last executing test programs: 4m51.127759232s ago: executing program 1 (id=6982): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) 4m51.064928219s ago: executing program 1 (id=6984): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000700)=[{0x2, 0x5201, 0x0, 0x0}, {0x5, 0x1210, 0x0, 0x0}], 0x2}) 4m49.510244837s ago: executing program 1 (id=6991): syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000da5ef908030410600005fdff0001090212"], 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4m48.210836374s ago: executing program 1 (id=7004): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 4m48.090077005s ago: executing program 1 (id=7006): ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000140)=""/235) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xffffff41, 0x734, 0x0, 0xfffffffffffffecb) 4m46.882739375s ago: executing program 1 (id=7010): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) 4m46.598189707s ago: executing program 32 (id=7010): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) 9.443953887s ago: executing program 4 (id=8222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x29}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x4814) 9.240409226s ago: executing program 4 (id=8226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26", 0x6c}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff", 0x75}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05", 0x20}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2", 0x2e}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.03222039s ago: executing program 3 (id=8229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x400) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x20004050) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r8, 0x1, 0x9, &(0x7f0000000200), 0x4) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x83, {0x83, 0x2, "b792783c57964ba7a8349e195be5d6f33fad9523bc3cd88d47704816be91de3ccc2e302482930bb03d2b40eb2f0062d35ef0a137607f6d88722cd80796d71fd5875cecfad92c135d6b07052bae2a0971e6135a5357cc3438b14d6296fef3a808352afd574d59b11c9ec15e97b367b84c978dd67fa1dcde884954ca092f6268bdde"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003660000006603749bfaf50acb8065e6492b07000000000000009194f9bd441048511a17d86d2ff910f1aa05cc941c9a472f637ab7edd8e88e6c7537cfa82d0416cb0e11c4376dfb25f11b5acdd1bf2e33214654c590d88a015f75564d3e4c03c2152e6dd611a1202f7ddb"], &(0x7f00000002c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xac, "7ef74f3bde675fdc67bea074edfef6fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "0bb3d778dd7b53c1f2394678a7d631d4"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7bd, 0xf00, 0x5}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x6, 0x0, "488bb8fd", "e1f5c948"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x0, 0x0, 0x6, 0xc, 0x998d, 0x5}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000600)={0x0, 0xb, 0x63, "a1a0d14aacaf9ba9379a4e30c26c65398a340248b755e54d0263b00b15e7e7ac931b1cba0d60d40418248ac5c03147a739b62ca47014405349c1665988f4b5cc447d3baf44af443ac4c698b8aff6333bd367cb98bd8b0e36deaefcf377898bed4abd1b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x200, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xf912}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, 'TA'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xa6c2}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "8b2c"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x8}, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x8890) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec0100005c8baebf10a8bf51d93734c417180010022bbd7000fbdbdf2500000000000000000000ffffac1e0001000000000000000000000000000000014e21c64b4e2200070a0000b02b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x3, 0x0, '\x00', 0x1, &(0x7f0000000140)}) 8.997732571s ago: executing program 4 (id=8230): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) socket$inet_mptcp(0x2, 0x1, 0x106) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) getpgid(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e10508041125010207010902360001000000000904"], 0x0) 7.020168352s ago: executing program 0 (id=8234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34414e40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r4, &(0x7f00000004c0), 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%pB \x00'}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000050000000f0000000400000000100000", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="0300000002000000030000000f00"/24], 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x10000, 0x8822d55593a2179}, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x622900, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 6.912289858s ago: executing program 3 (id=8236): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34414e40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r4, &(0x7f00000004c0), 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%pB \x00'}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000050000000f0000000400000000100000", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="0300000002000000030000000f00"/24], 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x10000, 0x8822d55593a2179}, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x622900, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 6.033219301s ago: executing program 0 (id=8239): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9", 0xd4}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.912401513s ago: executing program 3 (id=8240): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.811131345s ago: executing program 0 (id=8241): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 5.724124411s ago: executing program 5 (id=8242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd28, 0x80100, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff2, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c821}, 0x20008844) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.559373239s ago: executing program 5 (id=8243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x5, 0xfffffffb, 0x6, 0x6, 0x2, 0x9, 0x6, 0xb04a, 0x3, 0x7, 0x9, 0xca2, 0x3, 0x9, 0x9, 0x3, 0xaeb2, 0x6, 0x81, 0x2, 0x8, 0x1000, 0x2, 0x6, 0x2, 0x7, 0x0, 0x9, 0x8, 0x46, 0x1000, 0xd47, 0xc98, 0x4, 0x4, 0x8, 0x0, 0x2, 0x80000000, 0x80000000, 0x10, 0x0, 0x1, 0x80000000, 0x0, 0x6, 0x9, 0x3, 0x8, 0x4, 0x23a2, 0x200080, 0x1, 0x4, 0xffffff80, 0x5, 0x6, 0x6, 0x6, 0x4, 0x6, 0x8, 0x372e, 0x9, 0x1, 0x0, 0x2, 0x1, 0x5a, 0x5, 0x80040001, 0x4, 0xb6, 0x7, 0x99fc, 0x8, 0x5, 0x3, 0xffffffff, 0x4, 0x3ff, 0x400, 0x0, 0xea12, 0x4, 0x720, 0x2, 0x118, 0x6, 0x101, 0x3, 0x1, 0x6444, 0x28, 0x10001, 0x1, 0x87, 0x23, 0x1, 0x200, 0x8, 0x2, 0x7, 0x10000, 0x2, 0x8, 0x200, 0x100, 0x9, 0x1, 0x1, 0x9, 0x8, 0x3, 0x100, 0x1, 0x7, 0x8, 0x34, 0x9, 0x7, 0x30529d92, 0xea0, 0xfd, 0x0, 0x400, 0x2, 0x8d1, 0x3, 0x7fffffff, 0xdaba, 0x9, 0x5, 0x5, 0x3, 0x81, 0x8, 0x4, 0x8, 0x2, 0x5, 0x5, 0x80000001, 0x3, 0x8, 0xe0eb, 0x461, 0x9, 0x2, 0xffff73b1, 0x23f7, 0x40, 0x7, 0x9, 0x7b3, 0x5, 0x1ff, 0x7, 0x80, 0x8, 0x4, 0x400, 0xdb61, 0x6, 0x4, 0x7, 0xd4, 0xffff6a88, 0xe901, 0x5, 0xe, 0x1, 0x5, 0x9, 0x1372, 0x800, 0x72, 0x8, 0xe, 0x7f5, 0x2b, 0x25, 0x6, 0x6, 0x6, 0x100, 0x71, 0xe, 0xfffffffd, 0x60, 0xc, 0x5, 0x2b, 0x6, 0x2, 0x3, 0x7, 0x3, 0x9, 0x3, 0x4, 0xfffffc00, 0xfffffeac, 0x6, 0x3ff, 0x101, 0x5, 0x7f, 0x3, 0x1, 0x1, 0x400, 0x7, 0x0, 0xdd6, 0x4, 0x3, 0x35, 0x9, 0x7, 0x3, 0x1b9, 0x2, 0xc572, 0x33, 0x7, 0xb6, 0xf1, 0x188b, 0x4, 0x5, 0x5, 0x3, 0x80, 0x3, 0x2, 0x0, 0x3, 0x6, 0x7fff, 0x7b, 0x5, 0x9, 0x3, 0x942, 0x4, 0x3, 0x7, 0x7, 0xa8, 0xfff, 0x6, 0x1000, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x8, 0x5, 0xff, 0x73, {0xf, 0x1, 0x436, 0x8, 0xff81, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x3, 0xc11}, 0x5, 0x8, 0x7d80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcb6d, 0xca, 0x351, 0x122e4b0e, 0xfffffff1, 0xb, 0xffffc33a, 0x4, 0x79, 0x0, 0x9, 0x0, 0x8, 0x1, 0x29b01c17, 0x4, 0xfff, 0x4, 0x6895c422, 0x2e7, 0x3, 0x5697, 0x0, 0xffffff13, 0x400, 0x1f, 0x9, 0x7, 0x7d, 0x7, 0x7, 0x1, 0x8, 0x2975, 0xc5, 0xf, 0x1, 0xb09d, 0x1ff, 0x101, 0x7, 0x18fc3c8b, 0x5, 0x6, 0x5, 0x2, 0x1, 0x2, 0x0, 0xfffffff7, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0x449, 0x2, 0xf, 0x0, 0x3, 0x5, 0x4, 0xff, 0x80, 0x8906, 0xd, 0x8000, 0x7, 0x5, 0xffffffff, 0x9, 0x5, 0x8, 0x7, 0xffffffff, 0x7, 0x0, 0xcf28, 0x9, 0xd, 0x5, 0x7fffffff, 0x28, 0x3ff, 0x40, 0xff, 0x8, 0x6, 0x5, 0x28786a93, 0x9, 0xfffffffb, 0x5, 0x7fff, 0x5, 0x4cf, 0x81, 0x2, 0x9, 0x9, 0x6, 0x4, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, 0x3, 0x9, 0x3, 0x4, 0x8, 0x1, 0x6, 0x7fffffff, 0x9, 0x5, 0x9, 0x4, 0x5, 0xfffffff9, 0x0, 0x400, 0x1dd0, 0x200, 0x2, 0x2, 0x7, 0xff, 0x8, 0x0, 0xffffff80, 0x6, 0x4, 0x1, 0xfffffffa, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0xd, 0x8, 0x6, 0x10001, 0x3, 0x529a, 0x40, 0x8001, 0x8, 0x5, 0xe, 0x5, 0x2, 0x0, 0x1740000, 0xe153, 0x234e, 0x2, 0x401, 0x96, 0x5, 0x2, 0x3ff, 0x8, 0x5, 0x6, 0x5, 0x80000001, 0x9, 0x2, 0x8, 0x5, 0x653, 0xe3, 0x0, 0x1753, 0x6a7, 0x9, 0x3, 0xbc, 0x8000, 0x2, 0x7, 0x7, 0x0, 0x3, 0x6be7, 0x2418fe41, 0x0, 0x39, 0xb, 0x0, 0x4, 0x10000, 0x293, 0x10001, 0x3, 0x5, 0x3, 0x5, 0x9, 0x1, 0x8, 0x6, 0xd, 0x8, 0x4, 0x69a, 0x1, 0x0, 0xfffffff8, 0xb, 0x5b453d30, 0x6, 0x0, 0x3, 0xbfa, 0x7ff, 0x7, 0x80000000, 0x0, 0x9, 0x3, 0x32, 0x0, 0x0, 0x3, 0x0, 0xffffff1b, 0x7, 0x2, 0xff, 0x5, 0xc558, 0x10000, 0x81, 0x2, 0x3, 0x2, 0x6, 0x5, 0x9, 0x2, 0x8597, 0xa, 0x9, 0x9, 0xc834, 0xf15, 0x0, 0x3, 0xffffffff, 0x8001]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 5.324634619s ago: executing program 5 (id=8244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459", 0xec}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e2", 0x3f}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2", 0x2e}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.150878813s ago: executing program 5 (id=8246): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101842) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 4.990976486s ago: executing program 3 (id=8248): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945deb5bfaf4c639d9027f17232b1032005eabe97b4dc33a47d3a158da988456d30026b410470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e904a01dcd271eb1c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b4824", 0xc4}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.602040207s ago: executing program 3 (id=8250): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x30, 0x80}}, 0x50) read$FUSE(r3, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r3, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r4, 0x40086602, &(0x7f0000002740)={0xda}) 3.240540292s ago: executing program 4 (id=8252): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) sched_setattr(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x22, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r5 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x11d, 0x1b, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x1, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x7ffffffffffffffc, 0x3, 0xffffffff, 0x1, 0x9, 0xbe6, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483", 0x76}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x44, 0x7, 0xfffffffc, 0xfffffffffffffffc, 0x4, 0x9, 0x3, 0xffff}, 0x0) 3.200636051s ago: executing program 2 (id=8253): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x802) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c5805000000451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2.260018622s ago: executing program 2 (id=8254): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r10, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 2.113243691s ago: executing program 2 (id=8255): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.046739306s ago: executing program 4 (id=8256): socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x4000000000, 0x8, 0x8, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) 1.937485242s ago: executing program 5 (id=8257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x105, 0x80000000, 0x4, 0x4, 0x3}, 0x1, 0x7}, [{0x5b, 0x8, 0x40, 0x9, 0x9, 0x6}, {0x7, 0xc11d, 0x8000006, 0x0, 0x54c83b4b, 0x2}, {0x4, 0x8, 0x7, 0x8, 0x6, 0x40}, {0x6, 0x7ff, 0x10001, 0x6, 0x8000, 0x3}, {0x17, 0x1, 0xb, 0x4, 0x0, 0x3}, {0x0, 0x7, 0x10001, 0x2, 0x6, 0x81}, {0x0, 0x48c081f1, 0x3, 0x0, 0x0, 0x6}, {0x2, 0xfff, 0x2, 0x0, 0x3, 0x7f}, {0x0, 0x9e, 0x3, 0x7, 0x8, 0x1}, {0xaa, 0x6, 0x8, 0x6, 0x5, 0x2}, {0x0, 0x5, 0x7, 0xec9, 0xaa12, 0x4}, {0xff, 0x5, 0x4, 0x10, 0xfff, 0x80000001}, {0x0, 0x9, 0x10000, 0x0, 0x6487875c, 0xc}, {0x6, 0xd, 0x8, 0xea, 0x2, 0x9}, {0xfffffffc, 0x0, 0x7, 0x6, 0x7fff, 0x5}, {0x4, 0x1, 0x8, 0x9, 0x0, 0x8}, {0x2, 0x4689, 0x4, 0xca6, 0x7c2, 0x5}, {0x0, 0x81, 0x8, 0x10000, 0x7, 0x8001}, {0x4, 0x3, 0x7, 0xafb9, 0x8000, 0x10000}, {0x1000, 0xb, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x4, 0x5, 0x6, 0x6}, {0x8, 0x9, 0x81, 0x1, 0x7, 0xbbb}, {0x9, 0x6, 0x1000, 0x8, 0x2, 0x1}, {0x2, 0x3, 0x70, 0x4, 0x4, 0x3}, {0x3, 0x8, 0x6, 0x7, 0x3a555fb9, 0x101}, {0x101, 0x20000000, 0x2, 0x5, 0x9, 0x10}, {0x5, 0x6, 0x0, 0x1, 0x9, 0x5}, {0x7fffffff, 0x1000, 0x1, 0x81, 0x1ff4}, {0x58ab449b, 0x7, 0x9, 0x80000001, 0xff, 0xa697}, {0xfffffffb, 0x8f, 0x6941, 0x6, 0x6, 0x7}, {0x4d2, 0x26, 0xe8c, 0xffff, 0x3391, 0x10001}, {0xfbde, 0x80000001, 0x9, 0x101, 0x2, 0x7fff}, {0x7fffffff, 0x8, 0x8, 0x2, 0x1, 0x9}, {0x90f1, 0x3, 0x7, 0x6, 0x8, 0x1ff}, {0x3, 0x10, 0x8, 0x6, 0x6, 0x2}, {0x8, 0x5, 0x1c05, 0x986a, 0xd, 0x38efcd4a}, {0x8000, 0x5, 0x5, 0x2, 0x1, 0x7}, {0x3ff, 0x2, 0x6a, 0x5, 0x9, 0x3}, {0x1, 0x5, 0x0, 0x7fffffff, 0x8, 0xc72}, {0x3b5f774a, 0x1, 0x0, 0x10001, 0x77, 0x2}, {0x6, 0x4, 0x4, 0x0, 0xffffffff, 0x8}, {0x6, 0x7b4, 0x6, 0x4, 0xe, 0x4}, {0x6, 0x6, 0xcc5f, 0x3c88, 0x1000, 0xce}, {0x6, 0x1ff, 0x8, 0x200000, 0x2, 0x2}, {0x2, 0x1, 0x3ff, 0x0, 0x7, 0x8001}, {0x1ff, 0x2, 0x5, 0x4, 0xf, 0xa}, {0x7f, 0x200, 0x9000, 0x9, 0x2, 0x81}, {0xb12, 0x8, 0x9, 0x8, 0x5, 0x2}, {0x8, 0x7, 0x2, 0x7, 0x2, 0x5}, {0x6, 0x5, 0xffff, 0x5b46, 0x0, 0x5}, {0x401, 0x1, 0xe, 0x1205478f, 0x9, 0x6}, {0x10001, 0x7fff, 0x1, 0x3, 0x7ff, 0xc}, {0xb304, 0x0, 0x8, 0x400, 0x1, 0x3}, {0x5, 0x5, 0x8, 0x9, 0x3ff, 0x83}, {0x1ff, 0x4, 0x5, 0x80000000, 0x81, 0x6}, {0x9, 0x0, 0x5caa, 0x7fff, 0x1, 0x7fffffff}, {0xf, 0x10000, 0xffff, 0x100, 0x80, 0x3e}, {0x2, 0x8, 0x6, 0xe911, 0x7, 0x8}, {0x7, 0x3, 0x18000, 0xd, 0x5, 0x6}, {0x8, 0x7fffffff, 0x10000, 0x3, 0x3, 0x1fc28}, {0x53a, 0xffffffff, 0x4, 0x408, 0xe, 0x7fff}, {0xffff, 0x8, 0xff, 0x2, 0x0, 0xe00}, {0x2, 0x0, 0x4, 0xd, 0x9, 0x3}, {0x4, 0x0, 0x81, 0x0, 0x7, 0x3}, {0x3, 0x9b1f, 0x3, 0xdc5e, 0x4, 0x6}, {0x58, 0x7, 0x1, 0xffffff00, 0x3, 0x6}, {0x7fbf, 0x0, 0xff, 0x7, 0xf2, 0x2}, {0x96f2, 0x2, 0x5, 0x8, 0x9b, 0x1}, {0x9, 0x143, 0x0, 0xd, 0x6, 0x7}, {0x2, 0x380, 0x8353, 0xa3, 0x1}, {0x80, 0x8, 0x2, 0x8, 0xe8b, 0x6}, {0x1, 0x4, 0x3, 0x67b2, 0x9, 0x7}, {0x777e, 0x4, 0x1, 0xfffffff7, 0x8, 0x9}, {0x10, 0xf76, 0xfffffff9, 0x2, 0x4, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x8000, 0x9}, {0x3, 0x4, 0x8001, 0x4, 0x0, 0x1}, {0x10, 0x3caf, 0xfe, 0x101, 0x3, 0x6}, {0x4, 0xfffffff9, 0x0, 0x7, 0x9, 0xfffffff7}, {0x2, 0xffffffff, 0x75, 0x7, 0x0, 0x7}, {0xfffffff8, 0x7, 0x4, 0x81, 0x7, 0x81cd}, {0x76c0, 0x8, 0x80000000, 0x8a2, 0x7, 0x3}, {0x1ff, 0x2, 0x9, 0xc, 0xa, 0x8}, {0xffff8001, 0x2, 0x415, 0x6, 0x2, 0x2}, {0x0, 0x8, 0x3, 0x8, 0x5, 0x2}, {0x7, 0x4, 0x7, 0xfffffb37, 0x0, 0x4}, {0x70, 0xffffffff, 0x4, 0x9, 0x200, 0x4}, {0x1, 0x6, 0x2, 0x3, 0x7, 0x80000000}, {0xea, 0xb1, 0x0, 0xc, 0x6, 0x6}, {0x130cf172, 0x0, 0x8, 0x0, 0x7, 0x99}, {0x9, 0x7, 0x7fffffff, 0x6, 0x200, 0x7}, {0xa3, 0xffffffff, 0x3ff, 0x4, 0x8, 0xe}, {0x7, 0x5, 0x3f5, 0x1, 0x6, 0x3}, {0x200, 0x0, 0x144d, 0x100, 0x6, 0x7}, {0x10000, 0x3ff, 0x0, 0x8b0d, 0x2, 0x3}, {0x3, 0x8, 0x3ff, 0xffffff83, 0xa0bb}, {0x5, 0x2, 0x9, 0x1, 0x8000, 0x18000000}, {0x1, 0xb1, 0x78d, 0x9, 0xe2e}, {0xe121, 0x800, 0xffff2014, 0x100, 0x200, 0x2}, {0x609, 0x7, 0x7, 0xfffffbff, 0x6, 0x6f}, {0x3, 0x0, 0x7ff, 0x0, 0x7, 0x10001}, {0x10000, 0x401, 0x5, 0x2, 0x8, 0x5}, {0x8000, 0xe, 0x9, 0x3, 0xc5f, 0x8}, {0x3, 0x30000000, 0x9, 0x9, 0x8}, {0x62872137, 0xc24, 0x101, 0xffffff12, 0x1000, 0x100}, {0xfffffffb, 0xf, 0x10, 0x1, 0x0, 0x4}, {0x2, 0x0, 0xb, 0x306c, 0xff, 0x10000}, {0x10000, 0x3, 0x5, 0xa, 0x3, 0xa}, {0x3, 0x300000, 0x6, 0xd28b, 0x8, 0x1000}, {0x59, 0x3, 0x5, 0x3, 0x80000001, 0x7}, {0x7ceb, 0x9, 0x7, 0x261, 0x8, 0x7ff}, {0x40, 0x4, 0x6, 0x1, 0x7, 0x6}, {0x4, 0x4, 0x9, 0x1000, 0x4, 0xd}, {0x4c, 0x1, 0x3, 0x2, 0x2, 0x7}, {0x2f, 0x1, 0x6, 0x7fffffff, 0xffffffff, 0xfffff954}, {0x3, 0x6, 0x0, 0x5, 0x7, 0x4}, {0x8001, 0x4, 0xffffffff, 0xa2b, 0x5d, 0x8}, {0x40, 0xe, 0xe, 0x1, 0x97f, 0x2d00}, {0x3e3, 0x6, 0x1, 0x7, 0xfffffffa, 0xa0}, {0x5, 0x9, 0x3aa, 0xd, 0x7ffff7ff, 0xa}, {0x7ff, 0x3, 0x4, 0x5, 0x80, 0x7}, {0xb51, 0x7, 0xffff, 0x9, 0xffff, 0x2}, {0x10001, 0x6, 0x7, 0x4, 0x5, 0x6}, {0x0, 0x1, 0x0, 0x4, 0x40, 0x1}, {0x800000, 0x7, 0x0, 0x8, 0x6, 0x8}, {0xcb, 0x7, 0x7, 0x0, 0xfffffffc, 0x1}, {0x7, 0xc, 0x9, 0x2, 0x40, 0x1}, {0xccb7, 0x1, 0x800, 0x0, 0x6, 0x229c}, {0x4, 0x5, 0x6, 0x8, 0x2, 0xdf1}], [{0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0xb}, {0x8dfb4a42dae2f56d}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x5c96fd0c102cb707}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {0x861c20290662cc64}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.916502732s ago: executing program 0 (id=8258): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80e00, 0x0) close(0x3) socket$pppoe(0x18, 0x1, 0x0) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0xfdef) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7542, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r3, 0x2007ffb) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') unshare(0x6020480) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000180)=ANY=[]) 1.824301391s ago: executing program 2 (id=8259): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x123a00, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111}}, 0xfffffffffffffdb4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.512651016s ago: executing program 5 (id=8260): syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x6, 0x80000, 0x5a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.422014347s ago: executing program 2 (id=8261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459", 0xec}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e2", 0x3f}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2", 0x2e}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.201951196s ago: executing program 2 (id=8262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') lseek(r4, 0xffffff60, 0x1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0xe}, 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x1c, 0x25, 0x301, 0x70bd26, 0x25dfdbf9, {0x15}, [@nested={0x8, 0x131, 0x0, 0x1, [@typed={0x4, 0x12b, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x24008002) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) write$sequencer(r5, &(0x7f0000000040)=[@generic={0xa}, @t={0x4, 0x0, 0x6, 0x81, @generic=0x5}, @s={0x5, @generic=0x1, 0x1f}], 0xd) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x2, "a995"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000002a80)={0x1c, &(0x7f0000002540)={0x60, 0x0, 0xf, "6dfdfeeb6e47d8033db17f0b1d99cb"}, 0x0, 0x0}) 394.449317ms ago: executing program 3 (id=8263): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45"], 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="300000000000000029000000370000008902000000000000000100c20400007fff050200c78a0203ff00000000000000380000000000000029000000040000003b030000000000000106000000000000c91000"/104], 0x68}}], 0x1, 0x400c0c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x40000) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000000)=0x1) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab", 0x1b, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) rmdir(0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f0000000280)=""/83, 0x53, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r6 = syz_open_pts(0xffffffffffffffff, 0x101000) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000100)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x4180) 239.604222ms ago: executing program 0 (id=8264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459", 0xec}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e2", 0x3f}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2", 0x2e}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 238.652534ms ago: executing program 4 (id=8265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff6, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x7, 0xfffff8d2, 0x1, 0x3, 0x1, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 0 (id=8266): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev, 0x9}, 0xffffffffffffff7d, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x0) kernel console output (not intermixed with test programs): SB device number 96 using dummy_hcd [ 2461.258460][ T4460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7473'. [ 2461.313333][T10276] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2461.328259][T10276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.339327][T10276] usb 5-1: config 0 descriptor?? [ 2461.351266][T10276] cp210x 5-1:0.0: cp210x converter detected [ 2461.444506][ T4463] netlink: 'syz.5.7474': attribute type 29 has an invalid length. [ 2461.452764][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7474'. [ 2461.657278][ T4463] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2461.750047][T10276] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2461.969615][T10276] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2462.165182][T10276] usb 5-1: USB disconnect, device number 96 [ 2462.180242][T10276] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2462.252235][T10276] cp210x 5-1:0.0: device disconnected [ 2462.426200][ T4470] tipc: Resetting bearer [ 2462.497325][ T4472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2462.515292][ T4470] tipc: Resetting bearer [ 2463.583717][ T4490] trusted_key: encrypted_key: insufficient parameters specified [ 2463.736280][ T4497] netlink: 'syz.3.7481': attribute type 6 has an invalid length. [ 2463.800952][ T4497] QAT: failed to copy from user cfg_data. [ 2463.991680][ T5827] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2464.170597][ T4497] IPv6: sit1: Disabled Multicast RS [ 2464.273416][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 2464.297432][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2464.356389][ T5827] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2464.410256][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2464.451678][ T5827] usb 6-1: Product: syz [ 2464.461998][T28699] Bluetooth: hci0: command 0x0406 tx timeout [ 2464.462096][ T5827] usb 6-1: Manufacturer: syz [ 2464.536905][ T5827] usb 6-1: SerialNumber: syz [ 2464.568269][ T5827] usb 6-1: config 0 descriptor?? [ 2464.874711][ T5827] usb 6-1: no audio or video endpoints found [ 2467.348107][ T5827] usb 6-1: USB disconnect, device number 18 [ 2467.495828][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.502346][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.511899][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2467.621796][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2467.674982][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2467.713301][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2467.736019][ T24] usb 3-1: config 0 descriptor?? [ 2467.776833][ T24] cp210x 3-1:0.0: cp210x converter detected [ 2467.832260][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2467.874885][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2467.997465][ T9] usb 5-1: config 0 descriptor?? [ 2468.224365][ T9] cp210x 5-1:0.0: cp210x converter detected [ 2468.338380][ T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2468.578323][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2468.668782][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2468.827403][ T5827] usb 3-1: USB disconnect, device number 3 [ 2468.915687][ T5827] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2469.012532][ T9] usb 5-1: cp210x converter now attached to ttyUSB1 [ 2469.031453][ T5827] cp210x 3-1:0.0: device disconnected [ 2470.464794][ T24] usb 5-1: USB disconnect, device number 97 [ 2470.506980][ T24] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2470.620110][ T24] cp210x 5-1:0.0: device disconnected [ 2472.102682][ T4587] trusted_key: encrypted_key: insufficient parameters specified [ 2472.331843][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2472.431858][ T5827] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2472.564705][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2472.601687][ T4553] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2472.655938][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.742516][ T9] usb 4-1: config 0 descriptor?? [ 2472.794700][ T9] cp210x 4-1:0.0: cp210x converter detected [ 2472.871706][ T4553] usb 5-1: Using ep0 maxpacket: 32 [ 2472.995342][ T4553] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2473.090582][ T4553] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2473.181979][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7504'. [ 2473.211024][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2473.297443][ T4553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2473.339790][ T5827] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2473.359245][ T4601] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7504'. [ 2473.387681][ T4553] usb 5-1: Product: syz [ 2473.400935][ T4553] usb 5-1: Manufacturer: syz [ 2473.445207][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.460138][ T4553] usb 5-1: SerialNumber: syz [ 2473.569233][ T5827] usb 1-1: Product: syz [ 2473.613645][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2473.622998][ T4553] usb 5-1: config 0 descriptor?? [ 2473.629873][ T5827] usb 1-1: Manufacturer: syz [ 2473.755243][ T5827] usb 1-1: SerialNumber: syz [ 2473.762546][ T4553] usb 5-1: no audio or video endpoints found [ 2473.950602][ T5827] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2474.627552][ T4553] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2474.980012][ T9] usb 4-1: USB disconnect, device number 94 [ 2475.012091][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2475.113025][ T9] cp210x 4-1:0.0: device disconnected [ 2475.305056][T10276] usb 5-1: USB disconnect, device number 98 [ 2475.631769][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2475.731879][ T4553] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2475.745256][ T4553] ath9k_htc: Failed to initialize the device [ 2475.775638][ T4553] usb 1-1: ath9k_htc: USB layer deinitialized [ 2475.787395][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2475.802289][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2475.823860][ T9] usb 4-1: config 0 descriptor?? [ 2475.835148][ T9] cp210x 4-1:0.0: cp210x converter detected [ 2475.936572][ T24] usb 1-1: USB disconnect, device number 34 [ 2476.234381][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2476.468243][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2476.670147][ T4553] usb 4-1: USB disconnect, device number 95 [ 2476.689171][ T4553] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2476.711691][ T9] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 2476.724562][ T4553] cp210x 4-1:0.0: device disconnected [ 2476.883578][ T9] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 2476.908275][ T9] usb 5-1: config 0 has an invalid descriptor of length 29, skipping remainder of the config [ 2476.948822][ T9] usb 5-1: config 0 has no interface number 0 [ 2476.968761][ T9] usb 5-1: too many endpoints for config 0 interface 19 altsetting 217: 253, using maximum allowed: 30 [ 2477.009600][ T9] usb 5-1: config 0 interface 19 altsetting 217 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 2477.041689][ T9] usb 5-1: config 0 interface 19 has no altsetting 0 [ 2477.064438][ T9] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2477.094151][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2477.122252][ T9] usb 5-1: Product: syz [ 2477.134608][ T9] usb 5-1: Manufacturer: syz [ 2477.152389][ T9] usb 5-1: SerialNumber: syz [ 2477.184267][ T9] usb 5-1: config 0 descriptor?? [ 2477.406668][ T9] streamzap 5-1:0.19: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2477.429859][ T9] usb 5-1: USB disconnect, device number 99 [ 2478.899476][ T4651] fuse: Unknown parameter 'fd0x0000000000000006' [ 2479.710248][ T4660] trusted_key: encrypted_key: insufficient parameters specified [ 2479.790383][ T4662] Attempt to restore checkpoint with obsolete wellknown handles [ 2479.831706][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2480.144515][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2480.179225][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2480.215316][ T24] usb 6-1: config 0 descriptor?? [ 2480.271785][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2480.361226][ T24] cp210x 6-1:0.0: cp210x converter detected [ 2480.441891][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2480.449541][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2480.466467][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2480.487951][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2480.505609][ T9] usb 3-1: Product: syz [ 2480.518753][ T9] usb 3-1: Manufacturer: syz [ 2480.531940][ T9] usb 3-1: SerialNumber: syz [ 2480.556736][ T9] usb 3-1: config 0 descriptor?? [ 2480.572308][ T9] usb 3-1: no audio or video endpoints found [ 2480.816192][ T24] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2481.139725][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2481.451694][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2481.621819][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 2481.634146][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2481.684851][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2481.728878][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2481.785059][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2481.814104][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2481.855318][ T9] usb 5-1: Product: syz [ 2481.867530][ T9] usb 5-1: Manufacturer: syz [ 2481.886861][ T9] usb 5-1: SerialNumber: syz [ 2481.898647][ T4670] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2481.932440][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 2481.993401][ T9] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 2482.019897][ T9] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 2482.401415][ T4680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2482.428281][ T4680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2482.530965][ T1815] usb 3-1: USB disconnect, device number 4 [ 2482.602861][ T24] usb 6-1: USB disconnect, device number 19 [ 2482.605136][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2482.613166][ T24] cp210x 6-1:0.0: device disconnected [ 2482.615258][ T4680] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7519'. [ 2484.975027][ T1815] usb 5-1: USB disconnect, device number 100 [ 2485.081644][ T4553] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2485.241891][ T4553] usb 6-1: Using ep0 maxpacket: 16 [ 2485.255138][ T4553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2485.272112][ T30] audit: type=1800 audit(1775350667.865:2906): pid=4716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7528" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 2485.304910][ T4717] PKCS8: Unsupported PKCS#8 version [ 2485.315549][ T4553] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2485.329115][ T4553] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2485.366361][ T4553] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2485.390992][ T4553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2485.427725][ T4553] usb 6-1: config 0 descriptor?? [ 2485.985775][ T4704] random: crng reseeded on system resumption [ 2486.078165][ T4553] input: HID 0955:7214 Haptics as /devices/virtual/input/input184 [ 2486.186436][ T4553] shield 0003:0955:7214.00A7: Registered Thunderstrike controller [ 2486.254210][ T4553] shield 0003:0955:7214.00A7: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 2486.425347][ T5827] shield 0003:0955:7214.00A7: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2486.436658][ T4553] usb 6-1: USB disconnect, device number 20 [ 2486.465804][ T5827] shield 0003:0955:7214.00A7: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2486.573270][ T5827] shield 0003:0955:7214.00A7: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2486.648041][ T5827] shield 0003:0955:7214.00A7: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2487.091227][ T4737] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2487.173088][ T4731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7530'. [ 2487.421749][ T5827] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2487.671931][ T4553] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2487.883565][ T4553] usb 5-1: Using ep0 maxpacket: 16 [ 2487.928376][ T4553] usb 5-1: config 0 has no interfaces? [ 2487.959976][ T4553] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2488.003254][ T4553] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2488.047106][ T5827] usb 6-1: Using ep0 maxpacket: 16 [ 2488.066926][ T4553] usb 5-1: Manufacturer: syz [ 2488.090323][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2488.108113][ T4553] usb 5-1: config 0 descriptor?? [ 2488.135769][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2488.232485][ T5827] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2488.420590][ T5827] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2488.496944][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2488.575320][ T5827] usb 6-1: config 0 descriptor?? [ 2488.588892][ T4742] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2488.813388][ T4749] loop6: detected capacity change from 0 to 524288000 [ 2488.912924][ T4754] libceph: resolve '0..' (ret=-3): failed [ 2489.029633][ T4754] netlink: 'syz.3.7535': attribute type 11 has an invalid length. [ 2489.166650][ T5827] microsoft 0003:045E:07DA.00A8: ignoring exceeding usage max [ 2489.209822][ T5827] microsoft 0003:045E:07DA.00A8: ignoring exceeding usage max [ 2489.272401][ T5827] microsoft 0003:045E:07DA.00A8: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2489.322140][ T5827] microsoft 0003:045E:07DA.00A8: no inputs found [ 2489.365565][ T5827] microsoft 0003:045E:07DA.00A8: could not initialize ff, continuing anyway [ 2489.595633][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2489.812151][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 2489.840945][ T24] usb 1-1: config 0 has no interfaces? [ 2489.896179][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2489.993681][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2490.060332][ T24] usb 1-1: Manufacturer: syz [ 2490.280565][ T24] usb 1-1: config 0 descriptor?? [ 2490.372909][ T5827] usb 5-1: USB disconnect, device number 101 [ 2490.780936][ T4760] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2490.831827][ T5827] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2490.907424][ T4762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2491.043317][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 2491.054384][ T5827] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2491.076608][ T5827] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2491.086812][ T4553] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2491.108935][ T5827] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2491.132874][ T5827] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2491.163523][ T5827] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2491.181814][ T1815] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2491.210526][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.256199][ T4553] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 2491.289151][ T4553] usb 3-1: config 1 has no interface number 0 [ 2491.311484][ T4553] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2491.336852][ T4553] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 2491.343797][ T1815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2491.375726][ T1815] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2491.375725][ T4553] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 2491.375756][ T1815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.428379][ T4553] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2491.458782][ T5827] usb 5-1: usb_control_msg returned -32 [ 2491.473022][ T5827] usbtmc 5-1:16.0: can't read capabilities [ 2491.488697][ T4553] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2491.521404][ T4553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.547625][ T1815] usb 4-1: config 0 descriptor?? [ 2491.553200][ T4553] usb 3-1: Product: syz [ 2491.557508][ T4553] usb 3-1: Manufacturer: syz [ 2491.575294][ T4553] usb 3-1: SerialNumber: syz [ 2491.598923][ T4771] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2491.618177][ T4771] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2491.636404][ T4553] usb 3-1: Error in usbnet_get_endpoints (-22) [ 2491.787172][ T4773] binder: 4772:4773 ioctl 400c620e 0 returned -14 [ 2491.856024][ T1815] usbhid 4-1:0.0: can't add hid device: -71 [ 2491.876001][ T1815] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2491.912028][ T1815] usb 4-1: USB disconnect, device number 96 [ 2492.326286][ T4553] usb 6-1: USB disconnect, device number 21 [ 2492.381675][ T1815] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2492.531891][ T1815] usb 4-1: Using ep0 maxpacket: 32 [ 2492.544465][ T1815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2492.568938][ T1815] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2492.585019][ T1815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.602369][ T1815] usb 4-1: config 0 descriptor?? [ 2492.619687][ T1815] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2492.636423][ T1815] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 2493.008507][ T1815] usb 1-1: USB disconnect, device number 35 [ 2493.024895][ T4773] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 2493.232868][ T4784] fuse: Invalid uid '00000000000000000007' [ 2493.500174][ T1815] usb 5-1: USB disconnect, device number 102 [ 2493.508675][ T4788] fuse: Bad value for 'user_id' [ 2493.530436][ T4788] fuse: Bad value for 'user_id' [ 2493.617298][ T24] usb 3-1: USB disconnect, device number 5 [ 2493.881693][ T1815] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2494.041869][ T1815] usb 5-1: Using ep0 maxpacket: 16 [ 2494.058349][ T1815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2494.090155][ T4553] usb 4-1: USB disconnect, device number 97 [ 2494.104457][ T4553] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 2494.131207][ T1815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2494.173897][ T1815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2494.176611][ T4800] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2494.219033][ T1815] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2494.235586][ T1815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2494.260580][ T1815] usb 5-1: config 0 descriptor?? [ 2494.760373][ T4790] random: crng reseeded on system resumption [ 2494.819357][ T1815] input: HID 0955:7214 Haptics as /devices/virtual/input/input186 [ 2494.883146][ T1815] shield 0003:0955:7214.00A9: Registered Thunderstrike controller [ 2494.917301][ T1815] shield 0003:0955:7214.00A9: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 2495.104523][T10276] shield 0003:0955:7214.00A9: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2495.121380][ T24] usb 5-1: USB disconnect, device number 103 [ 2495.154808][T10276] shield 0003:0955:7214.00A9: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2495.191756][ T4553] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2495.206264][T10276] shield 0003:0955:7214.00A9: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2495.230353][T10276] shield 0003:0955:7214.00A9: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2495.422583][ T4553] usb 4-1: Using ep0 maxpacket: 16 [ 2495.454878][ T4553] usb 4-1: config 0 has no interfaces? [ 2495.488223][ T4553] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2495.535640][ T4553] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2495.577715][ T4553] usb 4-1: Manufacturer: syz [ 2495.605959][ T4553] usb 4-1: config 0 descriptor?? [ 2496.204383][ T4824] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2496.239474][ T4824] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2496.402848][ T4832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7549'. [ 2496.457727][ T4830] fuse: Bad value for 'fd' [ 2497.495050][ T4841] adf_ctl_ioctl: 15 callbacks suppressed [ 2497.495068][ T4841] QAT: Invalid ioctl 1075883590 [ 2497.511423][ T4841] QAT: Invalid ioctl 1075883590 [ 2497.525996][ T4841] QAT: Invalid ioctl 1075883590 [ 2497.562133][ T4841] QAT: Invalid ioctl 1075883590 [ 2497.590498][ T4842] team_slave_1: Caught tx_queue_len zero misconfig [ 2497.610229][ T5827] usb 4-1: USB disconnect, device number 98 [ 2497.684258][ T4841] QAT: Invalid ioctl 1075883590 [ 2497.706212][ T4841] QAT: Invalid ioctl 1075883590 [ 2497.772049][ T4841] QAT: Invalid ioctl 1075883590 [ 2497.781824][ T4841] QAT: Invalid ioctl 1075883590 [ 2497.789390][ T4841] QAT: Invalid ioctl 1075883590 [ 2497.853476][ T4841] QAT: Invalid ioctl 1075883590 [ 2498.684736][ T4858] bond0: (slave bond_slave_1): Releasing backup interface [ 2499.319385][ T4860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2499.326887][ T4860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2499.351685][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2499.551658][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 2499.579004][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2499.628025][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2499.683833][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2499.737755][ T24] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2499.792405][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.846043][ T24] usb 1-1: config 0 descriptor?? [ 2500.074749][ T4860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2500.110413][ T4860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2500.328259][ T4868] random: crng reseeded on system resumption [ 2500.409067][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input188 [ 2500.462592][ T24] shield 0003:0955:7214.00AA: Registered Thunderstrike controller [ 2500.481042][ T24] shield 0003:0955:7214.00AA: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 2500.632771][ T1815] shield 0003:0955:7214.00AA: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2500.644554][ T24] usb 1-1: USB disconnect, device number 36 [ 2500.654860][ T1815] shield 0003:0955:7214.00AA: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2500.692087][ T1815] shield 0003:0955:7214.00AA: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2500.721899][ T1815] shield 0003:0955:7214.00AA: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2500.803952][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.839901][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.892335][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.944862][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2501.192575][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7560'. [ 2502.351666][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2502.553365][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2502.598678][ T9] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 2502.630227][ T9] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 2502.668399][ T9] usb 4-1: config 129 has no interface number 0 [ 2502.712534][ T9] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2502.831941][ T9] usb 4-1: config 129 interface 135 has no altsetting 0 [ 2502.885791][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 2502.926058][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2503.000389][ T9] usb 4-1: Product: syz [ 2503.034179][ T9] usb 4-1: Manufacturer: syz [ 2503.065008][ T9] usb 4-1: SerialNumber: syz [ 2503.352020][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2503.487337][ T9] usb 4-1: USB disconnect, device number 99 [ 2505.265576][ T30] audit: type=1326 audit(1775350687.865:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2505.352197][ T30] audit: type=1326 audit(1775350687.875:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2505.459310][ T30] audit: type=1326 audit(1775350687.875:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2505.531884][ T30] audit: type=1326 audit(1775350687.875:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2505.641766][ T30] audit: type=1326 audit(1775350687.875:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2505.777922][ T30] audit: type=1326 audit(1775350687.875:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2505.819325][ T30] audit: type=1326 audit(1775350687.875:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2506.013942][ T30] audit: type=1326 audit(1775350687.875:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2506.115940][ T30] audit: type=1326 audit(1775350687.875:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2506.183997][ T30] audit: type=1326 audit(1775350687.875:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.5.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119dd9c819 code=0x7ffc0000 [ 2506.350929][ T4949] loop2: detected capacity change from 0 to 7 [ 2506.481690][ T24] usb 5-1: device descriptor read/64, error -71 [ 2506.514815][T13029] Dev loop2: unable to read RDB block 7 [ 2506.529049][T13029] loop2: AHDI p1 p2 p3 [ 2506.546028][T13029] loop2: partition table partially beyond EOD, truncated [ 2506.566369][T13029] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2506.582371][T13029] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2506.654935][ T4949] Dev loop2: unable to read RDB block 7 [ 2506.704490][ T4949] loop2: AHDI p1 p2 p3 [ 2506.724495][ T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2506.747783][ T4949] loop2: partition table partially beyond EOD, truncated [ 2506.835130][ T4949] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2506.851898][ T1815] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2506.912133][ T4949] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2506.937583][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 2507.052390][ T1815] usb 6-1: Using ep0 maxpacket: 32 [ 2507.101920][ T1815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2507.131922][ T1815] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2507.151463][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2507.182034][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2507.194201][ T1815] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2507.212056][ T1815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.220177][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2507.244733][ T1815] usb 6-1: Product: syz [ 2507.248919][ T1815] usb 6-1: Manufacturer: syz [ 2507.262584][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2507.272709][ T1815] usb 6-1: SerialNumber: syz [ 2507.341392][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2507.353226][ T1815] usb 6-1: config 0 descriptor?? [ 2507.375504][ T24] usb 5-1: config 0 descriptor?? [ 2507.515575][ T4958] binder: 4953:4958 ioctl ae80 0 returned -22 [ 2507.804393][ T4942] random: crng reseeded on system resumption [ 2507.928021][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input189 [ 2507.994276][ T24] shield 0003:0955:7214.00AB: Registered Thunderstrike controller [ 2508.023790][ T24] shield 0003:0955:7214.00AB: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 2508.135755][ T1815] shield 0003:0955:7214.00AB: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2508.152085][T10276] usb 5-1: USB disconnect, device number 105 [ 2508.198887][ T1815] shield 0003:0955:7214.00AB: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2508.288273][ T1815] shield 0003:0955:7214.00AB: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2508.354389][ T1815] shield 0003:0955:7214.00AB: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2508.831197][ T4972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7579'. [ 2508.877991][ T4972] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 2508.896654][ T4972] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 2509.008935][T10276] usb 6-1: USB disconnect, device number 22 [ 2509.258174][ T5827] IPVS: starting estimator thread 0... [ 2509.385446][ T4985] program syz.5.7581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2509.412872][ T4982] IPVS: using max 59 ests per chain, 141600 per kthread [ 2510.402340][ T4987] tipc: Enabling of bearer rejected, already enabled [ 2511.261719][T10276] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 2511.450584][ T5001] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2511.535306][T10276] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2511.543827][T10276] usb 6-1: config 0 has no interface number 0 [ 2511.673130][T10276] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2511.782605][T10276] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2511.813211][ T5022] netlink: 'syz.3.7588': attribute type 13 has an invalid length. [ 2511.837336][ T5022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7588'. [ 2511.857026][T10276] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2511.931304][T10276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.061177][T10276] usb 6-1: config 0 descriptor?? [ 2512.075562][ T5009] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2512.101760][T10276] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2513.611748][T10276] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 2513.763501][T10276] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 2513.777609][T10276] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2513.790149][T10276] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2513.804455][T10276] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2513.821713][T10276] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2513.830772][T10276] usb 5-1: Product: syz [ 2513.835802][T10276] usb 5-1: Manufacturer: syz [ 2513.841014][T10276] usb 5-1: SerialNumber: syz [ 2513.852634][T10276] usb 5-1: config 0 descriptor?? [ 2513.865365][T10276] usb 5-1: selecting invalid altsetting 0 [ 2513.915221][ T24] usb 6-1: USB disconnect, device number 23 [ 2513.932058][ T1815] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2514.120114][ T1815] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2514.139539][ T1815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.156476][ T1815] usb 4-1: config 0 descriptor?? [ 2514.181879][ T1815] cp210x 4-1:0.0: cp210x converter detected [ 2514.606454][ T1815] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2514.944598][ T1815] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2516.231983][ T5827] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2516.441778][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 2516.472820][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2516.517789][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2516.550303][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2516.578429][ T5827] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2516.596750][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.618790][ T5827] usb 1-1: config 0 descriptor?? [ 2516.970642][ T9] usb 5-1: USB disconnect, device number 106 [ 2517.133785][ T5827] microsoft 0003:045E:07DA.00AC: ignoring exceeding usage max [ 2517.154843][ T5827] microsoft 0003:045E:07DA.00AC: ignoring exceeding usage max [ 2517.178784][ T5827] microsoft 0003:045E:07DA.00AC: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2517.196224][ T5827] microsoft 0003:045E:07DA.00AC: no inputs found [ 2517.211682][ T5827] microsoft 0003:045E:07DA.00AC: could not initialize ff, continuing anyway [ 2517.749146][ T24] usb 4-1: USB disconnect, device number 100 [ 2517.761127][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2517.791772][ T1815] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 2517.804666][ T24] cp210x 4-1:0.0: device disconnected [ 2517.994015][ T1815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2518.017161][ T1815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2518.106035][ T1815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2518.129845][ T1815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2518.177768][ T1815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2518.199503][ T1815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2518.405472][ T1815] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 2518.447099][ T1815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2518.478304][ T1815] usb 3-1: Product: syz [ 2518.496070][ T1815] usb 3-1: Manufacturer: syz [ 2518.518420][ T1815] usb 3-1: SerialNumber: syz [ 2518.541446][ T1815] usb 3-1: config 0 descriptor?? [ 2518.564429][ T1815] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 2518.589547][ T1815] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 2519.873763][ T5827] usb 1-1: USB disconnect, device number 37 [ 2520.370704][ T5084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7601'. [ 2520.811105][ T1815] usb 3-1: USB disconnect, device number 6 [ 2521.282636][ T1815] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2521.441719][ T1815] usb 3-1: Using ep0 maxpacket: 32 [ 2521.476698][ T1815] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2521.519105][ T1815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.578108][ T1815] usb 3-1: Product: syz [ 2521.591647][ T1815] usb 3-1: Manufacturer: syz [ 2521.618664][ T1815] usb 3-1: SerialNumber: syz [ 2521.647697][ T1815] usb 3-1: config 0 descriptor?? [ 2521.669764][ T1815] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2521.698608][ T1815] dvb-usb: bulk message failed: -22 (2/0) [ 2521.750139][ T1815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2521.771114][ T1815] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2521.801673][ T1815] usb 3-1: media controller created [ 2521.896309][ T1815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2522.045246][ T1815] usb 3-1: selecting invalid altsetting 7 [ 2522.091385][ T1815] cxusb: set interface failed [ 2522.125571][ T1815] dvb-usb: bulk message failed: -22 (1/0) [ 2522.182016][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2522.266311][ T1815] DVB: Unable to find symbol lgdt330x_attach() [ 2522.292246][ T1815] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2522.411914][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 2522.482359][ T24] usb 1-1: config 0 has no interfaces? [ 2522.533958][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2522.553724][ T1815] rc_core: IR keymap rc-dvico-portable not found [ 2522.579007][ T1815] Registered IR keymap rc-empty [ 2522.627263][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2522.647180][ T1815] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2522.675865][ T24] usb 1-1: Manufacturer: syz [ 2522.744926][ T24] usb 1-1: config 0 descriptor?? [ 2522.757701][ T1815] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input191 [ 2522.865422][ T1815] dvb-usb: schedule remote query interval to 100 msecs. [ 2522.930393][ T1815] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2523.033029][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2523.094098][ T1815] usb 3-1: USB disconnect, device number 7 [ 2523.261766][ T5827] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2523.279222][ T1815] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2523.536509][ T5827] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2523.547646][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.565583][ T5827] usb 4-1: config 0 descriptor?? [ 2523.580590][ T5827] cp210x 4-1:0.0: cp210x converter detected [ 2523.651789][ T1815] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2523.831660][ T1815] usb 3-1: device descriptor read/64, error -71 [ 2523.850747][ T5132] netlink: 'syz.5.7613': attribute type 7 has an invalid length. [ 2523.859687][ T5132] netlink: 'syz.5.7613': attribute type 8 has an invalid length. [ 2523.992963][ T5827] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2524.141797][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2524.161663][ T1815] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2524.261825][ T5827] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2524.344393][ T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2524.381748][ T1815] usb 3-1: device descriptor read/64, error -71 [ 2524.406184][ T9] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 2524.445032][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2524.496997][ T9] usb 6-1: Product: syz [ 2524.511980][ T1815] usb usb3-port1: attempt power cycle [ 2524.534025][ T9] usb 6-1: Manufacturer: syz [ 2524.558108][ T9] usb 6-1: SerialNumber: syz [ 2524.597672][ T9] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 2524.732185][ T5827] IPVS: starting estimator thread 0... [ 2524.743238][ T5134] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7614'. [ 2524.780736][ T5134] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2524.861655][ T5143] IPVS: using max 36 ests per chain, 86400 per kthread [ 2524.882449][ T1815] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2524.896802][ T24] usb 1-1: USB disconnect, device number 38 [ 2524.925515][ T1815] usb 3-1: device descriptor read/8, error -71 [ 2525.051926][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2525.130381][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 2525.191814][ T1815] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2525.211982][ T9] usb 6-1: media controller created [ 2525.312408][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2525.469653][ T1815] usb 3-1: device descriptor read/8, error -71 [ 2525.521694][ T24] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 2525.601968][ T1815] usb usb3-port1: unable to enumerate USB device [ 2525.691787][ T5827] usb 4-1: USB disconnect, device number 101 [ 2525.722816][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 2525.747528][ T5827] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2525.776753][ T24] usb 1-1: config 55 has an invalid interface number: 173 but max is 0 [ 2525.792298][ T24] usb 1-1: config 55 has no interface number 0 [ 2525.811942][ T5827] cp210x 4-1:0.0: device disconnected [ 2525.829159][ T24] usb 1-1: config 55 interface 173 has no altsetting 0 [ 2525.852089][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=be.2f [ 2525.885355][ T9] usb 6-1: USB disconnect, device number 24 [ 2525.936521][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2525.988103][ T24] usb 1-1: Product: syz [ 2526.006980][ T24] usb 1-1: Manufacturer: syz [ 2526.022803][ T13] IPVS: stop unused estimator thread 0... [ 2526.029067][ T24] usb 1-1: SerialNumber: syz [ 2526.121916][ T5160] netlink: 'syz.3.7618': attribute type 10 has an invalid length. [ 2526.145274][ T5160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2526.290106][ T24] sierra 1-1:55.173: Sierra USB modem converter detected [ 2526.302793][ T24] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 2526.362559][ T24] usb 1-1: USB disconnect, device number 39 [ 2526.374463][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7618'. [ 2526.469391][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2526.538282][ T24] sierra 1-1:55.173: device disconnected [ 2526.721777][ T1815] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2526.946918][ T1815] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2526.967291][ T1815] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2527.021728][ T1815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2527.030888][ T1815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2527.064155][ T1815] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2527.074290][ T1815] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2527.083795][ T1815] usb 4-1: Product: syz [ 2527.088052][ T1815] usb 4-1: Manufacturer: syz [ 2527.103608][ T1815] cdc_wdm 4-1:1.0: skipping garbage [ 2527.116202][ T1815] cdc_wdm 4-1:1.0: skipping garbage [ 2527.131910][ T1815] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2528.331731][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2528.484181][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2528.505484][ T9] usb 5-1: config 5 has an invalid interface number: 81 but max is 0 [ 2528.540107][ T9] usb 5-1: config 5 has no interface number 0 [ 2528.589815][ T9] usb 5-1: config 5 interface 81 has no altsetting 0 [ 2528.639475][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice=95.0e [ 2528.658695][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2528.671636][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2528.707379][ T9] usb 5-1: Product: syz [ 2528.723125][ T9] usb 5-1: Manufacturer: syz [ 2528.738968][ T9] usb 5-1: SerialNumber: syz [ 2528.801652][ T24] usb 3-1: device descriptor read/64, error -71 [ 2528.935343][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.941888][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.002935][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2529.041688][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2529.065133][ T1815] usb 4-1: USB disconnect, device number 102 [ 2529.103887][ T9] snd-usb-audio 5-1:5.81: probe with driver snd-usb-audio failed with error -2 [ 2529.140522][ T9] usb 5-1: USB disconnect, device number 107 [ 2529.167059][T13029] udevd[13029]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.81/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2529.251890][ T24] usb 3-1: device descriptor read/64, error -71 [ 2529.383673][ T24] usb usb3-port1: attempt power cycle [ 2529.671721][ T1815] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2529.721702][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2529.816621][ T24] usb 3-1: device descriptor read/8, error -71 [ 2529.895090][ T1815] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2529.919006][ T1815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.953991][ T1815] usb 4-1: config 0 descriptor?? [ 2530.000797][ T1815] cp210x 4-1:0.0: cp210x converter detected [ 2530.081996][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2530.171274][ T24] usb 3-1: device descriptor read/8, error -71 [ 2530.293600][ T24] usb usb3-port1: unable to enumerate USB device [ 2530.658974][ T1815] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2530.916511][ T5223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7632'. [ 2530.991888][ T1815] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2531.479378][ T5230] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7636'. [ 2531.508837][ T5230] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2531.848370][ T5237] loop2: detected capacity change from 0 to 7 [ 2531.959703][ T5237] Dev loop2: unable to read RDB block 7 [ 2531.965701][ T5237] loop2: AHDI p1 p2 p3 [ 2532.002610][ T5237] loop2: partition table partially beyond EOD, truncated [ 2532.021432][ T5237] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2532.030206][ T5237] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2532.419696][ T1815] usb 4-1: USB disconnect, device number 103 [ 2532.428570][ T1815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2532.494861][ T1815] cp210x 4-1:0.0: device disconnected [ 2532.728183][ T5193] Dev loop2: unable to read RDB block 7 [ 2532.747722][ T5193] loop2: AHDI p1 p2 p3 [ 2532.764149][ T5193] loop2: partition table partially beyond EOD, truncated [ 2532.790624][ T5193] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2532.812684][ T5193] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2533.211865][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2533.367570][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2533.389178][ T9] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 2533.405444][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2533.421569][ T9] usb 4-1: Product: syz [ 2533.441882][ T9] usb 4-1: Manufacturer: syz [ 2533.462013][ T9] usb 4-1: SerialNumber: syz [ 2533.721124][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2533.730593][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2533.889961][ T9] usb 4-1: USB disconnect, device number 104 [ 2534.137021][ T5269] tipc: Can't bind to reserved service type 2 [ 2534.231638][ T1815] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2534.548410][ T1815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2534.598893][ T1815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2534.677119][ T1815] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2534.740569][ T1815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2534.803239][ T1815] usb 3-1: config 0 descriptor?? [ 2535.553745][ T5285] tunl0: Caught tx_queue_len zero misconfig [ 2535.726767][ T1815] hid-led 0003:27B8:01ED.00AD: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 2535.787878][ T1815] hid-led 0003:27B8:01ED.00AD: ThingM blink(1) v1 initialized [ 2536.319821][ T5293] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2536.831650][ T9] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 2536.993971][ T9] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 2537.016595][ T9] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 2537.054497][ T9] usb 6-1: config 0 has no interface number 0 [ 2537.115628][ T9] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2537.154215][ T9] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2537.167104][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2537.194675][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2537.233196][ T9] usb 6-1: config 0 descriptor?? [ 2537.325711][ T5308] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 2537.521000][ T1815] usb 3-1: USB disconnect, device number 16 [ 2537.525647][ T9] usb 6-1: USB disconnect, device number 25 [ 2538.764972][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2539.028541][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2539.057343][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.087718][ T9] usb 6-1: config 0 descriptor?? [ 2539.126956][ T5827] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2539.140805][ T9] cp210x 6-1:0.0: cp210x converter detected [ 2539.151747][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 2539.291660][ T5827] usb 5-1: device descriptor read/64, error -32 [ 2539.551779][ T5827] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2539.562753][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 2539.712928][ T5827] usb 5-1: device descriptor read/64, error -32 [ 2539.794864][ T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2539.823654][ T5827] usb usb5-port1: attempt power cycle [ 2539.832673][ T5345] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7670'. [ 2539.880069][ T5345] bridge_slave_1: default FDB implementation only supports local addresses [ 2540.033708][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2540.191688][ T5827] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2540.317980][ T5827] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2540.356837][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2540.393011][ T5827] usb 5-1: config 0 descriptor?? [ 2540.517447][ T5827] cp210x 5-1:0.0: cp210x converter detected [ 2540.771700][ T1815] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 2540.958079][ T1815] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2540.978638][ T1815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2541.002377][ T1815] usb 3-1: Product: syz [ 2541.012484][ T1815] usb 3-1: Manufacturer: syz [ 2541.023524][ T1815] usb 3-1: SerialNumber: syz [ 2541.045479][ T1815] usb 3-1: config 0 descriptor?? [ 2541.080717][ T5827] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2541.298684][ T1815] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2541.452275][ T5827] usb 5-1: cp210x converter now attached to ttyUSB1 [ 2542.684716][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2542.684729][ T30] audit: type=1400 audit(1775350725.285:2936): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5373 comm="syz.3.7679" [ 2542.737608][ T24] usb 6-1: USB disconnect, device number 26 [ 2542.757932][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2542.789513][ T24] cp210x 6-1:0.0: device disconnected [ 2542.828225][ T5827] usb 5-1: USB disconnect, device number 110 [ 2542.867779][ T5827] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2542.960790][ T5827] cp210x 5-1:0.0: device disconnected [ 2543.059338][ T5376] 8021q: adding VLAN 0 to HW filter on device .` [ 2543.078512][ T5376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2543.176883][ T30] audit: type=1326 audit(1775350725.765:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.7680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb99c819 code=0x7ffc0000 [ 2543.288898][ T30] audit: type=1326 audit(1775350725.765:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.7680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb99c819 code=0x7ffc0000 [ 2543.330038][ T30] audit: type=1326 audit(1775350725.775:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.7680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49bb99c819 code=0x7ffc0000 [ 2543.369305][ T30] audit: type=1326 audit(1775350725.775:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.7680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb99c819 code=0x7ffc0000 [ 2543.413548][ T30] audit: type=1326 audit(1775350725.775:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.7680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb99c819 code=0x7ffc0000 [ 2543.439820][ T30] audit: type=1326 audit(1775350725.775:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.7680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f49bb99c819 code=0x7ffc0000 [ 2543.471943][ T30] audit: type=1326 audit(1775350725.775:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.7680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb99c819 code=0x7ffc0000 [ 2543.503737][ T30] audit: type=1326 audit(1775350725.775:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.7680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb99c819 code=0x7ffc0000 [ 2543.537447][ T30] audit: type=1326 audit(1775350725.775:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.7680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f49bb99c819 code=0x7ffc0000 [ 2543.671693][ T5827] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2543.679867][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2543.750141][ T5392] openvswitch: netlink: Key 4 has unexpected len 2 expected 12 [ 2543.841818][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 2543.850787][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2543.861983][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2543.888281][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2543.903892][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2543.933181][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2543.944835][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2543.980256][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2544.003925][ T5827] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2544.025367][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.044393][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.062633][ T9] usb 5-1: config 0 descriptor?? [ 2544.081495][ T5827] usb 1-1: config 0 descriptor?? [ 2544.514219][ T5827] shield 0003:0955:7214.00AE: unknown main item tag 0x0 [ 2544.530750][ T5827] shield 0003:0955:7214.00AE: unknown main item tag 0x0 [ 2544.540972][ T5827] shield 0003:0955:7214.00AE: unknown main item tag 0x0 [ 2544.548252][ T5827] shield 0003:0955:7214.00AE: unknown main item tag 0x0 [ 2544.567924][ T5827] shield 0003:0955:7214.00AE: unknown main item tag 0x0 [ 2544.577324][ T1815] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2544.614078][ T1815] usb 3-1: USB disconnect, device number 17 [ 2544.637524][ T9] ft260 0003:0403:6030.00AF: unknown main item tag 0x7 [ 2544.708992][ T5827] input: HID 0955:7214 Haptics as /devices/virtual/input/input193 [ 2544.774135][ T5827] shield 0003:0955:7214.00AE: Registered Thunderstrike controller [ 2544.796719][ T5827] shield 0003:0955:7214.00AE: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 2544.826721][ T5387] random: crng reseeded on system resumption [ 2544.846361][ T9] ft260 0003:0403:6030.00AF: failed to retrieve chip version [ 2544.868502][ T9] ft260 0003:0403:6030.00AF: probe with driver ft260 failed with error -5 [ 2544.981649][ T1815] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2545.123911][ T5827] shield 0003:0955:7214.00AE: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2545.136549][ T9] usb 1-1: USB disconnect, device number 40 [ 2545.150711][ T5827] shield 0003:0955:7214.00AE: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2545.195462][ T5827] shield 0003:0955:7214.00AE: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2545.256703][ T1815] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2545.290872][ T1815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.331062][ T1815] usb 6-1: config 0 descriptor?? [ 2545.372725][ T1815] cp210x 6-1:0.0: cp210x converter detected [ 2545.881864][ T1815] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2545.947157][ T5426] ALSA: mixer_oss: invalid OSS volume '' [ 2546.230260][ T1815] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2546.287784][ T1815] usb 5-1: USB disconnect, device number 111 [ 2546.401975][ T5441] misc userio: The device must be registered before sending interrupts [ 2546.463189][ T5444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7706'. [ 2548.477706][ T5481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2548.539466][ T9] usb 6-1: USB disconnect, device number 27 [ 2548.587543][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2548.642693][ T9] cp210x 6-1:0.0: device disconnected [ 2549.001704][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2549.202000][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 2549.231653][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2549.281052][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.383354][ T9] usb 1-1: config 0 descriptor?? [ 2549.431331][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2549.835566][ T9] gspca_sunplus: reg_w_riv err -71 [ 2549.864337][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 2549.922292][ T9] usb 1-1: USB disconnect, device number 41 [ 2551.182095][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2551.269506][ T5539] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2551.283190][ T5539] block device autoloading is deprecated and will be removed. [ 2551.429289][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2551.490477][ T9] usb 6-1: config 0 has no interfaces? [ 2551.503915][ T9] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2551.521383][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2551.561238][ T9] usb 6-1: Product: syz [ 2551.577826][ T9] usb 6-1: Manufacturer: syz [ 2551.600088][ T9] usb 6-1: SerialNumber: syz [ 2551.648078][ T9] usb 6-1: config 0 descriptor?? [ 2551.877331][ T1815] usb 6-1: USB disconnect, device number 28 [ 2552.208832][ T5557] trusted_key: encrypted_key: insufficient parameters specified [ 2552.319467][ T5563] Attempt to restore checkpoint with obsolete wellknown handles [ 2552.582043][ T1815] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2552.771859][ T1815] usb 5-1: Using ep0 maxpacket: 32 [ 2552.827395][ T1815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2552.940974][ T1815] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2553.010755][ T1815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2553.041420][ T1815] usb 5-1: Product: syz [ 2553.067483][ T1815] usb 5-1: Manufacturer: syz [ 2553.090978][ T1815] usb 5-1: SerialNumber: syz [ 2553.117868][ T1815] usb 5-1: config 0 descriptor?? [ 2553.215713][ T1815] usb 5-1: no audio or video endpoints found [ 2553.751881][ T1815] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2553.921690][ T1815] usb 4-1: Using ep0 maxpacket: 16 [ 2553.938041][ T1815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2553.997909][ T1815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2554.034536][ T1815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2554.127109][ T1815] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2554.167197][ T1815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2554.204978][ T1815] usb 4-1: config 0 descriptor?? [ 2554.664373][ T5594] random: crng reseeded on system resumption [ 2554.710414][ T1815] input: HID 0955:7214 Haptics as /devices/virtual/input/input194 [ 2554.768708][ T1815] shield 0003:0955:7214.00B0: Registered Thunderstrike controller [ 2554.814285][ T1815] shield 0003:0955:7214.00B0: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 2554.948482][ T24] shield 0003:0955:7214.00B0: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2554.960595][ T1815] usb 4-1: USB disconnect, device number 105 [ 2554.999267][ T24] shield 0003:0955:7214.00B0: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2555.025379][ T24] shield 0003:0955:7214.00B0: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2555.037083][ T24] shield 0003:0955:7214.00B0: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2555.371133][ T9] usb 5-1: USB disconnect, device number 112 [ 2556.102053][ T4553] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2556.303609][ T4553] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2556.325977][ T4553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2556.390814][ T4553] usb 4-1: config 0 descriptor?? [ 2556.412941][ T4553] cp210x 4-1:0.0: cp210x converter detected [ 2556.816343][ T4553] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2557.043202][ T4553] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2557.154269][ T5651] dvmrp1: tun_chr_ioctl cmd 35111 [ 2557.631699][ T4553] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2557.812589][ T4553] usb 3-1: Using ep0 maxpacket: 16 [ 2557.843179][ T4553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2557.865005][ T4553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2557.891365][ T4553] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2557.924508][ T4553] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2557.954263][ T4553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.972098][ T4553] usb 3-1: config 0 descriptor?? [ 2558.387171][ T4553] shield 0003:0955:7214.00B1: unknown main item tag 0x0 [ 2558.408090][ T4553] shield 0003:0955:7214.00B1: unknown main item tag 0x0 [ 2558.434225][ T4553] shield 0003:0955:7214.00B1: unknown main item tag 0x0 [ 2558.463969][ T4553] shield 0003:0955:7214.00B1: unknown main item tag 0x0 [ 2558.487918][ T4553] shield 0003:0955:7214.00B1: unknown main item tag 0x0 [ 2558.551426][ T4553] input: HID 0955:7214 Haptics as /devices/virtual/input/input195 [ 2558.665755][ T4553] shield 0003:0955:7214.00B1: Registered Thunderstrike controller [ 2558.717960][ T4553] shield 0003:0955:7214.00B1: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 2558.730692][ T5680] random: crng reseeded on system resumption [ 2559.012590][ T4553] usb 4-1: USB disconnect, device number 106 [ 2559.052643][ T4553] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2559.082134][ T1815] usb 3-1: USB disconnect, device number 18 [ 2559.084277][ T5827] shield 0003:0955:7214.00B1: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2559.118602][ T4553] cp210x 4-1:0.0: device disconnected [ 2559.126165][ T5827] shield 0003:0955:7214.00B1: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2559.178075][ T5827] shield 0003:0955:7214.00B1: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2559.727450][ T5694] netlink: 'syz.4.7783': attribute type 4 has an invalid length. [ 2559.806852][ T5694] usb usb1: usbfs: process 5694 (syz.4.7783) did not claim interface 63 before use [ 2559.818174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2559.967480][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7786'. [ 2559.976714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2559.991943][ T5703] netlink: 'syz.5.7786': attribute type 22 has an invalid length. [ 2560.001106][ T5703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7786'. [ 2560.451823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2560.611908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2560.791771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2561.091792][ T4553] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2561.267267][ T4553] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2561.283387][ T4553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.355594][ T4553] usb 1-1: config 0 descriptor?? [ 2561.387684][ T4553] cp210x 1-1:0.0: cp210x converter detected [ 2561.411773][ T5827] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2561.491806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2561.604149][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2561.655843][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2561.710208][ T5827] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2561.762267][ T5827] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2561.787495][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.800740][ T4553] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2561.821760][ T5827] usb 6-1: config 0 descriptor?? [ 2562.034249][ T4553] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2562.260975][ T5827] usbhid 6-1:0.0: can't add hid device: -71 [ 2562.276631][ T5827] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2562.300079][ T5827] usb 6-1: USB disconnect, device number 29 [ 2562.471703][ T4553] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2562.531699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2562.641666][ T4553] usb 3-1: Using ep0 maxpacket: 8 [ 2562.668133][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2562.677040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2562.692499][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2562.710640][ T4553] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2562.739796][ T4553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2562.794813][ T4553] usb 3-1: Product: syz [ 2562.799157][ T4553] usb 3-1: Manufacturer: syz [ 2562.827764][ T4553] usb 3-1: SerialNumber: syz [ 2562.856952][ T4553] usb 3-1: config 0 descriptor?? [ 2562.895720][ T4553] gspca_main: se401-2.14.0 probing 047d:5003 [ 2563.226623][ T5762] xt_hashlimit: size too large, truncated to 1048576 [ 2563.303754][ T4553] gspca_se401: Wrong descriptor type [ 2563.518274][ T24] usb 3-1: USB disconnect, device number 19 [ 2564.225607][ T4553] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2564.324980][ T24] usb 1-1: USB disconnect, device number 42 [ 2564.341476][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2564.366765][ T24] cp210x 1-1:0.0: device disconnected [ 2564.519755][ T4553] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2564.530682][ T5796] syz.0.7822 (5796): drop_caches: 2 [ 2564.545159][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2564.561723][ T5796] syz.0.7822 (5796): drop_caches: 2 [ 2564.568034][ T4553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.586058][ T4553] usb 5-1: config 0 descriptor?? [ 2564.599382][ T4553] cp210x 5-1:0.0: cp210x converter detected [ 2564.684013][ T24] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 2564.706666][ T24] hid-generic 0000:0000:0000.00B2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2564.754128][ T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2564.777778][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2564.828876][ T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2564.871030][ T5800] fido_id[5800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2564.889240][ T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2564.912021][ T9] usb 6-1: Manufacturer: syz [ 2564.936210][ T9] usb 6-1: config 0 descriptor?? [ 2565.052271][ T9] rc_core: IR keymap rc-hauppauge not found [ 2565.058584][ T9] Registered IR keymap rc-empty [ 2565.070674][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2565.096745][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input196 [ 2565.121793][ T5827] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2565.133932][ T4553] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2565.212581][ T24] usb 6-1: USB disconnect, device number 30 [ 2565.274007][ T5827] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2565.283349][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2565.295986][ T5827] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2565.306096][ T5827] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2565.314734][ T5827] usb 1-1: Manufacturer: syz [ 2565.328263][ T5827] usb 1-1: config 0 descriptor?? [ 2565.421893][ T5827] rc_core: IR keymap rc-hauppauge not found [ 2565.434296][ T5827] Registered IR keymap rc-empty [ 2565.440056][ T5827] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2565.473528][ T5827] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input197 [ 2565.509550][ T4553] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2565.597272][ T24] usb 1-1: USB disconnect, device number 43 [ 2565.651698][ C1] net_ratelimit: 4 callbacks suppressed [ 2565.651717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2566.364660][ T5869] syzkaller1: entered promiscuous mode [ 2566.370198][ T5869] syzkaller1: entered allmulticast mode [ 2566.691951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2566.876882][ T24] usb 5-1: USB disconnect, device number 113 [ 2566.885441][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2566.908131][ T24] cp210x 5-1:0.0: device disconnected [ 2567.731720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2567.795064][ T5932] fuse: Bad value for 'fd' [ 2568.042338][ T5937] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7862'. [ 2568.244544][ T5945] bridge0: port 3(vlan0) entered blocking state [ 2568.254320][ T5945] bridge0: port 3(vlan0) entered disabled state [ 2568.261853][ T5945] vlan0: entered allmulticast mode [ 2568.267800][ T5945] dummy0: entered allmulticast mode [ 2568.372589][ T5951] Invalid argument reading file caps for ./file0 [ 2568.379741][ T5945] vlan0: entered promiscuous mode [ 2568.392057][ T5945] dummy0: entered promiscuous mode [ 2568.771723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2568.941641][ T4553] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 2569.171718][ T5827] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2569.183424][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2569.208807][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2569.256885][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2569.295869][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2569.310760][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2569.320880][ T4553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2569.342495][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 2569.367682][ T4553] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 2569.379800][ T4553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2569.398264][ T5827] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2569.408333][ T5827] usb 6-1: config 179 has no interface number 0 [ 2569.415520][ T4553] usb 4-1: Product: syz [ 2569.419973][ T5827] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2569.431277][ T4553] usb 4-1: Manufacturer: syz [ 2569.438772][ T4553] usb 4-1: SerialNumber: syz [ 2569.457270][ T5827] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2569.472936][ T5827] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2569.485447][ T4553] usb 4-1: config 0 descriptor?? [ 2569.494710][ T4553] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 2569.514019][ T4553] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 2569.520218][ T5827] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2569.533247][ T5827] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2569.552444][ T5827] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2569.574635][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.613225][ T5967] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2569.811701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2569.945414][ T5827] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input198 [ 2570.123745][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2570.144795][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2570.339222][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e8a8800: rx timeout, send abort [ 2570.347973][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e8a8800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2570.394058][ T24] usb 6-1: USB disconnect, device number 31 [ 2570.394199][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2570.408855][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2570.851694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2571.233542][ T5827] usb 4-1: USB disconnect, device number 107 [ 2571.467903][ T6011] xt_hashlimit: size too large, truncated to 1048576 [ 2571.891696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2572.691767][ T24] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2572.851963][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 2572.886701][ T24] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2572.931708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2572.944696][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.989740][ T24] usb 4-1: Product: syz [ 2573.008586][ T24] usb 4-1: Manufacturer: syz [ 2573.025305][ T24] usb 4-1: SerialNumber: syz [ 2573.079024][ T24] usb 4-1: config 0 descriptor?? [ 2573.158987][ T6049] fuse: Bad value for 'fd' [ 2573.468017][ T6053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2573.638891][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7912'. [ 2573.684512][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2573.753943][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2573.822004][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2573.857043][ T24] usb 4-1: media controller created [ 2573.949093][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2573.971677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2574.046262][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 2574.070946][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2574.106761][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2574.133421][ T5827] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2574.150588][ T24] usb 4-1: USB disconnect, device number 108 [ 2574.284101][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2574.332281][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 2574.350779][ T5827] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2574.379624][ T5827] usb 3-1: config 0 has no interface number 0 [ 2574.397861][ T5827] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2574.419250][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2574.452943][ T5827] usb 3-1: Product: syz [ 2574.460895][ T5827] usb 3-1: Manufacturer: syz [ 2574.471626][ T5827] usb 3-1: SerialNumber: syz [ 2574.481448][ T5827] usb 3-1: config 0 descriptor?? [ 2574.495568][ T5827] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2574.537742][ T5827] usb 3-1: selecting invalid altsetting 1 [ 2574.552386][ T5827] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2574.564647][ T5827] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2574.584685][ T5827] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2574.596017][ T5827] usb 3-1: media controller created [ 2574.620798][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2574.713270][ T5827] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2574.727051][ T5827] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2574.736257][ T5827] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2574.783559][ T5827] usb 3-1: USB disconnect, device number 20 [ 2575.012006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2575.772848][ T6108] fuse: Bad value for 'fd' [ 2576.003408][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2576.017421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2576.051780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2576.076534][ T6119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2576.093241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2576.156942][ T6116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2577.091657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2577.101979][ T24] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2577.265337][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2577.297685][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.323199][ T24] usb 5-1: config 0 descriptor?? [ 2577.341882][ T24] cp210x 5-1:0.0: cp210x converter detected [ 2577.825070][ T24] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2578.070526][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2578.131698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2578.363096][ T6190] fuse: Bad value for 'fd' [ 2578.451889][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2578.653046][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 2578.673742][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2578.702845][ T9] usb 1-1: config 0 has no interfaces? [ 2578.748121][ T9] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2578.787803][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.827914][ T9] usb 1-1: Product: syz [ 2578.847349][ T9] usb 1-1: Manufacturer: syz [ 2578.868528][ T9] usb 1-1: SerialNumber: syz [ 2578.901821][ T9] usb 1-1: config 0 descriptor?? [ 2579.171735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2579.369425][ T6203] trusted_key: encrypted_key: insufficient parameters specified [ 2579.711636][ T5827] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2579.809793][ T9] usb 5-1: USB disconnect, device number 114 [ 2579.828391][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2579.860541][ T9] cp210x 5-1:0.0: device disconnected [ 2579.866249][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 2579.884639][ T5827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2579.928231][ T5827] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2579.938478][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2579.948547][ T5827] usb 3-1: Product: syz [ 2579.953065][ T5827] usb 3-1: Manufacturer: syz [ 2579.957692][ T5827] usb 3-1: SerialNumber: syz [ 2579.967430][ T5827] usb 3-1: config 0 descriptor?? [ 2579.985430][ T5827] usb 3-1: no audio or video endpoints found [ 2580.131837][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2580.211701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2580.332037][ T5827] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2580.602067][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2580.626307][ T5827] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2580.644736][ T5827] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2580.667852][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2580.739625][ T5827] usb 4-1: config 0 descriptor?? [ 2581.251686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2581.285300][ T24] usb 1-1: USB disconnect, device number 44 [ 2581.813112][ T6269] netlink: 'syz.0.7989': attribute type 6 has an invalid length. [ 2581.842977][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7989'. [ 2581.974379][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7991'. [ 2582.291697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2582.461646][ T5827] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2582.475383][ T24] usb 3-1: USB disconnect, device number 21 [ 2582.621867][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 2582.629848][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2582.643169][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2582.663874][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2582.683540][ T5827] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2582.705230][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.727424][ T5827] usb 5-1: config 0 descriptor?? [ 2582.741695][ T1815] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2582.922036][ T1815] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2582.931188][ T1815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.953532][ T1815] usb 1-1: config 0 descriptor?? [ 2583.008448][ T1815] cp210x 1-1:0.0: cp210x converter detected [ 2583.205470][ T6294] random: crng reseeded on system resumption [ 2583.311188][ T5827] input: HID 0955:7214 Haptics as /devices/virtual/input/input199 [ 2583.331755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2583.388952][ T5827] shield 0003:0955:7214.00B3: Registered Thunderstrike controller [ 2583.409958][ T5827] shield 0003:0955:7214.00B3: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 2583.449737][ T1815] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2583.498299][ T9] shield 0003:0955:7214.00B3: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2583.514324][ T5827] usb 5-1: USB disconnect, device number 115 [ 2583.563532][ T9] shield 0003:0955:7214.00B3: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2583.630176][ T9] shield 0003:0955:7214.00B3: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2583.666185][ T9] shield 0003:0955:7214.00B3: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2583.687059][ T4553] usb 4-1: USB disconnect, device number 109 [ 2583.716302][ T1815] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2584.184509][ T5827] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2584.208347][ T6309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2584.371684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2584.570346][ T5827] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2584.615287][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2584.675973][ T5827] usb 4-1: config 0 descriptor?? [ 2584.858646][ T5827] cp210x 4-1:0.0: cp210x converter detected [ 2585.411737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2585.459062][ T5827] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2586.078212][ T5827] usb 4-1: cp210x converter now attached to ttyUSB1 [ 2586.451667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2586.695245][ T6337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2586.715245][ T5827] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2586.742256][ T6337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2586.782828][ T6337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2586.836180][ T6337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2586.877688][ T6337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2586.901174][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2586.991804][ T5827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2587.021861][ T5827] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2587.049580][ T5827] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2587.061618][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2587.072718][ T5827] usb 3-1: config 0 descriptor?? [ 2587.167603][ T5827] usb 1-1: USB disconnect, device number 45 [ 2587.187406][ T5827] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2587.207017][ T5827] cp210x 1-1:0.0: device disconnected [ 2587.312024][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2587.471885][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 2587.484167][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2587.491686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2587.523992][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2587.544758][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2587.561213][ T9] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2587.571742][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2587.598265][ T9] usb 5-1: config 0 descriptor?? [ 2588.041212][ T9] shield 0003:0955:7214.00B4: unknown main item tag 0x0 [ 2588.051920][ T9] shield 0003:0955:7214.00B4: unknown main item tag 0x0 [ 2588.059764][ T9] shield 0003:0955:7214.00B4: unknown main item tag 0x0 [ 2588.068014][ T9] shield 0003:0955:7214.00B4: unknown main item tag 0x0 [ 2588.076452][ T9] shield 0003:0955:7214.00B4: unknown main item tag 0x0 [ 2588.106770][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input200 [ 2588.165316][ T9] shield 0003:0955:7214.00B4: Registered Thunderstrike controller [ 2588.180370][ T9] shield 0003:0955:7214.00B4: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 2588.259145][ T6343] random: crng reseeded on system resumption [ 2588.387043][ T1815] usb 4-1: USB disconnect, device number 110 [ 2588.396712][ T1815] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2588.422681][ T1815] cp210x 4-1:0.0: device disconnected [ 2588.499564][T25714] shield 0003:0955:7214.00B4: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2588.499940][ T24] usb 5-1: USB disconnect, device number 116 [ 2588.531691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2588.568002][T25714] shield 0003:0955:7214.00B4: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2588.618879][T25714] shield 0003:0955:7214.00B4: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2589.441880][T25714] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2589.571701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2589.611850][T25714] usb 5-1: Using ep0 maxpacket: 32 [ 2589.624486][T25714] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2589.637615][T25714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.660034][T25714] usb 5-1: config 0 descriptor?? [ 2589.680523][T25714] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2590.375211][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.381814][ T9] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 2590.382034][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.469652][ T6395] netlink: 'syz.3.8031': attribute type 3 has an invalid length. [ 2590.578976][ T9] usb 6-1: config 0 has no interfaces? [ 2590.594852][ T9] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2590.637153][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.663117][ T9] usb 6-1: config 0 descriptor?? [ 2590.980803][ T9] usb 6-1: USB disconnect, device number 32 [ 2591.107411][T25714] gspca_vc032x: reg_w err -71 [ 2591.120324][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.128066][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.137031][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.142736][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.148208][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.154838][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.160237][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.166067][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.173024][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.178407][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.212950][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.224366][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.231018][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.252794][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.272724][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.278034][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.285178][ T5827] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 2591.304507][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.318967][T25714] gspca_vc032x: I2c Bus Busy Wait 00 [ 2591.341808][T25714] gspca_vc032x: Unknown sensor... [ 2591.347007][T25714] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 2591.360488][T25714] usb 5-1: USB disconnect, device number 117 [ 2591.463169][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2591.478452][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2591.503728][ T5827] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2591.533020][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2591.548546][ T5827] usb 4-1: config 0 descriptor?? [ 2591.563483][ T5827] hub 4-1:0.0: USB hub found [ 2591.651710][ C1] net_ratelimit: 1 callbacks suppressed [ 2591.651729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2591.766169][ T5827] hub 4-1:0.0: 1 port detected [ 2591.842313][ T9] usb 3-1: USB disconnect, device number 22 [ 2592.599813][ T5827] hub 4-1:0.0: activate --> -90 [ 2592.691683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2592.801855][T25714] usb 4-1: USB disconnect, device number 111 [ 2593.327224][ T6446] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2593.731674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2594.771755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2594.992235][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2595.062739][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2595.088688][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2595.112652][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2595.142709][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2595.161929][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 2595.167499][ T6495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2595.185933][ T24] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2595.201990][ T6496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2595.213481][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2595.222559][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8070'. [ 2595.252456][ T24] usb 1-1: Product: syz [ 2595.271786][ T24] usb 1-1: Manufacturer: syz [ 2595.292359][ T24] usb 1-1: SerialNumber: syz [ 2595.302538][ T24] usb 1-1: config 0 descriptor?? [ 2595.344397][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 2595.579911][ T6507] xt_hashlimit: size too large, truncated to 1048576 [ 2596.191620][ T24] usb 1-1: reset high-speed USB device number 46 using dummy_hcd [ 2596.804202][ T24] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 2596.840361][ T24] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 2596.851692][ C1] net_ratelimit: 8 callbacks suppressed [ 2596.851710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2596.897224][ T24] usb 1-1: USB disconnect, device number 46 [ 2596.939811][ T6533] sch_tbf: burst 1 is lower than device syzkaller0 mtu (313) ! [ 2597.891645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2598.559176][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8087'. [ 2598.629842][ T6562] vlan3: entered promiscuous mode [ 2598.669899][ T6567] syzkaller1: entered promiscuous mode [ 2598.676847][ T6567] syzkaller1: entered allmulticast mode [ 2598.931737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2599.761612][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2599.921855][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2599.946477][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2599.971722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2599.995370][ T9] usb 4-1: config 0 has no interface number 0 [ 2600.011655][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2600.031017][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2600.053182][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.078700][ T9] usb 4-1: Product: syz [ 2600.089632][ T9] usb 4-1: Manufacturer: syz [ 2600.103261][ T9] usb 4-1: SerialNumber: syz [ 2600.121061][ T9] usb 4-1: config 0 descriptor?? [ 2601.011671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.124839][ T6610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2601.162256][ T6610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2601.388471][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 2601.416531][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2601.436115][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2601.457127][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 2601.494327][ T9] usb 4-1: USB disconnect, device number 112 [ 2601.850555][ T6618] fuse: Bad value for 'fd' [ 2602.051670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2603.032682][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2603.091788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2603.201585][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2603.240300][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2603.264242][ T9] usb 3-1: config 0 has no interface number 0 [ 2603.273239][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2603.324647][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2603.368268][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2603.385824][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2603.401775][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2603.410941][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.467934][ T9] usb 3-1: config 0 descriptor?? [ 2603.504879][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2603.874107][ T24] usb 3-1: USB disconnect, device number 23 [ 2603.880119][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 2604.018408][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 2604.025467][ T6644] ldusb: No device or device unplugged -19 [ 2604.131667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2605.047173][ T6679] syzkaller0: entered promiscuous mode [ 2605.058938][ T6679] syzkaller0: entered allmulticast mode [ 2605.113330][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2605.121321][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8124'. [ 2605.130643][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8124'. [ 2605.171661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2605.201844][ T5827] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2605.266633][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2605.279795][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.288344][ T9] usb 5-1: Product: syz [ 2605.293600][ T9] usb 5-1: Manufacturer: syz [ 2605.298480][ T9] usb 5-1: SerialNumber: syz [ 2605.306089][ T9] usb 5-1: config 0 descriptor?? [ 2605.371719][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 2605.383761][ T5827] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2605.398760][ T5827] usb 3-1: config 0 has no interface number 0 [ 2605.422221][ T5827] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2605.434207][ T5827] usb 3-1: config 0 interface 89 has no altsetting 0 [ 2605.451083][ T5827] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 2605.464394][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.474038][ T5827] usb 3-1: Product: syz [ 2605.495656][ T5827] usb 3-1: Manufacturer: syz [ 2605.517170][ T5827] usb 3-1: SerialNumber: syz [ 2605.542994][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2605.555432][ T5827] usb 3-1: config 0 descriptor?? [ 2605.564813][ T5827] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2605.581031][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2605.592166][ T5827] em28xx 3-1:0.89: Video interface 89 found: [ 2605.600585][ T9] usb 5-1: USB disconnect, device number 118 [ 2606.211698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2606.245446][ T5827] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 2606.349241][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8130'. [ 2606.360177][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8130'. [ 2606.382279][ T6705] netlink: 'syz.3.8132': attribute type 1 has an invalid length. [ 2606.395238][ T6703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2606.404275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2606.427073][ T6705] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2606.442566][ T6703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2606.451288][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8132'. [ 2606.469776][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2606.480143][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2606.491569][ T6705] bond9: entered promiscuous mode [ 2606.496657][ T6705] bond9: entered allmulticast mode [ 2606.844545][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2606.844561][ T30] audit: type=1326 audit(1775350789.445:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.3.8135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f9d9c819 code=0x0 [ 2606.925859][ T5827] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2606.947587][ T5827] em28xx 3-1:0.89: board has no eeprom [ 2607.031760][ T5827] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 2607.041566][ T5827] em28xx 3-1:0.89: analog set to bulk mode. [ 2607.061265][ T9] em28xx 3-1:0.89: Registering V4L2 extension [ 2607.108045][ T5827] usb 3-1: USB disconnect, device number 24 [ 2607.178285][ T5827] em28xx 3-1:0.89: Disconnecting em28xx [ 2607.180559][ T6723] syzkaller0: entered promiscuous mode [ 2607.197944][ T6723] syzkaller0: entered allmulticast mode [ 2607.205798][ T9] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 2607.232537][ T9] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 2607.240663][ T9] em28xx 3-1:0.89: No AC97 audio processor [ 2607.251663][ C1] net_ratelimit: 6 callbacks suppressed [ 2607.251680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2607.276195][ T9] usb 3-1: Decoder not found [ 2607.280862][ T9] em28xx 3-1:0.89: failed to create media graph [ 2607.302435][ T9] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 2607.323263][ T9] em28xx 3-1:0.89: Registering snapshot button... [ 2607.330887][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input201 [ 2607.380694][ T9] em28xx 3-1:0.89: Remote control support is not available for this card. [ 2607.429037][ T5827] em28xx 3-1:0.89: Closing input extension [ 2607.436997][ T5827] em28xx 3-1:0.89: Deregistering snapshot button [ 2607.467089][ T5827] em28xx 3-1:0.89: Freeing device [ 2608.129975][ T6748] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 2608.139916][ T6748] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 2608.291813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2608.871853][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2609.062578][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 2609.070323][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2609.098172][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2609.125241][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2609.183794][ T24] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2609.214518][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.249074][ T24] usb 6-1: config 0 descriptor?? [ 2609.331854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2609.356050][ T6785] tipc: Enabling of bearer rejected, already enabled [ 2609.407357][ T6788] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 2609.427970][ T6788] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 2609.727116][ T24] shield 0003:0955:7214.00B5: unknown main item tag 0x0 [ 2609.770626][ T24] shield 0003:0955:7214.00B5: unknown main item tag 0x0 [ 2609.807819][ T24] shield 0003:0955:7214.00B5: unknown main item tag 0x0 [ 2609.848869][ T24] shield 0003:0955:7214.00B5: unknown main item tag 0x0 [ 2609.884701][ T24] shield 0003:0955:7214.00B5: unknown main item tag 0x0 [ 2609.940773][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input202 [ 2609.973963][ T6766] random: crng reseeded on system resumption [ 2610.124223][ T24] shield 0003:0955:7214.00B5: Registered Thunderstrike controller [ 2610.168081][ T24] shield 0003:0955:7214.00B5: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 2610.371822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2610.413169][T10276] shield 0003:0955:7214.00B5: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2610.413638][ T9] usb 6-1: USB disconnect, device number 33 [ 2610.478519][T10276] shield 0003:0955:7214.00B5: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2610.542867][T10276] shield 0003:0955:7214.00B5: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2611.064916][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8165'. [ 2611.111574][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8165'. [ 2611.411766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2612.371661][ T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2612.451820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2612.531677][ T5827] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2612.539592][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2612.547729][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2612.557876][ T9] usb 4-1: config 179 has no interface number 0 [ 2612.564409][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2612.575830][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2612.589084][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2612.602491][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2612.624076][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2612.638496][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2612.660465][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.683981][ T6850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2612.702443][ T5827] usb 6-1: Using ep0 maxpacket: 16 [ 2612.713622][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2612.727755][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2612.738446][ T5827] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2612.753729][ T5827] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2612.770098][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.797680][ T5827] usb 6-1: config 0 descriptor?? [ 2612.964737][T10276] usb 4-1: USB disconnect, device number 113 [ 2612.964816][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2612.979388][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2613.181445][ T6868] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8185'. [ 2613.245856][ T6852] random: crng reseeded on system resumption [ 2613.328915][ T5827] input: HID 0955:7214 Haptics as /devices/virtual/input/input203 [ 2613.373340][ T5827] shield 0003:0955:7214.00B6: Registered Thunderstrike controller [ 2613.402381][ T5827] shield 0003:0955:7214.00B6: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 2613.491768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.529267][T25714] shield 0003:0955:7214.00B6: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2613.529712][T10276] usb 6-1: USB disconnect, device number 34 [ 2613.576710][T25714] shield 0003:0955:7214.00B6: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2613.590262][T25714] shield 0003:0955:7214.00B6: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2613.604069][T25714] shield 0003:0955:7214.00B6: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2613.768474][ T6882] netlink: 'syz.4.8191': attribute type 10 has an invalid length. [ 2614.531909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2614.607994][ T6911] syzkaller0: entered promiscuous mode [ 2614.616410][ T6911] syzkaller0: entered allmulticast mode [ 2615.227798][ T6922] syzkaller0: entered promiscuous mode [ 2615.242116][ T6922] syzkaller0: entered allmulticast mode [ 2615.271771][ T6922] TC_ACT_REPEAT abuse ? [ 2615.534422][ T6933] xt_bpf: check failed: parse error [ 2615.571658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2615.757201][ T6940] syzkaller0: entered promiscuous mode [ 2615.769067][ T6940] syzkaller0: entered allmulticast mode [ 2615.963371][T25714] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2616.173179][ T6945] syzkaller0: entered promiscuous mode [ 2616.193689][ T6945] syzkaller0: entered allmulticast mode [ 2616.611673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2616.643967][T25714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2616.681440][T25714] usb 5-1: config 0 has no interfaces? [ 2616.693839][T25714] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2616.721651][T25714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2616.783070][T25714] usb 5-1: config 0 descriptor?? [ 2617.072230][ T6958] netlink: 'syz.5.8214': attribute type 10 has an invalid length. [ 2617.122472][ T6958] bond0: (slave wlan1): Opening slave failed [ 2617.651654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2618.530686][T25714] usb 5-1: USB disconnect, device number 119 [ 2618.594402][ T6988] tipc: Enabling of bearer rejected, already enabled [ 2618.624538][ T6988] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 2618.641876][ T6988] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 2618.691661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2619.671855][T10276] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2619.705133][ T7020] trusted_key: encrypted_key: insufficient parameters specified [ 2619.731650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2619.859556][T10276] usb 4-1: Using ep0 maxpacket: 16 [ 2619.873210][T10276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2619.931835][T10276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2619.974195][T10276] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2620.028629][T10276] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2620.052707][T25714] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2620.069915][T10276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2620.134614][T10276] usb 4-1: config 0 descriptor?? [ 2620.212176][T25714] usb 5-1: Using ep0 maxpacket: 32 [ 2620.231437][T25714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2620.285163][T25714] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2620.370446][T25714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2620.441530][T25714] usb 5-1: Product: syz [ 2620.529884][T25714] usb 5-1: Manufacturer: syz [ 2620.545142][T25714] usb 5-1: SerialNumber: syz [ 2620.570295][T25714] usb 5-1: config 0 descriptor?? [ 2620.587886][T25714] usb 5-1: no audio or video endpoints found [ 2620.604605][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8231'. [ 2620.627266][ T7017] random: crng reseeded on system resumption [ 2620.670909][T10276] input: HID 0955:7214 Haptics as /devices/virtual/input/input204 [ 2620.712582][T10276] shield 0003:0955:7214.00B7: Registered Thunderstrike controller [ 2620.724056][T10276] shield 0003:0955:7214.00B7: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 2620.771701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2620.876707][ T1815] shield 0003:0955:7214.00B7: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2620.888860][ T24] usb 4-1: USB disconnect, device number 114 [ 2620.923582][ T1815] shield 0003:0955:7214.00B7: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2620.964504][ T7028] syz_tun: entered allmulticast mode [ 2620.984129][ T1815] shield 0003:0955:7214.00B7: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2621.013057][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8233'. [ 2621.031655][ T1815] shield 0003:0955:7214.00B7: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2621.158161][ T7028] syz_tun (unregistering): left allmulticast mode [ 2621.811668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2622.285572][ T7048] tipc: Started in network mode [ 2622.303579][ T7048] tipc: Node identity 8225a13c8571, cluster identity 4711 [ 2622.337408][ T7048] tipc: Enabled bearer , priority 0 [ 2622.342105][ T7050] fuse: Bad value for 'fd' [ 2622.367978][ T7051] syzkaller0: entered promiscuous mode [ 2622.392795][ T7051] syzkaller0: entered allmulticast mode [ 2622.467424][ T7048] tipc: Resetting bearer [ 2622.478507][ T7047] tipc: Resetting bearer [ 2622.511265][ T7047] tipc: Disabling bearer [ 2622.614667][ T7062] syzkaller0: entered promiscuous mode [ 2622.620198][ T7062] syzkaller0: entered allmulticast mode [ 2622.836378][ T7068] syzkaller0: entered promiscuous mode [ 2622.842666][ T7068] syzkaller0: entered allmulticast mode [ 2622.851664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2623.283079][ T7076] tipc: Enabling of bearer rejected, already enabled [ 2623.891661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2624.924151][ T1815] usb 5-1: USB disconnect, device number 120 [ 2624.931682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2625.021741][ T24] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2625.182908][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 2625.202932][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 2625.211701][ T24] usb 4-1: config 0 has no interface number 0 [ 2625.217953][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2625.235732][ T7098] syz_tun: entered allmulticast mode [ 2625.246031][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2625.273146][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2625.275941][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8253'. [ 2625.320107][ T24] usb 4-1: Product: syz [ 2625.338763][ T24] usb 4-1: Manufacturer: syz [ 2625.354869][ T24] usb 4-1: SerialNumber: syz [ 2625.396065][ T24] usb 4-1: config 0 descriptor?? [ 2625.419734][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2625.447038][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 2625.456458][ T7098] syz_tun (unregistering): left allmulticast mode [ 2625.819453][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 2625.971675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2626.528989][ T7114] syzkaller0: entered promiscuous mode [ 2626.535429][ T7114] syzkaller0: entered allmulticast mode [ 2626.557243][ T7114] tc action pedit offset 64 out of bounds [ 2626.936815][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2626.968602][ T24] em28xx 4-1:0.132: board has no eeprom [ 2627.011664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2627.061666][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2627.117661][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 2627.139614][T10276] em28xx 4-1:0.132: Registering V4L2 extension [ 2627.373779][T10276] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 2627.420155][T10276] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 2627.474770][T10276] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 2627.536383][T10276] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 2627.662141][T10276] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 2627.746904][T10276] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 2627.773267][T10276] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 2627.821697][T10276] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 2627.841978][T25714] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2627.974095][ T9] usb 4-1: USB disconnect, device number 115 [ 2627.980993][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 2628.015139][T10276] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 2628.051661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2628.069081][T10276] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 2628.122136][T25714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2628.152894][T25714] usb 3-1: config 0 has no interfaces? [ 2628.163853][T25714] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2628.182461][T25714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2628.228215][T10276] em28xx 4-1:0.132: No AC97 audio processor [ 2628.239714][T25714] usb 3-1: config 0 descriptor?? [ 2628.263407][T10276] usb 4-1: Decoder not found [ 2628.304859][T10276] em28xx 4-1:0.132: failed to create media graph [ 2628.319370][ T7141] tipc: Enabling of bearer rejected, already enabled [ 2628.410621][T10276] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 2628.454968][T10276] em28xx 4-1:0.132: Remote control support is not available for this card. [ 2628.455743][ T7143] ================================================================== [ 2628.471796][ T7143] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 2628.479184][ T7143] Read of size 8 at addr ffff88807361c790 by task v4l_id/7143 [ 2628.486646][ T7143] [ 2628.488991][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 2628.489016][ T7143] Tainted: [L]=SOFTLOCKUP [ 2628.489022][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2628.489033][ T7143] Call Trace: [ 2628.489040][ T7143] [ 2628.489049][ T7143] dump_stack_lvl+0xe8/0x150 [ 2628.489076][ T7143] print_report+0xba/0x230 [ 2628.489096][ T7143] ? v4l2_fh_open+0xac/0x420 [ 2628.489120][ T7143] kasan_report+0x117/0x150 [ 2628.489142][ T7143] ? v4l2_fh_open+0xac/0x420 [ 2628.489169][ T7143] v4l2_fh_open+0xac/0x420 [ 2628.489193][ T7143] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2628.489220][ T7143] em28xx_v4l2_open+0x157/0x9a0 [ 2628.489240][ T7143] ? do_raw_spin_lock+0x12b/0x2f0 [ 2628.489261][ T7143] v4l2_open+0x1bf/0x3a0 [ 2628.489288][ T7143] chrdev_open+0x4cd/0x5e0 [ 2628.489310][ T7143] ? __pfx_chrdev_open+0x10/0x10 [ 2628.489331][ T7143] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2628.489351][ T7143] ? __pfx_chrdev_open+0x10/0x10 [ 2628.489371][ T7143] do_dentry_open+0x785/0x14e0 [ 2628.489400][ T7143] vfs_open+0x3b/0x340 [ 2628.489422][ T7143] ? path_openat+0x2df0/0x3860 [ 2628.489443][ T7143] path_openat+0x2e08/0x3860 [ 2628.489468][ T7143] ? __pfx_stack_trace_save+0x10/0x10 [ 2628.489488][ T7143] ? stack_depot_save_flags+0x33/0x810 [ 2628.489518][ T7143] ? __pfx_path_openat+0x10/0x10 [ 2628.489536][ T7143] ? __x64_sys_openat+0x138/0x170 [ 2628.489560][ T7143] ? do_syscall_64+0x14d/0xf80 [ 2628.489581][ T7143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2628.489603][ T7143] ? __lock_acquire+0x6b5/0x2cf0 [ 2628.489626][ T7143] do_file_open+0x23e/0x4a0 [ 2628.489645][ T7143] ? __pfx_do_file_open+0x10/0x10 [ 2628.489669][ T7143] ? _raw_spin_unlock+0x28/0x50 [ 2628.489688][ T7143] ? alloc_fd+0x64b/0x6c0 [ 2628.489716][ T7143] do_sys_openat2+0x113/0x200 [ 2628.489741][ T7143] ? __pfx_do_sys_openat2+0x10/0x10 [ 2628.489766][ T7143] ? exc_page_fault+0x6a/0xc0 [ 2628.489789][ T7143] ? do_user_addr_fault+0xc6f/0x1340 [ 2628.489813][ T7143] __x64_sys_openat+0x138/0x170 [ 2628.489838][ T7143] do_syscall_64+0x14d/0xf80 [ 2628.489858][ T7143] ? trace_irq_disable+0x3b/0x150 [ 2628.489880][ T7143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2628.489897][ T7143] ? clear_bhb_loop+0x40/0x90 [ 2628.489917][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2628.489936][ T7143] RIP: 0033:0x7f754faa7407 [ 2628.489953][ T7143] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2628.489968][ T7143] RSP: 002b:00007fffe24c53d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2628.489987][ T7143] RAX: ffffffffffffffda RBX: 00007f7550246880 RCX: 00007f754faa7407 [ 2628.490000][ T7143] RDX: 0000000000000000 RSI: 00007fffe24c6f1a RDI: ffffffffffffff9c [ 2628.490013][ T7143] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2628.490024][ T7143] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2628.490035][ T7143] R13: 00007fffe24c5620 R14: 00007f75503ad000 R15: 000055d2089934d8 [ 2628.490055][ T7143] [ 2628.490061][ T7143] [ 2628.791029][ T7143] Allocated by task 10276: [ 2628.795458][ T7143] kasan_save_track+0x3e/0x80 [ 2628.800152][ T7143] __kasan_kmalloc+0x93/0xb0 [ 2628.804750][ T7143] __kmalloc_cache_noprof+0x31c/0x660 [ 2628.810126][ T7143] em28xx_v4l2_init+0x10b/0x2e70 [ 2628.815131][ T7143] em28xx_init_extension+0x120/0x1c0 [ 2628.820396][ T7143] process_scheduled_works+0xb6e/0x18c0 [ 2628.825924][ T7143] worker_thread+0xa53/0xfc0 [ 2628.830508][ T7143] kthread+0x388/0x470 [ 2628.834584][ T7143] ret_from_fork+0x51e/0xb90 [ 2628.839163][ T7143] ret_from_fork_asm+0x1a/0x30 [ 2628.843907][ T7143] [ 2628.846230][ T7143] Freed by task 10276: [ 2628.850285][ T7143] kasan_save_track+0x3e/0x80 [ 2628.854941][ T7143] kasan_save_free_info+0x46/0x50 [ 2628.859946][ T7143] __kasan_slab_free+0x5c/0x80 [ 2628.864707][ T7143] kfree+0x1c1/0x630 [ 2628.868603][ T7143] em28xx_v4l2_init+0x1683/0x2e70 [ 2628.873618][ T7143] em28xx_init_extension+0x120/0x1c0 [ 2628.878909][ T7143] process_scheduled_works+0xb6e/0x18c0 [ 2628.884527][ T7143] worker_thread+0xa53/0xfc0 [ 2628.889143][ T7143] kthread+0x388/0x470 [ 2628.893189][ T7143] ret_from_fork+0x51e/0xb90 [ 2628.897763][ T7143] ret_from_fork_asm+0x1a/0x30 [ 2628.902505][ T7143] [ 2628.904811][ T7143] The buggy address belongs to the object at ffff88807361c000 [ 2628.904811][ T7143] which belongs to the cache kmalloc-8k of size 8192 [ 2628.918932][ T7143] The buggy address is located 1936 bytes inside of [ 2628.918932][ T7143] freed 8192-byte region [ffff88807361c000, ffff88807361e000) [ 2628.932895][ T7143] [ 2628.935202][ T7143] The buggy address belongs to the physical page: [ 2628.941605][ T7143] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73618 [ 2628.950369][ T7143] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2628.958933][ T7143] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2628.966483][ T7143] page_type: f5(slab) [ 2628.970441][ T7143] raw: 00fff00000000040 ffff88813fea7280 dead000000000100 dead000000000122 [ 2628.979015][ T7143] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2628.987596][ T7143] head: 00fff00000000040 ffff88813fea7280 dead000000000100 dead000000000122 [ 2628.996244][ T7143] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2629.004895][ T7143] head: 00fff00000000003 ffffea0001cd8601 00000000ffffffff 00000000ffffffff [ 2629.013659][ T7143] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2629.022322][ T7143] page dumped because: kasan: bad access detected [ 2629.028725][ T7143] page_owner tracks the page as allocated [ 2629.034420][ T7143] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7048, tgid 7047 (syz.5.8238), ts 2622337345169, free_ts 2622252696634 [ 2629.056721][ T7143] post_alloc_hook+0x231/0x280 [ 2629.061478][ T7143] get_page_from_freelist+0x24dc/0x2580 [ 2629.067033][ T7143] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2629.072849][ T7143] allocate_slab+0x77/0x660 [ 2629.077346][ T7143] refill_objects+0x331/0x3c0 [ 2629.082009][ T7143] __pcs_replace_empty_main+0x2e6/0x730 [ 2629.087562][ T7143] __kmalloc_cache_noprof+0x392/0x660 [ 2629.091695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2629.092915][ T7143] tipc_mon_create+0xc2/0x490 [ 2629.105642][ T7143] __tipc_nl_bearer_enable+0xece/0x14a0 [ 2629.111361][ T7143] tipc_nl_compat_doit+0x407/0x650 [ 2629.116449][ T7143] tipc_nl_compat_recv+0x8d3/0xcf0 [ 2629.121546][ T7143] genl_family_rcv_msg_doit+0x22a/0x330 [ 2629.127093][ T7143] genl_rcv_msg+0x61c/0x7a0 [ 2629.131603][ T7143] netlink_rcv_skb+0x232/0x4b0 [ 2629.136345][ T7143] genl_rcv+0x28/0x40 [ 2629.140306][ T7143] netlink_unicast+0x80f/0x9b0 [ 2629.145069][ T7143] page last free pid 2743 tgid 2743 stack trace: [ 2629.151561][ T7143] __free_frozen_pages+0xc2b/0xdb0 [ 2629.156753][ T7143] __slab_free+0x263/0x2b0 [ 2629.161149][ T7143] qlist_free_all+0x97/0x100 [ 2629.165726][ T7143] kasan_quarantine_reduce+0x148/0x160 [ 2629.171178][ T7143] __kasan_slab_alloc+0x22/0x80 [ 2629.176025][ T7143] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 2629.182018][ T7143] shmem_alloc_inode+0x28/0x40 [ 2629.186771][ T7143] alloc_inode+0x6a/0x1b0 [ 2629.191260][ T7143] new_inode+0x22/0x170 [ 2629.195428][ T7143] shmem_get_inode+0x347/0xe60 [ 2629.200175][ T7143] shmem_mknod+0x191/0x360 [ 2629.204589][ T7143] shmem_mkdir+0x33/0x70 [ 2629.208899][ T7143] vfs_mkdir+0x413/0x630 [ 2629.213130][ T7143] filename_mkdirat+0x285/0x510 [ 2629.217966][ T7143] __se_sys_mkdirat+0x35/0x150 [ 2629.222709][ T7143] do_syscall_64+0x14d/0xf80 [ 2629.227283][ T7143] [ 2629.229586][ T7143] Memory state around the buggy address: [ 2629.235208][ T7143] ffff88807361c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2629.243247][ T7143] ffff88807361c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2629.251285][ T7143] >ffff88807361c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2629.259317][ T7143] ^ [ 2629.263880][ T7143] ffff88807361c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2629.271915][ T7143] ffff88807361c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2629.280050][ T7143] ================================================================== [ 2629.294580][ T9] em28xx 4-1:0.132: Closing input extension [ 2629.571412][ T7143] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2629.578657][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 2629.589236][ T7143] Tainted: [L]=SOFTLOCKUP [ 2629.593642][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2629.603801][ T7143] Call Trace: [ 2629.607075][ T7143] [ 2629.609990][ T7143] vpanic+0x56c/0xa60 [ 2629.614061][ T7143] ? __pfx_vpanic+0x10/0x10 [ 2629.618572][ T7143] panic+0xc5/0xd0 [ 2629.622280][ T7143] ? __pfx_panic+0x10/0x10 [ 2629.626845][ T7143] ? preempt_schedule_thunk+0x16/0x30 [ 2629.632202][ T7143] ? preempt_schedule_thunk+0x16/0x30 [ 2629.637771][ T7143] ? v4l2_fh_open+0xac/0x420 [ 2629.642371][ T7143] check_panic_on_warn+0x89/0xb0 [ 2629.647322][ T7143] ? v4l2_fh_open+0xac/0x420 [ 2629.652104][ T7143] end_report+0x73/0x180 [ 2629.656364][ T7143] ? v4l2_fh_open+0xac/0x420 [ 2629.660962][ T7143] kasan_report+0x128/0x150 [ 2629.665477][ T7143] ? v4l2_fh_open+0xac/0x420 [ 2629.670262][ T7143] v4l2_fh_open+0xac/0x420 [ 2629.674811][ T7143] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2629.680811][ T7143] em28xx_v4l2_open+0x157/0x9a0 [ 2629.685676][ T7143] ? do_raw_spin_lock+0x12b/0x2f0 [ 2629.690711][ T7143] v4l2_open+0x1bf/0x3a0 [ 2629.694973][ T7143] chrdev_open+0x4cd/0x5e0 [ 2629.699489][ T7143] ? __pfx_chrdev_open+0x10/0x10 [ 2629.704612][ T7143] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2629.711036][ T7143] ? __pfx_chrdev_open+0x10/0x10 [ 2629.715980][ T7143] do_dentry_open+0x785/0x14e0 [ 2629.720759][ T7143] vfs_open+0x3b/0x340 [ 2629.724845][ T7143] ? path_openat+0x2df0/0x3860 [ 2629.729626][ T7143] path_openat+0x2e08/0x3860 [ 2629.734230][ T7143] ? __pfx_stack_trace_save+0x10/0x10 [ 2629.739612][ T7143] ? stack_depot_save_flags+0x33/0x810 [ 2629.745090][ T7143] ? __pfx_path_openat+0x10/0x10 [ 2629.750034][ T7143] ? __x64_sys_openat+0x138/0x170 [ 2629.755067][ T7143] ? do_syscall_64+0x14d/0xf80 [ 2629.759840][ T7143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2629.765922][ T7143] ? __lock_acquire+0x6b5/0x2cf0 [ 2629.770867][ T7143] do_file_open+0x23e/0x4a0 [ 2629.775547][ T7143] ? __pfx_do_file_open+0x10/0x10 [ 2629.780581][ T7143] ? _raw_spin_unlock+0x28/0x50 [ 2629.785447][ T7143] ? alloc_fd+0x64b/0x6c0 [ 2629.789792][ T7143] do_sys_openat2+0x113/0x200 [ 2629.794482][ T7143] ? __pfx_do_sys_openat2+0x10/0x10 [ 2629.799779][ T7143] ? exc_page_fault+0x6a/0xc0 [ 2629.804476][ T7143] ? do_user_addr_fault+0xc6f/0x1340 [ 2629.809770][ T7143] __x64_sys_openat+0x138/0x170 [ 2629.814739][ T7143] do_syscall_64+0x14d/0xf80 [ 2629.819343][ T7143] ? trace_irq_disable+0x3b/0x150 [ 2629.824373][ T7143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2629.830439][ T7143] ? clear_bhb_loop+0x40/0x90 [ 2629.835140][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2629.841035][ T7143] RIP: 0033:0x7f754faa7407 [ 2629.845449][ T7143] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2629.865239][ T7143] RSP: 002b:00007fffe24c53d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2629.873647][ T7143] RAX: ffffffffffffffda RBX: 00007f7550246880 RCX: 00007f754faa7407 [ 2629.881609][ T7143] RDX: 0000000000000000 RSI: 00007fffe24c6f1a RDI: ffffffffffffff9c [ 2629.889668][ T7143] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2629.897679][ T7143] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2629.905640][ T7143] R13: 00007fffe24c5620 R14: 00007f75503ad000 R15: 000055d2089934d8 [ 2629.913616][ T7143] [ 2629.917055][ T7143] Kernel Offset: disabled [ 2629.921365][ T7143] Rebooting in 86400 seconds..