last executing test programs: 21m9.485047419s ago: executing program 2 (id=873): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0x1, "72164fec"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x2, 0x1, 0x1, "e679"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f146daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb258934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e2850f23165a1919f24127080617fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01950e3334eb55", 0xed}, {0x0}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01", 0x75}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa5", 0x49}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33", 0x79}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 21m7.070739197s ago: executing program 2 (id=881): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="210f26bd7000000000002000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 21m5.962989647s ago: executing program 2 (id=887): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000700)="6894", 0x2}], 0x1}, 0x8000) sendmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc011800"/163], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x56f56d41}) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 21m4.917209099s ago: executing program 2 (id=891): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 21m1.52431758s ago: executing program 2 (id=902): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/56, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000400)={0x18, 0x0, 0x3}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) dup(r4) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) rseq(&(0x7f0000000200), 0x20, 0x4000000000, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21m0.961161204s ago: executing program 2 (id=904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001000000000000000004000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bfa100000000000006010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000c00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21m0.384951048s ago: executing program 32 (id=904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001000000000000000004000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bfa100000000000006010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000c00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m44.302839595s ago: executing program 4 (id=5457): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0x40485404, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x0, 0xfffffffc}, 0x9, 0x19c}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000002000040"]) r13 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r13, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r14 = dup(r5) write$UHID_INPUT(r14, &(0x7f00000029c0)={0xa, {"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", 0x1000}}, 0x1006) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0xf, 0x9}, {0xffff, 0xe}, {0x1, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) r16 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r17 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r17, 0x3, r16, &(0x7f0000000c40)={0x2000000b}) 2m43.192684178s ago: executing program 4 (id=5460): futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) syz_usb_connect(0x2, 0x41, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}]}}]}}, 0x0) 2m42.272426476s ago: executing program 4 (id=5465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000700)=0xe9, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_dev$sg(&(0x7f0000000240), 0xff, 0x100) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) dup2(r3, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './bus', [], 0xa, 'v'}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) syz_usb_connect(0x6, 0xd07, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x59, 0x2a, 0xb, 0x10, 0x582, 0x74, 0x3b6c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf5, 0x4, 0x7, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x28, 0x8, 0xf, 0xff, 0xce, 0x16, 0xff, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x1, 0x0, "", "0646"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x2, 0x6, "74f9", "9f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb60, 0x1, 0x3, "5fab04103480b2"}]}], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5, 0x2, [@generic={0xf7, 0x21, "973978329fedb82199abd7c07cbba3c6e37ec5ca17b5116a3b8679238486d17408e29c66acf8c08ff441fd2e82e1db1e9a4ab1557ee28200d6fbf8b63148554ba8da64302a931858d3e4520c8f9c2cb0038318f2781578637f37b9218a922be2c41dbaf228a8351513ce61a5ee547a5e5a07245a95f062787e975f68e32f17bef71a86bc081aa2964096d99325864d7dab71e8d232d1d507673d971f1c8e4c9c1d1b17f21ca99c0557d6bce201176649b6c85656b1f6993643ed91fd7f8bc571b3855877040d8a796b5e7034d74e6979c43f9e02a6c50bc9e3a5218bbad7c414a187840eeddc67c9a19a902ca4ffc3567739904201"}, @uac_iso={0x7, 0x25, 0x1, 0x805d720ae9076ebf, 0x5, 0x3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x27, 0xe5, 0x9, [@generic={0x22, 0x3a, "8d03af31621d5c1f93a88fec1c706104b992417b4eedd7b1c0d64d7744647b9d"}, @generic={0xe0, 0x3, "5601b3bc35dcf4a6061de9eeb0defa4238eba2d75e1a23a28ec40918f2e08b6e1ef093f98095a81dd8ec44ec1cac8d5fed31fbeec09d493acbecd5c28bd6efa8b1ab59337d397c38c85e59bc1c6301127cfb1224870368534ea91d08bc5db8b1cda4c49036da846fc50c4d21924f17cf4b2c40fd8fed2ec579199974e79263c9a724181fcfa6cdd18258b0d6436df29db901ae12c461f2b36830299a1dbfb8393d0e814acc385529357d8079cae3d8e5c6dd63a6217597e734ee59daa25176701966d341e919967b55396cb5b96109cc419f8051eb50b1f7bb4cf5511405"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x4, 0x4, 0xe4ddc8d8d500602e, 0xa, 0x1, 0x8}}, {{0x9, 0x5, 0xc, 0x13, 0x3ff, 0x1, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x6}, @generic={0x61, 0x4, "b2e62c71089b45b1f272cc802f49b3e5b139df77ea66e312f4c79666ab94232ca6ab25df00d5a18e8a29a35f80b73da61d2479426b2be2a8197559da5020cba011fe10ce7f224544bac41010f9f0836233820cf18bd4326f641a1cd357dae2"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x48, 0x72, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x1}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xf, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x3, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x0, 0x2, 0x91, 0x10}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x6, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x19}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x230, 0x68, 0x9, 0x2, [@generic={0xaa, 0x5, "4813556acf60ab606506004cf14bf67205e6a96a525d2415b36bc97f806c62e5ee2074ef9c1b63cc84a7d979a1e7b50c22bc6912d3106305244ba8168df42cb512d9af40434f03a38d68dd8a3b68e56635c15c88fedad1fff3a7d9b57f6deb0ac0be7f61b4b706495fb69d9647e0d3abfb72984b0a93b9ff26d7bda770894ab63e1752eabdba0075d0e0d45a4a8ebba99ed2f43e94cbc68b9f21d129d6362c38b385703ac5679d75"}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x0, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x10, 0x7, [@generic={0xb8, 0x7, "de07a284df61a311ce286ef8dc0c2a7626718b2c5bb536d655553039d115c8ecc1fe8870d998c51a317f22c05b491d9a10dd3682107b868b613ba88fd71aef56f2bd244f8876d66780de4d7198f5c53d350eec15009a2b314ca7ec1e3365f7c5061240cc46551c5491f87d177ba711ff0dedbbe1272a9b702ff2c7c5b70649b3f0d06cecdc91358cf32eba547aab595d6debf9a812180b8488ba98cb1216f40eca410d5285da3a842e7281d9ef5ebec0c05de609062c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xb8, 0x5}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0xd, 0x3d, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x7b7, 0x8, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x10, 0x7f, 0x9, [@generic={0x6c, 0x24, "de63ae03a825931ac5e61a2aaab7bb1e65e6e51dd4868f1a9ff7ac9a913a9fb2ea9d34943e5fff9eaf0d591362578a41d38b0077303fb911ad784f9a993abe4901a6e8f7bcae3ac0dc90477ee2db96c475e5902b62333ab2c72316cb3454e162e8df5ecfd6890ece1b13"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x7f, 0x7, 0x9, [@generic={0x34, 0x6, "8c9d2e4f9cd9155ed411f37b8cd6ee15d2160b4d0b8b0ccba3188deac9d8fea2a2d66a41fb3886b3fce7bd081b480f4a3571"}, @generic={0x1b, 0x1, "773ad6e08970dabad0e6a50fc75b11ef17c653bc11779e998a"}]}}]}}, {{0x9, 0x4, 0xd5, 0x6, 0xd, 0xff, 0x5d, 0x1, 0xee, [], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x1, 0x0, 0x7, [@generic={0x16, 0x8, "453c0d8cb6d71271543c3c3b4e0d57a4e38bb8ab"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x8, 0xa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x13, 0x400}, @generic={0x70, 0xa, "4847f231a762ddca68fc901803238f9eb53ad32594ae29e728e88a5718fc6757f045d139fe8da492774bab8936e4aca802c35174f15079cb7e1bb2de86c782caaf714a59ec3920cc44cea43d0a72e7230d4a45664e916fb9d0f142d0441def32a5ef4097c5eb854a37871a920e7a"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x91bddefbe7e91e7d, 0x10, 0xe, 0x3, [@generic={0xad, 0x7, "57a5d0019065b6acdb9f4079f9ddc29b7b8eb31fa583894c688ba274f4ffbce10adbd7b6685f6b48a146c96941dd58f85f9f10d83fce21c93e1312005a5ca198ce6ccfecd8490c16a044700d26154118d5c407bda79b06975728bb64abb385d4b3d1afb74c8cb3c4392f8315df9298dff5f22f18f92ca784c802879e9655a4ee30e9ed559c9da6f9440efadeb953139bcaff88c8e8dcaf4bfe558b6dddca40d0a4a00f879c73ae8b1b44f9"}, @generic={0xe5, 0x6, "3356a7807bae1dfd4c7e9430edeaf3e33cf6c3ffefe7ce24960f1573aa245bc523a263345dc831e51633fa80b17b4d636803123401601834b051446f6f6efb71e5234204b1e2b0fec4e3974866a635e97937ad8515d4db3b4ff4ea5ca75f1f01e2f0a72b0969ec17df1284e84c65be105d4392b7cba1cab59062c1ce9b28a93085da56c3c9e037d24406e43f3e9127954d7a071cec9d84c63ed1587290caa5de6fef798e48232cfa4720976a7e54101314144c7f924f024bbc78e32c8aa26787af739548fde27078687ce559f7cc3111ef2fcd2cabf0d5c17161cb760d15f62f1c9ccc"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x0, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xdf, 0x9337}, @generic={0x7a, 0x3d, "07ebf1b334c54f46d0b809ef0aca4bbeb4e02d4d6e244052ea79db07fb7b5de08b96fde1595308c0e45f4cebb1a25db68f6878808e930993c0926f09467b7c2a53de4e22720235a20eaeb0709bc1996edaad0a0612b87429e42aaa95a77b19d15eb0458fbed7f7445911e6b58170ef647d70a97d42c3397a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x3, 0x80, 0x81, [@generic={0x48, 0x2, "9e98e81ef2763fbc34c536667a1def0fdeddea44abd9ba46d5deb996dc0951be51966bbf02d51cce02634579e5e30865a8e2c4052fa99f08fb03187fd4bfbfa4361fdd64308c"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0xc6, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7}]}}, {{0x9, 0x5, 0xc, 0xb23b1380c3ac9888, 0x10, 0x2, 0x7, 0xf8, [@generic={0x90, 0x31, "25b28bae93a293321d0cd38db5f714bf81f386a3cf65cc466a63f877745d38e5ac59fdd3d152d3d01f61a0bfc43d019369ef774792ada8dc7c7aea936096d32d476540cbf70af88621d2157b348d158b29dfb026fff3791ecece4af260b3cb107a08e9387e981600ae8f57ff44b8780d2f98a51d64734a50693ab3d383d9018bcfeee09700f846d2a7be2116efe0"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x6, 0x1}]}}, {{0x9, 0x5, 0x81, 0xc, 0x400, 0x5, 0x0, 0xf9}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x3, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x3, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x4, 0x81, 0xc, [@generic={0x45, 0xd, "0d336242e55469524f8e2806bc0710e774baeadbee2bc58cb6a8ac563cb03a8dfcc3211f1eea711f30456ef64821ad9915d3b500b288b799a81a5aaf6f883d61055671"}, @generic={0x58, 0x22, "6421c8eaf86241b0f8cf29ffc64c82683636242ecb9432a4d80051f49cf8c23d534af445ae66f47a1d0bc9ca92c62a78a85ed86a97f39cac6b58865e594a8272a40ce66257efa939b7a3800582c6af05adbc81a4d62d"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0xc2, 0xf, 0xf6}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x7}]}}]}}, {{0x9, 0x4, 0x9c, 0xcc, 0x7, 0xff, 0x86, 0x10, 0xd, [@uac_control={{0xa, 0x24, 0x1, 0xfff7, 0x1}, [@processing_unit={0xa, 0x24, 0x7, 0x2, 0x0, 0x7, "f35ac7"}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x8, "11"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x2, "f74db9625ab0"}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, 0x4, [0x9, 0xe, 0x4, 0xa], 0x13}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x9, 0x2], 0x7}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x1, 0xd1}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0xe4, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x14, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9b, 0x3}, @generic={0x23, 0x22, "bedc19e1e7f8860d8d09b947f79497aee1d29f5c81633a0106c5116d1934fdf54f"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x3, 0x9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}, @generic={0xf2, 0x24, "d99d277bc9dcb829d1a839fe68292dcf2efb7a1733b77cdd8eaa63848b9ab07517dd05c158e2efc74d57cfbbfaf5a4c8b81c27e1e90431a54a6487e243b9d29baa2bc75ba565a5a16de6d8ea2ed350e2492d0fb45c7b70b3973730326ee2f513cf665bbe5bc88150e7607020cc36956e68fa543d2f1c8098441778c298128b7e2b0f59edd3d424af180f95c0d790569deb7c06f164e3f4eee470661c308b657e7845661dc6e278b898ed3d291110e77bdb9feecd00e488b59ed4cac475f11cc414d609ba17095cfc9aad14af2098fcc54d2cc9ceb5fc55f10651b39b6a19d7c1c2c1f8bd9f7758b4ffb2adfb3b051c61"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x5c, 0xe7, 0x4}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x6, 0x4, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0x7, 0x8, 0x53}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xd1, 0x44, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xd5, 0x14b}]}}]}}, {{0x9, 0x4, 0xd5, 0x7, 0x3, 0xff, 0x2, 0x1, 0x2, [], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x4, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x400}]}}, {{0x9, 0x5, 0x9, 0x4, 0x0, 0x10, 0x1, 0xbe, [@generic={0x8b, 0x6, "3642caae0124e67961c6a7600ccb37b3245bed4b65ce9065ea6a95fff36f967e2e4cc9a1af106275033782a22d28246c968cbd3f1e1958f91ff7cc83c2c84af0884facb82ebfcc7992f4026f135c99c8f5d019c164f5fc69b0d13c9844d4a68fde10267f9e62e187e8c6cffac0e32420963203c292cc2560fe1c60469ff60a1bafabc8e12ae8892713"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0xff, 0x5, 0x7f, [@generic={0x57, 0x22, "57754ac8da17f208017f9e25cfa4cc2feb933f9949909d990858ef1767e29e6d8b89ec791d46844d2bebf0f71e57325acd720d98af40c2418a10f778fdf38b1c80dd2ba31d3b779ce2def22f130f84f220c1aa917d"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xf7, 0x1, 0x7, 0x40, 0xff}, 0x8a, &(0x7f00000000c0)={0x5, 0xf, 0x8a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xc0, 0x4, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe8, 0x8, 0xe, 0x9, 0xcc}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0xdf, 0x2, 0x1, 0x33}, @generic={0x46, 0x10, 0x4, "b80f5058a76a59a5e021aadc8399627afe41b280294a64fdadb311a0e3ef64be1c0de55b648d95bddf22d802641b25e6c9ab14f28e5c237ce155e956f1c168534fd6e2"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "1ab5885f03d77c28194de848cb5e4cdf"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5d, 0x7, 0x3, 0xc3}]}, 0x7, [{0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x81a}}, {0x35, &(0x7f0000000f40)=@string={0x35, 0x3, "790a037d1bf8f831a93f4ba6e71c7234e3aaaf9065108e46fb2c33cc9af83bf93250b8a81aee9eedcde8f918c811d0be74ebfc"}}, {0x44, &(0x7f0000000f80)=@string={0x44, 0x3, "5fb4db6ab8637b7bba2675c0586b8cdf6de1fff0e75e74e298bdf6f0e578cffb9a51951952f593fb05788f2c2953401fbe774ad70cc847cd42f831932f71a0b72407"}}, {0x97, &(0x7f0000001000)=@string={0x97, 0x3, "9fea8ab44297c6c51ec3c3486522cc8809113bcc8af0d7e4e43ca9a9fa61975f885277336614a876953c896d16773b007dd6940601432a5a9dad90dc9610e2ef4d7aa6d1fcbecbbd936a7ad9e47b4bee87fb8888bf2d8301defd0cbe89dfa1fc4ccde57dd4dc0af7956f042f7422a8c97d0e2fb2e2484e13bb321cb26d787612924ce395f2b7f4d438a81506c7770be839a7042683"}}, {0x100, &(0x7f00000010c0)=@string={0x100, 0x3, "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"}}, {0xea, &(0x7f00000011c0)=@string={0xea, 0x3, "174eed7e540fbc60bd5e2db6cbf580df05020265d42db1682d9eef09a2662010f1afdcb1ec8a8f21c703dcb69add401ab0a5f45378b8b6bb33f869ae8fc834f2d8a6045ccb9dc3adca84e42b6481c02f70dd712d3b9f7022edad83f9750efd5d9a4f1eccac737577299e54ebec2b76a7a6d02aa5538edfe2c0ea33cb3adf928daee649f231f4ec0c3f92b4f178bb2e8fcdcb44cfdbd3856f316ba7ee6db5762f9d55d5e1875cbc42893a9bf6a55d721009a2a1ac944733fd1929f00e73434d86ec02b7732f106ff74d617cb3e242add6ac2594ad81fbf0d20584336b870a91d0d0e7a9a6f4a97e5e"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x80c}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m38.988827001s ago: executing program 4 (id=5472): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') landlock_restrict_self(r1, 0x3) 2m38.485220286s ago: executing program 4 (id=5473): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000004000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bfa100000000000006010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000001a000000b705000008000000850000000c00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m37.001815302s ago: executing program 4 (id=5477): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) socket$can_raw(0x1d, 0x3, 0x1) userfaultfd(0x801) socket$kcm(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000200b060100000000000001090224000100000000090400010103000000092100000001220200090581030700000000"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) dup(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r2], 0x20) 2m35.516608555s ago: executing program 33 (id=5477): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) socket$can_raw(0x1d, 0x3, 0x1) userfaultfd(0x801) socket$kcm(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000200b060100000000000001090224000100000000090400010103000000092100000001220200090581030700000000"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) dup(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r2], 0x20) 2m5.072795911s ago: executing program 1 (id=5591): add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) (async) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) (async) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m4.804984673s ago: executing program 1 (id=5593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) remap_file_pages(&(0x7f000084a000/0x2000)=nil, 0x2000, 0x2000007, 0x1, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="300000e5680000032dbd7000ffdbdf250000000000000000000008000100020000000800010002000000"], 0x30}}, 0x24040800) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060101000000000000000005000009050001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) lstat(0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x140) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000003400)=ANY=[@ANYBLOB="12010000a3b43e103c41a48193650102030109021b00020d0220060904000000cbe7a5040904380900ff879d"], 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0xc3d33000) syz_fuse_handle_req(r2, &(0x7f000000e440)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104200000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001180), 0x94080, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @mcast2, 0x6}, 0x1c) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000001280)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010100}, 0x10, 0x0}}, {{0x0, 0xffffffffffffff1c, &(0x7f0000000280)=[{&(0x7f0000000e80)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000140)="c9e5e6693f984b9c59ce417565c1bf1a2d5c45aea10b4ce8bf956248d02341f0828adaad9d2cf8e647295e4b7f4af731517952f16dbfe551916805ab26b572ba6038d510a0d0bb44208ba8b532ee4ed52e84f4b8f0f4bb4254e041b9ec5033776b0d856534ee09dc33f0fe54b5e34c2750744987e35d275fa152bf", 0x7b}, {&(0x7f00000001c0)="e4ad58e111377df201eafa1279201cee55dc3b907a1a68e62757b51da3c0576f1eec3ff2635134b88cf4ea8cbe15370ffa2bdac8d130b5d8ad06967cadd68deac17b781076898556426d776419c1ca1d2952dd64200cea1dcb4d0ef874178a8853445baebee2814e3041e6c2ef550e1e0d28e62012748646bc924f53b60de494581fe1137b833d4340a1e250af52dfc74a917152c892e9a7cfc75ff4bbd2592b767efada048d9b906630f55f95c1d60e6628a4458966fcfb91cd6a", 0xbb}, {&(0x7f00000002c0)="75e4735d920d4e9c4346511ab407c1197fe3f94c2a7c75ecfc31b8334d4fa0a4357e030089b3a3dc765ce9138bb3f14c34f9b164230d54f9d860e413a95498f9df60e35a0cc91c78acdafe2615e1c3fb975065c5c95c1a262ad56bb5d45e75e256f20d162f3f68be147ad5ae9295516d987073c1f8e874955a15e81ce6288681e5e7e25b900bcea6", 0x88}, {&(0x7f0000000f80)="f22205dff87998aafeabcb1e23ceb308523fdf16d046c0c7cb1d2909842d83f3bea16b0b9e5bb9bf7929b836c58c927ccb0804890ba39ffaaa6c7f0788914dce3f83b1c7824c9c3d86b8bbe1ccef62f87a5b4b908c4723c6fd36735430ba1cf4f5d3dbcfac8921a730287cdbcad84cd53fc7603b602198d9dd2f9f7ad1f59430801070e374982291ad4b0a54552d3f9036001e4659651c3cc88da0e236ac165e1579fcf1abf01e3e9862d284c61e67de74ed39501e441b41dbc26e8c9ef00ab1", 0xc0}, {&(0x7f0000001040)="c157de30f14b60b7efd2eb673b37fc258194b7db71f16d7e8f08750004efaa8d4f699d9846ee58e82cb9f28ce5e234f8c9407775a464bf4d9d57e282655c666d0be3a84488351aa33489dd84757a0da44ee7b45d4603e0bc029b16d09d0264b8ff33be9c9d025b9843726a54daa9db442c630e7aa6ff6c8c096a7e18866657c619c01b9ecad4723eafbc613f5364bc3088546d0e18b6972e4467", 0x9a}], 0x5}}], 0x3, 0x240080e4) 2m2.777744231s ago: executing program 1 (id=5602): r0 = syz_io_uring_setup(0x2440, &(0x7f00000002c0)={0x0, 0x70fc, 0x21028, 0x1, 0xbb}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0x0, r2, 0x0}]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x337, {0x400, 0x512}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x54}, 0x1, 0xba01}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x9b, 0x0, r5, 0x0, &(0x7f0000000400)='./file0\x00', 0x275, 0x101040, 0x12345, {0x0, r8}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xaece, 0x0) preadv(r11, &(0x7f0000000540)=[{&(0x7f0000001dc0)=""/4100, 0x1012}], 0x100000000000004d, 0x8, 0x400000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r13, 0x1, 0x31, 0x0, &(0x7f0000000080)) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r14) ptrace$pokeuser(0x6, r14, 0x358, 0x0) 2m2.337502815s ago: executing program 1 (id=5607): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002114001180090001006c617374000000000400028008000a400000000108000840000000010800034000000014"], 0x104}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='limits\x00') read$hiddev(r2, &(0x7f0000000300)=""/51, 0x33) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000a49000/0x1000)=nil) (async) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000a49000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m1.304898641s ago: executing program 1 (id=5613): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x70, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1m59.734110866s ago: executing program 1 (id=5616): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000500)='\r\n', 0x2, 0x6d91fb6126dcc988, 0x0, 0x0) syz_emit_ethernet(0x51, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa2faaaab4aaaa1786dd60ecae98001b2101ff010000000000000000000000000001ff0100000000000000537dccf2bb23e76957e5000000000000010e006d41650000004e244e2004319078ec"], 0x0) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) 1m59.073555089s ago: executing program 34 (id=5616): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000500)='\r\n', 0x2, 0x6d91fb6126dcc988, 0x0, 0x0) syz_emit_ethernet(0x51, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa2faaaab4aaaa1786dd60ecae98001b2101ff010000000000000000000000000001ff0100000000000000537dccf2bb23e76957e5000000000000010e006d41650000004e244e2004319078ec"], 0x0) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) 10.566178981s ago: executing program 7 (id=6047): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000000000000000c3a80000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, r4}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x49, &(0x7f0000000740)=""/73, 0x40f00, 0x44, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0xc, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000008c0)=[{0x4, 0x4, 0x7, 0x1}, {0x4, 0x3, 0x4, 0x8}, {0x4, 0x2, 0x4, 0x4}, {0x3, 0x3, 0xc, 0x6}], 0x10, 0xd4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f00000003c0)='ext4_da_release_space\x00', r7, 0x0, 0x8b}, 0x18) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$uac1(r11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="001441dd0c04d7849a2b18"], 0x0, 0x0}) r12 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r13 = userfaultfd(0x80001) ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f00000000c0)) syz_usb_control_io$cdc_ncm(r11, &(0x7f00000001c0)={0x14, &(0x7f0000000700)={0x40, 0x2, 0x2, {0x2, 0x21}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x7, 0xfff8, 0x40000b, 0x2, 0x116, 0x9de, 0x0, 0x80000003, 0xfccc, 0x1f41, 0x6349, 0x81}}, 0x0, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0xffffffffffffff08, 0x6}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) 7.050140913s ago: executing program 7 (id=6073): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x20000000000006, 0x40000000009}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000140)={0x20, r1, 0x1, 0x0, &(0x7f0000000080)=[{}]}) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r2, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x585) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x52000775) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001980)={0x0, 0xffffffffffffffff, 0x8c, 0x22, @buffer={0x0, 0x1000, &(0x7f00000008c0)=""/4096}, &(0x7f00000001c0)="9fc2edfb34e64ebe2afc3a1c559a906c13f2269681ec3bf8ec156028e99883fa68ad2d6ef7efee644247d17ac90f969948d6b766448a90afe1467459b41c0260253dd332788ee191536b5766c4190f694a9aef48670e8f7171792d805d861910baa0e540533e15331a04532424b4b7c0f901488b0d7d43ef84555052010d158ff6e9f3f0ea6e7d8a8cadc607", &(0x7f00000018c0)=""/145, 0x3, 0x0, 0x0, &(0x7f00000000c0)}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 6.324737001s ago: executing program 7 (id=6074): r0 = syz_clone(0x400a900, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000009}) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r5, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r5, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r5, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x79, &(0x7f0000000400)="fda1da998f975a594ec78316bdcbc618793d8e71c6f2d50adf48ee4bd85765eb3c9cff746024cafae2fa0bc1aef8eb28583725697af6258c69206d92557206f15f37c6af89dea089ca5d46790ff2e348e39c436e0f3ad633720a848507372005042a0a387ba4eafc7c971dcf9485ff81fef0fd345df162e433"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r5, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note={0x0, 0xff}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0xc, 0x5}, {0xff}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) io_uring_setup(0x1c7b, &(0x7f0000000080)={0x0, 0x405e0e, 0x2000, 0x4, 0x6a, 0x0, r5}) ptrace(0x8, r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) socket$alg(0x26, 0x5, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r9 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) r10 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRES64=r9], 0x78) close(r10) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffcfe, 0x0, 0x0, 0x0) 6.049665537s ago: executing program 6 (id=6075): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xffff0fd7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 5.841285367s ago: executing program 6 (id=6077): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) r1 = io_uring_setup(0x7392, &(0x7f0000000080)={0x0, 0x800, 0x204a, 0x1, 0xe7}) (rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/240, 0xf0}], &(0x7f0000000240)=[0x5, 0x2, 0x9, 0x7fff, 0xb]}, 0x20) 5.676721849s ago: executing program 0 (id=6080): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') lseek(r1, 0x4, 0x2) getdents64(r1, 0xffffffffffffffff, 0x43) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x4, 0x5, 0x7f, 0xfffffffb}, {0x2, 0x2, 0x3, 0xc}, {0x7f, 0x10, 0x0, 0x7}, {0xfff7, 0x7d, 0xf0, 0x1}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)="89b5454cc8e4a71c2d041d5a760d5fdab2df60f0c2c603137cb023d11ae0c03a12fb1874de8c55ba93abae90dd3280580bb05f300b7c995aa214aa1b293641f77938a860f8e81530f2f8617666f278285d9509a85c5a0e22f26bf9d99406323553adccd86c6e071f818f404357d19f193d31523264195dd8a5badfff92e29b10d37a9aafa31cbad985281af69151cdae5608e69d8fd4122ad63a2d6b797d6e1e2fef973f4fac9e", 0xa7) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06003d3d", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00'], 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x4000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000002280)) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/19, 0x13) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x10000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x124) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000640)="00214717a707000800000362e94fd9d789fdd44d9ac9", 0x16}], 0x1, 0x3, 0x6) pread64(r0, 0x0, 0x0, 0x100008) 5.373245595s ago: executing program 0 (id=6081): setrlimit(0x8, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.267569482s ago: executing program 0 (id=6082): ioprio_set$pid(0x1, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402002c68e0100000001090212000100000000090400"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000002100)={0x4, &(0x7f00000020c0)=[{0x5, 0x7, 0x2, 0x2}, {0x8, 0x1, 0x5, 0x1}, {0x902, 0x9, 0x6, 0x5}, {0x71a, 0xd, 0x9, 0x3}]}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbf8, 0x20000000}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@loopback, 0x4e24, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x30}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@mcast2, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$key(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x38}}, 0x800) syz_usb_connect(0x0, 0x56, 0x0, 0x0) 3.385574516s ago: executing program 3 (id=6085): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}], 0x10) msgget$private(0x0, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) (async) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 3.330307201s ago: executing program 3 (id=6086): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x6, 0x1, 'client1\x00', 0x80000000, "d01be311d5bdc58d", "10a62b8c42a12154e4882406882d87be487cce651a0ad0122951b56b7f54b027", 0x2}) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0d", 0x16}, {&(0x7f0000001600)="d85b30ac3228972ea4d5a1", 0xb}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 3.321296364s ago: executing program 5 (id=6087): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='udp:syz2\x00', &(0x7f0000000040)='./file0\x00', r0) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file1/file3\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x6c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x842e, @mcast1, 0x100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}}]}]}, 0x6c}}, 0x0) 3.185187267s ago: executing program 3 (id=6088): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0xc0a85320, &(0x7f00000000c0)={0x1080}) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'io'}, {0x2d, 'memory'}, {0x2d, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'io'}, {0x2b, 'hugetlb'}, {0x2d, 'rdma'}]}, 0x30) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='\\\x8b\x00', 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 3.181899535s ago: executing program 7 (id=6089): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe00000000850000008b000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 3.170250826s ago: executing program 5 (id=6090): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c00"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 3.122741555s ago: executing program 3 (id=6091): timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0xffffffff, 0xe9d}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) syz_usbip_server_init(0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80080, 0x1b1}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000003400)=ANY=[@ANYBLOB="12010000a3b43e103c41a48193650102030109021b00020d0220060904000000cbe7a5040904380900ff879d"], 0x0) r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000280)=0x9, 0x8) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-arm\x00'}, 0x58) 3.088074715s ago: executing program 5 (id=6092): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000600)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x400, 0x0) readv(r3, &(0x7f0000002400)=[{&(0x7f00000020c0)=""/101, 0x65}], 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000002bc0)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x20101, 0x148) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x200, 0x800, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0x8, 0x6}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0xa0}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r9, 0x8000, 0x7c, 0x9, 0x2, [0x0], [0x8, 0x19, 0x7, 0x7ff], [0x1, 0x4, 0xffffffff, 0x3], [0x2, 0x8, 0x0, 0x2]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r10}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.081441712s ago: executing program 0 (id=6093): setrlimit(0x8, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.963607887s ago: executing program 6 (id=6094): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) cachestat(r3, 0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r4, {0x1}, {0xd}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) 1.73173952s ago: executing program 0 (id=6095): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 1.630868609s ago: executing program 6 (id=6096): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000400)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[@ANYBLOB="fffeffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000010007ac1414bb64010102867affffffff0012e25eb28c59881681fb52d13654d3a5a70009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001173bc23f9ffffffa30900a301c846000010c8f46976e79ea788f03d9d3205920703d6000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_io_uring_setup(0x9d8, &(0x7f0000000480)={0x0, 0xb44, 0x2000, 0xfffffffc, 0x34f}, 0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000400)=0x3, 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[@ANYBLOB="fffeffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000010007ac1414bb64010102867affffffff0012e25eb28c59881681fb52d13654d3a5a70009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001173bc23f9ffffffa30900a301c846000010c8f46976e79ea788f03d9d3205920703d6000000"], 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) syz_open_dev$vim2m(0x0, 0x8, 0x2) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) syz_io_uring_setup(0x9d8, &(0x7f0000000480)={0x0, 0xb44, 0x2000, 0xfffffffc, 0x34f}, 0x0, &(0x7f0000000240)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) 1.468305616s ago: executing program 7 (id=6097): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x4817, 0xa, [0x1000, 0x5931, 0x401, 0x8dc7, 0x100, 0x91, 0x3, 0x1, 0x2, 0x3]}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r1, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x1, 0x3, 0x6, 0x4}, &(0x7f00000001c0)=0x98) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "b6d8bf33865856db77e8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, '\r'}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x90) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1d, 0x4, 0x4050860) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/86, 0x56}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/218, 0xda}, {&(0x7f0000001700)=""/86, 0x56}, {&(0x7f0000001780)=""/142, 0x8e}], 0x7}, 0x22) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r3) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000001d00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001980)={0x308, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4000000}, @ETHTOOL_A_EEE_MODES_OURS={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "ca006f25ef857f34c4b7c71799b8a5dbe1d04f2b4f63003501e77c1a5f3f2276b3740b7eb2660a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_MODES_OURS={0x25c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$(%:[\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_MASK={0xec, 0x5, "173e4310eef9f632c2f9bb57c3fdea425af3c6e2f4193307d0d9b18cd38c2b220c4dd1c477899427b1ffd3476a072e09ed80f5c25cb3a104d583a63e771e4190bddcc14f53b46b6b8ce59f6717ef4120dbe256ba5431f8110200acad5dfc32bfc31ee406e85414e967f85cf8b075d443da104ae5098b866253d3747af796b6a4d7f0d5f2c06554a5d264ed1eb90bf1bef146c2a7e472b4d8188caa20605746f0bf1e14071017a96d223f47408f794d79307e44ff4285dbfd58148427512f1864d464240e639f5aef2fce190d7167920b29a7ad4c48520aabd77e34b865244bd4ab7091f6449c6caa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0861}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbdf5934}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')){\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9681}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#!+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':/!@\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x308}}, 0x8080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d80), r0) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000002000)={&(0x7f0000001d40), 0xc, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x1f8, r8, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3d1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa8e}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44c4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2910cb6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8e2}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002040)) r9 = memfd_secret(0x80000) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000002080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000020c0)=0x24) sendmsg$AUDIT_TTY_GET(r9, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x10, 0x3f8, 0x400, 0x70bd25, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) memfd_create(&(0x7f0000002200)='\x00', 0x6) sendmsg$nl_generic(r9, &(0x7f00000025c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f0000002280)={0x2f8, 0x3e, 0x200, 0x70bd29, 0x25dfdbfe, {0x14}, [@typed={0xc8, 0x145, 0x0, 0x0, @binary="7036bc7629e750b48889c56c1aac09141ea71d3649da2aff552c20d21f494dc59e8922a85fbd1e1e57133e9cb10566fbefc7326784ea91aea5530699bc463d6f2530d75d5f4898dbd479737e264e4df5a5360f47e7d31871874ea29d2e7fca1675703cfe138bcd56b1d0d32ec46960bf69172d64d5cb6acc7ebc1e68cc2e6a74fd09b518e3926dd7e90450d010ea66240103e8660b528e7c82ea68face3851092de20f663ecaf144c318d08502f3fc599ea359f723fae76cd4c57bf74287bdfea30a50a8"}, @nested={0x212, 0x10f, 0x0, 0x1, [@generic="6323cc930d8bbfd9ed9b49f6d353f77b95054453a6c79126cf3a124cd1514fd4a111d0c49779c57fc9fd24c5c3bbc265ff1add7b75a669e4cb857a129d6ceb07833165b6744badea93907f96b1f5460b8677fabe9ca9f3bc61c8a53c7d84acd2ef43208f07b498fc08370e6224352bb51b571642fce17f5bf42d68bf9d2ff6b7e3425b5a126f86532371e19de0b2d8ec08af5e13da44c4c1f8a62a4cce9ecd431ae6fe4fd226fb87d6d2772257287c694f915fcc32eb4e9e1aab6e77cab9e3acddfd113b16c7524f358f8f8e4ce3425248aaf1c9ea2775", @nested={0x4, 0x149}, @generic="8cb78ff5c2f0e4a7e95b114702fb6b21c3a4ddbb6dbac2c2c08243ae47bed9d3c206748810ac1dac123072409375149dc56c2f19c62afdf1a36af1e4324ad43d5ab9712916ab539651aeae41016d742d4e8f93a21b34d8d3503cab6df5cd9c6e1afd0469eb51b38fecd7f9f7c9860d53cb245dd9536b6b8e0be83713bce37f5063077fac361be8066d7b6c33af0892b5d1e05e832fb251883e60cd", @generic="4216a379add18237f1d9f559a51f9f33f6e3e4d8dca1ff2c86ff44fde921c632afb440fa17e30b456bc8d6f0472d013805566310c2ac8c3ccd67ea898f0153e13f041f38850ae5581a93a8a11742f576d9e5b48945799d838535c55b2b2926611b79188cc4a3639a7efc9334cffbbd13daca6b5fe6545f23b04ebe16c0e7126dc8e9dee10caae9d72fc0cc769a2741b496c3d712d6847377"]}, @typed={0x8, 0xbe, 0x0, 0x0, @str=')){\x00'}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x1}, 0x4c940) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000002600)={{0x1, 0x1, 0x18, r10, {0xee01, 0xee00}}, './file0\x00'}) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f00000026c0)=@usbdevfs_driver={0x1, 0xa, &(0x7f0000002640)="57fd4a8e46e061295104ea6a2f91c36f317fc337f58b086f98c0f04b5d34b778acb082e84d82c3367021c80d0bfb0ccbe39b9ef29c153faa596a243ce59e937a384d18b7c29e59fa8451d1eb553bdd69eb7e2065e79d4733d98475f5bddd4ebd498de64d9a6177e9e2bb63acf166e7bc26d64608763b7f10"}) setsockopt$inet6_int(r11, 0x29, 0x1, &(0x7f0000002700)=0xb, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000002740)=[@in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}], 0x20) sendmsg$NFT_BATCH(r9, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0xd0) r12 = openat$audio1(0xffffffffffffff9c, &(0x7f00000028c0), 0x10001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r12, 0xc0045006, &(0x7f0000002900)=0x4) eventfd2(0x2, 0x80000) 1.457169051s ago: executing program 0 (id=6098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600030000eb"], 0x1c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x208100, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x1, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x400000, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_deladdr={0x2c, 0x15, 0x400, 0x70bd2d, 0x25dfdbfb, {0xa, 0x10, 0xa, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc72e2dfb071b6161) 1.094112413s ago: executing program 7 (id=6099): openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x0) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x6) r3 = dup(r2) fanotify_mark(r1, 0x1, 0x48001059, r3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000021000100000000000021000000000000000000000000fffffffffffffe80000000000000000000000000002c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004001100"], 0x54}}, 0x0) alarm(0x9) r6 = openat(r3, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) read$FUSE(r7, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x2, r8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) 937.07645ms ago: executing program 5 (id=6100): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x17}, 0x1c) (async) preadv(r0, &(0x7f0000000980)=[{&(0x7f0000000540)=""/17, 0x11}, {0x0}], 0x2, 0x5, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x50, r5, 0x6ce5e000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x58, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async, rerun: 32) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, 0x0) (rerun: 32) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r9, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r10}) 867.363098ms ago: executing program 3 (id=6101): r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x9544, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r6 = dup(r2) read$FUSE(r6, &(0x7f0000003c40)={0x2020}, 0xffffff0a) write$char_usb(r6, &(0x7f00000000c0)="768b4e6bd7b1e3e355d20d34c0c8a9e4577d437a7c368dbc49bcb3b2ac7d0a7a3fa8004e359e0ba87f09e453743ba4e96538b4f79ff47bdd9d329ccb33ba42c6c99d65386e9d8fe1f78315d80e35f6ab188b20", 0x53) rt_sigaction(0x4, &(0x7f0000000040)={0x0, 0x0, 0x0, {[0x21]}}, 0x0, 0x8, &(0x7f00000002c0)) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 743.00074ms ago: executing program 6 (id=6102): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c00"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 632.474754ms ago: executing program 6 (id=6103): openat$sysfs(0xffffffffffffff9c, 0x0, 0x480180, 0x186) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0xf, {"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", 0xfffffffffffffe25}}, 0x1006) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85ff000000000000bc1010000000000904000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 217.273454ms ago: executing program 5 (id=6104): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e21, 0x285, @loopback, 0xff}}, 0x8, 0x7, 0x2, 0x8000, 0x7}, &(0x7f00000000c0)=0x98) (async, rerun: 64) close(0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040001}], 0x1, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r6, 0x8170}, 0x8) 155.477628ms ago: executing program 5 (id=6105): r0 = epoll_create(0x3) epoll_pwait(r0, &(0x7f0000000480)=[{}], 0x1, 0xbe, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0xfffffff8, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) close(r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x10000000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000300)="ef", 0x1, 0x4000000, &(0x7f0000000380)={0xa, 0x4e21, 0x7ff, @loopback, 0x429}, 0x1c) 0s ago: executing program 3 (id=6106): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2f69c2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x20000000000000c9, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r3], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): bute type 10 has an invalid length. [ 1466.902075][ T4220] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1466.912991][ T4220] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1466.925533][ T4220] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1467.061453][T18349] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1467.132113][ T4265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5554'. [ 1467.224168][T18349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.235646][T18349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.246049][T18349] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1467.255372][T18349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.278032][T18349] usb 4-1: config 0 descriptor?? [ 1467.445087][ T4262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.463469][ T4262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.757246][T18349] usbhid 4-1:0.0: can't add hid device: -71 [ 1467.767466][T18349] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1467.793706][T18349] usb 4-1: USB disconnect, device number 107 [ 1468.808141][T11781] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1468.859703][ T5970] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1468.891211][ T4309] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5560'. [ 1468.902954][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5560'. [ 1468.912891][ T4309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5560'. [ 1469.029492][ T5970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.204521][ T5970] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1469.226350][T11781] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1469.237629][ T5970] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1469.254669][T11781] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1469.262094][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.360821][T11781] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1469.374233][ T5970] usb 6-1: config 0 descriptor?? [ 1469.428918][T11781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.480739][ T5970] usb 7-1: USB disconnect, device number 7 [ 1469.787823][T11781] usb 2-1: Product: syz [ 1469.792073][T11781] usb 2-1: Manufacturer: syz [ 1469.804611][T11781] usb 2-1: SerialNumber: syz [ 1469.816782][T11781] usb 2-1: config 0 descriptor?? [ 1469.836801][T11781] usb 2-1: selecting invalid altsetting 0 [ 1469.987325][ T4343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.095914][ T4343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.689470][T11781] usb 6-1: USB disconnect, device number 88 [ 1470.955737][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5565'. [ 1471.470135][ T4384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.631866][ T4384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.728180][T17412] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1471.899765][T17412] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1471.909272][T17412] usb 6-1: config 6 has an invalid interface number: 200 but max is 0 [ 1471.917647][T17412] usb 6-1: config 6 has no interface number 0 [ 1471.937158][T17412] usb 6-1: config 6 interface 200 has no altsetting 0 [ 1471.977113][T17412] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1471.994050][T17412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.005475][T17412] usb 6-1: Product: syz [ 1472.012031][T17412] usb 6-1: Manufacturer: syz [ 1472.016853][T17412] usb 6-1: SerialNumber: syz [ 1472.086893][ T24] usb 2-1: USB disconnect, device number 32 [ 1472.930711][ T4426] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1472.944629][ T4426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1472.954809][ T4426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1473.148917][T17412] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1473.172223][T17412] dvb-usb: bulk message failed: -71 (3/0) [ 1473.236184][T17412] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1473.277312][T17412] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1473.310011][T17412] usb 6-1: media controller created [ 1473.361935][T17412] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1473.414752][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5577'. [ 1473.465847][T17412] dvb-usb: bulk message failed: -71 (6/0) [ 1473.493047][T17412] dvb-usb: bulk message failed: -71 (6/0) [ 1473.517765][T17412] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1473.606112][T17412] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input87 [ 1473.767961][T17412] dvb-usb: schedule remote query interval to 150 msecs. [ 1473.851317][T17412] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1473.949150][T17412] usb 6-1: USB disconnect, device number 89 [ 1474.001757][ T4461] binder: 4460:4461 ioctl c0046209 0 returned -22 [ 1474.070812][T17412] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1475.549436][T17412] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1475.731615][T17412] usb 6-1: config 0 has an invalid interface number: 248 but max is 16 [ 1475.740297][T17412] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1475.759843][T17412] usb 6-1: config 0 has no interface number 0 [ 1475.774435][T17412] usb 6-1: config 0 interface 248 has no altsetting 0 [ 1475.793460][T17412] usb 6-1: New USB device found, idVendor=0582, idProduct=098d, bcdDevice=10.00 [ 1475.802937][T17412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.817373][T17412] usb 6-1: Product: syz [ 1475.833094][T17412] usb 6-1: Manufacturer: syz [ 1475.838275][T17412] usb 6-1: SerialNumber: syz [ 1475.858637][T17412] usb 6-1: config 0 descriptor?? [ 1475.911480][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5587'. [ 1476.075729][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5588'. [ 1476.176789][ T4503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.188056][ T4503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.845408][ T30] audit: type=1326 audit(1750109675.462:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abbd8e929 code=0x7ffc0000 [ 1476.933198][ T30] audit: type=1326 audit(1750109675.492:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f6abbd8e929 code=0x7ffc0000 [ 1477.006950][ T30] audit: type=1326 audit(1750109675.492:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abbd8e929 code=0x7ffc0000 [ 1477.082091][ T30] audit: type=1326 audit(1750109675.492:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6abbd8e929 code=0x7ffc0000 [ 1477.117669][T18347] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1477.185422][ T4532] netlink: 268 bytes leftover after parsing attributes in process `syz.6.5595'. [ 1477.207768][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5595'. [ 1477.218907][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5595'. [ 1477.274245][ T30] audit: type=1326 audit(1750109675.492:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abbd8e929 code=0x7ffc0000 [ 1477.321706][ T30] audit: type=1326 audit(1750109675.492:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abbd8e929 code=0x7ffc0000 [ 1477.437569][T18347] usb 2-1: Using ep0 maxpacket: 16 [ 1477.446105][T18347] usb 2-1: config 13 has an invalid interface number: 56 but max is 1 [ 1477.455066][T18347] usb 2-1: config 13 has no interface number 1 [ 1477.461725][ T30] audit: type=1326 audit(1750109675.492:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6abbd8d290 code=0x7ffc0000 [ 1477.487592][ T30] audit: type=1326 audit(1750109675.492:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6abbd8e52b code=0x7ffc0000 [ 1477.510468][T18347] usb 2-1: config 13 interface 56 has no altsetting 0 [ 1477.517134][ T30] audit: type=1326 audit(1750109675.492:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6abbd8e52b code=0x7ffc0000 [ 1477.541663][T18347] usb 2-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=65.93 [ 1477.558433][T18347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.566597][T18347] usb 2-1: Product: syz [ 1477.575500][T18347] usb 2-1: Manufacturer: syz [ 1477.586818][ T30] audit: type=1326 audit(1750109675.512:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6abbd8e52b code=0x7ffc0000 [ 1477.617253][T18347] usb 2-1: SerialNumber: syz [ 1478.281951][T18347] usb 2-1: USB disconnect, device number 33 [ 1478.356317][T17412] usb 6-1: USB disconnect, device number 90 [ 1478.706558][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5600'. [ 1478.852729][ T4574] input: syz0 as /devices/virtual/input/input88 [ 1478.913762][ T4580] vlan2: entered allmulticast mode [ 1479.364095][ T4631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5607'. [ 1479.407908][T17412] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1479.615850][T17412] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 1479.641173][T17412] usb 6-1: config 0 has no interface number 0 [ 1479.666200][T17412] usb 6-1: config 0 interface 160 has no altsetting 0 [ 1479.704513][T17412] usb 6-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1479.727560][T17412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.756172][T17412] usb 6-1: Product: syz [ 1479.772798][T17412] usb 6-1: Manufacturer: syz [ 1479.782921][T17412] usb 6-1: SerialNumber: syz [ 1479.795830][T17412] usb 6-1: config 0 descriptor?? [ 1479.829973][T17412] usb-storage 6-1:0.160: USB Mass Storage device detected [ 1480.237596][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1480.265100][T17412] usb 6-1: USB disconnect, device number 91 [ 1480.344366][ T4677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.374983][ T4677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.387734][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1480.567513][T18347] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1480.716904][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1480.764280][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54240, setting to 1024 [ 1480.767662][T18347] usb 4-1: Using ep0 maxpacket: 16 [ 1480.777134][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1480.802355][T18347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.822127][T18347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.827476][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1480.890660][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1480.900387][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.908271][T18347] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1480.913263][ T24] usb 7-1: Product: syz [ 1480.941157][ T24] usb 7-1: Manufacturer: syz [ 1480.944760][T18347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.998451][ T24] usb 7-1: SerialNumber: syz [ 1481.036767][T18347] usb 4-1: config 0 descriptor?? [ 1481.050835][ T4649] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1481.115443][ T4649] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1481.324388][T18347] usbhid 4-1:0.0: can't add hid device: -71 [ 1481.382691][T18347] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1481.421457][ T24] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1481.590288][ T24] usbtest 7-1:1.0: Linux user mode ISO test driver [ 1481.596734][T18347] usb 4-1: USB disconnect, device number 108 [ 1481.612734][ T24] usbtest 7-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1481.643773][ T24] usb 7-1: USB disconnect, device number 8 [ 1482.056871][ T3498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1482.120353][ T3498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.271103][ T3498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1482.317774][ T3498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.415896][ T3498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1482.487530][ T3498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.501449][ T4690] delete_channel: no stack [ 1482.702117][ T3498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1482.774501][ T3498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.554864][ T3498] bridge_slave_1: left allmulticast mode [ 1483.567510][ T3498] bridge_slave_1: left promiscuous mode [ 1483.601556][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.619724][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5626'. [ 1483.644186][ T3498] bridge_slave_0: left allmulticast mode [ 1483.671403][ T3498] bridge_slave_0: left promiscuous mode [ 1483.687852][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.945648][T16823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1483.959848][T16823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1483.969634][T16823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1483.990346][T16823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1484.000064][T16823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1484.067844][T18349] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1484.284799][T18349] usb 7-1: Using ep0 maxpacket: 16 [ 1484.329357][T18349] usb 7-1: config 0 has an invalid interface number: 180 but max is 0 [ 1484.355786][T18349] usb 7-1: config 0 has no interface number 0 [ 1484.376478][T18349] usb 7-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 1484.412687][T18349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.428356][T18349] usb 7-1: Product: syz [ 1484.449804][T18349] usb 7-1: Manufacturer: syz [ 1484.454461][T18349] usb 7-1: SerialNumber: syz [ 1484.461764][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.468501][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.669750][T18349] usb 7-1: config 0 descriptor?? [ 1484.696837][T18349] usb 7-1: bad CDC descriptors [ 1484.781654][ T4813] i2c i2c-0: Invalid block write size 34 [ 1484.960798][ T3498] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1485.082503][ T3498] bond2 (unregistering): (slave gretap2): Releasing active interface [ 1485.743265][T18347] usb 7-1: USB disconnect, device number 9 [ 1486.061809][T16823] Bluetooth: hci2: command tx timeout [ 1486.074429][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.084685][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.095282][ T3498] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1486.104876][ T3498] bond0 (unregistering): Released all slaves [ 1486.241077][ T3498] bond1 (unregistering): Released all slaves [ 1486.433808][ T4836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5632'. [ 1486.488728][ T3498] bond2 (unregistering): Released all slaves [ 1486.630588][ T3498] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1486.640940][ T3498] bond3 (unregistering): Released all slaves [ 1486.656622][ T3498] bond4 (unregistering): Released all slaves [ 1487.187557][T11781] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1487.349947][T11781] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1487.405230][T11781] usb 7-1: config 65 has too many interfaces: 228, using maximum allowed: 32 [ 1487.475729][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5636'. [ 1487.497885][T11781] usb 7-1: config 65 has 1 interface, different from the descriptor's value: 228 [ 1487.526315][T11781] usb 7-1: config 65 has no interface number 0 [ 1487.553667][T11781] usb 7-1: config 65 interface 221 has no altsetting 0 [ 1487.589943][T11781] usb 7-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=e7.b4 [ 1487.637653][T11781] usb 7-1: New USB device strings: Mfr=129, Product=2, SerialNumber=11 [ 1487.701608][T11781] usb 7-1: Product: syz [ 1487.705829][T11781] usb 7-1: Manufacturer: syz [ 1487.748347][T11781] usb 7-1: SerialNumber: syz [ 1487.795704][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.821486][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.886191][ T3498] pimreg (unregistering): left allmulticast mode [ 1488.149522][T16823] Bluetooth: hci2: command tx timeout [ 1488.220346][ T4952] binfmt_misc: register: failed to install interpreter file ./file0 [ 1488.231050][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.279061][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.981170][T11781] belkin_sa 7-1:65.221: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1490.005187][T11781] usb 7-1: bcdDevice: e7b4, bfc: 0 [ 1490.013360][T11781] usb 7-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1490.028883][T11781] usb 7-1: USB disconnect, device number 10 [ 1490.066211][T11781] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1490.088077][T11781] belkin_sa 7-1:65.221: device disconnected [ 1490.218188][T16823] Bluetooth: hci2: command tx timeout [ 1490.603255][ T5034] netlink: 268 bytes leftover after parsing attributes in process `syz.5.5640'. [ 1490.623066][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5640'. [ 1490.633394][ T5034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5640'. [ 1490.723725][ T4798] chnl_net:caif_netlink_parms(): no params data found [ 1491.208237][ T5100] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1491.208237][ T5100] The task syz.5.5643 (5100) triggered the difference, watch for misbehavior. [ 1491.301010][ T4798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.311544][ T4798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.320384][ T4798] bridge_slave_0: entered allmulticast mode [ 1491.333158][ T4798] bridge_slave_0: entered promiscuous mode [ 1491.350769][ T4798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.360121][ T4798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.370831][ T4798] bridge_slave_1: entered allmulticast mode [ 1491.383982][ T4798] bridge_slave_1: entered promiscuous mode [ 1491.417583][T11781] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1491.499088][ T3498] IPVS: stop unused estimator thread 0... [ 1491.507044][ T4798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.518176][T18347] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1491.553899][ T4798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.584983][T11781] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1491.615498][T11781] usb 4-1: not running at top speed; connect to a high speed hub [ 1491.643058][T11781] usb 4-1: config 8 has an invalid interface number: 253 but max is 0 [ 1491.672649][T11781] usb 4-1: config 8 has no interface number 0 [ 1491.683853][T11781] usb 4-1: config 8 interface 253 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1491.699587][T11781] usb 4-1: config 8 interface 253 has no altsetting 0 [ 1491.712949][T11781] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=1d.a7 [ 1491.732391][T18347] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.735748][T11781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.757377][ T4798] team0: Port device team_slave_0 added [ 1491.757897][T11781] usb 4-1: Product: syz [ 1491.775648][T18347] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1491.782692][T11781] usb 4-1: Manufacturer: syz [ 1491.796683][T11781] usb 4-1: SerialNumber: syz [ 1491.802592][ T4798] team0: Port device team_slave_1 added [ 1491.812964][T18347] usb 6-1: config 1 has no interface number 1 [ 1491.829302][T18347] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1491.860017][T18347] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1491.878568][T18347] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1491.893858][T18347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.917121][T18347] usb 6-1: Product: syz [ 1491.935847][T18347] usb 6-1: Manufacturer: syz [ 1491.956005][T18347] usb 6-1: SerialNumber: syz [ 1491.970457][ T4798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.002529][ T4798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1492.084384][ T4798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.125392][ T4798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.144381][ T4798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1492.202530][ T5100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.211027][ T4798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.258399][ T5100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.309655][T16823] Bluetooth: hci2: command tx timeout [ 1492.310067][T11781] usb 4-1: USB disconnect, device number 109 [ 1492.591338][ T4798] hsr_slave_0: entered promiscuous mode [ 1492.599542][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5647'. [ 1492.605641][ T4798] hsr_slave_1: entered promiscuous mode [ 1492.633402][ T4798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1492.641449][ T4798] Cannot create hsr debugfs directory [ 1492.957997][T18349] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 1493.030291][ T5312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1493.135978][T18349] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1493.147287][T18349] usb 7-1: config 0 has no interface number 0 [ 1493.189809][T18349] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1493.233381][T18349] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1493.277584][T18349] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1493.389884][T18349] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1493.404595][T18349] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1493.427773][T18349] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1493.447533][T18349] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1493.456969][T18349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.486407][T18349] usb 7-1: config 0 descriptor?? [ 1493.494134][ T5267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1493.503129][ T5267] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1493.523546][T18349] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1493.713031][ T4798] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1493.719633][T18349] usb 7-1: USB disconnect, device number 11 [ 1493.749948][T18349] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1493.793394][ T4798] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1493.828523][ T4798] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1493.844035][ T4798] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1494.221024][ T4798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.282154][T18347] usb 6-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1494.373084][ T4798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.386581][T18347] usb 6-1: USB disconnect, device number 93 [ 1494.504442][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.511820][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.586893][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.594281][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.812173][T18347] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1494.847136][ T4798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1494.901210][ T4798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1495.007600][T18347] usb 6-1: Using ep0 maxpacket: 8 [ 1495.029151][T18347] usb 6-1: config 0 has an invalid interface number: 82 but max is 0 [ 1495.040225][T18347] usb 6-1: config 0 has no interface number 0 [ 1495.066844][T18347] usb 6-1: New USB device found, idVendor=19d2, idProduct=0008, bcdDevice= e.07 [ 1495.098535][T18347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.106798][T18347] usb 6-1: Product: syz [ 1495.116655][T18347] usb 6-1: Manufacturer: syz [ 1495.135683][T18347] usb 6-1: SerialNumber: syz [ 1495.156687][T18347] usb 6-1: config 0 descriptor?? [ 1495.169126][ T4798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.209079][T18347] option 6-1:0.82: GSM modem (1-port) converter detected [ 1495.543454][T18347] usb 6-1: USB disconnect, device number 94 [ 1495.555728][ T4798] veth0_vlan: entered promiscuous mode [ 1495.648327][T18347] option 6-1:0.82: device disconnected [ 1495.719954][ T4798] veth1_vlan: entered promiscuous mode [ 1495.914339][ T4798] veth0_macvtap: entered promiscuous mode [ 1495.979008][ T4798] veth1_macvtap: entered promiscuous mode [ 1496.319642][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.382698][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.447202][ T4798] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.494555][ T4798] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.537936][ T4798] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.546899][ T4798] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.708739][ T9] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1496.828470][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.843847][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.874938][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.883907][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.913789][ T9] usb 6-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 1496.937807][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.969704][ T9] usb 6-1: Product: syz [ 1496.978775][ T9] usb 6-1: Manufacturer: syz [ 1497.003821][ T9] usb 6-1: SerialNumber: syz [ 1497.028737][ T9] usb 6-1: config 0 descriptor?? [ 1497.083767][ T9] rndis_host 6-1:0.0: More than one union descriptor, skipping ... [ 1497.122939][ T9] usb 6-1: bad CDC descriptors [ 1497.140431][ T9] cdc_acm 6-1:0.0: More than one union descriptor, skipping ... [ 1497.288802][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.327692][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 1497.337204][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.386441][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1497.386460][ T30] audit: type=1326 audit(1750109696.002:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.5.5655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x0 [ 1497.659052][ T5531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1497.706944][T18347] usb 6-1: USB disconnect, device number 95 [ 1497.734229][ T5532] syz_tun: entered promiscuous mode [ 1498.657718][T11781] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 1498.797643][T11781] usb 4-1: device descriptor read/64, error -71 [ 1499.047602][T11781] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 1499.125702][ T5656] tap0: tun_chr_ioctl cmd 1074025677 [ 1499.134631][ T5656] tap0: linktype set to 776 [ 1499.187683][T11781] usb 4-1: device descriptor read/64, error -71 [ 1499.329980][T11781] usb usb4-port1: attempt power cycle [ 1499.392538][ T5665] program syz.0.5664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1499.687833][T11781] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 1499.899737][T11781] usb 4-1: device descriptor read/8, error -71 [ 1500.138877][T11781] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 1500.158808][T11781] usb 4-1: device descriptor read/8, error -71 [ 1500.270702][T11781] usb usb4-port1: unable to enumerate USB device [ 1500.597352][ T5684] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1500.635438][ T5684] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1500.930791][T18347] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1501.118278][T18347] usb 7-1: device descriptor read/64, error -71 [ 1501.378039][T18347] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1501.547869][T18347] usb 7-1: device descriptor read/64, error -71 [ 1501.671294][T18347] usb usb7-port1: attempt power cycle [ 1501.729536][ T5731] FAULT_INJECTION: forcing a failure. [ 1501.729536][ T5731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1501.805495][ T5731] CPU: 1 UID: 0 PID: 5731 Comm: syz.3.5673 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 1501.805524][ T5731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1501.805537][ T5731] Call Trace: [ 1501.805546][ T5731] [ 1501.805555][ T5731] dump_stack_lvl+0x189/0x250 [ 1501.805601][ T5731] ? __pfx____ratelimit+0x10/0x10 [ 1501.805631][ T5731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1501.805659][ T5731] ? __pfx__printk+0x10/0x10 [ 1501.805682][ T5731] ? fs_reclaim_acquire+0x7d/0x100 [ 1501.805714][ T5731] should_fail_ex+0x414/0x560 [ 1501.805745][ T5731] prepare_alloc_pages+0x213/0x610 [ 1501.805777][ T5731] __alloc_frozen_pages_noprof+0x123/0x370 [ 1501.805806][ T5731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1501.805841][ T5731] ? policy_nodemask+0x27c/0x720 [ 1501.805867][ T5731] alloc_pages_mpol+0x232/0x4a0 [ 1501.805894][ T5731] vma_alloc_folio_noprof+0xe4/0x200 [ 1501.805913][ T5731] ? __perf_event_task_sched_in+0xec/0x17e0 [ 1501.805945][ T5731] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1501.805978][ T5731] folio_prealloc+0x30/0x180 [ 1501.806001][ T5731] do_wp_page+0x1231/0x5800 [ 1501.806053][ T5731] ? __pfx_do_wp_page+0x10/0x10 [ 1501.806078][ T5731] ? do_raw_spin_lock+0x121/0x290 [ 1501.806104][ T5731] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1501.806135][ T5731] __handle_mm_fault+0x1144/0x5620 [ 1501.806182][ T5731] ? __pfx___handle_mm_fault+0x10/0x10 [ 1501.806232][ T5731] ? find_vma+0xe7/0x160 [ 1501.806250][ T5731] ? __pfx_find_vma+0x10/0x10 [ 1501.806271][ T5731] handle_mm_fault+0x40a/0x8e0 [ 1501.806311][ T5731] do_user_addr_fault+0x764/0x1390 [ 1501.806354][ T5731] exc_page_fault+0x76/0xf0 [ 1501.806384][ T5731] asm_exc_page_fault+0x26/0x30 [ 1501.806404][ T5731] RIP: 0010:__put_user_4+0xd/0x20 [ 1501.806432][ T5731] Code: 66 89 01 31 c9 0f 01 ca e9 00 32 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 31 03 00 90 90 90 90 90 90 90 90 90 90 [ 1501.806451][ T5731] RSP: 0018:ffffc900035ffbb8 EFLAGS: 00050206 [ 1501.806469][ T5731] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000006000 [ 1501.806483][ T5731] RDX: 0000000000000000 RSI: ffffffff8db6e88e RDI: ffffffff8be28a00 [ 1501.806497][ T5731] RBP: ffffc900035ffee0 R08: 0000000000000000 R09: ffffffff820c5110 [ 1501.806512][ T5731] R10: dffffc0000000000 R11: ffffed10060ff437 R12: 0000200000000000 [ 1501.806526][ T5731] R13: 1ffff920006bff90 R14: 0000000000000000 R15: 00000000fffffff2 [ 1501.806547][ T5731] ? __might_fault+0xb0/0x130 [ 1501.806580][ T5731] __se_sys_move_pages+0xcb9/0x16d0 [ 1501.806625][ T5731] ? __pfx___se_sys_move_pages+0x10/0x10 [ 1501.806649][ T5731] ? ksys_write+0x1cb/0x250 [ 1501.806672][ T5731] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1501.806692][ T5731] ? __pfx_vfs_write+0x10/0x10 [ 1501.806725][ T5731] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1501.806748][ T5731] ? __fget_files+0x3a0/0x420 [ 1501.806787][ T5731] ? __pfx_ksys_write+0x10/0x10 [ 1501.806804][ T5731] ? rcu_is_watching+0x15/0xb0 [ 1501.806838][ T5731] ? __x64_sys_move_pages+0x21/0xf0 [ 1501.806866][ T5731] do_syscall_64+0xfa/0x3b0 [ 1501.806883][ T5731] ? lockdep_hardirqs_on+0x9c/0x150 [ 1501.806911][ T5731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.806930][ T5731] ? clear_bhb_loop+0x60/0xb0 [ 1501.806954][ T5731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.806973][ T5731] RIP: 0033:0x7fe29018e929 [ 1501.806990][ T5731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1501.807007][ T5731] RSP: 002b:00007fe291019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1501.807026][ T5731] RAX: ffffffffffffffda RBX: 00007fe2903b5fa0 RCX: 00007fe29018e929 [ 1501.807041][ T5731] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 1501.807054][ T5731] RBP: 00007fe291019090 R08: 0000200000000000 R09: 0000000000000000 [ 1501.807067][ T5731] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 1501.807079][ T5731] R13: 0000000000000000 R14: 00007fe2903b5fa0 R15: 00007fe2904dfa28 [ 1501.807110][ T5731] [ 1502.387505][T18347] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1502.430871][T18347] usb 7-1: device descriptor read/8, error -71 [ 1502.699751][T18347] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1502.754680][T18347] usb 7-1: device descriptor read/8, error -71 [ 1502.896944][T18347] usb usb7-port1: unable to enumerate USB device [ 1503.056962][ T5762] bond1: entered promiscuous mode [ 1503.062542][ T5762] bond1: entered allmulticast mode [ 1503.069109][ T5762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1503.217526][T18347] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1503.547149][T18347] usb 6-1: Using ep0 maxpacket: 16 [ 1503.590657][T18347] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1503.599560][T18347] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1503.687683][T18347] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1503.816622][T18347] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1503.899801][T18347] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1503.951819][T18347] usb 6-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.40 [ 1504.017523][T18347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.199339][T18347] usb 6-1: Product: syz [ 1504.203581][T18347] usb 6-1: Manufacturer: syz [ 1504.217779][T18347] usb 6-1: SerialNumber: syz [ 1504.257565][ T5767] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1505.260887][T18347] usbhid 6-1:1.0: can't add hid device: -71 [ 1505.588207][T18347] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1505.630237][T18347] usb 6-1: USB disconnect, device number 96 [ 1506.025528][ T5899] FAULT_INJECTION: forcing a failure. [ 1506.025528][ T5899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1506.090833][ T5899] CPU: 0 UID: 0 PID: 5899 Comm: syz.0.5684 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 1506.090862][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1506.090873][ T5899] Call Trace: [ 1506.090882][ T5899] [ 1506.090891][ T5899] dump_stack_lvl+0x189/0x250 [ 1506.090922][ T5899] ? __pfx____ratelimit+0x10/0x10 [ 1506.090950][ T5899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1506.090987][ T5899] ? __pfx__printk+0x10/0x10 [ 1506.091008][ T5899] ? fs_reclaim_acquire+0x7d/0x100 [ 1506.091038][ T5899] should_fail_ex+0x414/0x560 [ 1506.091066][ T5899] prepare_alloc_pages+0x213/0x610 [ 1506.091093][ T5899] __alloc_frozen_pages_noprof+0x123/0x370 [ 1506.091119][ T5899] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1506.091150][ T5899] ? policy_nodemask+0x27c/0x720 [ 1506.091175][ T5899] alloc_pages_mpol+0x232/0x4a0 [ 1506.091199][ T5899] vma_alloc_folio_noprof+0xe4/0x200 [ 1506.091221][ T5899] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1506.091251][ T5899] folio_prealloc+0x30/0x180 [ 1506.091271][ T5899] do_wp_page+0x1231/0x5800 [ 1506.091318][ T5899] ? __pfx_do_wp_page+0x10/0x10 [ 1506.091343][ T5899] ? do_raw_spin_lock+0x121/0x290 [ 1506.091363][ T5899] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1506.091394][ T5899] __handle_mm_fault+0x1144/0x5620 [ 1506.091435][ T5899] ? __pfx___handle_mm_fault+0x10/0x10 [ 1506.091484][ T5899] ? find_vma+0xe7/0x160 [ 1506.091501][ T5899] ? __pfx_find_vma+0x10/0x10 [ 1506.091522][ T5899] handle_mm_fault+0x40a/0x8e0 [ 1506.091561][ T5899] do_user_addr_fault+0x764/0x1390 [ 1506.091601][ T5899] exc_page_fault+0x76/0xf0 [ 1506.091631][ T5899] asm_exc_page_fault+0x26/0x30 [ 1506.091647][ T5899] RIP: 0010:__put_user_4+0xd/0x20 [ 1506.091675][ T5899] Code: 66 89 01 31 c9 0f 01 ca e9 00 32 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 31 03 00 90 90 90 90 90 90 90 90 90 90 [ 1506.091691][ T5899] RSP: 0018:ffffc90003577bb8 EFLAGS: 00050206 [ 1506.091708][ T5899] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000007000 [ 1506.091722][ T5899] RDX: 0000000000000000 RSI: ffffffff8db6e88e RDI: ffffffff8be28a00 [ 1506.091736][ T5899] RBP: ffffc90003577ee0 R08: 0000000000000000 R09: ffffffff820c5110 [ 1506.091749][ T5899] R10: dffffc0000000000 R11: ffffed10090a383f R12: 0000200000000000 [ 1506.091764][ T5899] R13: 1ffff920006aef90 R14: 0000000000000000 R15: 00000000fffffff2 [ 1506.091781][ T5899] ? __might_fault+0xb0/0x130 [ 1506.091806][ T5899] __se_sys_move_pages+0xcb9/0x16d0 [ 1506.091849][ T5899] ? __pfx___se_sys_move_pages+0x10/0x10 [ 1506.091873][ T5899] ? ksys_write+0x1cb/0x250 [ 1506.091894][ T5899] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1506.091914][ T5899] ? __pfx_vfs_write+0x10/0x10 [ 1506.091945][ T5899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1506.091975][ T5899] ? __fget_files+0x3a0/0x420 [ 1506.092013][ T5899] ? __pfx_ksys_write+0x10/0x10 [ 1506.092029][ T5899] ? rcu_is_watching+0x15/0xb0 [ 1506.092062][ T5899] ? __x64_sys_move_pages+0x21/0xf0 [ 1506.092087][ T5899] do_syscall_64+0xfa/0x3b0 [ 1506.092103][ T5899] ? lockdep_hardirqs_on+0x9c/0x150 [ 1506.092130][ T5899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.092147][ T5899] ? clear_bhb_loop+0x60/0xb0 [ 1506.092170][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.092189][ T5899] RIP: 0033:0x7febba18e929 [ 1506.092205][ T5899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1506.092221][ T5899] RSP: 002b:00007febbb06c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1506.092240][ T5899] RAX: ffffffffffffffda RBX: 00007febba3b5fa0 RCX: 00007febba18e929 [ 1506.092252][ T5899] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 1506.092264][ T5899] RBP: 00007febbb06c090 R08: 0000200000000000 R09: 0000000000000000 [ 1506.092278][ T5899] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 1506.092291][ T5899] R13: 0000000000000000 R14: 00007febba3b5fa0 R15: 00007febba4dfa28 [ 1506.092317][ T5899] [ 1506.657868][T18349] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1506.837640][T18349] usb 4-1: Using ep0 maxpacket: 32 [ 1506.856286][T18349] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1506.923109][T18349] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1507.126646][T18349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1507.167583][T18349] usb 4-1: config 1 has no interface number 0 [ 1507.176646][T18349] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1507.222341][T18349] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1507.263438][T18349] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1507.274213][T18349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.336057][T18349] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1507.493640][T18349] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1507.993889][T18349] usb 4-1: USB disconnect, device number 114 [ 1508.033968][T18349] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1508.329725][T11781] usb 6-1: new low-speed USB device number 97 using dummy_hcd [ 1508.487783][T11781] usb 6-1: device descriptor read/64, error -71 [ 1508.769022][T11781] usb 6-1: new low-speed USB device number 98 using dummy_hcd [ 1509.033321][T11781] usb 6-1: device descriptor read/64, error -71 [ 1509.267842][T11782] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1509.318188][T11781] usb usb6-port1: attempt power cycle [ 1509.457670][T11782] usb 4-1: Using ep0 maxpacket: 16 [ 1509.471885][T11782] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 156, changing to 11 [ 1509.483654][T11782] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x2 has an invalid bInterval 218, changing to 11 [ 1509.497893][T11782] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1509.507247][T11782] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.40 [ 1509.519552][T11782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.542025][T11782] usb 4-1: Product: 뿇雙䭟ⶶã‹î°»à ³ï°€ê£­â¶’쟲钮㉮ᴡﳘɺშ蕒蕔悪닆ႎ警풼ϗ춿ኯٟ斆隆쉛ë›ì½Šêœ´ê’‹á–†î¼ë‚¡ãª»ä•¯ç«µëˆœé¥„둜㛨뛾颚郤ﰸ੥秤㦓⣃쥟竼樔ﻠढ芥㕲ë‰æ»¯é‹¬ëŸ”㟶ꇾ儩㘤ꨟ璘瘬꣘æ࿵Ⅸ㇜泚袮糖 [ 1509.572552][T11782] usb 4-1: Manufacturer: Ñ™ [ 1509.577186][T11782] usb 4-1: SerialNumber: ꅌ硷빭늰駪셯矌à¶á†´êµ³ã»’㵰颾鷔믧ꋵഃ럎᯴ã‘ç´µã漞ï­æ°ç¹‰æ•­ä‚“瓶ˆᧅ뱰ì¦à£¨ì¡§é’ [ 1509.697144][ T6025] FAULT_INJECTION: forcing a failure. [ 1509.697144][ T6025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1509.707799][T11781] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 1509.748526][T11781] usb 6-1: device descriptor read/8, error -71 [ 1509.767216][ T6025] CPU: 0 UID: 0 PID: 6025 Comm: syz.6.5697 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 1509.767244][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1509.767257][ T6025] Call Trace: [ 1509.767266][ T6025] [ 1509.767275][ T6025] dump_stack_lvl+0x189/0x250 [ 1509.767307][ T6025] ? __pfx____ratelimit+0x10/0x10 [ 1509.767334][ T6025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1509.767362][ T6025] ? __pfx__printk+0x10/0x10 [ 1509.767388][ T6025] ? fs_reclaim_acquire+0x7d/0x100 [ 1509.767417][ T6025] should_fail_ex+0x414/0x560 [ 1509.767446][ T6025] prepare_alloc_pages+0x213/0x610 [ 1509.767474][ T6025] __alloc_frozen_pages_noprof+0x123/0x370 [ 1509.767502][ T6025] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1509.767534][ T6025] ? policy_nodemask+0x27c/0x720 [ 1509.767558][ T6025] alloc_pages_mpol+0x232/0x4a0 [ 1509.767582][ T6025] vma_alloc_folio_noprof+0xe4/0x200 [ 1509.767605][ T6025] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1509.767637][ T6025] folio_prealloc+0x30/0x180 [ 1509.767659][ T6025] do_wp_page+0x1231/0x5800 [ 1509.767709][ T6025] ? __pfx_do_wp_page+0x10/0x10 [ 1509.767732][ T6025] ? do_raw_spin_lock+0x121/0x290 [ 1509.767766][ T6025] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1509.767798][ T6025] __handle_mm_fault+0x1144/0x5620 [ 1509.767846][ T6025] ? __pfx___handle_mm_fault+0x10/0x10 [ 1509.767894][ T6025] ? find_vma+0xe7/0x160 [ 1509.767909][ T6025] ? __pfx_find_vma+0x10/0x10 [ 1509.767930][ T6025] handle_mm_fault+0x40a/0x8e0 [ 1509.767969][ T6025] do_user_addr_fault+0x764/0x1390 [ 1509.768008][ T6025] exc_page_fault+0x76/0xf0 [ 1509.768039][ T6025] asm_exc_page_fault+0x26/0x30 [ 1509.768058][ T6025] RIP: 0010:__put_user_4+0xd/0x20 [ 1509.768086][ T6025] Code: 66 89 01 31 c9 0f 01 ca e9 00 32 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 31 03 00 90 90 90 90 90 90 90 90 90 90 [ 1509.768104][ T6025] RSP: 0018:ffffc9000d3c7bb8 EFLAGS: 00050206 [ 1509.768121][ T6025] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000008000 [ 1509.768136][ T6025] RDX: 0000000000000000 RSI: ffffffff8db6e88e RDI: ffffffff8be28a00 [ 1509.768150][ T6025] RBP: ffffc9000d3c7ee0 R08: 0000000000000000 R09: ffffffff820c5110 [ 1509.768164][ T6025] R10: dffffc0000000000 R11: ffffed100445258f R12: 0000200000000000 [ 1509.768180][ T6025] R13: 1ffff92001a78f90 R14: 0000000000000000 R15: 00000000fffffff2 [ 1509.768200][ T6025] ? __might_fault+0xb0/0x130 [ 1509.768227][ T6025] __se_sys_move_pages+0xcb9/0x16d0 [ 1509.768270][ T6025] ? __pfx___se_sys_move_pages+0x10/0x10 [ 1509.768293][ T6025] ? ksys_write+0x1cb/0x250 [ 1509.768316][ T6025] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1509.768337][ T6025] ? __pfx_vfs_write+0x10/0x10 [ 1509.768368][ T6025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1509.768389][ T6025] ? __fget_files+0x3a0/0x420 [ 1509.768426][ T6025] ? __pfx_ksys_write+0x10/0x10 [ 1509.768440][ T6025] ? rcu_is_watching+0x15/0xb0 [ 1509.768472][ T6025] ? __x64_sys_move_pages+0x21/0xf0 [ 1509.768497][ T6025] do_syscall_64+0xfa/0x3b0 [ 1509.768514][ T6025] ? lockdep_hardirqs_on+0x9c/0x150 [ 1509.768540][ T6025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.768559][ T6025] ? clear_bhb_loop+0x60/0xb0 [ 1509.768582][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.768601][ T6025] RIP: 0033:0x7f79bf58e929 [ 1509.768616][ T6025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.768633][ T6025] RSP: 002b:00007f79c04cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1509.768652][ T6025] RAX: ffffffffffffffda RBX: 00007f79bf7b5fa0 RCX: 00007f79bf58e929 [ 1509.768666][ T6025] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 1509.768679][ T6025] RBP: 00007f79c04cb090 R08: 0000200000000000 R09: 0000000000000000 [ 1509.768691][ T6025] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 1509.768703][ T6025] R13: 0000000000000000 R14: 00007f79bf7b5fa0 R15: 00007f79bf8dfa28 [ 1509.768748][ T6025] [ 1510.202050][T11782] usbhid 4-1:1.0: can't add hid device: -71 [ 1510.218327][T11782] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1510.268372][T11782] usb 4-1: USB disconnect, device number 115 [ 1510.297859][T11781] usb 6-1: new low-speed USB device number 100 using dummy_hcd [ 1510.330095][ T6044] fuse: Unknown parameter 'åÆoup_id' [ 1510.335521][T11781] usb 6-1: device descriptor read/8, error -71 [ 1510.435202][ T6049] futex_wake_op: syz.0.5699 tries to shift op by 32; fix this program [ 1510.458211][T11781] usb usb6-port1: unable to enumerate USB device [ 1510.797574][ T30] audit: type=1326 audit(1750109709.402:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1510.909821][ T30] audit: type=1326 audit(1750109709.402:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1510.944684][ T30] audit: type=1326 audit(1750109709.402:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdcd27907bc code=0x7ffc0000 [ 1510.984391][ T30] audit: type=1326 audit(1750109709.402:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdcd27906f4 code=0x7ffc0000 [ 1511.045721][ T30] audit: type=1326 audit(1750109709.402:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdcd27906f4 code=0x7ffc0000 [ 1511.157496][ T30] audit: type=1326 audit(1750109709.402:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1511.362531][ T30] audit: type=1326 audit(1750109709.412:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1511.603504][ T30] audit: type=1326 audit(1750109709.412:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1511.887510][ T30] audit: type=1326 audit(1750109709.452:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1512.033389][ T30] audit: type=1326 audit(1750109709.462:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.5.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1512.177769][ T1279] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1512.357807][ T1279] usb 6-1: Using ep0 maxpacket: 32 [ 1512.365181][ T1279] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1512.395285][ T1279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.487314][ T1279] usb 6-1: config 0 descriptor?? [ 1512.524748][ T1279] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1512.953996][ T1279] gspca_vc032x: reg_w err -71 [ 1512.964227][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1512.969957][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1512.975503][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1512.981708][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1512.987245][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1512.993485][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1512.999511][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.004817][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.012143][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.017718][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.023729][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.030074][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.037766][T18347] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1513.047187][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.053296][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.059826][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.065316][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.071374][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.076842][ T1279] gspca_vc032x: I2c Bus Busy Wait 00 [ 1513.082538][ T1279] gspca_vc032x: Unknown sensor... [ 1513.088140][ T1279] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1513.100056][ T1279] usb 6-1: USB disconnect, device number 101 [ 1513.207563][T18347] usb 4-1: Using ep0 maxpacket: 8 [ 1513.214334][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5725'. [ 1513.216993][T18347] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1513.233007][T18347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.241264][T18347] usb 4-1: Product: syz [ 1513.246945][T18347] usb 4-1: Manufacturer: syz [ 1513.259618][T18347] usb 4-1: SerialNumber: syz [ 1513.274249][T18347] usb 4-1: config 0 descriptor?? [ 1513.354210][ T6208] netlink: 'syz.5.5725': attribute type 5 has an invalid length. [ 1513.492360][T18347] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1513.541247][T18347] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1513.577236][T18347] usb 4-1: USB disconnect, device number 116 [ 1514.175295][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1514.257182][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1514.325633][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1517.518971][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5747'. [ 1517.622842][ T6348] vxlan1: entered promiscuous mode [ 1517.942056][T17208] cgroup: fork rejected by pids controller in /syz0 [ 1518.228168][T11781] hid (null): global environment stack underflow [ 1518.247255][T11781] hid-generic 0053:0006:0004.0063: unknown main item tag 0x4 [ 1518.305666][T11781] hid-generic 0053:0006:0004.0063: global environment stack underflow [ 1518.319679][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5751'. [ 1518.386664][T11781] hid-generic 0053:0006:0004.0063: item 0 0 1 11 parsing failed [ 1518.424776][T11781] hid-generic 0053:0006:0004.0063: probe with driver hid-generic failed with error -22 [ 1518.577504][ T24] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 1518.617986][ T9] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1518.766947][ T24] usb 7-1: Invalid ep0 maxpacket: 64 [ 1518.770292][ T9] usb 4-1: device descriptor read/64, error -71 [ 1518.919650][ T24] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 1519.144680][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1519.170842][ T558] syz_tun (unregistering): left promiscuous mode [ 1519.227792][ T24] usb 7-1: Invalid ep0 maxpacket: 64 [ 1519.243371][ T24] usb usb7-port1: attempt power cycle [ 1519.297616][ T9] usb 4-1: device descriptor read/64, error -71 [ 1519.463553][ T9] usb usb4-port1: attempt power cycle [ 1519.618213][ T24] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 1519.683262][ T24] usb 7-1: Invalid ep0 maxpacket: 64 [ 1519.807744][ T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1519.815982][ T3498] IPVS: stop unused estimator thread 0... [ 1519.828488][ T24] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 1519.838983][ T9] usb 4-1: device descriptor read/8, error -71 [ 1519.867254][ T24] usb 7-1: Invalid ep0 maxpacket: 64 [ 1519.873306][ T24] usb usb7-port1: unable to enumerate USB device [ 1520.015697][ T3498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.047700][ T3498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.097752][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1520.178120][ T9] usb 4-1: device descriptor read/8, error -71 [ 1520.286767][ T3498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.307951][ T9] usb usb4-port1: unable to enumerate USB device [ 1520.319100][ T3498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.634976][ T3498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.655057][ T3498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.749712][ T24] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1520.892466][ T3498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.987671][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1521.000103][ T24] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1521.004591][ T3498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.024709][ T24] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.135027][ T24] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1521.174084][ T24] usb 6-1: config 2 has no interface number 0 [ 1521.195400][ T24] usb 6-1: too many endpoints for config 2 interface 1 altsetting 222: 255, using maximum allowed: 30 [ 1521.259858][ T24] usb 6-1: config 2 interface 1 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1521.352314][ T24] usb 6-1: config 2 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1521.453241][ T24] usb 6-1: config 2 interface 1 has no altsetting 0 [ 1521.789574][ T6485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1521.822032][ T6485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1521.833371][ T6485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1521.867911][ T3498] macsec0: left allmulticast mode [ 1521.877660][ T3498] macsec0: left promiscuous mode [ 1521.877830][ T6485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1521.885371][ T3498] bridge0: port 3(macsec0) entered disabled state [ 1521.906963][ T6485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1522.016471][ T3498] bridge_slave_1: left allmulticast mode [ 1522.038939][ T3498] bridge_slave_1: left promiscuous mode [ 1522.165271][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.314504][ T3498] bridge_slave_0: left allmulticast mode [ 1522.391537][ T3498] bridge_slave_0: left promiscuous mode [ 1522.425088][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.329356][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5765'. [ 1523.871621][ T5970] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 1523.981355][T16823] Bluetooth: hci0: command tx timeout [ 1524.039564][ T5970] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1524.049262][ T5970] usb 4-1: config 0 has no interface number 0 [ 1524.119405][ T5970] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1524.134641][ T5970] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1524.153541][ T5970] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1524.163731][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.185449][ T5970] usb 4-1: config 0 descriptor?? [ 1524.236220][ T6520] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1524.271105][ T5970] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1524.324672][ T24] usb 6-1: string descriptor 0 read error: -71 [ 1524.354288][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=8d.e3 [ 1524.397248][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.477918][ T24] usb 6-1: can't set config #2, error -71 [ 1524.532279][ T24] usb 6-1: USB disconnect, device number 102 [ 1524.580410][ T5970] usb 4-1: USB disconnect, device number 121 [ 1525.067562][T18347] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1525.112857][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.140582][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.154563][ T3498] bond0 (unregistering): Released all slaves [ 1525.172878][ T3498] bond1 (unregistering): Released all slaves [ 1525.233327][T18347] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1525.243478][T18347] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1525.256471][T18347] usb 6-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 1525.266474][T18347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.274931][T18347] usb 6-1: Product: syz [ 1525.279529][T18347] usb 6-1: Manufacturer: syz [ 1525.284166][T18347] usb 6-1: SerialNumber: syz [ 1525.302383][T18347] usb 6-1: config 0 descriptor?? [ 1525.313113][ T6565] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1525.378989][ T6565] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1525.424967][T18347] option 6-1:0.0: GSM modem (1-port) converter detected [ 1525.483745][T18347] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1525.653946][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.676871][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.771313][ T3498] bond2 (unregistering): Released all slaves [ 1525.804148][ T6592] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1525.850186][ T6592] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1525.887247][ T6592] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1525.985179][ T24] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1526.074857][T16823] Bluetooth: hci0: command tx timeout [ 1526.187862][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1526.199358][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1526.274619][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.361811][ T24] usb 4-1: config 0 descriptor?? [ 1526.494023][ T3498] hsr_slave_0: left promiscuous mode [ 1526.529704][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1526.593869][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.523202][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5779'. [ 1527.883176][ T5970] usb 6-1: USB disconnect, device number 103 [ 1527.917868][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 1527.927545][T18347] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1527.952013][ T5970] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1528.016925][ T5970] option 6-1:0.0: device disconnected [ 1528.083283][ T3498] team0 (unregistering): Port device team_slave_0 removed [ 1528.107691][T18347] usb 7-1: Using ep0 maxpacket: 8 [ 1528.135145][T18347] usb 7-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1528.157056][T16823] Bluetooth: hci0: command tx timeout [ 1528.208617][T18347] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.219567][T18347] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1528.229348][T18347] usb 7-1: config 2 has no interface number 0 [ 1528.235650][T18347] usb 7-1: too many endpoints for config 2 interface 1 altsetting 222: 255, using maximum allowed: 30 [ 1528.246968][T18347] usb 7-1: config 2 interface 1 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1528.261299][T18347] usb 7-1: config 2 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1528.274729][T18347] usb 7-1: config 2 interface 1 has no altsetting 0 [ 1528.547183][ T5970] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1528.732756][ T5970] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 1528.753719][ T5970] usb 6-1: config 6 has no interface number 0 [ 1528.767253][ T5970] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1528.777659][ T5970] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1528.791932][ T5970] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1528.885248][ T5970] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1528.904416][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.941101][ T5970] usb 6-1: Product: syz [ 1528.950209][ T5970] usb 6-1: Manufacturer: syz [ 1528.956622][ T5970] usb 6-1: SerialNumber: syz [ 1529.028178][ T5970] hso 6-1:6.2: Failed to find INT IN ep [ 1529.235659][T18349] usb 6-1: USB disconnect, device number 104 [ 1529.600880][ T6594] bridge1: entered allmulticast mode [ 1529.625500][ T6675] geneve2: entered promiscuous mode [ 1529.636108][ T6675] geneve2: entered allmulticast mode [ 1529.882250][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1529.945600][ T24] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1529.950804][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 1530.015064][ T24] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1530.238361][T16823] Bluetooth: hci0: command tx timeout [ 1530.266795][ T3498] IPVS: stop unused estimator thread 0... [ 1530.414206][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.442800][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.464152][ T6489] bridge_slave_0: entered allmulticast mode [ 1530.487237][ T6489] bridge_slave_0: entered promiscuous mode [ 1530.512726][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.530988][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.558111][ T6489] bridge_slave_1: entered allmulticast mode [ 1530.566821][ T6489] bridge_slave_1: entered promiscuous mode [ 1530.842546][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.911487][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.058726][T18347] usb 7-1: string descriptor 0 read error: -71 [ 1531.104594][T18347] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=8d.e3 [ 1531.140507][T18347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.182598][T18347] usb 7-1: can't set config #2, error -71 [ 1531.236159][ T6489] team0: Port device team_slave_0 added [ 1531.236998][T18347] usb 7-1: USB disconnect, device number 20 [ 1531.283932][ T6489] team0: Port device team_slave_1 added [ 1531.520262][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1531.539317][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1531.632950][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1531.668132][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1531.700508][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1531.770467][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1531.807874][T18347] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1531.876752][ T30] audit: type=1326 audit(1750109730.492:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.5.5786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7fc00000 [ 1531.978192][T18347] usb 7-1: Using ep0 maxpacket: 16 [ 1532.015347][T18347] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1532.028932][T18347] usb 7-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 1532.064719][T18347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.095058][ T6489] hsr_slave_0: entered promiscuous mode [ 1532.102273][T18347] usb 7-1: Product: syz [ 1532.106486][T18347] usb 7-1: Manufacturer: syz [ 1532.112674][ T6489] hsr_slave_1: entered promiscuous mode [ 1532.121536][T18347] usb 7-1: SerialNumber: syz [ 1532.131428][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1532.147249][T18347] usb 7-1: config 0 descriptor?? [ 1532.152539][ T6489] Cannot create hsr debugfs directory [ 1532.169559][T18347] ipheth 7-1:0.0: Unable to find endpoints [ 1533.611476][ T6489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1533.625088][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5792'. [ 1533.651020][ T6489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1533.693176][ T6489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1533.736350][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5791'. [ 1533.762425][ T6489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1533.821253][ T7150] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.830212][ T7150] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.839117][ T7150] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.848096][ T7150] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.870499][ T7150] vxlan0: entered promiscuous mode [ 1534.194668][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.206806][T11781] usb 7-1: USB disconnect, device number 21 [ 1534.297258][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1534.312790][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.319978][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.484192][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.491472][ T5426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.608839][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.728127][T18347] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1534.783149][ T6489] veth0_vlan: entered promiscuous mode [ 1534.824442][ T6489] veth1_vlan: entered promiscuous mode [ 1534.900595][T18347] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1534.944672][T18347] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1534.947035][ T6489] veth0_macvtap: entered promiscuous mode [ 1534.988845][T18347] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.007955][ T6489] veth1_macvtap: entered promiscuous mode [ 1535.018601][T18347] usb 6-1: config 220 has no interface number 2 [ 1535.025085][T18347] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1535.039038][T18347] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1535.045920][T18347] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1535.064190][T18347] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1535.075837][T18347] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1535.086166][T18347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.094838][T18347] usb 6-1: Product: syz [ 1535.120241][T18347] usb 6-1: Manufacturer: syz [ 1535.141347][T18347] usb 6-1: SerialNumber: syz [ 1535.144328][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.186341][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1535.210205][ T6489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.225879][ T6489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.242409][ T6489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.251750][ T6489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.273030][ T7255] IPVS: set_ctl: invalid protocol: 72 127.0.0.1:20001 [ 1535.413646][ T5431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.418966][T18347] usb 6-1: selecting invalid altsetting 0 [ 1535.427622][ T5431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.434175][T18347] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1535.481885][T18347] usb 6-1: No valid video chain found. [ 1535.530235][T18347] usb 6-1: selecting invalid altsetting 0 [ 1535.535469][ T5425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.536034][T18347] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1535.544800][ T5425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.654278][T18347] usb 6-1: USB disconnect, device number 105 [ 1536.752827][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5811'. [ 1537.057135][ T7345] Cannot find add_set index 0 as target [ 1537.251425][ T7357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1537.397705][T18217] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 1537.506572][ T7365] kvm: pic: non byte write [ 1537.561685][T18217] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 1537.588436][T18217] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1537.632013][T18217] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1537.677539][T18217] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1537.727778][T18217] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1537.755424][T18217] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1537.774520][T18217] usb 7-1: string descriptor 0 read error: -22 [ 1537.788176][T18217] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1537.798942][T18217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.819431][T18217] usb 7-1: config 0 descriptor?? [ 1537.846314][ T7352] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1537.884590][T18217] hub 7-1:0.0: bad descriptor, ignoring hub [ 1537.891764][T18217] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1537.907011][T18217] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input91 [ 1538.083840][ T7352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.092401][T11781] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1538.093753][ T7352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.117672][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.129623][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.152856][T18217] usb 7-1: USB disconnect, device number 22 [ 1538.247728][T11781] usb 6-1: Using ep0 maxpacket: 16 [ 1538.259749][T11781] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 1538.269116][T11781] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.279640][T11781] usb 6-1: config 8 has no interface number 0 [ 1538.286075][T11781] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1538.303177][T11781] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1538.316103][T11781] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1538.326561][T11781] usb 6-1: config 8 interface 39 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1538.346177][T11781] usb 6-1: config 8 interface 39 has no altsetting 0 [ 1538.356068][T11781] usb 6-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 1538.366578][T11781] usb 6-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 1538.413787][T11781] usb 6-1: Product: syz [ 1538.419257][T11781] usb 6-1: Manufacturer: syz [ 1538.423965][T11781] usb 6-1: SerialNumber: syz [ 1538.656122][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5819'. [ 1538.657657][T18217] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1538.700231][T11781] ipheth 6-1:8.39: Unable to find endpoints [ 1538.721231][T11781] usb 6-1: USB disconnect, device number 106 [ 1538.932347][T18217] usb 7-1: config 0 has no interfaces? [ 1538.945860][T18217] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1538.956018][T18217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.966432][T18217] usb 7-1: Product: syz [ 1538.973349][T18217] usb 7-1: Manufacturer: syz [ 1538.982728][T18217] usb 7-1: SerialNumber: syz [ 1538.993485][T18217] usb 7-1: config 0 descriptor?? [ 1540.211176][ T7455] fuse: Unknown parameter '' [ 1540.572351][ T7490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1540.581637][ T7490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.601495][ T7490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1540.619002][ T7490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.795310][ T7496] netlink: 308 bytes leftover after parsing attributes in process `syz.5.5830'. [ 1541.047758][T18217] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1541.069183][ T7508] openvswitch: netlink: Message has 4 unknown bytes. [ 1541.076219][ T7508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1541.220997][T18217] usb 6-1: config 0 has an invalid interface number: 33 but max is 0 [ 1541.241831][T18217] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.277862][T18217] usb 6-1: config 0 has no interface number 0 [ 1541.284069][T18217] usb 6-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1541.294634][T18217] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1541.305443][T18217] usb 6-1: config 0 interface 33 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1541.319581][T18217] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 1541.331491][T18217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.341853][T18217] usb 6-1: Product: syz [ 1541.346112][T18217] usb 6-1: Manufacturer: syz [ 1541.353232][T18217] usb 6-1: SerialNumber: syz [ 1541.362720][T18217] usb 6-1: config 0 descriptor?? [ 1541.370886][ T7496] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1541.385032][T18217] hdpvr 6-1:0.33: Could not find bulk-in endpoint [ 1541.392095][T18217] hdpvr 6-1:0.33: probe with driver hdpvr failed with error -12 [ 1541.582222][T18217] usb 7-1: USB disconnect, device number 23 [ 1541.622159][T18347] usb 6-1: USB disconnect, device number 107 [ 1541.753017][ T7530] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5834'. [ 1541.809632][ T7530] kvm: pic: non byte write [ 1542.257619][T18347] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1542.537774][T18347] usb 7-1: Using ep0 maxpacket: 8 [ 1542.551744][T18347] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1542.566730][T18347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.580268][T18347] usb 7-1: Product: syz [ 1542.584531][T18347] usb 7-1: Manufacturer: syz [ 1542.592046][T18347] usb 7-1: SerialNumber: syz [ 1542.602242][T18347] usb 7-1: config 0 descriptor?? [ 1542.817326][T18347] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1543.345985][ T7563] bridge_slave_0: left allmulticast mode [ 1543.365026][ T7563] bridge_slave_0: left promiscuous mode [ 1543.380878][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.396244][ T7563] bridge_slave_1: left allmulticast mode [ 1543.402387][ T7563] bridge_slave_1: left promiscuous mode [ 1543.409753][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.425479][ T7563] bond0: (slave bond_slave_0): Releasing backup interface [ 1543.437111][ T7563] bond0: (slave bond_slave_1): Releasing backup interface [ 1543.474668][ T7563] team0: Port device team_slave_0 removed [ 1543.494137][ T7563] team0: Port device team_slave_1 removed [ 1543.516534][ T7563] bond0: (slave wlan1): Releasing backup interface [ 1543.555699][ T7563] bond1: (slave geneve2): Releasing active interface [ 1543.570327][ T7563] bond2: (slave vlan3): Releasing active interface [ 1544.233457][ T7582] netlink: 300 bytes leftover after parsing attributes in process `syz.5.5842'. [ 1544.254020][T18347] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1544.287855][T18347] usb 7-1: USB disconnect, device number 24 [ 1544.691670][ T7614] syz_tun: entered promiscuous mode [ 1544.697082][ T7614] vlan2: entered promiscuous mode [ 1544.702505][ T9] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1544.957781][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1544.968735][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.989594][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.096746][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 1545.112630][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.136212][ T9] usb 6-1: config 0 descriptor?? [ 1545.568148][ T9] apple 0003:05AC:0246.0064: reserved main item tag 0xd [ 1545.576107][ T9] apple 0003:05AC:0246.0064: unexpected long global item [ 1545.585154][ T9] apple 0003:05AC:0246.0064: parse failed [ 1545.618120][ T9] apple 0003:05AC:0246.0064: probe with driver apple failed with error -22 [ 1545.811885][T18347] usb 6-1: USB disconnect, device number 108 [ 1545.903978][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.910457][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5852'. [ 1545.910488][ T7655] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5852'. [ 1545.935514][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.146470][ T7676] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1546.454457][T18347] IPVS: starting estimator thread 0... [ 1546.587562][ T7678] IPVS: using max 49 ests per chain, 117600 per kthread [ 1547.187713][T18347] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1547.349251][T18347] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.364041][T18347] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1547.382879][T18347] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1547.392234][T18347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.407054][T18347] usb 6-1: config 0 descriptor?? [ 1547.437648][ T9] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1547.623388][ T9] usb 7-1: config 0 has an invalid interface number: 93 but max is 0 [ 1547.632151][ T9] usb 7-1: config 0 has no interface number 0 [ 1547.640789][ T9] usb 7-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1547.661926][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.672420][ T9] usb 7-1: Product: syz [ 1547.676720][ T9] usb 7-1: Manufacturer: syz [ 1547.683317][ T9] usb 7-1: SerialNumber: syz [ 1547.702975][ T9] usb 7-1: config 0 descriptor?? [ 1547.729835][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.773926][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.852012][T11781] usb 6-1: USB disconnect, device number 109 [ 1547.920304][ T9] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 1547.941893][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1547.960086][ T9] dib0700: firmware download failed at 7 with -22 [ 1548.121814][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5860'. [ 1548.184359][T18347] usb 7-1: USB disconnect, device number 25 [ 1548.559761][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5867'. [ 1548.575041][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5867'. [ 1549.003244][ T7768] xt_CT: No such helper "snmp" [ 1549.204748][ T7779] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1549.255584][T11781] IPVS: starting estimator thread 0... [ 1549.367715][ T7780] IPVS: using max 31 ests per chain, 74400 per kthread [ 1549.552751][ T7785] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1552.660308][ T7866] fuse: Bad value for 'group_id' [ 1552.665284][ T7866] fuse: Bad value for 'group_id' [ 1553.781571][ T9] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1553.940409][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1553.952683][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1553.964372][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1553.973985][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1553.982567][ T9] usb 6-1: Product: syz [ 1553.986939][ T9] usb 6-1: Manufacturer: syz [ 1553.991643][ T9] usb 6-1: SerialNumber: syz [ 1554.002157][ T9] usb 6-1: config 0 descriptor?? [ 1554.012450][ T9] usb 6-1: selecting invalid altsetting 0 [ 1554.148071][T18217] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1554.309809][T18217] usb 7-1: config 0 has an invalid interface number: 95 but max is 0 [ 1554.318626][T18217] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.329346][T18217] usb 7-1: config 0 has no interface number 0 [ 1554.335564][T18217] usb 7-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1554.350962][T18217] usb 7-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1554.360742][T18217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.369178][T18217] usb 7-1: Product: syz [ 1554.373711][T18217] usb 7-1: Manufacturer: syz [ 1554.378716][T18217] usb 7-1: SerialNumber: syz [ 1554.386123][T18217] usb 7-1: config 0 descriptor?? [ 1554.603046][T18217] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1554.614799][T18217] usb 7-1: MIDIStreaming interface descriptor not found [ 1554.657037][T18217] usb 7-1: USB disconnect, device number 26 [ 1554.732775][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.95/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1556.256371][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.342860][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.398517][T11782] usb 6-1: USB disconnect, device number 110 [ 1556.487872][T18217] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1556.657548][T18217] usb 7-1: Using ep0 maxpacket: 8 [ 1556.774603][T18217] usb 7-1: config index 0 descriptor too short (expected 42002, got 18) [ 1556.785374][T18217] usb 7-1: New USB device found, idVendor=16d8, idProduct=7002, bcdDevice=25.13 [ 1556.797169][T18217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.829522][ T8015] fuse: Unknown parameter 'group_jMU/µ”Cwâ>ßžŽ)çF–*SÐÒõ' [ 1556.862541][T18217] qmi_wwan 7-1:219.0: probe with driver qmi_wwan failed with error -22 [ 1557.064779][T18217] usb 7-1: USB disconnect, device number 27 [ 1558.167538][ T9] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1558.321880][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1558.335028][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1558.352883][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1558.366877][ T9] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1558.376836][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.385306][ T9] usb 6-1: Product: syz [ 1558.387622][T18217] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1558.389899][ T9] usb 6-1: Manufacturer: syz [ 1558.404565][ T9] usb 6-1: SerialNumber: syz [ 1558.414890][ T9] usb 6-1: config 0 descriptor?? [ 1558.557884][T18217] usb 7-1: Using ep0 maxpacket: 32 [ 1558.564496][T18217] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1558.579527][T18217] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1558.587247][T18217] usb 7-1: can't read configurations, error -61 [ 1558.717534][T18217] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1558.928106][T18217] usb 7-1: Using ep0 maxpacket: 32 [ 1558.952796][T18217] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1559.130718][ T8076] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1559.205099][T18217] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1559.212891][T18217] usb 7-1: can't read configurations, error -61 [ 1559.243284][T18217] usb usb7-port1: attempt power cycle [ 1559.667796][T18217] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1559.688325][T18217] usb 7-1: Using ep0 maxpacket: 32 [ 1559.694328][T18217] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1559.704576][T18217] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1559.729771][T18217] usb 7-1: can't read configurations, error -61 [ 1559.879832][T18217] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1559.919481][T18217] usb 7-1: Using ep0 maxpacket: 32 [ 1559.975827][T18217] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1560.001282][T18217] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1560.011916][T18217] usb 7-1: can't read configurations, error -61 [ 1560.026220][T18217] usb usb7-port1: unable to enumerate USB device [ 1560.417161][ T30] audit: type=1326 audit(1750109759.032:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.0.5920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ca738e929 code=0x0 [ 1561.437304][ T8132] fuse: Unknown parameter 'fsuuid' [ 1561.637952][T18217] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1561.695181][T11782] IPVS: starting estimator thread 0... [ 1561.704638][ T8144] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1561.977989][T18217] usb 7-1: Using ep0 maxpacket: 16 [ 1562.059261][ T8145] IPVS: using max 30 ests per chain, 72000 per kthread [ 1562.083527][T18217] usb 7-1: config 2 has an invalid interface number: 32 but max is 0 [ 1562.114528][T18217] usb 7-1: config 2 has no interface number 0 [ 1562.152955][T18217] usb 7-1: config 2 interface 32 has no altsetting 0 [ 1562.165494][T18217] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 1562.182225][T18217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.192547][T18217] usb 7-1: Product: syz [ 1562.196891][T18217] usb 7-1: Manufacturer: syz [ 1562.202223][T18217] usb 7-1: SerialNumber: syz [ 1562.770518][T18217] usb 7-1: USB disconnect, device number 32 [ 1563.301935][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5931'. [ 1563.960415][T18347] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1564.123863][T18347] usb 7-1: Using ep0 maxpacket: 8 [ 1564.138261][T18347] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1564.148129][T18347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.159483][T18347] usb 7-1: config 0 descriptor?? [ 1565.931607][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.945735][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.031928][ T8253] netlink: 'syz.7.5943': attribute type 30 has an invalid length. [ 1566.047229][ T8253] netlink: 'syz.7.5943': attribute type 30 has an invalid length. [ 1566.392189][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.408515][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.472519][ T30] audit: type=1326 audit(1750109765.082:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ca732ab19 code=0x7ffc0000 [ 1566.559833][ T30] audit: type=1326 audit(1750109765.092:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ca732ab19 code=0x7ffc0000 [ 1566.637132][ T30] audit: type=1326 audit(1750109765.092:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ca732ab19 code=0x7ffc0000 [ 1566.678268][T18347] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1566.684586][ T30] audit: type=1326 audit(1750109765.092:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca738e929 code=0x7ffc0000 [ 1566.783269][T18347] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1566.794673][ T30] audit: type=1326 audit(1750109765.092:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ca732ab19 code=0x7ffc0000 [ 1566.886497][T18347] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1566.970766][ T30] audit: type=1326 audit(1750109765.092:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ca732ab19 code=0x7ffc0000 [ 1566.977648][T18347] usb 7-1: USB disconnect, device number 33 [ 1567.072983][ T30] audit: type=1326 audit(1750109765.092:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ca732ab19 code=0x7ffc0000 [ 1567.234703][ T30] audit: type=1326 audit(1750109765.092:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ca732ab19 code=0x7ffc0000 [ 1567.399504][ T30] audit: type=1326 audit(1750109765.092:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ca732ab19 code=0x7ffc0000 [ 1567.628814][ T30] audit: type=1326 audit(1750109765.092:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8270 comm="syz.0.5947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ca732ab19 code=0x7ffc0000 [ 1571.057623][T11782] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1571.211626][T11782] usb 7-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1571.224228][T11782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.253320][T11782] usb 7-1: Product: syz [ 1571.283646][T11782] usb 7-1: Manufacturer: syz [ 1571.298875][T11782] usb 7-1: SerialNumber: syz [ 1571.345553][T11782] usb 7-1: config 0 descriptor?? [ 1571.774206][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5960'. [ 1571.816510][T11782] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1571.850687][T11782] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1571.910797][T11782] usb 7-1: USB disconnect, device number 34 [ 1572.295613][ T8280] syz.7.5945 (8280): drop_caches: 1 [ 1573.626783][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.644687][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.671887][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.687046][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.780885][T18347] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1573.947586][T18347] usb 7-1: Using ep0 maxpacket: 32 [ 1573.956254][T18347] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1573.964648][T18347] usb 7-1: can't read configurations, error -61 [ 1574.097768][T18347] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1574.257609][T18347] usb 7-1: Using ep0 maxpacket: 32 [ 1574.270075][T18347] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1574.280206][T18347] usb 7-1: can't read configurations, error -61 [ 1574.287023][T18347] usb usb7-port1: attempt power cycle [ 1574.627705][T18347] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1574.649799][T18347] usb 7-1: Using ep0 maxpacket: 32 [ 1574.658770][T18347] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1574.668850][T18347] usb 7-1: can't read configurations, error -61 [ 1574.807690][T18347] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1574.838731][T18347] usb 7-1: Using ep0 maxpacket: 32 [ 1574.845965][T18347] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1574.854331][T18347] usb 7-1: can't read configurations, error -61 [ 1574.861958][T18347] usb usb7-port1: unable to enumerate USB device [ 1575.659670][ T8414] sctp: [Deprecated]: syz.7.5970 (pid 8414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1575.659670][ T8414] Use struct sctp_sack_info instead [ 1575.744462][ T8413] syz.7.5970 (8413): drop_caches: 1 [ 1576.731795][ T8435] xt_hashlimit: invalid interval [ 1576.786023][ T8435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1577.437028][ T8455] wg1: entered promiscuous mode [ 1577.459177][ T8455] wg1: entered allmulticast mode [ 1577.612055][ T8457] netlink: 'syz.6.5979': attribute type 8 has an invalid length. [ 1578.515064][ T8479] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1578.597521][T11782] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1578.747542][T11782] usb 7-1: Using ep0 maxpacket: 32 [ 1578.763794][T11782] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1578.785332][T11782] usb 7-1: can't read configurations, error -61 [ 1578.927742][T11782] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1579.098604][T11782] usb 7-1: Using ep0 maxpacket: 32 [ 1579.114019][T11782] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1579.147736][T11782] usb 7-1: can't read configurations, error -61 [ 1579.154691][T11782] usb usb7-port1: attempt power cycle [ 1579.187805][ T9] iguanair 6-1:0.0: failed to get version [ 1579.195913][ T9] iguanair 6-1:0.0: probe with driver iguanair failed with error -110 [ 1579.210536][ T9] usb 6-1: USB disconnect, device number 111 [ 1579.498054][T11782] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1579.530167][T11782] usb 7-1: Using ep0 maxpacket: 32 [ 1579.549234][T11782] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1579.556957][T11782] usb 7-1: can't read configurations, error -61 [ 1579.567870][ T9] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1579.627639][ T8521] syzkaller1: entered promiscuous mode [ 1579.633179][ T8521] syzkaller1: entered allmulticast mode [ 1579.707807][T11782] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1579.735362][ T9] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1579.744177][T11782] usb 7-1: Using ep0 maxpacket: 32 [ 1579.746193][T11782] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1579.749734][ T9] usb 6-1: config 0 has an invalid interface number: 2 but max is -1 [ 1579.766343][ T9] usb 6-1: config 0 has an invalid interface number: 2 but max is -1 [ 1579.779056][T11782] usb 7-1: can't read configurations, error -61 [ 1579.814990][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.821767][T11782] usb usb7-port1: unable to enumerate USB device [ 1579.851291][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1579.865741][ T9] usb 6-1: config 0 has no interface number 0 [ 1579.882494][ T9] usb 6-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1579.920434][ T9] usb 6-1: string descriptor 0 read error: -71 [ 1579.926881][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1579.966211][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.979412][ T9] usb 6-1: config 0 descriptor?? [ 1579.990665][ T9] usb 6-1: can't set config #0, error -71 [ 1580.003374][ T9] usb 6-1: USB disconnect, device number 112 [ 1580.055594][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5996'. [ 1580.133703][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5997'. [ 1581.422542][ T8575] netlink: 161716 bytes leftover after parsing attributes in process `syz.6.5999'. [ 1581.432194][ T8575] netlink: zone id is out of range [ 1581.439766][ T8575] netlink: zone id is out of range [ 1581.446403][ T8575] netlink: zone id is out of range [ 1581.452630][ T8575] netlink: zone id is out of range [ 1581.458853][ T8575] netlink: zone id is out of range [ 1581.463979][ T8575] netlink: zone id is out of range [ 1581.472052][ T8575] netlink: zone id is out of range [ 1581.477290][ T8575] netlink: zone id is out of range [ 1581.517539][ T9] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1581.679644][ T9] usb 6-1: config 0 has an invalid interface number: 238 but max is 0 [ 1581.689331][ T9] usb 6-1: config 0 has no interface number 0 [ 1581.695541][ T9] usb 6-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1581.705753][ T9] usb 6-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1581.715912][ T9] usb 6-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1581.729065][ T9] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 1581.741351][ T9] usb 6-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 1581.757058][ T9] usb 6-1: Product: syz [ 1581.762018][ T9] usb 6-1: Manufacturer: syz [ 1581.766617][ T9] usb 6-1: SerialNumber: syz [ 1581.775693][ T9] usb 6-1: config 0 descriptor?? [ 1581.793809][ T9] ni6501 6-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1581.887563][T18347] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1581.985229][T11782] usb 6-1: USB disconnect, device number 113 [ 1582.018262][T18347] usb 7-1: device descriptor read/64, error -71 [ 1582.267471][T18347] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1582.417474][T18347] usb 7-1: device descriptor read/64, error -71 [ 1582.528150][T18347] usb usb7-port1: attempt power cycle [ 1583.072682][ T8610] syz.7.6004 (8610): drop_caches: 1 [ 1583.087497][T18347] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1583.128320][T18347] usb 7-1: device descriptor read/8, error -71 [ 1583.217748][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1583.367662][T18347] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1583.401321][T18347] usb 7-1: device descriptor read/8, error -71 [ 1583.518770][T16819] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1583.528436][T18347] usb usb7-port1: unable to enumerate USB device [ 1583.697504][T16819] usb 6-1: Using ep0 maxpacket: 32 [ 1583.705403][T16819] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1583.713285][T16819] usb 6-1: can't read configurations, error -61 [ 1583.847674][T16819] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1583.999294][T16819] usb 6-1: Using ep0 maxpacket: 32 [ 1584.022411][T16819] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1584.037707][T16819] usb 6-1: can't read configurations, error -61 [ 1584.047879][T16819] usb usb6-port1: attempt power cycle [ 1584.397561][T16819] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1584.440607][T16819] usb 6-1: Using ep0 maxpacket: 32 [ 1584.459445][T16819] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1584.467546][T16819] usb 6-1: can't read configurations, error -61 [ 1584.617511][T16819] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1584.648266][T16819] usb 6-1: Using ep0 maxpacket: 32 [ 1584.656650][T16819] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1584.677734][T16819] usb 6-1: can't read configurations, error -61 [ 1584.684590][T16819] usb usb6-port1: unable to enumerate USB device [ 1585.187766][T11781] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1585.382004][T11781] usb 7-1: config 0 has no interfaces? [ 1585.426288][T11781] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1585.438352][T11781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.446503][T11781] usb 7-1: Product: syz [ 1585.451795][T11781] usb 7-1: Manufacturer: syz [ 1585.456637][T11781] usb 7-1: SerialNumber: syz [ 1585.465275][T11781] usb 7-1: config 0 descriptor?? [ 1585.733398][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.751426][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.323687][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6021'. [ 1586.517251][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6025'. [ 1586.733388][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6028'. [ 1586.847520][ T7192] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1587.004726][ T7192] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1587.017044][ T7192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.403512][ T7192] usb 6-1: config 0 has no interface number 0 [ 1587.411283][ T7192] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1587.423111][ T7192] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1587.444896][ T7192] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1587.459940][ T7192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.470367][ T7192] usb 6-1: Product: syz [ 1587.477051][ T7192] usb 6-1: Manufacturer: syz [ 1587.487126][ T7192] usb 6-1: SerialNumber: syz [ 1587.503847][ T7192] usb 6-1: config 0 descriptor?? [ 1587.921223][T16819] usb 7-1: USB disconnect, device number 47 [ 1588.065932][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6033'. [ 1588.121335][ T30] kauditd_printk_skb: 840 callbacks suppressed [ 1588.121347][ T30] audit: type=1326 audit(1750109786.742:7252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8764 comm="syz.6.6034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79bf58e929 code=0x0 [ 1588.150435][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.150821][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.172067][ T7192] usb 6-1: USB disconnect, device number 118 [ 1589.017706][T16819] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1589.180613][T16819] usb 6-1: Using ep0 maxpacket: 16 [ 1589.188840][T16819] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1589.199865][T16819] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1589.211505][T16819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1589.222741][T16819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1589.235805][T16819] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1589.251264][T16819] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1589.260547][T16819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.268756][T16819] usb 6-1: Product: syz [ 1589.273085][T16819] usb 6-1: Manufacturer: syz [ 1589.277827][T16819] usb 6-1: SerialNumber: syz [ 1589.284434][T16819] usb 6-1: config 0 descriptor?? [ 1589.505147][T16819] appledisplay: Apple Cinema Display connected [ 1589.709753][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6039'. [ 1589.786378][ T30] audit: type=1326 audit(1750109788.402:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1589.811446][ T30] audit: type=1326 audit(1750109788.432:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1589.837485][ T30] audit: type=1326 audit(1750109788.432:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1589.882716][ T8818] vivid-001: disconnect [ 1589.888576][ T8818] vivid-001: reconnect [ 1589.900067][ T8818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1589.925951][ T30] audit: type=1326 audit(1750109788.432:7256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1589.934223][ T7258] usb 6-1: USB disconnect, device number 119 [ 1589.948508][ C0] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1589.950050][ T30] audit: type=1326 audit(1750109788.432:7257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1589.986729][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.997703][ T30] audit: type=1326 audit(1750109788.432:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1590.020077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.030543][ T30] audit: type=1326 audit(1750109788.432:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1590.056731][ T7258] appledisplay: Apple Cinema Display disconnected [ 1590.066153][ T30] audit: type=1326 audit(1750109788.432:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1590.088492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1590.104432][ T30] audit: type=1326 audit(1750109788.432:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.5.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd278e929 code=0x7ffc0000 [ 1590.889591][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6044'. [ 1591.022311][ T8847] netlink: 'syz.7.6047': attribute type 1 has an invalid length. [ 1591.064807][ T8847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1591.116508][ T8847] gretap1: entered promiscuous mode [ 1591.132501][ T8847] bond1: (slave gretap1): making interface the new active one [ 1591.148599][ T7258] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1591.184606][ T8847] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1591.213774][ T8881] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1591.327597][ T7258] usb 6-1: Using ep0 maxpacket: 8 [ 1591.339522][ T7258] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1591.350830][ T7258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1591.400042][ T7258] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1591.425030][ T7258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1591.479730][ T7258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1591.507209][ T7258] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1591.521596][ T8907] xt_socket: unknown flags 0x8 [ 1591.544638][ T7258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1591.592152][ T7258] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1591.609287][ T7258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1591.629793][ T7258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1591.668786][ T7258] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1591.679927][ T7258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1591.723756][ T7258] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1591.743848][ T7258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1591.780726][ T7258] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1591.811113][ T7258] usb 6-1: string descriptor 0 read error: -22 [ 1591.829104][ T7258] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1591.845408][ T7258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.875415][ T7258] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1591.959538][ T8922] binder: 8921:8922 ioctl c0306201 200000000240 returned -14 [ 1591.998226][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1592.018334][ T24] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1592.031672][ T24] usb 4-1: USB disconnect, device number 122 [ 1592.130424][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6056'. [ 1592.183355][ T7258] usb 6-1: USB disconnect, device number 120 [ 1592.202447][ T8933] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 1592.614419][ T8958] netlink: 'syz.6.6062': attribute type 2 has an invalid length. [ 1592.738366][ T7258] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1592.931278][ T7258] usb 4-1: Using ep0 maxpacket: 16 [ 1592.949136][ T7258] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 1592.969301][ T7258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.997261][ T7258] usb 4-1: config 0 descriptor?? [ 1593.033107][ T7258] usb 4-1: interface 1 not found [ 1593.230175][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1593.240931][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1593.250094][ T9] usb 4-1: USB disconnect, device number 123 [ 1593.407983][ T7258] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1593.411522][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6067'. [ 1593.471741][ T9000] input: syz1 as /devices/virtual/input/input94 [ 1593.578161][ T7258] usb 7-1: Using ep0 maxpacket: 32 [ 1593.591958][ T7258] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1593.605033][ T7258] usb 7-1: config 1 has an invalid interface number: 249 but max is 0 [ 1593.629412][ T7258] usb 7-1: config 1 has no interface number 0 [ 1593.656626][ T7258] usb 7-1: config 1 interface 249 altsetting 64 bulk endpoint 0x2 has invalid maxpacket 16 [ 1593.677051][ T7258] usb 7-1: config 1 interface 249 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1593.694843][ T7258] usb 7-1: config 1 interface 249 has no altsetting 0 [ 1593.712900][ T7258] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 1593.722390][ T7258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.737857][ T7258] usb 7-1: Product: syz [ 1593.742079][ T7258] usb 7-1: Manufacturer: syz [ 1593.747062][ T7258] usb 7-1: SerialNumber: syz [ 1593.784545][ T8982] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1594.490635][ T7258] kvaser_usb 7-1:1.249: error -ENODEV: Cannot get usb endpoint(s) [ 1594.556435][ T7258] usb 7-1: USB disconnect, device number 48 [ 1594.619256][ T9060] process '/newroot/73/file0' started with executable stack [ 1595.787610][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6078'. [ 1595.983432][ T9131] fuse: Unknown parameter '' [ 1595.997609][T18347] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 1596.159689][T18347] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 1596.188717][T18347] usb 7-1: config 0 has no interface number 0 [ 1596.194899][T18347] usb 7-1: config 0 interface 29 has no altsetting 0 [ 1596.241883][T18347] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1596.261456][T18347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.295925][T18347] usb 7-1: Product: syz [ 1596.306035][T18347] usb 7-1: Manufacturer: syz [ 1596.316198][T18347] usb 7-1: SerialNumber: syz [ 1596.329262][T18347] usb 7-1: config 0 descriptor?? [ 1596.385193][ T9147] netlink: 'syz.5.6083': attribute type 1 has an invalid length. [ 1596.430877][ T9147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1596.460997][ T9147] gretap1: entered promiscuous mode [ 1596.471843][ T9147] bond3: (slave gretap1): making interface the new active one [ 1596.482166][ T9147] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1596.509544][ T9147] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1596.556289][T18347] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1596.576265][T18347] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 1596.587485][T18347] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 1596.594665][T18347] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 1596.659497][T18347] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -22 [ 1596.787496][ T24] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1596.954197][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.968831][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1596.979657][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.992517][ T24] usb 6-1: config 0 descriptor?? [ 1597.005294][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1597.424491][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1597.436613][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1597.646669][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 1597.667897][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 1597.676690][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 1597.691603][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 1597.701825][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 1597.710780][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 1597.718129][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 1597.730376][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 1597.746726][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 1597.765522][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 1597.778696][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 1597.786241][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1597.795400][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1597.813160][ T24] pwc: Registered as video103. [ 1597.834197][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input95 [ 1597.859526][ T24] usb 6-1: USB disconnect, device number 121 [ 1598.312602][ T9231] tipc: Enabling of bearer rejected, failed to enable media [ 1598.486361][ T9243] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1598.492952][ T9243] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1598.525467][ T9243] vhci_hcd vhci_hcd.0: Device attached [ 1598.608322][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6092'. [ 1599.358170][T18347] vhci_hcd: vhci_device speed not set [ 1599.428433][ T9] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1599.449522][T18347] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 1599.512675][ T7192] usb 7-1: USB disconnect, device number 49 [ 1599.579576][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1599.589132][ T9] usb 4-1: config 13 has an invalid interface number: 56 but max is 1 [ 1599.625437][ T9] usb 4-1: config 13 has no interface number 1 [ 1599.653631][ T9] usb 4-1: config 13 interface 56 has no altsetting 0 [ 1599.675007][ T9] usb 4-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=65.93 [ 1599.685193][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.703690][ T9] usb 4-1: Product: syz [ 1599.709192][ T9] usb 4-1: Manufacturer: syz [ 1599.713921][ T9] usb 4-1: SerialNumber: syz [ 1599.739303][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6094'. [ 1599.967456][ T9244] vhci_hcd: connection reset by peer [ 1599.985070][ T5430] vhci_hcd: stop threads [ 1599.996692][ T9] usb 4-1: USB disconnect, device number 124 [ 1600.010164][ T5430] vhci_hcd: release socket [ 1600.040817][ T5430] vhci_hcd: disconnect device [ 1600.725469][ T9366] loop6: detected capacity change from 0 to 74 [ 1601.277520][T11781] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1601.310461][ T9394] futex_wake_op: syz.5.6104 tries to shift op by 32; fix this program [ 1601.439034][T11781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1601.449447][T11781] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1601.459228][T11781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 51, changing to 9 [ 1601.470291][T11781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33540, setting to 1024 [ 1601.483214][T11781] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1601.494045][T11781] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1601.509504][T11781] usb 7-1: Manufacturer: syz [ 1601.518008][T11781] usb 7-1: config 0 descriptor?? [ 1601.530807][T11781] smsusb:smsusb_probe: board id=9, interface number 0 [ 1601.555222][T11781] smsusb:siano_media_device_register: media controller created [ 1601.566124][T11781] ------------[ cut here ]------------ [ 1601.572268][T11781] usb 7-1: BOGUS urb xfer, pipe 3 != type 1 [ 1601.580527][T11781] WARNING: CPU: 1 PID: 11781 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 1601.590327][T11781] Modules linked in: [ 1601.594763][T11781] CPU: 1 UID: 0 PID: 11781 Comm: kworker/1:10 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 1601.606425][T11781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1601.619966][T11781] Workqueue: usb_hub_wq hub_event [ 1601.626229][T11781] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 1601.632372][T11781] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 40 26 34 8c 4c 89 f6 4c 89 fa e8 df 2d 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 f0 2c de 8e e8 85 [ 1601.652972][T11781] RSP: 0018:ffffc9000534ead0 EFLAGS: 00010246 [ 1601.660424][T11781] RAX: 1c7bb038cf69bb00 RBX: ffff888021ade000 RCX: 0000000000100000 [ 1601.669001][T11781] RDX: ffffc90019d42000 RSI: 00000000000376c0 RDI: 00000000000376c1 [ 1601.677019][T11781] RBP: 0000000000000000 R08: ffffc9000534e7e7 R09: 1ffff92000a69cfc [ 1601.685816][T11781] R10: dffffc0000000000 R11: fffff52000a69cfd R12: ffffffff8c34242c [ 1601.694298][T11781] R13: dffffc0000000000 R14: ffffffff8c348f20 R15: ffff8880776b6040 [ 1601.702348][T11781] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 1601.711432][T11781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1601.718860][T11781] CR2: 00007fe290ee56c0 CR3: 0000000033186000 CR4: 00000000003526f0 [ 1601.726955][T11781] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 1601.735902][T11781] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1601.743989][T11781] Call Trace: [ 1601.747298][T11781] [ 1601.750586][T11781] smsusb_start_streaming+0x22/0x340 [ 1601.756052][T11781] smsusb_probe+0x18f6/0x2060 [ 1601.760921][T11781] ? __pfx_smsusb_probe+0x10/0x10 [ 1601.765979][T11781] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1601.771655][T11781] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1601.777904][T11781] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1601.784303][T11781] ? __pm_runtime_set_status+0x785/0xa50 [ 1601.790047][T11781] usb_probe_interface+0x644/0xbc0 [ 1601.795186][T11781] ? __pfx_usb_probe_interface+0x10/0x10 [ 1601.800892][T11781] really_probe+0x26a/0x9a0 [ 1601.805508][T11781] __driver_probe_device+0x18c/0x2f0 [ 1601.811152][T11781] driver_probe_device+0x4f/0x430 [ 1601.816175][T11781] __device_attach_driver+0x2ce/0x530 [ 1601.821904][T11781] bus_for_each_drv+0x251/0x2e0 [ 1601.826757][T11781] ? __pfx___device_attach_driver+0x10/0x10 [ 1601.833060][T11781] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1601.838613][T11781] __device_attach+0x2b8/0x400 [ 1601.843383][T11781] ? __pfx___device_attach+0x10/0x10 [ 1601.848826][T11781] ? do_raw_spin_unlock+0x122/0x240 [ 1601.854129][T11781] bus_probe_device+0x185/0x260 [ 1601.859070][T11781] device_add+0x7b6/0xb50 [ 1601.863440][T11781] usb_set_configuration+0x1a87/0x20e0 [ 1601.869129][T11781] usb_generic_driver_probe+0x8d/0x150 [ 1601.874602][T11781] usb_probe_device+0x1c4/0x390 [ 1601.879512][T11781] ? __pfx_usb_probe_device+0x10/0x10 [ 1601.884992][T11781] really_probe+0x26a/0x9a0 [ 1601.889697][T11781] __driver_probe_device+0x18c/0x2f0 [ 1601.895194][T11781] driver_probe_device+0x4f/0x430 [ 1601.900584][T11781] __device_attach_driver+0x2ce/0x530 [ 1601.906057][T11781] bus_for_each_drv+0x251/0x2e0 [ 1601.911027][T11781] ? __pfx___device_attach_driver+0x10/0x10 [ 1601.916975][T11781] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1601.922983][T11781] __device_attach+0x2b8/0x400 [ 1601.928229][T11781] ? __pfx___device_attach+0x10/0x10 [ 1601.933534][T11781] ? do_raw_spin_unlock+0x122/0x240 [ 1601.938815][T11781] bus_probe_device+0x185/0x260 [ 1601.943688][T11781] device_add+0x7b6/0xb50 [ 1601.948070][T11781] usb_new_device+0xa39/0x16c0 [ 1601.952854][T11781] ? __pfx_usb_new_device+0x10/0x10 [ 1601.958253][T11781] ? _raw_spin_unlock_irq+0x23/0x50 [ 1601.963463][T11781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1601.968770][T11781] hub_event+0x2941/0x4a00 [ 1601.973216][T11781] ? __pfx_hub_event+0x10/0x10 [ 1601.978519][T11781] ? process_scheduled_works+0x9ef/0x17b0 [ 1601.984248][T11781] ? _raw_spin_unlock_irq+0x23/0x50 [ 1601.989635][T11781] ? process_scheduled_works+0x9ef/0x17b0 [ 1601.995354][T11781] ? process_scheduled_works+0x9ef/0x17b0 [ 1602.001122][T11781] process_scheduled_works+0xae1/0x17b0 [ 1602.006684][T11781] ? __pfx_process_scheduled_works+0x10/0x10 [ 1602.012831][T11781] worker_thread+0x8a0/0xda0 [ 1602.017634][T11781] kthread+0x70e/0x8a0 [ 1602.021703][T11781] ? __pfx_worker_thread+0x10/0x10 [ 1602.027104][T11781] ? __pfx_kthread+0x10/0x10 [ 1602.032004][T11781] ? _raw_spin_unlock_irq+0x23/0x50 [ 1602.037208][T11781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1602.042610][T11781] ? __pfx_kthread+0x10/0x10 [ 1602.048209][T11781] ret_from_fork+0x3fc/0x770 [ 1602.052810][T11781] ? __pfx_ret_from_fork+0x10/0x10 [ 1602.058197][T11781] ? __switch_to_asm+0x39/0x70 [ 1602.063085][T11781] ? __switch_to_asm+0x33/0x70 [ 1602.068043][T11781] ? __pfx_kthread+0x10/0x10 [ 1602.072745][T11781] ret_from_fork_asm+0x1a/0x30 [ 1602.077804][T11781] [ 1602.080932][T11781] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1602.088301][T11781] CPU: 1 UID: 0 PID: 11781 Comm: kworker/1:10 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 1602.098998][T11781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1602.109054][T11781] Workqueue: usb_hub_wq hub_event [ 1602.114093][T11781] Call Trace: [ 1602.117379][T11781] [ 1602.120318][T11781] dump_stack_lvl+0x99/0x250 [ 1602.124904][T11781] ? __asan_memcpy+0x40/0x70 [ 1602.129489][T11781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1602.134688][T11781] ? __pfx__printk+0x10/0x10 [ 1602.139285][T11781] panic+0x2db/0x790 [ 1602.143191][T11781] ? __pfx_panic+0x10/0x10 [ 1602.147695][T11781] ? ret_from_fork_asm+0x1a/0x30 [ 1602.152639][T11781] __warn+0x31b/0x4b0 [ 1602.156641][T11781] ? usb_submit_urb+0xc82/0x1890 [ 1602.161580][T11781] ? usb_submit_urb+0xc82/0x1890 [ 1602.166510][T11781] report_bug+0x2be/0x4f0 [ 1602.171712][T11781] ? usb_submit_urb+0xc82/0x1890 [ 1602.176645][T11781] ? usb_submit_urb+0xc82/0x1890 [ 1602.181584][T11781] ? usb_submit_urb+0xc84/0x1890 [ 1602.186696][T11781] handle_bug+0x84/0x160 [ 1602.191020][T11781] exc_invalid_op+0x1a/0x50 [ 1602.195736][T11781] asm_exc_invalid_op+0x1a/0x20 [ 1602.200580][T11781] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 1602.206120][T11781] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 40 26 34 8c 4c 89 f6 4c 89 fa e8 df 2d 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 f0 2c de 8e e8 85 [ 1602.226342][T11781] RSP: 0018:ffffc9000534ead0 EFLAGS: 00010246 [ 1602.232441][T11781] RAX: 1c7bb038cf69bb00 RBX: ffff888021ade000 RCX: 0000000000100000 [ 1602.240506][T11781] RDX: ffffc90019d42000 RSI: 00000000000376c0 RDI: 00000000000376c1 [ 1602.248663][T11781] RBP: 0000000000000000 R08: ffffc9000534e7e7 R09: 1ffff92000a69cfc [ 1602.256638][T11781] R10: dffffc0000000000 R11: fffff52000a69cfd R12: ffffffff8c34242c [ 1602.264611][T11781] R13: dffffc0000000000 R14: ffffffff8c348f20 R15: ffff8880776b6040 [ 1602.272802][T11781] smsusb_start_streaming+0x22/0x340 [ 1602.278104][T11781] smsusb_probe+0x18f6/0x2060 [ 1602.283058][T11781] ? __pfx_smsusb_probe+0x10/0x10 [ 1602.288101][T11781] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1602.293649][T11781] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1602.299713][T11781] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1602.306037][T11781] ? __pm_runtime_set_status+0x785/0xa50 [ 1602.311667][T11781] usb_probe_interface+0x644/0xbc0 [ 1602.316793][T11781] ? __pfx_usb_probe_interface+0x10/0x10 [ 1602.322422][T11781] really_probe+0x26a/0x9a0 [ 1602.326924][T11781] __driver_probe_device+0x18c/0x2f0 [ 1602.332212][T11781] driver_probe_device+0x4f/0x430 [ 1602.337250][T11781] __device_attach_driver+0x2ce/0x530 [ 1602.342670][T11781] bus_for_each_drv+0x251/0x2e0 [ 1602.347520][T11781] ? __pfx___device_attach_driver+0x10/0x10 [ 1602.353791][T11781] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1602.359161][T11781] __device_attach+0x2b8/0x400 [ 1602.363951][T11781] ? __pfx___device_attach+0x10/0x10 [ 1602.369338][T11781] ? do_raw_spin_unlock+0x122/0x240 [ 1602.374545][T11781] bus_probe_device+0x185/0x260 [ 1602.379555][T11781] device_add+0x7b6/0xb50 [ 1602.384098][T11781] usb_set_configuration+0x1a87/0x20e0 [ 1602.390361][T11781] usb_generic_driver_probe+0x8d/0x150 [ 1602.395851][T11781] usb_probe_device+0x1c4/0x390 [ 1602.400954][T11781] ? __pfx_usb_probe_device+0x10/0x10 [ 1602.406401][T11781] really_probe+0x26a/0x9a0 [ 1602.411242][T11781] __driver_probe_device+0x18c/0x2f0 [ 1602.416625][T11781] driver_probe_device+0x4f/0x430 [ 1602.421669][T11781] __device_attach_driver+0x2ce/0x530 [ 1602.427155][T11781] bus_for_each_drv+0x251/0x2e0 [ 1602.432108][T11781] ? __pfx___device_attach_driver+0x10/0x10 [ 1602.438009][T11781] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1602.443416][T11781] __device_attach+0x2b8/0x400 [ 1602.448729][T11781] ? __pfx___device_attach+0x10/0x10 [ 1602.454137][T11781] ? do_raw_spin_unlock+0x122/0x240 [ 1602.459427][T11781] bus_probe_device+0x185/0x260 [ 1602.464278][T11781] device_add+0x7b6/0xb50 [ 1602.468627][T11781] usb_new_device+0xa39/0x16c0 [ 1602.473474][T11781] ? __pfx_usb_new_device+0x10/0x10 [ 1602.478781][T11781] ? _raw_spin_unlock_irq+0x23/0x50 [ 1602.483974][T11781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1602.489346][T11781] hub_event+0x2941/0x4a00 [ 1602.493872][T11781] ? __pfx_hub_event+0x10/0x10 [ 1602.498638][T11781] ? process_scheduled_works+0x9ef/0x17b0 [ 1602.504350][T11781] ? _raw_spin_unlock_irq+0x23/0x50 [ 1602.509537][T11781] ? process_scheduled_works+0x9ef/0x17b0 [ 1602.515279][T11781] ? process_scheduled_works+0x9ef/0x17b0 [ 1602.521080][T11781] process_scheduled_works+0xae1/0x17b0 [ 1602.526631][T11781] ? __pfx_process_scheduled_works+0x10/0x10 [ 1602.532698][T11781] worker_thread+0x8a0/0xda0 [ 1602.537824][T11781] kthread+0x70e/0x8a0 [ 1602.541911][T11781] ? __pfx_worker_thread+0x10/0x10 [ 1602.547012][T11781] ? __pfx_kthread+0x10/0x10 [ 1602.552287][T11781] ? _raw_spin_unlock_irq+0x23/0x50 [ 1602.557474][T11781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1602.562661][T11781] ? __pfx_kthread+0x10/0x10 [ 1602.567239][T11781] ret_from_fork+0x3fc/0x770 [ 1602.571906][T11781] ? __pfx_ret_from_fork+0x10/0x10 [ 1602.577004][T11781] ? __switch_to_asm+0x39/0x70 [ 1602.581754][T11781] ? __switch_to_asm+0x33/0x70 [ 1602.586712][T11781] ? __pfx_kthread+0x10/0x10 [ 1602.591422][T11781] ret_from_fork_asm+0x1a/0x30 [ 1602.596285][T11781] [ 1602.599825][T11781] Kernel Offset: disabled [ 1602.604242][T11781] Rebooting in 86400 seconds..