller0: entered promiscuous mode [ 511.585420][T11480] syzkaller0: entered allmulticast mode [ 512.109376][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.218813][ T939] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 512.270846][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.378555][ T939] usb 5-1: Using ep0 maxpacket: 32 [ 512.386166][ T939] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 512.395067][ T939] usb 5-1: config 0 has no interface number 0 [ 512.403907][ T939] usb 5-1: config 0 interface 184 has no altsetting 0 [ 512.422460][ T939] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 512.443581][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.455699][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.464474][ T939] usb 5-1: Product: syz [ 512.477154][ T939] usb 5-1: Manufacturer: syz [ 512.486647][ T5916] usb 3-1: USB disconnect, device number 63 [ 512.488589][ T939] usb 5-1: SerialNumber: syz [ 512.559355][ T939] usb 5-1: config 0 descriptor?? [ 512.582797][ T939] smsc75xx v1.0.0 [ 512.599792][ T939] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 512.636515][ T939] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 512.641477][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.736075][T11484] 8021q: adding VLAN 0 to HW filter on device bond5 [ 512.815353][T11488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.826560][T11488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.836428][T11488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.846335][T11488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.855017][T11488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.889124][ T939] usb 5-1: USB disconnect, device number 78 [ 512.924959][T11484] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 512.964829][ T50] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 513.088871][ T50] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 513.174228][ T60] bridge_slave_1: left allmulticast mode [ 513.185851][ T60] bridge_slave_1: left promiscuous mode [ 513.198694][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.223816][ T60] bridge_slave_0: left allmulticast mode [ 513.230948][ T60] bridge_slave_0: left promiscuous mode [ 513.238261][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.310927][ T939] usb 2-1: USB disconnect, device number 77 [ 513.957494][ T5964] usb 4-1: USB disconnect, device number 76 [ 514.036225][T11515] __nla_validate_parse: 2 callbacks suppressed [ 514.036245][T11515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1446'. [ 514.128764][T11519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1447'. [ 514.140951][T11519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1447'. [ 514.235616][ T60]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.257777][ T60]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.268043][ T60]  (unregistering): Released all slaves [ 514.349788][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 514.407851][ T60] bond1 (unregistering): Released all slaves [ 514.506685][ T60] bond2 (unregistering): Released all slaves [ 514.528599][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 514.546144][ T24] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 514.557794][ T24] usb 5-1: config 0 has no interface number 0 [ 514.564679][ T24] usb 5-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.582634][ T24] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 514.616337][ T24] usb 5-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 514.629449][ T24] usb 5-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 514.641414][ T24] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 514.654353][ T24] usb 5-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.701431][ T24] usb 5-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 514.715263][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.744223][ T24] usb 5-1: Product: syz [ 514.749689][ T24] usb 5-1: Manufacturer: syz [ 514.755223][ T24] usb 5-1: SerialNumber: syz [ 514.771687][ T24] usb 5-1: config 0 descriptor?? [ 514.777649][T11515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 514.785565][T11515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 514.794919][ T24] ipaq 5-1:0.19: PocketPC PDA converter detected [ 514.808715][ T24] usb 5-1: active config #0 != 1 ?? [ 514.961294][T11488] Bluetooth: hci0: command tx timeout [ 515.022413][ T5964] usb 5-1: USB disconnect, device number 79 [ 515.696427][T11490] chnl_net:caif_netlink_parms(): no params data found [ 515.958098][ T60] hsr_slave_0: left promiscuous mode [ 515.990209][ T60] hsr_slave_1: left promiscuous mode [ 516.017953][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.042842][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.053834][T11550] netlink: 'syz.3.1453': attribute type 4 has an invalid length. [ 516.061861][T11550] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1453'. [ 516.192130][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.199787][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.463955][ T60] veth1_macvtap: left promiscuous mode [ 516.477332][ T60] veth0_macvtap: left promiscuous mode [ 516.489963][ T60] veth1_vlan: left promiscuous mode [ 516.498593][ T5916] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 516.507716][ T60] veth0_vlan: left promiscuous mode [ 516.557635][ T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 516.808610][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 516.816400][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.838319][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 516.927075][T11564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1454'. [ 516.937310][T11564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1454'. [ 516.975183][ T5916] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 516.986057][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 516.996820][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 517.008379][ T855] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 517.046261][T11488] Bluetooth: hci0: command tx timeout [ 517.076835][ T5916] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 517.128646][ T24] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.129420][T11565] netlink: 'syz.1.1454': attribute type 3 has an invalid length. [ 517.288505][ T855] usb 3-1: Using ep0 maxpacket: 16 [ 517.345915][ T855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.369019][ T5916] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 517.407372][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 517.416841][ T855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.427875][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.437454][ T855] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 517.466690][ T5916] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 517.493526][ T855] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 517.548607][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.556498][ T24] usb 4-1: invalid MIDI out EP 0 [ 517.565230][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.577257][ T855] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 517.590646][ T5916] usb 5-1: SerialNumber: syz [ 517.603645][T11556] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.621934][ T855] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 517.631155][ T5916] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 517.641165][ T855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.650681][ T5916] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 517.668503][ T855] usb 3-1: SerialNumber: syz [ 517.695417][T11560] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 517.793511][ T855] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 517.867404][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 517.892698][ T855] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 517.907922][ T24] usb 4-1: USB disconnect, device number 77 [ 518.654861][ T60] team0 (unregistering): Port device team_slave_1 removed [ 518.706537][ T60] team0 (unregistering): Port device team_slave_0 removed [ 519.023293][ T5964] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 519.122728][T11488] Bluetooth: hci0: command tx timeout [ 519.198527][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 519.200908][T11571] syzkaller0: entered promiscuous mode [ 519.209470][T11571] syzkaller0: entered allmulticast mode [ 519.213228][ T5964] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 519.232356][ T5964] usb 2-1: config 0 has no interface number 0 [ 519.239136][ T5964] usb 2-1: config 0 interface 184 has no altsetting 0 [ 519.253170][ T5964] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 519.275233][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.291715][ T5964] usb 2-1: Product: syz [ 519.309362][ T939] usb 3-1: USB disconnect, device number 64 [ 519.339987][ T5964] usb 2-1: Manufacturer: syz [ 519.344724][ T5964] usb 2-1: SerialNumber: syz [ 519.391849][ T5964] usb 2-1: config 0 descriptor?? [ 519.404487][T11490] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.405592][ T5964] smsc75xx v1.0.0 [ 519.413735][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.416805][ T5964] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 519.423467][T11490] bridge_slave_0: entered allmulticast mode [ 519.455873][T11490] bridge_slave_0: entered promiscuous mode [ 519.457990][ T5964] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 519.467274][T11490] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.508744][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.517159][T11490] bridge_slave_1: entered allmulticast mode [ 519.533049][ T5916] usb 5-1: USB disconnect, device number 80 [ 519.534319][T11490] bridge_slave_1: entered promiscuous mode [ 519.613799][T11490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.654897][T11490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.661249][T11582] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1458'. [ 519.675797][T11582] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1458'. [ 519.740367][ T939] usb 2-1: USB disconnect, device number 78 [ 519.884057][T11490] team0: Port device team_slave_0 added [ 519.962224][T11490] team0: Port device team_slave_1 added [ 519.974784][ T60] IPVS: stop unused estimator thread 0... [ 520.002623][T11590] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 520.096993][T11490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.105065][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.135525][T11490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.154727][T11490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.164872][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.197055][T11597] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1462'. [ 520.210908][T11490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.338883][T11490] hsr_slave_0: entered promiscuous mode [ 520.350575][T11490] hsr_slave_1: entered promiscuous mode [ 520.357851][T11490] debugfs: 'hsr0' already exists in 'hsr' [ 520.387210][T11490] Cannot create hsr debugfs directory [ 520.448563][ T5964] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 520.598515][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 520.613113][ T5964] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 520.627215][ T5964] usb 3-1: config 0 has no interface number 0 [ 520.645018][ T5964] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 520.666367][ T5964] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 520.684196][ T5964] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 520.718688][ T5964] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 520.739454][ T5964] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 520.761718][ T5964] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.791601][ T5964] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 520.803691][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.822382][ T5964] usb 3-1: Product: syz [ 520.828266][ T5964] usb 3-1: Manufacturer: syz [ 520.833416][ T5964] usb 3-1: SerialNumber: syz [ 520.849562][ T5964] usb 3-1: config 0 descriptor?? [ 520.875810][T11597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.883916][T11597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 520.936320][ T5964] ipaq 3-1:0.19: PocketPC PDA converter detected [ 520.958792][ T5964] usb 3-1: active config #0 != 1 ?? [ 521.188823][T11627] netlink: 'syz.4.1465': attribute type 4 has an invalid length. [ 521.196929][T11627] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1465'. [ 521.218795][ T5964] usb 3-1: USB disconnect, device number 65 [ 521.220565][T11488] Bluetooth: hci0: command tx timeout [ 521.568685][ T939] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 521.824092][T11490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 521.844118][ T939] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 521.894067][ T939] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.929270][T11490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 521.946037][ T939] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.968876][ T5916] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 521.990160][ T939] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.000345][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.011121][T11490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 522.066602][ T939] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.080228][T11490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 522.100854][ T939] usb 5-1: invalid MIDI out EP 0 [ 522.158626][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 522.373285][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.452769][ T939] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 522.495837][ T939] usb 5-1: USB disconnect, device number 81 [ 522.498054][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.522254][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 522.548748][ T5916] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 522.581309][ T5916] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 522.591835][ T5916] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 522.637015][ T5916] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 522.658385][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 522.816576][ T5916] usb 4-1: SerialNumber: syz [ 522.842971][T11644] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 522.863714][T11638] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 522.905102][ T5916] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 522.916567][ T5916] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 522.954389][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'. [ 523.254481][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 524.281929][T11490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.419290][T11490] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.434916][T11668] netlink: 'syz.2.1470': attribute type 4 has an invalid length. [ 524.469776][T11668] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1470'. [ 524.496116][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.503399][ T4542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.525264][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.532563][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.838609][ T5916] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 525.051663][ T5916] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 525.097338][ T5916] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 525.137977][T11490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.151537][ T5916] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.286249][ T5916] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 525.316138][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.358834][ T939] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 525.395129][ T5916] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.421068][T11490] veth0_vlan: entered promiscuous mode [ 525.447510][ T5916] usb 3-1: invalid MIDI out EP 0 [ 525.567476][ T939] usb 2-1: config 0 has no interfaces? [ 525.603731][ T939] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 525.605788][T11490] veth1_vlan: entered promiscuous mode [ 525.739286][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.835468][ T939] usb 2-1: config 0 descriptor?? [ 525.847448][ T5933] usb 4-1: USB disconnect, device number 78 [ 525.877258][T11490] veth0_macvtap: entered promiscuous mode [ 526.025106][ T5916] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 526.047197][T11695] syzkaller0: entered promiscuous mode [ 526.061409][T11695] syzkaller0: entered allmulticast mode [ 526.095450][T11490] veth1_macvtap: entered promiscuous mode [ 526.257563][T11490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.304014][T11490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.513885][ T975] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.668960][ T5964] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 526.828979][ T5964] usb 4-1: Using ep0 maxpacket: 32 [ 526.875214][ T5964] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 526.907604][ T5964] usb 4-1: config 0 has no interface number 0 [ 526.941538][ T5964] usb 4-1: config 0 interface 184 has no altsetting 0 [ 526.975152][ T5964] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 526.994384][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.004067][ T975] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.033201][ T975] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.054414][ T5964] usb 4-1: Product: syz [ 527.088247][ T5964] usb 4-1: Manufacturer: syz [ 527.088251][ T975] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.142568][ T5964] usb 4-1: SerialNumber: syz [ 527.194847][ T5964] usb 4-1: config 0 descriptor?? [ 527.215737][ T5964] smsc75xx v1.0.0 [ 527.219953][ T5964] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 527.269923][ T5964] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 527.376079][ T5964] usb 3-1: USB disconnect, device number 66 [ 527.401480][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.430016][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.534778][ T855] usb 4-1: USB disconnect, device number 79 [ 527.593841][T11712] FAULT_INJECTION: forcing a failure. [ 527.593841][T11712] name failslab, interval 1, probability 0, space 0, times 0 [ 527.606919][T11712] CPU: 0 UID: 0 PID: 11712 Comm: syz.2.1476 Not tainted syzkaller #0 PREEMPT(full) [ 527.606943][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.606954][T11712] Call Trace: [ 527.606963][T11712] [ 527.606971][T11712] dump_stack_lvl+0x189/0x250 [ 527.606999][T11712] ? __pfx____ratelimit+0x10/0x10 [ 527.607022][T11712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.607054][T11712] ? __pfx__printk+0x10/0x10 [ 527.607079][T11712] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 527.607104][T11712] should_fail_ex+0x414/0x560 [ 527.607134][T11712] should_failslab+0xa8/0x100 [ 527.607152][T11712] ? __pfx_ip6_dst_gc+0x10/0x10 [ 527.607170][T11712] kmem_cache_alloc_noprof+0x74/0x6e0 [ 527.607194][T11712] ? dst_alloc+0x105/0x170 [ 527.607215][T11712] ? __pfx_ip6_dst_gc+0x10/0x10 [ 527.607235][T11712] dst_alloc+0x105/0x170 [ 527.607257][T11712] ip6_pol_route+0xa21/0x1180 [ 527.607277][T11712] ? ip6_pol_route+0x162/0x1180 [ 527.607300][T11712] ? __pfx_ip6_pol_route+0x10/0x10 [ 527.607327][T11712] ? __lock_acquire+0xab9/0xd20 [ 527.607361][T11712] fib6_rule_lookup+0x52f/0x6f0 [ 527.607385][T11712] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 527.607405][T11712] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 527.607438][T11712] ? ip6t_do_table+0x1db/0x1560 [ 527.607472][T11712] ip6_route_input+0x6de/0xad0 [ 527.607501][T11712] ? __pfx_ip6_route_input+0x10/0x10 [ 527.607535][T11712] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 527.607574][T11712] ? ip6_rcv_finish_core+0x222/0x420 [ 527.607601][T11712] ip6_rcv_finish+0x141/0x2e0 [ 527.607629][T11712] NF_HOOK+0x30c/0x3a0 [ 527.607644][T11712] ? skb_orphan+0x4f/0xd0 [ 527.607661][T11712] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 527.607684][T11712] ? NF_HOOK+0x9a/0x3a0 [ 527.607699][T11712] ? __pfx_NF_HOOK+0x10/0x10 [ 527.607724][T11712] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 527.607758][T11712] __netif_receive_skb+0xd3/0x380 [ 527.607787][T11712] ? netif_receive_skb+0x115/0x790 [ 527.607809][T11712] netif_receive_skb+0x1cb/0x790 [ 527.607829][T11712] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 527.607849][T11712] ? __pfx_netif_receive_skb+0x10/0x10 [ 527.607876][T11712] ? tun_rx_batched+0x160/0x730 [ 527.607899][T11712] tun_rx_batched+0x1b9/0x730 [ 527.607920][T11712] ? __lock_acquire+0xab9/0xd20 [ 527.607940][T11712] ? __pfx_tun_rx_batched+0x10/0x10 [ 527.607961][T11712] ? tun_get_user+0x272f/0x3e90 [ 527.607993][T11712] tun_get_user+0x2b65/0x3e90 [ 527.608022][T11712] ? tun_get_user+0x6f6/0x3e90 [ 527.608043][T11712] ? tun_get_user+0x272f/0x3e90 [ 527.608066][T11712] ? aa_file_perm+0x44d/0x1550 [ 527.608083][T11712] ? __pfx_tun_get_user+0x10/0x10 [ 527.608116][T11712] ? __lock_acquire+0xab9/0xd20 [ 527.608139][T11712] ? ref_tracker_alloc+0x318/0x460 [ 527.608155][T11712] ? __lock_acquire+0xab9/0xd20 [ 527.608175][T11712] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 527.608198][T11712] ? tun_get+0x1c/0x2f0 [ 527.608224][T11712] ? tun_get+0x1c/0x2f0 [ 527.608243][T11712] ? tun_get+0x1c/0x2f0 [ 527.608268][T11712] tun_chr_write_iter+0x113/0x200 [ 527.608292][T11712] vfs_write+0x5c9/0xb30 [ 527.608327][T11712] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 527.608349][T11712] ? __pfx_vfs_write+0x10/0x10 [ 527.608381][T11712] ? __fget_files+0x2a/0x420 [ 527.608407][T11712] ksys_write+0x145/0x250 [ 527.608429][T11712] ? exc_page_fault+0x82/0x100 [ 527.608450][T11712] ? __pfx_ksys_write+0x10/0x10 [ 527.608472][T11712] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 527.608496][T11712] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.608521][T11712] __do_fast_syscall_32+0xb6/0x2b0 [ 527.608542][T11712] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.608566][T11712] do_fast_syscall_32+0x34/0x80 [ 527.608589][T11712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.608608][T11712] RIP: 0023:0xf705d539 [ 527.608622][T11712] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 527.608635][T11712] RSP: 002b:00000000f544d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 527.608651][T11712] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800003c0 [ 527.608663][T11712] RDX: 000000000000015e RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 527.608673][T11712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.608682][T11712] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 527.608692][T11712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.608719][T11712] [ 528.049023][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.181934][ T855] usb 2-1: USB disconnect, device number 79 [ 528.228269][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.237203][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.468080][T11725] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1442'. [ 528.478617][ T5916] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 528.644969][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 528.653287][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 528.665034][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 528.674698][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.688000][ T5916] usb 3-1: Product: syz [ 528.698550][ T5916] usb 3-1: Manufacturer: syz [ 528.724793][ T5916] usb 3-1: SerialNumber: syz [ 528.778786][ T5916] usb 3-1: config 0 descriptor?? [ 528.870894][ T5916] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 529.698709][ T5933] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 529.882289][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 529.947708][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.984944][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 530.009977][T11768] tipc: Failed to remove unknown binding: 66,1,1/0:25983921/25983923 [ 530.030891][T11768] tipc: Failed to remove unknown binding: 66,1,1/0:25983921/25983923 [ 530.053795][ T5933] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 530.134970][ T5916] gspca_zc3xx: reg_w_i err -71 [ 530.169687][ T5933] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 530.231597][ T5933] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 530.287177][ T5933] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 530.297055][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 530.308832][ T5933] usb 1-1: SerialNumber: syz [ 530.327587][T11761] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 530.337542][ T5933] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 530.338152][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 530.347234][ T5933] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 530.414411][T11781] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 530.759743][ T5916] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 530.827726][ T5916] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 530.884951][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 530.927891][ T5916] usb 3-1: USB disconnect, device number 67 [ 531.015295][T11787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1487'. [ 531.073732][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 531.142961][T11787] macvlan0: entered allmulticast mode [ 531.158646][T11787] veth1_vlan: entered allmulticast mode [ 531.658699][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 531.669743][T11797] FAULT_INJECTION: forcing a failure. [ 531.669743][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 531.753525][T11797] CPU: 0 UID: 0 PID: 11797 Comm: syz.1.1488 Not tainted syzkaller #0 PREEMPT(full) [ 531.753555][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 531.753565][T11797] Call Trace: [ 531.753573][T11797] [ 531.753582][T11797] dump_stack_lvl+0x189/0x250 [ 531.753610][T11797] ? __pfx____ratelimit+0x10/0x10 [ 531.753632][T11797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.753654][T11797] ? __pfx__printk+0x10/0x10 [ 531.753675][T11797] ? __pfx___might_resched+0x10/0x10 [ 531.753694][T11797] ? fs_reclaim_acquire+0x7d/0x100 [ 531.753722][T11797] should_fail_ex+0x414/0x560 [ 531.753750][T11797] ? __pfx_sock_alloc_inode+0x10/0x10 [ 531.753770][T11797] should_failslab+0xa8/0x100 [ 531.753786][T11797] ? __pfx_sock_alloc_inode+0x10/0x10 [ 531.753801][T11797] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 531.753821][T11797] ? sock_alloc_inode+0x28/0xc0 [ 531.753835][T11797] ? __pfx_sock_alloc_inode+0x10/0x10 [ 531.753846][T11797] sock_alloc_inode+0x28/0xc0 [ 531.753858][T11797] alloc_inode+0x6a/0x1b0 [ 531.753874][T11797] do_accept+0x111/0x680 [ 531.753891][T11797] ? __pfx_do_accept+0x10/0x10 [ 531.753915][T11797] __sys_accept4+0x11c/0x1c0 [ 531.753930][T11797] ? __pfx___sys_accept4+0x10/0x10 [ 531.753943][T11797] ? __pfx_ksys_write+0x10/0x10 [ 531.753960][T11797] __ia32_sys_accept4+0x9a/0xb0 [ 531.753974][T11797] __do_fast_syscall_32+0xb6/0x2b0 [ 531.753988][T11797] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.754004][T11797] do_fast_syscall_32+0x34/0x80 [ 531.754016][T11797] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.754028][T11797] RIP: 0023:0xf7fe2539 [ 531.754038][T11797] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 531.754047][T11797] RSP: 002b:00000000f54b555c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 531.754059][T11797] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 531.754066][T11797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.754072][T11797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.754078][T11797] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 531.754084][T11797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.754099][T11797] [ 531.988029][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.285967][T11805] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1490'. [ 532.358665][ T855] usb 1-1: USB disconnect, device number 72 [ 532.735058][T11815] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 534.228872][ T855] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 534.408702][ T855] usb 3-1: Using ep0 maxpacket: 16 [ 534.421568][ T855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.453764][ T855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 534.496747][ T855] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 534.525736][ T855] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 534.560867][T11838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1498'. [ 534.575636][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'. [ 534.586836][ T855] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 534.628239][ T855] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 534.688516][ T855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 534.705427][ T855] usb 3-1: SerialNumber: syz [ 534.729112][T11828] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.752554][ T855] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 534.779720][ T855] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 535.259207][ T939] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 535.414336][T11854] netlink: 'syz.3.1502': attribute type 4 has an invalid length. [ 535.422300][T11854] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1502'. [ 535.454027][ T939] usb 1-1: Using ep0 maxpacket: 16 [ 535.471765][ T939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.483189][ T939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 535.493677][T11856] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1503'. [ 535.496636][ T939] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 535.523819][ T939] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 535.534766][ T939] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 535.553264][ T939] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 535.562980][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 535.571528][ T939] usb 1-1: SerialNumber: syz [ 535.624808][T11845] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 535.636006][ T939] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 535.678511][ T855] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 535.787718][ T939] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 535.969396][ T855] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 535.984413][ T855] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 536.012309][ T855] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.048359][ T855] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 536.076477][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.131133][ T855] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.154076][ T855] usb 4-1: invalid MIDI out EP 0 [ 536.497305][ T855] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 536.530133][ T855] usb 4-1: USB disconnect, device number 80 [ 536.685017][ T939] usb 3-1: USB disconnect, device number 68 [ 537.229421][ T939] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 537.442140][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 537.453699][ T939] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.465278][ T939] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 537.477861][ T939] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 537.491026][ T939] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 537.502887][ T939] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 537.521158][ T939] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 537.550286][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 537.559709][ T939] usb 2-1: SerialNumber: syz [ 537.583657][T11870] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 537.610236][ T939] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 537.649931][T11876] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1509'. [ 537.697186][ T939] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 537.930453][ T855] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 538.061788][ T5933] usb 1-1: USB disconnect, device number 73 [ 538.119461][ T855] usb 5-1: Using ep0 maxpacket: 32 [ 538.134593][ T855] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 538.148025][ T855] usb 5-1: config 0 has no interface number 0 [ 538.180250][ T855] usb 5-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 538.229246][ T855] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 538.379690][ T855] usb 5-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 538.391874][ T855] usb 5-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 538.423947][ T855] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 538.540504][ T855] usb 5-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.588061][ T855] usb 5-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 538.663118][ T855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.692824][ T855] usb 5-1: Product: syz [ 538.703756][ T855] usb 5-1: Manufacturer: syz [ 538.718815][ T855] usb 5-1: SerialNumber: syz [ 538.740668][ T855] usb 5-1: config 0 descriptor?? [ 538.749405][T11876] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 538.769717][T11876] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 538.784185][ T855] ipaq 5-1:0.19: PocketPC PDA converter detected [ 538.794413][ T855] usb 5-1: active config #0 != 1 ?? [ 539.334698][ T939] usb 5-1: USB disconnect, device number 82 [ 539.665610][T11896] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1515'. [ 541.082089][ T5933] usb 2-1: USB disconnect, device number 80 [ 541.263920][T11913] binder: 11912:11913 ioctl c01064c7 80000280 returned -22 [ 541.966471][T11938] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1526'. [ 542.091981][T11937] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1527'. [ 542.348583][ T5964] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 542.363748][T11949] FAULT_INJECTION: forcing a failure. [ 542.363748][T11949] name failslab, interval 1, probability 0, space 0, times 0 [ 542.439569][T11949] CPU: 1 UID: 0 PID: 11949 Comm: syz.0.1531 Not tainted syzkaller #0 PREEMPT(full) [ 542.439596][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.439608][T11949] Call Trace: [ 542.439615][T11949] [ 542.439623][T11949] dump_stack_lvl+0x189/0x250 [ 542.439652][T11949] ? __pfx____ratelimit+0x10/0x10 [ 542.439674][T11949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.439696][T11949] ? __pfx__printk+0x10/0x10 [ 542.439720][T11949] ? __pfx___might_resched+0x10/0x10 [ 542.439738][T11949] ? fs_reclaim_acquire+0x7d/0x100 [ 542.439769][T11949] should_fail_ex+0x414/0x560 [ 542.439799][T11949] should_failslab+0xa8/0x100 [ 542.439819][T11949] __kmalloc_noprof+0xcb/0x7f0 [ 542.439841][T11949] ? tomoyo_encode+0x28b/0x550 [ 542.439872][T11949] tomoyo_encode+0x28b/0x550 [ 542.439902][T11949] tomoyo_realpath_from_path+0x58d/0x5d0 [ 542.439938][T11949] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 542.439960][T11949] tomoyo_path_number_perm+0x1e8/0x5a0 [ 542.439986][T11949] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 542.440033][T11949] ? __lock_acquire+0xab9/0xd20 [ 542.440071][T11949] ? __fget_files+0x2a/0x420 [ 542.440093][T11949] ? __fget_files+0x3a0/0x420 [ 542.440108][T11949] ? __fget_files+0x2a/0x420 [ 542.440134][T11949] security_file_ioctl_compat+0xcb/0x2d0 [ 542.440158][T11949] __ia32_compat_sys_ioctl+0x128/0x840 [ 542.440184][T11949] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 542.440206][T11949] ? __fget_files+0x3a0/0x420 [ 542.440230][T11949] ? fput+0xa0/0xd0 [ 542.440250][T11949] ? ksys_write+0x22a/0x250 [ 542.440272][T11949] ? exc_page_fault+0x82/0x100 [ 542.440295][T11949] ? __pfx_ksys_write+0x10/0x10 [ 542.440321][T11949] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 542.440346][T11949] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.440371][T11949] __do_fast_syscall_32+0xb6/0x2b0 [ 542.440395][T11949] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.440421][T11949] do_fast_syscall_32+0x34/0x80 [ 542.440450][T11949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.440479][T11949] RIP: 0023:0xf70ed539 [ 542.440494][T11949] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 542.440509][T11949] RSP: 002b:00000000f545755c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 542.440528][T11949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000054a2 [ 542.440541][T11949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.440550][T11949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.440559][T11949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 542.440569][T11949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.440605][T11949] [ 542.441811][T11949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 542.532046][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 542.540875][ T5964] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 542.823920][ T5964] usb 3-1: config 0 has no interface number 0 [ 542.835360][ T5964] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.870385][ T5964] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 542.890292][ T5964] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 542.922544][ T5964] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 542.964526][ T5964] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 543.011438][T11961] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 543.028538][ T5964] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.055779][ T5964] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 543.085384][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.106004][T11961] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 543.113805][ T5964] usb 3-1: Product: syz [ 543.139169][ T5964] usb 3-1: Manufacturer: syz [ 543.143807][ T5964] usb 3-1: SerialNumber: syz [ 543.164746][ T5964] usb 3-1: config 0 descriptor?? [ 543.175724][T11937] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.228862][T11937] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.264531][ T5964] ipaq 3-1:0.19: PocketPC PDA converter detected [ 543.284791][ T5964] usb 3-1: active config #0 != 1 ?? [ 543.481166][T11975] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1540'. [ 543.489305][ T5964] usb 3-1: USB disconnect, device number 69 [ 543.822970][T11980] syzkaller0: entered promiscuous mode [ 543.836147][T11980] syzkaller0: entered allmulticast mode [ 544.354188][T11991] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 544.401532][ T939] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 544.668946][ T939] usb 2-1: Using ep0 maxpacket: 32 [ 544.770535][ T939] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 544.848686][ T939] usb 2-1: config 0 has no interface number 0 [ 544.923161][ T939] usb 2-1: config 0 interface 184 has no altsetting 0 [ 544.986851][ T939] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 544.996076][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.228867][ T939] usb 2-1: Product: syz [ 545.243402][ T939] usb 2-1: Manufacturer: syz [ 545.248143][ T939] usb 2-1: SerialNumber: syz [ 545.330327][ T939] usb 2-1: config 0 descriptor?? [ 545.374596][ T939] smsc75xx v1.0.0 [ 545.427231][ T939] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 545.461943][ T939] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 545.636158][ T939] usb 2-1: USB disconnect, device number 81 [ 545.900336][T12016] batadv_slave_1: entered promiscuous mode [ 545.924038][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 545.946021][T12016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.993720][T12016] batadv_slave_1 (unregistering): left promiscuous mode [ 546.006969][T12016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.560591][T12023] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1552'. [ 546.837057][T12028] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1553'. [ 547.098549][ T855] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 547.299973][ T855] usb 5-1: Using ep0 maxpacket: 32 [ 547.344978][ T855] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 547.407205][ T30] audit: type=1326 audit(1762065513.922:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 547.429292][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.495946][ T855] usb 5-1: config 0 has no interface number 0 [ 547.539634][ T855] usb 5-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.560647][ T30] audit: type=1326 audit(1762065513.932:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 547.590255][ T30] audit: type=1326 audit(1762065513.932:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 547.597088][ T855] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 547.612661][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.613103][ T30] audit: type=1326 audit(1762065513.932:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 547.682404][ T855] usb 5-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 547.727390][ T855] usb 5-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 547.898876][ T855] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 547.971392][ T30] audit: type=1326 audit(1762065513.932:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 547.994086][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.994361][ T855] usb 5-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.023212][ T855] usb 5-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 548.077821][ T855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.118803][ T855] usb 5-1: Product: syz [ 548.136475][ T855] usb 5-1: Manufacturer: syz [ 548.171725][ T855] usb 5-1: SerialNumber: syz [ 548.181850][ T30] audit: type=1326 audit(1762065513.932:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 548.189392][ T855] usb 5-1: config 0 descriptor?? [ 548.269363][T12026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 548.276743][T12026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 548.285692][ T855] ipaq 5-1:0.19: PocketPC PDA converter detected [ 548.328745][ T855] usb 5-1: active config #0 != 1 ?? [ 548.358589][ T30] audit: type=1326 audit(1762065513.942:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 548.522754][ T855] usb 5-1: USB disconnect, device number 83 [ 548.558131][ T30] audit: type=1326 audit(1762065513.942:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 548.686820][ T30] audit: type=1326 audit(1762065513.942:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 548.709135][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.796918][ T30] audit: type=1326 audit(1762065513.942:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 548.908532][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 549.025356][T12063] syzkaller0: entered promiscuous mode [ 549.041362][T12063] syzkaller0: entered allmulticast mode [ 549.071085][ T24] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 549.091826][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 549.117901][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 549.137868][ T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 549.158096][ T24] usb 4-1: Product: syz [ 549.174548][ T24] usb 4-1: Manufacturer: syz [ 549.210863][ T24] usb 4-1: SerialNumber: syz [ 549.219663][ T24] usb 4-1: config 0 descriptor?? [ 549.245841][ T24] usb 4-1: selecting invalid altsetting 0 [ 549.320603][T12067] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1564'. [ 549.505376][ T855] usb 4-1: USB disconnect, device number 81 [ 549.738511][ T939] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 549.848726][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 549.898709][ T939] usb 5-1: Using ep0 maxpacket: 32 [ 549.924809][ T939] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 549.933247][ T939] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 549.942609][ T939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 549.954320][ T939] usb 5-1: config 1 has no interface number 0 [ 549.961159][ T939] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.972228][ T939] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 549.987272][ T939] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 549.997148][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.011541][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 550.019090][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 550.019393][ T939] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 550.056115][ T24] usb 3-1: config 0 has no interface number 0 [ 550.066326][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 550.084070][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 550.110017][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.148765][ T24] usb 3-1: Product: syz [ 550.152964][ T24] usb 3-1: Manufacturer: syz [ 550.157568][ T24] usb 3-1: SerialNumber: syz [ 550.172413][ T24] usb 3-1: config 0 descriptor?? [ 550.392752][ T939] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 550.481535][ T24] smsc75xx v1.0.0 [ 550.495980][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 550.547240][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 550.739040][ T5916] usb 3-1: USB disconnect, device number 70 [ 550.825368][ T5964] usb 5-1: USB disconnect, device number 84 [ 550.835641][ T5964] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 551.406626][T12098] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1573'. [ 551.698534][ T5916] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 551.971177][T12110] netlink: 'syz.0.1576': attribute type 4 has an invalid length. [ 552.000179][T12110] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1576'. [ 552.118656][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 552.128619][ T5916] usb 4-1: config 0 has an invalid interface number: 19 but max is 0 [ 552.190440][ T5916] usb 4-1: config 0 has no interface number 0 [ 552.196595][ T5916] usb 4-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 552.239094][ T5916] usb 4-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 552.249500][ T5916] usb 4-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 552.271779][ T5916] usb 4-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 552.291828][ T5916] usb 4-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 552.306347][ T5916] usb 4-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.343968][ T5916] usb 4-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 552.353510][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.362164][ T5916] usb 4-1: Product: syz [ 552.368778][ T5916] usb 4-1: Manufacturer: syz [ 552.369978][ T939] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 552.373496][ T5916] usb 4-1: SerialNumber: syz [ 552.381912][T12116] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1578'. [ 552.408872][ T5916] usb 4-1: config 0 descriptor?? [ 552.416001][T12098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.426190][T12098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.442631][ T5916] ipaq 4-1:0.19: PocketPC PDA converter detected [ 552.459150][ T5916] usb 4-1: active config #0 != 1 ?? [ 552.652034][ T24] usb 4-1: USB disconnect, device number 82 [ 552.663795][ T939] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 552.698983][ T939] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 552.801585][ T939] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.818800][ T5916] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 552.882578][ T939] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 552.923217][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.970204][ T5916] usb 3-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 552.980841][ T5916] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.997576][ T5916] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 553.007269][ T5916] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 553.017369][ T5916] usb 3-1: Manufacturer: syz [ 553.041927][ T5916] usb 3-1: config 0 descriptor?? [ 553.055982][ T939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 553.091439][ T939] usb 1-1: invalid MIDI out EP 0 [ 553.167603][ T939] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 553.294682][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.413167][ T5916] usb 1-1: USB disconnect, device number 74 [ 553.757459][T12126] libceph: resolve '. [ 553.757459][T12126] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 553.757459][T12126] ' (ret=-3): failed [ 555.245387][T12138] netlink: 'syz.3.1583': attribute type 8 has an invalid length. [ 555.274067][T12149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.283089][T12149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.427499][ T5909] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 555.598711][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 555.606955][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.620751][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 555.644184][ T5909] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 555.672123][ T5909] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 555.703320][ T5909] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 555.741471][ T5909] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 555.789596][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 555.824084][ T5909] usb 2-1: SerialNumber: syz [ 555.844544][T12142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.857535][ T5909] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 555.876149][ T5909] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 556.452526][ T24] usb 3-1: USB disconnect, device number 71 [ 556.559277][T12158] syzkaller0: entered promiscuous mode [ 556.570189][T12158] syzkaller0: entered allmulticast mode [ 556.688541][T12161] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1590'. [ 556.872116][T12164] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1591'. [ 557.115413][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 557.115426][ T30] audit: type=1326 audit(1762065523.662:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 557.145597][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.158594][ T5916] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 557.263545][ T30] audit: type=1326 audit(1762065523.662:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 557.286669][ T30] audit: type=1326 audit(1762065523.662:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 557.308945][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.338552][ T30] audit: type=1326 audit(1762065523.662:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 557.361485][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.370215][ T30] audit: type=1326 audit(1762065523.662:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 557.392290][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.399983][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 557.416662][ T5916] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 557.425218][ T5916] usb 1-1: config 0 has no interface number 0 [ 557.438831][ T5916] usb 1-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 557.510436][ T5916] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 557.521087][ T5916] usb 1-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 557.534036][ T5916] usb 1-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 557.534062][ T30] audit: type=1326 audit(1762065523.662:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 557.545806][ T5916] usb 1-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 557.569311][ T5909] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 557.654396][ T30] audit: type=1326 audit(1762065523.662:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 557.660284][ T5916] usb 1-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.676700][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.889797][ T30] audit: type=1326 audit(1762065523.662:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 557.911971][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.021483][ T30] audit: type=1326 audit(1762065523.672:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 558.043676][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.050404][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 558.062412][ T5909] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 558.075288][ T24] usb 2-1: USB disconnect, device number 82 [ 558.077524][ T5909] usb 4-1: config 0 has no interface number 0 [ 558.091560][ T5909] usb 4-1: config 0 interface 184 has no altsetting 0 [ 558.098957][ T30] audit: type=1326 audit(1762065523.672:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 558.142738][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 558.153776][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.174302][ T5909] usb 4-1: Product: syz [ 558.184711][ T5909] usb 4-1: Manufacturer: syz [ 558.189285][ T5916] usb 1-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 558.200000][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.214270][ T5916] usb 1-1: Product: syz [ 558.218697][ T5909] usb 4-1: SerialNumber: syz [ 558.219896][ T5916] usb 1-1: Manufacturer: syz [ 558.233110][ T5916] usb 1-1: SerialNumber: syz [ 558.243301][ T5909] usb 4-1: config 0 descriptor?? [ 558.244763][ T5916] usb 1-1: config 0 descriptor?? [ 558.259628][T12164] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 558.267212][T12164] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 558.278109][ T5916] ipaq 1-1:0.19: PocketPC PDA converter detected [ 558.284867][ T5916] usb 1-1: active config #0 != 1 ?? [ 558.286210][ T5909] smsc75xx v1.0.0 [ 558.319054][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 558.404997][ T5909] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 558.589960][ T5916] syz_tun: tun_net_xmit 106 [ 558.633855][ T5916] syz_tun: tun_net_xmit 106 [ 558.642546][ T5916] usb 4-1: USB disconnect, device number 83 [ 558.676392][ T24] usb 1-1: USB disconnect, device number 75 [ 558.915503][T12188] delete_channel: no stack [ 559.504257][ T5909] syz_tun: tun_net_xmit 106 [ 559.858956][ T5909] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 559.899962][T12194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.911535][T12194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.933543][T12194] batman_adv: batadv0: Interface deactivated: 26 [ 559.948610][T12194] batman_adv: batadv0: Removing interface: 26 [ 559.969921][T12198] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1599'. [ 559.988724][ T939] syz_tun: tun_net_xmit 106 [ 559.998086][T12198] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1599'. [ 560.040830][ T5909] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 560.060431][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.081433][ T5909] usb 1-1: Product: syz [ 560.085724][ T5909] usb 1-1: Manufacturer: syz [ 560.092818][ T5909] usb 1-1: SerialNumber: syz [ 560.111490][ T5909] usb 1-1: config 0 descriptor?? [ 560.251133][T12202] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1601'. [ 560.262824][T12209] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1602'. [ 560.330879][ T5909] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 562.238699][ T5916] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 562.478547][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 562.493938][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.518974][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 562.555227][ T5916] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 562.574901][ T5916] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 562.598619][ T5916] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 562.675168][T12234] syzkaller0: entered promiscuous mode [ 562.684812][T12234] syzkaller0: entered allmulticast mode [ 562.709429][ T5916] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 562.726298][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 562.738487][ T5916] usb 5-1: SerialNumber: syz [ 562.747510][T12232] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1607'. [ 562.782672][T12225] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 562.793253][ T5916] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 562.803456][ T5916] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 562.894228][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.900953][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.009633][ T5964] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 563.158701][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 563.172503][ T5964] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 563.182734][ T5964] usb 2-1: config 0 has no interface number 0 [ 563.195903][ T5964] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.243580][ T5964] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 563.296791][ T5909] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 563.309283][ T5909] usb 1-1: USB disconnect, device number 76 [ 563.334786][ T5964] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 563.349244][ T5964] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 563.384836][ T5964] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 563.405971][ T5964] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.423878][ T5964] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 563.443654][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.451716][ T5933] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 563.461282][ T5964] usb 2-1: Product: syz [ 563.465668][ T5964] usb 2-1: Manufacturer: syz [ 563.471072][ T5964] usb 2-1: SerialNumber: syz [ 563.481588][ T5964] usb 2-1: config 0 descriptor?? [ 563.487240][T12232] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 563.528699][T12232] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 563.548022][ T5964] ipaq 2-1:0.19: PocketPC PDA converter detected [ 563.564138][ T5964] usb 2-1: active config #0 != 1 ?? [ 563.628502][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 563.649229][ T5933] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 563.657640][ T5933] usb 4-1: config 0 has no interface number 0 [ 563.676542][ T5933] usb 4-1: config 0 interface 184 has no altsetting 0 [ 563.704927][ T5933] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 563.715116][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.730398][ T5933] usb 4-1: Product: syz [ 563.743297][ T5933] usb 4-1: Manufacturer: syz [ 563.752279][ T5933] usb 4-1: SerialNumber: syz [ 563.766273][ T5909] usb 2-1: USB disconnect, device number 83 [ 563.791483][ T5933] usb 4-1: config 0 descriptor?? [ 563.851481][ T5933] smsc75xx v1.0.0 [ 563.868468][ T5933] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 563.923515][ T5933] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 564.074827][ T5964] usb 4-1: USB disconnect, device number 84 [ 564.267580][ T5933] usb 5-1: USB disconnect, device number 85 [ 564.465228][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 564.465245][ T30] audit: type=1326 audit(1762065531.022:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 564.563676][T12251] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1613'. [ 564.576329][ T30] audit: type=1326 audit(1762065531.022:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 564.743194][ T30] audit: type=1326 audit(1762065531.022:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 565.097344][ T30] audit: type=1326 audit(1762065531.022:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 565.426766][ T30] audit: type=1326 audit(1762065531.022:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 565.448861][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.535991][ T30] audit: type=1326 audit(1762065531.022:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 566.027708][ T5909] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 570.999693][ T30] audit: type=1326 audit(1762065531.022:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 573.160488][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 573.948444][ C0] sched: DL replenish lagged too much [ 665.009108][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.022742][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 675.096160][T11488] Bluetooth: hci0: command tx timeout [ 716.495404][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 144s! [ 716.504711][ C0] Showing busy workqueues and worker pools: [ 716.510815][ C0] workqueue events: flags=0x100 [ 716.515701][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=12 refcnt=13 [ 716.515744][ C0] pending: vmstat_shepherd, 5*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, kernfs_notify_workfn, psi_avgs_work, 2*ovs_dp_masks_rebalance [ 716.515875][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=8 refcnt=9 [ 716.515916][ C0] in-flight: 5917:key_garbage_collector [ 716.515955][ C0] pending: 3*psi_avgs_work, 4*ovs_dp_masks_rebalance [ 716.516001][ C0] workqueue events_long: flags=0x100 [ 716.563585][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 716.563631][ C0] pending: br_fdb_cleanup, 5*defense_work_handler [ 716.563683][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 716.563719][ C0] pending: defense_work_handler [ 716.563747][ C0] workqueue events_unbound: flags=0x2 [ 716.595661][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=15 refcnt=16 [ 716.595700][ C0] in-flight: 1093:cfg80211_wiphy_work cfg80211_wiphy_work ,12:cfg80211_wiphy_work cfg80211_wiphy_work ,13:cfg80211_wiphy_work cfg80211_wiphy_work ,4519:cfg80211_wiphy_work cfg80211_wiphy_work ,975:cfg80211_wiphy_work cfg80211_wiphy_work ,60:cfg80211_wiphy_work cfg80211_wiphy_work ,50:cfg80211_wiphy_work cfg80211_wiphy_work [ 716.596025][ C0] pending: crng_reseed [ 716.596051][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=4 refcnt=5 [ 716.596080][ C0] in-flight: 4542:cfg80211_wiphy_work cfg80211_wiphy_work [ 716.596133][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 716.596170][ C0] workqueue events_unbound: flags=0x2 [ 716.666060][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=3 refcnt=4 [ 716.666104][ C0] in-flight: 36:nsim_dev_trap_report_work [ 716.666143][ C0] pending: macvlan_process_broadcast, idle_cull_fn [ 716.666192][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=11 refcnt=12 [ 716.666224][ C0] pending: 3*macvlan_process_broadcast, idle_cull_fn, 2*macvlan_process_broadcast, 2*nsim_dev_trap_report_work, idle_cull_fn, 2*nsim_dev_trap_report_work [ 716.666335][ C0] workqueue events_freezable: flags=0x104 [ 716.714636][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 716.714681][ C0] pending: update_balloon_stats_func [ 716.714716][ C0] workqueue events_power_efficient: flags=0x180 [ 716.733998][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=8 refcnt=9 [ 716.734040][ C0] in-flight: 5951:neigh_periodic_work [ 716.734085][ C0] pending: wg_ratelimiter_gc_entries, 2*neigh_managed_work, neigh_periodic_work, do_cache_clean, 2*check_lifetime [ 716.734199][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 716.734233][ C0] in-flight: 855:reg_check_chans_work [ 716.734271][ C0] pending: 2*check_lifetime, gc_worker [ 716.734331][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 716.784316][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 716.784362][ C0] pending: kfree_rcu_monitor [ 716.784400][ C0] workqueue mm_percpu_wq: flags=0x8 [ 716.801382][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 716.801423][ C0] pending: vmstat_update [ 716.801454][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 716.801490][ C0] pending: vmstat_update [ 716.801516][ C0] workqueue writeback: flags=0x4a [ 716.830267][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=5 MAYDAY [ 716.830308][ C0] in-flight: 33(RESCUER):wb_workfn [ 716.830348][ C0] pending: wb_update_bandwidth_workfn [ 716.830382][ C0] workqueue usb_hub_wq: flags=0x4 [ 716.854040][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 716.854082][ C0] in-flight: 5909:hub_event hub_event [ 716.854532][ C0] workqueue mld: flags=0x40108 [ 716.872492][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 716.872539][ C0] pending: mld_query_work [ 716.872614][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 716.890219][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=5 [ 716.890258][ C0] in-flight: 3184(RESCUER):addrconf_verify_work [ 716.890310][ C0] workqueue bat_events: flags=0x6000a [ 716.909309][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=33 [ 716.909349][ C0] in-flight: 3409(RESCUER):batadv_tt_purge [ 716.909391][ C0] inactive: batadv_tt_purge, batadv_mcast_mla_update, batadv_tt_purge, 3*batadv_mcast_mla_update, 4*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 5*batadv_iv_send_outstanding_bat_ogm_packet, batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_bla_periodic_work, 2*batadv_dat_purge [ 716.909640][ C0] workqueue wg-kex-wg0: flags=0x6 [ 716.964406][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 716.964451][ C0] pending: wg_packet_handshake_send_worker [ 716.964483][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 716.982869][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 716.982922][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 716.982968][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 717.003186][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 717.003235][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 717.003291][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.003327][ C0] pending: wg_packet_tx_worker [ 717.003353][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 717.038020][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 717.038068][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 717.038110][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.038146][ C0] pending: wg_packet_tx_worker [ 717.038171][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 717.070784][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 717.070827][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 717.070872][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.070914][ C0] pending: wg_packet_tx_worker [ 717.070939][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 717.103434][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 717.103481][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 717.103524][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.103561][ C0] pending: wg_packet_tx_worker [ 717.103585][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 717.136159][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 717.136209][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 717.136255][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 717.136292][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 717.136328][ C0] workqueue wg-kex-wg0: flags=0x6 [ 717.170786][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 [ 717.170828][ C0] pending: 2*wg_packet_handshake_send_worker [ 717.170862][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 717.189427][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.189476][ C0] pending: wg_packet_encrypt_worker [ 717.189505][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.189540][ C0] pending: wg_packet_tx_worker [ 717.189565][ C0] workqueue wg-kex-wg1: flags=0x6 [ 717.219815][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 [ 717.219855][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 717.219905][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 717.241523][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.241575][ C0] pending: wg_packet_encrypt_worker [ 717.241607][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.241644][ C0] pending: wg_packet_decrypt_worker [ 717.241670][ C0] workqueue wg-kex-wg2: flags=0x6 [ 717.272430][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 [ 717.272469][ C0] in-flight: 4527:wg_packet_handshake_send_worker [ 717.272507][ C0] pending: wg_queued_expired_zero_key_material [ 717.272537][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 717.298020][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 717.298067][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 717.298120][ C0] workqueue bond5: flags=0x2000a [ 717.317747][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=5 [ 717.317792][ C0] pending: bond_mii_monitor [ 717.317827][ C0] inactive: bond_3ad_state_machine_handler [ 717.317857][ C0] workqueue hci0: flags=0x20012 [ 717.340584][ C0] pwq 9: cpus=0-1 node=0 flags=0x6 nice=-20 active=1 refcnt=4 [ 717.340627][ C0] in-flight: 5835:hci_cmd_sync_work [ 717.340665][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 717.359732][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 717.359778][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 717.359824][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.359859][ C0] pending: wg_packet_tx_worker [ 717.359884][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 717.392277][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 717.392325][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 717.392370][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.392407][ C0] pending: wg_packet_tx_worker [ 717.392431][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 717.424838][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 717.424885][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 717.424920][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 717.424954][ C0] pending: wg_packet_tx_worker [ 717.424982][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=145s workers=6 idle: 5964 939 5888 5921 [ 717.425060][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=48s workers=7 idle: 24 5916 11166 5933 5895 [ 717.425152][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=0s workers=11 manager: 12266 [ 717.425186][ C0] pool 9: cpus=0-1 node=0 flags=0x6 nice=-20 hung=0s workers=3 manager: 5150 idle: 11488 [ 717.425236][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: [ 717.498563][ C0] pool 2: [ 717.498576][ C0] task:kworker/0:7 state:R running task stack:20616 pid:5951 tgid:5951 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 717.498633][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 717.498666][ C0] Call Trace: [ 717.498673][ C0] [ 717.498687][ C0] __schedule+0x1798/0x4cc0 [ 717.498741][ C0] ? __pfx___schedule+0x10/0x10 [ 717.498772][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 717.498805][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 717.498831][ C0] ? rcu_is_watching+0x15/0xb0 [ 717.498855][ C0] ? preempt_schedule+0xae/0xc0 [ 717.498875][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 717.498906][ C0] preempt_schedule_common+0x83/0xd0 [ 717.498933][ C0] preempt_schedule+0xae/0xc0 [ 717.498957][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 717.498984][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 717.499012][ C0] preempt_schedule_thunk+0x16/0x30 [ 717.499040][ C0] __local_bh_enable_ip+0x13e/0x1c0 [ 717.499062][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 717.499085][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 717.499123][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 717.499153][ C0] neigh_periodic_work+0xc28/0xe50 [ 717.499189][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 717.499214][ C0] process_scheduled_works+0xae1/0x17b0 [ 717.499264][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 717.499304][ C0] worker_thread+0x8a0/0xda0 [ 717.499330][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 717.499363][ C0] ? __kthread_parkme+0x7b/0x200 [ 717.499397][ C0] kthread+0x711/0x8a0 [ 717.499426][ C0] ? __pfx_worker_thread+0x10/0x10 [ 717.499447][ C0] ? __pfx_kthread+0x10/0x10 [ 717.499475][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.499499][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.499523][ C0] ? __pfx_kthread+0x10/0x10 [ 717.499550][ C0] ret_from_fork+0x4bc/0x870 [ 717.499575][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 717.499603][ C0] ? __switch_to_asm+0x39/0x70 [ 717.499619][ C0] ? __switch_to_asm+0x33/0x70 [ 717.499634][ C0] ? __pfx_kthread+0x10/0x10 [ 717.499662][ C0] ret_from_fork_asm+0x1a/0x30 [ 717.499698][ C0] [ 717.499707][ C0] pool 2: [ 717.499714][ C0] task:kworker/0:5 state:R running task stack:20616 pid:5909 tgid:5909 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 717.499767][ C0] Workqueue: usb_hub_wq hub_event [ 717.499784][ C0] Call Trace: [ 717.499790][ C0] [ 717.499802][ C0] __schedule+0x1798/0x4cc0 [ 717.499839][ C0] ? unwind_next_frame+0xa5/0x2390 [ 717.499873][ C0] ? __pfx___schedule+0x10/0x10 [ 717.499896][ C0] ? __lock_acquire+0xab9/0xd20 [ 717.499931][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 717.499960][ C0] preempt_schedule_irq+0xb5/0x150 [ 717.499986][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 717.500020][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 717.500046][ C0] irqentry_exit+0x6f/0x90 [ 717.500071][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 717.500093][ C0] RIP: 0010:__get_pfnblock_flags_mask+0x122/0x240 [ 717.500126][ C0] Code: 49 39 de 0f 83 15 01 00 00 4d 89 f4 49 c1 ec 0f 4d 89 f7 49 c1 ef 16 b8 00 10 00 00 eb 0c cc cc cc f3 0f 1e fa b8 00 00 04 00 0f 1e fa 49 39 c7 48 8b 1c 24 49 bd 00 00 00 00 00 fc ff df 73 [ 717.500144][ C0] RSP: 0018:ffffc90004fcf388 EFLAGS: 00000246 [ 717.500161][ C0] RAX: 0000000000001000 RBX: 0000000000100000 RCX: dffffc0000000000 [ 717.500175][ C0] RDX: 0000000000000017 RSI: 0000000000075fb8 RDI: ffffea0001d7ee00 [ 717.500189][ C0] RBP: 0000000000000780 R08: dffffc0000000000 R09: 0000000000000000 [ 717.500203][ C0] R10: ffffed100ebf7000 R11: fffffbfff1ef9b8f R12: 000000000000000e [ 717.500217][ C0] R13: ffff88813fffbc10 R14: 0000000000075fb8 R15: 0000000000000000 [ 717.500256][ C0] __free_frozen_pages+0x5cf/0xd30 [ 717.500295][ C0] __slab_free+0x2e7/0x390 [ 717.500323][ C0] ? __phys_addr+0xd3/0x180 [ 717.500359][ C0] qlist_free_all+0x97/0x140 [ 717.500390][ C0] kasan_quarantine_reduce+0x148/0x160 [ 717.500420][ C0] __kasan_slab_alloc+0x22/0x80 [ 717.500450][ C0] __kmalloc_cache_noprof+0x36f/0x6f0 [ 717.500478][ C0] ? usb_control_msg+0x73/0x3e0 [ 717.500512][ C0] usb_control_msg+0x73/0x3e0 [ 717.500549][ C0] usb_get_descriptor+0xb1/0x3e0 [ 717.500586][ C0] usb_get_device_descriptor+0x6d/0xd0 [ 717.500617][ C0] hub_port_init+0x168c/0x2800 [ 717.500657][ C0] hub_event+0x2532/0x4a20 [ 717.500729][ C0] ? __pfx_hub_event+0x10/0x10 [ 717.500748][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 717.500776][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.500799][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 717.500818][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 717.500842][ C0] process_scheduled_works+0xae1/0x17b0 [ 717.500893][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 717.500932][ C0] worker_thread+0x8a0/0xda0 [ 717.500958][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 717.500991][ C0] ? __kthread_parkme+0x7b/0x200 [ 717.501024][ C0] kthread+0x711/0x8a0 [ 717.501054][ C0] ? __pfx_worker_thread+0x10/0x10 [ 717.501075][ C0] ? __pfx_kthread+0x10/0x10 [ 717.501103][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.501133][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.501157][ C0] ? __pfx_kthread+0x10/0x10 [ 717.501184][ C0] ret_from_fork+0x4bc/0x870 [ 717.501208][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 717.501236][ C0] ? __switch_to_asm+0x39/0x70 [ 717.501252][ C0] ? __switch_to_asm+0x33/0x70 [ 717.501267][ C0] ? __pfx_kthread+0x10/0x10 [ 717.501294][ C0] ret_from_fork_asm+0x1a/0x30 [ 717.501329][ C0] [ 718.920349][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 718.933898][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.204541][ T30] audit: type=1326 audit(1762065531.022:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000