last executing test programs: 42m14.111789671s ago: executing program 1 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@del={0x100, 0x11, 0x100, 0x70bd27, 0x25dfdbfb, {{'cmac(aes)\x00'}, '\x00', '\x00', 0x2000}, [{0x8, 0x1, 0xd}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x1000}]}, 0x100}}, 0x41) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}}, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendto$inet(r2, &(0x7f0000000300)="ab", 0x34000, 0x41, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x71fd5475}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1f9}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 42m10.824269878s ago: executing program 1 (id=138): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x2200) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)=0x8) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0xfa80, 0x8, 0x15, 0x9a8, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x9}, &(0x7f0000000180)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x5c}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r1, 0xc7, "238049778b9e022f7652b3c08d8efa90be3307587577c5a58c8d4b172a9efd7be682cdc3e65575c2aff161794c3c287995a7134705b0b93ec55a1fffe332eb2c72f663d59fbc8924ed0d07e19a3f9bd558c8712e44a1b9651793b78ef1e3e20d3d17bd7a8e5b99c8e1142b56becf4ab1cc1e851dbed10839ba96169a97a29cc0547a1e8c26f43fcb34cbfc17fb89d8cd69213b425c41477ec37dd5809510b857224b8112d4f0a4643eedddf64ba6c3c88de605355bc525b6670df2fc7605218e52aa32f9df1c57"}, &(0x7f0000000400)=0xcf) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000780)={0x1430, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000580)=""/93, 0x5d}, {&(0x7f0000000600)=""/249, 0xf9}], &(0x7f0000000740)=[0x0, 0x5], 0x4}, 0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000062c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000006140)=[{{&(0x7f00000007c0)=@rc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/167, 0xa7}, {&(0x7f0000000900)=""/82, 0x52}, {&(0x7f0000000980)=""/234, 0xea}, {&(0x7f0000000a80)=""/124, 0x7c}, {&(0x7f0000000b00)=""/124, 0x7c}, {&(0x7f0000000b80)=""/111, 0x6f}], 0x6, &(0x7f0000000c80)=""/61, 0x3d}, 0x2}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/180, 0xb4}, {&(0x7f0000000d80)=""/191, 0xbf}], 0x2, &(0x7f0000000e80)=""/166, 0xa6}, 0x491}, {{&(0x7f0000000f40)=@nfc_llcp, 0x80, &(0x7f0000001180)=[{&(0x7f0000000fc0)=""/137, 0x89}, {&(0x7f0000001080)=""/119, 0x77}, {&(0x7f0000001100)=""/84, 0x54}], 0x3, &(0x7f00000011c0)=""/37, 0x25}, 0x9}, {{&(0x7f0000001200)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001280)=""/12, 0xc}, {&(0x7f00000012c0)=""/183, 0xb7}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/190, 0xbe}, {&(0x7f0000002440)=""/150, 0x96}, {&(0x7f0000002500)=""/154, 0x9a}, {&(0x7f00000025c0)=""/79, 0x4f}], 0x7, &(0x7f00000026c0)=""/164, 0xa4}, 0x2}, {{&(0x7f0000002780)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002800)=""/214, 0xd6}, {&(0x7f0000002900)=""/230, 0xe6}, {&(0x7f0000002a00)=""/100, 0x64}, {&(0x7f0000002a80)=""/9, 0x9}, {&(0x7f0000002ac0)=""/190, 0xbe}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x6, &(0x7f0000003c00)=""/235, 0xeb}, 0xe44}, {{&(0x7f0000003d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000060c0)=[{&(0x7f0000003d80)=""/88, 0x58}, {&(0x7f0000003e00)=""/178, 0xb2}, {&(0x7f0000003ec0)=""/163, 0xa3}, {&(0x7f0000003f80)=""/53, 0x35}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/194, 0xc2}, {&(0x7f00000050c0)=""/4096, 0x1000}], 0x7}, 0x5}], 0x6, 0x40000000, &(0x7f0000006300)={r5, r6+10000000}) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000006340)) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000006380)=0xb9, 0x4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f00000063c0)={r7}, 0x1) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006440), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000006540)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006500)={&(0x7f0000006480)={0x64, r8, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000080) clock_gettime(0x0, &(0x7f0000006580)={0x0, 0x0}) clock_settime(0x5, &(0x7f00000065c0)={r9, r10+10000000}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000006680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000006740)={&(0x7f0000006600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006700)={&(0x7f00000066c0)={0x1c, r12, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000006780)={0xecd, 0x4, 0x800c, 0x7, 0x3, 0x3, 0x8, 0x1, r3}, &(0x7f00000067c0)=0x20) r14 = socket(0x15, 0x1, 0x82b) setsockopt$inet6_IPV6_ADDRFORM(r14, 0x29, 0x1, &(0x7f0000006800), 0x4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000006900)={&(0x7f0000006840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000068c0)={&(0x7f0000006880)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000006980)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000006c00)={&(0x7f0000006940)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000006bc0)={&(0x7f00000069c0)=@newlink={0x1c4, 0x10, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r15, 0x10100, 0x4000}, [@IFLA_AF_SPEC={0x4}, @IFLA_PORT_SELF={0x50, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'dvmrp1\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_PROFILE={0xa, 0x2, 'wlan1\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xd43}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c54c03eef83ea3ace71e14190f5ebfbe"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_VFINFO_LIST={0x144, 0x16, 0x0, 0x1, [{0xe4, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x9, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @random="bf3ae9c6862c"}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xddc, 0x0, 0x8100}}, {0x14, 0x1, {0x7, 0x97a, 0x2, 0x8100}}, {0x14, 0x1, {0x8, 0x69f, 0xff000, 0x88a8}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @broadcast}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x52cee56f, 0x8}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @local}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x39, 0x5}}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x18000}, 0x4000000) 42m7.496277356s ago: executing program 1 (id=140): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {0x0}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140), 0x4) 42m5.389922628s ago: executing program 1 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') chdir(&(0x7f00000000c0)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141000) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1da, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @remote, @void, {@ipv4={0x800, @tcp={{0x21, 0x4, 0x1, 0x2d, 0x1cc, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @loopback, {[@lsrr={0x83, 0x17, 0x7f, [@remote, @multicast1, @broadcast, @multicast1, @remote]}, @lsrr={0x83, 0x13, 0x79, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0xb, [{@local, 0x3}]}, @rr={0x7, 0xb, 0x8c, [@multicast2, @private=0xa010100]}, @timestamp={0x44, 0x8, 0xb7, 0x0, 0xc, [0x1]}, @timestamp={0x44, 0x1c, 0x6f, 0x0, 0x1, [0x2, 0xe81, 0x4, 0x3ff, 0x3, 0x400]}, @generic={0x83, 0x8, "0aa9a4ba32d6"}, @noop]}}, {{0x4e21, 0x4, 0x41424344, r3, 0x0, 0x0, 0x13, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xcd, 0x4}, @sack={0x5, 0x16, [0x5, 0x8f, 0x715, 0x101, 0x88]}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x10, 0x10}, @sack_perm={0x4, 0x2}, @generic={0x8, 0x4, "5cc4"}]}}, {"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"}}}}}}, &(0x7f0000000240)={0x1, 0x3, [0xd7c, 0x5bc, 0x2ca, 0x927]}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 42m2.466380755s ago: executing program 1 (id=144): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x9}}}, 0x28) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x1000000000000}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) memfd_create(0x0, 0x50b61383a8c44ce0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff79) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000000000000000018001600140010000000000008000400"/59, @ANYRES32=r5, @ANYBLOB="0600150007000000"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='mm_compaction_migratepages\x00', r3}, 0x18) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x10000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0xa632, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x6, 0x5, 0x1}, {0xffff, 0x9, 0x0, 0xa0}, {0x1, 0x7, 0x6}]}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x541b, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0xc0044dff, &(0x7f0000001480)) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/47, 0x2f, 0x1, 0x0}, &(0x7f0000000380)=0x40) 42m0.896571481s ago: executing program 1 (id=146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140), 0x4) 41m58.345748556s ago: executing program 32 (id=146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140), 0x4) 15m52.197514642s ago: executing program 2 (id=631): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:s}z 0000000004005 '], 0x2f, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 15m47.963621577s ago: executing program 2 (id=632): r0 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)=0x0) setresuid(0x0, r1, 0xffffffffffffffff) getresuid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setresuid(r2, r1, r1) r3 = getuid() r4 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x60000000, 0x8, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x68, 0x0, 0x5, 0x2b, 0x0, @broadcast, @private=0xa010100}}}}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000079381010c2154000fb0707820b0109021b0009000000080904000001e10455000905", @ANYRES32], 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x46, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r9]) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{0x2, 0x1, r1}, {0x2, 0x4}, {0x2, 0x2, 0xee00}, {}, {0x2, 0x0, r3}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x6, r4}, {0x2, 0x0, r5}, {0x2, 0x3, r6}], {0x4, 0x4}, [{0x8, 0x4, 0xee00}, {0x8, 0x1, r9}], {0x10, 0x6}, {0x20, 0x6}}, 0x7c, 0x3) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 15m39.139041451s ago: executing program 2 (id=634): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f0000000200)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x161\x13r\xc49\x80\x86\x1a\xbf\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xf5\xcc\xc9Z\x9f\xa6\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\xc1W\x10r\x9b~n`m:]#\x989', 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="076c07e8cedce20c76", 0x9}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000030c0)={0x2, {"a2e3ad214fc752f91b450a0787f70e06d038e7ff7fc6e5539b326d078b089b0708385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359baffba45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e1313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x100, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r5 = dup(r1) sendfile(r1, r5, &(0x7f0000000080), 0x20000080000001) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setresuid(0xee00, 0x0, 0x0) r6 = getuid() setresuid(r6, r6, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/file0\x00', 0x200) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) splice(r7, 0x0, r0, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000300)='`', 0x1}], 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 15m34.626138906s ago: executing program 2 (id=635): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x4], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaaf3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) (fail_nth: 2) 15m31.472716275s ago: executing program 2 (id=637): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r1, 0x4, 0x400) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000, 0x0, @void, @value, @void, @value}, 0x50) ppoll(&(0x7f0000000000)=[{}], 0x77, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @local}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @RTA_IIF={0x8, 0x3, r6}]}, 0x34}}, 0x50) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @local}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @RTA_IIF={0x8, 0x3, r6}]}, 0x34}}, 0x50) io_setup(0x1, &(0x7f0000000040)=0x0) getpgid(0x0) (async) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = pidfd_getfd(r9, r9, 0x0) setns(r10, 0x6202002f) r11 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r11, 0x0) ftruncate(r10, 0x5) (async) ftruncate(r10, 0x5) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r13) sendmsg$NLBL_CALIPSO_C_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r14, 0x125}, 0x14}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r14, 0x125}, 0x14}}, 0x0) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 15m28.544569925s ago: executing program 2 (id=638): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af00, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f0000000440)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) memfd_create(&(0x7f0000000940)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA\xba\n.\x8a\r;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\x066\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x95)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\t\x00\x00\x00\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x9d\x8f$\xdc9\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7O\xe3\xc2\x13;', 0x3) socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) syz_usb_control_io(r6, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00000700000007006469a00f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000020f30000", @ANYRES32=r7, @ANYRESHEX=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) 14m42.139496142s ago: executing program 33 (id=638): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af00, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f0000000440)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) memfd_create(&(0x7f0000000940)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA\xba\n.\x8a\r;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\x066\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x95)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\t\x00\x00\x00\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x9d\x8f$\xdc9\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7O\xe3\xc2\x13;', 0x3) socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) syz_usb_control_io(r6, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00000700000007006469a00f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000020f30000", @ANYRES32=r7, @ANYRESHEX=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) 20.558193387s ago: executing program 3 (id=896): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000000)="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", 0xfc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) 19.235333126s ago: executing program 0 (id=897): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "d0374aef4a90466115afd3baa6a148ee"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000240000000000800014000000014"], 0xc4}}, 0x0) 18.008295272s ago: executing program 0 (id=898): add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060823e57fd1b96900000000", 0xe, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="4780c54bbb56b7e61a5ea4fbda5297429c6236190563cdbfec3a7ddc9d04c218f9f57f7e5965e39cb7356fabbb8d91856e5e5865fa0d9973fdadb3e3d509c3ce6e31e25defcc97eb06804d005b65572b38765584b906b0b3ca09f6ab091ff5fd67a263c4256b2bfbdeb2939a3b54075be8f6cff0af368f5a816aedb3cb1aeb7a2dbde3f8d3c53e41ec9e0c016e3ef23c3f690ef6263cd399bc3fea375f57c98a8f1c0a868cd12ea4", 0xa8, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb5) 17.74865444s ago: executing program 3 (id=899): unshare(0x60600) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='ext3\x00', 0x0, 0x0) unshare(0x22000400) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x4, 0x0, 0x8, 0xb, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x4000000) unshare(0x60600) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) (async) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='ext3\x00', 0x0, 0x0) (async) unshare(0x22000400) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x4, 0x0, 0x8, 0xb, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x4000000) (async) 16.790980338s ago: executing program 0 (id=900): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x10, 0x2}, 0x10) (async) connect$inet(r2, &(0x7f0000000900)={0x48, 0x2}, 0x10) (async) sendto$inet(r2, &(0x7f0000000c80)="a2", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001a00), 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r5, &(0x7f0000000180)='./file1\x00', r5, &(0x7f0000000640)='./bus\x00', 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) (async) symlinkat(&(0x7f0000000580)='./bus\x00', r5, &(0x7f00000005c0)='./bus\x00') r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000600)=0x40049, 0x4) (async) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) (async) sendto$unix(r5, &(0x7f00000004c0)="2b3819730b113827c47cb39ffe9d1c", 0xf, 0x4000, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="e177483fcd99de8fdee499aa8045dbe2b323db5f152f0470dbe9aca4b8ae1a89cc6656386465285fac4250cb502d8ff4e5309daa07db4678cc0fd0ab3c27afaf61cabe5c081114d0a6df91c0371bf1921e8cd10296ff8476e7349a69807c2e04b5ac03731d5210cb3cfbe7c25a", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="fa6a7394", @ANYRES16=r10, @ANYBLOB="020027bd7000fcdbdf250300000005002e0001000000080032000300000005002a000100000008000300", @ANYRES32=r11, @ANYBLOB="08003400ffff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24008001) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r9, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008014) 14.621586231s ago: executing program 0 (id=901): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000082900fc020000000000000000000000000000ff020000000000000000000000000001"], 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000021000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fbdbdf255900000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0xc805) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000fbdbdf255900000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0xc805) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x101800, 0x81) (async) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x101800, 0x81) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) finit_module(r6, 0x0, 0x1) (async) finit_module(r6, 0x0, 0x1) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x1) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) (async) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r8, 0x1) 14.619592061s ago: executing program 3 (id=902): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000400)=""/249, 0xf9}, {&(0x7f0000000680)=""/237, 0xed}], 0x3, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth0_to_bridge\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) 11.038945826s ago: executing program 0 (id=903): syz_usb_connect(0x0, 0x56, &(0x7f0000002d80)=ANY=[@ANYBLOB="12010000c9d10102030109024400020000000009049700010da7a2775bd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf00082402010000000009050203000000000000000000"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.155134362s ago: executing program 3 (id=904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c030000", @ANYRES16=r5, @ANYBLOB="000229bd7000fcdbdf258700000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x35c}}, 0x819) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) pwritev2(r7, &(0x7f0000000180)=[{&(0x7f0000000140)="a8a66017a62101a3f764a35860", 0xd}], 0x1, 0x0, 0x4, 0x5) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x100, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000480)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x10, 0x0, 0x3f00, 0x0, 0x0, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}, @generic={0x0, 0xa, "d8314fd80c7a0806"}, @timestamp={0x8, 0xa}]}}}}}}, 0x62) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@updsa={0x19c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2c}, {@in6=@empty, 0x0, 0x32}, @in=@multicast2, {0x4}, {0x6, 0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8a}, [@policy={0xac, 0x7, {{@in=@remote, @in6=@private0, 0x4e21, 0x687e, 0x4e22, 0x3, 0x2, 0xa0, 0xa0, 0x2b, r3, r8}, {0xfffffffffffffffc, 0x80, 0x6e, 0x8000000000000000, 0x542, 0x4, 0xffffffff, 0xdb1}, {0xa, 0x0, 0x5, 0x9}, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) 4.530153617s ago: executing program 3 (id=905): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20005880) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000000102010100000000fffffffe01000009"], 0x14}, 0x1, 0x0, 0x0, 0x2404c0a4}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a030000000000000000000002"], &(0x7f00000000c0)=""/196, 0x3e, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0xac, 0x0, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x29aa}, @CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x240088c0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xfc, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3de}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8804}, 0x20000040) 3.111414459s ago: executing program 3 (id=906): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0x30, 0x2, "974e"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000440)={0x6}) 0s ago: executing program 0 (id=907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'ip6_vti0\x00', {0x4}}) write$tun(r0, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x2}}}}}}}, 0x46) kernel console output (not intermixed with test programs): 9][ T4421] usb 1-1: config 0 descriptor?? [ 1319.279640][ T4421] usbhid 1-1:0.0: can't add hid device: -71 [ 1319.284885][ T4421] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1319.541692][ T4421] usb 1-1: USB disconnect, device number 40 [ 1320.368185][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.381713][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.571439][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.611246][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.823895][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.884475][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.976653][ T6085] binder: Binderfs stats mode cannot be changed during a remount [ 1330.959855][ T5408] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1331.210026][ T5408] usb 1-1: Using ep0 maxpacket: 32 [ 1331.379210][ T5408] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1331.381277][ T5408] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1331.383129][ T5408] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.609781][ T5408] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1331.611773][ T5408] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1331.613289][ T5408] usb 1-1: Product: syz [ 1331.614402][ T5408] usb 1-1: Manufacturer: syz [ 1331.615587][ T5408] usb 1-1: SerialNumber: syz [ 1332.063338][ T6085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1332.205336][ T5408] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 1332.659715][ T5408] usb 1-1: USB disconnect, device number 41 [ 1332.669264][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1332.901044][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 1333.150556][ T5408] appletouch 1-1:1.0: input: appletouch disconnected [ 1336.603883][ T6115] fuse: Unknown parameter '' [ 1336.841597][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.865309][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.004442][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.061476][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.536116][ T35] audit: type=1326 audit(1352.280:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.2.251" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1358.154166][ T3901] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1358.850655][ T3901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.853049][ T3901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.854910][ T3901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1358.892377][ T3901] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1358.894943][ T3901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.355454][ T3901] usb 1-1: config 0 descriptor?? [ 1366.211091][ T6168] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535) [ 1369.843720][ T3901] usbhid 1-1:0.0: can't add hid device: -32 [ 1369.862208][ T3901] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1369.889259][ T6169] netlink: 88 bytes leftover after parsing attributes in process `syz.2.253'. [ 1370.060291][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.065775][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.395187][ T3901] usb 1-1: USB disconnect, device number 42 [ 1400.322377][ T6233] netlink: 256 bytes leftover after parsing attributes in process `syz.0.261'. [ 1404.458710][ T3902] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1404.564253][ T3902] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1406.171167][ T6246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.182936][ T6246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.493326][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 1420.495051][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 1420.545183][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 1420.582929][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 1426.134542][ T32] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1426.437909][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.439861][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.441406][ T32] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1426.442687][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.525320][ T32] usb 1-1: config 0 descriptor?? [ 1427.429715][ T32] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 1427.431298][ T32] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 1427.432528][ T32] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 1427.433592][ T32] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 1427.434739][ T32] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 1427.439937][ T32] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 1427.441259][ T32] saitek 0003:06A3:0621.0009: unknown main item tag 0x0 [ 1427.486040][ T32] saitek 0003:06A3:0621.0009: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.0-1/input0 [ 1427.552114][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 1429.745202][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.779704][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.330239][ T6170] usb 1-1: USB disconnect, device number 43 [ 1458.102836][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1458.104549][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1458.106171][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1458.121081][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1458.122546][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1458.128616][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1458.130059][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1458.203762][ T32] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1463.853524][ T6377] trusted_key: encrypted_key: keylen parameter is missing [ 1464.596715][ T6380] trusted_key: encrypted_key: keylen parameter is missing [ 1464.804536][ T6380] ubi0: attaching mtd0 [ 1465.103476][ T6380] ubi0: scanning is finished [ 1465.113280][ T6380] ubi0: empty MTD device detected [ 1466.005899][ T6380] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1466.009362][ T6380] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1466.010772][ T6380] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1466.011905][ T6380] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1466.013081][ T6380] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1466.019624][ T6380] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1466.021268][ T6380] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 883945237 [ 1466.023291][ T6380] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1466.038344][ T6384] ubi0: background thread "ubi_bgt0d" started, PID 6384 [ 1466.160687][ T6372] ubi0: detaching mtd0 [ 1466.306086][ T6372] ubi0: mtd0 is detached [ 1468.940567][ T3902] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1469.286504][ T3902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.290452][ T3902] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1469.293227][ T3902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.450937][ T3902] usb 1-1: config 0 descriptor?? [ 1469.573864][ T3902] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 1471.479444][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.521581][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.485904][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.596201][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.922416][ T3902] usb 1-1: USB disconnect, device number 44 [ 1488.134147][ T6422] usb usb1: usbfs: process 6422 (syz.0.291) did not claim interface 0 before use [ 1488.554679][ T6423] usb usb1: usbfs: process 6423 (syz.0.291) did not claim interface 0 before use [ 1488.893440][ T6412] raw_sendmsg: syz.2.290 forgot to set AF_INET. Fix it! [ 1491.601781][ T3902] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1491.831337][ T3902] usb 1-1: Using ep0 maxpacket: 16 [ 1491.943911][ T3902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.960266][ T3902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.962578][ T3902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1491.964339][ T3902] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1491.965553][ T3902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.089823][ T3902] usb 1-1: config 0 descriptor?? [ 1493.311366][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.480884][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.836270][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.934391][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.915593][ T3902] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 1494.984167][ T3902] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 1495.040939][ T3902] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1495.045002][ T3902] microsoft 0003:045E:07DA.000B: no inputs found [ 1495.046362][ T3902] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 1495.280305][ T3902] usb 1-1: USB disconnect, device number 45 [ 1498.075569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.209149][ T3901] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1519.430705][ T3901] usb 1-1: Using ep0 maxpacket: 8 [ 1519.556408][ T3901] usb 1-1: New USB device found, idVendor=05ac, idProduct=5b13, bcdDevice=92.39 [ 1519.560239][ T3901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.562312][ T3901] usb 1-1: Product: syz [ 1519.563926][ T3901] usb 1-1: Manufacturer: syz [ 1519.569259][ T3901] usb 1-1: SerialNumber: syz [ 1519.694690][ T3901] usb 1-1: config 0 descriptor?? [ 1519.881793][ T3901] ipheth 1-1:0.0: Unable to find alternate settings interface [ 1521.385167][ T6494] netlink: 'syz.0.300': attribute type 15 has an invalid length. [ 1521.522896][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 1521.529480][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 1521.531644][ T6494] netlink: 'syz.0.300': attribute type 5 has an invalid length. [ 1522.261390][ T3158] usb 1-1: USB disconnect, device number 46 [ 1542.233858][ T6542] x_tables: duplicate underflow at hook 1 [ 1550.512954][ T6555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.313'. [ 1551.676218][ T6557] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 1553.365921][ T6579] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1553.686238][ T6596] autofs: Bad value for 'fd' [ 1553.818711][ T5968] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1553.915823][ T6557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1553.983031][ T5968] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1558.266265][ T6602] netlink: 132 bytes leftover after parsing attributes in process `syz.0.316'. [ 1559.426413][ T6601] macsec0: entered promiscuous mode [ 1559.885947][ T6601] veth1_macvtap: left promiscuous mode [ 1561.669425][ T6601] macsec0 (unregistering): left promiscuous mode [ 1565.733423][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 1569.726375][ T6621] netlink: 'syz.2.321': attribute type 2 has an invalid length. [ 1569.961219][ T6621] usb usb1: usbfs: process 6621 (syz.2.321) did not claim interface 0 before use [ 1570.014722][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'. [ 1570.325285][ T6621] ipvlan0: entered promiscuous mode [ 1570.399034][ T6621] ipvlan0: left promiscuous mode [ 1611.555390][ T6775] tmpfs: Bad value for 'mpol' [ 1612.518080][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.524617][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.140145][ T3902] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1625.061720][ T3902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.064847][ T3902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.082726][ T3902] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 1625.085383][ T3902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.275702][ T3902] usb 1-1: config 0 descriptor?? [ 1627.278736][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.313762][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.334427][ T3902] usbhid 1-1:0.0: can't add hid device: -71 [ 1631.338656][ T3902] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1631.440886][ T3902] usb 1-1: USB disconnect, device number 47 [ 1641.542363][ T6840] input: syz0 as /devices/virtual/input/input15 [ 1649.890807][ T3902] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1650.564726][ T3902] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1650.572565][ T3902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.639614][ T3902] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1650.642709][ T3902] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1650.644620][ T3902] usb 1-1: Manufacturer: syz [ 1650.800714][ T3902] usb 1-1: config 0 descriptor?? [ 1652.769960][ T3902] rc_core: IR keymap rc-hauppauge not found [ 1652.772238][ T3902] Registered IR keymap rc-empty [ 1652.821953][ T3902] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1652.921774][ T3902] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 1653.012067][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1653.269350][ T3902] usb 1-1: USB disconnect, device number 48 [ 1667.581345][ T6892] ip6t_srh: unknown srh invflags 7863 [ 1674.922648][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 1674.924336][ T6900] netlink: 'syz.2.345': attribute type 3 has an invalid length. [ 1675.299717][ T6900] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.304439][ T6900] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.306592][ T6900] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.314619][ T6900] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.948888][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 1684.908275][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 1688.385480][ T6925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'. [ 1688.387784][ T6925] netlink: 60 bytes leftover after parsing attributes in process `syz.2.349'. [ 1692.995941][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 1693.140973][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 1703.022772][ T6943] netlink: 'syz.2.356': attribute type 2 has an invalid length. [ 1717.084254][ T6959] wireguard0: entered promiscuous mode [ 1717.111308][ T6959] wireguard0: entered allmulticast mode [ 1728.462054][ T32] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1737.818817][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1737.821140][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1737.822696][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1737.824056][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1737.826463][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1737.842652][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.384227][ T32] usb 1-1: config 0 descriptor?? [ 1739.436153][ T32] usb 1-1: can't set config #0, error -71 [ 1739.589199][ T32] usb 1-1: USB disconnect, device number 49 [ 1746.760712][ T5408] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1747.780722][ T5408] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.783350][ T5408] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1750.962103][ T5408] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1750.964665][ T5408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1750.968329][ T5408] usb 1-1: SerialNumber: syz [ 1752.354642][ T5408] usb 1-1: 0:2 : does not exist [ 1752.672261][ T5408] usb 1-1: USB disconnect, device number 50 [ 1754.201841][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.242427][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.048958][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.055747][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.554943][ T7076] netlink: 92 bytes leftover after parsing attributes in process `syz.0.371'. [ 1774.770850][ T7076] bond0: (slave bond_slave_1): Releasing backup interface [ 1774.891547][ T7076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.371'. [ 1774.893045][ T7076] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1779.300132][ T7085] input: syz1 as /devices/virtual/input/input18 [ 1782.370368][ T5408] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1782.692140][ T5408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.693927][ T5408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.695479][ T5408] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1782.712550][ T5408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.804122][ T5408] usb 1-1: config 0 descriptor?? [ 1784.310697][ T5408] hid-retrode 0003:0403:97C1.000C: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.0-1/input0 [ 1784.439142][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.475423][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.670348][ T5512] usb 1-1: USB disconnect, device number 51 [ 1794.209010][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.223381][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.339883][ T5512] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1794.630670][ T5512] usb 1-1: Using ep0 maxpacket: 16 [ 1794.661995][ T5512] usb 1-1: too many configurations: 44, using maximum allowed: 8 [ 1794.761273][ T5512] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1794.763785][ T5512] usb 1-1: can't read configurations, error -61 [ 1795.009939][ T5512] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1795.211221][ T5512] usb 1-1: Using ep0 maxpacket: 16 [ 1795.261857][ T5512] usb 1-1: too many configurations: 44, using maximum allowed: 8 [ 1795.299764][ T5512] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1795.302592][ T5512] usb 1-1: can't read configurations, error -61 [ 1795.351500][ T5512] usb usb1-port1: attempt power cycle [ 1795.727306][ C1] hrtimer: interrupt took 1892200 ns [ 1795.793956][ T5512] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1795.828198][ T5512] usb 1-1: Using ep0 maxpacket: 16 [ 1795.861002][ T5512] usb 1-1: too many configurations: 44, using maximum allowed: 8 [ 1796.052276][ T5512] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1796.055810][ T5512] usb 1-1: can't read configurations, error -61 [ 1796.340552][ T5512] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1796.429661][ T5512] usb 1-1: Using ep0 maxpacket: 16 [ 1796.461977][ T5512] usb 1-1: too many configurations: 44, using maximum allowed: 8 [ 1796.529527][ T5512] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1796.531893][ T5512] usb 1-1: can't read configurations, error -61 [ 1796.551983][ T5512] usb usb1-port1: unable to enumerate USB device [ 1804.980097][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.995318][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.958956][ T7164] GUP no longer grows the stack in syz.2.384 (7164): 20004000-20005000 (20001000) [ 1813.979035][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.2.384 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 1813.981367][ T7164] Hardware name: riscv-virtio,qemu (DT) [ 1813.983021][ T7164] Call Trace: [ 1813.984702][ T7164] [] dump_backtrace+0x2e/0x3c [ 1813.988877][ T7164] [] show_stack+0x34/0x40 [ 1813.990285][ T7164] [] dump_stack_lvl+0x122/0x196 [ 1813.992010][ T7164] [] dump_stack+0x1c/0x24 [ 1813.993686][ T7164] [] gup_vma_lookup+0x1e0/0x1ee [ 1813.995515][ T7164] [] __get_user_pages+0x1fc/0x3408 [ 1813.998498][ T7164] [] __gup_longterm_locked+0x1d2/0x18fc [ 1814.000152][ T7164] [] pin_user_pages_remote+0xea/0x142 [ 1814.001821][ T7164] [] process_vm_rw_core.constprop.0+0x3c4/0x91a [ 1814.003640][ T7164] [] process_vm_rw+0x268/0x29e [ 1814.005215][ T7164] [] __riscv_sys_process_vm_writev+0xc0/0x140 [ 1814.007128][ T7164] [] syscall_handler+0x94/0x118 [ 1814.008857][ T7164] [] do_trap_ecall_u+0x1aa/0x216 [ 1814.010593][ T7164] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1824.613207][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.629287][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.794689][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.851259][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.300698][ T7187] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1832.888696][ T7190] xt_NFQUEUE: number of total queues is 0 [ 1833.640089][ T7192] netlink: 104 bytes leftover after parsing attributes in process `syz.2.391'. [ 1844.993627][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 1845.000554][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 1845.454905][ T7204] IPv6: sit1: Disabled Multicast RS [ 1845.561338][ T7204] sit1: entered allmulticast mode [ 1853.121608][ T7216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1861.734259][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 1863.070930][ T7228] netlink: 48 bytes leftover after parsing attributes in process `syz.0.398'. [ 1867.078232][ T7237] fuse: Bad value for 'fd' [ 1872.861964][ T7245] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 1875.865124][ T7260] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1875.933588][ T5968] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1876.042377][ T7245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1876.081566][ T3093] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1881.196105][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 1881.201260][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 1881.203351][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.204669][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.205906][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.207863][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.212856][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.213927][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.214986][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.215959][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.217951][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.219025][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.220018][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.221000][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.222682][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.223712][ T6978] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 1881.247590][ T6978] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 1882.560119][ T7289] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 1886.532497][ T7302] netlink: 764 bytes leftover after parsing attributes in process `syz.0.407'. [ 1894.994754][ T35] audit: type=1326 audit(1893.754:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7319 comm="syz.0.411" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1895.340542][ T7322] netlink: 64 bytes leftover after parsing attributes in process `syz.2.412'. [ 1900.342751][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1900.375001][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.890403][ T6978] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1914.378984][ T6978] usb 1-1: device descriptor read/64, error -71 [ 1914.682215][ T6978] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1914.879535][ T6978] usb 1-1: device descriptor read/64, error -71 [ 1915.002197][ T6978] usb usb1-port1: attempt power cycle [ 1915.781574][ T6978] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1915.904424][ T6978] usb 1-1: device descriptor read/8, error -71 [ 1916.205600][ T6978] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1916.312983][ T6978] usb 1-1: device descriptor read/8, error -71 [ 1916.440904][ T6978] usb usb1-port1: unable to enumerate USB device [ 1921.536672][ T7359] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1921.536723][ T7358] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1930.919097][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.953525][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.900575][ T35] audit: type=1326 audit(1930.654:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.0.426" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1934.345802][ T7382] tmpfs: User quota inode hardlimit too large. [ 1950.498672][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 1953.525372][ T7393] [U] [ 1956.799055][ T3901] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1957.289027][ T3901] usb 1-1: device descriptor read/64, error -71 [ 1957.616005][ T3901] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1957.842729][ T3901] usb 1-1: device descriptor read/64, error -71 [ 1957.945087][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1957.979902][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1958.002322][ T3901] usb usb1-port1: attempt power cycle [ 1958.481306][ T3901] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1958.584189][ T3901] usb 1-1: device descriptor read/8, error -71 [ 1958.912279][ T3901] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1958.966639][ T3901] usb 1-1: device descriptor read/8, error -71 [ 1959.130152][ T3901] usb usb1-port1: unable to enumerate USB device [ 1970.060405][ T6978] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1970.289906][ T6978] usb 1-1: Using ep0 maxpacket: 16 [ 1970.909260][ T6978] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 1970.910851][ T6978] usb 1-1: config 0 has no interface number 0 [ 1970.912168][ T6978] usb 1-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1970.913569][ T6978] usb 1-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1970.914920][ T6978] usb 1-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1970.918011][ T6978] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1970.919398][ T6978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.452401][ T6978] usb 1-1: config 0 descriptor?? [ 1975.874758][ T6978] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.7/input/input20 [ 1976.009672][ T6978] usb 1-1: USB disconnect, device number 64 [ 1985.305484][ T7457] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 1992.772291][ T35] audit: type=1326 audit(1991.514:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1992.776272][ T35] audit: type=1326 audit(1991.524:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1992.979801][ T35] audit: type=1326 audit(1991.724:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c00000f3 syscall=66 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1993.019666][ T35] audit: type=1326 audit(1991.774:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 1993.129763][ T35] audit: type=1326 audit(1991.864:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.2.444" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2000.828967][ T3901] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2001.142128][ T3901] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2001.143711][ T3901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.231381][ T3901] usb 1-1: config 0 descriptor?? [ 2001.362109][ T3901] cp210x 1-1:0.0: cp210x converter detected [ 2006.804538][ T7498] binder: 7497:7498 ioctl c0306201 20000080 returned -22 [ 2007.413233][ T3901] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2007.593519][ T3901] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2007.598974][ T3901] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 2007.663269][ T3901] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2016.994015][ T3901] usb 1-1: USB disconnect, device number 65 [ 2017.495450][ T3901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2017.572823][ T3901] cp210x 1-1:0.0: device disconnected [ 2019.465476][ T7528] input: syz0 as /devices/virtual/input/input21 [ 2020.785308][ T7527] binder: BINDER_SET_CONTEXT_MGR already set [ 2020.798345][ T7527] binder: 7525:7527 ioctl 4018620d 200002c0 returned -16 [ 2020.881069][ T7527] binder: 7525:7527 ioctl c0306201 200003c0 returned -14 [ 2021.054348][ T7527] binder: 7525:7527 ioctl c0306201 20000300 returned -14 [ 2025.190737][ T3901] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2025.394189][ T3901] usb 1-1: Using ep0 maxpacket: 32 [ 2025.508052][ T3901] usb 1-1: config 0 has an invalid interface number: 226 but max is 0 [ 2025.509905][ T3901] usb 1-1: config 0 has no interface number 0 [ 2025.511433][ T3901] usb 1-1: config 0 interface 226 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2025.513036][ T3901] usb 1-1: config 0 interface 226 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2025.515242][ T3901] usb 1-1: config 0 interface 226 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2025.538644][ T3901] usb 1-1: config 0 interface 226 has no altsetting 0 [ 2025.649488][ T3901] usb 1-1: New USB device found, idVendor=1508, idProduct=1001, bcdDevice=a5.b8 [ 2025.651234][ T3901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.652542][ T3901] usb 1-1: Product: syz [ 2025.653574][ T3901] usb 1-1: Manufacturer: syz [ 2025.654750][ T3901] usb 1-1: SerialNumber: syz [ 2025.733467][ T3901] usb 1-1: config 0 descriptor?? [ 2025.860379][ T3901] option 1-1:0.226: GSM modem (1-port) converter detected [ 2026.632650][ T6978] usb 1-1: USB disconnect, device number 66 [ 2026.888104][ T6978] option 1-1:0.226: device disconnected [ 2036.142094][ T3901] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 2037.386607][ T3901] usb 1-1: no configurations [ 2037.430622][ T3901] usb 1-1: can't read configurations, error -22 [ 2037.816284][ T3901] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 2038.312492][ T3901] usb 1-1: no configurations [ 2038.314507][ T3901] usb 1-1: can't read configurations, error -22 [ 2038.353035][ T3901] usb usb1-port1: attempt power cycle [ 2038.969778][ T3901] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 2039.051941][ T3901] usb 1-1: no configurations [ 2039.053280][ T3901] usb 1-1: can't read configurations, error -22 [ 2039.260460][ T3901] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 2039.619165][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2039.648336][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.743088][ T3901] usb 1-1: no configurations [ 2039.745198][ T3901] usb 1-1: can't read configurations, error -22 [ 2039.752498][ T3901] usb usb1-port1: unable to enumerate USB device [ 2046.896277][ T7584] netlink: 165 bytes leftover after parsing attributes in process `syz.0.460'. [ 2049.040227][ T5512] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2049.331719][ T5512] usb 1-1: Using ep0 maxpacket: 32 [ 2049.505880][ T5512] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2049.518320][ T5512] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.520948][ T5512] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2049.523043][ T5512] usb 1-1: config 1 has no interface number 1 [ 2049.525006][ T5512] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2049.569695][ T5512] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x4A, changing to 0xA [ 2049.590434][ T5512] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 2049.699900][ T5512] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2049.702587][ T5512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.704612][ T5512] usb 1-1: Product: syz [ 2049.724725][ T5512] usb 1-1: Manufacturer: syz [ 2049.728927][ T5512] usb 1-1: SerialNumber: syz [ 2051.893252][ T5512] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 2052.737821][ T5512] usb 1-1: USB disconnect, device number 71 [ 2068.743584][ T7640] fuse: Bad value for 'rootmode' [ 2069.351249][ T7640] netlink: 'syz.2.467': attribute type 9 has an invalid length. [ 2072.175765][ T7647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2072.189223][ T7647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2073.351783][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 2073.481185][ T7647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2073.523118][ T7647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2078.082072][ T5512] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2078.509570][ T5512] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 2078.512073][ T5512] usb 1-1: config 0 has no interface number 0 [ 2078.514006][ T5512] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2078.516332][ T5512] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 2078.537505][ T5512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.662592][ T5512] usb 1-1: config 0 descriptor?? [ 2079.100277][ T5512] ttusbir 1-1:0.83: cannot find expected altsetting [ 2080.008187][ T7655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.030007][ T7655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.400250][ T4421] usb 1-1: USB disconnect, device number 72 [ 2088.415667][ T5512] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2088.791323][ T5512] usb 1-1: Using ep0 maxpacket: 8 [ 2088.985995][ T5512] usb 1-1: config 0 has no interfaces? [ 2089.150157][ T5512] usb 1-1: New USB device found, idVendor=0403, idProduct=d38e, bcdDevice=c4.f5 [ 2089.151671][ T5512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.152815][ T5512] usb 1-1: Product: syz [ 2089.153717][ T5512] usb 1-1: Manufacturer: syz [ 2089.154720][ T5512] usb 1-1: SerialNumber: syz [ 2089.235497][ T5512] usb 1-1: config 0 descriptor?? [ 2089.746006][ T5512] usb 1-1: USB disconnect, device number 73 [ 2090.575712][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 2094.288898][ T7684] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2096.615051][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2096.709498][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2116.546469][ T7735] tc_dump_action: action bad kind [ 2117.191449][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 2117.220481][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 2117.232723][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 2117.259653][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 2117.295804][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 2117.426806][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 2117.489358][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 2117.524187][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 2117.784894][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 2117.829684][ T7731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'. [ 2118.655298][ T7731] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 8993 - 0 [ 2118.669844][ T7731] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 8993 - 0 [ 2118.672514][ T7731] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 8993 - 0 [ 2118.674776][ T7731] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 8993 - 0 [ 2118.891755][ T7737] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 8993 - 0 [ 2118.894405][ T7737] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 8993 - 0 [ 2118.913898][ T7737] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 8993 - 0 [ 2118.916445][ T7737] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 8993 - 0 [ 2124.595553][ T7749] xt_ipcomp: unknown flags 12 [ 2125.969685][ T7751] __nla_validate_parse: 2 callbacks suppressed [ 2125.970206][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 2136.587970][ T7766] netlink: 'syz.0.489': attribute type 5 has an invalid length. [ 2136.589380][ T7766] netlink: 140 bytes leftover after parsing attributes in process `syz.0.489'. [ 2136.994570][ T7767] fuse: Unknown parameter '' [ 2144.700892][ T7775] input: syz0 as /devices/virtual/input/input23 [ 2153.447711][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.476082][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2153.719077][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.734995][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.420925][ T7798] input: syz0 as /devices/virtual/input/input24 [ 2162.615334][ T35] audit: type=1326 audit(2161.364:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.497" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2162.749298][ T7807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.774955][ T7807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.415690][ T7812] netlink: 'syz.0.498': attribute type 4 has an invalid length. [ 2164.574227][ T7812] netlink: 'syz.0.498': attribute type 4 has an invalid length. [ 2169.710057][ T7816] input: syz0 as /devices/virtual/input/input25 [ 2171.992131][ T7822] pimreg: entered allmulticast mode [ 2172.614341][ T7822] pimreg: left allmulticast mode [ 2172.852664][ T35] audit: type=1326 audit(2171.604:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.497" exe="/syz-executor" sig=0 arch=c00000f3 syscall=56 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2175.750899][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.803294][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2176.448084][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.455212][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2178.700444][ T7836] input: syz0 as /devices/virtual/input/input26 [ 2190.326811][ T7854] [U] ^@ [ 2191.974199][ T7857] nbd0: detected capacity change from 0 to 22 [ 2193.195876][ T7870] block nbd0: shutting down sockets [ 2193.295197][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2193.302573][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2193.486462][ T7864] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2193.556439][ T7864] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2193.821935][ T7864] nbd0: unable to read partition table [ 2201.862597][ T7883] fuse: Unknown parameter 'gro_id' [ 2203.033355][ T7884] binder: 7882:7884 ioctl c0306201 20000080 returned -22 [ 2204.170375][ T7886] netlink: 176 bytes leftover after parsing attributes in process `syz.0.516'. [ 2204.194104][ T7886] netlink: 176 bytes leftover after parsing attributes in process `syz.0.516'. [ 2205.221042][ T7888] syzkaller1: entered promiscuous mode [ 2205.223353][ T7888] syzkaller1: entered allmulticast mode [ 2206.202226][ T7892] netlink: 'syz.2.517': attribute type 4 has an invalid length. [ 2211.957807][ T35] audit: type=1326 audit(2210.714:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2212.051315][ T35] audit: type=1326 audit(2210.804:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=219 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2212.059705][ T35] audit: type=1326 audit(2210.814:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2212.080750][ T35] audit: type=1326 audit(2210.824:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2212.128621][ T35] audit: type=1326 audit(2210.884:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=237 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2212.143491][ T35] audit: type=1326 audit(2210.904:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2212.165420][ T35] audit: type=1326 audit(2210.924:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2212.194196][ T35] audit: type=1326 audit(2210.954:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=56 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2212.226639][ T35] audit: type=1326 audit(2210.984:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2212.240355][ T35] audit: type=1326 audit(2210.994:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.518" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2216.743341][ T7903] dvmrp0: entered allmulticast mode [ 2221.332371][ T7909] fuse: Unknown parameter 'group_' [ 2225.835788][ T3901] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2226.532392][ T3901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2226.535009][ T3901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2226.934817][ T3901] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2226.936259][ T3901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.938879][ T3901] usb 1-1: Product: syz [ 2226.941425][ T3901] usb 1-1: Manufacturer: syz [ 2226.942413][ T3901] usb 1-1: SerialNumber: syz [ 2227.021023][ T3901] usb 1-1: config 0 descriptor?? [ 2229.002062][ T3901] usb 1-1: USB disconnect, device number 74 [ 2239.053204][ T7955] can0: slcan on ptm0. [ 2241.131246][ T7952] can0 (unregistered): slcan off ptm0. [ 2262.269471][ T3901] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2262.579297][ T3901] usb 1-1: Using ep0 maxpacket: 8 [ 2262.726564][ T35] kauditd_printk_skb: 9 callbacks suppressed [ 2262.744997][ T35] audit: type=1326 audit(2261.484:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.2.529" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2262.850196][ T3901] usb 1-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=5e.fe [ 2262.852866][ T3901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.855152][ T3901] usb 1-1: Product: syz [ 2262.862902][ T3901] usb 1-1: Manufacturer: syz [ 2262.864803][ T3901] usb 1-1: SerialNumber: syz [ 2262.974569][ T3901] usb 1-1: config 0 descriptor?? [ 2263.110928][ T3901] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 2263.510820][ T3901] usb 1-1: qt2_attach - failed to power on unit: -71 [ 2263.528960][ T3901] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 2263.669381][ T3901] usb 1-1: USB disconnect, device number 75 [ 2271.070963][ T6978] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2271.431581][ T6978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2271.434284][ T6978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2271.448585][ T6978] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2271.450791][ T6978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.593897][ T6978] usb 1-1: config 0 descriptor?? [ 2272.548747][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.555462][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2277.379045][ T6978] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 2277.381360][ T6978] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 2277.383358][ T6978] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 2277.385271][ T6978] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 2277.388780][ T6978] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 2277.461729][ T6978] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 2278.002866][ T6978] lenovo 0003:17EF:6047.000E: Failed to switch F7/9/11 mode: -71 [ 2278.014593][ T6978] lenovo 0003:17EF:6047.000E: Failed to switch middle button: -71 [ 2278.031515][ T6978] lenovo 0003:17EF:6047.000E: Fn-lock setting failed: -71 [ 2278.070531][ T6978] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71 [ 2278.400643][ T6978] usb 1-1: USB disconnect, device number 76 [ 2289.073471][ T8043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2289.099088][ T8043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2290.251352][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 2293.209368][ T8050] xt_TCPMSS: Only works on TCP SYN packets [ 2293.341159][ T8051] xt_TCPMSS: Only works on TCP SYN packets [ 2295.573304][ T8054] netlink: 216 bytes leftover after parsing attributes in process `syz.0.538'. [ 2308.862771][ T6978] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2309.100116][ T6978] usb 1-1: Using ep0 maxpacket: 8 [ 2309.552615][ T6978] usb 1-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=ce.0f [ 2309.558383][ T6978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2309.679161][ T6978] usb 1-1: config 0 descriptor?? [ 2309.828872][ T6978] usb 1-1: bad CDC descriptors [ 2313.956701][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2313.981038][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2315.653606][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 2315.655152][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 2321.347842][ T4421] usb 1-1: USB disconnect, device number 77 [ 2326.128129][ T8108] input: syz0 as /devices/virtual/input/input29 [ 2334.493197][ T8125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.554'. [ 2334.494950][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 2334.496227][ T8125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.554'. [ 2334.530314][ T8125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.554'. [ 2349.631889][ T6978] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2349.831659][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2349.883718][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2350.157840][ T6978] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2350.159309][ T6978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2350.209622][ T6978] usb 1-1: config 0 descriptor?? [ 2350.303854][ T6978] cp210x 1-1:0.0: cp210x converter detected [ 2350.864939][ T6978] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2350.877701][ T6978] cp210x 1-1:0.0: querying part number failed [ 2350.927936][ T6978] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2364.326434][ T4421] usb 1-1: USB disconnect, device number 78 [ 2364.462707][ T4421] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2364.471544][ T4421] cp210x 1-1:0.0: device disconnected [ 2364.791821][ T35] audit: type=1326 audit(2363.554:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.2.565" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2365.861401][ T5512] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 2366.137348][ T5512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2366.138945][ T5512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2366.140661][ T5512] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2366.141860][ T5512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.208337][ T5512] usb 1-1: config 0 descriptor?? [ 2366.322464][ T5512] hub 1-1:0.0: USB hub found [ 2367.684093][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.566'. [ 2368.716179][ T35] audit: type=1326 audit(2367.474:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.2.565" exe="/syz-executor" sig=0 arch=c00000f3 syscall=172 compat=0 ip=0xd466c code=0x7fc00000 [ 2368.969393][ T5512] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2369.093815][ T5512] usbhid 1-1:0.0: can't add hid device: -71 [ 2369.102242][ T5512] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2369.212896][ T5512] usb 1-1: USB disconnect, device number 79 [ 2373.031648][ T8217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.070465][ T8217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2376.319197][ T8221] input: syz0 as /devices/virtual/input/input30 [ 2381.662548][ T8227] syz.0.570 (8227): drop_caches: 2 [ 2383.772895][ T8236] devtmpfs: Unknown parameter 'rt' [ 2385.957859][ T8241] netlink: 64 bytes leftover after parsing attributes in process `syz.2.573'. [ 2390.059406][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2390.063663][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2390.233841][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2390.242567][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2390.387812][ T5512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 2390.463537][ T5512] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2390.842331][ T4421] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 2391.656484][ T8261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.577'. [ 2391.701330][ T8261] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2391.884391][ T4421] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2391.904094][ T4421] usb 1-1: no configurations [ 2391.911466][ T4421] usb 1-1: can't read configurations, error -22 [ 2402.082733][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 2408.339274][ T8295] input: syz0 as /devices/virtual/input/input31 [ 2411.489172][ T8309] xt_l2tp: wrong L2TP version: 0 [ 2411.726612][ T8305] input: syz0 as /devices/virtual/input/input32 [ 2412.219476][ T4421] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2412.499056][ T4421] usb 1-1: Using ep0 maxpacket: 8 [ 2412.579819][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2412.581381][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2412.582884][ T4421] usb 1-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 2412.584086][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.716221][ T4421] usb 1-1: config 0 descriptor?? [ 2413.473022][ T4421] usbhid 1-1:0.0: can't add hid device: -71 [ 2413.475686][ T4421] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2413.571260][ T4421] usb 1-1: USB disconnect, device number 82 [ 2420.309466][ T8335] input: syz0 as /devices/virtual/input/input33 [ 2422.360507][ T8341] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 2425.578082][ T8341] netlink: 40 bytes leftover after parsing attributes in process `syz.2.591'. [ 2425.620715][ T8341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2426.352464][ T8374] Process accounting resumed [ 2429.893568][ T8394] input: syz0 as /devices/virtual/input/input34 [ 2432.430125][ T8401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2432.435474][ T8401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2440.934397][ T8417] input: syz0 as /devices/virtual/input/input35 [ 2444.254444][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2444.312406][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2453.778609][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2453.784273][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2453.838230][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2453.842960][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2455.726146][ T8449] input: syz0 as /devices/virtual/input/input36 [ 2471.478458][ T5512] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2471.893664][ T5512] usb 1-1: device descriptor read/64, error -71 [ 2472.181474][ T5512] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2472.763116][ T5512] usb 1-1: device descriptor read/64, error -71 [ 2472.879571][ T5512] usb usb1-port1: attempt power cycle [ 2473.320251][ T5512] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2473.385194][ T5512] usb 1-1: device descriptor read/8, error -71 [ 2473.682764][ T5512] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2473.734998][ T5512] usb 1-1: device descriptor read/8, error -71 [ 2473.865643][ T5512] usb usb1-port1: unable to enumerate USB device [ 2489.004408][ T8488] pim6reg: entered allmulticast mode [ 2489.132478][ T8488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.613'. [ 2496.120984][ T8504] binder: 8502:8504 ioctl c0405519 20000180 returned -22 [ 2496.511297][ T8504] macvlan0: entered allmulticast mode [ 2497.182708][ T8504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.617'. [ 2501.234676][ T8513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2501.263952][ T8513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2502.920307][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.620'. [ 2514.951158][ T5512] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2515.129778][ T5512] usb 1-1: device descriptor read/64, error -71 [ 2515.410381][ T5512] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2515.620782][ T5512] usb 1-1: device descriptor read/64, error -71 [ 2515.765937][ T5512] usb usb1-port1: attempt power cycle [ 2516.287980][ T5512] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2516.373281][ T5512] usb 1-1: device descriptor read/8, error -71 [ 2516.710135][ T5512] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2516.765072][ T5512] usb 1-1: device descriptor read/8, error -71 [ 2517.002375][ T5512] usb usb1-port1: unable to enumerate USB device [ 2518.685468][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2518.730379][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2529.564927][ T8558] input: syz0 as /devices/virtual/input/input37 [ 2529.672422][ T8558] FAULT_INJECTION: forcing a failure. [ 2529.672422][ T8558] name failslab, interval 1, probability 0, space 0, times 1 [ 2529.682825][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.0.629 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2529.684918][ T8558] Hardware name: riscv-virtio,qemu (DT) [ 2529.686109][ T8558] Call Trace: [ 2529.687714][ T8558] [] dump_backtrace+0x2e/0x3c [ 2529.689440][ T8558] [] show_stack+0x34/0x40 [ 2529.690990][ T8558] [] dump_stack_lvl+0x122/0x196 [ 2529.692655][ T8558] [] dump_stack+0x1c/0x24 [ 2529.694373][ T8558] [] should_fail_ex+0x3f8/0x4e0 [ 2529.696138][ T8558] [] should_failslab+0xba/0x102 [ 2529.698238][ T8558] [] __kmalloc_noprof+0xca/0x4e4 [ 2529.700172][ T8558] [] tomoyo_realpath_from_path+0xb8/0x64a [ 2529.701967][ T8558] [] tomoyo_path_number_perm+0x28c/0x5a4 [ 2529.703636][ T8557] input: syz0 as /devices/virtual/input/input38 [ 2529.703828][ T8558] [] tomoyo_file_ioctl+0x28/0x34 [ 2529.705643][ T8558] [] security_file_ioctl+0xb8/0x280 [ 2529.709313][ T8558] [] __riscv_sys_ioctl+0xb0/0x1e6 [ 2529.712457][ T8558] [] syscall_handler+0x94/0x118 [ 2529.714137][ T8558] [] do_trap_ecall_u+0x1aa/0x216 [ 2529.715444][ T8558] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2529.808714][ T8558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2531.581304][ T5512] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 2531.794715][ T5512] usb 1-1: Invalid ep0 maxpacket: 16 [ 2532.030076][ T5512] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 2532.239645][ T5512] usb 1-1: Invalid ep0 maxpacket: 16 [ 2532.245637][ T5512] usb usb1-port1: attempt power cycle [ 2532.832657][ T5512] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 2532.903884][ T5512] usb 1-1: Invalid ep0 maxpacket: 16 [ 2533.089542][ T5512] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 2533.125017][ T5512] usb 1-1: Invalid ep0 maxpacket: 16 [ 2533.152618][ T5512] usb usb1-port1: unable to enumerate USB device [ 2536.704818][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2536.715903][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2549.641042][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.633'. [ 2549.815873][ T8597] input: syz0 as /devices/virtual/input/input39 [ 2550.052759][ T8597] FAULT_INJECTION: forcing a failure. [ 2550.052759][ T8597] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.054273][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.2.635 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 2550.055565][ T8597] Hardware name: riscv-virtio,qemu (DT) [ 2550.056521][ T8597] Call Trace: [ 2550.057157][ T8597] [] dump_backtrace+0x2e/0x3c [ 2550.058108][ T8597] [] show_stack+0x34/0x40 [ 2550.058989][ T8597] [] dump_stack_lvl+0x122/0x196 [ 2550.059910][ T8597] [] dump_stack+0x1c/0x24 [ 2550.060765][ T8597] [] should_fail_ex+0x3f8/0x4e0 [ 2550.061650][ T8597] [] should_failslab+0xba/0x102 [ 2550.062554][ T8597] [] __kmalloc_noprof+0xca/0x4e4 [ 2550.063425][ T8597] [] tomoyo_encode2+0x11e/0x3e6 [ 2550.064341][ T8597] [] tomoyo_realpath_from_path+0x18a/0x64a [ 2550.065316][ T8597] [] tomoyo_path_number_perm+0x28c/0x5a4 [ 2550.066201][ T8597] [] tomoyo_file_ioctl+0x28/0x34 [ 2550.067449][ T8597] [] security_file_ioctl+0xb8/0x280 [ 2550.068532][ T8597] [] __riscv_sys_ioctl+0xb0/0x1e6 [ 2550.069356][ T8597] [] syscall_handler+0x94/0x118 [ 2550.070197][ T8597] [] do_trap_ecall_u+0x1aa/0x216 [ 2550.071134][ T8597] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 2550.092344][ T8597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2552.850332][ T5512] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2553.151604][ T5512] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2553.153842][ T5512] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2553.155225][ T5512] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2553.172369][ T5512] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2553.174005][ T5512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.241100][ T8605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2554.456180][ T5512] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 2554.544635][ T5512] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input40 [ 2567.177930][ T4421] usb 1-1: USB disconnect, device number 95 [ 2567.181349][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2572.972690][ T8634] fuse: Unknown parameter '' [ 2575.899957][ T4421] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2576.885300][ T4421] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 2576.893448][ T4421] usb 1-1: config 0 has no interface number 0 [ 2576.896479][ T4421] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2576.919886][ T4421] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2576.922028][ T4421] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 2576.925570][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.190053][ T4421] usb 1-1: config 0 descriptor?? [ 2579.607555][ T4421] logitech-djreceiver 0003:046D:C71B.0010: unknown main item tag 0x0 [ 2579.609796][ T4421] logitech-djreceiver 0003:046D:C71B.0010: unknown main item tag 0x0 [ 2579.611766][ T4421] logitech-djreceiver 0003:046D:C71B.0010: collection stack underflow [ 2579.613570][ T4421] logitech-djreceiver 0003:046D:C71B.0010: item 0 0 0 12 parsing failed [ 2579.706066][ T4421] logitech-djreceiver 0003:046D:C71B.0010: logi_dj_probe: parse failed [ 2579.715131][ T4421] logitech-djreceiver 0003:046D:C71B.0010: probe with driver logitech-djreceiver failed with error -22 [ 2585.936217][ T4421] usb 1-1: USB disconnect, device number 96 [ 2589.900334][ T4421] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2590.206198][ T4421] usb 1-1: Using ep0 maxpacket: 8 [ 2590.519996][ T4421] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2590.523015][ T4421] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2591.448384][ T4421] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2591.450410][ T4421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.452350][ T4421] usb 1-1: Product: syz [ 2591.453810][ T4421] usb 1-1: Manufacturer: syz [ 2591.455200][ T4421] usb 1-1: SerialNumber: syz [ 2591.739709][ T4421] usb 1-1: config 0 descriptor?? [ 2592.892504][ T4421] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 2599.445593][ T4421] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 2599.459334][ T4421] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 2599.499239][ T4421] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2606.070057][ T5512] usb 1-1: USB disconnect, device number 97 [ 2609.686421][ T4421] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 2609.939232][ T4421] usb 1-1: device descriptor read/64, error -71 [ 2610.246030][ T4421] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 2610.579400][ T4421] usb 1-1: device descriptor read/64, error -71 [ 2610.705287][ T4421] usb usb1-port1: attempt power cycle [ 2610.761924][ T7742] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2610.764205][ T7742] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2611.199901][ T4421] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 2611.263504][ T4421] usb 1-1: device descriptor read/8, error -71 [ 2611.346052][ T7742] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2611.359438][ T7742] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2611.549651][ T4421] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 2611.627765][ T4421] usb 1-1: device descriptor read/8, error -71 [ 2611.773597][ T4421] usb usb1-port1: unable to enumerate USB device [ 2611.946051][ T7742] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2611.959298][ T7742] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.491069][ T7742] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2612.492617][ T7742] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2615.946365][ T7742] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 2615.974033][ T7742] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2618.141015][ T7742] dvmrp0 (unregistering): left allmulticast mode [ 2619.689306][ T7742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2619.836177][ T7742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2619.890241][ T7742] bond0 (unregistering): Released all slaves [ 2620.852410][ T7742] bond1 (unregistering): Released all slaves [ 2621.961692][ T7742] bond2 (unregistering): Released all slaves [ 2623.262952][ T7742] hsr_slave_0: left promiscuous mode [ 2623.349339][ T7742] hsr_slave_1: left promiscuous mode [ 2623.568157][ T7742] veth0_macvtap: left promiscuous mode [ 2623.574226][ T7742] veth1_vlan: left promiscuous mode [ 2623.586165][ T7742] veth0_vlan: left promiscuous mode [ 2627.421139][ T8720] input: syz0 as /devices/virtual/input/input41 [ 2649.091833][ T4421] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2649.472174][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2649.474849][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2649.501378][ T4421] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 2649.504836][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2649.623452][ T4421] usb 1-1: config 0 descriptor?? [ 2651.737824][ T4421] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 2651.739239][ T4421] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 2651.740303][ T4421] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 2651.741352][ T4421] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 2651.742370][ T4421] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 2651.743494][ T4421] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 2651.744585][ T4421] elo 0003:04E7:0030.0011: unknown main item tag 0x0 [ 2651.884614][ T4421] elo 0003:04E7:0030.0011: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 2652.201622][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2652.271331][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2653.348263][ T5512] usb 1-1: USB disconnect, device number 102 [ 2664.102576][ T8675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2664.276128][ T5512] hid-generic FA00:0000:0000.0012: item fetching failed at offset 0/1 [ 2664.295200][ T5512] hid-generic FA00:0000:0000.0012: probe with driver hid-generic failed with error -22 [ 2664.322191][ T8675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2672.011268][ T4421] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2672.334526][ T4421] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2672.336165][ T4421] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2672.510510][ T4421] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 2672.512142][ T4421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.513395][ T4421] usb 1-1: Product: syz [ 2672.514578][ T4421] usb 1-1: Manufacturer: syz [ 2672.515574][ T4421] usb 1-1: SerialNumber: syz [ 2672.622712][ T4421] usb 1-1: config 0 descriptor?? [ 2672.784878][ T4421] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 2672.791295][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 2672.953933][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 2672.956370][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 2672.959498][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 2672.961068][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 2672.962656][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 2672.987709][ T4421] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2673.071666][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 2673.073588][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 2673.075429][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 2673.082070][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 2673.084142][ T4421] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 2673.130073][ T4421] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2673.201279][ T4421] usb 1-1: USB disconnect, device number 103 [ 2673.422665][ T4421] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2673.691244][ T4421] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2673.746001][ T4421] keyspan 1-1:0.0: device disconnected [ 2677.974769][ T8675] hsr_slave_0: entered promiscuous mode [ 2678.000786][ T8675] hsr_slave_1: entered promiscuous mode [ 2684.078761][ T8675] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2684.150843][ T8675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2684.220666][ T8675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2684.282062][ T8675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2684.345997][ T5512] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2684.700014][ T5512] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2684.701780][ T5512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2684.996387][ T5512] usb 1-1: config 0 descriptor?? [ 2690.353483][ T5512] usb 1-1: string descriptor 0 read error: -71 [ 2690.385753][ T5512] cp210x 1-1:0.0: cp210x converter detected [ 2690.391674][ T5512] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2690.393271][ T5512] cp210x 1-1:0.0: querying part number failed [ 2690.483865][ T5512] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2690.614400][ T5512] usb 1-1: USB disconnect, device number 104 [ 2690.912652][ T5512] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2690.931047][ T5512] cp210x 1-1:0.0: device disconnected [ 2697.213252][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 2697.215627][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 2697.238256][ T9166] netlink: 52 bytes leftover after parsing attributes in process `syz.0.655'. [ 2697.775209][ T8574] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2699.539936][ T8574] usb 1-1: Using ep0 maxpacket: 16 [ 2699.750756][ T8574] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2699.841189][ T8574] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 2699.843704][ T8574] usb 1-1: config 7 has no interface number 0 [ 2699.846280][ T8574] usb 1-1: config 7 interface 142 has no altsetting 0 [ 2700.011040][ T8574] usb 1-1: New USB device found, idVendor=0499, idProduct=2e03, bcdDevice=b6.b4 [ 2700.015134][ T8574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.082555][ T8574] usb 1-1: Product: syz [ 2700.084684][ T8574] usb 1-1: Manufacturer: syz [ 2700.086371][ T8574] usb 1-1: SerialNumber: syz [ 2701.073578][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 2701.075556][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 2701.094233][ T9176] netlink: 52 bytes leftover after parsing attributes in process `syz.0.655'. [ 2702.805951][ T8675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2703.768267][ T8574] usb 1-1: USB disconnect, device number 105 [ 2715.824672][ T8675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2751.920766][ T8675] veth0_vlan: entered promiscuous mode [ 2752.268167][ T8675] veth1_vlan: entered promiscuous mode [ 2753.071395][ T8675] veth0_macvtap: entered promiscuous mode [ 2753.224302][ T8675] veth1_macvtap: entered promiscuous mode [ 2754.569277][ T8675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.571427][ T8675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.572776][ T8675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2754.574027][ T8675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.638301][ T9271] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 2762.569561][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2762.599490][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2774.034336][ T9295] netlink: 96 bytes leftover after parsing attributes in process `syz.0.666'. [ 2778.304278][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2778.313574][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2778.418179][ T9306] input: syz0 as /devices/virtual/input/input43 [ 2787.609526][ T9322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2787.630791][ T9322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2788.720453][ T9325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2788.734511][ T9325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2802.731921][ T35] audit: type=1326 audit(2801.464:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.0.677" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2803.652785][ T9346] netlink: 'syz.3.678': attribute type 29 has an invalid length. [ 2803.743933][ T9346] netlink: 'syz.3.678': attribute type 29 has an invalid length. [ 2803.844002][ T9346] netlink: 500 bytes leftover after parsing attributes in process `syz.3.678'. [ 2807.418312][ T9362] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2807.564232][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 2807.686420][ T9362] fuse: Bad value for 'fd' [ 2807.723654][ T9362] capability: warning: `syz.3.680' uses 32-bit capabilities (legacy support in use) [ 2810.009679][ T9224] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 2810.418835][ T9224] usb 1-1: not running at top speed; connect to a high speed hub [ 2810.502161][ T9224] usb 1-1: config 0 has an invalid interface number: 172 but max is 2 [ 2810.503982][ T9224] usb 1-1: config 0 has an invalid interface number: 26 but max is 2 [ 2810.505318][ T9224] usb 1-1: config 0 has an invalid interface number: 33 but max is 2 [ 2810.517700][ T9224] usb 1-1: config 0 has no interface number 0 [ 2810.519056][ T9224] usb 1-1: config 0 has no interface number 1 [ 2810.530071][ T9224] usb 1-1: config 0 has no interface number 2 [ 2810.532899][ T9224] usb 1-1: config 0 interface 172 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 2810.535714][ T9224] usb 1-1: config 0 interface 172 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 2810.557837][ T9224] usb 1-1: config 0 interface 172 altsetting 255 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2810.559948][ T9224] usb 1-1: config 0 interface 172 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 2810.567849][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 2810.569413][ T9224] usb 1-1: config 0 interface 26 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2810.570888][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 2810.572220][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 2810.597912][ T9224] usb 1-1: config 0 interface 26 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 2810.599817][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 2810.601674][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has an endpoint descriptor with address 0x42, changing to 0x2 [ 2810.603735][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 2810.605660][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 2810.630438][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has a duplicate endpoint with address 0x89, skipping [ 2810.638245][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2810.640870][ T9224] usb 1-1: config 0 interface 26 altsetting 2 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 2810.643142][ T9224] usb 1-1: config 0 interface 33 altsetting 82 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2810.644770][ T9224] usb 1-1: config 0 interface 33 altsetting 82 has an invalid descriptor for endpoint zero, skipping [ 2810.658606][ T9224] usb 1-1: config 0 interface 33 altsetting 82 has a duplicate endpoint with address 0xA, skipping [ 2810.661473][ T9224] usb 1-1: config 0 interface 33 altsetting 82 has a duplicate endpoint with address 0xD, skipping [ 2810.663593][ T9224] usb 1-1: config 0 interface 172 has no altsetting 0 [ 2810.665149][ T9224] usb 1-1: config 0 interface 26 has no altsetting 0 [ 2810.687915][ T9224] usb 1-1: config 0 interface 33 has no altsetting 0 [ 2810.821201][ T9224] usb 1-1: New USB device found, idVendor=22b8, idProduct=2c84, bcdDevice=13.6e [ 2810.823829][ T9224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2810.842588][ T9224] usb 1-1: Product: 㰊 [ 2810.868765][ T9224] usb 1-1: Manufacturer: ዑ緖ಠ碡鉧冇㢪躗刄ρᇶ阂읛趞碨登湒ἥ骇ｺ츽풅梛掑鹘岕⭲꾙ꃳﰍ宻理歓ᎅ檖➠氡쭦笅곧䘳偫櫅埮싒ẘ驎⟯稞煫곗숝　ࢰꄣ뾼딁䅚籠횹㿳ⶣ퍕⦼褸탓雷ൃ꾿掁輪ຬꫧ๪贿㕨뛑덂硍๧ [ 2810.872689][ T9224] usb 1-1: SerialNumber:  [ 2811.022956][ T9224] usb 1-1: config 0 descriptor?? [ 2811.045424][ T9370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2811.092121][ T9370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2811.611775][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2811.650670][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2811.834291][ T9224] usb_serial_simple 1-1:0.172: moto_modem converter detected [ 2811.932546][ T9224] usb 1-1: moto_modem converter now attached to ttyUSB0 [ 2812.211983][ T9224] usb_serial_simple 1-1:0.26: moto_modem converter detected [ 2812.408664][ T9224] usb 1-1: moto_modem converter now attached to ttyUSB1 [ 2812.601233][ T9224] usb_serial_simple 1-1:0.33: moto_modem converter detected [ 2812.760121][ T9224] usb 1-1: moto_modem converter now attached to ttyUSB2 [ 2813.156135][ T9224] usb 1-1: USB disconnect, device number 106 [ 2813.465829][ T9224] moto_modem ttyUSB0: moto_modem converter now disconnected from ttyUSB0 [ 2813.500963][ T9224] usb_serial_simple 1-1:0.172: device disconnected [ 2814.262906][ T9224] moto_modem ttyUSB1: moto_modem converter now disconnected from ttyUSB1 [ 2814.361815][ T9224] usb_serial_simple 1-1:0.26: device disconnected [ 2814.856484][ T9224] moto_modem ttyUSB2: moto_modem converter now disconnected from ttyUSB2 [ 2814.880755][ T9224] usb_serial_simple 1-1:0.33: device disconnected [ 2815.509437][ T35] audit: type=1326 audit(2814.254:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9369 comm="syz.3.681" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2829.051234][ T9427] x_tables: unsorted underflow at hook 3 [ 2829.085396][ T9427] veth1_to_bond: entered promiscuous mode [ 2829.163168][ T9427] binfmt_misc: register: failed to install interpreter file ./file0 [ 2833.343032][ T9435] netlink: 232 bytes leftover after parsing attributes in process `syz.0.688'. [ 2833.359175][ T9435] netlink: 72 bytes leftover after parsing attributes in process `syz.0.688'. [ 2838.483455][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 2838.652231][ T9442] erspan0: entered promiscuous mode [ 2848.730394][ T9458] tmpfs: Unsupported parameter 'huge' [ 2849.224111][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 2852.392253][ T9463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2854.269726][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2854.274187][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2854.434096][ T9473] batadv_slave_1: entered promiscuous mode [ 2854.500194][ T9473] batadv_slave_1: left promiscuous mode [ 2854.906291][ T9473] Invalid logical block size (65531) [ 2869.969758][ T9499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.705'. [ 2870.021662][ T9499] fuse: Bad value for 'fd' [ 2876.948716][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2877.165485][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2877.691078][ T9509] netlink: 'syz.3.707': attribute type 2 has an invalid length. [ 2880.849641][ T9517] input: syz0 as /devices/virtual/input/input44 [ 2884.645311][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2884.665353][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2891.425229][ T9540] input: syz0 as /devices/virtual/input/input45 [ 2900.157968][ T9569] input: syz0 as /devices/virtual/input/input46 [ 2908.451110][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2908.456269][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2917.338818][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 2921.422233][ T35] audit: type=1326 audit(2920.104:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9599 comm="syz.3.727" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2924.943118][ T9604] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 2924.944693][ T9604] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.729'. [ 2924.983983][ T9604] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 2924.986054][ T9604] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.729'. [ 2925.029955][ T9604] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 2925.031554][ T9604] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.729'. [ 2925.069498][ T9604] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 2925.071924][ T9604] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.729'. [ 2925.104107][ T9605] netlink: 45 bytes leftover after parsing attributes in process `syz.0.729'. [ 2926.731751][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2926.753618][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2929.313334][ T7919] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 2929.603545][ T7919] usb 1-1: config 133 has an invalid interface number: 198 but max is 0 [ 2929.605775][ T7919] usb 1-1: config 133 has no interface number 0 [ 2929.611429][ T7919] usb 1-1: config 133 interface 198 has no altsetting 0 [ 2929.613929][ T7919] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=1f.e1 [ 2929.619836][ T7919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2934.051019][ T7919] usb 1-1: string descriptor 0 read error: -71 [ 2934.061741][ T7919] pn533_usb 1-1:133.198: NFC: Could not find bulk-in or bulk-out endpoint [ 2934.179218][ T7919] usb 1-1: USB disconnect, device number 107 [ 2942.754275][ T9641] netlink: 'syz.3.733': attribute type 4 has an invalid length. [ 2945.620741][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.735'. [ 2949.227016][ T9655] netlink: 'syz.3.739': attribute type 21 has an invalid length. [ 2949.235279][ T9655] netlink: 156 bytes leftover after parsing attributes in process `syz.3.739'. [ 2949.242693][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 2949.569669][ T9658] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 2950.395669][ T9658] autofs4:pid:9658:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 2952.541267][ T9659] infiniband syz1: set down [ 2952.548894][ T9659] infiniband syz1: added ipvlan1 [ 2952.574922][ T9659] syz1: rxe_create_cq: returned err = -12 [ 2952.584143][ T9659] infiniband syz1: Couldn't create ib_mad CQ [ 2952.589799][ T9659] infiniband syz1: Couldn't open port 1 [ 2953.096434][ T9659] RDS/IB: syz1: added [ 2953.114464][ T9659] smc: adding ib device syz1 with port count 1 [ 2953.123711][ T9659] smc: ib device syz1 port 1 has pnetid [ 2953.451910][ T9667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2953.501861][ T9667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2953.913842][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 2953.915869][ T9667] bMtadv_lave_0: renamed from lo (while UP) [ 2954.035327][ T9667] bMtadv_lave_0: entered allmulticast mode [ 2959.116447][ T7919] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2959.474583][ T7919] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2959.485815][ T7919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2959.492462][ T7919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49152, setting to 1024 [ 2959.520291][ T7919] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2959.521868][ T7919] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2959.523257][ T7919] usb 1-1: Manufacturer: syz [ 2959.575349][ T7919] usb 1-1: config 0 descriptor?? [ 2959.679636][ T7919] igorplugusb 1-1:0.0: endpoint incorrect [ 2960.514133][ T7919] usb 1-1: USB disconnect, device number 108 [ 2969.274655][ T9689] binder_alloc: 9688: binder_alloc_buf, no vma [ 2977.776161][ T9709] netlink: 1456 bytes leftover after parsing attributes in process `syz.0.751'. [ 2978.448296][ T4421] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2979.225128][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2979.246092][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2979.250032][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2979.252611][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2979.253989][ T4421] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2979.274976][ T4421] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2979.287726][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2979.376053][ T4421] usb 1-1: config 0 descriptor?? [ 2980.473247][ T7919] hid-generic 0000:0004:0005.0013: item fetching failed at offset 0/2 [ 2980.495325][ T7919] hid-generic 0000:0004:0005.0013: probe with driver hid-generic failed with error -22 [ 2981.329310][ T35] audit: type=1326 audit(2980.084:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.0.751" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2988.118560][ T4421] usbhid 1-1:0.0: can't add hid device: -32 [ 2988.129932][ T4421] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 2993.447971][ T4421] usb 1-1: USB disconnect, device number 109 [ 2995.909901][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2995.946232][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2999.109656][ T7919] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2999.300013][ T7919] usb 1-1: device descriptor read/64, error -71 [ 2999.739704][ T7919] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2999.899778][ T7919] usb 1-1: device descriptor read/64, error -71 [ 3000.023443][ T7919] usb usb1-port1: attempt power cycle [ 3000.520109][ T7919] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 3000.579276][ T7919] usb 1-1: device descriptor read/8, error -71 [ 3000.881072][ T7919] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 3001.121446][ T7919] usb 1-1: device descriptor read/8, error -71 [ 3001.270962][ T7919] usb usb1-port1: unable to enumerate USB device [ 3012.108316][ T9759] vlan1: entered promiscuous mode [ 3012.111134][ T9759] vlan1: entered allmulticast mode [ 3014.920435][ T4421] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 3015.480634][ T4421] usb 1-1: Using ep0 maxpacket: 8 [ 3015.834157][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3015.836454][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3015.859390][ T4421] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 3015.861016][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3015.938166][ T4421] usb 1-1: config 0 descriptor?? [ 3016.760751][ T4421] pantherlord 0003:0810:0001.0014: unknown main item tag 0x0 [ 3016.808240][ T4421] pantherlord 0003:0810:0001.0014: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.0-1/input0 [ 3016.810769][ T4421] pantherlord 0003:0810:0001.0014: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 3032.079953][ T7919] usb 1-1: USB disconnect, device number 114 [ 3035.059998][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3035.064914][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3043.606365][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3043.660381][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3046.772937][ T9847] xt_hashlimit: max too large, truncated to 1048576 [ 3047.574281][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 3047.615922][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 3056.636293][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'. [ 3058.131934][ T4421] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 3058.507363][ T4421] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3058.509319][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3058.511161][ T4421] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3058.513107][ T4421] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 3058.516110][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3058.600755][ T4421] usb 1-1: config 0 descriptor?? [ 3060.459750][ T9862] cgroup: Unknown subsys name 'cpuset' [ 3064.481379][ T4421] usbhid 1-1:0.0: can't add hid device: -71 [ 3064.485040][ T4421] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3064.555345][ T4421] usb 1-1: USB disconnect, device number 115 [ 3072.431920][ T9891] ======================================================= [ 3072.431920][ T9891] WARNING: The mand mount option has been deprecated and [ 3072.431920][ T9891] and is ignored by this kernel. Remove the mand [ 3072.431920][ T9891] option from the mount to silence this warning. [ 3072.431920][ T9891] ======================================================= [ 3074.878587][ T5408] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 3075.091344][ T5408] usb 1-1: Using ep0 maxpacket: 32 [ 3075.429913][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 3075.443376][ T5408] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 3075.444750][ T5408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3075.445867][ T5408] usb 1-1: Product: syz [ 3075.457803][ T5408] usb 1-1: Manufacturer: syz [ 3075.459432][ T5408] usb 1-1: SerialNumber: syz [ 3075.622591][ T5408] usb 1-1: config 0 descriptor?? [ 3079.514920][ T5408] rtl8150 1-1:0.0: couldn't reset the device [ 3079.520815][ T5408] rtl8150 1-1:0.0: probe with driver rtl8150 failed with error -5 [ 3079.777224][ T5408] usb 1-1: USB disconnect, device number 116 [ 3080.458146][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3080.469692][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.128588][ T9924] input: syz0 as /devices/virtual/input/input47 [ 3094.644103][ T9931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3094.669286][ T9931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3097.270277][ T7919] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 3097.735415][ T7919] usb 1-1: not running at top speed; connect to a high speed hub [ 3097.800074][ T7919] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3097.802695][ T7919] usb 1-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 3097.805057][ T7919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3097.836411][ T7919] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3097.962561][ T7919] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3097.965584][ T7919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3097.989541][ T7919] usb 1-1: Product: syz [ 3097.991469][ T7919] usb 1-1: Manufacturer: 倊 [ 3097.993134][ T7919] usb 1-1: SerialNumber: syz [ 3098.244638][ T9937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3099.069874][ T7919] usb 1-1: 0:2 : does not exist [ 3099.779445][ T7919] usb 1-1: USB disconnect, device number 117 [ 3102.698446][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3102.770670][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3103.816007][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3103.861761][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3115.611933][ T9986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3115.690243][ T9986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3129.121238][T10004] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3129.124364][T10004] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3129.129725][T10004] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3129.132244][T10004] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3136.733594][T10024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3157.141094][ T4421] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 3157.893275][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3157.895449][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3157.897754][ T4421] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3157.899431][ T4421] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 3157.900680][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3157.971897][ T4421] usb 1-1: config 0 descriptor?? [ 3159.569160][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3159.910718][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3160.362545][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3160.385711][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3161.432111][ T4421] usbhid 1-1:0.0: can't add hid device: -71 [ 3161.468488][ T4421] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3161.738697][ T4421] usb 1-1: USB disconnect, device number 118 [ 3162.540483][ T4421] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 3162.738797][ T4421] usb 1-1: Using ep0 maxpacket: 8 [ 3162.849782][ T4421] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3162.851300][ T4421] usb 1-1: config 0 has no interface number 0 [ 3162.852517][ T4421] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3162.854374][ T4421] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3162.855716][ T4421] usb 1-1: config 0 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3162.868685][ T4421] usb 1-1: config 0 interface 1 has no altsetting 0 [ 3162.871306][ T4421] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 3162.873594][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3163.001473][ T4421] usb 1-1: config 0 descriptor?? [ 3163.301921][ T4421] hso 1-1:0.1: Failed to find BULK IN ep [ 3163.640966][ T4421] usb 1-1: USB disconnect, device number 119 [ 3163.961011][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3163.993535][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3171.965211][T10078] : renamed from hsr0 [ 3176.978941][ T7919] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 3177.132616][ T7919] usb 1-1: device descriptor read/64, error -71 [ 3177.520900][ T7919] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 3177.729300][ T7919] usb 1-1: device descriptor read/64, error -71 [ 3177.933283][ T7919] usb usb1-port1: attempt power cycle [ 3178.764814][ T7919] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 3178.872740][ T7919] usb 1-1: device descriptor read/8, error -71 [ 3179.182618][ T7919] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 3179.433554][ T7919] usb 1-1: device descriptor read/8, error -71 [ 3179.561396][ T7919] usb usb1-port1: unable to enumerate USB device [ 3182.255037][T10095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3182.272448][T10095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3190.540424][ T7919] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 3191.068728][ T7919] usb 1-1: Using ep0 maxpacket: 16 [ 3191.285512][ T7919] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 3191.298971][ T7919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3191.318085][ T7919] usb 1-1: Product: syz [ 3191.320275][ T7919] usb 1-1: Manufacturer: syz [ 3191.322096][ T7919] usb 1-1: SerialNumber: syz [ 3191.476165][ T7919] usb 1-1: config 0 descriptor?? [ 3192.873773][ T7919] usb 1-1: USB disconnect, device number 124 [ 3225.553857][T10155] binder: 10154:10155 ioctl c00c620f 0 returned -14 [ 3226.051719][ T7919] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 3226.329362][ T7919] usb 1-1: Using ep0 maxpacket: 32 [ 3226.468886][ T7919] usb 1-1: config 253 has an invalid interface number: 249 but max is 0 [ 3226.470638][ T7919] usb 1-1: config 253 has no interface number 0 [ 3226.474364][ T7919] usb 1-1: config 253 interface 249 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3226.476718][ T7919] usb 1-1: config 253 interface 249 altsetting 7 endpoint 0x9 has an invalid bInterval 208, changing to 7 [ 3226.480117][ T7919] usb 1-1: config 253 interface 249 altsetting 7 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 3226.484162][ T7919] usb 1-1: config 253 interface 249 has no altsetting 0 [ 3226.538341][ T7919] usb 1-1: New USB device found, idVendor=0411, idProduct=01fd, bcdDevice=a4.52 [ 3226.540057][ T7919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3226.541286][ T7919] usb 1-1: Product: syz [ 3226.542219][ T7919] usb 1-1: Manufacturer: 曋ᮝꚵક齵뉐ᮋ籁耘Ᶎ稅ﴡ㭌閒⨀䑔顰ު瀻ꙹꋈ槇롳䁀䒼뚄徙頍ऱ㮓⽕ [ 3226.543732][ T7919] usb 1-1: SerialNumber: syz [ 3226.914663][T10162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3226.975259][T10162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3227.065698][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3227.141094][T10156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3227.145569][T10156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3227.421456][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3227.905410][ T7919] usb 1-1: USB disconnect, device number 125 [ 3236.480404][ T4421] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 3237.961438][ T4421] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3237.964324][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3238.002299][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3238.004990][ T4421] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3238.039638][ T4421] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3238.043432][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3238.336121][ T4421] usb 1-1: config 0 descriptor?? [ 3239.679526][ T4421] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 3239.781481][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3239.816256][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3239.933089][ T4421] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3240.549454][ T4421] usb 1-1: USB disconnect, device number 126 [ 3241.736133][T10212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3241.751287][T10212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3242.052317][T10212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3242.059890][T10212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3254.353569][ T5408] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 3254.689498][ T5408] usb 1-1: Using ep0 maxpacket: 8 [ 3255.130220][ T5408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3255.131830][ T5408] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 3255.225912][ T5408] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 3255.239525][ T5408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3255.241176][ T5408] usb 1-1: Product: syz [ 3255.242294][ T5408] usb 1-1: Manufacturer: syz [ 3255.243476][ T5408] usb 1-1: SerialNumber: syz [ 3255.311280][ T5408] usb 1-1: config 0 descriptor?? [ 3255.683310][T10221] netlink: 'syz.3.823': attribute type 18 has an invalid length. [ 3256.550077][T10221] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3256.552463][T10221] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3256.553878][T10221] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3256.555187][T10221] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3257.671517][ T7919] usb 1-1: USB disconnect, device number 127 [ 3267.673311][ T5408] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3267.980990][ T5408] usb 1-1: Using ep0 maxpacket: 8 [ 3268.088434][ T5408] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 3268.090834][ T5408] usb 1-1: config 2 has no interface number 0 [ 3268.092936][ T5408] usb 1-1: config 2 interface 31 has no altsetting 0 [ 3268.213071][ T5408] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3268.215645][ T5408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3268.222467][ T5408] usb 1-1: Product: syz [ 3268.224434][ T5408] usb 1-1: Manufacturer: syz [ 3268.233670][ T5408] usb 1-1: SerialNumber: syz [ 3268.749562][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3268.795509][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3270.469394][ T5408] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 3277.041054][ T5408] usb 1-1: USB disconnect, device number 2 [ 3278.919674][ T7919] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3279.210188][ T7919] usb 1-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 3279.229389][ T7919] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 3279.232085][ T7919] usb 1-1: config 255 has no interfaces? [ 3279.234411][ T7919] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 3279.236583][ T7919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3280.261619][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3280.361958][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3280.526060][ T7919] usb 1-1: string descriptor 0 read error: -71 [ 3280.590698][ T7919] usb 1-1: USB disconnect, device number 3 [ 3283.469535][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3283.532933][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3288.206394][ T5408] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3288.479834][ T5408] usb 1-1: Using ep0 maxpacket: 16 [ 3288.787916][ T5408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3288.790543][ T5408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3288.792567][ T5408] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3288.795202][ T5408] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3288.818240][ T5408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3288.942277][ T5408] usb 1-1: config 0 descriptor?? [ 3292.578972][ T5408] usbhid 1-1:0.0: can't add hid device: -71 [ 3292.583870][ T5408] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3292.719880][ T5408] usb 1-1: USB disconnect, device number 4 [ 3301.819345][T10354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3301.869558][T10354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3302.639376][T10354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3302.661294][T10354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3303.744612][T10363] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 3303.835246][T10363] xt_hashlimit: overflow, rate too high: 0 [ 3310.610695][ T7919] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 3310.821157][ T7919] usb 1-1: device descriptor read/64, error -71 [ 3311.276095][ T7919] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 3311.600578][ T7919] usb 1-1: device descriptor read/64, error -71 [ 3311.721044][ T7919] usb usb1-port1: attempt power cycle [ 3312.411835][ T7919] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 3312.593980][ T7919] usb 1-1: device descriptor read/8, error -71 [ 3312.880997][ T7919] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 3313.105267][ T7919] usb 1-1: device descriptor read/8, error -71 [ 3313.240855][ T7919] usb usb1-port1: unable to enumerate USB device [ 3324.880494][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'. [ 3325.324729][ T7919] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3326.202013][ T7919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3326.204788][ T7919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3326.220142][ T7919] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 3326.222525][ T7919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3326.836027][ T7919] usb 1-1: config 0 descriptor?? [ 3328.491018][ T7919] hid-led 0003:27B8:01ED.0016: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 3328.773629][ T7919] hid-led 0003:27B8:01ED.0016: ThingM blink(1) initialized [ 3328.991358][ T7919] usb 1-1: USB disconnect, device number 9 [ 3329.808413][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3329.833381][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3338.880525][ T35] audit: type=1326 audit(2000000302.850:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.0.847" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 3341.654237][T10433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3341.681511][T10433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3346.268790][T10438] input: syz0 as /devices/virtual/input/input49 [ 3348.739352][T10445] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.852'. [ 3356.348809][T10468] input: syz0 as /devices/virtual/input/input50 [ 3357.549274][ T7919] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 3358.971557][ T7919] usb 1-1: Invalid ep0 maxpacket: 32 [ 3359.250104][ T7919] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 3359.690320][ T7919] usb 1-1: Invalid ep0 maxpacket: 32 [ 3359.710622][ T7919] usb usb1-port1: attempt power cycle [ 3360.611021][ T7919] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 3360.652509][ T7919] usb 1-1: Invalid ep0 maxpacket: 32 [ 3360.900235][ T7919] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 3361.170126][ T7919] usb 1-1: Invalid ep0 maxpacket: 32 [ 3361.183310][ T7919] usb usb1-port1: unable to enumerate USB device [ 3369.314791][ T35] audit: type=1326 audit(2000000333.410:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.3.859" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 3373.941835][T10499] netlink: 'syz.0.862': attribute type 4 has an invalid length. [ 3373.946456][T10499] netlink: 17 bytes leftover after parsing attributes in process `syz.0.862'. [ 3374.001319][T10499] netlink: 'syz.0.862': attribute type 4 has an invalid length. [ 3374.002754][T10499] netlink: 17 bytes leftover after parsing attributes in process `syz.0.862'. [ 3374.161846][T10499] netlink: 'syz.0.862': attribute type 4 has an invalid length. [ 3374.164136][T10499] netlink: 17 bytes leftover after parsing attributes in process `syz.0.862'. [ 3374.504822][T10500] netlink: 'syz.0.862': attribute type 4 has an invalid length. [ 3374.520663][T10500] netlink: 17 bytes leftover after parsing attributes in process `syz.0.862'. [ 3375.876058][T10504] netlink: 44 bytes leftover after parsing attributes in process `syz.3.863'. [ 3401.081854][T10662] netlink: 'syz.3.874': attribute type 10 has an invalid length. [ 3401.258096][T10663] netlink: 'syz.3.874': attribute type 10 has an invalid length. [ 3402.086104][T10661] PKCS7: Unknown OID: [5] 0.0.0.0.4 [ 3402.128546][T10661] PKCS7: Only support pkcs7_signedData type [ 3406.801436][T10675] input: syz0 as /devices/virtual/input/input53 [ 3409.739445][T10684] input: syz0 as /devices/virtual/input/input54 [ 3412.495233][T10691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3412.506743][T10691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3412.828872][T10691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3412.853556][T10691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3420.258224][ T35] audit: type=1326 audit(2000000384.340:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3420.291070][ T35] audit: type=1326 audit(2000000384.380:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3420.328720][ T35] audit: type=1326 audit(2000000384.410:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=172 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3420.332824][ T35] audit: type=1326 audit(2000000384.410:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3420.408570][ T35] audit: type=1326 audit(2000000384.410:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3420.448193][ T35] audit: type=1326 audit(2000000384.520:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3420.458326][ T35] audit: type=1326 audit(2000000384.550:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3420.648773][ T35] audit: type=1326 audit(2000000384.700:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3420.652949][ T35] audit: type=1326 audit(2000000384.730:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=208 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3420.655061][ T35] audit: type=1326 audit(2000000384.740:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.881" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3423.154846][ T5408] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3423.402990][ T5408] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 3423.475259][ T5408] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3423.508564][ T5408] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3423.511342][ T5408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3423.572680][ T5408] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3423.575687][ T5408] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3423.600652][ T5408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3423.666117][ T5408] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3423.668526][ T5408] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3423.669897][ T5408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3423.785051][ T5408] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3423.789209][ T5408] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3423.790995][ T5408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3423.864488][ T5408] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3423.868388][ T5408] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3423.870511][ T5408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3424.232672][ T5408] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3424.234566][ T5408] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3424.236226][ T5408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3424.264155][ T5408] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3424.265692][ T5408] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3424.268515][ T5408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3424.393934][ T5408] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3424.399305][ T5408] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3424.400812][ T5408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3424.550246][ T5408] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3424.552883][ T5408] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3424.555522][ T5408] usb 1-1: Product: syz [ 3424.563729][ T5408] usb 1-1: Manufacturer: syz [ 3424.569892][ T5408] usb 1-1: SerialNumber: syz [ 3424.811880][ T5408] usb 1-1: config 0 descriptor?? [ 3424.970294][ T5408] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 3427.572006][T10670] usb 1-1: USB disconnect, device number 14 [ 3427.795363][T10670] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 3428.092771][T10718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.884'. [ 3442.311173][T10737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3442.316362][T10737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3443.751944][ T5408] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 3444.222221][ T5408] usb 1-1: Using ep0 maxpacket: 32 [ 3444.335176][ T5408] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3444.495962][ T5408] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 3444.501966][ T5408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3444.503327][ T5408] usb 1-1: Product: syz [ 3444.504312][ T5408] usb 1-1: Manufacturer: syz [ 3444.505299][ T5408] usb 1-1: SerialNumber: syz [ 3444.622857][ T5408] usb 1-1: config 0 descriptor?? [ 3444.674784][ T5408] usb 1-1: bad CDC descriptors [ 3444.705323][ T5408] usb 1-1: unsupported MDLM descriptors [ 3444.920508][ T5408] usb 1-1: USB disconnect, device number 15 [ 3455.071096][T10670] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3455.290639][T10670] usb 1-1: Using ep0 maxpacket: 32 [ 3455.374040][T10670] usb 1-1: config 0 has no interfaces? [ 3455.524781][T10670] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=f7.95 [ 3455.531733][T10670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.534001][T10670] usb 1-1: Product: syz [ 3455.535678][T10670] usb 1-1: Manufacturer: syz [ 3455.538812][T10670] usb 1-1: SerialNumber: syz [ 3456.024601][T10670] usb 1-1: config 0 descriptor?? [ 3456.175628][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3456.263149][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3457.564600][ T5408] usb 1-1: USB disconnect, device number 16 [ 3465.964125][T10795] PKCS7: Unknown OID: [4] 0.35.13055.1334505.0.0 [ 3465.966189][T10795] PKCS7: Only support pkcs7_signedData type [ 3467.210916][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 3467.840396][T10797] ./file0: Can't open blockdev [ 3471.075490][T10817] Invalid ELF header magic: != ELF [ 3473.454408][ T5408] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 3473.652039][ T5408] usb 1-1: device descriptor read/64, error -71 [ 3473.923662][ T5408] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 3474.228298][ T5408] usb 1-1: device descriptor read/64, error -71 [ 3474.363019][ T5408] usb usb1-port1: attempt power cycle [ 3474.844323][ T5408] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 3474.908380][ T5408] usb 1-1: device descriptor read/8, error -71 [ 3475.189893][ T5408] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 3475.243839][ T5408] usb 1-1: device descriptor read/8, error -71 [ 3475.378994][ T5408] usb usb1-port1: unable to enumerate USB device [ 3481.878898][T10843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3481.899806][T10843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3485.155016][T10850] ================================================================== [ 3485.156499][T10850] BUG: KASAN: global-out-of-bounds in memcmp+0xc0/0xca [ 3485.157911][T10850] Read of size 1 at addr ffffffff897cc9c0 by task syz.0.907/10850 [ 3485.159125][T10850] [ 3485.160441][T10850] CPU: 0 UID: 0 PID: 10850 Comm: syz.0.907 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3485.164152][T10850] Hardware name: riscv-virtio,qemu (DT) [ 3485.165319][T10850] Call Trace: [ 3485.166348][T10850] [] dump_backtrace+0x2e/0x3c [ 3485.167410][T10850] [] show_stack+0x34/0x40 [ 3485.168220][T10850] [] dump_stack_lvl+0x122/0x196 [ 3485.169136][T10850] [] print_report+0x290/0x5a0 [ 3485.170015][T10850] [] kasan_report+0xec/0x118 [ 3485.171224][T10850] [] __asan_report_load1_noabort+0x12/0x1a [ 3485.172246][T10850] [] memcmp+0xc0/0xca [ 3485.173205][T10850] [] __hw_addr_add_ex+0xee/0x676 [ 3485.174087][T10850] [] dev_mc_add+0xac/0x108 [ 3485.174983][T10850] [] mrp_init_applicant+0xe8/0x56e [ 3485.176018][T10850] [] vlan_mvrp_init_applicant+0x26/0x30 [ 3485.177396][T10850] [] register_vlan_dev+0x1b4/0x922 [ 3485.178381][T10850] [] vlan_ioctl_handler+0x54e/0x956 [ 3485.179373][T10850] [] sock_ioctl+0x1f6/0x61a [ 3485.180299][T10850] [] __riscv_sys_ioctl+0x182/0x1e6 [ 3485.181200][T10850] [] syscall_handler+0x94/0x118 [ 3485.182233][T10850] [] do_trap_ecall_u+0x1aa/0x216 [ 3485.183296][T10850] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3485.184518][T10850] [ 3485.185018][T10850] The buggy address belongs to the variable: [ 3485.186117][T10850] vlan_mrp_app+0x60/0x3e80 [ 3485.187293][T10850] [ 3485.187804][T10850] The buggy address belongs to the physical page: [ 3485.188928][T10850] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x899cc [ 3485.189974][T10850] flags: 0xffe000000002000(reserved|node=0|zone=0|lastcpupid=0x7ff) [ 3485.192206][T10850] raw: 0ffe000000002000 ff1c000000267308 ff1c000000267308 0000000000000000 [ 3485.193156][T10850] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 3485.194079][T10850] page dumped because: kasan: bad access detected [ 3485.195080][T10850] page_owner info is not present (never set?) [ 3485.196336][T10850] [ 3485.197325][T10850] Memory state around the buggy address: [ 3485.198612][T10850] ffffffff897cc880: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 3485.200027][T10850] ffffffff897cc900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3485.200861][T10850] >ffffffff897cc980: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 3485.201883][T10850] ^ [ 3485.202748][T10850] ffffffff897cca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3485.203604][T10850] ffffffff897cca80: f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 3485.204494][T10850] ================================================================== [ 3485.207498][T10850] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3485.209042][T10850] CPU: 0 UID: 0 PID: 10850 Comm: syz.0.907 Not tainted 6.12.0-rc6-syzkaller-g57f7c7dc78cd #0 [ 3485.210101][T10850] Hardware name: riscv-virtio,qemu (DT) [ 3485.210821][T10850] Call Trace: [ 3485.211382][T10850] [] dump_backtrace+0x2e/0x3c [ 3485.212358][T10850] [] show_stack+0x34/0x40 [ 3485.213706][T10850] [] dump_stack_lvl+0x108/0x196 [ 3485.214728][T10850] [] dump_stack+0x1c/0x24 [ 3485.215672][T10850] [] panic+0x388/0x86c [ 3485.216793][T10850] [] check_panic_on_warn+0xc0/0xe4 [ 3485.217737][T10850] [] end_report.part.0+0x4a/0xaa [ 3485.218699][T10850] [] kasan_report+0x102/0x118 [ 3485.219668][T10850] [] __asan_report_load1_noabort+0x12/0x1a [ 3485.220600][T10850] [] memcmp+0xc0/0xca [ 3485.221444][T10850] [] __hw_addr_add_ex+0xee/0x676 [ 3485.222295][T10850] [] dev_mc_add+0xac/0x108 [ 3485.223206][T10850] [] mrp_init_applicant+0xe8/0x56e [ 3485.224077][T10850] [] vlan_mvrp_init_applicant+0x26/0x30 [ 3485.225088][T10850] [] register_vlan_dev+0x1b4/0x922 [ 3485.226102][T10850] [] vlan_ioctl_handler+0x54e/0x956 [ 3485.227494][T10850] [] sock_ioctl+0x1f6/0x61a [ 3485.228519][T10850] [] __riscv_sys_ioctl+0x182/0x1e6 [ 3485.229421][T10850] [] syscall_handler+0x94/0x118 [ 3485.230321][T10850] [] do_trap_ecall_u+0x1aa/0x216 [ 3485.231264][T10850] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 3485.232451][T10850] SMP: stopping secondary CPUs [ 3485.235428][T10850] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:18:47 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff81b7d220 mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff86002870 vstvec 0000000000000000 mepc ffffffff814a9876 sepc ffffffff80972676 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080029000 sscratch 0000000000000000 satp a0855000000a959f x0/zero 0000000000000000 x1/ra ffffffff81b7d1f6 x2/sp ff20000006867130 x3/gp ffffffff899c0180 x4/tp ff6000002ae63480 x5/t0 552030203a555043 x6/t1 fffffffef21a98f0 x7/t2 49552030203a5550 x8/s0 ff20000006867170 x9/s1 ffffffff90d4c780 x10/a0 ffffffff90d4c7c8 x11/a1 000000000000001f x12/a2 0000000000040000 x13/a3 ffffffff81b7d1f6 x14/a4 1ffffffff21a98f9 x15/a5 ff2000000006d000 x16/a6 0000000000000003 x17/a7 ffffffff90d4c783 x18/s2 0000000000000037 x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 0000000000000000 x23/s7 ffffffff90b6fb52 x24/s8 dfffffff00000000 x25/s9 fffffffef21a98fb x26/s10 0000000000000010 x27/s11 0000000000000010 x28/t3 ff6000002ae63488 x29/t4 fffffffef21a98f0 x30/t5 fffffffef21a98f1 x31/t6 ffffffff90b6faf7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8000708c mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff86002870 vstvec 0000000000000000 mepc ffffffff8001fb0e sepc ffffffff8000f184 vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000008 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080027000 sscratch 0000000000000000 satp a0649000000b67dc x0/zero 0000000000000000 x1/ra ffffffff80007084 x2/sp ff20000000167d30 x3/gp ffffffff899c0180 x4/tp ff60000012a98000 x5/t0 ff60000012a98b20 x6/t1 ffebffff0b9bde04 x7/t2 0000000000000006 x8/s0 ff20000000167d40 x9/s1 ffffffff801ecb64 x10/a0 0000000000000001 x11/a1 ffffffff8663e620 x12/a2 0000000000000002 x13/a3 ffffffff80007084 x14/a4 0000000000000000 x15/a5 ff60000012a99000 x16/a6 ffebffff0b9bde05 x17/a7 ff6000005cdef023 x18/s2 0000000000000000 x19/s3 ffffffff90d62aa8 x20/s4 fffffffef13578d8 x21/s5 0000000000000007 x22/s6 0000000000000001 x23/s7 ffffffff89abd640 x24/s8 0000000000000000 x25/s9 0000000000000000 x26/s10 ff20000000167e20 x27/s11 1fe400000002cfb8 x28/t3 1fec000002553163 x29/t4 ffebffff0b9bde04 x30/t5 ffebffff0b9bde05 x31/t6 1fec000002553168 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000