last executing test programs: 1m38.543414299s ago: executing program 0 (id=13): r0 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202) r1 = socket$inet_sctp(0x2, 0xfffffffffffffffe, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000400)=0x84) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x7) timer_create(0x2, 0x0, &(0x7f0000000540)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x10, r4, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f0000000040)=0x1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r7, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) write$apparmor_exec(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="65786563203a00082b70f1349dd51cc4e80dfac1d62de5280ba0d30b0c45c64997fd"], 0x2a) preadv(r6, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)=""/20, 0x14}], 0x2, 0x6, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d80)}, 0x20000001) rseq(0x0, 0x0, 0x0, 0x0) 1m36.184156854s ago: executing program 0 (id=18): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x101502) dup2(r2, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x2) syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000000), 0x0) close(0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r4, &(0x7f00000000c0)=""/20, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) io_setup(0xbb, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1m32.151588575s ago: executing program 0 (id=31): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c20102030109022400010010", @ANYRES8=0x0], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7c, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0x2, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0xd, {{0x7, 0x24, 0x6, 0x0, 0x0, "05f7"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xf40, 0x3, 0xad}, [@country_functional={0xa, 0x24, 0x7, 0x6, 0x1, [0xd, 0x1]}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x1, 0xff, 0x1, 0x6, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4b, 0x2, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x458, 0x5, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x4, 0xff, 0x9, 0xff, 0x10}, 0x3a, &(0x7f0000000b80)={0x5, 0xf, 0x3a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "cdb9c532f8cb125337aac28edc4cb9d0"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x41, 0x8, 0x7ff}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x4a, 0x780, 0x1, [0xf, 0xff0000]}]}, 0x1, [{0xe4, &(0x7f0000000bc0)=@string={0xe4, 0x3, "dada0d8f548d2d877b197d575d9bfb0978ed2a75f39bbde80843bb21a17adcbac6ae07e85d6fcb1bc058b076d2e828454d85e93cf9877569c652a2264658bf3fe2bba967876807b4b227d85cda987433b110aa6d0ff32079de7ccb7df441a92d205c86a12221f4899d8a9308e9ede54559af1e3044ae5e5306024ee68276d7b1ccadf8adc3b631a141b664314313e905d69b4bf3dad9f7d62c7a657e01ac68f93ab3acd4f18484e803f58aadb900668654633726738845afd88d05322e95f8eb30d4794b798b21029b67158b0e9644cb29f52a63602d3e74ab15137c6f47630fd68a"}}]}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0003a4000000a403a26a6a28af8939a61ed56a45d118d7b7dc5af5e2c67731a207d8f983f94efeb46d77f041d5ee83e0d19aa5e972d295a64464b6461607098c72b21b204e0b89bd95dc23df8650f55d81b315b60f8e3aeb3439180f9231709bd3f6fc4b05c2356a30aa8c03cf361f789f5867dd"], 0x0, 0x0, 0x0}, 0x0) syz_clone3(&(0x7f0000000a00)={0x1000900, &(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000840), {0x1d}, &(0x7f0000000880)=""/34, 0x22, &(0x7f00000008c0)=""/210, &(0x7f00000009c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r2 = syz_open_dev$video4linux(&(0x7f0000000300), 0x100, 0x80) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000180)={0x1, 0x0, {0xfffffffd, 0x6}}) syz_open_procfs(r1, &(0x7f0000000a80)='net/fib_trie\x00') syz_emit_ethernet(0xdf, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xa9, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [{0x4, 0x10, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce3"}]}}}}}}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0xa1, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0x9, 0xf0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "15ac73"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x12, 0x7, 0x336, 0xe}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xfff, 0x0, 0x2, 0x7, 0x7f}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xfff2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd8, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x5, 0x8, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb, 0x2, 0x9}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x9, 0x47, 0xd, 0x20, 0x8}, 0x2d, &(0x7f0000000140)={0x5, 0xf, 0x2d, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x0, 0xf00, 0x5, [0xc03f, 0x39c51ee3698c30aa, 0xcf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x7, 0x8001}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x426}}, {0xfc, &(0x7f00000001c0)=@string={0xfc, 0x3, "20fbb39925d6d18fbf2e7a4ec4516534f584a2689774c265e750004ebaf7b4e8e34f3c0f80ce08ff011ce164bfaf450574050146fbd240dfee21847ec01eec363554b4b180d44ea5c9a4e17917f92eafb0b36ee63a77c2ec038c5a402de3826f62fb402809c0cb16180aa5d4e6c73c8d8a276ba25fa22fb25630e047cfe9cb482d5f84325e9ebd8b1b75605704628a4a861f6884a82cedbfc194661e705c68415f99c617d3e60114a4ff365e2bf6f9bac9d8b79e0252001a32cf3c01597900d34ebabb2ae82db64c02dced179e8d1a06a31acf7649ff01012744a77f5735951dce3cb502728ef6b58f9c179fe548d849803001a3a3794cc3723f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x64, &(0x7f0000000300)=ANY=[@ANYBLOB="6403bc5c08c0e562d3f691809f18e2e550b5e58ba2fb68c7074327c2ec88f56278a05fe220fdd0c4a37c97c5f3c001fc717453ea65f3734a81bff69867e47ac1d64e9cde70d3781200000000000000000000000000000000c25100000000000000"]}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) munlockall() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r5}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) munlockall() syz_usb_control_io$cdc_ncm(r3, &(0x7f00000004c0)={0xc, &(0x7f00000003c0)={0x20, 0x9, 0xfffffffffffffded, {0x88, 0xa, "4609ba607de8aeef1765601deadd86f155aa9656c1e385b0bd4c624148842e9f9d08d5feed7a85d3c8f263820c59e150238fc1a0d649f3b6e910ca728c8676cf61cef3d2b863e56536ae77ccf43ec90d87ed98c48a5cade4093f5a79592539ca2e51939f3d9b16027446c45a8f1b71974f7c002a8670e418ffbb7618d43d3f8bb67732568e7f0bf9bce93c32573e80b473c0827b7db69ebd8fb1b4216431d1205910e1af95e4ecabf7b07fd4697b168cde177cebbfbbe1"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x24, &(0x7f0000000500)={0x0, 0x13, 0x76, "7f92efcf0493f313d6da600798c1d611a7b2c5d67fa2922f7a88b66ff9b9c1c2628ec7de6dabe3a796c8a9b7ec12b6a9cc270a442080d86aecd5d097a343985a67a0fbba1e55dd1d350b171662eb1f1f2d2db4631c67a718bd1d66e0762e1416e0d0bce6120013c11cd3d36942ea4f15e6a934847b61"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x400, 0x4, 0x7cb, 0x0, 0xfffa, 0x1, 0x0, 0x200, 0x6, 0x8, 0x4212, 0x6}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000680)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000000700)={0x20, 0x89, 0x2}}) 1m30.454930554s ago: executing program 2 (id=35): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOSETOWN(r6, 0x8901, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) 1m29.614006814s ago: executing program 0 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000021c0), 0x24, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket(0x840000000002, 0x3, 0xff) io_setup(0x5, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) 1m28.794855579s ago: executing program 2 (id=38): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x7, 0x6, 0x34565348, 0x5, 0xe0e, 0x101, 0x6, 0xfeedcafe, 0x1, 0x1, 0x2, 0x3}}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) close(r1) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000f80)={0xa, 0x0, 0x0, @loopback={0xffffffffffffff9d}, 0xa7a}, 0x1c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x2, 0x700, 0x0, 0x18}}}}}, 0x36) 1m28.530315464s ago: executing program 2 (id=40): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOSETOWN(r6, 0x8901, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) 1m27.874970416s ago: executing program 1 (id=42): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) io_getevents(0x0, 0x8, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xfef, 0x1) execve(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x314, 0xa4, 0x138, 0xfeffffff, 0xa4, 0x1dc, 0x280, 0x280, 0xffffffff, 0x280, 0x280, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, @icmp_id=0x64, @port=0x4e20}}}}, {{@ip={@private, @broadcast, 0x0, 0xff, 'pimreg0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x1dc}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x0, 0x6}, {0x0, 0x4}, {0x3, 0x1, 0x5}, 0x23f5, 0xfffffcbc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x0, 'Z'}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x1, 0x1, 0x2, "a4"}, @main=@item_012={0x1, 0x0, 0x9, "ff"}]}}, 0x0}, 0x0) 1m27.185845724s ago: executing program 0 (id=43): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={r5, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000001400)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="fd2f8987c201446d81ed37fca0749e56530396c756141f1251c9f2c8d710ffee78e76b4a0d2d5aeef97375674cee2f4fd9fff4da5bf8394a45788e3e303c2b52fdf1dc6773f6b3a9258fcaf0f6f31dea152a5bfe4d6873e2ee379c13c750675ed4adc32a9f0fb05d347280b3c56a4d69b380959f41008455e2ee5c41a2a67cc98bb83f55d3db0731fae5cdc4d8f291a7d36da6a31d0e86352f7c537f2f7fa42af9bf8860dffbd8adc500c5e77da606bc6f48686bfa0def446cfd630d835ef9c7d8c5d31a71d72043b3a2b145bcb9f3bf82bf84205f546e0e2158d34ee427a031fb13873508d96d993c", 0xe9}], 0x1, 0x0, 0x0, 0x4040011}, {0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)="14b978467d67d600684e920d20aa654db901b70f04db23f771aa29b865fa9ce31b72cf63ddbf", 0x26}, {&(0x7f0000000240)="2b7745adceedb15cc3097115130c97975c48309849f8a39770bb", 0x1a}, {&(0x7f0000000280)="d9bcb289ffde50876e348adeec55e5b8d390ffbcb0dd71669be3d1717a0ee6cc984003a5042fd247764ca2f33567ea47047ae76a057b595390a4164a549fae92821c58fb390f5a2c4588ace2eef8b542161e86f5c81d54e7ec9b40f3f2ce1e7b6bdf9cf61f6e8e64cbc9f7722a0ba8ec6198cd9e28d976e855ccacd0cd7110a985bab868c745c8a0b5e2a6202b8d66a6", 0x90}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="f27feb5a2c1cc10a356db6049e", 0xd}], 0x5, &(0x7f00000013c0)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x4}], 0x40, 0x20040130}], 0x2, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e00000010000000000", @ANYRES32=0x0, @ANYBLOB], 0x120}}, 0x0) 1m26.936007236s ago: executing program 2 (id=45): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() madvise(&(0x7f00001dc000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000680)={0x2, @pix_mp={0x102, 0x3, 0x34325852, 0x7, 0x0, [{0x5000000, 0xd328}, {0x401, 0x3}, {0x4, 0x1e7}, {0xffffffff, 0x40}, {0x8005, 0x1000}, {0x8}, {0x3, 0x200}, {0x8, 0xff}], 0x89, 0x9d, 0x3, 0x1, 0x4}}) umount2(&(0x7f0000000080)='./file0\x00', 0xc) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x141) copy_file_range(r2, &(0x7f0000000000)=0xb32, r2, 0x0, 0x7, 0x0) 1m26.817445033s ago: executing program 0 (id=46): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)='4', 0x1, 0x2000c8d1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4, 0x800, 0xfff}, &(0x7f00000001c0)=0x10) 1m26.482635788s ago: executing program 32 (id=46): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)='4', 0x1, 0x2000c8d1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4, 0x800, 0xfff}, &(0x7f00000001c0)=0x10) 1m25.641896669s ago: executing program 2 (id=48): r0 = epoll_create1(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r2, 0x2}}, 0x18) unshare(0x8040480) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f00000c2000/0x1000)=nil, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = fanotify_init(0x200, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/100, 0x38}], 0x1) sendmmsg$inet6(r4, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)="385e2420aa402647f064d1a1499cd9d07e4e40a4882f609514cc842fc83602368d4d59ce057d6c2fa637caa6f440c0f50b51b1484ec4ce4580efadbefbd565e220954fb135ad14abd4c10f76cf7083bd04aad291c252ce7ce75e86d55e22567759cd91356771cccf1ab018a4170b41842a82fa60a49ca885e251af92adee79a3004447aa", 0x84}, {&(0x7f0000000200)="7a63cb36cc744321a1", 0x9}], 0x2}}], 0x1, 0x10) shutdown(r4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setitimer(0x2, &(0x7f0000000540)={{}, {0x0, 0x2710}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0xa, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e1f, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}}}, &(0x7f00000002c0)=0x88) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000016c0)=""/245, 0xf5}], 0x1, 0x743, 0xfffffffd) socket$nl_route(0x10, 0x3, 0x0) 1m25.572290402s ago: executing program 1 (id=49): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0xba}}, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$nvram(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) unshare(0x8040480) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70020500000005000000060001000500000008000b010400000008000c00ac0a0000080009000200000005000500010000000c000f000800000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0xfffffffffffffffe, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x5, 0x2, 0x0, 0x3}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendfile(r3, r8, &(0x7f0000000280)=0x5, 0x1ff) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r9 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000031c0)="b81692590d9e80715eca37db0e50e8f36a93a2cdb3185cf1a051c934a4183adf7dd656a86864f6c1af8adf428ab0c0e23ae5d56fa558f60d8cdd4eba2cf8e195b965c942ee91c12be0a1a79b945ae4877d366a5a54ebe6d582651c85119a44c41852eea964959f21bc1a18192ad2957a5fa27be9d01ed0cd8706d7451c97370e31f144a78538121e5a6006b19ea6ca57baee566c428c6821e8be", 0x9a}], 0x1}}], 0x1, 0x24040810) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) 1m25.299267027s ago: executing program 1 (id=51): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/153, 0x99}, {&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000200)=""/121, 0x79}], 0x4, &(0x7f00000002c0)=""/36, 0x24}, 0x3}, {{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/143, 0x8f}], 0x1, &(0x7f00000004c0)=""/200, 0xc8}, 0x2}, {{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)=""/13, 0xd}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/244, 0xf4}], 0x5, &(0x7f0000000880)=""/39, 0x27}, 0x3}, {{&(0x7f00000008c0)=@nl, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/23, 0x17}, {&(0x7f0000000a80)=""/148, 0x94}], 0x3, &(0x7f0000000b80)=""/255, 0xff}, 0x8}], 0x4, 0x10002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) r3 = syz_open_dev$vcsa(&(0x7f0000000dc0), 0x7fffffff, 0x20000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) r7 = fsmount(r0, 0x1, 0x2) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', r1, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, [@exit]}, &(0x7f0000000d00)='syzkaller\x00', 0x82, 0x0, 0x0, 0x41100, 0x2, '\x00', r1, @fallback=0x2b, r2, 0x8, &(0x7f0000000d40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000d80)={0x2, 0xf, 0x3, 0x800}, 0x10, 0x0, r3, 0x5, &(0x7f0000000f80)=[r4, r5, r6, 0x1, r7, r8], &(0x7f0000000fc0)=[{0x4, 0x5, 0xd, 0xb}, {0x4, 0x2, 0xb, 0x8}, {0x0, 0x4, 0x1, 0x4}, {0x5, 0x2, 0x5}, {0x4, 0x3, 0xc, 0x2}], 0x10, 0x1, @void, @value}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m24.505038094s ago: executing program 2 (id=52): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOSETOWN(r6, 0x8901, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="01090000000000005d001b00"], 0x28}}, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) 1m23.973816591s ago: executing program 33 (id=52): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOSETOWN(r6, 0x8901, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="01090000000000005d001b00"], 0x28}}, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) 1m23.935380257s ago: executing program 1 (id=54): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000021c0), 0x24, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket(0x840000000002, 0x3, 0xff) io_setup(0x5, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) 1m20.690014163s ago: executing program 1 (id=57): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x4c, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOSETOWN(r6, 0x8901, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) 1m20.301428803s ago: executing program 1 (id=60): gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = add_key$keyring(&(0x7f0000001700), &(0x7f0000001740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022070028000000000000000071175c14a94e167e9132a9ead2fbed7b5dc5ef7f964b190403762042aee9dbc5bb10acb82abcbf492d65d6636cecae4e24f7d9bad40d8fa140cd645daeeedc57974a76fdf1564183a8b460c66dec976f2330cde971136f92eab3462fc99aebe6f962d3140a4ba55d1ed7691b056b42439c8fb440e445192f1671f0719953569ff55a6cc97b26d895fde1362a48197d9cc2ef47de1386559212a2bb23d69ccf602260aa68"], 0x0}, 0x0) 1m19.9912951s ago: executing program 34 (id=60): gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = add_key$keyring(&(0x7f0000001700), &(0x7f0000001740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022070028000000000000000071175c14a94e167e9132a9ead2fbed7b5dc5ef7f964b190403762042aee9dbc5bb10acb82abcbf492d65d6636cecae4e24f7d9bad40d8fa140cd645daeeedc57974a76fdf1564183a8b460c66dec976f2330cde971136f92eab3462fc99aebe6f962d3140a4ba55d1ed7691b056b42439c8fb440e445192f1671f0719953569ff55a6cc97b26d895fde1362a48197d9cc2ef47de1386559212a2bb23d69ccf602260aa68"], 0x0}, 0x0) 58.466199629s ago: executing program 5 (id=130): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560a117236c379000000000000000058000b4824ca945f640094aef1c4c3b7053bd300000017c1008000f0fffeffe809005300fff5dd00000010000100090c10008f7f8ffe9f448652432c", 0x5a}], 0x1) 58.219564959s ago: executing program 5 (id=133): socket$caif_stream(0x25, 0x1, 0x3) (async) r0 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0xf, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x3, 'lo\x00', {0xf}, 0x3}) openat$dsp1(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$dsp1(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000180)) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0xc) r3 = syz_clone(0x6010000, &(0x7f0000000200)="e21740725c2914824691d9c3e956e81623ec142461df2e522f3dac5ee6d2628105478d5eec4b96569fd9b31e04a3cf3ace5c1edf8bc9e48f4e1846d32f1f66cc11f44f7004ebb201695d169f32425d920c87e59017e1c9ae014493934d08d8bdd9c35c599f18b2f6d57f679f64d710ec13ef333faa1febcb423fdb15ea086f2d6212fefecdd08e0203baa16f900474cbbe668dfeab8ae732d8d034f9d634aac7a943852fa97072f7bcac2b14abc37c4ef3be1a2213cfff391e4ba373a2f4b3f0adb5a4c96444b700659c937af476c7042cac6cea7253", 0xd6, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="ff21bbc477595fe3e654dc82b005a0c9c31b3a589bfcbf5e24795256c81d4add86f3e8424bb2e081ef4b899d62a13932643f5aede9750f2d311ab2571a3f04f9c910cc5d0af101c97d41b1bb55a0be0d66da64994855649ace6f4feac83821707ba7f9c76414d353e3136a0a4f54d4a237b2cacf3102d628c1a1a874f4411198aa170b2faecbb723fc75e30eec261a74a9bcdb7bc02dc82c300fa9ddf73a4bf397efd6f9e2f6f0e41d43016d60b57405b5cfa61cace7e89f736b4bd6e3bb68ae37aa187982ddbeae2e267de2ed83") openat$vhost_vsock(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) openat$vhost_vsock(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000500)={{{@in=@loopback, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe4) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000500)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe4) sendmsg$nl_route(r5, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@ipv6_delroute={0x40, 0x19, 0x2, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x14, 0x9, 0xfc, 0x2, 0xc8, 0xa}, [@RTA_UID={0x8, 0x19, r6}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_IIF={0x8, 0x3, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000700)={{0x2b, @loopback, 0x4e23, 0x3, 'fo\x00', 0x31, 0x55da, 0x39}, {@broadcast, 0x4e21, 0x2, 0x7ff, 0x7, 0x58}}, 0x44) recvfrom(r0, &(0x7f0000000780)=""/4096, 0x1000, 0x0, &(0x7f0000001780)=@phonet={0x23, 0xd, 0xb9, 0xdb}, 0x80) (async) recvfrom(r0, &(0x7f0000000780)=""/4096, 0x1000, 0x0, &(0x7f0000001780)=@phonet={0x23, 0xd, 0xb9, 0xdb}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xa4, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x84b}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x31}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10000}, 0x50) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xa4, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x84b}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x31}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10000}, 0x50) getpgid(r3) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) r9 = syz_open_dev$evdev(&(0x7f00000019c0), 0x10001, 0x1) ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000001a00)=""/106) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r10, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4840) syz_emit_ethernet(0xbe, &(0x7f0000001b80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @remote, @void, {@generic={0x806, "77c1d04ee6eb951446d2f1ce593895327e827cb4df566256a056b0b84d4ee3b0768d98aa275b7d200efc515619b19c68df5d072478013e68b4c43895879de25e7bd75f07ef650ed48b1c40c56dab40909b2e5a387c2399e1ae3ca4bc796a44e825da0c627c85b45372a357adbce7f2b96b3a8678393f97a94636b2c9de467eae1284ad75f65827c7a45fd6c7daf2af3ff16644ca8290707e6b9cad0ff20a611001d6ab0bd49b64de04e6fde15f94c15c"}}}, &(0x7f0000001c40)={0x1, 0x4, [0x828, 0x5eb, 0x163, 0x3e6]}) r11 = syz_open_dev$I2C(&(0x7f0000001c80), 0xffff, 0x20180) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000001d00)={&(0x7f0000001cc0)}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x9802c408}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xd}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfc}]}, 0x24}}, 0x840) 57.797964134s ago: executing program 5 (id=135): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xda, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x40}}}}}]}}]}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'pim6reg\x00', {0x3}, 0x9}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f00000000c0)={0x8}) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000100)={0xfffffffffffffc36, 0x200, 0xf, 0x3}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000280)={0x0, 0x100000000}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x101800) ioctl$MON_IOCX_GET(r5, 0x400c9206, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', r6) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 56.261508316s ago: executing program 3 (id=146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x9198cad17f6d9903, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c}]}, 0x154}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x372, 0x0, 0x19, "40b80000000000000000001c00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x7}, @TCA_FQ_QUANTUM={0x16}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x2, 0x2, 0x41, 0x71, r8}) read$qrtrtun(r7, &(0x7f0000000280)=""/246, 0xf6) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f0000000100)={{@host, 0x40}, 0x1, 0x0, 0x40}) write$binfmt_script(r7, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20, '(@)(!*'}, {0x20, '/dev/nullb0\x00'}, {0x20, '/dev/ptmx\x00'}], 0xa, "630755e21c8b21172219252c623a1df632850a96a57cbca412b21f5d619a48a8ea920b5e9bf510c60009f983c09700a3d12fdfbbf1969ed75f507e7bc120d38ec641cef15e16d335f02e4e316d2c7491ddde027dac8c80806a68d60c681e2c5e5be4880c9bfe006742c85f02bd0369ba4e8a27a0550a3b7638"}, 0xae) syz_io_uring_setup(0x7266, &(0x7f0000000400)={0x0, 0x816d, 0x4, 0x1, 0x98, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) 55.547822055s ago: executing program 5 (id=147): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550b81821"], 0x0}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0xb2c}}, 0x28) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0x0, r3, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x4, 0xa000}}}, 0x78) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf25000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x48000) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000000100)={0x90, 0x0, r3, {0x3, 0x2, 0x8001, 0x8, 0x2, 0x8, {0x1, 0x9, 0x6c, 0xa752, 0x4, 0x0, 0x7, 0x7f, 0x6, 0xc000, 0x7, 0xee00, r5, 0xee, 0x7fffffff}}}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550b81821"], 0x0}, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x28, 0x4, 0x0, {0x1, 0xb2c}}, 0x28) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000003980)={0x2020}, 0x2020) (async) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0x0, r3, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x4, 0xa000}}}, 0x78) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf25000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x48000) (async) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) (async) write$FUSE_ENTRY(r1, &(0x7f0000000100)={0x90, 0x0, r3, {0x3, 0x2, 0x8001, 0x8, 0x2, 0x8, {0x1, 0x9, 0x6c, 0xa752, 0x4, 0x0, 0x7, 0x7f, 0x6, 0xc000, 0x7, 0xee00, r5, 0xee, 0x7fffffff}}}, 0x90) (async) 55.485250994s ago: executing program 3 (id=148): socket(0x1e, 0x3, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80000) r3 = eventfd(0x30000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffff96d, 0xd000, 0x8, r3, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000200)={0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = getpid() process_vm_readv(r7, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x46739, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1003, 0x69}, &(0x7f0000000280), &(0x7f0000000240)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r9, 0x0) recvmsg(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x1, &(0x7f00000000c0)=0x6, 0x2765) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030104000000000000cf00000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 53.853437062s ago: executing program 5 (id=158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000)="2b6f6b9d4da78ecccb65ff5c9d7998c300a184defd363fc3d2578e4083011ae7fa1978aaabe5e828616f6840713782ebff18f9cad0867be4454cebaf9fb81d0bf9c04b64df305d0a6776c475dbd604e1e2a714b100756672adb9e5b0485940b6f3e30b3920713e8667fb4a416cebd8b19b0eff02ea169609945d8f56443c82b1da34e496db46f0f6d5639046c3", 0x8d, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0xa3, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x3f}, 0x20) close(r0) 53.608109551s ago: executing program 5 (id=160): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/153, 0x99}, {&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000200)=""/121, 0x79}], 0x4, &(0x7f00000002c0)=""/36, 0x24}, 0x3}, {{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/143, 0x8f}], 0x1, &(0x7f00000004c0)=""/200, 0xc8}, 0x2}, {{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)=""/13, 0xd}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/244, 0xf4}], 0x5, &(0x7f0000000880)=""/39, 0x27}, 0x3}, {{&(0x7f00000008c0)=@nl, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/23, 0x17}, {&(0x7f0000000a80)=""/148, 0x94}], 0x3, &(0x7f0000000b80)=""/255, 0xff}, 0x8}], 0x4, 0x10002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) syz_open_dev$vcsa(&(0x7f0000000dc0), 0x7fffffff, 0x20000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0x1}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) fsmount(r0, 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 52.81585098s ago: executing program 35 (id=160): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/153, 0x99}, {&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000200)=""/121, 0x79}], 0x4, &(0x7f00000002c0)=""/36, 0x24}, 0x3}, {{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/143, 0x8f}], 0x1, &(0x7f00000004c0)=""/200, 0xc8}, 0x2}, {{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)=""/13, 0xd}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/244, 0xf4}], 0x5, &(0x7f0000000880)=""/39, 0x27}, 0x3}, {{&(0x7f00000008c0)=@nl, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/23, 0x17}, {&(0x7f0000000a80)=""/148, 0x94}], 0x3, &(0x7f0000000b80)=""/255, 0xff}, 0x8}], 0x4, 0x10002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) syz_open_dev$vcsa(&(0x7f0000000dc0), 0x7fffffff, 0x20000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0x1}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) fsmount(r0, 0x1, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 52.273296747s ago: executing program 3 (id=165): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"a2e3ad21ed0d09f91b33090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f3b006d090890e0878f0e1ac6e7049b336d959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b37070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdb4d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b910100e193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b43f0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42aaed469edccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4abffff03861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7ccc57c2bb1e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190ba60420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e83f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d4860467520e3b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a640517705da56e9ebf08fa53282bf86dbb58c549069ff6ea15aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f473d6d87a1bb44fe5ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3faf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0038de8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06a070089c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb2d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6619b6c8f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea7fcb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c2fe59439cdda66e8238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xffffffffffffff26}}, 0x1006) syz_usb_connect(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0xffffffffffffff26}}, 0x1006) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905"], 0x0) (async) 49.053396411s ago: executing program 3 (id=175): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x2e, 0x2, 0x7, 0x3}, 'syz0\x00', 0x2}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbbd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x4a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8050) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 48.121381747s ago: executing program 3 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000000000080020000000100000008000000080000000800000000000000000000006f6779480000000001000040000000000400000048762331"]) 47.421454198s ago: executing program 3 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40046}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a05000000000000000000020000000c0003400000000080000002090002007379962ffaf500000900010073797a30"], 0x8c}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 46.623529452s ago: executing program 36 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40046}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a05000000000000000000020000000c0003400000000080000002090002007379962ffaf500000900010073797a30"], 0x8c}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 9.025481644s ago: executing program 7 (id=350): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000000)=""/124, 0x7c}], 0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff94000040"]) read$qrtrtun(r0, &(0x7f0000000140)=""/245, 0xf5) 8.453324471s ago: executing program 4 (id=352): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"846bb400", 0xffff, 0x6, 0x2, 0x5, 0x0, "f1b304c3e94627219cca0000fe3100", "000416e2", "0400", '\x00 \x00 ', ["90000000060000000800", "aafed6a34c8acf2f5a867243", "000000ff0000000000000020", "000200"]}) 8.131707966s ago: executing program 4 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) memfd_create(0x0, 0x3) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x46}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20084840) 7.314639442s ago: executing program 7 (id=358): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0xfffffffffffffc70, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000007c9c0d224d324b9a7abb3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) timer_create(0x3, 0x0, &(0x7f0000000780)=0x0) timer_settime(0x0, 0x413df92af0658268, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000040), &(0x7f0000000140)) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x3, 0x100, 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}, @IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x4b}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x6c}}, 0x80) 7.260758127s ago: executing program 8 (id=360): r0 = epoll_create1(0x80000) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7f36be39) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$USERIO_CMD_REGISTER(r1, &(0x7f00000001c0)={0x0, 0x1}, 0x2) 6.311889546s ago: executing program 8 (id=362): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000032c40)=""/102359, 0x18fd7, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000280)={0x20, 0x17, 0x4, "e234b168"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000001240)=""/179, 0xb3}], 0x1, 0x125, 0x7) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) 4.336055714s ago: executing program 8 (id=363): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket(0x10, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d270015000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0)=0x8b, 0x180000504) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f000000d380)=0x3) ioprio_set$pid(0x3, 0x0, 0x0) open(0x0, 0x80242, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xf, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) 4.077390685s ago: executing program 7 (id=364): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048cc) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x308) r2 = creat(&(0x7f0000001140)='./file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './bus'}, 0x9) copy_file_range(r3, &(0x7f00000008c0)=0x4, r2, 0x0, 0x8, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4602d30000000000000000000002003e000b000000ff0200003400000080000000ffffff7f0000200001000400000004000300000001000000f9ffffff09000000c6000000020000000080000002000000"], 0x54) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 4.076641131s ago: executing program 8 (id=365): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000700)={0x2, 0x0, @ioapic={0x10000, 0x3, 0x1, 0x7, 0x0, [{0x6, 0x80}, {0xe7, 0x0, 0xfb, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0x92}, {0x2, 0xc6, 0xe, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x5, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0xa, 0x3, 0x1a, '\x00', 0x7}, {0x5, 0x8, 0xdb, '\x00', 0x1}, {0x0, 0x4, 0x7, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x0, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x44, '\x00', 0x8}, {0x9, 0x9, 0x2, '\x00', 0xfe}, {0x5c, 0xc3, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0x8, '\x00', 0x6}, {0x8, 0x3, 0x2, '\x00', 0x14}, {0x6, 0x4, 0x80, '\x00', 0x46}, {0x7, 0x4, 0xf1, '\x00', 0x1}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0x3}, {0x0, 0x7f, 0x7, '\x00', 0x2}]}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x10, 0x2f}, 0xfffffffd}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{}, {0x7c}, {0x6}]}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x946}, 0x1c) shutdown(r4, 0x1) sendto$inet6(r4, 0x0, 0x0, 0x2004c090, 0x0, 0xa) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r8 = openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a201, 0x0) r9 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000108f22090700000000000109022d00010000500809040002010300000009210bb0cce13312c197db2f4b5e67b33900000122f804190581030000670000090502030000160100"], 0x0) socket(0x2b, 0x3, 0x9) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000ff6b1d01014000010203010902880003010610080904000000010100000a2401ff0108020102112406040205010004000a0009000100ff0a24070401006f5693430904010000010200000904010101010200000905010908000c0792072501800700000904020000010200000904020101db83eb970d86010200000e2402010502010326bb69b1fb8809058209000400048007"], &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x2, 0x6, 0xf, 0x10, 0xc}, 0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f3e000503100b0710020218000814100409855c353f1d09127d0de6d3abba0f98aa14100407ec9b90d14ed9c1145fecf32ed8c67af50710021055a807"]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) write$UHID_INPUT(r8, 0x0, 0x0) 4.012177423s ago: executing program 4 (id=366): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"846bb400", 0xffff, 0x6, 0x2, 0x5, 0x0, "f1b304c3e94627219cca0000fe3100", "000416e2", "0400", '\x00 \x00 ', ["90000000060000000800", "aafed6a34c8acf2f5a867243", "000000ff0000000000000020", "000200"]}) 3.793301503s ago: executing program 4 (id=368): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lseek(r2, 0x4, 0x4) write$P9_RLERRORu(r2, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES32=0xea60, @ANYRES32=0x0, @ANYRES32=0x2710, @ANYBLOB="00000000010000000000000004000000ce12052110c01040"], 0x38}, 0x2, 0x0, 0x0, 0x24}, 0x20000080) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000400)=""/201, 0xc9}], 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f00000001c0)=[{0x2, 0x2, {0x1, 0xff, 0x1}, {0x2, 0x0, 0x2}, 0x1, 0xfe}], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r10, 0x801000, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12, 0x0, 0x4, "339f000bbe82b39a000000000000000000000d0ec0abb4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83223691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0375c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "2424c97e4c00000000fcff00", [0xb, 0xfbfffffffffffffd]}}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r9, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xd3400000, 0x6, 0x1, 0x1008, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) 3.762722852s ago: executing program 7 (id=369): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) read$qrtrtun(r0, &(0x7f0000000140)=""/245, 0xf5) 3.615005903s ago: executing program 6 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf8, 0x7b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x800) syz_emit_ethernet(0x26, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x3, 0x6, 0x18, 0x66, 0x0, 0x1, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x80, 0x3, 0x8}]}}}}}}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r4, 0x40044102, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x124, r2, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xcab, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc1, 0xbe, "125db1ac2470e6a061b150435d67902adf947ad938c0229292e1a5549a59b1af3539dbfa2a9af2be6205befa90b988c91b642e065c26520caea14c0b5dbc4b6721e887358cbdffb4d871c3709459be0c6d735c726bfbfeaea530117009d3f018faad01d1863662ad59cc38b485c53928876e38432fa30b270f136e416b605255447ede0dcc4f6b5662725606ed8860157317cd0b2531bc867b8a10265b28e3c175ec35140de18911af2b0450e23029a00d9a2dcad51ffdfe5e5c7e2933"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x1, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd25, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) 3.50108321s ago: executing program 7 (id=371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) fallocate(r0, 0x24, 0x7, 0x54bb) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00', &(0x7f0000000200)=""/231, 0xe7) r2 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x8, 0x4, 0x839}) 3.360628533s ago: executing program 6 (id=372): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560a117236c379000000000000000058000b4824ca945f640094aef1c4c3b7053bd30000000000008000f0fffeffe809005300fff5dd214e0010000100090c10008f7f8ffe9f448652432c", 0x5a}], 0x1) 3.300585671s ago: executing program 7 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) memfd_create(0x0, 0x3) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x46}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20084840) 3.134431798s ago: executing program 6 (id=374): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000002140)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x18, &(0x7f0000000000)={0x0, 0xa, 0x7, {0x7, 0x0, "ffffffffea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x552f68ec007f6b6f, 0x102, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0x7, 0x20, 0xab, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0x2}, [@selector_unit={0xa, 0x24, 0x5, 0x3, 0xb, "231ce002bf"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x307, 0x1, 0x6, 0x4}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0xb, 0x0, "503be0"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x1, 0x1, 0x28}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x4, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x7, 0x7, "b9fa60e075c38158"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0xd2, "0645f550"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0xdf, 0x7, 'Z'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3, 0x1e, "", "cc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc2, 0x0, 0x16, {0x7, 0x25, 0x1, 0x82, 0x1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x8, 0x3, "343a5e021b93"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x3, 0x7, "c111957807279e6bd8"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc, 0x4, 0x1, 0x7, "470f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb0, 0x3, 0x1, {0x7, 0x25, 0x1, 0x83, 0x0, 0x7}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0x7, 0x4, 0x20, 0x3}, 0x74, &(0x7f0000000240)={0x5, 0xf, 0x74, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x3, 0xff0f, 0x7, [0x1400f, 0xff3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x7, 0xfffc}, @generic={0x51, 0x10, 0xb, "1eaf9b014399c47cf8984a57573e05db36acda06e153a9813c3368453170515b5d91aea1d826d606fa7277aae201723c56f9fd1dbe8b7171670aaf275738d4e30685d63a73f1293543af575acfc4"}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40a}}]}) 2.833112543s ago: executing program 9 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd25, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) (fail_nth: 9) 2.616420594s ago: executing program 4 (id=377): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xbf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) r0 = syz_usb_connect$uac1(0x5, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x2, 0x70, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x30, 0x0, 0x0, 0x3, {0x7, 0x25, 0x1, 0x0, 0x5, 0x973}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x600, 0x82, 0x6, 0xd9, {0x7, 0x25, 0x1, 0x82, 0xf3, 0x8}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0xf, 0x8, 0x8, 0x10, 0x2}, 0x8b, &(0x7f0000000300)={0x5, 0xf, 0x8b, 0x1, [@generic={0x86, 0x10, 0x1, "b0331710379616a052bb14142fa8f0096174b7f61484b7a91360cc8a6a37e71ec15babc2498f93cafeb424f851ac4b8a7667e443ce429c953c6e3e4dce5b410bb90f3d699acd05550e2a4ebd90f3d760699d63776409510ec14d61a312c92365d0cf1d03911ed5f9656732d1eb371491e26fe7aeabe2d9a77693313c2e91d8c14cb321"}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x407}}, {0xfa, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}]}) syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') syz_usb_control_io(r0, &(0x7f0000000800)={0x18, &(0x7f0000000580)={0x0, 0xb, 0x7d, {0x7d, 0x5, "3b0cb750c55dbb82b1dcbfd5f2b6562123a59f5aa020e0de645f2621534299d74be000536d39c7bf052be505281cbd31519319f1643f9a2947ad0aae200e449d037f39934b2c548520c2d85d9c7bf05b73b603be79e1ed7e88034c9eed48ac7ead367bedb0582e72221c74097cde0f7366a6fba5ba523adfbe03fe"}}, &(0x7f0000000d00)=ANY=[@ANYBLOB="00a8b9953992000000569230260000e4000200"], &(0x7f0000000680)={0x0, 0xf, 0xd8, {0x5, 0xf, 0xd8, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x6, 0xe}, @generic={0xae, 0x10, 0xf, "ab13aa70e39e18ecebc20cf82e6541cbd78f2f7efecbd7bdb69ffde64ede41e3747993a65b740685fb482ff969d129eb16628c60fd84421795e5e1b6bbb03786e165d8d43d77b1e9132e886e5b628f80205280fac366118c4f868ad77045d83472c0d347d5cd351b404edf113c81ff12880bb84d6115ca34bddef343ed2064a394be754e58085fad9ca6283d944494bc8b096f40cc31d6225d8a8be12009917095812f841c7c6e5a5ac0e0"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x7f, 0x4c, 0x5}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x4, 0xf00, 0x2e9, [0xf]}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x80, 0x7, 0x7, "4e6243e0", "8366483e"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x4, 0xff, 0xc5, 0x800, 0x5184}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000840)=ANY=[@ANYBLOB="400f4a0000009c935df0af90759917d5f32953eabb9a51626972b860953fd283783f1c5c55f48e0241ed52b2d511dd176d082fdb6034d97a0bbf3341dcfc6ae1dfe68ca78fab7355a1eb25dc13000000"], &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x4, 0x88}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "5993"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0xa}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x8}}) r1 = userfaultfd(0x80001) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000a40)=""/65, 0x41}, {&(0x7f00000003c0)=""/178, 0xb2}], 0x2, 0x0, 0x0) fanotify_init(0x200, 0x0) socket$netlink(0x10, 0x3, 0xf) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406a05840000000000000109022400010000e002090400000203000100000000000080220500090581030002000003"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000280)={0x18, &(0x7f0000000080)={0x40, 0xd, 0x7, {0x7, 0x24, "79012479d6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r7, 0x1, 0x5, 0x0, &(0x7f0000000540)) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000d40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xa0, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0xf07}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0xbd, 0x4}}}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x250, 0x4, 0x0, 0x2, 0x40, 0xfa}, 0xb1, &(0x7f0000000dc0)={0x5, 0xf, 0xb1, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x88, 0xe1, 0x1cbf, 0x2}, @generic={0x7d, 0x10, 0xb, "e63a706534e1decd84c508086cdc302daf8aa2b421a5751f7377293d75446d9f2847c1ee0fad9f345820b3fa48a47b89246b64dfd43ff1127de179cd31d452366e08b796a2b07d14c27d67ec4c585b1044eec3abd3bbd9d12ea6c8f67a900ac846011a58225f7c75ff3f1e455096ec46fb9ca7b06a8dd6950184"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7, 0xdc, 0xd, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xfc, 0x6, 0x100, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x3, 0x7ff}]}, 0x7, [{0x8c, &(0x7f0000000e80)=@string={0x8c, 0x3, "ebb9d8c58fcf449706882ed77fef18fc0191fa9b37debf12b7934cc8675d27514d8e74c6adc03fee080051f1689ab60926a2915864efb0c7eaddbd14a945d4326affd15baf81d306fe5e4ddfac9cb90c51ff57cb7591c5ec24c4057824885ff6e903afcdf54438bcd9c61f05ec74d829bc5be8934b6f0bc02e32b7392236ffb3ae4235e47bb0c5553b76"}}, {0xd3, &(0x7f0000000f40)=@string={0xd3, 0x3, "8e825b8751c69136fc9ca94a15a644284c1bc5945c2b1198cedc4803eada4c8886bebc250848bae088def68dff8bc96a3e125a8181d8634ad21935b5e52b9e6dd743c2ad286d91d110c2a8fdcbab432f05d5e8037cfbafa821037608078c06ea5b5a2f4d6f3491cd367cf94f3532813a69db552150ba05cf620f7cb3e7a25fa507913292a8627c32823f8c377d94cc38504935e7e2a5e7bf63f8c33e6ecdd115e0630c0a653918ddd9dd9a045b34d309fdec067cd8fc897890cc6502b92380b6e9f77196814fbf67517ad705421964c8a1"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xec, &(0x7f00000010c0)=@string={0xec, 0x3, "c8d13492fe4ca59809f3ce908e29face317b5c0b75ad81049bd2e081e3240f614d778e052faa0dfab7ff6b74ad7765cd746d05323f5f68d1eee0b81e5edbcafc99da56da92fde426375948d99ef75b41978d53ae11b05a18e9bed400a5228d9e8fcf81c0f7a89a68067cb182d24fd8641957aead0b34a1d1d951dce8c35d723b8ef172ddc9a33719fa64d01c84f78ed558263458907915d8d72f25c53ca482a62da478a4b86cfc46519d3648dc7c6229ce19569edb7b1c5d8872c4d2d7a27779a43625730d10a3f9dfe656f79c80011efdc2cc59d5697db3b69cdd5a1f9050a4e62cfc5b61e37b51fd6e"}}, {0xaf, &(0x7f00000011c0)=@string={0xaf, 0x3, "a2d037265194576edaa8af84313161c932b424e6713bf988feedba9948dae73b224c8e7ff5d2ec55a5eafb5c6846974f9c608adf4cbb3d975fc2b07c2555168e0f33a92610d935a86c4797ac072db9c8642440e297f72c832cd66704407d54c4ceac66d09b124ed6ab463d45bcb1c7b4b7292bd9c3bad1df8dd023e00aff59d1cfd3734b31854de411af0fc4481361d133ec6b1e3fe308d04b1beef820100f7938d0ea1d8375977f801de53e1c"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x44c}}]}) r8 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) pselect6(0x40, &(0x7f0000000240)={0xff, 0x6, 0x5, 0x2, 0xfffffffffffffff7, 0x8, 0xff, 0xff}, 0x0, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40103d0b, &(0x7f0000000140)={0x7, 0x8}) pipe2$watch_queue(&(0x7f0000000640), 0x80) close_range(r1, r7, 0x2) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 1.973346791s ago: executing program 9 (id=378): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x7fff) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) write$dsp(r0, &(0x7f0000000380), 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f00000008c0), 0x8100, 0x0) read$FUSE(r1, &(0x7f0000000fc0)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x100, {{}, {}, {0x8}}}, 0x24}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) shutdown(r4, 0x1) r5 = socket$inet(0x2, 0x3, 0x33) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r7, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x8, 0xc, 0xd2, 0x4, 0x5, 0xf4, 0x5, 0x5, 0x5, 0x1, 0x4, 0x4, 0x7, 0x9}, 0xe) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) read$dsp(r0, &(0x7f0000000300)=""/79, 0x17d) 1.867579237s ago: executing program 9 (id=379): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"846bb400", 0xffff, 0x6, 0x2, 0x5, 0x0, "f1b304c3e94627219cca0000fe3100", "000416e2", "0400", '\x00 \x00 ', ["90000000060000000800", "aafed6a34c8acf2f5a867243", "000000ff0000000000000020", "000200"]}) 1.807911686s ago: executing program 9 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x41, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd25, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) 1.461403621s ago: executing program 9 (id=381): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@generic={0x22, 0xffffffffffffffbc, "05"}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@generic={0x22, 0xffffffffffffffbc, "05"}]}}}}}}}}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@host, 0xffffffff}, @any, 0x9, 0x3, 0x5e, 0x1, 0xfffffffffffffffb, 0x6, 0xfffffffc}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x4e2, 0x0, 0x20006, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r5 = epoll_create(0xde5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000001}) syz_usb_connect$uac1(0x3, 0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206b1d01014000010203010902be0003f59910050904000000010100000a24014c610602010209240502046480892a0904010000010200000904010101010200000e2401010801100a24020210"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000ac0)=@string={0x2}}, {0x90, &(0x7f0000000480)=@string={0x90, 0x3, "92112670dd3ccf1d0281c3346c814ccfd9cef7644f1f50ed942d5e6cfe2946d64b105dc66ca0acae09f54ae76d4f92e721a22bd68970d1281b8cb7fe0ffdf006b6f8661964b68436b56e26369f2586354d44cb5311dc36b392c9fe6f17cadc5ba8728a3e6d7ba1488ad01311e13bfc3f14107d5ac7fe5312cdfffaa24b84b2637628e90c295aca2b19a7b9dc6ddc"}}]}) 770.282687ms ago: executing program 6 (id=382): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x20000061) read$qrtrtun(r0, &(0x7f0000000140)=""/245, 0xf5) ioctl$FITHAW(r0, 0xc0045878) 546.19352ms ago: executing program 6 (id=383): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000200)={0x80, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {0x4}, [@generic="bbfbf202d33567d01e58a65acbff5be4b5a27ec428bc6c6f97d579456df0e7eaf6c9d8d92d9ab537dbbe1c8740907283e284d2c7fc5b4a442f43c321e9629d3c2afeb40e5e7e725720ca463cc0c1c958c5fb0a0895d61cb872ba4433481ad1ee3bde9b32a3b9ac439728"]}, 0x80}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 489.512439ms ago: executing program 8 (id=384): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560a117236c379000000000000000058000b4824ca945f640094aef1c4c3b7053bd30000000000008000f0fffeffe809005300fff5dd224e0010000100090c10008f7f8ffe9f448652432c", 0x5a}], 0x1) 415.108697ms ago: executing program 4 (id=385): syz_usb_connect(0x0, 0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000063721c40b822484bf03f0102030109024c0001011000000904000000fffbff00052d06000105240000000d240f"], 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0], 0x0) sendto$inet(r0, &(0x7f0000000000)="282834a13e023cbfa504fcffbfb018b9dd74c8d7310087757cfe21a921c07a077a7869cb1857e7f87ba1cda4f5c49773472f62945d944dc3ecb7be02d66cc6e53bc1b39d62bfa7516bf9b5ced77098dd75a3bf3ddbbe80a8cc238a04f1edee531da2907e35a94c55432b003a4a3149efd27a5edd7b894c1dfb4015409895774e8550c703296c355a381df81c88b1c5ca411f98f6b37495f3c2b7a548aa756c662a83c4fb8e82ab20731304a98bc8de3e9ca0c71be1f433879d4e774cc0ac66364dfc8b0d20f058ab84e766dc7b0dc8b4a0d413e91aa9604a6749eff6a716376c59e2bf0a", 0xe4, 0x20000010, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 264.681103ms ago: executing program 8 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$isdn(0x22, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 117.363592ms ago: executing program 6 (id=387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000000000008002000000010000000800000008000000080000000000000000000000000000000000000801000040000000000400000048762331"]) 0s ago: executing program 9 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd25, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) (fail_nth: 10) kernel console output (not intermixed with test programs): veth1_vlan: entered promiscuous mode [ 114.067068][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.166688][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.209161][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.213684][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.290499][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.296575][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.324342][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.350361][ T6182] veth0_macvtap: entered promiscuous mode [ 114.370406][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.398722][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.430254][ T6182] veth1_macvtap: entered promiscuous mode [ 114.448829][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.585292][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.619177][ T5894] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.662354][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.701810][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.756155][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.772808][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.818897][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.47'. [ 114.832449][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.859090][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 114.871499][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.887554][ T5894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.910790][ T6320] syz.5.47 (6320): drop_caches: 2 [ 114.919702][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.930721][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.940628][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.950742][ T5894] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.951984][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.963838][ T5894] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.982393][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.000510][ T6320] syz.5.47 (6320): drop_caches: 2 [ 115.080475][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.131110][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.153596][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.228719][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.241141][ T5894] usb 5-1: usb_control_msg returned -32 [ 115.246765][ T5894] usbtmc 5-1:16.0: can't read capabilities [ 115.259874][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.346919][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.380591][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.409519][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.430072][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.448307][ T6182] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.504856][ T6182] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.516101][ T6182] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.548129][ T6182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.837198][ T30] audit: type=1326 audit(1742814340.205:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.6.53" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x0 [ 115.887798][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.916469][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.945656][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.88'. [ 115.977948][ T6350] netlink: 36 bytes leftover after parsing attributes in process `syz.5.88'. [ 115.982258][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.996581][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.288912][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.369247][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.375406][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.439143][ T5890] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 116.449370][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.528814][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.588769][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 116.602875][ T5890] usb 4-1: config 0 has an invalid interface number: 61 but max is 0 [ 116.639273][ T5890] usb 4-1: config 0 has no interface number 0 [ 116.663103][ T5890] usb 4-1: config 0 interface 61 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 32 [ 116.714516][ T5890] usb 4-1: config 0 interface 61 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 116.766707][ T5890] usb 4-1: config 0 interface 61 has no altsetting 0 [ 116.838187][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice= f.cd [ 116.878574][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.930445][ T5890] usb 4-1: Product: syz [ 116.961878][ T5890] usb 4-1: Manufacturer: syz [ 116.981084][ T5890] usb 4-1: SerialNumber: syz [ 117.101800][ T5890] usb 4-1: config 0 descriptor?? [ 117.139341][ T6356] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.159107][ T6356] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.292986][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2b0c00: rx timeout, send abort [ 117.329202][ T5848] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.339481][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.61'. [ 117.360506][ T3600] usb 5-1: USB disconnect, device number 9 [ 117.487424][ T6376] syz.7.61 (6376): drop_caches: 2 [ 117.496629][ T6376] syz.7.61 (6376): drop_caches: 2 [ 117.520526][ T5848] usb 6-1: config 0 has no interfaces? [ 117.528809][ T5848] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.538265][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.549050][ T5848] usb 6-1: Product: syz [ 117.553998][ T5848] usb 6-1: Manufacturer: syz [ 117.562370][ T5848] usb 6-1: SerialNumber: syz [ 117.586250][ T5848] usb 6-1: config 0 descriptor?? [ 117.802047][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2b0c00: abort rx timeout. Force session deactivation [ 118.033011][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.097670][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.207345][ T6373] Zero length message leads to an empty skb [ 119.001942][ T6410] Option ' ' to dns_resolver key: bad/missing value [ 119.054224][ T5890] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 119.121393][ T5890] usb 4-1: USB disconnect, device number 13 [ 119.485151][ T6425] xt_TCPMSS: Only works on TCP SYN packets [ 119.679200][ T5890] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 119.748765][ T5848] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 119.841697][ T6334] syz.6.53 (6334): drop_caches: 2 [ 119.848798][ T5890] usb 8-1: Using ep0 maxpacket: 16 [ 119.861102][ T5890] usb 8-1: unable to get BOS descriptor set [ 119.872820][ T5890] usb 8-1: no configurations [ 119.883529][ T5890] usb 8-1: can't read configurations, error -22 [ 119.908749][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 119.926190][ T5848] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 119.941821][ T47] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.946261][ T5848] usb 4-1: config 0 has no interface number 0 [ 119.964440][ T5848] usb 4-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 119.992440][ T5848] usb 4-1: config 0 interface 244 has no altsetting 0 [ 120.006389][ T5848] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 120.020064][ T5890] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 120.033715][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.037657][ T3600] usb 6-1: USB disconnect, device number 2 [ 120.042786][ T5848] usb 4-1: Product: syz [ 120.055864][ T5848] usb 4-1: Manufacturer: syz [ 120.061743][ T5848] usb 4-1: SerialNumber: syz [ 120.132301][ T5848] usb 4-1: config 0 descriptor?? [ 120.153211][ T47] usb 5-1: config 245 has too many interfaces: 63, using maximum allowed: 32 [ 120.164616][ T5848] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort found [ 120.188849][ T5890] usb 8-1: Using ep0 maxpacket: 16 [ 120.191291][ T47] usb 5-1: config 245 has an invalid descriptor of length 54, skipping remainder of the config [ 120.220553][ T5890] usb 8-1: unable to get BOS descriptor set [ 120.244032][ T47] usb 5-1: config 245 has 0 interfaces, different from the descriptor's value: 63 [ 120.251973][ T5890] usb 8-1: no configurations [ 120.258005][ T5890] usb 8-1: can't read configurations, error -22 [ 120.264555][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 120.284078][ T5890] usb usb8-port1: attempt power cycle [ 120.288775][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.301658][ T6440] netlink: 64 bytes leftover after parsing attributes in process `syz.5.103'. [ 120.346822][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.103'. [ 120.364547][ T5848] snd_usb_toneport 4-1:0.244: cannot get proper max packet size [ 120.422145][ T5848] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort now disconnected [ 120.470024][ T5848] snd_usb_toneport 4-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 120.533246][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.537168][ T6446] syz.6.104 (6446): drop_caches: 2 [ 120.560530][ T5848] usb 4-1: USB disconnect, device number 14 [ 120.583708][ T6446] syz.6.104 (6446): drop_caches: 2 [ 120.593266][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.689403][ T5890] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 120.750545][ T5890] usb 8-1: Using ep0 maxpacket: 16 [ 120.768099][ T5890] usb 8-1: unable to get BOS descriptor set [ 120.804109][ T5890] usb 8-1: no configurations [ 120.832278][ T5890] usb 8-1: can't read configurations, error -22 [ 120.850204][ T47] usb 5-1: USB disconnect, device number 10 [ 121.038812][ T5890] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 121.060298][ T5890] usb 8-1: Using ep0 maxpacket: 16 [ 121.067503][ T5890] usb 8-1: unable to get BOS descriptor set [ 121.074200][ T5890] usb 8-1: no configurations [ 121.079106][ T5890] usb 8-1: can't read configurations, error -22 [ 121.085670][ T5890] usb usb8-port1: unable to enumerate USB device [ 121.270128][ T6460] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 121.343856][ T6452] futex_wake_op: syz.5.105 tries to shift op by 32; fix this program [ 121.343955][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 121.948913][ T5894] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 122.151527][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 122.180327][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.206463][ T5894] usb 5-1: config 0 descriptor?? [ 122.236022][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 122.466289][ T5890] usb 5-1: USB disconnect, device number 11 [ 122.609676][ T5894] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 122.646919][ T6490] syz.3.113 (6490): drop_caches: 1 [ 122.755114][ T30] audit: type=1326 audit(1742814347.115:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.113" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x0 [ 122.809504][ T5894] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 122.821511][ T5894] usb 7-1: config 0 has no interface number 0 [ 122.827670][ T5894] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 122.870322][ T6490] syz.3.113 (6490): drop_caches: 1 [ 122.878567][ T5894] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.948207][ T5894] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 122.990931][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.029506][ T5894] usb 7-1: Product: syz [ 123.033727][ T5894] usb 7-1: Manufacturer: syz [ 123.038350][ T5894] usb 7-1: SerialNumber: syz [ 123.080213][ T5894] usb 7-1: config 0 descriptor?? [ 123.085894][ T6487] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 123.118174][ T5894] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 123.172354][ T5894] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 123.204067][ T6512] dccp_v4_rcv: dropped packet with invalid checksum [ 123.243233][ T6514] syz.5.119 (6514): drop_caches: 2 [ 123.249478][ T6514] syz.5.119 (6514): drop_caches: 2 [ 123.400522][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 123.710148][ T47] usb 7-1: USB disconnect, device number 2 [ 123.737907][ T47] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 123.750260][ T47] cyberjack 7-1:0.69: device disconnected [ 124.159021][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 124.168173][ T6537] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 124.468908][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 124.499967][ T5894] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 124.641111][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 124.662262][ T5894] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 124.670939][ T10] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 124.690850][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.698794][ T10] usb 4-1: config 0 has no interface number 0 [ 124.705083][ T10] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.718239][ T5894] usb 5-1: config 0 descriptor?? [ 124.746294][ T6561] netlink: 32 bytes leftover after parsing attributes in process `syz.6.132'. [ 124.765865][ T10] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 124.780325][ T10] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 124.792344][ T10] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.816715][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 124.828938][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.851650][ T10] usb 4-1: Product: syz [ 124.855945][ T10] usb 4-1: Manufacturer: syz [ 124.881070][ T10] usb 4-1: SerialNumber: syz [ 124.888299][ T6567] misc userio: No port type given on /dev/userio [ 124.925407][ T10] usb 4-1: config 0 descriptor?? [ 124.949782][ T6571] misc userio: No port type given on /dev/userio [ 124.959970][ T5894] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 125.232211][ T10] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 125.388831][ T5909] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 125.456405][ T6542] input: syz1 as /devices/virtual/input/input10 [ 125.561651][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 125.606717][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.630869][ T5904] usb 4-1: USB disconnect, device number 15 [ 125.660738][ T5909] usb 6-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 125.706967][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.737884][ T5909] usb 6-1: config 0 descriptor?? [ 125.759313][ T5894] usb 5-1: USB disconnect, device number 12 [ 126.216019][ T6612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.288404][ T6608] syz.4.141 (6608): drop_caches: 2 [ 126.360282][ T6608] syz.4.141 (6608): drop_caches: 2 [ 126.364453][ T5909] wacom 0003:056A:00DA.0003: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 126.396334][ T5909] wacom 0003:056A:00DA.0003: hidraw0: USB HID v0.00 Device [HID 056a:00da] on usb-dummy_hcd.5-1/input0 [ 126.418114][ T5909] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00DA.0003/input/input11 [ 126.459465][ T10] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 126.723229][ T5904] usb 6-1: USB disconnect, device number 3 [ 126.832078][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 126.910156][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 126.975175][ T6634] Failed to get privilege flags for destination (handle=0x2:0x40) [ 127.608848][ T5890] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 127.770692][ T30] audit: type=1326 audit(1742814352.135:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.4.151" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x0 [ 127.792879][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.811698][ T5894] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 127.815086][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.843333][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.877020][ T5890] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.929648][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.957405][ T5890] usb 6-1: config 0 descriptor?? [ 127.991138][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.012820][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.040752][ T5894] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.056512][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.065215][ T5894] usb 4-1: SerialNumber: syz [ 128.158864][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 128.338950][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 128.347410][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 128.371929][ T5904] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 128.385419][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.395145][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.396488][ T5890] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x2 [ 128.412991][ T5904] usb 5-1: Product: syz [ 128.426227][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.431706][ T5904] usb 5-1: Manufacturer: syz [ 128.452237][ T5904] usb 5-1: SerialNumber: syz [ 128.459117][ T5890] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 128.466551][ T5890] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 128.481232][ T5904] usb 5-1: config 0 descriptor?? [ 128.506120][ T5904] hub 5-1:0.0: bad descriptor, ignoring hub [ 128.522074][ T5904] hub 5-1:0.0: probe with driver hub failed with error -5 [ 128.531893][ T5890] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 128.559063][ T5890] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 128.559704][ T5904] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 128.573929][ T5890] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 128.594869][ T5890] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 128.613897][ T5890] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 128.648134][ T6687] CUSE: unknown device info "" [ 128.651888][ T5890] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 128.666084][ T5904] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 128.679605][ T6687] CUSE: zero length info key specified [ 128.712359][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.739422][ T5904] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 128.765037][ T5890] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 128.780466][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.919202][ T5904] usb 6-1: USB disconnect, device number 4 [ 129.182212][ T6698] misc userio: No port type given on /dev/userio [ 129.352327][ T1165] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.501784][ T1165] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.604170][ T1165] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.726645][ T1165] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.823941][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.161'. [ 130.156580][ T1165] bridge_slave_1: left allmulticast mode [ 130.167696][ T6710] syz.7.161 (6710): drop_caches: 2 [ 130.174714][ T6710] syz.7.161 (6710): drop_caches: 2 [ 130.199384][ T1165] bridge_slave_1: left promiscuous mode [ 130.214036][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.275916][ T1165] bridge_slave_0: left allmulticast mode [ 130.319123][ T1165] bridge_slave_0: left promiscuous mode [ 130.348992][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.451957][ T5894] usb 4-1: 0:2 : does not exist [ 130.460974][ T5894] usb 4-1: unit 5: unexpected type 0x0a [ 130.567237][ T5894] usb 4-1: USB disconnect, device number 16 [ 130.887343][ T6723] netlink: 'syz.6.166': attribute type 11 has an invalid length. [ 130.974545][ T47] usb 5-1: USB disconnect, device number 13 [ 131.095987][ T5894] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 131.158421][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.172897][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.189582][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.198200][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.210200][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.219626][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.270732][ T5894] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 131.293902][ T5894] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 131.312555][ T5894] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 131.322971][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.478886][ T10] usb 5-1: device descriptor read/64, error -71 [ 131.515642][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.525705][ T6737] loop2: detected capacity change from 0 to 7 [ 131.535795][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.559189][ T6737] Dev loop2: unable to read RDB block 7 [ 131.564946][ T6737] loop2: unable to read partition table [ 131.573901][ T1165] bond0 (unregistering): Released all slaves [ 131.586384][ T6737] loop2: partition table beyond EOD, truncated [ 131.595428][ T6737] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 131.721463][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 131.788812][ T5890] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 131.854633][ T6742] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.868809][ T10] usb 5-1: device descriptor read/64, error -71 [ 131.971374][ T5890] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 131.989456][ T10] usb usb5-port1: attempt power cycle [ 131.995045][ T5890] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 131.996805][ T6745] trusted_key: syz.6.172 sent an empty control message without MSG_MORE. [ 132.009233][ T5890] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 132.029276][ T5890] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 132.038365][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.046628][ T5890] usb 8-1: Product: syz [ 132.051392][ T5890] usb 8-1: Manufacturer: syz [ 132.056088][ T5890] usb 8-1: SerialNumber: syz [ 132.069764][ T5890] usb 8-1: config 0 descriptor?? [ 132.076322][ T6738] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 132.083808][ T6738] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 132.093774][ T5890] usb 8-1: ucan: probing device on interface #0 [ 132.120257][ T1165] hsr_slave_0: left promiscuous mode [ 132.149866][ T1165] hsr_slave_1: left promiscuous mode [ 132.155882][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.174382][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.185308][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.200942][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.242176][ T1165] veth1_macvtap: left promiscuous mode [ 132.247784][ T1165] veth0_macvtap: left promiscuous mode [ 132.263893][ T1165] veth1_vlan: left promiscuous mode [ 132.275154][ T1165] veth0_vlan: left promiscuous mode [ 132.319402][ T47] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 132.338818][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 132.372689][ T10] usb 5-1: device descriptor read/8, error -71 [ 132.488886][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 132.502515][ T5890] usb 8-1: ucan: failed to retrieve device info [ 132.505875][ T47] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.513021][ T5890] usb 8-1: ucan: probe failed; try to update the device firmware [ 132.543413][ T47] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 132.552941][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.595718][ T5890] usb 8-1: USB disconnect, device number 6 [ 132.604477][ T47] usb 7-1: Product: syz [ 132.618889][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 132.638974][ T47] usb 7-1: Manufacturer: syz [ 132.657423][ T47] usb 7-1: SerialNumber: syz [ 132.669738][ T10] usb 5-1: device descriptor read/8, error -71 [ 132.791762][ T10] usb usb5-port1: unable to enumerate USB device [ 132.916354][ T47] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 133.015113][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.023741][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.087162][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 133.167485][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 133.248854][ T5837] Bluetooth: hci3: command tx timeout [ 133.284751][ T10] usb 7-1: USB disconnect, device number 4 [ 133.292271][ C1] usblp0: nonzero write bulk status received: -71 [ 133.736261][ T5894] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 133.746191][ T3600] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 133.763575][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.844725][ T5894] usb 4-1: can't set config #6, error -71 [ 133.869696][ T5894] usb 4-1: USB disconnect, device number 17 [ 133.941203][ T3600] usb 8-1: config 0 has no interfaces? [ 133.968048][ T3600] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.979932][ T3600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.999354][ T6772] input: syz0 as /devices/virtual/input/input15 [ 134.040618][ T3600] usb 8-1: Product: syz [ 134.044852][ T3600] usb 8-1: Manufacturer: syz [ 134.069605][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.135310][ T3600] usb 8-1: SerialNumber: syz [ 134.158150][ T6744] usblp0: removed [ 134.178615][ T6733] chnl_net:caif_netlink_parms(): no params data found [ 134.197412][ T3600] usb 8-1: config 0 descriptor?? [ 134.524685][ T6779] syz.4.177 (6779): drop_caches: 2 [ 134.688392][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.697669][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 134.747289][ T6779] syz.4.177 (6779): drop_caches: 2 [ 134.758189][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.795788][ T6733] bridge_slave_0: entered allmulticast mode [ 134.864608][ T6733] bridge_slave_0: entered promiscuous mode [ 134.892063][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.919782][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.932266][ T6733] bridge_slave_1: entered allmulticast mode [ 134.944542][ T6733] bridge_slave_1: entered promiscuous mode [ 135.068363][ T6733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.093087][ T6733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.287933][ T6733] team0: Port device team_slave_0 added [ 135.345839][ T5837] Bluetooth: hci3: command tx timeout [ 135.390415][ T6733] team0: Port device team_slave_1 added [ 135.622800][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.661690][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.843012][ T6733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.906241][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.918294][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.953325][ T6733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.237928][ T6733] hsr_slave_0: entered promiscuous mode [ 136.264266][ T6733] hsr_slave_1: entered promiscuous mode [ 136.375611][ T1165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.494635][ T47] usb 8-1: USB disconnect, device number 7 [ 136.578816][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 136.607050][ T1165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.735191][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.741635][ T1165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.744971][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.761232][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 136.766953][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.776862][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.784723][ T10] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 136.793806][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.801332][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.828816][ T10] usb 5-1: config 0 has no interface number 0 [ 136.846289][ T10] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 136.847499][ T1165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.858343][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.876139][ T10] usb 5-1: Product: syz [ 136.880643][ T10] usb 5-1: Manufacturer: syz [ 136.885340][ T10] usb 5-1: SerialNumber: syz [ 136.898795][ T47] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 136.900139][ T10] usb 5-1: config 0 descriptor?? [ 136.944143][ T10] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now attached [ 137.043093][ T6733] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 137.061964][ T6733] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 137.094035][ T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.125217][ T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.139554][ T6733] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 137.185116][ T3600] usb 5-1: USB disconnect, device number 18 [ 137.203576][ T3600] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now disconnected [ 137.212173][ T47] usb 8-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 137.260344][ T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.271942][ T1165] bridge_slave_1: left allmulticast mode [ 137.288901][ T1165] bridge_slave_1: left promiscuous mode [ 137.296060][ T47] usb 8-1: config 0 descriptor?? [ 137.320143][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.367102][ T1165] bridge_slave_0: left allmulticast mode [ 137.379399][ T1165] bridge_slave_0: left promiscuous mode [ 137.385313][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.409936][ T5844] Bluetooth: hci3: command tx timeout [ 137.605900][ T6829] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 137.711792][ T47] logitech 0003:046D:CA04.0005: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.7-1/input0 [ 137.728893][ T47] logitech 0003:046D:CA04.0005: no inputs found [ 137.909149][ T3600] usb 8-1: USB disconnect, device number 8 [ 137.999337][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.010552][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.021564][ T1165] bond0 (unregistering): Released all slaves [ 138.035883][ T6733] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 138.061361][ T6829] tipc: Started in network mode [ 138.066378][ T6829] tipc: Node identity , cluster identity 4711 [ 138.089811][ T6829] tipc: Failed to set node id, please configure manually [ 138.098399][ T6829] tipc: Enabling of bearer rejected, failed to enable media [ 138.130561][ T47] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 138.270897][ T6812] chnl_net:caif_netlink_parms(): no params data found [ 138.329291][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 138.339498][ T47] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 138.348334][ T47] usb 5-1: config 1 has no interface number 0 [ 138.377871][ T47] usb 5-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.394412][ T47] usb 5-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.404583][ T47] usb 5-1: config 1 interface 236 has no altsetting 0 [ 138.415852][ T47] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 138.424401][ T47] usb 5-1: config 1 has no interface number 0 [ 138.430961][ T47] usb 5-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.441309][ T47] usb 5-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.452391][ T47] usb 5-1: config 1 interface 236 has no altsetting 0 [ 138.483973][ T47] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 138.505702][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.539127][ T47] usb 5-1: Product: syz [ 138.543354][ T47] usb 5-1: Manufacturer: syz [ 138.547984][ T47] usb 5-1: SerialNumber: syz [ 138.629826][ T47] ti_usb_3410_5052 5-1:1.236: TI USB 5052 2 port adapter converter detected [ 138.640046][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.647190][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.648055][ T30] audit: type=1326 audit(1742814363.015:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 138.667529][ T6812] bridge_slave_0: entered allmulticast mode [ 138.688112][ T6812] bridge_slave_0: entered promiscuous mode [ 138.729222][ T30] audit: type=1326 audit(1742814363.065:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 138.756896][ T30] audit: type=1326 audit(1742814363.065:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 138.779754][ T30] audit: type=1326 audit(1742814363.065:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 138.801982][ T30] audit: type=1326 audit(1742814363.065:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 138.832290][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.192'. [ 138.849089][ T5844] Bluetooth: hci2: command tx timeout [ 138.873625][ T6848] syz.6.192 (6848): drop_caches: 2 [ 138.892575][ T30] audit: type=1326 audit(1742814363.065:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 138.937653][ T1165] hsr_slave_0: left promiscuous mode [ 138.950614][ T30] audit: type=1326 audit(1742814363.065:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 138.973161][ T30] audit: type=1326 audit(1742814363.065:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 138.987061][ T6848] syz.6.192 (6848): drop_caches: 2 [ 138.995498][ T30] audit: type=1326 audit(1742814363.065:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 139.022199][ T30] audit: type=1326 audit(1742814363.065:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.7.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 139.023604][ T1165] hsr_slave_1: left promiscuous mode [ 139.052221][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.061553][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.095767][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.103370][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.245854][ T1165] veth1_macvtap: left promiscuous mode [ 139.260718][ T1165] veth0_macvtap: left promiscuous mode [ 139.276149][ T1165] veth1_vlan: left promiscuous mode [ 139.401743][ T1165] veth0_vlan: left promiscuous mode [ 139.438808][ T5909] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 139.494697][ T5844] Bluetooth: hci3: command tx timeout [ 139.638434][ T5909] usb 8-1: config 0 has no interfaces? [ 139.672508][ T5909] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 139.749593][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.757747][ T5909] usb 8-1: Product: syz [ 139.762542][ T5909] usb 8-1: Manufacturer: syz [ 139.780384][ T5909] usb 8-1: SerialNumber: syz [ 139.810655][ T5909] usb 8-1: config 0 descriptor?? [ 140.268287][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 140.351118][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 140.798820][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.806458][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.813940][ T6812] bridge_slave_1: entered allmulticast mode [ 140.831003][ T6812] bridge_slave_1: entered promiscuous mode [ 140.929808][ T5844] Bluetooth: hci2: command tx timeout [ 140.981109][ T5909] usb 5-1: USB disconnect, device number 19 [ 141.024154][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.084429][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.242445][ T6812] team0: Port device team_slave_0 added [ 141.265647][ T6812] team0: Port device team_slave_1 added [ 141.302536][ T6733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.394425][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.431051][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.514155][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.529774][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.536960][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.633802][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.776725][ T6733] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.791136][ T6812] hsr_slave_0: entered promiscuous mode [ 141.798410][ T6812] hsr_slave_1: entered promiscuous mode [ 141.806487][ T6812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.814977][ T6812] Cannot create hsr debugfs directory [ 141.835612][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.842897][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.885768][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.892973][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.998886][ T5909] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 142.000599][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.045972][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.069728][ T976] usb 8-1: USB disconnect, device number 9 [ 142.163250][ T5909] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 142.183502][ T5909] usb 5-1: config 8 has no interface number 0 [ 142.199143][ T5909] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 142.226483][ T5909] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 142.229508][ T5894] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 142.259221][ T6733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.266823][ T5909] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid maxpacket 56415, setting to 64 [ 142.285860][ T5909] usb 5-1: config 8 interface 177 has no altsetting 0 [ 142.320628][ T5909] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 142.342794][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.348912][ T6812] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 142.366661][ T6886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.374894][ T6812] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 142.379340][ T6886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.398986][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 142.408165][ T6812] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 142.419673][ T5894] usb 7-1: config 0 interface 0 has no altsetting 0 [ 142.429044][ T5894] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 142.438153][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.453728][ T5894] usb 7-1: config 0 descriptor?? [ 142.460772][ T6733] veth0_vlan: entered promiscuous mode [ 142.470586][ T976] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 142.480844][ T6812] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 142.502344][ T6733] veth1_vlan: entered promiscuous mode [ 142.603987][ T6733] veth0_macvtap: entered promiscuous mode [ 142.624015][ T976] usb 8-1: device descriptor read/64, error -71 [ 142.652027][ T5909] usb 5-1: string descriptor 0 read error: -71 [ 142.669169][ T6733] veth1_macvtap: entered promiscuous mode [ 142.670270][ T5909] ir_toy 5-1:8.177: required endpoints not found [ 142.690998][ T5894] usbhid 7-1:0.0: can't add hid device: -71 [ 142.697053][ T5894] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 142.697739][ T5909] usb 5-1: USB disconnect, device number 20 [ 142.741213][ T5894] usb 7-1: USB disconnect, device number 5 [ 142.763705][ T6812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.789463][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.807030][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.818236][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.829851][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.839798][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.851221][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.866319][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.888848][ T976] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 142.894844][ T6812] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.907359][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.920654][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.933471][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.947718][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.959061][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.974386][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.988093][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.001819][ T6733] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.011253][ T5844] Bluetooth: hci2: command tx timeout [ 143.016831][ T6733] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.026302][ T6733] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.035306][ T6733] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.039165][ T976] usb 8-1: device descriptor read/64, error -71 [ 143.065458][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.072631][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.088088][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.095267][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.190028][ T976] usb usb8-port1: attempt power cycle [ 143.276136][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.303116][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.329223][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.423614][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.447902][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.465094][ T6914] syz.6.203 (6914): drop_caches: 2 [ 143.478083][ T6914] syz.6.203 (6914): drop_caches: 2 [ 143.485909][ T6812] veth0_vlan: entered promiscuous mode [ 143.528557][ T6812] veth1_vlan: entered promiscuous mode [ 143.569696][ T976] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 143.615308][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.203'. [ 143.621706][ T976] usb 8-1: device descriptor read/8, error -71 [ 143.660917][ T6812] veth0_macvtap: entered promiscuous mode [ 143.670724][ T6812] veth1_macvtap: entered promiscuous mode [ 143.769055][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.790706][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.806184][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.824842][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.841745][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.854955][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.870923][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.899793][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.918805][ T976] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 144.089630][ T976] usb 8-1: device descriptor read/8, error -71 [ 144.121817][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.199427][ T976] usb usb8-port1: unable to enumerate USB device [ 144.229766][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.266610][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.278736][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.296749][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.306765][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.318916][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.328959][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.344983][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.365542][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.420645][ T6812] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.432252][ T6812] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.451519][ T6812] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.468699][ T6812] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.509278][ T5904] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 144.670813][ T5904] usb 9-1: config 0 has an invalid descriptor of length 232, skipping remainder of the config [ 144.682197][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.702413][ T5904] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.719277][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.762477][ T5904] usb 9-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 144.805747][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.817180][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.841640][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.852491][ T5904] usb 9-1: config 0 descriptor?? [ 144.872644][ T5904] qmi_wwan 9-1:0.0: bogus CDC Union: master=97, slave=159 [ 144.910569][ T5904] qmi_wwan 9-1:0.0: probe with driver qmi_wwan failed with error -22 [ 145.092322][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.107889][ T5844] Bluetooth: hci2: command tx timeout [ 145.124802][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.182673][ T5909] usb 9-1: USB disconnect, device number 2 [ 145.208956][ T976] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 145.529001][ T976] usb 7-1: config 0 has no interfaces? [ 145.590530][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 145.679458][ T976] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.688790][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.698295][ T976] usb 7-1: Product: syz [ 145.724040][ T976] usb 7-1: Manufacturer: syz [ 145.739981][ T976] usb 7-1: SerialNumber: syz [ 145.755808][ T976] usb 7-1: config 0 descriptor?? [ 145.816102][ T10] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 145.828853][ T26] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 145.843491][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.920737][ T10] usb 10-1: config 0 descriptor?? [ 145.948923][ T10] cp210x 10-1:0.0: cp210x converter detected [ 146.159038][ T5848] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 146.178925][ T26] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 146.202381][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.236920][ T26] usb 5-1: config 0 descriptor?? [ 146.331740][ T5848] usb 8-1: config 0 has an invalid interface number: 210 but max is 0 [ 146.380990][ T6946] netlink: 'syz.9.182': attribute type 12 has an invalid length. [ 146.455030][ T5848] usb 8-1: config 0 has no interface number 0 [ 146.471834][ T6946] netlink: 132 bytes leftover after parsing attributes in process `syz.9.182'. [ 146.502268][ T5848] usb 8-1: config 0 interface 210 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 146.523525][ T10] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 146.540790][ T5848] usb 8-1: config 0 interface 210 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 146.559057][ T10] usb 10-1: cp210x converter now attached to ttyUSB0 [ 146.632342][ T5848] usb 8-1: New USB device found, idVendor=19d2, idProduct=1118, bcdDevice=d9.1b [ 146.668541][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.674271][ T26] ath6kl: Failed to submit usb control message: -71 [ 146.706408][ T5848] usb 8-1: Product: syz [ 146.723143][ T5848] usb 8-1: Manufacturer: syz [ 146.727914][ T5848] usb 8-1: SerialNumber: syz [ 146.732564][ T26] ath6kl: unable to send the bmi data to the device: -71 [ 146.732586][ T26] ath6kl: Unable to send get target info: -71 [ 146.769132][ T10] usb 10-1: USB disconnect, device number 2 [ 146.893725][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.214'. [ 146.906629][ T26] ath6kl: Failed to init ath6kl core: -71 [ 146.914936][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 146.925505][ T5848] usb 8-1: config 0 descriptor?? [ 146.925826][ T26] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 147.019492][ T10] cp210x 10-1:0.0: device disconnected [ 147.067099][ T26] usb 5-1: USB disconnect, device number 21 [ 147.135892][ T6982] syz.8.214 (6982): drop_caches: 2 [ 147.163868][ T5848] option 8-1:0.210: GSM modem (1-port) converter detected [ 147.198622][ T5848] usb 8-1: USB disconnect, device number 14 [ 147.214475][ T6982] syz.8.214 (6982): drop_caches: 2 [ 147.221668][ T5848] option 8-1:0.210: device disconnected [ 148.246905][ T7005] netlink: 236 bytes leftover after parsing attributes in process `syz.8.219'. [ 148.407161][ T7012] netlink: 36 bytes leftover after parsing attributes in process `syz.7.221'. [ 148.449682][ T3600] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 148.621831][ T3600] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.653794][ T3600] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 148.679898][ T3600] usb 5-1: config 6 has no interface number 0 [ 148.686057][ T3600] usb 5-1: config 6 interface 200 has no altsetting 0 [ 148.725621][ T10] usb 7-1: USB disconnect, device number 6 [ 148.761058][ T3600] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 148.765206][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.813599][ T3600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.847064][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.855723][ T3600] usb 5-1: Product: syz [ 148.873842][ T3600] usb 5-1: Manufacturer: syz [ 148.878490][ T3600] usb 5-1: SerialNumber: syz [ 148.907143][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.959285][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.992837][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.009200][ T976] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 149.029767][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.089439][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.126650][ T7032] ip_vti0: entered promiscuous mode [ 149.165388][ T7032] ip_vti0: entered allmulticast mode [ 149.220554][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.331645][ T3600] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 149.350917][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.375156][ T3600] dvb-usb: bulk message failed: -71 (3/0) [ 149.510681][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.534767][ T976] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 149.548846][ T3600] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.581086][ T976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.599217][ T3600] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 149.640262][ T976] usb 8-1: config 0 descriptor?? [ 149.648321][ T3600] usb 5-1: media controller created [ 149.668697][ T7041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.679162][ T976] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 149.751047][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.228'. [ 149.754986][ T3600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.831698][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 149.831716][ T30] audit: type=1326 audit(1742814374.195:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 149.873325][ T3600] dvb-usb: bulk message failed: -71 (6/0) [ 149.881706][ T7041] netlink: 'syz.8.228': attribute type 1 has an invalid length. [ 149.899994][ T3600] dvb-usb: bulk message failed: -71 (6/0) [ 149.927185][ T3600] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 149.975738][ T30] audit: type=1326 audit(1742814374.195:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 150.010203][ T7048] bond0: option all_slaves_active: invalid value (5) [ 150.012120][ T3600] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 150.084642][ T3600] dvb-usb: schedule remote query interval to 150 msecs. [ 150.111196][ T30] audit: type=1326 audit(1742814374.245:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 150.119472][ T3600] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 150.221704][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.9.230'. [ 150.231471][ T976] gspca_sunplus: reg_w_riv err -110 [ 150.236823][ T976] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 150.239209][ T3600] usb 5-1: USB disconnect, device number 22 [ 150.280439][ T5904] dvb-usb: bulk message failed: -19 (1/0) [ 150.286406][ T5904] dvb-usb: error while querying for an remote control event. [ 150.327754][ T30] audit: type=1326 audit(1742814374.245:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 150.357563][ T30] audit: type=1326 audit(1742814374.245:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 150.384825][ T30] audit: type=1326 audit(1742814374.245:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 150.412488][ T30] audit: type=1326 audit(1742814374.245:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 150.521094][ T7054] syz.9.230 (7054): drop_caches: 2 [ 150.534021][ T7054] syz.9.230 (7054): drop_caches: 2 [ 150.643954][ T3600] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 151.298378][ T7079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.329281][ T3600] usb 8-1: USB disconnect, device number 15 [ 151.828762][ T3600] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 152.013084][ T3600] usb 8-1: config 2 has an invalid interface number: 1 but max is 0 [ 152.021728][ T3600] usb 8-1: config 2 has no interface number 0 [ 152.028444][ T3600] usb 8-1: config 2 interface 1 has no altsetting 0 [ 152.038314][ T3600] usb 8-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 152.049800][ T3600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.058207][ T3600] usb 8-1: Product: syz [ 152.063025][ T3600] usb 8-1: Manufacturer: syz [ 152.067718][ T3600] usb 8-1: SerialNumber: syz [ 152.236126][ T7109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.491298][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.528414][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.718774][ T5848] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 152.804736][ T7127] syz.4.246 (7127): drop_caches: 2 [ 152.814626][ T7127] syz.4.246 (7127): drop_caches: 2 [ 152.903422][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 152.930435][ T5848] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.962431][ T5848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.025885][ T5848] usb 9-1: Product: syz [ 153.043390][ T5848] usb 9-1: Manufacturer: syz [ 153.068035][ T5848] usb 9-1: SerialNumber: syz [ 153.128387][ T5848] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.303920][ T976] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 153.540744][ T5848] usb 9-1: USB disconnect, device number 3 [ 154.078861][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 154.122330][ T5904] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 154.612617][ T976] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 154.635655][ T976] ath9k_htc: Failed to initialize the device [ 154.674434][ T5848] usb 9-1: ath9k_htc: USB layer deinitialized [ 154.755864][ T3600] snd-usb-us122l 8-1:2.1: usb_set_interface error [ 154.783694][ T3600] snd-usb-us122l 8-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 154.794054][ T5904] usb 10-1: Using ep0 maxpacket: 16 [ 154.799666][ T10] usb 5-1: config index 0 descriptor too short (expected 55715, got 36) [ 154.808072][ T10] usb 5-1: config 119 has too many interfaces: 238, using maximum allowed: 32 [ 154.811041][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.839881][ T3600] usb 8-1: USB disconnect, device number 16 [ 154.859028][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.888515][ T10] usb 5-1: config 119 has an invalid descriptor of length 224, skipping remainder of the config [ 154.921777][ T10] usb 5-1: config 119 has 0 interfaces, different from the descriptor's value: 238 [ 154.939019][ T5904] usb 10-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 154.975153][ T5904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.988966][ T10] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 154.998062][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.006217][ T5904] usb 10-1: config 0 descriptor?? [ 155.341684][ T3600] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 155.440049][ T5904] saitek 0003:06A3:0CCB.0006: item fetching failed at offset 0/2 [ 155.460952][ T5904] saitek 0003:06A3:0CCB.0006: parse failed [ 155.467065][ T5904] saitek 0003:06A3:0CCB.0006: probe with driver saitek failed with error -22 [ 155.498831][ T3600] usb 8-1: Using ep0 maxpacket: 32 [ 155.510712][ T3600] usb 8-1: config 3 has an invalid interface number: 227 but max is 0 [ 155.518961][ T10] usb 5-1: string descriptor 0 read error: -71 [ 155.520186][ T10] usb 5-1: USB disconnect, device number 23 [ 155.532330][ T3600] usb 8-1: config 3 has no interface number 0 [ 155.538755][ T5848] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 155.564224][ T3600] usb 8-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=8a.99 [ 155.581186][ T3600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.593839][ T3600] usb 8-1: Product: syz [ 155.598154][ T3600] usb 8-1: Manufacturer: syz [ 155.606591][ T3600] usb 8-1: SerialNumber: syz [ 155.622851][ T3600] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 155.632201][ T3600] cxusb: set interface failed [ 155.637404][ T3600] dvb-usb: bulk message failed: -22 (1/0) [ 155.647991][ T3600] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.667085][ T47] usb 10-1: USB disconnect, device number 3 [ 155.687022][ T3600] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 155.699041][ T5848] usb 7-1: Using ep0 maxpacket: 32 [ 155.699307][ T3600] usb 8-1: media controller created [ 155.713286][ T5848] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 155.729981][ T3600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.743004][ T5848] usb 7-1: config 0 has no interface number 0 [ 155.760607][ T5848] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 155.775316][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.786178][ T5848] usb 7-1: Product: syz [ 155.797927][ T5848] usb 7-1: Manufacturer: syz [ 155.803609][ T5848] usb 7-1: SerialNumber: syz [ 155.811429][ T5848] usb 7-1: config 0 descriptor?? [ 155.826514][ T5848] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 155.829735][ T3600] DVB: Unable to find symbol lgdt330x_attach() [ 155.844164][ T3600] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 155.862881][ T3600] dvb-usb: bulk message failed: -22 (1/0) [ 155.876589][ T3600] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 155.942490][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.977874][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.383729][ T5848] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 156.437325][ T5848] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 156.562274][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 156.563344][ T3600] usb 7-1: USB disconnect, device number 7 [ 156.706993][ T3600] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 156.754259][ T5848] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 156.828077][ T3600] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 156.883766][ T3600] quatech2 7-1:0.51: device disconnected [ 156.922771][ T7214] misc userio: The device must be registered before sending interrupts [ 156.942557][ T5848] usb 10-1: config 0 has no interfaces? [ 156.953173][ T5848] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.963360][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.017439][ T7216] netlink: 'syz.6.261': attribute type 7 has an invalid length. [ 157.074887][ T5848] usb 10-1: Product: syz [ 157.110090][ T5848] usb 10-1: Manufacturer: syz [ 157.118972][ T7216] netlink: 'syz.6.261': attribute type 8 has an invalid length. [ 157.148180][ T5848] usb 10-1: SerialNumber: syz [ 157.193632][ T5848] usb 10-1: config 0 descriptor?? [ 157.506020][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.263'. [ 157.579186][ T5848] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 157.766055][ T5848] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 157.790536][ T5848] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 157.802103][ T7233] netlink: 48 bytes leftover after parsing attributes in process `syz.6.264'. [ 157.818249][ T5848] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 157.833154][ T5848] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 157.909530][ T5848] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 157.937686][ T5848] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 157.973093][ T5848] usb 9-1: string descriptor 0 read error: -22 [ 157.999045][ T5890] usb 8-1: USB disconnect, device number 17 [ 158.047947][ T5848] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 158.168740][ T5848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.208511][ T5890] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 158.231001][ T5848] usb 9-1: config 0 descriptor?? [ 158.236527][ T7213] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 158.250672][ T5848] hub 9-1:0.0: bad descriptor, ignoring hub [ 158.316748][ T5848] hub 9-1:0.0: probe with driver hub failed with error -5 [ 158.356689][ T5848] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input18 [ 159.235734][ T7261] netlink: 68 bytes leftover after parsing attributes in process `syz.6.270'. [ 159.245595][ T7263] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 159.262935][ T7263] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.777985][ T5848] usb 9-1: USB disconnect, device number 4 [ 159.959456][ T5909] usb 10-1: USB disconnect, device number 4 [ 160.208086][ T7277] wireguard: wg2: Could not create IPv4 socket [ 160.581945][ T976] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 160.729410][ T26] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 160.768829][ T5909] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 160.787316][ T976] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.820483][ T976] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.856442][ T976] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.869128][ T26] usb 8-1: device descriptor read/64, error -71 [ 160.885914][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.912162][ T976] usb 7-1: Product: syz [ 160.918777][ T976] usb 7-1: Manufacturer: syz [ 160.936853][ T976] usb 7-1: SerialNumber: syz [ 160.960197][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 160.987501][ T5909] usb 5-1: config 252 has an invalid interface number: 165 but max is 0 [ 161.002773][ T5909] usb 5-1: config 252 has no interface number 0 [ 161.010505][ T5909] usb 5-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 161.020545][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.036765][ T5909] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 161.047600][ T5909] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 161.109140][ T26] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 161.159878][ T976] usb 7-1: 0:2 : does not exist [ 161.190604][ T976] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 161.211643][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 161.249517][ T976] usb 7-1: USB disconnect, device number 8 [ 161.263266][ T26] usb 8-1: device descriptor read/64, error -71 [ 161.389552][ T26] usb usb8-port1: attempt power cycle [ 161.397882][ T10] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 161.414416][ T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.426343][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.443592][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.456296][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.473136][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.509036][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.521250][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.540296][ T10] usb 10-1: config 0 descriptor?? [ 161.546562][ T7314] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 161.728897][ T26] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 161.771296][ T26] usb 8-1: device descriptor read/8, error -71 [ 162.005389][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 162.019512][ T26] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 162.027228][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 162.051269][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 162.060039][ T26] usb 8-1: device descriptor read/8, error -71 [ 162.073709][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 162.088839][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 162.107875][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 162.124770][ T10] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 162.150539][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 162.189354][ T26] usb usb8-port1: unable to enumerate USB device [ 162.281425][ T976] usb 10-1: USB disconnect, device number 5 [ 162.809101][ T976] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 162.993892][ T7372] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 163.010164][ T976] usb 8-1: Using ep0 maxpacket: 16 [ 163.034479][ T976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.068735][ T976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.072795][ T7378] kvm: pic: level sensitive irq not supported [ 163.087365][ T976] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.104979][ T7378] kvm: pic: non byte read [ 163.110304][ T976] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.129798][ T7378] kvm: pic: level sensitive irq not supported [ 163.129929][ T7378] kvm: pic: non byte read [ 163.141224][ T976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.164424][ T976] usb 8-1: config 0 descriptor?? [ 163.331526][ T7387] netlink: 'syz.8.291': attribute type 11 has an invalid length. [ 163.591833][ T976] microsoft 0003:045E:07DA.0008: item fetching failed at offset 18/34 [ 163.608799][ T10] usb 5-1: USB disconnect, device number 24 [ 163.660948][ T976] microsoft 0003:045E:07DA.0008: parse failed [ 163.667154][ T976] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 164.078141][ T7400] syz.9.294 (7400): drop_caches: 2 [ 164.119522][ T7400] syz.9.294 (7400): drop_caches: 2 [ 164.120580][ T7405] syz.6.295 (7405): drop_caches: 2 [ 164.125140][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.295'. [ 164.158368][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.9.294'. [ 164.225833][ T7405] syz.6.295 (7405): drop_caches: 2 [ 164.697797][ T3600] usb 8-1: USB disconnect, device number 22 [ 165.656830][ T7442] FAULT_INJECTION: forcing a failure. [ 165.656830][ T7442] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 165.759597][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: syz.8.304 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 165.759624][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.759636][ T7442] Call Trace: [ 165.759647][ T7442] [ 165.759656][ T7442] dump_stack_lvl+0x241/0x360 [ 165.759692][ T7442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.759713][ T7442] ? __pfx__printk+0x10/0x10 [ 165.759741][ T7442] should_fail_ex+0x40a/0x550 [ 165.759773][ T7442] prepare_alloc_pages+0x1da/0x5b0 [ 165.759801][ T7442] __alloc_frozen_pages_noprof+0x16f/0x710 [ 165.759821][ T7442] ? mod_objcg_state+0x583/0x930 [ 165.759842][ T7442] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 165.759869][ T7442] ? mod_objcg_state+0x125/0x930 [ 165.759897][ T7442] alloc_pages_mpol+0x311/0x660 [ 165.759927][ T7442] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 165.759957][ T7442] ? rcu_is_watching+0x15/0xb0 [ 165.759981][ T7442] alloc_pages_noprof+0x121/0x190 [ 165.760008][ T7442] kvm_vm_ioctl_create_vcpu+0x145/0x8b0 [ 165.760045][ T7442] kvm_vm_ioctl+0x7be/0xd50 [ 165.760089][ T7442] ? stack_depot_save_flags+0x37/0x940 [ 165.760126][ T7442] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 165.760174][ T7442] ? kasan_save_track+0x51/0x80 [ 165.760195][ T7442] ? kasan_save_track+0x3f/0x80 [ 165.760215][ T7442] ? kasan_save_free_info+0x40/0x50 [ 165.760244][ T7442] ? __kasan_slab_free+0x59/0x70 [ 165.760266][ T7442] ? kfree+0x196/0x430 [ 165.760289][ T7442] ? tomoyo_path_number_perm+0x5dd/0x770 [ 165.760317][ T7442] ? security_file_ioctl_compat+0xc6/0x2a0 [ 165.760345][ T7442] ? __se_compat_sys_ioctl+0xd6/0xc10 [ 165.760370][ T7442] ? do_vfs_ioctl+0xf18/0x2770 [ 165.760393][ T7442] ? kvm_arch_vm_compat_ioctl+0x136/0x4d0 [ 165.760432][ T7442] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 165.760467][ T7442] ? mark_lock+0x9a/0x360 [ 165.760501][ T7442] ? tomoyo_path_number_perm+0x209/0x770 [ 165.760531][ T7442] ? __pfx_lock_release+0x10/0x10 [ 165.760565][ T7442] ? tomoyo_path_number_perm+0x5dd/0x770 [ 165.760598][ T7442] ? tomoyo_path_number_perm+0x5dd/0x770 [ 165.760636][ T7442] ? tomoyo_path_number_perm+0x65d/0x770 [ 165.760669][ T7442] ? tomoyo_path_number_perm+0x209/0x770 [ 165.760701][ T7442] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 165.760746][ T7442] ? __pfx_lock_acquire+0x10/0x10 [ 165.760781][ T7442] kvm_vm_compat_ioctl+0x26a/0x5a0 [ 165.760815][ T7442] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 165.760854][ T7442] ? __fget_files+0x2a/0x410 [ 165.760887][ T7442] ? __fget_files+0x2a/0x410 [ 165.760925][ T7442] __se_compat_sys_ioctl+0x502/0xc10 [ 165.760954][ T7442] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 165.760980][ T7442] ? __fget_files+0x2a/0x410 [ 165.761014][ T7442] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 165.761049][ T7442] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.761086][ T7442] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 165.761118][ T7442] ? lockdep_hardirqs_on+0x99/0x150 [ 165.761150][ T7442] __do_fast_syscall_32+0xb4/0x110 [ 165.761171][ T7442] ? exc_page_fault+0x590/0x8b0 [ 165.761206][ T7442] do_fast_syscall_32+0x34/0x80 [ 165.761225][ T7442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.761259][ T7442] RIP: 0023:0xf7fa3579 [ 165.761285][ T7442] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 165.761303][ T7442] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 165.761325][ T7442] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae41 [ 165.761351][ T7442] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.761363][ T7442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.761374][ T7442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 165.761386][ T7442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.761413][ T7442] [ 166.178067][ T5844] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 166.355591][ T7451] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.365158][ T7451] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.374890][ T7451] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.384048][ T7451] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.393703][ T7451] vxlan0: entered promiscuous mode [ 166.398929][ T7451] vxlan0: entered allmulticast mode [ 166.427722][ T7451] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.436843][ T7451] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.445843][ T7451] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.454966][ T7451] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.563200][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.7.311'. [ 166.564020][ T5890] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 166.578605][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.311'. [ 166.674651][ T976] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 166.758431][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.8.312'. [ 166.798799][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 166.826353][ T5890] usb 5-1: config 0 has an invalid interface number: 60 but max is 0 [ 166.838143][ T976] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.865870][ T5890] usb 5-1: config 0 has no interface number 0 [ 166.872223][ T976] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.888772][ T5890] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 166.900549][ T976] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.918435][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.940228][ T976] usb 10-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 166.950669][ T5890] usb 5-1: config 0 descriptor?? [ 166.955832][ T976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.966324][ T5890] ftdi_sio 5-1:0.60: FTDI USB Serial Device converter detected [ 166.976386][ T5890] usb 5-1: Detected SIO [ 166.982676][ T976] usb 10-1: config 0 descriptor?? [ 166.996038][ T5890] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 167.163818][ T7483] FAULT_INJECTION: forcing a failure. [ 167.163818][ T7483] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.197671][ T5903] usb 5-1: USB disconnect, device number 25 [ 167.214312][ T5903] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 167.232902][ T7483] CPU: 1 UID: 0 PID: 7483 Comm: syz.8.315 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 167.232930][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.232943][ T7483] Call Trace: [ 167.232950][ T7483] [ 167.232959][ T7483] dump_stack_lvl+0x241/0x360 [ 167.232990][ T7483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.233012][ T7483] ? __pfx__printk+0x10/0x10 [ 167.233035][ T7483] ? __pfx_lock_release+0x10/0x10 [ 167.233077][ T7483] should_fail_ex+0x40a/0x550 [ 167.233112][ T7483] _copy_from_iter+0x1df/0x1c40 [ 167.233146][ T7483] ? __virt_addr_valid+0x183/0x530 [ 167.233166][ T7483] ? __pfx_lock_release+0x10/0x10 [ 167.233205][ T7483] ? __alloc_skb+0x28f/0x440 [ 167.233225][ T7483] ? __pfx__copy_from_iter+0x10/0x10 [ 167.233250][ T7483] ? __virt_addr_valid+0x183/0x530 [ 167.233282][ T7483] ? __virt_addr_valid+0x183/0x530 [ 167.233298][ T7483] ? __virt_addr_valid+0x45f/0x530 [ 167.233318][ T7483] ? __phys_addr_symbol+0x2f/0x70 [ 167.233336][ T7483] ? __check_object_size+0x47a/0x730 [ 167.233368][ T7483] netlink_sendmsg+0x742/0xcb0 [ 167.233405][ T7483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.233433][ T7483] ? __import_iovec+0x582/0x830 [ 167.233458][ T7483] ? aa_sock_msg_perm+0x91/0x160 [ 167.233495][ T7483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.233519][ T7483] __sock_sendmsg+0x221/0x270 [ 167.233550][ T7483] ____sys_sendmsg+0x53a/0x860 [ 167.233579][ T7483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.233615][ T7483] __sys_sendmsg+0x269/0x350 [ 167.233643][ T7483] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.233710][ T7483] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 167.233742][ T7483] ? lockdep_hardirqs_on+0x99/0x150 [ 167.233774][ T7483] __do_fast_syscall_32+0xb4/0x110 [ 167.233794][ T7483] ? exc_page_fault+0x590/0x8b0 [ 167.233827][ T7483] do_fast_syscall_32+0x34/0x80 [ 167.233846][ T7483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.233879][ T7483] RIP: 0023:0xf7fa3579 [ 167.233895][ T7483] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 167.233913][ T7483] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 167.233935][ T7483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 167.233949][ T7483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.233961][ T7483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.233972][ T7483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 167.233984][ T7483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.234011][ T7483] [ 167.237654][ T5903] ftdi_sio 5-1:0.60: device disconnected [ 167.527319][ T976] usbhid 10-1:0.0: can't add hid device: -71 [ 167.540308][ T976] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 167.571049][ T976] usb 10-1: USB disconnect, device number 6 [ 167.862881][ T7497] syz.6.318 (7497): drop_caches: 2 [ 167.974779][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 167.991383][ T7497] syz.6.318 (7497): drop_caches: 2 [ 167.999173][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.318'. [ 168.719322][ T976] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 168.807695][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.7.326'. [ 168.859435][ T10] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 168.878783][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 168.886830][ T976] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.908993][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.941201][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.003999][ T976] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.043033][ T976] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.083379][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.096125][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 169.127498][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 169.169291][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 169.216254][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 169.275187][ T10] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 169.286838][ T7547] FAULT_INJECTION: forcing a failure. [ 169.286838][ T7547] name failslab, interval 1, probability 0, space 0, times 1 [ 169.295167][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.323004][ T7548] misc userio: No port type given on /dev/userio [ 169.328738][ T10] usb 9-1: Product: syz [ 169.336319][ T7547] CPU: 1 UID: 0 PID: 7547 Comm: syz.7.330 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 169.336345][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.336358][ T7547] Call Trace: [ 169.336365][ T7547] [ 169.336374][ T7547] dump_stack_lvl+0x241/0x360 [ 169.336404][ T7547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.336428][ T7547] ? __pfx__printk+0x10/0x10 [ 169.336462][ T7547] should_fail_ex+0x40a/0x550 [ 169.336498][ T7547] should_failslab+0xac/0x100 [ 169.336527][ T7547] ? skb_clone+0x20c/0x390 [ 169.336549][ T7547] kmem_cache_alloc_noprof+0x70/0x380 [ 169.336581][ T7547] skb_clone+0x20c/0x390 [ 169.336609][ T7547] __netlink_deliver_tap+0x3c4/0x7f0 [ 169.336647][ T7547] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.336670][ T7547] netlink_deliver_tap+0x19d/0x1b0 [ 169.336696][ T7547] netlink_unicast+0x7c4/0x990 [ 169.336725][ T7547] ? __pfx_netlink_unicast+0x10/0x10 [ 169.336745][ T7547] ? __virt_addr_valid+0x45f/0x530 [ 169.336784][ T7547] ? __phys_addr_symbol+0x2f/0x70 [ 169.336803][ T7547] ? __check_object_size+0x47a/0x730 [ 169.336837][ T7547] netlink_sendmsg+0x8de/0xcb0 [ 169.336874][ T7547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.336905][ T7547] ? __import_iovec+0x582/0x830 [ 169.336931][ T7547] ? aa_sock_msg_perm+0x91/0x160 [ 169.336970][ T7547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.336994][ T7547] __sock_sendmsg+0x221/0x270 [ 169.337026][ T7547] ____sys_sendmsg+0x53a/0x860 [ 169.337057][ T7547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.337096][ T7547] __sys_sendmsg+0x269/0x350 [ 169.337132][ T7547] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.337212][ T7547] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 169.337246][ T7547] ? lockdep_hardirqs_on+0x99/0x150 [ 169.337284][ T7547] __do_fast_syscall_32+0xb4/0x110 [ 169.337305][ T7547] ? exc_page_fault+0x590/0x8b0 [ 169.337339][ T7547] do_fast_syscall_32+0x34/0x80 [ 169.337359][ T7547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.337394][ T7547] RIP: 0023:0xf7fc4579 [ 169.337411][ T7547] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.337429][ T7547] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 169.337450][ T7547] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 169.337465][ T7547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.337477][ T7547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.337489][ T7547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.337501][ T7547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.337529][ T7547] [ 169.348539][ T10] usb 9-1: Manufacturer: syz [ 169.398964][ T976] usb 5-1: usb_control_msg returned -32 [ 169.628852][ T10] usb 9-1: SerialNumber: syz [ 169.658767][ T10] usb 9-1: config 0 descriptor?? [ 169.664999][ T7523] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 169.672417][ T7523] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 169.690533][ T10] usb 9-1: ucan: probing device on interface #0 [ 169.750235][ T976] usbtmc 5-1:16.0: can't read capabilities [ 169.778949][ T976] usb 5-1: USB disconnect, device number 26 [ 170.100749][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.108788][ T5903] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 170.109288][ T10] usb 9-1: ucan: device reported invalid device info [ 170.123778][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.158839][ T10] usb 9-1: ucan: probe failed; try to update the device firmware [ 170.282626][ T5903] usb 10-1: config 0 has an invalid interface number: 57 but max is 0 [ 170.303018][ T5903] usb 10-1: config 0 has no interface number 0 [ 170.303723][ T10] usb 9-1: USB disconnect, device number 5 [ 170.329387][ T5903] usb 10-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.358124][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz.6.335'. [ 170.385650][ T5903] usb 10-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 170.437980][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz.6.335'. [ 170.454035][ T5903] usb 10-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 170.474768][ T5903] usb 10-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 170.486575][ T7574] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 170.509431][ T5903] usb 10-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.578069][ T7574] bond1: entered allmulticast mode [ 170.583749][ T7574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.728743][ T5903] usb 10-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 170.778261][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.870848][ T5903] usb 10-1: config 0 descriptor?? [ 170.899032][ T5904] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 170.955679][ T5903] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 170.964607][ T7592] netlink: 'syz.8.339': attribute type 5 has an invalid length. [ 170.994772][ T5903] gspca_mr97310a: reg write [21] error -22 [ 171.053296][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.338'. [ 171.088777][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 171.102894][ T5903] mr97310a 10-1:0.57: probe with driver mr97310a failed with error -22 [ 171.126190][ T5903] usb 10-1: USB disconnect, device number 7 [ 171.172695][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.182685][ T5904] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.281277][ T5904] usb 5-1: config 1 interface 0 has no altsetting 0 [ 171.307751][ T5904] usb 5-1: string descriptor 0 read error: -22 [ 171.359382][ T5904] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 171.473529][ T7589] syz.6.338 (7589): drop_caches: 2 [ 171.512414][ T7589] syz.6.338 (7589): drop_caches: 2 [ 171.600565][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.642045][ T7603] FAULT_INJECTION: forcing a failure. [ 171.642045][ T7603] name failslab, interval 1, probability 0, space 0, times 0 [ 171.739056][ T7603] CPU: 0 UID: 0 PID: 7603 Comm: syz.8.342 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 171.739086][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.739099][ T7603] Call Trace: [ 171.739107][ T7603] [ 171.739116][ T7603] dump_stack_lvl+0x241/0x360 [ 171.739149][ T7603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.739172][ T7603] ? __pfx__printk+0x10/0x10 [ 171.739196][ T7603] ? __kmalloc_noprof+0xb5/0x4c0 [ 171.739227][ T7603] ? __pfx___might_resched+0x10/0x10 [ 171.739252][ T7603] ? aa_get_newest_label+0xff/0x6f0 [ 171.739288][ T7603] should_fail_ex+0x40a/0x550 [ 171.739325][ T7603] should_failslab+0xac/0x100 [ 171.739355][ T7603] __kmalloc_noprof+0xdd/0x4c0 [ 171.739383][ T7603] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 171.739416][ T7603] ? apparmor_capable+0x13b/0x1b0 [ 171.739444][ T7603] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 171.739486][ T7603] genl_rcv_msg+0x80b/0xec0 [ 171.739528][ T7603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.739588][ T7603] ? __pfx_lock_acquire+0x10/0x10 [ 171.739621][ T7603] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 171.739650][ T7603] ? __pfx___might_resched+0x10/0x10 [ 171.739689][ T7603] netlink_rcv_skb+0x206/0x480 [ 171.739715][ T7603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.739750][ T7603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.739804][ T7603] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 171.739847][ T7603] genl_rcv+0x28/0x40 [ 171.739875][ T7603] netlink_unicast+0x7f6/0x990 [ 171.739909][ T7603] ? __pfx_netlink_unicast+0x10/0x10 [ 171.739929][ T7603] ? __virt_addr_valid+0x45f/0x530 [ 171.739949][ T7603] ? __phys_addr_symbol+0x2f/0x70 [ 171.739968][ T7603] ? __check_object_size+0x47a/0x730 [ 171.740002][ T7603] netlink_sendmsg+0x8de/0xcb0 [ 171.740041][ T7603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.740073][ T7603] ? __import_iovec+0x582/0x830 [ 171.740099][ T7603] ? aa_sock_msg_perm+0x91/0x160 [ 171.740137][ T7603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.740160][ T7603] __sock_sendmsg+0x221/0x270 [ 171.740194][ T7603] ____sys_sendmsg+0x53a/0x860 [ 171.740227][ T7603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.740268][ T7603] __sys_sendmsg+0x269/0x350 [ 171.740297][ T7603] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.740373][ T7603] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 171.740407][ T7603] ? lockdep_hardirqs_on+0x99/0x150 [ 171.740441][ T7603] __do_fast_syscall_32+0xb4/0x110 [ 171.740462][ T7603] ? exc_page_fault+0x590/0x8b0 [ 171.740497][ T7603] do_fast_syscall_32+0x34/0x80 [ 171.740517][ T7603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.740550][ T7603] RIP: 0023:0xf7fa3579 [ 171.740569][ T7603] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 171.740585][ T7603] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 171.740608][ T7603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 171.740624][ T7603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.740636][ T7603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.740648][ T7603] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.740660][ T7603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.740690][ T7603] [ 172.757986][ T7623] misc userio: No port type given on /dev/userio [ 172.941685][ T7613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.961273][ T3600] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 172.989117][ T7619] netlink: 68 bytes leftover after parsing attributes in process `syz.7.343'. [ 173.120478][ T3600] usb 9-1: Using ep0 maxpacket: 8 [ 173.139142][ T3600] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.157658][ T3600] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.226119][ T3600] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.250810][ T3600] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.264071][ T3600] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.276354][ T3600] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.513931][ T3600] usb 9-1: GET_CAPABILITIES returned e2 [ 173.566047][ T3600] usbtmc 9-1:16.0: can't read capabilities [ 173.736313][ T3600] usb 9-1: USB disconnect, device number 6 [ 174.357382][ T5904] usbhid 5-1:1.0: can't add hid device: -71 [ 174.386567][ T5904] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 174.437402][ T5904] usb 5-1: USB disconnect, device number 27 [ 174.762650][ T7720] loop9: detected capacity change from 0 to 7 [ 174.778500][ T7720] Dev loop9: unable to read RDB block 7 [ 174.787850][ T7720] loop9: unable to read partition table [ 174.851447][ T7720] loop9: partition table beyond EOD, truncated [ 174.855566][ T7724] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 174.893167][ T7720] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 174.969945][ T7729] FAULT_INJECTION: forcing a failure. [ 174.969945][ T7729] name failslab, interval 1, probability 0, space 0, times 0 [ 175.017857][ T7729] CPU: 0 UID: 0 PID: 7729 Comm: syz.8.356 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 175.017889][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.017903][ T7729] Call Trace: [ 175.017910][ T7729] [ 175.017920][ T7729] dump_stack_lvl+0x241/0x360 [ 175.017950][ T7729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.017974][ T7729] ? __pfx__printk+0x10/0x10 [ 175.017997][ T7729] ? __kmalloc_cache_noprof+0x48/0x390 [ 175.018029][ T7729] ? __pfx___might_resched+0x10/0x10 [ 175.018063][ T7729] should_fail_ex+0x40a/0x550 [ 175.018100][ T7729] should_failslab+0xac/0x100 [ 175.018130][ T7729] __kmalloc_cache_noprof+0x70/0x390 [ 175.018158][ T7729] ? hwsim_new_radio_nl+0xdd9/0x2290 [ 175.018191][ T7729] hwsim_new_radio_nl+0xdd9/0x2290 [ 175.018232][ T7729] ? __pfx___nla_validate_parse+0x10/0x10 [ 175.018260][ T7729] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 175.018321][ T7729] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 175.018365][ T7729] genl_rcv_msg+0xb1f/0xec0 [ 175.018405][ T7729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.018463][ T7729] ? __pfx_lock_acquire+0x10/0x10 [ 175.018493][ T7729] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 175.018521][ T7729] ? __pfx___might_resched+0x10/0x10 [ 175.018558][ T7729] netlink_rcv_skb+0x206/0x480 [ 175.018584][ T7729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.018684][ T7729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.018737][ T7729] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 175.018781][ T7729] genl_rcv+0x28/0x40 [ 175.018810][ T7729] netlink_unicast+0x7f6/0x990 [ 175.018843][ T7729] ? __pfx_netlink_unicast+0x10/0x10 [ 175.018864][ T7729] ? __virt_addr_valid+0x45f/0x530 [ 175.018887][ T7729] ? __phys_addr_symbol+0x2f/0x70 [ 175.018906][ T7729] ? __check_object_size+0x47a/0x730 [ 175.018961][ T7729] netlink_sendmsg+0x8de/0xcb0 [ 175.019002][ T7729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.019033][ T7729] ? __import_iovec+0x582/0x830 [ 175.019061][ T7729] ? aa_sock_msg_perm+0x91/0x160 [ 175.019099][ T7729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.019124][ T7729] __sock_sendmsg+0x221/0x270 [ 175.019158][ T7729] ____sys_sendmsg+0x53a/0x860 [ 175.019191][ T7729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.019233][ T7729] __sys_sendmsg+0x269/0x350 [ 175.019262][ T7729] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.019336][ T7729] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 175.019371][ T7729] ? lockdep_hardirqs_on+0x99/0x150 [ 175.019405][ T7729] __do_fast_syscall_32+0xb4/0x110 [ 175.019427][ T7729] ? exc_page_fault+0x590/0x8b0 [ 175.019461][ T7729] do_fast_syscall_32+0x34/0x80 [ 175.019482][ T7729] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.019516][ T7729] RIP: 0023:0xf7fa3579 [ 175.019535][ T7729] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 175.019553][ T7729] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 175.019574][ T7729] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 175.019589][ T7729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.019631][ T7729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.019644][ T7729] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 175.019657][ T7729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.019688][ T7729] [ 175.658818][ T5903] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 176.069499][ T7746] misc userio: No port type given on /dev/userio [ 176.122776][ T5903] usb 5-1: config 0 has no interfaces? [ 176.139775][ T5903] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 176.161705][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.175192][ T5903] usb 5-1: Product: syz [ 176.186259][ T5903] usb 5-1: Manufacturer: syz [ 176.197902][ T5903] usb 5-1: SerialNumber: syz [ 176.214167][ T5903] usb 5-1: config 0 descriptor?? [ 176.408774][ T5904] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 176.492155][ T5893] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 176.582043][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.603771][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.631989][ T5904] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.638887][ T5893] usb 7-1: device descriptor read/64, error -71 [ 176.742134][ T5904] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.793533][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.870521][ T5904] usb 8-1: config 0 descriptor?? [ 176.918761][ T5893] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 176.999403][ T976] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 177.007199][ T5890] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 177.081577][ T5893] usb 7-1: device descriptor read/64, error -71 [ 177.170186][ T5890] usb 9-1: Using ep0 maxpacket: 8 [ 177.178422][ T976] usb 10-1: config 0 has no interfaces? [ 177.184902][ T5890] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.196314][ T5893] usb usb7-port1: attempt power cycle [ 177.203335][ T976] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.213217][ T976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.233690][ T5890] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.243996][ T976] usb 10-1: Product: syz [ 177.248282][ T976] usb 10-1: Manufacturer: syz [ 177.277177][ T5890] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.290655][ T976] usb 10-1: SerialNumber: syz [ 177.301450][ T5904] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 177.320567][ T5904] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 177.333378][ T976] usb 10-1: config 0 descriptor?? [ 177.341037][ T5890] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.345688][ T5904] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 177.411882][ T5890] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.444232][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.559054][ T5893] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 177.580201][ T5893] usb 7-1: device descriptor read/8, error -71 [ 177.744496][ T5890] usb 9-1: GET_CAPABILITIES returned e2 [ 177.754648][ T5890] usbtmc 9-1:16.0: can't read capabilities [ 177.849181][ T5893] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 177.884524][ T5893] usb 7-1: device descriptor read/8, error -71 [ 177.958121][ T5904] usb 9-1: USB disconnect, device number 8 [ 178.000532][ T5893] usb usb7-port1: unable to enumerate USB device [ 178.152661][ T5890] usb 8-1: USB disconnect, device number 23 [ 178.807444][ T3600] usb 5-1: USB disconnect, device number 28 [ 179.023459][ T30] audit: type=1326 audit(1742814403.395:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.8.365" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 179.161089][ T7796] support for cryptoloop has been removed. Use dm-crypt instead. [ 179.182391][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 179.439244][ T5893] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 179.608883][ T5893] usb 9-1: Using ep0 maxpacket: 16 [ 179.622044][ T5893] usb 9-1: config 0 has an invalid descriptor of length 151, skipping remainder of the config [ 179.677226][ T5893] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.677266][ T3600] usb 10-1: USB disconnect, device number 8 [ 179.728555][ T5893] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.750255][ T5893] usb 9-1: New USB device found, idVendor=228f, idProduct=0709, bcdDevice= 0.00 [ 179.760046][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.771821][ T5893] usb 9-1: config 0 descriptor?? [ 179.782079][ T5893] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 180.048842][ T5893] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 180.229249][ T7824] FAULT_INJECTION: forcing a failure. [ 180.229249][ T7824] name failslab, interval 1, probability 0, space 0, times 0 [ 180.242328][ T7824] CPU: 1 UID: 0 PID: 7824 Comm: syz.9.376 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 180.242356][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.242369][ T7824] Call Trace: [ 180.242377][ T7824] [ 180.242385][ T7824] dump_stack_lvl+0x241/0x360 [ 180.242447][ T7824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.242469][ T7824] ? __pfx__printk+0x10/0x10 [ 180.242484][ T7824] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 180.242506][ T7824] ? __pfx___might_resched+0x10/0x10 [ 180.242523][ T7824] ? vsnprintf+0x1181/0x1220 [ 180.242542][ T7824] should_fail_ex+0x40a/0x550 [ 180.242567][ T7824] should_failslab+0xac/0x100 [ 180.242586][ T7824] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 180.242606][ T7824] ? kobject_set_name_vargs+0x61/0x120 [ 180.242623][ T7824] kvasprintf+0xdf/0x190 [ 180.242644][ T7824] ? __pfx_kvasprintf+0x10/0x10 [ 180.242665][ T7824] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 180.242687][ T7824] ? kvasprintf_const+0x51/0x170 [ 180.242708][ T7824] kobject_set_name_vargs+0x61/0x120 [ 180.242723][ T7824] dev_set_name+0xd5/0x120 [ 180.242741][ T7824] ? __kasan_kmalloc_large+0x8a/0xa0 [ 180.242768][ T7824] ? wiphy_new_nm+0x69c/0x19a0 [ 180.242780][ T7824] ? __pfx_dev_set_name+0x10/0x10 [ 180.242799][ T7824] ? trace_kmalloc+0x1f/0xd0 [ 180.242814][ T7824] ? __kmalloc_noprof+0x2a5/0x4c0 [ 180.242831][ T7824] ? wiphy_new_nm+0x625/0x19a0 [ 180.242845][ T7824] wiphy_new_nm+0x79f/0x19a0 [ 180.242856][ T7824] ? ieee80211_alloc_hw_nm+0x8f9/0x1ea0 [ 180.242872][ T7824] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 180.242889][ T7824] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 180.242907][ T7824] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 180.242927][ T7824] mac80211_hwsim_new_radio+0x203/0x4a40 [ 180.242944][ T7824] ? __pfx___nla_validate_parse+0x10/0x10 [ 180.242973][ T7824] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 180.242993][ T7824] ? __nla_parse+0x40/0x60 [ 180.243008][ T7824] hwsim_new_radio_nl+0xece/0x2290 [ 180.243031][ T7824] ? __pfx___nla_validate_parse+0x10/0x10 [ 180.243048][ T7824] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 180.243082][ T7824] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 180.243107][ T7824] genl_rcv_msg+0xb1f/0xec0 [ 180.243131][ T7824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.243154][ T7824] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 180.243182][ T7824] ? __pfx_lock_acquire+0x10/0x10 [ 180.243201][ T7824] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 180.243217][ T7824] ? __pfx___might_resched+0x10/0x10 [ 180.243240][ T7824] netlink_rcv_skb+0x206/0x480 [ 180.243255][ T7824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.243275][ T7824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.243297][ T7824] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 180.243345][ T7824] genl_rcv+0x28/0x40 [ 180.243363][ T7824] netlink_unicast+0x7f6/0x990 [ 180.243383][ T7824] ? __pfx_netlink_unicast+0x10/0x10 [ 180.243395][ T7824] ? __virt_addr_valid+0x45f/0x530 [ 180.243409][ T7824] ? __phys_addr_symbol+0x2f/0x70 [ 180.243420][ T7824] ? __check_object_size+0x47a/0x730 [ 180.243441][ T7824] netlink_sendmsg+0x8de/0xcb0 [ 180.243465][ T7824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.243484][ T7824] ? __import_iovec+0x582/0x830 [ 180.243501][ T7824] ? aa_sock_msg_perm+0x91/0x160 [ 180.243526][ T7824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.243541][ T7824] __sock_sendmsg+0x221/0x270 [ 180.243564][ T7824] ____sys_sendmsg+0x53a/0x860 [ 180.243583][ T7824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.243608][ T7824] __sys_sendmsg+0x269/0x350 [ 180.243625][ T7824] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.243670][ T7824] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 180.243692][ T7824] ? lockdep_hardirqs_on+0x99/0x150 [ 180.243713][ T7824] __do_fast_syscall_32+0xb4/0x110 [ 180.243726][ T7824] ? exc_page_fault+0x590/0x8b0 [ 180.243747][ T7824] do_fast_syscall_32+0x34/0x80 [ 180.243760][ T7824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.243782][ T7824] RIP: 0023:0xf741d579 [ 180.243797][ T7824] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 180.243808][ T7824] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 180.243827][ T7824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 180.243837][ T7824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.243844][ T7824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.243852][ T7824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 180.243860][ T7824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.243878][ T7824] [ 180.758877][ T976] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 180.782176][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.793374][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.816324][ T5893] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 180.872408][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.885293][ T5893] usb 7-1: config 0 descriptor?? [ 180.944018][ T976] usb 8-1: config 0 has no interfaces? [ 180.973994][ T976] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 180.984075][ T976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.992730][ T5890] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 181.043045][ T976] usb 8-1: Product: syz [ 181.078096][ T976] usb 8-1: Manufacturer: syz [ 181.104044][ T976] usb 8-1: SerialNumber: syz [ 181.116943][ T976] usb 8-1: config 0 descriptor?? [ 181.200855][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 181.212991][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.245631][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.278258][ T5890] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 181.310632][ T5893] waltop 0003:172F:0034.000A: item fetching failed at offset 5/7 [ 181.332962][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.355628][ T5893] waltop 0003:172F:0034.000A: probe with driver waltop failed with error -22 [ 181.377652][ T5890] usb 5-1: config 0 descriptor?? [ 181.512310][ T976] usb 7-1: USB disconnect, device number 13 [ 181.610051][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.655730][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.703890][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.715616][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.728955][ T5893] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 181.878919][ T5893] usb 10-1: Using ep0 maxpacket: 32 [ 181.888776][ T5893] usb 10-1: unable to get BOS descriptor or descriptor too short [ 181.901605][ T5893] usb 10-1: config 245 has an invalid descriptor of length 0, skipping remainder of the config [ 181.913116][ T5893] usb 10-1: config 245 has 1 interface, different from the descriptor's value: 3 [ 181.922894][ T5893] usb 10-1: config 245 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 181.937890][ T5893] usb 10-1: language id specifier not provided by device, defaulting to English [ 181.949948][ T5893] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.969148][ T5893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.987811][ T5893] usb 10-1: Product: syz [ 181.996792][ T5893] usb 10-1: Manufacturer: ᆒ瀦㳝᷏脂㓃腬콌컙擷὏ⶔ汞⧾홆။왝ꁬ꺬佭ꈡ혫炉⣑谛ﺷﴏ۰ᥦ뙤㚄溵㘦▟㖆䑍友댶즒濾쨗寜犨㺊筭䢡킊ᄓ㯡㿼န婽ﻇቓￍꋺ葋掲⡶೩娩⯊ꜙ [ 182.052053][ T5893] usb 10-1: SerialNumber: syz [ 182.170274][ T5909] usb 9-1: USB disconnect, device number 9 [ 182.287243][ T5893] usb 10-1: 0:2 : does not exist [ 182.304541][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 182.320458][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.353946][ T5893] usb 10-1: USB disconnect, device number 9 [ 182.372069][ T5890] usb 5-1: USB disconnect, device number 29 [ 182.640797][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:245.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.889608][ T5890] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 182.967292][ T7873] FAULT_INJECTION: forcing a failure. [ 182.967292][ T7873] name failslab, interval 1, probability 0, space 0, times 0 [ 182.988795][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.9.388 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 182.988820][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.988831][ T7873] Call Trace: [ 182.988838][ T7873] [ 182.988845][ T7873] dump_stack_lvl+0x241/0x360 [ 182.988874][ T7873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.988895][ T7873] ? __pfx__printk+0x10/0x10 [ 182.988933][ T7873] ? __kmalloc_noprof+0xb5/0x4c0 [ 182.988962][ T7873] ? __pfx___might_resched+0x10/0x10 [ 182.988992][ T7873] should_fail_ex+0x40a/0x550 [ 182.989028][ T7873] should_failslab+0xac/0x100 [ 182.989057][ T7873] __kmalloc_noprof+0xdd/0x4c0 [ 182.989083][ T7873] ? rfkill_alloc+0xb0/0x2e0 [ 182.989114][ T7873] rfkill_alloc+0xb0/0x2e0 [ 182.989145][ T7873] wiphy_new_nm+0x1084/0x19a0 [ 182.989165][ T7873] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 182.989193][ T7873] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 182.989241][ T7873] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 182.989271][ T7873] mac80211_hwsim_new_radio+0x203/0x4a40 [ 182.989300][ T7873] ? __pfx___nla_validate_parse+0x10/0x10 [ 182.989345][ T7873] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 182.989376][ T7873] ? __nla_parse+0x40/0x60 [ 182.989400][ T7873] hwsim_new_radio_nl+0xece/0x2290 [ 182.989435][ T7873] ? __pfx___nla_validate_parse+0x10/0x10 [ 182.989460][ T7873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 182.989515][ T7873] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 182.989553][ T7873] genl_rcv_msg+0xb1f/0xec0 [ 182.989608][ T7873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.989666][ T7873] ? __pfx_lock_acquire+0x10/0x10 [ 182.989696][ T7873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 182.989723][ T7873] ? __pfx___might_resched+0x10/0x10 [ 182.989760][ T7873] netlink_rcv_skb+0x206/0x480 [ 182.989786][ T7873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.989818][ T7873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.989856][ T7873] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 182.989896][ T7873] genl_rcv+0x28/0x40 [ 182.989924][ T7873] netlink_unicast+0x7f6/0x990 [ 182.989955][ T7873] ? __pfx_netlink_unicast+0x10/0x10 [ 182.989974][ T7873] ? __virt_addr_valid+0x45f/0x530 [ 182.989994][ T7873] ? __phys_addr_symbol+0x2f/0x70 [ 182.990013][ T7873] ? __check_object_size+0x47a/0x730 [ 182.990045][ T7873] netlink_sendmsg+0x8de/0xcb0 [ 182.990083][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.990112][ T7873] ? __import_iovec+0x582/0x830 [ 182.990137][ T7873] ? aa_sock_msg_perm+0x91/0x160 [ 182.990174][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.990198][ T7873] __sock_sendmsg+0x221/0x270 [ 182.990237][ T7873] ____sys_sendmsg+0x53a/0x860 [ 182.990268][ T7873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.990308][ T7873] __sys_sendmsg+0x269/0x350 [ 182.990336][ T7873] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.990410][ T7873] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 182.990442][ T7873] ? lockdep_hardirqs_on+0x99/0x150 [ 182.990475][ T7873] __do_fast_syscall_32+0xb4/0x110 [ 182.990495][ T7873] ? exc_page_fault+0x590/0x8b0 [ 182.990528][ T7873] do_fast_syscall_32+0x34/0x80 [ 182.990547][ T7873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.990578][ T7873] RIP: 0023:0xf741d579 [ 182.990595][ T7873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 182.990613][ T7873] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 182.990634][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 182.990648][ T7873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.990659][ T7873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.990671][ T7873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.990682][ T7873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.990711][ T7873] [ 183.007554][ T5893] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 183.013980][ T7873] INFO: trying to register non-static key. [ 183.385991][ T7873] The code is fine but needs lockdep annotation, or maybe [ 183.393093][ T7873] you didn't initialize this object before use? [ 183.399321][ T7873] turning off the locking correctness validator. [ 183.405642][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.9.388 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 183.405660][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.405670][ T7873] Call Trace: [ 183.405676][ T7873] [ 183.405683][ T7873] dump_stack_lvl+0x241/0x360 [ 183.405706][ T7873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.405723][ T7873] ? __pfx__printk+0x10/0x10 [ 183.405739][ T7873] ? __is_module_percpu_address+0x213/0x370 [ 183.405759][ T7873] ? __is_kernel_percpu_address+0x115/0x250 [ 183.405782][ T7873] assign_lock_key+0x241/0x280 [ 183.405799][ T7873] ? __pfx_assign_lock_key+0x10/0x10 [ 183.405819][ T7873] register_lock_class+0x1cf/0x980 [ 183.405843][ T7873] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 183.405866][ T7873] ? __pfx_register_lock_class+0x10/0x10 [ 183.405892][ T7873] ? mark_lock+0x9a/0x360 [ 183.405906][ T7873] __lock_acquire+0xf3/0x2100 [ 183.405929][ T7873] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 183.405953][ T7873] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.405979][ T7873] lock_acquire+0x1ed/0x550 [ 183.406001][ T7873] ? cfg80211_dev_free+0x33/0x2d0 [ 183.406020][ T7873] ? __pfx_lock_acquire+0x10/0x10 [ 183.406043][ T7873] ? dump_stack_lvl+0x301/0x360 [ 183.406061][ T7873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.406080][ T7873] _raw_spin_lock_irqsave+0xd5/0x120 [ 183.406101][ T7873] ? cfg80211_dev_free+0x33/0x2d0 [ 183.406117][ T7873] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 183.406137][ T7873] ? devres_release_all+0x1eb/0x250 [ 183.406157][ T7873] ? device_release+0x66/0x1c0 [ 183.406175][ T7873] ? __pfx_wiphy_dev_release+0x10/0x10 [ 183.406195][ T7873] cfg80211_dev_free+0x33/0x2d0 [ 183.406215][ T7873] ? trace_kmalloc+0x1f/0xd0 [ 183.406236][ T7873] ? __pfx_wiphy_dev_release+0x10/0x10 [ 183.406255][ T7873] device_release+0x99/0x1c0 [ 183.406274][ T7873] kobject_put+0x22f/0x480 [ 183.406291][ T7873] wiphy_new_nm+0x16ea/0x19a0 [ 183.406306][ T7873] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 183.406328][ T7873] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 183.406348][ T7873] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 183.406371][ T7873] mac80211_hwsim_new_radio+0x203/0x4a40 [ 183.406391][ T7873] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.406417][ T7873] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 183.406439][ T7873] ? __nla_parse+0x40/0x60 [ 183.406456][ T7873] hwsim_new_radio_nl+0xece/0x2290 [ 183.406481][ T7873] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.406500][ T7873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.406530][ T7873] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 183.406559][ T7873] genl_rcv_msg+0xb1f/0xec0 [ 183.406584][ T7873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.406617][ T7873] ? __pfx_lock_acquire+0x10/0x10 [ 183.406639][ T7873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.406659][ T7873] ? __pfx___might_resched+0x10/0x10 [ 183.406684][ T7873] netlink_rcv_skb+0x206/0x480 [ 183.406702][ T7873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.406726][ T7873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.406749][ T7873] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 183.406791][ T7873] genl_rcv+0x28/0x40 [ 183.406813][ T7873] netlink_unicast+0x7f6/0x990 [ 183.406833][ T7873] ? __pfx_netlink_unicast+0x10/0x10 [ 183.406848][ T7873] ? __virt_addr_valid+0x45f/0x530 [ 183.406864][ T7873] ? __phys_addr_symbol+0x2f/0x70 [ 183.406878][ T7873] ? __check_object_size+0x47a/0x730 [ 183.406901][ T7873] netlink_sendmsg+0x8de/0xcb0 [ 183.406925][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.406946][ T7873] ? __import_iovec+0x582/0x830 [ 183.406967][ T7873] ? aa_sock_msg_perm+0x91/0x160 [ 183.406994][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.407013][ T7873] __sock_sendmsg+0x221/0x270 [ 183.407036][ T7873] ____sys_sendmsg+0x53a/0x860 [ 183.407056][ T7873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.407079][ T7873] __sys_sendmsg+0x269/0x350 [ 183.407098][ T7873] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.407132][ T7873] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 183.407158][ T7873] ? lockdep_hardirqs_on+0x99/0x150 [ 183.407182][ T7873] __do_fast_syscall_32+0xb4/0x110 [ 183.407197][ T7873] ? exc_page_fault+0x590/0x8b0 [ 183.407226][ T7873] do_fast_syscall_32+0x34/0x80 [ 183.407241][ T7873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.407267][ T7873] RIP: 0023:0xf741d579 [ 183.407282][ T7873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 183.407297][ T7873] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 183.407314][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 183.407325][ T7873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.407335][ T7873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.407344][ T7873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.407354][ T7873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.407369][ T7873] [ 183.408225][ T7873] ------------[ cut here ]------------ [ 183.893640][ T7873] WARNING: CPU: 1 PID: 7873 at net/wireless/core.c:1197 cfg80211_dev_free+0x2ba/0x2d0 [ 183.903209][ T7873] Modules linked in: [ 183.907131][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.9.388 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 183.917722][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.927781][ T7873] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 183.933509][ T7873] Code: da f6 49 8b be e0 08 00 00 e8 92 37 cf f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c 37 cf f6 e8 97 80 73 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 183.953116][ T7873] RSP: 0018:ffffc900055aee00 EFLAGS: 00010093 [ 183.959193][ T7873] RAX: ffffffff8b4e5f39 RBX: ffff8880339886a8 RCX: ffff88802f610000 [ 183.967168][ T7873] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900055aece0 [ 183.975144][ T7873] RBP: 1ffffffff194d1b0 R08: 0000000000000003 R09: fffff52000ab5d9c [ 183.983118][ T7873] R10: dffffc0000000000 R11: fffff52000ab5d9c R12: ffff8880339886b8 [ 183.991189][ T7873] R13: dffffc0000000000 R14: ffff888033988000 R15: 0000000000000246 [ 183.999166][ T7873] FS: 0000000000000000(0000) GS:ffff8880b8700000(0063) knlGS:00000000f50a6b40 [ 184.008101][ T7873] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 184.014768][ T7873] CR2: 0000000080001ac0 CR3: 00000000312de000 CR4: 00000000003526f0 [ 184.022744][ T7873] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.030717][ T7873] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.038686][ T7873] Call Trace: [ 184.041967][ T7873] [ 184.044900][ T7873] ? __warn+0x165/0x4d0 [ 184.049068][ T7873] ? cfg80211_dev_free+0x2ba/0x2d0 [ 184.054187][ T7873] ? report_bug+0x2b3/0x500 [ 184.058783][ T7873] ? cfg80211_dev_free+0x2ba/0x2d0 [ 184.063895][ T7873] ? handle_bug+0x60/0x90 [ 184.068226][ T7873] ? exc_invalid_op+0x1a/0x50 [ 184.072991][ T7873] ? asm_exc_invalid_op+0x1a/0x20 [ 184.078040][ T7873] ? cfg80211_dev_free+0x2b9/0x2d0 [ 184.083158][ T7873] ? cfg80211_dev_free+0x2ba/0x2d0 [ 184.088280][ T7873] ? trace_kmalloc+0x1f/0xd0 [ 184.092888][ T7873] ? __pfx_wiphy_dev_release+0x10/0x10 [ 184.098350][ T7873] device_release+0x99/0x1c0 [ 184.102968][ T7873] kobject_put+0x22f/0x480 [ 184.107387][ T7873] wiphy_new_nm+0x16ea/0x19a0 [ 184.112064][ T7873] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 184.118568][ T7873] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 184.123966][ T7873] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 184.129781][ T7873] mac80211_hwsim_new_radio+0x203/0x4a40 [ 184.135419][ T7873] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.141148][ T7873] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 184.147315][ T7873] ? __nla_parse+0x40/0x60 [ 184.151757][ T7873] hwsim_new_radio_nl+0xece/0x2290 [ 184.156901][ T7873] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.162637][ T7873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.168206][ T7873] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 184.174554][ T7873] genl_rcv_msg+0xb1f/0xec0 [ 184.179114][ T7873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.184162][ T7873] ? __pfx_lock_acquire+0x10/0x10 [ 184.189200][ T7873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.194752][ T7873] ? __pfx___might_resched+0x10/0x10 [ 184.200048][ T7873] netlink_rcv_skb+0x206/0x480 [ 184.204815][ T7873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.209851][ T7873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.215145][ T7873] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 184.220616][ T7873] genl_rcv+0x28/0x40 [ 184.224616][ T7873] netlink_unicast+0x7f6/0x990 [ 184.229389][ T7873] ? __pfx_netlink_unicast+0x10/0x10 [ 184.234679][ T7873] ? __virt_addr_valid+0x45f/0x530 [ 184.239792][ T7873] ? __phys_addr_symbol+0x2f/0x70 [ 184.244815][ T7873] ? __check_object_size+0x47a/0x730 [ 184.250104][ T7873] netlink_sendmsg+0x8de/0xcb0 [ 184.254872][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.260161][ T7873] ? __import_iovec+0x582/0x830 [ 184.265017][ T7873] ? aa_sock_msg_perm+0x91/0x160 [ 184.269957][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.275254][ T7873] __sock_sendmsg+0x221/0x270 [ 184.279954][ T7873] ____sys_sendmsg+0x53a/0x860 [ 184.284750][ T7873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.290083][ T7873] __sys_sendmsg+0x269/0x350 [ 184.294688][ T7873] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.299820][ T7873] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 184.306428][ T7873] ? lockdep_hardirqs_on+0x99/0x150 [ 184.311641][ T7873] __do_fast_syscall_32+0xb4/0x110 [ 184.316786][ T7873] ? exc_page_fault+0x590/0x8b0 [ 184.321650][ T7873] do_fast_syscall_32+0x34/0x80 [ 184.326504][ T7873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.333025][ T7873] RIP: 0023:0xf741d579 [ 184.337096][ T7873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 184.356829][ T7873] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 184.365271][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 184.373268][ T7873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.381240][ T7873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.389219][ T7873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.397199][ T7873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.405271][ T7873] [ 184.408311][ T7873] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.415600][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.9.388 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 184.426211][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.436279][ T7873] Call Trace: [ 184.439561][ T7873] [ 184.442494][ T7873] dump_stack_lvl+0x241/0x360 [ 184.447180][ T7873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.452384][ T7873] ? __pfx__printk+0x10/0x10 [ 184.456974][ T7873] ? _printk+0xd5/0x120 [ 184.461132][ T7873] ? __init_begin+0x41000/0x41000 [ 184.466165][ T7873] ? vscnprintf+0x5d/0x90 [ 184.470506][ T7873] panic+0x349/0x880 [ 184.474404][ T7873] ? __warn+0x174/0x4d0 [ 184.478571][ T7873] ? __pfx_panic+0x10/0x10 [ 184.483012][ T7873] __warn+0x344/0x4d0 [ 184.487017][ T7873] ? cfg80211_dev_free+0x2ba/0x2d0 [ 184.492171][ T7873] report_bug+0x2b3/0x500 [ 184.496517][ T7873] ? cfg80211_dev_free+0x2ba/0x2d0 [ 184.501658][ T7873] handle_bug+0x60/0x90 [ 184.505820][ T7873] exc_invalid_op+0x1a/0x50 [ 184.510323][ T7873] asm_exc_invalid_op+0x1a/0x20 [ 184.515189][ T7873] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 184.520917][ T7873] Code: da f6 49 8b be e0 08 00 00 e8 92 37 cf f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c 37 cf f6 e8 97 80 73 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 184.540647][ T7873] RSP: 0018:ffffc900055aee00 EFLAGS: 00010093 [ 184.546744][ T7873] RAX: ffffffff8b4e5f39 RBX: ffff8880339886a8 RCX: ffff88802f610000 [ 184.554742][ T7873] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900055aece0 [ 184.562716][ T7873] RBP: 1ffffffff194d1b0 R08: 0000000000000003 R09: fffff52000ab5d9c [ 184.570692][ T7873] R10: dffffc0000000000 R11: fffff52000ab5d9c R12: ffff8880339886b8 [ 184.578666][ T7873] R13: dffffc0000000000 R14: ffff888033988000 R15: 0000000000000246 [ 184.586645][ T7873] ? cfg80211_dev_free+0x2b9/0x2d0 [ 184.591779][ T7873] ? trace_kmalloc+0x1f/0xd0 [ 184.596377][ T7873] ? __pfx_wiphy_dev_release+0x10/0x10 [ 184.601843][ T7873] device_release+0x99/0x1c0 [ 184.606440][ T7873] kobject_put+0x22f/0x480 [ 184.610859][ T7873] wiphy_new_nm+0x16ea/0x19a0 [ 184.615535][ T7873] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 184.622061][ T7873] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 184.627472][ T7873] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 184.633289][ T7873] mac80211_hwsim_new_radio+0x203/0x4a40 [ 184.638936][ T7873] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.644669][ T7873] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 184.650744][ T7873] ? __nla_parse+0x40/0x60 [ 184.655173][ T7873] hwsim_new_radio_nl+0xece/0x2290 [ 184.660309][ T7873] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.666043][ T7873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.671613][ T7873] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 184.677957][ T7873] genl_rcv_msg+0xb1f/0xec0 [ 184.682474][ T7873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.687516][ T7873] ? __pfx_lock_acquire+0x10/0x10 [ 184.692550][ T7873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.698096][ T7873] ? __pfx___might_resched+0x10/0x10 [ 184.703388][ T7873] netlink_rcv_skb+0x206/0x480 [ 184.708158][ T7873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.713200][ T7873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.718505][ T7873] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 184.723971][ T7873] genl_rcv+0x28/0x40 [ 184.727963][ T7873] netlink_unicast+0x7f6/0x990 [ 184.732743][ T7873] ? __pfx_netlink_unicast+0x10/0x10 [ 184.738031][ T7873] ? __virt_addr_valid+0x45f/0x530 [ 184.743160][ T7873] ? __phys_addr_symbol+0x2f/0x70 [ 184.748188][ T7873] ? __check_object_size+0x47a/0x730 [ 184.753483][ T7873] netlink_sendmsg+0x8de/0xcb0 [ 184.758256][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.763546][ T7873] ? __import_iovec+0x582/0x830 [ 184.768405][ T7873] ? aa_sock_msg_perm+0x91/0x160 [ 184.773357][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.778650][ T7873] __sock_sendmsg+0x221/0x270 [ 184.783339][ T7873] ____sys_sendmsg+0x53a/0x860 [ 184.788115][ T7873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.793421][ T7873] __sys_sendmsg+0x269/0x350 [ 184.798040][ T7873] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.803175][ T7873] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 184.809774][ T7873] ? lockdep_hardirqs_on+0x99/0x150 [ 184.815000][ T7873] __do_fast_syscall_32+0xb4/0x110 [ 184.820117][ T7873] ? exc_page_fault+0x590/0x8b0 [ 184.824979][ T7873] do_fast_syscall_32+0x34/0x80 [ 184.829832][ T7873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.836172][ T7873] RIP: 0023:0xf741d579 [ 184.840253][ T7873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 184.859915][ T7873] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 184.868339][ T7873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 184.876315][ T7873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.884286][ T7873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.892262][ T7873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.900232][ T7873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.908268][ T7873] [ 184.911644][ T7873] Kernel Offset: disabled [ 184.915977][ T7873] Rebooting in 86400 seconds..