last executing test programs: 10m2.332997305s ago: executing program 3 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0xb0}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m2.223052561s ago: executing program 3 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0xb0}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 1) 10m1.715938421s ago: executing program 3 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000000000"], 0x5c}}, 0x0) 10m1.605372604s ago: executing program 3 (id=858): mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x51) chroot(&(0x7f0000000780)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r3 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0x2}}) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRES8], 0x0, 0x800) msgctl$IPC_RMID(r3, 0x0) rt_sigaction(0x35, 0x0, 0x0, 0x0, 0x0) unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) 10m0.69981741s ago: executing program 3 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfa, {{}, {@val={0x8, 0x1, 0x18}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1bc, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x42e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x319}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xffffffff, 0x3, 0x6, 0x30000000, 0x0, 0x6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x39a8a090}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x66f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6d7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x4, 0x9, 0x9, 0x6, 0x8, 0xa]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5e45000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc266}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x19}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x40, 0x5, 0x4, 0x4]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x5, 0xcacb]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3a5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4f9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x6]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24008840}, 0x810) r3 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="078fe4142354a1605fe54a1a4477411319be71e4fd0f396f03bdd3bf682bb64cf2f37aa755a815a02e012b6c1b74ccd521313db5bdd340c1225fde765d7f3454d2f5d443b2a7a5e3e446feca514e067e0e1e6d52fd20c67c71e1a551b844c172a598bb37e0ad7e89aefca96bfc6b9ff735f95b6ebc79b400d2a2f7426c30329d173d02718fd6ceef6cc07809ff0356931889ce2b0ff1e4307313271a0dc04a5465b838027729ce39138e4b731f6a066c1d92771ff80955c42ba97e3106b73c9476", 0xc1, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r3, 0x57, 0x7f}, &(0x7f00000000c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=tgr160\x00\x00\x00\x00\x00\b\x00'/74], &(0x7f0000000300)="f9a9224a00d6e806e8dbe160683af2b9e01c33ae83b4c964f518ae9920b83a7a639227265a99085e936898a4c0f172a2705a656ec650fa9c38b60db976e4abe49f8d1f5535f9067039b97a71056e428a25c9fafd3e4368", &(0x7f0000000380)="a2d4af4482d645a5b06e727847a5eb2571873b34a3cf945f54ee0101b22b53f001711a51e2472e80b20bba22a7ed44edd77b470afca2777a3d313c7e6a6308ec24d1773fa5c636c93ca3f082575b22e57bf76627f937c47dc51093186ec8846d41013e2a8d75c833631c6b43fd03d931d5edfa55606dcb7ffdf42cf1f5c350") r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0xad5e, 0x80, 0x1004, 0x221}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) getsockopt$IP_VS_SO_GET_INFO(r9, 0x0, 0x481, &(0x7f0000000280), &(0x7f0000000400)=0xc) 10m0.264895694s ago: executing program 1 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300030000000800070005000000080001001000000006000200010000ef100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) 9m59.75988207s ago: executing program 1 (id=864): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000016a82, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000200)) 9m59.750776957s ago: executing program 1 (id=865): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80000, 0x80000009) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4008040) sendto$inet(0xffffffffffffffff, &(0x7f0000000680)="efe3fe7b3a76a83985ef2d9ce142db47d5f1592635874813b9bce1981ae915714f005a58f6675187bb002fc97f116c31c7ff845cd2c9e38f23fc9cd5433df8f00ecb7c8f8d0fe4f2399260c013848bc9207c3355595f6d31e88d7a92740f1d7f28c788f871ebb6cd27e169518fe68fe84ee09f32", 0x74, 0x8005, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x9) 9m59.655634005s ago: executing program 3 (id=866): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r3, r3}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r2, 0x947, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @cond=[{0xc36, 0x0, 0x1229, 0x0, 0x8000, 0x2}, {0x1000, 0x8d, 0x200, 0x7ff, 0x6, 0x7f}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x1) pipe(&(0x7f0000000080)) (async) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) (async) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r3, r3}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) (async) add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) keyctl$negate(0xd, r2, 0x947, r4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @cond=[{0xc36, 0x0, 0x1229, 0x0, 0x8000, 0x2}, {0x1000, 0x8d, 0x200, 0x7ff, 0x6, 0x7f}]}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x1) (async) 9m58.981143585s ago: executing program 32 (id=866): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r3, r3}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r2, 0x947, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @cond=[{0xc36, 0x0, 0x1229, 0x0, 0x8000, 0x2}, {0x1000, 0x8d, 0x200, 0x7ff, 0x6, 0x7f}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x1) pipe(&(0x7f0000000080)) (async) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) (async) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r3, r3}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) (async) add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) keyctl$negate(0xd, r2, 0x947, r4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @cond=[{0xc36, 0x0, 0x1229, 0x0, 0x8000, 0x2}, {0x1000, 0x8d, 0x200, 0x7ff, 0x6, 0x7f}]}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async) splice(r0, 0x0, r5, 0x0, 0x4ffe6, 0x1) (async) 9m57.746721699s ago: executing program 1 (id=868): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x0, 0xfffffffe, 0x0, 0x36314d59}}) r2 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7, r6, &(0x7f0000000280)=0x7, 0x9, 0x3) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x50, r2, 0x17a1e000) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0) 9m57.014147001s ago: executing program 1 (id=869): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f0000000240)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb0000000018000000000000001100000007000000ac1e871bdc11000018000000000000008400000007000000ac"], 0x48}], 0x1, 0x0) 9m55.869483886s ago: executing program 1 (id=872): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1b, 0x2, {{0x9, 0x5c, 0x2, 0xfffffffc}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 9m55.465112621s ago: executing program 33 (id=872): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1b, 0x2, {{0x9, 0x5c, 0x2, 0xfffffffc}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 8m6.546759599s ago: executing program 0 (id=1228): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1d4142) syz_open_dev$amidi(&(0x7f00000001c0), 0x100, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) semget(0x2, 0x4, 0x60e) (async) semget(0x2, 0x4, 0x60e) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000001}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg$kcm(r2, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x2) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x3) setsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f0000000380)=0x580, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f0000000380)=0x580, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x200480c0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) (async) r5 = fsmount(r3, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="2201000000000040050b2218000000000001090224000100000000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="00fd0600000007223d7da129"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x8, 0x89, 0x0, @rand_addr=0x64010100, @private=0xa010101}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x8, 0x89, 0x0, @rand_addr=0x64010100, @private=0xa010101}}}}) ioperm(0x6a, 0x8a1, 0x5) (async) ioperm(0x6a, 0x8a1, 0x5) fchdir(r5) (async) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 8m4.228787364s ago: executing program 0 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r0) socket(0x2b, 0x80801, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x59, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x9c}, 0x1, 0x0, 0x0, 0x8058}, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = io_uring_setup(0x53fe, &(0x7f00000001c0)={0x0, 0x728e, 0x1000, 0x1, 0x2eb}) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5720, 0x400, 0x0, 0x379, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) unshare(0x2c020400) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) 8m2.207926161s ago: executing program 0 (id=1247): syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x896f}, {}, {}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9}}}}}}}}}, 0x0) 8m1.811532004s ago: executing program 0 (id=1248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000440)='./file0\x00') ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5f7, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x7, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0xc}, {0xff, 0x3, 0x6, '\x00', 0x5}, {0x81, 0x3, 0x8}, {0xb, 0x50, 0x7f, '\x00', 0x20}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0x6, 0x9, 0x84, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xd6}, {0x1, 0x4f, 0x2}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x1, '\x00', 0x7b}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x6}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x1, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r6 = syz_open_pts(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$FIONREAD(r6, 0x541b, 0x0) mkdir(0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r8, 0x0, 0x12, 0xfffffffffffffffc, &(0x7f0000000000)) 8m0.88765837s ago: executing program 0 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a00000000000600020001000000140020"], 0x5c}}, 0x0) 7m59.973199648s ago: executing program 0 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20084842}, 0x40095) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x74, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x20c89}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r7, 0x1000, &(0x7f0000001540)=""/4096}) 7m58.850943541s ago: executing program 34 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20084842}, 0x40095) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x74, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x20c89}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r7, 0x1000, &(0x7f0000001540)=""/4096}) 13.10595337s ago: executing program 4 (id=2939): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400) capset(&(0x7f0000000080)={0x20080522}, 0x0) fchmod(r0, 0x129) 12.902942995s ago: executing program 4 (id=2940): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16=0xffffffffffffffff, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x45, 0x0, 0x41100, 0x52, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=0x41424344, @ANYRES16=r0], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000580)="6d8f689a00d5f5044897e81d3035a0f2b74610624808d45f548bf4f245abc6d9d07568d2e93753f458afe0ae6f2550511537ffd0ddda198f1ee70b0c761b01e05169f295d2d84b7d2bd4f461404a0a3f998b2e47c86b2ad445954254f6c78d886ad4ed6045ba4502eab2de5109548b7d0634ceebf8ea9018516d6b8ee5743990c399cf6e0072eab9718cba0cac392bf9f4d5bb5f711d68e99f3fcd64241f7ecf7ec4f389f1f201673a08610b20f6c9db430dafac971834f82648bd6ff371a057ece17fced83c2e1931a0b4e5b928991a8065c2ca7bf490869d9b6149e75d74588fe24337e78fbb3bdda7efe7401e9027f7aee6a811f9d6f66554aea2113a470a341dbb36e6cd37f5b2003c0d0a7248de33772076ec5b0a3ebaf5037984b9a654e14c7fe553075efed5482eb5fc4851a9b3645e9892be80d058226768b4f2b5e8f6db08fe02ee0a5117f98bbc233c26def75356a567ea2f78c771ed4e56fa1d93df581d333a5e13ce0ea1c07e0248c90a9c70dc4d96e6ffe6015ac680169397a15f09fc3af65bce40d31fb9", 0x18b, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040012"], 0x24}}, 0x40c5) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_usb_connect(0x0, 0xc06, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000862c6b203b0904a10100010203010902f40b03000010000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12.434717682s ago: executing program 6 (id=2941): ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/163) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 10.023783819s ago: executing program 6 (id=2949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0x146}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="f2a0f0f863621a483b19e7ecfce0d34e53fbf295927214684f4d69e973ac2fa5fd0ddf47c314ac0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93227bbe5a4a93e14eb44aacf27f9060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a0552c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a2", 0x14f}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4060, 0xfc6e, 0x1, 0x0}, &(0x7f0000000180)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 9.953759453s ago: executing program 6 (id=2950): semop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet(0x10, 0x80000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$snddsp(r5, &(0x7f0000000640)=""/32, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, &(0x7f0000000540)=0xeeee8000) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x4040004) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) 9.674088718s ago: executing program 7 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = msgget$private(0x0, 0x785) msgsnd(r2, &(0x7f0000000240)=ANY=[], 0x8, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x7}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x7}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x2000084) msgrcv(r2, 0x0, 0x0, 0x3, 0x4800) msgctl$IPC_RMID(r2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c000004"], 0x18}}, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000440)=""/81) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r8, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) fchdir(r1) execveat$binfmt(r7, 0x0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 9.415508981s ago: executing program 4 (id=2952): io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x0, 0xf3f, 0xfa11, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) write$FUSE_STATX(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 8.421607624s ago: executing program 4 (id=2953): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team0\x00'}]}]}, 0x4c}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4888", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 7.902846814s ago: executing program 7 (id=2955): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_usb_connect(0x0, 0x81, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bd0000000000000079110000000000009500050000000000ddab49b00621ef83eaa9b87d91feb18721"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 6.494797348s ago: executing program 6 (id=2957): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd29}, 0x20}, 0x1, 0xd, 0x0, 0x2840}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001440)=ANY=[@ANYBLOB="f157ea1cf50f9c833672f946ad3bb66fa4d63117649233937dc7e2e1bc73242d0892aa9e3475a6306ad3ab889fc6bc109f0d7feb48cd82c1339aac721f1a9384f8052defa8f8a7261bf4548cf49a17f60ca02468bba94d2d30aae73ea65bcd3d70d62a85851c7bb3cb6f1ceb41249506af93b9b4802a10ef13be41dd2408d2defdab1f1e5ef35d5e8ebaa76cd6962adc37be870b84211b1bba4d02f26a05ed9c1328154051b3b64c119dff99c33456ece0682d9d67e72295593105cfaa8b18cd9ce723aac2a0d1fc3c226a8028db92effa1c69cbf5e4e44d7011dcc963d9472842da4df0fa5bb9a5ebdd71c9f5d3756de752df24793daa6a5958a5a52740732a0f186a7adc9ed4293ff3a6a6b191e4101ad73e54c8a252eb77f04b170346488b732129109fefb121c13ff538b45ae863cc17773d4ef4594f73b3bf5037a5206a1006535b6a96da80f45e9242dc5782b88e79d869c91d8bbcbccb9bb556e4497a9e813a5412838baef58f037f5962653cc47c2a4e7855a5c564d0a614ff5462c78f068f268cf7c018f8cc8f352829b2670a707b083f6aaba0ec4aa342a21215e133dcb28b7e0b85c8565cd581906d6796fd62377d262171af4ae99aded491be450241b391323fbb42602ac044cc6f225f408c37afad4b6aaa2c0ba052e5b46a3f0e00fab60791192e988fbcb29817dba6d2da87d9767b0cd32c96162233dbd1ea67e65ea2a66b2980f71584f95b16761fd8884b23a316d9f9b49609be850e3df8575467e5bf81a5cd8fe94099860a00133f47103288960a8cdce4dbfbbe03cf8518aab0783b8adcc42a7b284c1f5e107ffa404191ae813707be12696209e87173107996ce7966a1c12fb61248f10d54ee50cf999ee646160875d771bff37e8f6ece6f1a5ec41e860f980f5845dbbc6501d40ff1d7f40eb8f3b2a53faf50bbadab6d375f2300e791c69541d798dcb908228158456d34cb39b5733d9a7cdc5eaad76c27e7bc9aa1d43d1f67d4db026a976ed9bbf533bc432fce01a208e44d9f4e200a60aa96a30ba9f965d47876e81090a1fd960c7fd722acd37c9b8127b885b3eecfe71bd98d2dc71e712c30da5789c8b1529584c689c80183b2fde52f8473e41306fb320ec47512151b1f17319917fe3715c0205dc9a4ce15df6cb3a472ce3243ee8d380b8e423cf5694eaed0cf3370b7d8f8cf2ab6e6f5361ccf20508d93891f9865bb1e3082ab76fa65b81af3eef98b4b4fcd5f70cb5219b17acd158f3a99c80f7adf398d9767d7476a10261adbe25c8646ac69521e6efac358608febfb277507286b5c6dcf8ead5145e71c07d2733b2545a129418ca34d9230f62d7d2634a6a3bbad57f0bf792f4576bdf4de429b6f5496765f123f67390dc57cd4306432277468e2822a7c5b279b91d7300e000658908668e9004eab964409161a89fef1c47eaf218a8b5dea032f521c1194201cb151066541faffdd12070b0b056b16cfcaf30527b605440b61ad7241b19fa7d3249f3dabdf592f1f3f21bc71fce503570d38107628efe2d267a59c1e4bbb4e75051d7666ae869b16698c8071e1aca01ed89d379a7596df66ec4ba1c97b6603b261a7e3895f34097b600d04233d2931e650e0b2348de01598e103f21354208f4ed80f20ad68d0982444bc2366ce29e961fa0737bfe8f32fe29875eba47feefb7a21b649b919dea5d64dbfbba7f105784584b5bb131a90e34dd203a479e83bd21485763d5a939e07c8ef06b735b0726eb06ade6ff53a7e994fff48650b5791956607366640d791e3700eccdb4027ecbbab7390f0a969d0921540d71ba2f3d49120721cc31d5556c4125e41cacef9703ef889d838c2ffe2cf3cfc7adce70e700384a986e839e3f934130d03b5568f51edc7dd8449d34eeb0329851399335a0d76a454a4448f4e4a9cb64e0226c3d7d16f3c44ed384ff4dc4eb98795bd5ac86b7451706d22fd233e976219ea30d14eef4a17b85ddaf14dd4471f977f2536bd552869fc110110fd31ae2b784eb696862253d23c65482b3baa0c8e8d936bf4350299a03af2d76175cee865ff68953c3112781a13867167ea9c891cd1b377d59bdffe0490d3821a84e5e2fcff4cd1b90823d49a24ff5676e72b06df105917dd508c55ca36b08bd84759ec931358a8f5f652b80a6e2fa2c2aea72090c253b4f847f960f7d0b9311aebf573dfa771ce49201a0838c42ec91b0e15cff358d4febead3b0bae4c1f4f98d53f490849c2f6b11773a22af911696b6460555caf9edbe6658f57465863ed33d49c96996d8e2ab4bc58fe3b2304c5cf1aab359fe6a01f3857f7ed208e4a527a49f3b961c193a1c3c6de3b3f457694d802684af9108b2ce271f5c26fb6f608ba4b7df4864154f1221cc1ac36a10c882affe00315d0146d0152d49858f0b2ccf7b2d6c0751b0d044da0d520713e718c4df75535d5b1a13111a235c5d9c2f60fd09cf418ea2ad6d7b5ffccc64fe543070ffa9a7ec400f26025da9871acaa44acbe4680504b9c33c0e5063aee4fd26d7073cb773b8509fefc28e3f1cdd9c0b7e9bba0547d6d507dfba5fdc03fe4ac8ccd4baace4346e34bebb684f22e8daf01885db915ddbefa0f0aae311bec758dbb158a166e8f4951aecd4e42add9a9615f5241fc48d063298ade02d2203bcbd7490d560466b1d77089311d884e797158e6221b25dfbe93e0b06f18a896ef76f9c60d525c1930b5db9d7baf33c963e4c62eaf77d2377b57fdc6e2bb335ebda0f300ca57a54ea6799ada874c2f936601dae69bd6749b965218f7d744d2c211dc462902c1d30190480bd868cdb8142790de606eb08c8fb84ebfe2737f01ed4c7d379de85da5e313b06a4f0c940b2736c260e7530541a9c5f612b688e7482d6bad12f270e768520eddde0727f5e79fdb2842a9cfe542b4dc3bed9f3b2e3b5b0be060321fd3582a704f21c7539685fcc4cfb82fa751308dcb4393b505f4da588c538c05787089bff5ee1811ed5a3a86e6222618935ce30202a2a1faa4c3a0fab747d9032101e81dd993b7dd8226fc32180c840864f94c784659483ed2513891873d9f21013031f5d31767de6f1c53b4443b96485ee391a6217978d24e9222d6f35cf62f9914d728942af6d8ac474a8ba51604e0349ef43ce71308c58f44a42ece8906a0b6b682a93b7df3372f2f3bc0e39f2798a34cb48c6251dcac9b2eacf4546c0672397118d688c9daebc5e475c45c03743f5733da996a54045b712955b85dd8cee91152e544bf960a7fb8dbbce0865b60dfe923be29c829ebe354c7cb07111999cff6c73b77898edc1fb0dd630035ced77002bbc771159b26f87d52634b4baa12c03fa1ebae51cb35f3dadf8c4b05379738c3bef0d90a9121d8f6f49428d6b890968c5fd31f880ba19e2287b46ed378ffc2bfc255668b2911b28380e63c17c59851540fc88fbe2aa434f55743661e363f287fbb460eb4cd27728da0373f2ad1f7abd2755120ef732845209040fc8054bb4870965ca88cbdb4d4db7f6885567c5f12373805a613589d39e317931e9f267028bbdc95413d1c2e624fd8c62b36dc6635eaff65e4423eef575bcff70fd81a9ab6ea0ca8942e858fbda7f942326450033e97fd828113052f8ca7a0bcbbb937bf6ac085ee7c97d88ee2c38b9dcebdcc8462a0bd244f72d30254b00ddcf398ef7a077f8256f4c649704f9eb2cab07e6c6bbfcea89fdb217fea338c887a990eac9166c5804bb1a56382bedb220df7f9182a08202c11ffb7e99849cede946f5018625f7ccf14b05a75aadccc5ee3c04e34aa1e9517edc6b5acf06449087cab0bcff53fa3859c94d251dfa928cfb0d0b9ab3cb798097b3bfcccdf14ccc8261e6250ea8b08b67853c2916dcc09c18af7435957dd4a59b3363b439a37fbd8b18192db85c30c83b04cff5b97708b1ba91a5c3f487159edd16858a5fb9d7fa38d0b67cc25c5187ca6875eba113eea7da5eb6bcf4a34cbc1353cbe245d3b05f284e848693137dd8b396a951ccabed14ccf8b45c0d87521422f29f98a0fbd12ff4b806ee46527af554987a04e7f9e825d0130609f62b4789859debda1353633137627b3f2acc2f3a842092f26da5c5ce240d771dd95a3b8abc50b48afe33a999703935359f7142bdf55d929a3cced109ae6a589eae75927b7469d3f37945bb9305e188f25a4adda5d880261dba46eb7ac54c8551e8f34e18e34ed600745ba89b51bb50851e4ff7589e386cc1ea5d60861f0fcd6f2e676eadcd5005f632f8f54be2f5e70431c17a09fbf3e5f4df61eb7e114c9472a2ddad2d4136f77a3908dc7cf82c8519b67c82d9ffb85367f17883db6e2b7dd5e78f73b6a9c96fa860032ce2a79253f2718baca286ac1fa73f939bb6e78db65a87c6870e3314cc23256add6646b6eb2b5e99451b6846c4627ed5f96d82b815dd41a5027143a8cc690a6da6d7a6cda4afb554cc1212c87644c5edc2f7646db77b73043bf752a550e5fb282fc199efa0f31475629a7275ce3d692a7c53765c060d7bc98d1502ec8ac2bf77dfbed8d7e9504f167db7dac0de7b087330d84e0dc85fae572557938aa814b0f30f631466275e78555b42c40d951e2c521dd96ad14cd325a052b87889b6f656774b49cd1411538526245ff8c2f750940fbee377e7e931a62b12e8d6574ea50b13f26348d20983c6ad05f6f68e5c0564db85c779f3b738e5200d2a8dbf8521594e45064d44507c7ea80adb3bd5f27675309f35922bd7f970562137e5ea60594abf4116cef0ab7ea6c88ec202f30a859a2e1c8807fc7aefa274281231fdd1141c46c0223e4924e829a32ccce9c9847d7ce90581365d8a9952f210ef65eebacc28863ceb35f8e44a8ef0dcef8dfbf71d91e83cfcca4e3bae7a6689958d120e7f294a4a611b8d3a5c6ff6bed1ad7cf172cc97adafc1eee1df7b96a00355c69ae1ce6bb4784ac93cf31bdd81b978367d05ca76b133708b83f0b8a3e007a388888341d5fb8e02a006dc54685e48160b13e3c53780e9a415b2bfd917a1a8c9ccc670a65f92b4c500da437c73c0fb78fc6508fbe68ec7bfde33e28704b5f935dc9ed0611d66e772da78d588dc889b52fa817f7eb9d454161ab37ee3ed55c83b31dc356f7a7c723b892019baea501d3bdbdf3fbb262d625363734e4c43f5cff8fa6d438e66ab04a48d06216c354e27da9555d29ca0223e5dbc1f1c77ad59c6964971f47099cbbd238a500c250fa4979b8585ea5fb43d1478fc436c0115ff00045a2f2c886f5e83a3b5699a37bf81f1dc51748d4522b7dd19215a8bf16268028a79d5fbd0737f446d769e973447a8b2dbdc1b60cf915328d5f234bff757d4e46ed92c783dfa484b23118e98761b4e528d61b5f1bdce3971ea18ad82a5d17d5124a0ddd36b94e669c19d65f1d656df7c79a847cef3d727e0c29d5088aaa1db6476110125fc0b59a33dd72cac47e25789f6caeabb327ee6c1b8cfadae85db95012519f0d7f6ba039178377e48a5184d4e9b329260352e6df46a14bad634ddd326747a80ea53bd9976345ce739eb524aec5e550fd21f143e15086bc5eb51695fdbd76fb6bf10d1a67f82ae289db4728885ac88bff7350fdf6dd90b73c05246378a71fbdec09990cb0c15146afa249fd802030edfb94a94f756701e951c0e6fc1c3efad7590d40544f6164e19842f2e3f51dc0ee752d4d5f4a5a1f81fe19945271e91869833f70c8c9911ca4cc3a0d44752e055f6be507ae702995ecff90effa0cb648bd0ef3bf82f44ff24650d7964b32ade16139a7b1934b848a36ce1987"], 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='target PCI:\v:8:1f.1\x00'], 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000018001a8008000280040001800c002d"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) syz_usb_disconnect(r6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100002192ea0845050c800a03010203010902120001e0000000090400000079660100"], 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) clock_gettime(0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.467848281s ago: executing program 2 (id=2959): socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x68, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_nat={0x2c, 0x21, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}}, 0x20004084) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.234065856s ago: executing program 4 (id=2960): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r8, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, 0x0, 0x4040040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r5, @ANYRES64=0x0, @ANYRESOCT=r8, @ANYRES64=r1, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24048004) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 5.166008477s ago: executing program 2 (id=2961): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x5, {{0x2}, 0x2}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 4.514704041s ago: executing program 7 (id=2962): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571293f00000000006600020100800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 4.311775071s ago: executing program 7 (id=2963): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a300000"], 0x122}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r4 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x14b200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) read(r6, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000500)={0x0, 0xe, 0x81, "c318a8c52ddee94fd6b22121cd454f13e20f4f6c2443a46b7669507256a770ffb2c30e49ecb9f7207e45669624fb8cda074aa45fab27bee85230b7cb28b47d319ba7490cde0c89ac4cac0f39303864433d6ad46e98787facca381f5fb9594f0539aa4394b8f02e0fda01efec66b08d31d7b5f898bd16cab483ec51286ac6d086b3"}, 0x89) 3.782411294s ago: executing program 2 (id=2964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b1f00000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000004061c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) 3.623882972s ago: executing program 2 (id=2966): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv4_newroute={0x30, 0x18, 0x4a2499fd4c68d2f3, 0x2, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0xc8, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @random="bdd1221610b5"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(r5, &(0x7f0000000580)=[{&(0x7f00000000c0)="41f3d6f790694f00a3e8ccc5", 0xc}, {0x0, 0x26}, {&(0x7f0000000480)="044796807eb4aa921f6fa93092d7fe4d32b133003fea37b44c9e1c5c768f542c14cd621100973580de8b0cd97c1c1bc83bbc7a17e59ec035b90d75729759d86f750cc0b93f39fc776e3b7902c326810ab78e287b213a90eb238306dd50a3b5540b625f713c7d5a6569996a564ac8784ed92d39b300210baf1f24bab3c71bd5f90eeb70e33f184cecf2815989a087fcde1b5e5e8f76002b88163437afcf3894d1b42b46960fb74d46f63aadb6aeba11e04b85ce7c5660534615a781a34f0d6da7140de34d887c7521e349a7be5be32f4b44d80c6f0156b45d8fd9192ec1cdf28713c6b3f57b1b6681bd8dfce72832f18ade7905a33b"}, {&(0x7f00000007c0)="4ab69fa9b82634fc966ddef1d57724ea64678af35cf758f23eedf3407e123178f42e8874b0ffad777503d9f0f5ac760548f8d36efbb784bae79f68f4b30077c1780869f9c45611cb5870113ecb67d63fc46ae211606146c03a0eb24db403728f8963072e6718b762306b356d0da3566ae5008546c9e2b47c0183359ad3aab7148600422463f6416f8bbd3efe11914998"}], 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.412112704s ago: executing program 2 (id=2968): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000fc0)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c6", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9c}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000004c0)}, {0x0}, {&(0x7f0000000640)}, {&(0x7f0000001000)="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", 0x2aa}], 0x4}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0xe, @dev={0xfe, 0x80, '\x00', 0x24}, 0xab8}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000006c0)="ed4d928de1ad94c9796ef8d9141643bb104c20bd93b0c1558f7a2fde05584aad78b6dee38b9fc462d5c4ba90f038b732af44bf1e80f7c3c7b347b59a680c085d96db543378fe44db214f09eb4a9b8a75eb7f43d7f428d65f3bcfa39fbf7238f367b5e54901004638ef4abd38d09b04278b4cbe225cfa3654e422f495571dde1963425ead2efb56082ccbb5ac7c70fc25187f67e17f", 0x95}, {&(0x7f00000008c0)="55616e647e14f923c0e66e0b20c22a00e02e5b1b7691f8f041e2ea9069a659f9b39cadad8b6d4b5789831325255f4eb3191add843bf88d21da10ae5ac5a2ac233462f470c2a38c66a46bd29863182ddfdeac2ab5d0bf9564bb237f0091278f40354e443640921a7e60d6390d1f76eda2f7bc0e721c28a162d4b43f1ed98117bfa5a8b82d38d664", 0x87}, {&(0x7f0000000a40)="6c1ace6f0c25cc6f7f47a9db088a19d75082a31db8fbd1f8e833c822d08c663dbdbf249f24e1427bb37a77fd4e27c1d2b39abcaaec09dcf9cb4e572dfb72363d4c694278ecd164e88f8d3d93083a50bd1f3d2652792c6f85c5c5cac81c71eb3b7df52701d4ddd7fe1a223a76f19f6737db00d6737e04bb0318fd492eabf90cb3cf5f890b62e3a620e67689b4d99410cb6aa448495f24b97f163efa3d0cfeabd1c3960be8ce600ec962654ec37ab69a2a40bf858e682656a9364e", 0xba}, {&(0x7f0000000b00)="67b05aa64895ef1e9e0d13554742eb87e260e3a515494e1e77532b2d8c059c89396f6c8270102d790f1ff930edb244bc8f20b57ce8df9ccd63abf9b1c9656b5c3c704087b0fa", 0x46}, {&(0x7f0000003040)="bde8ff6f3c7cfaf158fb69f12b2de96d040d893e5b48dfdf028c3badaab0ca592f5440344f622f7f781fe087b40f4931144bc4320f654ae1b4a38047633518e4e2f10f0e09677a1b2fcaed0dbed2f21caf6a41d93ab549e61ddc5ce3a0fc1734bc5fbe7cf87a0cdb906c3241bcda488978400b2280d15146d3e03620dbf8c287ef069ea27234adeed001dba5bfc4db058366921f6af169bede12cbb1dd37941c5c8a1a1b668689ca2008cbf9ebef0bc3f666e6407eb206d864c92596c7b15a1dd2d21a3374", 0xc5}, {&(0x7f0000003140)="30314dd1ea518d038b284e6b03d2f5ed80a6d0162a7d7a92cabd257d467f74cad913db6ac3ca26bcaa677b453bc8d0b54615ca9cf9b6aae7e7f13eeb3f7b0a9636e334d42e131637808c8cd5e1e8cd8abb1397d109d91422d5cc1fa2166c5edf93b4caeedfff0e8f6fe75bb3b039688d9796cd2aaccc57a430746694e4198aff8d25980708ddd1111ac7734b05371dd69be5bc7ccbf7be8b2fb2eab5434062be6e5e000158f8e92ca593869ec80772194e2b57e0e1bb8b052bbb831fcff81319867af2cbc7019f81bb54f6cf6ea6e42c1c6a1e1dab963fee12f4d0b2722bba7cfd50f104576403a12250e5e382f875059efdf3fbbfcde3c1108921b770526e0f3fcafc0a46b51521eacf63621f9a2661188fba5934cdf7adea02b1034597e2c05825ee1a754e37f9a908b86389452a458d701ec43824d8f01f0fb63fbff163faf5059a59041f0c541e357ad831a72c643c7f7823f3cd20298cc7ce775cc348b130d15ce5ef812d3f4f62d1bc2c50dcca6104c4f767ef1e08c05d9a9f6f3f5a1e0980766af70f785055fad9d1f1208acb863e1f4829cf9bb9108a04f045f78f193f8d10e96638fccc156e0d33942242eff91c08b1cbb1273e6ddae3e9ce487f92fad5df662913d0d6ca5ecae86ab0adb699cdde28e3abe39090ca5d5e4a8ad6af192a29f00fc746aa2fec2f86fc594996d9e1f0ee1c8b20635f9e485ff05e89e137dfbacd44494523cd3309f208b6254e4660a5f4cdcea41cc08d42980f0e6b273cbd4e7f3439505e3f096ca36c0376f58b090326af91abc214c56f3eed53663311875b0dd0fb1b3ed6608e694697552c208ccd4bb322f1df6f51aa1cf2dff05d968a51627580d1ac51db33d14a52b1c95701e787636914f7fd75e0183ba01ab5de3d6e87c18eacc9703ba2d56840f4a033d41d6f21a1f75f4194e5194dfcb7c1aebb124e5c3f061b459d5fe5d813814b2cd65e1ac37b5bd298351124a0f301d6a3c40ae8b1da419625c88d932236d51728c8ff8c3381b7014b30f2ae02f4b03adc31d5e706b4bdfe580415639567607294d6a7f4e8ce53765c1aa272c65f18b7f4dae249e605b8c6f7e63d11666278d70c8ec09b89cf4e71df5052d8eb1bcfabc9382b6df56c4f5f70b65db13ff43a87925bdbf9167428635310bcdfce278074467d0e5a8ab333cd12f9a8f1376359053004831adbb3bd2cc7f817febbb4a795f61c961300c844dcaed2b4c9b7184009ec51e385306d2dbbae03df78692c120aee461b5cd59a63be00b5d9695e66e5a826fc02a7ac9a7ecbd9277b61c7cb3aeaa6cd2d228e2ef61695bc6c16c07a61f34027df051b7d6993e31414bca920c4b11c89bc4e9cf1baaa356af13d747cbd63da68bc71d8d0e301f4bf68fdd27c55de989e32f79cabd20cfb2402e4cf8dc03778fb7afeb6a16ece885cf45b5a2581a0ffa5bf0d2de59a69e46a4e3794094e11d3fd8cadfb0d4425a1dacf0b59e5f573adecf5e9ae59a619cfa939bd8998d26879a7610f19d8fcdf29ce15a73b16a354b1bb4ceac15c1e584f8296b93917be5a55366b2ae5ab17936c5a589850c04490e4ead1c76420d78a5fd0ea1fb5e103edf69c1063e1a5e5056af16bc3d822407cc63bd017bf81cb6dc51ba64c7ce0229e14f16ccbee815d788370f3c7bdc499f730820ad2a2c7d8552b6790c1f91df75b767419e044800d65683fd85ef5b1d7f77d918a5485ec29ba6e16e55e0e5bea1bb2041020b7b0e9b72015832ddd8f329ba049ef7dff8499533d9695d03dc61d88b3b50e5398930b14a0e13e4fe0864e6ef28b49d63dbcbcb36be842cd6edc71ad775dbf838888b7339ef58eee2a96e0f2d6dde53d883ca469ee2e6df1422ffd1d3bad79286b655af14ac2583cb239d3ae9a4e8f67c4d7d655e43f32aa0f9c88382a58af34b914d27b72f1f45d1851cfb235378051309e720e79aa6cbefbc997511fa5865a96b391b6dbb2a9d63b848dcd26210a05d0310555bbc7a2abb812aad2d8a135e68ce7e41e7d82fa7573fd54681b224cf67e224f6f712b622a2a16cac9fbb39de58660f3a04d43664b75a1b3ee780d8819a9885dbc381c098f7736bac3486116bac1b3a8d8be4e8f4f8b2165d861ce60e6ba1b6ee96dfa7ee193c3385998a3f09c187e50727ab9f85d9c78b0c456e0d79c828faaa0d00df8ffc9417a8e96d1906553a64f9fc780a5ecee328d8d3733ab5b744333ed9e9032036be7f9bb5a924fbe0d6b3e9829572b406e970e95bc6ea415d43d7256164ca627ca72704ca9154d450832a65fb1d99a8cd0903d87ddea66dd1a547db7e5c02889676663a3b0c1e57b5e74c313e949b6c5a4f03c443e148f35b43dcc6160156f326e0ded0675883123decd102e24d16fdec15b675b8d248cf643ab3f34a1143b338d3157aa9f874c32a196b5bbcacac4b2ea6fa7aeb4cd7b01065deb527138621b2d798fa98a88716abf8e8dc7ada4e0e1b2b7b281fe1979d53b8c216ef3649a0c30aec079cacd994f681893f15960c13ca62cba68dba2759363f0d37cd90b7af27a93d327396fc01c1d8ff512e0a86ceeb0a039f820202516517d61beb6addfb347d84e40924853630c5dfb540221bd10929d8399044a104e42a6be7c2fbf2869068c20c14acac13da9df511337549b87ae18e163d7f3eb8a02c4e61147f4a60969413eb4e59c6def65d2881cac74af531f4759398096fe6db802deb241573bf8f5a10e77f1b73dfa9b0e2e1624b852216b42bc885504eff5fbb522f56e567c7e7b499491b43d59460a1526b225957254845ce48de21fd97dd013a42f653789c07c82c0c6543a2811b49814c6041a0e9da0ba46b5cb958e429bc4e4498f504f98f45c8a8b2333ff05bc20ab9ff1edda0d098416dc9b16c41872b787051dbb8beb5270f6b61c7888fbf4569120bf3f57f0932d824b35c18869a57a4b2d2ee938e3246b64815936dae7cafa561f0c46fd6bd5acb1af0ef22e0e7f7a47684e810250d3caf61b3df5e628cc93193935271cc4e1b75176a1226743cc538022212f5464c928a7773467583f315164ad92ece1953bf6cf75e891f8e23298bf27acdf771a3a1802b4ccd0540cd8f79b07096d97a9900336cbe595cc11370d654562cbe01c93dc8e669da249f827a114d4ce08e34c0fb8d1717b1b1a739b88cd0c734e1fd9bae7ff944ec79b38f194278e791bfc2db1b8c6fedbe36fdc4f80f974dc744d7dab8ec0bb3dfcb96d0facf2081aff2f10f45bb817b0b02a42b0fc544db32c21673f612fb663e84966ae287352cfe26e765af91faa8397798e59dfa90259225b846922d60cd4a62b48f83342f9d10ecaea9bd7ed639ad20c1673eb684984a6522d1995267b7da8429726126ca1c910bda87d8e32d1beb2894a19a00ff244b01a9658b5df8ae5623e85d3c16560ca8d1d05050220c7975a7eaabd93101a5b72a0286d8a3661be3cf504402eedc24869f009b8beb207fedc1e96b39773cac631d69e36b1c48196a7d275f189209c9afe528e35743f6559892d4bbc0db35cc875114c8e4d6db70ee90a804523a47a8022a13e201421802a4d35533acf4668e5b414f2cfc030b7b619dd0aeb7e971d2c2e95b9c0671616bf2df1b42331a1605f967eaa5a88ed6c5509f63458d7ae7ae22580a5c323ee11d63c65197a5357d98958a2eaf81bc073e5aba92d266da5ae1d68bffb3eb0d8a2a263e9c60cdc7cd24920a6bf46256210979ad8c9371f8a59375eb45bb23071c19242c1b44fae18895d54fb101873444f4a46ae7da1aac1ce329ba0adc4da01144b6ecbe3001eef944a03714270698379fe724148a413b31d6058dd76d51f3a4554ed4a747f87963b434bbac4d4aedaeffce504eb2accd1a9f2e2f6b855872766a3feeb9fc972ab41ccee631bb6dcec74cdb2c85f9d21bb4549aa0b4d435ec3554906cc3c19044a5059f73ddc5623c8ed507f590e4ad6d750d67d5ea5f5058c154d822b151850c3fae90d4b29954eceb4b8092519553805706943e38d632cf96887707d91bc26e421c901ff3b8dc3b83cd8717457ada1e2d1f5868554a3be1a9c565588f8ae1fe182226ae56b8aff6c169e5bd1f872ffe497d178319b1aff3d12c0c1dd88c58c6c3e8658c6f3bde1e7d5aadba870dcc201e76ccbcb560a381dc7e6c3d4075c4aad1af08e1f0acf9be7d5bb77b6c3164317c1a315ee0c195dcc1e4c0a89b5340d5d38c4b386f70cfb9ab8ed97847187eb285f4b01f43752078098a2862f1d8b39bf16590c794e6d34120dc8e283be612fd276cfeaf3681ed6a384cf4c5c86f2ae3c17b8e9d279d87abf81923e0a0c6a06c793ba4901f59b092ac7c96f150da5bea19e82ad1b9457b98722bd20f81d9f39ed5df83b9b809ed5b4273de655e2270994cee67b9072dbd1e3075291f1c2b560a064446a401f50af44e38a0ec5af27f40ac8850a785514d376d0b634607376453d0eb0b824a5d3a0152b43900ff4291460442e4f238b23076b931cb7f5356073064f6407fe8a17acf3bd1210f423c3349b8a3f0eb6c372caab03738ff1fa7502f9cb82b08a5ebaa83d8939a43dc2a0931561e24ad435317b6e64b824d3c1d5bf679497790f38287dbd2dfaaf4cd3209f7586b447110daa9756cadf5103d0c84c08f2b2fab93d296e495d7b94c683dd50c31d7a402c64d2a250a2f711940199a6cc9c6f9660a89812c0146edcb2899301410ade740ed5a475f927acce5b40d9776893807866711c7e1f2b21a9c0c18f4a7bba4c5b57525c8a4a81d90645f303e34fdd78f1c9d4d09e262c0d1ece0ac700b1f95c81479743189c9462e41c1086fe44e045e3af6e5aa1e9c453e14978c43a3f261bfce1b9f4a154ce3568a9652c2e84c98712dd87b71c70f3039949b25b4495cf5163438c4dcfe9cc2e8667a2c4a6059111c56359828c670158fb889f1a57841c36681c145d26bedbe40a9cb0c1842be7d913e5ef346f8e2f2595ad984d42fdeeed5d6ccc1a0f536808a31f29962186e1517f9e1b45c85f3c8eb3595f1a7667f980d20489d8104404d53258dcc7f4116732684d45c29fc09cac", 0xe01}, {&(0x7f0000004140)="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", 0xc00}], 0x7, &(0x7f0000005140)=[@dstopts={{0x18, 0x29, 0x37, {0xda373314d31b919d}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0xe0, 0x29, 0x37, {0x0, 0x18, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x7f80, [0x4]}}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8, 0x85, "0de6d08198e5a34815e07da3bde8c959c3f949c3cd4013a66fa49e105411ffd0cef4ca749e3b20e193aaf9cc5d8a4a6e5bfe31dc0227bc6d52056211b39c44a7dac9be0fb7fa9bcbb0dcec56ab676328e223e9845d4ce30248f65df02b5bdc3c03adcf24be379be86c357e6224e7adc54e0bfa8a2b36e3250897a69b28dd9343bbddb069c6"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2d}}, @ra, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x110}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x7, @empty, 0x2}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000004c0)="5247d15247d3de2f043303000000000000008f8bfafbe3013c4d35c428faae43e5845cd82bba6cec755e28a344dbc826cac696b5fb65cb5ae50f6ba8a280c5f899817e5d79f79db4ec11bef78eba39f06b1ed51b48fc2e94a02d", 0x5a}, {&(0x7f0000000340)="97f9fa790482fd4ceff6b0950cf3e31c6cbe7a22", 0x14}, {&(0x7f00000053c0)="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", 0x1000}, {&(0x7f0000000980)="4c64b0ddb30a9d6c3fdeaa3b255143ef8260036d4a8e5bfb291a9b5dc627519a486c6181b0a6ffc79a97c2fc7cb906b9335647e65d20b5ee113499", 0x3b}, {&(0x7f00000063c0)="7682123a1474c84ccc44ff06cb14b1ca914cc11c7379fce254bf8a8b32e9c3f72941cbfa4dba78d846aaebc2a7f9370eca59f9899036f7dff9434e41e41744317aeb4332d1133a6a1c537f76da8c8d9171461ced8ff3ded809c7742766e6407abcd92bcb368e187c8fc49069fe3782e9bdb9f947e666c59f9ac44628a6fb99bfa7614f90b90ed8c0f42a21f0c99f289c2d9d10fc34020e5057c7b52947280a9f05913a1300", 0xa5}], 0x5, &(0x7f0000004d40)=[@hopopts_2292={{0xd8, 0x29, 0x36, {0x4, 0x17, '\x00', [@generic={0x8, 0x73, "2958e3397c1c2e46c6d1c258577349b24bab2d3f50f3f9fabaf2da514afc2bf75a76fe085c76047635bd295cdc1d736c654499db36617e9e2575a4a0f9836894af2ef7a06ca611363e767b29b80a259a20abfc8e22361fb96159c0abe0b7db0934235e6890bc58dfcc7ebba8ab8da199d54a51"}, @ra={0x5, 0x2, 0x1000}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0xd050}, @calipso={0x7, 0x38, {0x2, 0xc, 0x1, 0x2, [0x81, 0x0, 0x0, 0x7, 0x8, 0xbe2]}}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0xac, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x130}}], 0x4, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x1, 0xa1a}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x3fff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000000703000000000000000000000000000900010073797a316ec968af"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a5fd00000001000000000000002fe6e3c4312dee72547d0c37cdf681"], 0x14}}, 0x0) 3.088461926s ago: executing program 6 (id=2970): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x6666, 0x8802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3a, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x8, 0x80, 0x1, {0x22, 0x4f7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x4, 0x1}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x4, 0x40, 0x6, 0xff, 0xf9}, 0xfb, &(0x7f0000000080)={0x5, 0xf, 0xfb, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x40, 0x0, 0x3, [0xff00c0, 0xc000, 0xc0, 0xf, 0xc0]}, @generic={0xcf, 0x10, 0x2, "9c129497a6b183677be11acdd43fd78e02b539b16929c30e7aa3e58839f1b052b3fe2453b22e1126055eafc17c759dc5a9d094c4a32ccd4232750f8f96ab327225e24cecebada588ac01c61bb3ae466455c70850dc35f42b9d5b9ef5b9dc55f6b7b86af14c8a925bef50d30b3771bd1ceafe46f60f782ca49c1cdf4ad34878f772d9faab5409fa48d03c4bb9440f0de29bdbb2d5e92cdcfbb365e3e573294027788aab02977f19dc561b7477475baa2c2dd4c2ca881fc6b0593c6d52c08f52bed333cb61367cab20bc2ea361"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x4}]}, 0x2, [{0xbb, &(0x7f0000000180)=@string={0xbb, 0x3, "3c25951c86ab1a243c3d86dbbcbe8136759e18a73fe16615575cfe65fc63402bb3f1112303b32050288425c3bfe4dfbf69d4c1780529ffea0e5883c2681e5d83e9eff70d1f4903fc261eeb878cc4082da06a779e3dadea621e105c0b50c8f73ae3af746ba198e497981e724189c341d0d84c8c7a93c624156968d7656d29b7dbfdf2d52d370561aa07a1801ba51cc6a76406203f2e230c600ab2aa7ecb6c71864cb255e04f2c122a4eaa102064cc686e5241ead60f6c97de60"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000940)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="001410"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.923127006s ago: executing program 5 (id=2972): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x54}}, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x12127e, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1e) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r2, 0x5501) fallocate(r1, 0x0, 0xb7d4, 0x8000001001f0) 2.74603186s ago: executing program 5 (id=2973): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571293f00000000006600010200800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 2.579854428s ago: executing program 5 (id=2974): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2.490310311s ago: executing program 5 (id=2975): creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000), 0xc) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7f, 0x101000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000001980)) r4 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) r6 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000080)={0x1f67fffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x6, 0x1, 0x3}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ff4000/0x3000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x8ba, 0x0, 0x104}]}) 2.297216349s ago: executing program 7 (id=2976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b1f00000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000071c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) 2.071855657s ago: executing program 7 (id=2977): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd29}, 0x20}, 0x1, 0xd, 0x0, 0x2840}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001440)=ANY=[@ANYBLOB="f157ea1cf50f9c833672f946ad3bb66fa4d63117649233937dc7e2e1bc73242d0892aa9e3475a6306ad3ab889fc6bc109f0d7feb48cd82c1339aac721f1a9384f8052defa8f8a7261bf4548cf49a17f60ca02468bba94d2d30aae73ea65bcd3d70d62a85851c7bb3cb6f1ceb41249506af93b9b4802a10ef13be41dd2408d2defdab1f1e5ef35d5e8ebaa76cd6962adc37be870b84211b1bba4d02f26a05ed9c1328154051b3b64c119dff99c33456ece0682d9d67e72295593105cfaa8b18cd9ce723aac2a0d1fc3c226a8028db92effa1c69cbf5e4e44d7011dcc963d9472842da4df0fa5bb9a5ebdd71c9f5d3756de752df24793daa6a5958a5a52740732a0f186a7adc9ed4293ff3a6a6b191e4101ad73e54c8a252eb77f04b170346488b732129109fefb121c13ff538b45ae863cc17773d4ef4594f73b3bf5037a5206a1006535b6a96da80f45e9242dc5782b88e79d869c91d8bbcbccb9bb556e4497a9e813a5412838baef58f037f5962653cc47c2a4e7855a5c564d0a614ff5462c78f068f268cf7c018f8cc8f352829b2670a707b083f6aaba0ec4aa342a21215e133dcb28b7e0b85c8565cd581906d6796fd62377d262171af4ae99aded491be450241b391323fbb42602ac044cc6f225f408c37afad4b6aaa2c0ba052e5b46a3f0e00fab60791192e988fbcb29817dba6d2da87d9767b0cd32c96162233dbd1ea67e65ea2a66b2980f71584f95b16761fd8884b23a316d9f9b49609be850e3df8575467e5bf81a5cd8fe94099860a00133f47103288960a8cdce4dbfbbe03cf8518aab0783b8adcc42a7b284c1f5e107ffa404191ae813707be12696209e87173107996ce7966a1c12fb61248f10d54ee50cf999ee646160875d771bff37e8f6ece6f1a5ec41e860f980f5845dbbc6501d40ff1d7f40eb8f3b2a53faf50bbadab6d375f2300e791c69541d798dcb908228158456d34cb39b5733d9a7cdc5eaad76c27e7bc9aa1d43d1f67d4db026a976ed9bbf533bc432fce01a208e44d9f4e200a60aa96a30ba9f965d47876e81090a1fd960c7fd722acd37c9b8127b885b3eecfe71bd98d2dc71e712c30da5789c8b1529584c689c80183b2fde52f8473e41306fb320ec47512151b1f17319917fe3715c0205dc9a4ce15df6cb3a472ce3243ee8d380b8e423cf5694eaed0cf3370b7d8f8cf2ab6e6f5361ccf20508d93891f9865bb1e3082ab76fa65b81af3eef98b4b4fcd5f70cb5219b17acd158f3a99c80f7adf398d9767d7476a10261adbe25c8646ac69521e6efac358608febfb277507286b5c6dcf8ead5145e71c07d2733b2545a129418ca34d9230f62d7d2634a6a3bbad57f0bf792f4576bdf4de429b6f5496765f123f67390dc57cd4306432277468e2822a7c5b279b91d7300e000658908668e9004eab964409161a89fef1c47eaf218a8b5dea032f521c1194201cb151066541faffdd12070b0b056b16cfcaf30527b605440b61ad7241b19fa7d3249f3dabdf592f1f3f21bc71fce503570d38107628efe2d267a59c1e4bbb4e75051d7666ae869b16698c8071e1aca01ed89d379a7596df66ec4ba1c97b6603b261a7e3895f34097b600d04233d2931e650e0b2348de01598e103f21354208f4ed80f20ad68d0982444bc2366ce29e961fa0737bfe8f32fe29875eba47feefb7a21b649b919dea5d64dbfbba7f105784584b5bb131a90e34dd203a479e83bd21485763d5a939e07c8ef06b735b0726eb06ade6ff53a7e994fff48650b5791956607366640d791e3700eccdb4027ecbbab7390f0a969d0921540d71ba2f3d49120721cc31d5556c4125e41cacef9703ef889d838c2ffe2cf3cfc7adce70e700384a986e839e3f934130d03b5568f51edc7dd8449d34eeb0329851399335a0d76a454a4448f4e4a9cb64e0226c3d7d16f3c44ed384ff4dc4eb98795bd5ac86b7451706d22fd233e976219ea30d14eef4a17b85ddaf14dd4471f977f2536bd552869fc110110fd31ae2b784eb696862253d23c65482b3baa0c8e8d936bf4350299a03af2d76175cee865ff68953c3112781a13867167ea9c891cd1b377d59bdffe0490d3821a84e5e2fcff4cd1b90823d49a24ff5676e72b06df105917dd508c55ca36b08bd84759ec931358a8f5f652b80a6e2fa2c2aea72090c253b4f847f960f7d0b9311aebf573dfa771ce49201a0838c42ec91b0e15cff358d4febead3b0bae4c1f4f98d53f490849c2f6b11773a22af911696b6460555caf9edbe6658f57465863ed33d49c96996d8e2ab4bc58fe3b2304c5cf1aab359fe6a01f3857f7ed208e4a527a49f3b961c193a1c3c6de3b3f457694d802684af9108b2ce271f5c26fb6f608ba4b7df4864154f1221cc1ac36a10c882affe00315d0146d0152d49858f0b2ccf7b2d6c0751b0d044da0d520713e718c4df75535d5b1a13111a235c5d9c2f60fd09cf418ea2ad6d7b5ffccc64fe543070ffa9a7ec400f26025da9871acaa44acbe4680504b9c33c0e5063aee4fd26d7073cb773b8509fefc28e3f1cdd9c0b7e9bba0547d6d507dfba5fdc03fe4ac8ccd4baace4346e34bebb684f22e8daf01885db915ddbefa0f0aae311bec758dbb158a166e8f4951aecd4e42add9a9615f5241fc48d063298ade02d2203bcbd7490d560466b1d77089311d884e797158e6221b25dfbe93e0b06f18a896ef76f9c60d525c1930b5db9d7baf33c963e4c62eaf77d2377b57fdc6e2bb335ebda0f300ca57a54ea6799ada874c2f936601dae69bd6749b965218f7d744d2c211dc462902c1d30190480bd868cdb8142790de606eb08c8fb84ebfe2737f01ed4c7d379de85da5e313b06a4f0c940b2736c260e7530541a9c5f612b688e7482d6bad12f270e768520eddde0727f5e79fdb2842a9cfe542b4dc3bed9f3b2e3b5b0be060321fd3582a704f21c7539685fcc4cfb82fa751308dcb4393b505f4da588c538c05787089bff5ee1811ed5a3a86e6222618935ce30202a2a1faa4c3a0fab747d9032101e81dd993b7dd8226fc32180c840864f94c784659483ed2513891873d9f21013031f5d31767de6f1c53b4443b96485ee391a6217978d24e9222d6f35cf62f9914d728942af6d8ac474a8ba51604e0349ef43ce71308c58f44a42ece8906a0b6b682a93b7df3372f2f3bc0e39f2798a34cb48c6251dcac9b2eacf4546c0672397118d688c9daebc5e475c45c03743f5733da996a54045b712955b85dd8cee91152e544bf960a7fb8dbbce0865b60dfe923be29c829ebe354c7cb07111999cff6c73b77898edc1fb0dd630035ced77002bbc771159b26f87d52634b4baa12c03fa1ebae51cb35f3dadf8c4b05379738c3bef0d90a9121d8f6f49428d6b890968c5fd31f880ba19e2287b46ed378ffc2bfc255668b2911b28380e63c17c59851540fc88fbe2aa434f55743661e363f287fbb460eb4cd27728da0373f2ad1f7abd2755120ef732845209040fc8054bb4870965ca88cbdb4d4db7f6885567c5f12373805a613589d39e317931e9f267028bbdc95413d1c2e624fd8c62b36dc6635eaff65e4423eef575bcff70fd81a9ab6ea0ca8942e858fbda7f942326450033e97fd828113052f8ca7a0bcbbb937bf6ac085ee7c97d88ee2c38b9dcebdcc8462a0bd244f72d30254b00ddcf398ef7a077f8256f4c649704f9eb2cab07e6c6bbfcea89fdb217fea338c887a990eac9166c5804bb1a56382bedb220df7f9182a08202c11ffb7e99849cede946f5018625f7ccf14b05a75aadccc5ee3c04e34aa1e9517edc6b5acf06449087cab0bcff53fa3859c94d251dfa928cfb0d0b9ab3cb798097b3bfcccdf14ccc8261e6250ea8b08b67853c2916dcc09c18af7435957dd4a59b3363b439a37fbd8b18192db85c30c83b04cff5b97708b1ba91a5c3f487159edd16858a5fb9d7fa38d0b67cc25c5187ca6875eba113eea7da5eb6bcf4a34cbc1353cbe245d3b05f284e848693137dd8b396a951ccabed14ccf8b45c0d87521422f29f98a0fbd12ff4b806ee46527af554987a04e7f9e825d0130609f62b4789859debda1353633137627b3f2acc2f3a842092f26da5c5ce240d771dd95a3b8abc50b48afe33a999703935359f7142bdf55d929a3cced109ae6a589eae75927b7469d3f37945bb9305e188f25a4adda5d880261dba46eb7ac54c8551e8f34e18e34ed600745ba89b51bb50851e4ff7589e386cc1ea5d60861f0fcd6f2e676eadcd5005f632f8f54be2f5e70431c17a09fbf3e5f4df61eb7e114c9472a2ddad2d4136f77a3908dc7cf82c8519b67c82d9ffb85367f17883db6e2b7dd5e78f73b6a9c96fa860032ce2a79253f2718baca286ac1fa73f939bb6e78db65a87c6870e3314cc23256add6646b6eb2b5e99451b6846c4627ed5f96d82b815dd41a5027143a8cc690a6da6d7a6cda4afb554cc1212c87644c5edc2f7646db77b73043bf752a550e5fb282fc199efa0f31475629a7275ce3d692a7c53765c060d7bc98d1502ec8ac2bf77dfbed8d7e9504f167db7dac0de7b087330d84e0dc85fae572557938aa814b0f30f631466275e78555b42c40d951e2c521dd96ad14cd325a052b87889b6f656774b49cd1411538526245ff8c2f750940fbee377e7e931a62b12e8d6574ea50b13f26348d20983c6ad05f6f68e5c0564db85c779f3b738e5200d2a8dbf8521594e45064d44507c7ea80adb3bd5f27675309f35922bd7f970562137e5ea60594abf4116cef0ab7ea6c88ec202f30a859a2e1c8807fc7aefa274281231fdd1141c46c0223e4924e829a32ccce9c9847d7ce90581365d8a9952f210ef65eebacc28863ceb35f8e44a8ef0dcef8dfbf71d91e83cfcca4e3bae7a6689958d120e7f294a4a611b8d3a5c6ff6bed1ad7cf172cc97adafc1eee1df7b96a00355c69ae1ce6bb4784ac93cf31bdd81b978367d05ca76b133708b83f0b8a3e007a388888341d5fb8e02a006dc54685e48160b13e3c53780e9a415b2bfd917a1a8c9ccc670a65f92b4c500da437c73c0fb78fc6508fbe68ec7bfde33e28704b5f935dc9ed0611d66e772da78d588dc889b52fa817f7eb9d454161ab37ee3ed55c83b31dc356f7a7c723b892019baea501d3bdbdf3fbb262d625363734e4c43f5cff8fa6d438e66ab04a48d06216c354e27da9555d29ca0223e5dbc1f1c77ad59c6964971f47099cbbd238a500c250fa4979b8585ea5fb43d1478fc436c0115ff00045a2f2c886f5e83a3b5699a37bf81f1dc51748d4522b7dd19215a8bf16268028a79d5fbd0737f446d769e973447a8b2dbdc1b60cf915328d5f234bff757d4e46ed92c783dfa484b23118e98761b4e528d61b5f1bdce3971ea18ad82a5d17d5124a0ddd36b94e669c19d65f1d656df7c79a847cef3d727e0c29d5088aaa1db6476110125fc0b59a33dd72cac47e25789f6caeabb327ee6c1b8cfadae85db95012519f0d7f6ba039178377e48a5184d4e9b329260352e6df46a14bad634ddd326747a80ea53bd9976345ce739eb524aec5e550fd21f143e15086bc5eb51695fdbd76fb6bf10d1a67f82ae289db4728885ac88bff7350fdf6dd90b73c05246378a71fbdec09990cb0c15146afa249fd802030edfb94a94f756701e951c0e6fc1c3efad7590d40544f6164e19842f2e3f51dc0ee752d4d5f4a5a1f81fe19945271e91869833f70c8c9911ca4cc3a0d44752e055f6be507ae702995ecff90effa0cb648bd0ef3bf82f44ff24650d7964b32ade16139a7b1934b848a36ce1987"], 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='target PCI:\v:8:1f.1\x00'], 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000018001a8008000280040001800c002d"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) syz_usb_disconnect(r6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100002192ea0845050c800a03010203010902120001e0000000090400000079660100"], 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) clock_gettime(0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.99930988s ago: executing program 4 (id=2978): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) (async) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000340)) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000340)) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40) (async) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x97ff}, {&(0x7f0000000240)="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", 0x5bb}], 0x1}, 0x4000000) 845.319927ms ago: executing program 5 (id=2979): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x480, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @local}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x21c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1407}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd6ca}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7e82c963}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x39}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9b22}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x22}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8844}, 0x40000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r11 = accept(r8, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}, 0x1, 0x0, 0x0, 0x48001}, 0x4040804) shutdown(r11, 0x1) recvfrom(r10, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES16=r7, @ANYBLOB], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 595.781763ms ago: executing program 5 (id=2980): io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x0, 0xf3f, 0xfa11, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) write$FUSE_STATX(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 167.696903ms ago: executing program 2 (id=2981): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000015}, 0x44040) mprotect(&(0x7f0000b35000/0x2000)=nil, 0x2000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES8=r0, @ANYBLOB="dc502da5190000000000000000000065bf1ac5000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)=0xfc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$incfs_metadata(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000405000000000000000000000000000000000000245a5a3266a72d06d7445ccda0c4f6b36cbf17a5529877d0026efde93bce2a5798466ef80850fe7d9cb7fb92c51eb85f"], 0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000200000000000070000002800018014000400fc020000000000000000000000000001060001"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@local}, @my=0x0, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x1}) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x15}, 0x44810) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x20000) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) 0s ago: executing program 6 (id=2982): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009", @ANYRES64], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) write$char_usb(r4, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@host, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e4101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) timer_create(0x3, 0x0, &(0x7f0000044000)) kernel console output (not intermixed with test programs): e UDC or it's busy [ 784.289553][T15242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.002154][ T5933] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 785.109312][ T6481] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 785.329532][ T5933] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 785.429229][ T5933] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.475475][ T6481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.485862][ T5933] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 785.495371][ T6481] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.511940][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.524545][ T6481] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 785.558309][ T6481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.594701][ T6481] usb 5-1: config 0 descriptor?? [ 785.673755][ T6482] usb 3-1: USB disconnect, device number 121 [ 785.750784][ T5933] usb 6-1: usb_control_msg returned -32 [ 785.762287][ T5933] usbtmc 6-1:16.0: can't read capabilities [ 786.038387][T15267] sctp: [Deprecated]: syz.4.2498 (pid 15267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 786.038387][T15267] Use struct sctp_sack_info instead [ 786.191107][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2502'. [ 786.548896][T15289] loop8: detected capacity change from 0 to 1 [ 786.610671][T15292] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2504'. [ 786.693899][T15289] Dev loop8: unable to read RDB block 1 [ 786.792395][T15289] loop8: unable to read partition table [ 786.823463][T15289] loop8: partition table beyond EOD, truncated [ 786.853058][T15289] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 787.715614][ T24] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 787.801792][ T5933] usb 6-1: USB disconnect, device number 107 [ 788.060590][ T6481] usb 5-1: string descriptor 0 read error: -71 [ 788.071585][ T6481] usb 5-1: USB disconnect, device number 102 [ 788.084721][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 788.193256][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 788.218339][T15310] input: syz0 as /devices/virtual/input/input33 [ 788.377849][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.401900][ T24] usb 3-1: Product: syz [ 788.406475][ T24] usb 3-1: Manufacturer: syz [ 788.413381][ T24] usb 3-1: SerialNumber: syz [ 788.431177][ T24] usb 3-1: config 0 descriptor?? [ 788.443385][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 789.226297][ T30] audit: type=1326 audit(1759381577.070:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 789.268567][ T30] audit: type=1326 audit(1759381577.070:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 789.352056][ T30] audit: type=1326 audit(1759381577.070:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 789.425434][ T30] audit: type=1326 audit(1759381577.070:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 789.512144][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.522014][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.591885][ T30] audit: type=1326 audit(1759381577.070:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 789.625429][ T30] audit: type=1326 audit(1759381577.070:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 789.652751][ T30] audit: type=1326 audit(1759381577.070:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 789.682012][ T30] audit: type=1326 audit(1759381577.070:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 789.732040][ T30] audit: type=1326 audit(1759381577.150:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 789.838079][ T30] audit: type=1326 audit(1759381577.150:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.4.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 790.744799][ T979] usb 3-1: USB disconnect, device number 122 [ 790.765244][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 791.433357][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2518'. [ 792.028864][T15350] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2520'. [ 792.209879][T15352] loop8: detected capacity change from 0 to 1 [ 792.230618][T15352] Dev loop8: unable to read RDB block 1 [ 792.247203][T15352] loop8: unable to read partition table [ 792.274812][T15352] loop8: partition table beyond EOD, truncated [ 792.281535][T15352] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 792.925384][T15366] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2523'. [ 793.445391][ T5911] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 793.637594][ T5911] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 793.655196][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 793.756962][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 793.992468][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 794.067739][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 794.262390][T15382] fuse: Unknown parameter '0x0000000000000003' [ 794.319493][ T5911] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 794.400105][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.494325][ T5911] usb 6-1: config 0 descriptor?? [ 794.507909][T15374] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 794.921789][ T5911] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 795.230960][ T5911] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 795.283585][T15400] netlink: 'syz.2.2532': attribute type 8 has an invalid length. [ 795.385713][ T979] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 795.502866][T15397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.521987][T15397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.559428][T15402] loop8: detected capacity change from 0 to 1 [ 795.567836][ T5839] Dev loop8: unable to read RDB block 1 [ 795.573430][ T5839] loop8: unable to read partition table [ 795.583159][ T5839] loop8: partition table beyond EOD, truncated [ 795.589415][ T979] usb 5-1: device descriptor read/64, error -71 [ 795.603741][T15402] Dev loop8: unable to read RDB block 1 [ 795.613887][T15402] loop8: unable to read partition table [ 795.620409][T15402] loop8: partition table beyond EOD, truncated [ 795.623702][ T5911] usb 6-1: USB disconnect, device number 108 [ 795.634967][T15402] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 795.848685][ T979] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 795.985476][ T979] usb 5-1: device descriptor read/64, error -71 [ 796.095657][ T979] usb usb5-port1: attempt power cycle [ 796.389312][T15420] netlink: 'syz.5.2538': attribute type 21 has an invalid length. [ 796.397524][T15420] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2538'. [ 796.406741][T15420] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2538'. [ 796.545585][ T979] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 796.640472][ T979] usb 5-1: device descriptor read/8, error -71 [ 796.946909][T15425] syz.2.2535 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 796.965419][ T979] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 797.002447][ T979] usb 5-1: device descriptor read/8, error -71 [ 797.202507][ T979] usb usb5-port1: unable to enumerate USB device [ 797.484670][T15430] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2539'. [ 797.665541][T15438] program syz.7.2540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.805563][ T5933] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 797.967506][ T5933] usb 7-1: device descriptor read/64, error -71 [ 798.216257][ T5933] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 798.365550][ T5933] usb 7-1: device descriptor read/64, error -71 [ 798.483827][ T5933] usb usb7-port1: attempt power cycle [ 798.875366][ T5933] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 798.895877][ T5933] usb 7-1: device descriptor read/8, error -71 [ 798.968324][T15452] loop8: detected capacity change from 0 to 1 [ 798.988727][T15452] Dev loop8: unable to read RDB block 1 [ 799.007024][T15452] loop8: unable to read partition table [ 799.048169][T15452] loop8: partition table beyond EOD, truncated [ 799.059950][T15452] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 799.320408][ T5933] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 799.366031][ T5933] usb 7-1: device descriptor read/8, error -71 [ 799.497067][ T5933] usb usb7-port1: unable to enumerate USB device [ 799.675665][ T6481] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 799.847760][T15466] netlink: 'syz.2.2550': attribute type 8 has an invalid length. [ 799.855818][ T6481] usb 5-1: Using ep0 maxpacket: 16 [ 799.868967][ T6481] usb 5-1: config 0 has no interfaces? [ 800.015549][T15470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.031844][ T6481] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 800.042947][ T6481] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 800.054541][ T6481] usb 5-1: Manufacturer: syz [ 800.064478][ T6481] usb 5-1: config 0 descriptor?? [ 801.205382][ T979] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 801.607315][T15494] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2557'. [ 801.743164][ T6481] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 801.944373][ T979] usb 3-1: device descriptor read/64, error -71 [ 801.971294][ T6481] usb 6-1: device descriptor read/64, error -71 [ 802.130380][T15499] input: syz0 as /devices/virtual/input/input37 [ 802.395733][ T979] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 802.407424][ T6481] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 802.531156][ T979] usb 3-1: device descriptor read/64, error -71 [ 802.559895][ T6481] usb 6-1: device descriptor read/64, error -71 [ 802.665547][ T979] usb usb3-port1: attempt power cycle [ 802.687363][ T6481] usb usb6-port1: attempt power cycle [ 802.953858][T15505] openvswitch: netlink: IP tunnel dst address not specified [ 803.027523][ T5933] usb 5-1: USB disconnect, device number 107 [ 803.035816][ T6481] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 803.073977][ T6481] usb 6-1: device descriptor read/8, error -71 [ 803.077216][ T979] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 803.200495][ T979] usb 3-1: device descriptor read/8, error -71 [ 803.337499][ T6481] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 803.793470][ T43] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 803.844657][ T6481] usb 6-1: device descriptor read/8, error -71 [ 803.915380][ T979] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 803.966190][ T6481] usb usb6-port1: unable to enumerate USB device [ 804.038429][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 804.160335][ T43] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 804.201220][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.284165][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 804.344665][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 804.395418][ T43] usb 5-1: Product: syz [ 804.399757][ T979] usb 3-1: device descriptor read/8, error -71 [ 804.418078][ T43] usb 5-1: Manufacturer: syz [ 804.428754][ T43] usb 5-1: SerialNumber: syz [ 804.549101][ T979] usb usb3-port1: unable to enumerate USB device [ 804.715150][ T43] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 804.969275][ T43] usb 5-1: USB disconnect, device number 108 [ 804.992392][ T43] usblp0: removed [ 805.363270][T15535] fuse: Bad value for 'fd' [ 806.053667][T15544] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2569'. [ 806.284850][T15547] netlink: 'syz.6.2570': attribute type 8 has an invalid length. [ 806.472469][T15550] fuse: Unknown parameter 'default_permissions ' [ 806.844409][ T43] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 807.038490][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 807.047862][ T43] usb 5-1: config 129 has an invalid interface number: 155 but max is 0 [ 807.092054][ T43] usb 5-1: config 129 has an invalid descriptor of length 36, skipping remainder of the config [ 807.110666][ T43] usb 5-1: config 129 has no interface number 0 [ 807.135111][ T43] usb 5-1: config 129 interface 155 has no altsetting 0 [ 807.174045][ T43] usb 5-1: string descriptor 0 read error: -22 [ 807.180628][ T43] usb 5-1: New USB device found, idVendor=2100, idProduct=9e59, bcdDevice=8f.a8 [ 807.195238][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.239668][ T43] ftdi_sio 5-1:129.155: FTDI USB Serial Device converter detected [ 807.256953][ T43] ftdi_sio ttyUSB0: unknown device type: 0x8fa8 [ 807.441042][ T24] usb 5-1: USB disconnect, device number 109 [ 807.495781][ T24] ftdi_sio 5-1:129.155: device disconnected [ 807.564052][T15562] loop8: detected capacity change from 0 to 1 [ 807.576699][T15562] Dev loop8: unable to read RDB block 1 [ 807.582384][T15562] loop8: unable to read partition table [ 807.589900][T15562] loop8: partition table beyond EOD, truncated [ 807.599931][T15562] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 808.025473][ T43] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 808.167615][ T43] usb 3-1: device descriptor read/64, error -71 [ 808.195503][ T24] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 808.368909][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.380056][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.390990][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 808.404456][ T24] usb 6-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 808.414247][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.425474][ T5945] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 808.433147][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 808.446102][ T24] usb 6-1: config 0 descriptor?? [ 808.585507][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 808.593001][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.605869][ T5945] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 808.624271][T15575] loop8: detected capacity change from 0 to 1 [ 808.630596][ T43] usb 3-1: device descriptor read/64, error -71 [ 808.637245][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.648427][ T5945] usb 5-1: Product: syz [ 808.654096][T15575] Dev loop8: unable to read RDB block 1 [ 808.661762][ T5945] usb 5-1: Manufacturer: syz [ 808.668512][T15575] loop8: unable to read partition table [ 808.674946][ T5945] usb 5-1: SerialNumber: syz [ 808.682518][T15575] loop8: partition table beyond EOD, truncated [ 808.693828][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.696073][ T5945] usb 5-1: config 0 descriptor?? [ 808.715479][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.740744][T15575] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 808.751044][ T43] usb usb3-port1: attempt power cycle [ 808.767035][ T5945] cdc_phonet 5-1:0.0: invalid descriptor buffer length [ 808.774423][ T5945] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 808.861082][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 808.867570][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 808.901347][ T24] usb 6-1: USB disconnect, device number 113 [ 808.962150][T15578] loop8: detected capacity change from 0 to 1 [ 808.971575][T15578] Dev loop8: unable to read RDB block 1 [ 808.977440][T15578] loop8: unable to read partition table [ 808.983202][T15578] loop8: partition table beyond EOD, truncated [ 809.035865][T15578] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 809.096075][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 809.277375][ T43] usb 3-1: device descriptor read/8, error -71 [ 809.305628][T15583] netlink: 'syz.6.2582': attribute type 8 has an invalid length. [ 809.356268][ T5933] usb 5-1: USB disconnect, device number 110 [ 809.547081][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 809.623887][ T43] usb 3-1: device descriptor read/8, error -71 [ 809.655448][ T6481] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 809.735680][ T43] usb usb3-port1: unable to enumerate USB device [ 809.815420][ T6481] usb 6-1: Using ep0 maxpacket: 32 [ 809.866485][ T6481] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.879414][ T6481] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 809.888746][ T6481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.901313][ T6481] usb 6-1: config 0 descriptor?? [ 810.219364][T15595] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2586'. [ 810.321542][T15596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.342794][T15596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.587046][ T6481] usbhid 6-1:0.0: can't add hid device: -71 [ 810.605017][ T6481] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 810.668611][ T6481] usb 6-1: USB disconnect, device number 114 [ 810.975427][ T43] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 811.095436][ T5933] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 811.125382][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 811.132090][ T43] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 811.245402][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.308290][ T5933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.351428][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.351943][ T43] usb 7-1: config 0 descriptor?? [ 811.374730][ T5933] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 811.383849][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.418591][ T5933] usb 3-1: config 0 descriptor?? [ 811.650721][T15615] netlink: 'syz.4.2594': attribute type 8 has an invalid length. [ 811.877348][T15605] sctp: [Deprecated]: syz.2.2588 (pid 15605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.877348][T15605] Use struct sctp_sack_info instead [ 812.176961][ T43] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 812.192539][ T43] asix 7-1:0.0: probe with driver asix failed with error -61 [ 813.083838][T15636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.092746][T15636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.192544][ T24] usb 7-1: USB disconnect, device number 68 [ 813.816772][ T24] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 813.975423][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 814.094415][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 814.108553][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.133519][ T24] usb 7-1: Product: syz [ 814.138229][ T24] usb 7-1: Manufacturer: syz [ 814.142971][ T24] usb 7-1: SerialNumber: syz [ 814.157847][ T24] usb 7-1: config 0 descriptor?? [ 814.170412][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 814.315676][ T5933] usb 3-1: string descriptor 0 read error: -71 [ 814.346971][ T5933] usb 3-1: USB disconnect, device number 5 [ 815.352603][T15664] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2604'. [ 815.513410][T15644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.524213][T15644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.842914][T15668] netlink: 'syz.4.2605': attribute type 8 has an invalid length. [ 816.295447][ T6490] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 816.488935][ T6490] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 816.579205][ T6490] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 816.622423][ T6490] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 816.626070][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2611'. [ 816.661938][T15682] macvlan4: entered allmulticast mode [ 816.694681][ T6490] usb 5-1: config 0 interface 0 has no altsetting 0 [ 816.705403][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 816.736675][ T6490] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 816.753675][ T6490] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 816.780833][ T6490] usb 5-1: config 0 interface 0 has no altsetting 0 [ 816.794029][ T6490] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 816.803242][ T6490] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 816.824416][ T6490] usb 5-1: config 0 interface 0 has no altsetting 0 [ 816.842926][ T6490] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 816.852271][ T6490] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 816.867452][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 816.883814][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 816.921703][ T6490] usb 5-1: config 0 interface 0 has no altsetting 0 [ 816.939911][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 816.969379][ T6490] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 816.998850][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.030516][ T6481] usb 7-1: USB disconnect, device number 69 [ 817.042794][ T6490] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 817.145400][ T5933] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 817.178801][T15680] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 817.190426][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 817.205360][ T6490] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.258710][ T6490] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 817.309307][ T5933] usb 6-1: config 0 has no interfaces? [ 817.331048][ T6490] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 817.339846][ T5933] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 817.360379][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.369264][ T5933] usb 6-1: Product: syz [ 817.373535][ T5933] usb 6-1: Manufacturer: syz [ 817.410158][T15680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.421140][T15680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.437784][ T5933] usb 6-1: SerialNumber: syz [ 817.514879][ T5933] usb 6-1: config 0 descriptor?? [ 817.522788][ T6490] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.615893][ T6490] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 817.627501][ T6490] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 817.642283][ T30] audit: type=1326 audit(1759381605.570:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 817.665996][ T6490] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.677907][T15680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.688769][T15680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.733603][ T6490] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 817.810832][ T30] audit: type=1326 audit(1759381605.610:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7d718d710 code=0x7ffc0000 [ 817.819853][ T6490] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 817.833771][ T30] audit: type=1326 audit(1759381605.610:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7d718eacb code=0x7ffc0000 [ 817.866829][ T30] audit: type=1326 audit(1759381605.610:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7d718eacb code=0x7ffc0000 [ 817.950516][ T6490] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.963813][ T6490] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 817.973849][ T6490] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 817.995637][ T6490] usb 5-1: Product: syz [ 818.001803][ T6490] usb 5-1: Manufacturer: syz [ 818.023834][ T6490] usb 5-1: SerialNumber: syz [ 818.046226][ T30] audit: type=1326 audit(1759381605.630:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 818.077366][ T5933] usb 3-1: USB disconnect, device number 6 [ 818.122572][ T30] audit: type=1326 audit(1759381605.630:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 818.169452][ T30] audit: type=1326 audit(1759381605.630:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 818.197175][ T30] audit: type=1326 audit(1759381605.630:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 818.197324][ T6490] usb 5-1: config 0 descriptor?? [ 818.254415][ T30] audit: type=1326 audit(1759381605.630:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 818.357144][ T30] audit: type=1326 audit(1759381605.630:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15677 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 818.455886][ T6490] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 818.979910][ T6490] usb 5-1: USB disconnect, device number 111 [ 818.990760][ T6490] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 819.732946][T15709] netlink: 'syz.4.2618': attribute type 8 has an invalid length. [ 819.915875][ T6490] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 819.937410][T15711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.065645][ T6490] usb 3-1: device descriptor read/64, error -71 [ 820.237086][T15719] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2621'. [ 820.315852][ T6490] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 820.339124][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2622'. [ 820.359534][T15722] macvlan9: entered allmulticast mode [ 820.445491][ T6490] usb 3-1: device descriptor read/64, error -71 [ 820.556112][ T6490] usb usb3-port1: attempt power cycle [ 821.220299][ T6490] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 821.228106][ T43] usb 6-1: USB disconnect, device number 115 [ 821.268297][ T6490] usb 3-1: device descriptor read/8, error -71 [ 821.329628][T15727] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2624'. [ 821.347957][T15727] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2624'. [ 821.525654][ T6490] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 821.535379][ T24] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 821.577033][ T6490] usb 3-1: device descriptor read/8, error -71 [ 821.695439][ T43] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 821.705903][ T6490] usb usb3-port1: unable to enumerate USB device [ 821.719692][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 821.725252][T15738] netlink: 'syz.7.2629': attribute type 8 has an invalid length. [ 821.750536][ T24] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 821.760387][ T24] usb 7-1: config 0 has no interface number 0 [ 821.767407][ T24] usb 7-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 821.777675][ T24] usb 7-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 821.791148][ T24] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 821.801868][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.811037][ T24] usb 7-1: Product: syz [ 821.815630][ T24] usb 7-1: Manufacturer: syz [ 821.820258][ T24] usb 7-1: SerialNumber: syz [ 821.831648][ T24] usb 7-1: config 0 descriptor?? [ 821.846441][ T24] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 821.885602][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 821.893412][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.913273][ T43] usb 6-1: config 0 has no interfaces? [ 821.949880][ T43] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 821.967681][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.982976][ T43] usb 6-1: config 0 descriptor?? [ 822.052908][ T24] usb 7-1: qt2_setup_urbs - submit read urb failed -90 [ 822.060946][ T24] quatech2 7-1:0.51: probe with driver quatech2 failed with error -90 [ 822.185527][ T6482] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 822.208999][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2626'. [ 822.262349][ T24] usb 6-1: USB disconnect, device number 116 [ 822.406475][ T6482] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 822.460438][ T6482] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 822.508577][ T6482] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 822.556658][ T6482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.576479][T15742] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 822.635888][ T6482] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 822.808586][T15742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.819234][T15742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.991120][T15750] loop8: detected capacity change from 0 to 1 [ 823.044632][T15742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.055239][T15742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.063181][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 823.063197][ T30] audit: type=1326 audit(1759381610.970:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 823.174780][ T43] usb 5-1: USB disconnect, device number 112 [ 823.185125][T15750] Dev loop8: unable to read RDB block 1 [ 823.190927][T15750] loop8: unable to read partition table [ 823.196727][ T30] audit: type=1326 audit(1759381610.970:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2db58d710 code=0x7ffc0000 [ 823.197348][T15750] loop8: partition table beyond EOD, [ 823.225939][ T30] audit: type=1326 audit(1759381610.970:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2db58eacb code=0x7ffc0000 [ 823.262170][ T30] audit: type=1326 audit(1759381610.970:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2db58eacb code=0x7ffc0000 [ 823.294414][ T30] audit: type=1326 audit(1759381611.030:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 823.321943][T15750] truncated [ 823.325183][T15750] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 823.379810][ T30] audit: type=1326 audit(1759381611.030:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 823.402801][ T30] audit: type=1326 audit(1759381611.030:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 823.435876][ T30] audit: type=1326 audit(1759381611.030:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 823.501032][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2633'. [ 823.510417][ T30] audit: type=1326 audit(1759381611.030:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 823.576091][ T30] audit: type=1326 audit(1759381611.030:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb2db58eec9 code=0x7ffc0000 [ 823.644645][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2634'. [ 823.790736][ T43] usb 7-1: USB disconnect, device number 70 [ 824.045513][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.068995][T15767] netlink: 'syz.6.2636': attribute type 12 has an invalid length. [ 824.591465][T15777] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2638'. [ 824.955446][ T6490] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 824.975392][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 825.105722][ T6490] usb 6-1: Using ep0 maxpacket: 16 [ 825.292183][ T6490] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.333329][ T6490] usb 6-1: config 0 has no interfaces? [ 825.339206][ T6490] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 825.354002][ T6490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.371153][ T6490] usb 6-1: config 0 descriptor?? [ 825.665993][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2641'. [ 825.748813][ T5933] usb 6-1: USB disconnect, device number 117 [ 827.238400][ T5945] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 827.470573][ T5945] usb 6-1: config 0 has no interfaces? [ 827.501775][ T5945] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 827.511358][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.520555][ T5945] usb 6-1: Product: syz [ 827.537698][ T5945] usb 6-1: Manufacturer: syz [ 827.550788][ T5945] usb 6-1: SerialNumber: syz [ 827.571762][ T5945] usb 6-1: config 0 descriptor?? [ 827.666293][T15825] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2653'. [ 827.836795][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 827.868482][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 828.005942][ T43] usb 3-1: can't read configurations, error -71 [ 828.536123][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 828.725545][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 828.791858][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 828.803685][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.840858][ T43] usb 3-1: Product: syz [ 828.852751][ T43] usb 3-1: Manufacturer: syz [ 828.865206][ T43] usb 3-1: SerialNumber: syz [ 828.908017][ T43] usb 3-1: config 0 descriptor?? [ 828.930936][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 829.059459][T15848] binder: 15842:15848 ioctl c0306201 200000000240 returned -14 [ 829.145675][T15850] netlink: 'syz.4.2661': attribute type 11 has an invalid length. [ 829.194900][T15850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2661'. [ 830.383680][T15831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.418681][T15831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.641620][ T43] usb 6-1: USB disconnect, device number 118 [ 830.714122][T15863] loop8: detected capacity change from 0 to 1 [ 830.736319][T15863] Dev loop8: unable to read RDB block 1 [ 830.756667][T15863] loop8: unable to read partition table [ 830.763009][T15863] loop8: partition table beyond EOD, truncated [ 830.776963][T15863] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 830.865557][T15866] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2664'. [ 830.928259][T15866] hub 9-0:1.0: USB hub found [ 830.935545][T15866] hub 9-0:1.0: 1 port detected [ 831.205474][ T43] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 831.218287][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2666'. [ 831.236744][T15868] macvlan10: entered allmulticast mode [ 831.365534][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 831.384154][ T43] usb 6-1: config 0 has an invalid interface number: 38 but max is 0 [ 831.540757][T15875] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2668'. [ 831.551366][ T43] usb 6-1: config 0 has no interface number 0 [ 831.614733][ T5933] usb 3-1: USB disconnect, device number 12 [ 831.616009][ T43] usb 6-1: config 0 interface 38 has no altsetting 0 [ 831.657174][T15877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.683150][ T43] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 831.696697][T15877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.776234][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.828704][ T43] usb 6-1: Product: syz [ 831.832915][ T43] usb 6-1: Manufacturer: syz [ 831.867877][ T43] usb 6-1: SerialNumber: syz [ 831.905794][ T5945] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 831.947788][ T43] usb 6-1: config 0 descriptor?? [ 831.982874][ T43] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 832.075425][ T5945] usb 7-1: device descriptor read/64, error -71 [ 832.181125][T15883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.201535][T15883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.269012][ T43] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 832.286376][ T43] gspca_pac7302 6-1:0.38: probe with driver gspca_pac7302 failed with error -71 [ 832.325498][ T5945] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 832.358279][ T43] usb 6-1: USB disconnect, device number 119 [ 832.515381][ T5945] usb 7-1: device descriptor read/64, error -71 [ 832.644339][T15893] netlink: 'syz.2.2673': attribute type 11 has an invalid length. [ 832.705740][T15893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2673'. [ 832.731164][ T5945] usb usb7-port1: attempt power cycle [ 834.345364][ T5945] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 834.397372][ T5945] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 834.445537][ T5945] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 834.658372][ T5945] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 834.728408][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.749321][T15910] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 834.776349][ T5945] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 835.017575][T15910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.027710][T15910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.254898][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 835.254916][ T30] audit: type=1326 audit(1759381623.170:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 835.306673][T15910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.316988][T15910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.424920][T15925] IPVS: set_ctl: invalid protocol: 274 5.188.202.32:9016 [ 835.434435][ T5911] IPVS: starting estimator thread 0... [ 835.448838][T15926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.471068][ T5945] usb 7-1: USB disconnect, device number 73 [ 835.471293][T15926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.555379][T15927] IPVS: using max 49 ests per chain, 117600 per kthread [ 835.651873][ T30] audit: type=1326 audit(1759381623.170:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f799dd8d710 code=0x7ffc0000 [ 835.687843][ T5911] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 835.701586][ T30] audit: type=1326 audit(1759381623.170:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f799dd8eacb code=0x7ffc0000 [ 835.782025][T15930] netlink: 'syz.2.2682': attribute type 10 has an invalid length. [ 835.792781][ T30] audit: type=1326 audit(1759381623.180:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f799dd8eacb code=0x7ffc0000 [ 835.858153][ T30] audit: type=1326 audit(1759381623.250:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 835.909520][ T5911] usb 5-1: config 1 interface 0 has no altsetting 0 [ 835.920292][ T5911] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.40 [ 835.929816][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.939921][ T30] audit: type=1326 audit(1759381623.260:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 835.982092][ T30] audit: type=1326 audit(1759381623.260:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 836.019218][ T5911] usb 5-1: Product: 든궽匕䱫◎줮 [ 836.035209][ T5911] usb 5-1: Manufacturer: 鞊돧柛䍜ꂐᙗ軠ꥷ攔睃儌㭺餥Ԉ落虜锇ᔶባ㈕ư葤߳䷔ܮꌞ죈龍෠哩狣揲仉ꑐ䟦⮨嶕⵩飽訜Ꞌ㥛켋삀絘鉁࿶谼弜Ⴀᬁᅦ澛쪋﵊簘ǂ⍫愤疴蚌 [ 836.092202][ T5911] usb 5-1: SerialNumber: Ďꡊቄ饌몭㠠濽᜸⒯鸵齒變솵䎠謀䏟湾㞗阆ⵢ杬趼㈞䣚楥泞谖䆋L壮味ࢴ阅휦仾ၠ㏰왛宔㑮᫳孞襸쥂㪸ꎳ㩍 [ 836.092806][ T6490] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 836.174498][ T30] audit: type=1326 audit(1759381623.260:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 836.346890][ T30] audit: type=1326 audit(1759381623.260:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 836.376222][ T6490] usb 3-1: device descriptor read/64, error -71 [ 836.441020][ T5911] usbhid 5-1:1.0: can't add hid device: -71 [ 836.448132][ T30] audit: type=1326 audit(1759381623.260:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.6.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 836.453577][ T5911] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 836.570724][ T5911] usb 5-1: USB disconnect, device number 113 [ 836.625567][ T6490] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 836.765422][ T6490] usb 3-1: device descriptor read/64, error -71 [ 836.875855][ T6490] usb usb3-port1: attempt power cycle [ 836.897836][ T6482] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 837.045848][ T6482] usb 6-1: device descriptor read/64, error -71 [ 837.187866][T15946] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2686'. [ 837.216422][ T6490] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 837.247055][ T6490] usb 3-1: device descriptor read/8, error -71 [ 837.321340][T15949] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2687'. [ 837.341403][ T6482] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 837.347960][T15949] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2687'. [ 837.415525][ T5911] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 837.496811][ T6482] usb 6-1: device descriptor read/64, error -71 [ 837.547116][ T6490] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 837.576802][ T6490] usb 3-1: device descriptor read/8, error -71 [ 837.602058][ T5911] usb 5-1: config 0 has no interfaces? [ 837.607939][ T6482] usb usb6-port1: attempt power cycle [ 837.624261][ T5911] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 837.634249][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.643791][ T5911] usb 5-1: Product: syz [ 837.648743][ T5911] usb 5-1: Manufacturer: syz [ 837.653545][ T5911] usb 5-1: SerialNumber: syz [ 837.674581][ T5911] usb 5-1: config 0 descriptor?? [ 837.699070][ T6490] usb usb3-port1: unable to enumerate USB device [ 837.995213][ T6482] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 838.027840][ T6482] usb 6-1: device descriptor read/8, error -71 [ 838.295428][ T6482] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 838.327929][ T6482] usb 6-1: device descriptor read/8, error -71 [ 838.875429][ T6482] usb usb6-port1: unable to enumerate USB device [ 838.969606][T15958] netlink: 'syz.6.2690': attribute type 11 has an invalid length. [ 838.978049][T15958] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2690'. [ 839.465389][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 839.730150][ T43] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.742460][ T43] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.756238][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 839.763809][ T43] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 839.773932][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.792667][ T43] usb 3-1: config 0 descriptor?? [ 840.165537][ T6490] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 840.175942][ T5911] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 840.223556][ T43] asus 0003:0B05:1822.0020: unknown main item tag 0x0 [ 840.230572][ T43] asus 0003:0B05:1822.0020: unknown main item tag 0x0 [ 840.245584][ T43] asus 0003:0B05:1822.0020: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.2-1/input0 [ 840.258850][ T43] asus 0003:0B05:1822.0020: Asus input not registered [ 840.271339][ T43] asus 0003:0B05:1822.0020: probe with driver asus failed with error -12 [ 840.339620][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 840.339948][ T6490] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.355713][ T5911] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.372103][ T5911] usb 6-1: config 0 interface 0 has no altsetting 0 [ 840.379721][ T5911] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 840.389780][ T6490] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 840.432367][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.450942][ T6490] usb 7-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 840.475860][ T6490] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.490748][ T6490] usb 7-1: config 0 descriptor?? [ 840.513078][ T5911] usb 6-1: config 0 descriptor?? [ 840.772562][ T6481] usb 5-1: USB disconnect, device number 114 [ 840.889961][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 840.936060][ T6490] logitech 0003:046D:CA03.0021: unknown main item tag 0x6 [ 840.955178][ T6490] logitech 0003:046D:CA03.0021: hidraw0: USB HID vff.fa Device [HID 046d:ca03] on usb-dummy_hcd.6-1/input0 [ 840.991548][ T6490] logitech 0003:046D:CA03.0021: no inputs found [ 841.039371][ T5911] hid-u2fzero 0003:20A0:4287.0022: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.5-1/input0 [ 841.071208][ T5911] hid-u2fzero 0003:20A0:4287.0022: NitroKey U2F LED initialised [ 841.085167][ T5911] hid-u2fzero 0003:20A0:4287.0022: NitroKey U2F RNG initialised [ 841.137508][ T6490] usb 7-1: USB disconnect, device number 74 [ 841.172362][T15988] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2699'. [ 841.196784][T15988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2699'. [ 841.209819][ T43] usb 6-1: USB disconnect, device number 124 [ 841.360974][T15989] fido_id[15989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 842.095428][ T43] usb 3-1: USB disconnect, device number 17 [ 842.119931][T16006] openvswitch: netlink: Flow key attr not present in new flow. [ 842.143071][T16006] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2702'. [ 842.228200][ T5911] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 842.565674][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 842.613978][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.626861][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.688678][ T5911] usb 7-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 842.698561][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.890302][ T5911] usb 7-1: config 0 descriptor?? [ 843.223359][T16019] input: syz0 as /devices/virtual/input/input39 [ 843.570817][T16023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2709'. [ 843.687144][ T5911] input: HID 0458:5012 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5012.0023/input/input40 [ 843.820919][T16025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2710'. [ 843.840360][ T1338] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 843.859295][ T1338] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 843.867345][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 843.881400][T16025] netlink: 'syz.4.2710': attribute type 1 has an invalid length. [ 843.914231][ T5911] input: HID 0458:5012 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5012.0023/input/input41 [ 844.006734][T16026] vlan2: entered allmulticast mode [ 844.014975][T16026] veth0_to_bond: entered allmulticast mode [ 844.145221][ T5911] kye 0003:0458:5012.0023: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.6-1/input0 [ 844.295648][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 844.523045][ T24] usb 7-1: USB disconnect, device number 75 [ 844.925768][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 846.959118][T16045] ipvlan0: mtu less than device minimum [ 847.045879][T16049] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2716'. [ 847.122519][T16048] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2716'. [ 847.466759][T16072] tipc: Failed to remove unknown binding: 66,1,1/0:1789171961/1789171963 [ 847.475544][T16072] tipc: Failed to remove unknown binding: 66,1,1/0:1789171961/1789171963 [ 847.635382][ T6481] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 847.643787][ T5911] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 847.725521][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 847.810916][ T6481] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 847.823777][ T6481] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 847.833806][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 847.841026][ T6481] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 847.851856][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.862312][ T5911] usb 5-1: config 0 has no interfaces? [ 847.869500][ T5911] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 847.910858][ T6481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.943806][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.989355][T16066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 848.001940][ T6481] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 848.010229][ T5911] usb 5-1: config 0 descriptor?? [ 848.240420][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2724'. [ 848.434961][T16064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.444718][T16064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.504384][ T24] usb 5-1: USB disconnect, device number 115 [ 848.628156][T16084] rtc_cmos 00:00: Alarms can be up to one day in the future [ 848.694572][T16064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.703991][T16064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.744020][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 848.744038][ T30] audit: type=1326 audit(1759381636.620:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 848.772605][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.916043][ T30] audit: type=1326 audit(1759381636.620:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7d718d710 code=0x7ffc0000 [ 848.946750][ T30] audit: type=1326 audit(1759381636.620:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7d718eacb code=0x7ffc0000 [ 848.989271][ T30] audit: type=1326 audit(1759381636.620:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7d718eacb code=0x7ffc0000 [ 849.022219][ T30] audit: type=1326 audit(1759381636.640:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 849.075465][ T30] audit: type=1326 audit(1759381636.640:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 849.105379][ T30] audit: type=1326 audit(1759381636.650:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 849.200294][ T24] usb 3-1: USB disconnect, device number 18 [ 849.268308][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2729'. [ 849.282066][ T30] audit: type=1326 audit(1759381636.650:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 849.596927][ T30] audit: type=1326 audit(1759381636.650:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 849.727777][ T30] audit: type=1326 audit(1759381636.650:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.2.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb7d718eec9 code=0x7ffc0000 [ 850.150396][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'. [ 851.195457][ T6481] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 851.355665][ T5933] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 851.471964][ T6481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 851.585770][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 851.592044][ T6481] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 851.604580][ T5933] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 851.629570][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.639369][ T6481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.667067][ T5933] usb 6-1: Product: syz [ 851.677753][ T6481] usb 5-1: Product: syz [ 851.681935][ T6481] usb 5-1: Manufacturer: syz [ 851.688384][ T5933] usb 6-1: Manufacturer: syz [ 851.692993][ T5933] usb 6-1: SerialNumber: syz [ 851.710079][ T6481] usb 5-1: SerialNumber: syz [ 851.751125][ T6481] usb 5-1: config 0 descriptor?? [ 851.761927][ T5933] usb 6-1: config 0 descriptor?? [ 851.797888][ T5933] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 851.823728][T16126] bridge0: entered promiscuous mode [ 851.841869][T16126] macsec1: entered promiscuous mode [ 851.870819][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2739'. [ 852.275822][ T24] usb 5-1: USB disconnect, device number 116 [ 852.888844][T16116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.905977][T16116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.339252][ T6482] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 853.459932][T16145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2744'. [ 853.506066][ T6482] usb 5-1: Using ep0 maxpacket: 16 [ 853.518362][ T6482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.582435][ T6482] usb 5-1: config 0 has no interfaces? [ 853.609247][ T6482] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 853.645968][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 853.672055][ T6482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.691170][ T6482] usb 5-1: config 0 descriptor?? [ 853.730364][T16150] netlink: 'syz.6.2745': attribute type 4 has an invalid length. [ 853.782968][T16151] netlink: 'syz.6.2745': attribute type 4 has an invalid length. [ 853.827904][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 853.839185][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 853.852580][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 853.862752][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 853.874539][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.882999][ T24] usb 3-1: Product: syz [ 853.901834][ T24] usb 3-1: Manufacturer: syz [ 853.909794][ T24] usb 3-1: SerialNumber: syz [ 853.915044][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 853.936026][ T24] usb 3-1: config 0 descriptor?? [ 853.992634][ T24] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 854.007327][ T5945] usb 5-1: USB disconnect, device number 117 [ 854.081855][ T43] usb 6-1: USB disconnect, device number 125 [ 854.197721][ T24] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 854.206418][ T24] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 854.228446][ T24] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 854.556844][ T6482] usb 3-1: USB disconnect, device number 19 [ 854.622191][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'. [ 854.984804][ T43] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 854.985456][ T6482] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 855.245973][T16175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2752'. [ 855.405495][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 855.435471][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 855.620879][ T43] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 855.642283][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.657374][ T43] usb 7-1: Product: syz [ 855.663973][ T43] usb 7-1: Manufacturer: syz [ 855.673433][ T43] usb 7-1: SerialNumber: syz [ 855.693649][ T43] usb 7-1: config 0 descriptor?? [ 855.775576][ T6482] usb 3-1: Using ep0 maxpacket: 32 [ 855.788169][ T6482] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db [ 855.797507][ T6482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.821432][ T6482] usb 3-1: config 0 descriptor?? [ 855.850696][ T6482] pwc: Logitech ViewPort AV 100 webcam detected. [ 856.065197][T16169] tipc: Enabling of bearer rejected, already enabled [ 856.114192][ T6482] pwc: Failed to set LED on/off time (-71) [ 856.138820][ T6482] pwc: send_video_command error -71 [ 856.160418][ T6482] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 856.168308][ T6482] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 856.208095][ T6482] usb 3-1: USB disconnect, device number 20 [ 856.332419][ T6481] usb 7-1: USB disconnect, device number 76 [ 856.615139][T16187] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2753'. [ 857.169565][T16204] input: syz0 as /devices/virtual/input/input42 [ 857.577431][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2756'. [ 859.432350][T16223] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 859.475623][T16223] macvlan2: entered allmulticast mode [ 859.488140][T16223] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 859.529609][T16223] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 859.556200][T16223] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 860.859706][T16243] netlink: 146840 bytes leftover after parsing attributes in process `syz.5.2763'. [ 861.885547][ T5945] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 861.945478][ T43] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 862.154247][ T5945] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 862.193603][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 862.212808][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.221485][ T5945] usb 5-1: Product: syz [ 862.226059][ T5945] usb 5-1: Manufacturer: syz [ 862.231131][ T5945] usb 5-1: SerialNumber: syz [ 862.239818][ T5945] usb 5-1: config 0 descriptor?? [ 862.247302][ T43] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 862.263178][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.294205][ T43] usb 7-1: Product: syz [ 862.305394][ T6481] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 862.319613][ T43] usb 7-1: Manufacturer: syz [ 862.329113][ T43] usb 7-1: SerialNumber: syz [ 862.403124][ T43] usb 7-1: config 0 descriptor?? [ 862.604718][ T6481] usb 6-1: Using ep0 maxpacket: 32 [ 862.634789][ T6481] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 862.654716][ T6481] usb 6-1: config 0 has no interface number 0 [ 862.669026][ T6481] usb 6-1: config 0 interface 96 has no altsetting 0 [ 862.684728][ T6481] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 862.694627][ T6481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.720317][ T6481] usb 6-1: Product: syz [ 862.770410][ T6481] usb 6-1: Manufacturer: syz [ 862.775023][ T6481] usb 6-1: SerialNumber: syz [ 862.784737][ T5945] airspy 5-1:0.0: Board ID: 00 [ 862.804120][ T5945] airspy 5-1:0.0: Firmware version: [ 862.827680][ T6481] usb 6-1: config 0 descriptor?? [ 862.851368][ T6481] legousbtower 6-1:0.96: interrupt endpoints not found [ 863.011930][ T6481] usb 7-1: USB disconnect, device number 77 [ 863.420443][ T43] usb 6-1: USB disconnect, device number 126 [ 863.950347][ T5945] airspy 5-1:0.0: usb_control_msg() failed -110 request 11 [ 863.976832][ T5945] airspy 5-1:0.0: Registered as swradio24 [ 864.036804][T16263] netlink: 'syz.7.2770': attribute type 8 has an invalid length. [ 864.050075][ T5945] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 864.364920][T16277] program syz.2.2771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 864.605849][ C1] sd 0:0:1:0: [sda] tag#7686 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 864.616267][ C1] sd 0:0:1:0: [sda] tag#7686 CDB: Write(6) 0a 00 00 00 73 d0 [ 865.579042][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2773'. [ 865.625649][ T6481] usb 5-1: USB disconnect, device number 118 [ 866.059761][T16288] input: syz0 as /devices/virtual/input/input43 [ 866.406322][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 866.406336][ T30] audit: type=1326 audit(1759381654.330:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.6.2776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x0 [ 866.660821][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2776'. [ 866.981688][T16308] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.2778'. [ 867.793598][ T6482] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 867.996847][ T6482] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 868.009539][ T6482] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 868.018983][ T6482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.041198][ T6482] usb 6-1: Product: syz [ 868.063442][ T6482] usb 6-1: Manufacturer: syz [ 868.179101][ T6482] usb 6-1: SerialNumber: syz [ 868.228799][ T6482] usb 6-1: config 0 descriptor?? [ 868.923914][T16328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.959698][T16328] team0: Port device batadv0 added [ 869.442953][T16331] netlink: 'syz.2.2783': attribute type 8 has an invalid length. [ 870.172871][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.179306][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.372319][T16343] loop2: detected capacity change from 0 to 7 [ 870.382199][T16343] loop2: [ 870.385331][T16343] loop2: partition table partially beyond EOD, truncated [ 870.690275][T16353] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2789'. [ 870.765462][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 871.717411][T16361] rtc_cmos 00:00: Alarms can be up to one day in the future [ 871.809473][T16365] input: syz0 as /devices/virtual/input/input44 [ 872.022608][ T43] usb 6-1: USB disconnect, device number 127 [ 872.544914][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 873.057193][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2796'. [ 873.952609][ T43] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 874.005508][ T6482] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 874.223071][ T43] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 874.239243][ T43] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 874.317176][ T43] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 874.341413][ T6482] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.357471][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.377396][ T6482] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.445507][ T6482] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 874.499164][ T6482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.610219][ T43] usb 7-1: usb_control_msg returned -32 [ 874.624300][ T43] usbtmc 7-1:16.0: can't read capabilities [ 874.724143][ T6482] usb 3-1: config 0 descriptor?? [ 875.067152][T16409] loop8: detected capacity change from 0 to 1 [ 875.084482][T16409] Dev loop8: unable to read RDB block 1 [ 875.100162][T16409] loop8: unable to read partition table [ 875.119491][T16409] loop8: partition table beyond EOD, truncated [ 875.142453][T16409] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 875.184742][T16402] sctp: [Deprecated]: syz.2.2801 (pid 16402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 875.184742][T16402] Use struct sctp_sack_info instead [ 875.207181][ T6490] usb 7-1: USB disconnect, device number 78 [ 875.676711][T16419] rtc_cmos 00:00: Alarms can be up to one day in the future [ 875.965831][T16421] netlink: 'syz.6.2806': attribute type 11 has an invalid length. [ 876.409175][T16429] batadv0: entered promiscuous mode [ 876.535839][T16433] netlink: 'syz.7.2810': attribute type 8 has an invalid length. [ 876.822268][ T6482] usb 3-1: string descriptor 0 read error: -71 [ 876.857601][ T6482] usb 3-1: USB disconnect, device number 21 [ 877.112715][T16447] loop8: detected capacity change from 0 to 1 [ 877.120762][T16447] Dev loop8: unable to read RDB block 1 [ 877.330409][T16447] loop8: unable to read partition table [ 877.375631][T16447] loop8: partition table beyond EOD, truncated [ 877.395484][ T6482] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 877.407658][T16447] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 877.658238][ T6482] usb 7-1: Using ep0 maxpacket: 8 [ 878.041036][ T6482] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 878.085410][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 878.104783][ T6482] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.198685][ T6482] usb 7-1: Product: syz [ 878.203287][ T6482] usb 7-1: Manufacturer: syz [ 878.238130][ T43] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 878.238853][ T6482] usb 7-1: SerialNumber: syz [ 878.277744][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 878.315673][ T6482] usb 7-1: config 0 descriptor?? [ 878.324445][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 878.347695][ T6482] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 878.404458][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 878.561299][ T43] usb 3-1: Product: syz [ 878.565695][ T43] usb 3-1: Manufacturer: syz [ 878.571418][ T43] usb 3-1: SerialNumber: syz [ 878.602771][ T43] usb 3-1: config 0 descriptor?? [ 878.700882][ T43] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 878.719561][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.851929][T16454] input: syz0 as /devices/virtual/input/input45 [ 878.900328][T16454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.066504][T16454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.193130][ T5945] usb 3-1: USB disconnect, device number 22 [ 879.739999][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.762883][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.150153][ T5945] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 880.406761][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 880.413517][ T5945] usb 5-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config [ 880.441231][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 880.482325][ T5945] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 880.490349][T16489] netlink: 'syz.2.2825': attribute type 8 has an invalid length. [ 880.513919][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.565020][ T5945] usb 5-1: config 0 descriptor?? [ 880.820234][T16491] macvlan1: entered allmulticast mode [ 880.839371][T16491] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 880.869411][T16491] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 881.010606][ T6490] usb 7-1: USB disconnect, device number 79 [ 882.085625][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2829'. [ 882.156356][ T5945] usb 5-1: string descriptor 0 read error: -71 [ 882.306703][ T5945] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 882.354474][ T5945] usb 5-1: USB disconnect, device number 119 [ 882.514732][T16525] netlink: 'syz.6.2833': attribute type 11 has an invalid length. [ 882.670625][T16525] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2833'. [ 882.782053][T16503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2830'. [ 883.155777][ T5911] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 883.345356][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 883.356362][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.399033][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 883.450288][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.592194][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2836'. [ 883.607594][T16535] macvlan2: entered allmulticast mode [ 883.613178][T16535] hsr0: entered allmulticast mode [ 883.619993][T16535] hsr_slave_0: entered allmulticast mode [ 883.626054][T16535] hsr_slave_1: entered allmulticast mode [ 883.684375][ T5911] usb 5-1: usb_control_msg returned -32 [ 883.711017][ T5911] usbtmc 5-1:16.0: can't read capabilities [ 884.132464][T16543] loop8: detected capacity change from 0 to 1 [ 884.191872][T16543] Dev loop8: unable to read RDB block 1 [ 884.276815][T16543] loop8: unable to read partition table [ 884.297382][T16543] loop8: partition table beyond EOD, truncated [ 884.316450][T16543] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 884.505740][T16551] netlink: 'syz.2.2841': attribute type 11 has an invalid length. [ 884.526848][T16551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2841'. [ 884.725552][ T5945] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 884.970726][ T5945] usb 7-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 885.005342][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.060520][ T5945] usb 7-1: config 0 descriptor?? [ 885.212330][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2842'. [ 885.283542][T16547] binder: 16546:16547 ioctl 4018620d 0 returned -22 [ 885.297137][T16547] binder: 16546:16547 ioctl c0045004 0 returned -22 [ 885.523270][T16547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.532311][T16547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.553656][ T5945] usbhid 7-1:0.0: can't add hid device: -71 [ 885.559834][ T5945] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 885.618487][ T5945] usb 7-1: USB disconnect, device number 80 [ 885.835126][ T6481] usb 5-1: USB disconnect, device number 120 [ 885.918914][ T6490] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 886.075480][ T6490] usb 6-1: Using ep0 maxpacket: 16 [ 886.093232][ T6490] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 886.107852][ T6490] usb 6-1: config 0 has no interface number 0 [ 886.114079][ T6490] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 886.125810][ T6490] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 886.138508][ T6490] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 886.148047][ T6490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.157051][ T6490] usb 6-1: Product: syz [ 886.161256][ T6490] usb 6-1: Manufacturer: syz [ 886.166312][ T6490] usb 6-1: SerialNumber: syz [ 886.176931][ T6490] usb 6-1: config 0 descriptor?? [ 886.182801][T16561] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 886.190753][T16561] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 886.345558][ T6481] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 886.399594][T16561] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 886.413358][T16561] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 886.424738][ T6490] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 886.444349][ T6490] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 886.460213][ T6490] asix 6-1:0.251: probe with driver asix failed with error -5 [ 886.526413][ T6481] usb 5-1: Using ep0 maxpacket: 16 [ 886.533028][ T6481] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.544415][ T6481] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.554660][ T6481] usb 5-1: config 0 interface 0 has no altsetting 0 [ 886.564885][ T6481] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 886.574069][ T6481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.588776][ T6481] usb 5-1: config 0 descriptor?? [ 887.147104][T16573] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 887.211271][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2849'. [ 887.367239][T16573] 8021q: adding VLAN 0 to HW filter on device bond15 [ 887.405160][ T5945] usb 6-1: USB disconnect, device number 2 [ 887.460428][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.505498][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.512422][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.521084][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.530772][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.538162][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.545490][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.552558][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.561419][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.568408][ T6481] apple 0003:05AC:0247.0024: unknown main item tag 0x0 [ 887.576426][ T6481] apple 0003:05AC:0247.0024: unexpected long global item [ 887.584488][ T6481] apple 0003:05AC:0247.0024: parse failed [ 887.590738][ T6481] apple 0003:05AC:0247.0024: probe with driver apple failed with error -22 [ 887.925849][ T6481] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 888.087032][ T6481] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 888.097053][ T6481] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.110089][ T6481] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 888.119154][ T6481] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.127432][ T5911] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 888.181024][ T6482] usb 5-1: USB disconnect, device number 121 [ 888.235429][ T5945] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 888.295442][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 888.311391][ T5911] usb 6-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 888.321110][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.332072][ T5911] usb 6-1: config 0 descriptor?? [ 888.343768][ T6481] usb 7-1: usb_control_msg returned -32 [ 888.350239][ T5911] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 888.358984][ T6481] usbtmc 7-1:16.0: can't read capabilities [ 888.395381][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 888.402242][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 888.413819][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 888.427682][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 888.438886][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 888.450379][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.468257][ T5945] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 888.477464][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.485713][ T5945] usb 3-1: Product: syz [ 888.489886][ T5945] usb 3-1: Manufacturer: syz [ 888.494497][ T5945] usb 3-1: SerialNumber: syz [ 888.502882][ T5945] usb 3-1: config 0 descriptor?? [ 888.542587][ T5911] usb 6-1: qt2_attach - failed to power on unit: -71 [ 888.553073][ T5911] quatech2 6-1:0.0: probe with driver quatech2 failed with error -71 [ 888.566507][ T5911] usb 6-1: USB disconnect, device number 3 [ 888.605527][ T6482] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 888.755507][ T6482] usb 5-1: Using ep0 maxpacket: 16 [ 888.762192][ T6482] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 888.781481][ T6482] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 888.795976][ T6482] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 888.808797][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.817636][ T6482] usb 5-1: Product: syz [ 888.847950][ T6482] usb 5-1: Manufacturer: syz [ 888.858126][ T6482] usb 5-1: SerialNumber: syz [ 888.877306][ T6482] usb 5-1: config 0 descriptor?? [ 888.893774][ T6482] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 888.903359][ T6482] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 889.980299][T16625] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 890.001051][T16625] macvlan3: entered allmulticast mode [ 890.006755][T16625] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 890.021649][T16625] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 890.029234][T16625] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 890.344515][ T6482] em28xx 5-1:0.0: chip ID is em2860 [ 890.553061][ T6482] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 890.569068][ T6482] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 890.590440][ T6482] em28xx 5-1:0.0: No AC97 audio processor [ 890.660704][ T6482] usb 5-1: USB disconnect, device number 122 [ 890.698516][ T6482] em28xx 5-1:0.0: Disconnecting em28xx [ 890.780252][ T6481] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 890.809374][ T6482] em28xx 5-1:0.0: Freeing device [ 890.845354][ T5933] usb 7-1: USB disconnect, device number 81 [ 890.986279][ T6481] usb 6-1: Using ep0 maxpacket: 16 [ 890.996582][ T6481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.007933][ T6481] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dc, bcdDevice= 0.00 [ 891.031554][ T6481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.091357][ T6481] usb 6-1: config 0 descriptor?? [ 891.996012][ T6481] hid-generic 0003:04D8:00DC.0025: hidraw0: USB HID v0.05 Device [HID 04d8:00dc] on usb-dummy_hcd.5-1/input0 [ 892.035690][ T6490] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 892.108740][T16652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2872'. [ 892.222487][ T6490] usb 7-1: config 0 has an invalid interface number: 112 but max is 0 [ 892.235500][ T6490] usb 7-1: config 0 has no interface number 0 [ 892.268563][ T6490] usb 7-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 892.282783][ T6490] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.311095][ T5945] rc_core: IR keymap rc-imon-rsc not found [ 892.317501][ T6490] usb 7-1: Product: syz [ 892.321774][ T5945] Registered IR keymap rc-empty [ 892.328727][ T6490] usb 7-1: Manufacturer: syz [ 892.339454][T16656] loop8: detected capacity change from 0 to 1 [ 892.347605][ T6490] usb 7-1: SerialNumber: syz [ 892.359841][ T5945] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 892.370118][ T6490] usb 7-1: config 0 descriptor?? [ 892.382684][ T43] usb 6-1: USB disconnect, device number 4 [ 892.395401][ T24] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 892.440095][ T5945] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input46 [ 892.457574][T16656] Dev loop8: unable to read RDB block 1 [ 892.476161][ T6490] mvusb_mdio 7-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 892.498093][T16656] loop8: unable to read partition table [ 892.508103][T16656] loop8: partition table beyond EOD, truncated [ 892.534054][ T5945] usb 3-1: USB disconnect, device number 23 [ 892.575457][T16656] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 892.611793][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 892.814376][ T6481] usb 7-1: USB disconnect, device number 82 [ 892.929262][T16664] binder: 16662:16664 ioctl c0306201 200000000640 returned -22 [ 893.081330][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2876'. [ 893.425471][ T5933] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 893.585594][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 893.598455][ T5933] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 893.608713][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.617991][ T5933] usb 3-1: Product: syz [ 893.622459][ T5933] usb 3-1: Manufacturer: syz [ 893.628743][ T5933] usb 3-1: SerialNumber: syz [ 893.829342][ T5933] usb 3-1: config 0 descriptor?? [ 893.857228][ T5933] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 894.077448][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2879'. [ 894.328997][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 894.473389][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 894.635380][ T24] usb 5-1: can't read configurations, error -71 [ 895.665595][T16642] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 895.744248][T16703] loop8: detected capacity change from 0 to 1 [ 895.752184][T16703] Dev loop8: unable to read RDB block 1 [ 895.767082][T16703] loop8: unable to read partition table [ 895.785563][T16703] loop8: partition table beyond EOD, truncated [ 895.795439][ T24] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 895.815579][T16703] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 895.826347][T16642] usb 6-1: Using ep0 maxpacket: 8 [ 895.838856][T16642] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 895.854272][T16642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.869108][T16642] usb 6-1: Product: syz [ 895.875995][T16642] usb 6-1: Manufacturer: syz [ 895.884404][T16642] usb 6-1: SerialNumber: syz [ 895.950395][T16702] syzkaller0: entered promiscuous mode [ 895.963388][T16642] usb 6-1: config 0 descriptor?? [ 895.969782][T16702] syzkaller0: entered allmulticast mode [ 896.035563][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 896.119064][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.133852][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 896.245479][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.362288][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2883'. [ 896.443273][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2883'. [ 896.467708][T16711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.536103][T16711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.548917][T16712] trusted_key: encrypted_key: insufficient parameters specified [ 896.559439][T16712] trusted_key: encrypted_key: insufficient parameters specified [ 896.568166][ T24] usb 5-1: usb_control_msg returned -32 [ 896.581378][ T24] usbtmc 5-1:16.0: can't read capabilities [ 896.786159][ T24] usb 3-1: USB disconnect, device number 24 [ 897.044451][T16716] fuse: Bad value for 'user_id' [ 897.051929][T16716] fuse: Bad value for 'user_id' [ 899.314665][T16657] usb 5-1: USB disconnect, device number 124 [ 899.417590][T16642] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 899.438642][T16642] gspca_sunplus: reg_w_riv err -71 [ 899.444643][T16642] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 899.461765][T16642] usb 6-1: USB disconnect, device number 5 [ 899.768081][T16738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'. [ 899.925425][T16657] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 899.965406][T16642] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 900.111788][T16657] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 900.122970][T16657] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 900.133856][T16657] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 900.143247][T16642] usb 6-1: Using ep0 maxpacket: 32 [ 900.143439][T16657] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.187022][T16736] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 900.194258][T16642] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 900.199720][T16657] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 900.215549][T16642] usb 6-1: config 0 has no interface number 0 [ 900.224093][T16642] usb 6-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 900.351911][T16642] usb 6-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 900.361703][T16642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.376879][T16642] usb 6-1: Product: syz [ 900.449974][T16736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.459349][T16736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.538125][T16642] usb 6-1: Manufacturer: syz [ 900.550923][T16642] usb 6-1: SerialNumber: syz [ 900.566096][T16642] usb 6-1: config 0 descriptor?? [ 900.588955][T16734] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 900.612813][T16642] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 900.693716][T16736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.704545][T16736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.732333][ T30] audit: type=1326 audit(1759381688.620:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 900.763890][ T30] audit: type=1326 audit(1759381688.620:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f799dd8d710 code=0x7ffc0000 [ 900.930655][ T30] audit: type=1326 audit(1759381688.620:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f799dd8eacb code=0x7ffc0000 [ 900.962299][T16642] usb 7-1: USB disconnect, device number 83 [ 901.061176][ T30] audit: type=1326 audit(1759381688.620:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f799dd8eacb code=0x7ffc0000 [ 901.075056][T16753] loop8: detected capacity change from 0 to 1 [ 901.139098][T16753] Dev loop8: unable to read RDB block 1 [ 901.168292][ T30] audit: type=1326 audit(1759381688.650:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 901.195442][T16753] loop8: unable to read partition table [ 901.245560][T16753] loop8: partition table beyond EOD, truncated [ 901.251910][T16753] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 901.334412][ T43] usb 6-1: USB disconnect, device number 6 [ 901.393956][ T30] audit: type=1326 audit(1759381688.650:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 901.464782][ T30] audit: type=1326 audit(1759381688.650:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 901.533898][ T30] audit: type=1326 audit(1759381688.650:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 901.564037][ T30] audit: type=1326 audit(1759381688.650:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 901.592757][ T30] audit: type=1326 audit(1759381688.650:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.6.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 901.801159][T16761] random: crng reseeded on system resumption [ 901.954305][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 902.119707][T16765] macvlan5: entered allmulticast mode [ 902.135489][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 902.285544][ T43] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 902.444515][T16775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.447805][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.447835][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.447857][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 902.447904][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 902.447926][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.451088][ T43] usb 5-1: config 0 descriptor?? [ 902.623641][T16657] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 902.769375][T16657] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 902.769394][T16657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.771383][T16657] usb 6-1: config 0 descriptor?? [ 902.778508][T16657] cp210x 6-1:0.0: cp210x converter detected [ 902.983844][ T43] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 903.016128][T16771] tipc: Can't bind to reserved service type 2 [ 903.076946][T16779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.077329][T16779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.112220][T16657] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 903.112263][T16657] cp210x 6-1:0.0: querying part number failed [ 903.152301][T16657] usb 6-1: cp210x converter now attached to ttyUSB0 [ 903.161516][T16657] usb 6-1: USB disconnect, device number 7 [ 903.272414][T16657] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 903.297420][T16783] rtc_cmos 00:00: Alarms can be up to one day in the future [ 903.336129][T16657] cp210x 6-1:0.0: device disconnected [ 904.221174][ T6482] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 904.375392][ T6482] usb 6-1: Using ep0 maxpacket: 16 [ 904.463394][ T6482] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 904.487921][ T6482] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 904.498479][ T6482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.575928][ T6482] usb 6-1: Product: syz [ 904.635336][ T6482] usb 6-1: Manufacturer: syz [ 904.639983][ T6482] usb 6-1: SerialNumber: syz [ 904.874749][T16803] loop8: detected capacity change from 0 to 1 [ 904.892778][T16803] Dev loop8: unable to read RDB block 1 [ 904.896943][ T6482] usb 6-1: config 0 descriptor?? [ 904.915009][T16803] loop8: unable to read partition table [ 904.922054][T16803] loop8: partition table beyond EOD, truncated [ 904.933593][T16803] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 905.057400][ T6482] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 905.068538][T16657] usb 5-1: USB disconnect, device number 125 [ 905.160579][T16810] loop2: detected capacity change from 0 to 7 [ 905.181207][ T5852] loop2: [ 905.184172][ T5852] loop2: partition table partially beyond EOD, truncated [ 905.188255][ T6482] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 905.212562][T16810] loop2: [ 905.216527][T16810] loop2: partition table partially beyond EOD, truncated [ 905.585378][T16657] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 905.700003][ T6482] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 905.855374][T16657] usb 5-1: Using ep0 maxpacket: 16 [ 905.892919][T16657] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.903412][T16657] usb 5-1: config 0 has no interfaces? [ 905.913662][T16657] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 905.925390][T16642] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 905.933436][T16657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.954406][T16657] usb 5-1: config 0 descriptor?? [ 906.190715][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'. [ 906.195867][ T6482] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 906.208342][T16642] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 906.221843][T16642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.252665][ T6482] em28xx 6-1:0.0: board has no eeprom [ 906.266455][T16642] usb 7-1: config 0 descriptor?? [ 906.275784][T16657] usb 5-1: USB disconnect, device number 126 [ 906.339789][T16642] gspca_main: spca508-2.14.0 probing 8086:0110 [ 906.491512][T16642] gspca_spca508: reg_read err -32 [ 906.606306][T16642] gspca_spca508: reg_read err -32 [ 907.050004][T16818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.062743][T16818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.164965][T16642] gspca_spca508: reg_read err -71 [ 907.178249][T16642] gspca_spca508: reg write: error -71 [ 907.252660][T16642] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 907.343244][T16642] usb 7-1: USB disconnect, device number 84 [ 907.454677][T16821] em28xx 6-1:0.0: reading from i2c device at 0x8 failed (error=-5) [ 907.514612][T16839] bond7: entered promiscuous mode [ 907.526657][ T6482] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 907.540902][ T6482] em28xx 6-1:0.0: dvb set to bulk mode. [ 907.546653][ T5911] em28xx 6-1:0.0: Binding DVB extension [ 907.565867][ T6482] usb 6-1: USB disconnect, device number 8 [ 907.583443][ T6482] em28xx 6-1:0.0: Disconnecting em28xx [ 907.618974][T16839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 907.666887][ T5911] em28xx 6-1:0.0: Registering input extension [ 907.674692][ T6482] em28xx 6-1:0.0: Closing input extension [ 907.691704][ T6482] em28xx 6-1:0.0: Freeing device [ 907.821975][T16642] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 908.037098][T16642] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.055730][T16642] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.099641][T16642] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 908.165124][T16642] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 908.204392][T16642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.311151][T16642] usb 7-1: config 0 descriptor?? [ 909.003405][T16858] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2925'. [ 909.202478][T16642] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 909.257997][T16642] usb 7-1: USB disconnect, device number 85 [ 909.494534][T16859] fido_id[16859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 909.615504][ T6482] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 909.777771][ T6482] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 909.787979][ T6482] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.845904][ T6482] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 909.900496][ T6482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.145476][ T6482] usb 5-1: usb_control_msg returned -32 [ 910.151264][ T6482] usbtmc 5-1:16.0: can't read capabilities [ 911.099328][T16864] delete_channel: no stack [ 911.681223][T16882] loop8: detected capacity change from 0 to 1 [ 911.716284][T16882] Dev loop8: unable to read RDB block 1 [ 911.721929][T16882] loop8: unable to read partition table [ 911.855783][T16882] loop8: partition table beyond EOD, truncated [ 911.875140][T16882] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 912.397910][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2934'. [ 912.511983][T16657] usb 5-1: USB disconnect, device number 127 [ 912.556564][T16899] loop8: detected capacity change from 0 to 1 [ 912.586949][T16899] Dev loop8: unable to read RDB block 1 [ 912.595960][T16899] loop8: unable to read partition table [ 912.649778][T16899] loop8: partition table beyond EOD, truncated [ 912.675208][T16899] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 912.905433][ T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 913.159462][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 913.168458][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.179460][ T43] usb 6-1: config 0 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 913.236364][ T43] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 913.331247][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 913.380555][ T43] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 913.424903][ T43] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 913.453536][ T43] usb 6-1: Product: syz [ 913.485708][ T43] usb 6-1: Manufacturer: syz [ 913.529149][ T43] usb 6-1: SerialNumber: syz [ 913.566549][ T43] usb 6-1: config 0 descriptor?? [ 913.585435][ T6482] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 913.650802][ T43] iuu_phoenix 6-1:0.0: required endpoints missing [ 913.743625][T16801] Set syz1 is full, maxelem 65536 reached [ 913.755962][ T6482] usb 5-1: Using ep0 maxpacket: 32 [ 913.777954][ T5911] usb 6-1: USB disconnect, device number 9 [ 913.790060][ T6482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.815391][ T6482] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 913.832628][ T6482] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 913.842243][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.862748][ T6482] usb 5-1: Product: syz [ 913.882534][ T6482] usb 5-1: Manufacturer: syz [ 913.892728][ T6482] usb 5-1: SerialNumber: syz [ 913.925398][T16642] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 913.941624][ T6482] usb 5-1: config 0 descriptor?? [ 913.948452][T16911] loop8: detected capacity change from 0 to 1 [ 913.960892][T16911] Dev loop8: unable to read RDB block 1 [ 913.966584][ T6482] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 913.974757][T16911] loop8: unable to read partition table [ 913.983322][T16911] loop8: partition table beyond EOD, truncated [ 913.996614][T16911] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 914.087338][T16642] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 914.104816][T16642] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.123475][T16642] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 914.136307][T16642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.375452][T16642] usb 7-1: usb_control_msg returned -32 [ 914.381131][T16642] usbtmc 7-1:16.0: can't read capabilities [ 915.403690][T16642] usb 7-1: USB disconnect, device number 86 [ 915.422589][T16924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 916.156037][T16642] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 916.216961][ T6482] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 916.294292][ T43] usb 5-1: USB disconnect, device number 2 [ 916.349013][T16642] usb 3-1: Using ep0 maxpacket: 16 [ 916.368484][T16642] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.425431][ T6482] usb 6-1: Using ep0 maxpacket: 8 [ 916.448791][T16642] usb 3-1: config 0 has no interfaces? [ 916.458514][ T5911] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 916.468479][ T6482] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 916.477625][ T6482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.504190][ T6482] usb 6-1: Product: syz [ 916.520487][T16642] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 916.552341][ T6482] usb 6-1: Manufacturer: syz [ 916.599910][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 916.599930][ T30] audit: type=1326 audit(1759381704.490:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 916.615798][ T6482] usb 6-1: SerialNumber: syz [ 916.643709][T16642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.693994][T16642] usb 3-1: config 0 descriptor?? [ 916.707642][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 916.726428][ T6482] usb 6-1: config 0 descriptor?? [ 916.769103][ T30] audit: type=1326 audit(1759381704.490:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 916.825176][ T5911] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 916.834984][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.938126][ T6482] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 916.944673][ T5911] usb 7-1: Product: syz [ 916.951654][ T5911] usb 7-1: Manufacturer: syz [ 916.956763][ T30] audit: type=1326 audit(1759381704.490:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 916.967305][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'. [ 917.024620][ T5911] usb 7-1: SerialNumber: syz [ 917.054394][ T30] audit: type=1326 audit(1759381704.490:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 917.061103][ T5911] usb 7-1: config 0 descriptor?? [ 917.105491][ T30] audit: type=1326 audit(1759381704.490:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 917.170559][ T30] audit: type=1326 audit(1759381704.490:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 917.210262][ T5933] usb 3-1: USB disconnect, device number 25 [ 917.277879][ T30] audit: type=1326 audit(1759381704.490:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 917.335413][ T30] audit: type=1326 audit(1759381704.490:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 917.388558][ T30] audit: type=1326 audit(1759381704.490:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 917.442208][ T30] audit: type=1326 audit(1759381704.490:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.7.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd98eec9 code=0x7ffc0000 [ 918.038921][T16934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.048833][T16934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.215610][T16657] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 918.579061][T16657] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 918.672380][T16657] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 918.845523][T16657] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 918.896177][ T5911] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 918.976177][T16657] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 918.988501][T16657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.024659][T16657] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 919.033809][T16657] usb 5-1: invalid MIDI out EP 0 [ 919.150436][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 919.187599][ T5911] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 919.200137][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.265628][ T5911] usb 3-1: Product: syz [ 919.323531][T16657] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 919.344561][ T5911] usb 3-1: Manufacturer: syz [ 919.403942][T16657] usb 5-1: USB disconnect, device number 3 [ 919.422092][ T5911] usb 3-1: SerialNumber: syz [ 919.452684][ T5911] usb 3-1: config 0 descriptor?? [ 919.469770][ T5911] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 919.479156][ T43] usb 7-1: USB disconnect, device number 87 [ 919.576526][ T5933] usb 6-1: USB disconnect, device number 10 [ 919.679838][ T5911] pwc: Warning: more than 1 configuration available. [ 920.136214][ T5911] pwc: Failed to set LED on/off time (-71) [ 920.146344][ T5911] pwc: send_video_command error -71 [ 920.153456][ T5911] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 920.164789][ T5911] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 920.209783][ T5911] usb 3-1: USB disconnect, device number 26 [ 920.585531][ T5933] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 920.957446][ T5933] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 920.968734][ T5933] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 920.981559][ T5933] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 920.992707][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.020062][T16968] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 921.036991][ T5933] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.093974][ T43] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 921.160712][ T5911] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 921.234765][T16968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.246695][T16968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.318379][ T5911] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 921.336657][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.346835][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.370885][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.395670][ T5911] usb 3-1: config 0 descriptor?? [ 921.405014][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 921.415139][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.423686][ T5911] cp210x 3-1:0.0: cp210x converter detected [ 921.533881][T16968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.559583][T16968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.623730][ T5911] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 921.636214][ T43] usb 5-1: usb_control_msg returned -32 [ 921.642402][ T43] usbtmc 5-1:16.0: can't read capabilities [ 921.652919][ T5911] cp210x 3-1:0.0: querying part number failed [ 921.670581][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 921.670598][ T30] audit: type=1326 audit(1759381709.520:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.6.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 921.737115][ T5911] usb 3-1: cp210x converter now attached to ttyUSB0 [ 921.746233][ T30] audit: type=1326 audit(1759381709.600:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.6.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 921.768561][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.779376][ T43] usb 7-1: USB disconnect, device number 88 [ 921.780454][ T5911] usb 3-1: USB disconnect, device number 27 [ 921.792751][ T30] audit: type=1326 audit(1759381709.600:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.6.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 921.815680][ T30] audit: type=1326 audit(1759381709.630:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.6.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799dd8eec9 code=0x7ffc0000 [ 921.838020][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.858137][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 921.866331][ T5911] cp210x 3-1:0.0: device disconnected [ 922.053374][T16990] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2963'. [ 922.260162][T16994] netlink: 'syz.2.2964': attribute type 8 has an invalid length. [ 922.419784][T16998] netlink: 'syz.2.2966': attribute type 10 has an invalid length. [ 922.430247][T16998] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.442980][T16998] bond0: (slave team0): Enslaving as an active interface with an up link [ 923.015689][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 923.138615][T17013] input: syz1 as /devices/virtual/input/input49 [ 923.175663][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 923.225408][T16657] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 923.285208][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 923.321582][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.357558][ T43] usb 3-1: Product: syz [ 923.372491][ T43] usb 3-1: Manufacturer: syz [ 923.392242][ T43] usb 3-1: SerialNumber: syz [ 923.397069][T16657] usb 7-1: Using ep0 maxpacket: 32 [ 923.411324][T16657] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 923.440628][T16657] usb 7-1: config 0 has no interface number 0 [ 923.468010][ T43] usb 3-1: config 0 descriptor?? [ 923.488362][T16657] usb 7-1: config 0 interface 89 has no altsetting 0 [ 923.532265][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 923.555750][T16657] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 923.611131][T16657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.631217][T16657] usb 7-1: Product: syz [ 923.642375][T16657] usb 7-1: Manufacturer: syz [ 923.656331][T16657] usb 7-1: SerialNumber: syz [ 923.673686][T16657] usb 7-1: config 0 descriptor?? [ 923.686820][T16657] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 923.728013][T16657] em28xx 7-1:0.89: Video interface 89 found: bulk [ 923.797042][T17022] netlink: 'syz.7.2976': attribute type 8 has an invalid length. [ 923.885223][T17011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.937887][ T5933] usb 5-1: USB disconnect, device number 4 [ 924.008737][T17011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.449144][ T5945] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 924.531241][T16657] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 924.561913][T17007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.612319][T17007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.635469][ T5945] usb 5-1: device descriptor read/64, error -71 [ 924.875464][ T5945] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 925.005600][ T5945] usb 5-1: device descriptor read/64, error -71 [ 925.166180][ T5945] usb usb5-port1: attempt power cycle [ 925.355140][T16657] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 925.368944][T16657] em28xx 7-1:0.89: board has no eeprom [ 925.425691][T16657] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 925.442530][T16657] em28xx 7-1:0.89: analog set to bulk mode. [ 925.459515][ T43] em28xx 7-1:0.89: Registering V4L2 extension [ 925.496680][T16657] usb 7-1: USB disconnect, device number 89 [ 925.533025][T16657] em28xx 7-1:0.89: Disconnecting em28xx [ 925.539118][ T5945] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 925.579776][ T5945] usb 5-1: device descriptor read/8, error -71 [ 925.606078][ T43] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 925.641949][ T43] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 925.674713][ T43] em28xx 7-1:0.89: No AC97 audio processor [ 925.774773][ T5911] usb 3-1: USB disconnect, device number 28 [ 925.876776][ T43] usb 7-1: Decoder not found [ 925.892565][ T43] em28xx 7-1:0.89: failed to create media graph [ 925.955413][ T5945] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 926.183536][ T43] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 926.273351][ T5945] usb 5-1: device descriptor read/8, error -71 [ 926.352748][ T43] em28xx 7-1:0.89: Registering snapshot button... [ 926.368218][T17044] ================================================================== [ 926.376310][T17044] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 926.383680][T17044] Read of size 8 at addr ffff888077d04740 by task v4l_id/17044 [ 926.391212][T17044] [ 926.393531][T17044] CPU: 1 UID: 0 PID: 17044 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 926.393549][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 926.393560][T17044] Call Trace: [ 926.393568][T17044] [ 926.393576][T17044] dump_stack_lvl+0x189/0x250 [ 926.393597][T17044] ? rcu_is_watching+0x15/0xb0 [ 926.393614][T17044] ? __kasan_check_byte+0x12/0x40 [ 926.393634][T17044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.393651][T17044] ? rcu_is_watching+0x15/0xb0 [ 926.393667][T17044] ? lock_release+0x4b/0x3e0 [ 926.393683][T17044] ? __virt_addr_valid+0x1c8/0x5c0 [ 926.393704][T17044] ? __virt_addr_valid+0x4a5/0x5c0 [ 926.393724][T17044] print_report+0xca/0x240 [ 926.393741][T17044] ? v4l2_fh_open+0xc7/0x430 [ 926.393755][T17044] kasan_report+0x118/0x150 [ 926.393773][T17044] ? v4l2_fh_open+0xc7/0x430 [ 926.393790][T17044] v4l2_fh_open+0xc7/0x430 [ 926.393806][T17044] em28xx_v4l2_open+0x157/0x9a0 [ 926.393831][T17044] v4l2_open+0x20c/0x360 [ 926.393848][T17044] chrdev_open+0x4c9/0x5e0 [ 926.393869][T17044] ? __pfx_chrdev_open+0x10/0x10 [ 926.393889][T17044] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 926.393911][T17044] ? __pfx_chrdev_open+0x10/0x10 [ 926.393930][T17044] do_dentry_open+0x953/0x13f0 [ 926.393948][T17044] vfs_open+0x3b/0x340 [ 926.393960][T17044] ? path_openat+0x2ecd/0x3830 [ 926.393977][T17044] path_openat+0x2ee5/0x3830 [ 926.393992][T17044] ? arch_stack_walk+0xfc/0x150 [ 926.394017][T17044] ? stack_depot_save_flags+0x40/0x860 [ 926.394041][T17044] ? __pfx_path_openat+0x10/0x10 [ 926.394056][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.394077][T17044] do_filp_open+0x1fa/0x410 [ 926.394092][T17044] ? __lock_acquire+0xab9/0xd20 [ 926.394107][T17044] ? __pfx_do_filp_open+0x10/0x10 [ 926.394130][T17044] ? _raw_spin_unlock+0x28/0x50 [ 926.394150][T17044] ? alloc_fd+0x64c/0x6c0 [ 926.394171][T17044] do_sys_openat2+0x121/0x1c0 [ 926.394186][T17044] ? __pfx_do_sys_openat2+0x10/0x10 [ 926.394201][T17044] ? exc_page_fault+0x76/0xf0 [ 926.394217][T17044] ? do_user_addr_fault+0xc85/0x1380 [ 926.394233][T17044] __x64_sys_openat+0x138/0x170 [ 926.394250][T17044] do_syscall_64+0xfa/0x3b0 [ 926.394265][T17044] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.394279][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.394293][T17044] ? clear_bhb_loop+0x60/0xb0 [ 926.394309][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.394324][T17044] RIP: 0033:0x7fafc58a7407 [ 926.394339][T17044] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 926.394353][T17044] RSP: 002b:00007ffde810f2a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 926.394369][T17044] RAX: ffffffffffffffda RBX: 00007fafc5f87880 RCX: 00007fafc58a7407 [ 926.394381][T17044] RDX: 0000000000000000 RSI: 00007ffde8110f1c RDI: ffffffffffffff9c [ 926.394392][T17044] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 926.394402][T17044] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 926.394412][T17044] R13: 00007ffde810f4f0 R14: 00007fafc608c000 R15: 0000560199e364d8 [ 926.394429][T17044] [ 926.394435][T17044] [ 926.701540][T17044] Allocated by task 43: [ 926.705679][T17044] kasan_save_track+0x3e/0x80 [ 926.710345][T17044] __kasan_kmalloc+0x93/0xb0 [ 926.714918][T17044] __kmalloc_cache_noprof+0x230/0x3d0 [ 926.720274][T17044] em28xx_v4l2_init+0x10b/0x2e70 [ 926.725199][T17044] em28xx_init_extension+0x11d/0x1c0 [ 926.730471][T17044] process_scheduled_works+0xade/0x17b0 [ 926.736011][T17044] worker_thread+0x8a0/0xda0 [ 926.740599][T17044] kthread+0x711/0x8a0 [ 926.744661][T17044] ret_from_fork+0x436/0x7d0 [ 926.749243][T17044] ret_from_fork_asm+0x1a/0x30 [ 926.754008][T17044] [ 926.756318][T17044] Freed by task 43: [ 926.760104][T17044] kasan_save_track+0x3e/0x80 [ 926.764775][T17044] kasan_save_free_info+0x46/0x50 [ 926.769807][T17044] __kasan_slab_free+0x5b/0x80 [ 926.774570][T17044] kfree+0x18e/0x440 [ 926.778463][T17044] em28xx_v4l2_init+0x1683/0x2e70 [ 926.783491][T17044] em28xx_init_extension+0x11d/0x1c0 [ 926.788768][T17044] process_scheduled_works+0xade/0x17b0 [ 926.794301][T17044] worker_thread+0x8a0/0xda0 [ 926.798877][T17044] kthread+0x711/0x8a0 [ 926.802931][T17044] ret_from_fork+0x436/0x7d0 [ 926.807505][T17044] ret_from_fork_asm+0x1a/0x30 [ 926.812257][T17044] [ 926.814560][T17044] The buggy address belongs to the object at ffff888077d04000 [ 926.814560][T17044] which belongs to the cache kmalloc-8k of size 8192 [ 926.828592][T17044] The buggy address is located 1856 bytes inside of [ 926.828592][T17044] freed 8192-byte region [ffff888077d04000, ffff888077d06000) [ 926.842548][T17044] [ 926.844854][T17044] The buggy address belongs to the physical page: [ 926.851245][T17044] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77d00 [ 926.859986][T17044] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 926.868465][T17044] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 926.875992][T17044] page_type: f5(slab) [ 926.879956][T17044] raw: 00fff00000000040 ffff88801a042280 dead000000000122 0000000000000000 [ 926.888519][T17044] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 926.897086][T17044] head: 00fff00000000040 ffff88801a042280 dead000000000122 0000000000000000 [ 926.905735][T17044] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 926.914383][T17044] head: 00fff00000000003 ffffea0001df4001 00000000ffffffff 00000000ffffffff [ 926.923035][T17044] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 926.931684][T17044] page dumped because: kasan: bad access detected [ 926.938084][T17044] page_owner tracks the page as allocated [ 926.943777][T17044] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17007, tgid 17002 (syz.2.2968), ts 924556763395, free_ts 924482459500 [ 926.964508][T17044] post_alloc_hook+0x240/0x2a0 [ 926.969262][T17044] get_page_from_freelist+0x21e4/0x22c0 [ 926.974795][T17044] __alloc_frozen_pages_noprof+0x181/0x370 [ 926.980586][T17044] alloc_pages_mpol+0x232/0x4a0 [ 926.985421][T17044] allocate_slab+0x8a/0x370 [ 926.989907][T17044] ___slab_alloc+0xbeb/0x1420 [ 926.994576][T17044] __kmalloc_noprof+0x305/0x4f0 [ 926.999414][T17044] tomoyo_supervisor+0xbd5/0x1480 [ 927.004418][T17044] tomoyo_path_permission+0x25a/0x380 [ 927.009771][T17044] tomoyo_path_perm+0x31a/0x4b0 [ 927.014603][T17044] tomoyo_path_symlink+0xa3/0xe0 [ 927.019521][T17044] security_path_symlink+0x177/0x380 [ 927.024791][T17044] do_symlinkat+0x107/0x3f0 [ 927.029279][T17044] __x64_sys_symlinkat+0x95/0xb0 [ 927.034199][T17044] do_syscall_64+0xfa/0x3b0 [ 927.038687][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.044561][T17044] page last free pid 5945 tgid 5945 stack trace: [ 927.050864][T17044] __free_frozen_pages+0xbc4/0xd30 [ 927.055970][T17044] __put_partials+0x156/0x1a0 [ 927.060639][T17044] put_cpu_partial+0x17c/0x250 [ 927.065383][T17044] __slab_free+0x2d5/0x3c0 [ 927.069785][T17044] qlist_free_all+0x97/0x140 [ 927.074358][T17044] kasan_quarantine_reduce+0x148/0x160 [ 927.079800][T17044] __kasan_slab_alloc+0x22/0x80 [ 927.084642][T17044] __kmalloc_cache_noprof+0x1be/0x3d0 [ 927.089998][T17044] usb_control_msg+0x73/0x3e0 [ 927.094659][T17044] hub_port_init+0xbf9/0x2800 [ 927.099319][T17044] hub_event+0x2532/0x4a20 [ 927.103720][T17044] process_scheduled_works+0xade/0x17b0 [ 927.109248][T17044] worker_thread+0x8a0/0xda0 [ 927.113821][T17044] kthread+0x711/0x8a0 [ 927.117876][T17044] ret_from_fork+0x436/0x7d0 [ 927.122450][T17044] ret_from_fork_asm+0x1a/0x30 [ 927.127201][T17044] [ 927.129508][T17044] Memory state around the buggy address: [ 927.135119][T17044] ffff888077d04600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 927.143160][T17044] ffff888077d04680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 927.151200][T17044] >ffff888077d04700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 927.159237][T17044] ^ [ 927.165367][T17044] ffff888077d04780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 927.173415][T17044] ffff888077d04800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 927.181452][T17044] ================================================================== [ 927.190199][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 927.199947][ T43] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input50 [ 927.448540][ T5945] usb usb5-port1: unable to enumerate USB device [ 927.478920][ T43] em28xx 7-1:0.89: Remote control support is not available for this card. [ 927.515360][T17044] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 927.522602][T17044] CPU: 0 UID: 0 PID: 17044 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 927.531630][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 927.541698][T17044] Call Trace: [ 927.544976][T17044] [ 927.547944][T17044] dump_stack_lvl+0x99/0x250 [ 927.552541][T17044] ? __asan_memcpy+0x40/0x70 [ 927.557128][T17044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.562321][T17044] ? __pfx__printk+0x10/0x10 [ 927.566899][T17044] vpanic+0x281/0x750 [ 927.570872][T17044] ? preempt_schedule+0xae/0xc0 [ 927.575707][T17044] ? __pfx_vpanic+0x10/0x10 [ 927.580196][T17044] ? preempt_schedule_common+0x83/0xd0 [ 927.585640][T17044] ? preempt_schedule+0xae/0xc0 [ 927.590469][T17044] ? __pfx_preempt_schedule+0x10/0x10 [ 927.595822][T17044] panic+0xb9/0xc0 [ 927.599530][T17044] ? __pfx_panic+0x10/0x10 [ 927.603930][T17044] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 927.609814][T17044] ? v4l2_fh_open+0xc7/0x430 [ 927.614385][T17044] check_panic_on_warn+0x89/0xb0 [ 927.619309][T17044] ? v4l2_fh_open+0xc7/0x430 [ 927.623879][T17044] end_report+0x78/0x160 [ 927.628107][T17044] kasan_report+0x129/0x150 [ 927.632596][T17044] ? v4l2_fh_open+0xc7/0x430 [ 927.637171][T17044] v4l2_fh_open+0xc7/0x430 [ 927.641591][T17044] em28xx_v4l2_open+0x157/0x9a0 [ 927.646449][T17044] v4l2_open+0x20c/0x360 [ 927.650690][T17044] chrdev_open+0x4c9/0x5e0 [ 927.655110][T17044] ? __pfx_chrdev_open+0x10/0x10 [ 927.660051][T17044] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 927.666386][T17044] ? __pfx_chrdev_open+0x10/0x10 [ 927.671327][T17044] do_dentry_open+0x953/0x13f0 [ 927.676100][T17044] vfs_open+0x3b/0x340 [ 927.680166][T17044] ? path_openat+0x2ecd/0x3830 [ 927.684941][T17044] path_openat+0x2ee5/0x3830 [ 927.689541][T17044] ? arch_stack_walk+0xfc/0x150 [ 927.694401][T17044] ? stack_depot_save_flags+0x40/0x860 [ 927.699864][T17044] ? __pfx_path_openat+0x10/0x10 [ 927.704808][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.710935][T17044] do_filp_open+0x1fa/0x410 [ 927.715537][T17044] ? __lock_acquire+0xab9/0xd20 [ 927.720389][T17044] ? __pfx_do_filp_open+0x10/0x10 [ 927.725422][T17044] ? _raw_spin_unlock+0x28/0x50 [ 927.730274][T17044] ? alloc_fd+0x64c/0x6c0 [ 927.734603][T17044] do_sys_openat2+0x121/0x1c0 [ 927.739269][T17044] ? __pfx_do_sys_openat2+0x10/0x10 [ 927.744451][T17044] ? exc_page_fault+0x76/0xf0 [ 927.749124][T17044] ? do_user_addr_fault+0xc85/0x1380 [ 927.754408][T17044] __x64_sys_openat+0x138/0x170 [ 927.759262][T17044] do_syscall_64+0xfa/0x3b0 [ 927.763764][T17044] ? lockdep_hardirqs_on+0x9c/0x150 [ 927.768960][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.775022][T17044] ? clear_bhb_loop+0x60/0xb0 [ 927.779695][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.785575][T17044] RIP: 0033:0x7fafc58a7407 [ 927.789974][T17044] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 927.809573][T17044] RSP: 002b:00007ffde810f2a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 927.817986][T17044] RAX: ffffffffffffffda RBX: 00007fafc5f87880 RCX: 00007fafc58a7407 [ 927.825946][T17044] RDX: 0000000000000000 RSI: 00007ffde8110f1c RDI: ffffffffffffff9c [ 927.833901][T17044] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 927.841855][T17044] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 927.849815][T17044] R13: 00007ffde810f4f0 R14: 00007fafc608c000 R15: 0000560199e364d8 [ 927.857778][T17044] [ 927.861059][T17044] Kernel Offset: disabled [ 927.865363][T17044] Rebooting in 86400 seconds..