last executing test programs: 33.270157588s ago: executing program 2 (id=79): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab3a3a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) gettid() r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000009840)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x880}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r5, 0x2f, 0x93, 0x6, 0x2, 0x4b, @private0, @loopback, 0x80, 0x20, 0x9, 0x4}}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 33.033132999s ago: executing program 2 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 32.863795275s ago: executing program 2 (id=83): r0 = syz_io_uring_setup(0x1d7d, &(0x7f0000000380)={0x0, 0x576c, 0x20, 0x2, 0x102}, &(0x7f0000000400), &(0x7f0000000440)) syz_io_uring_setup(0x11f3, &(0x7f0000000140)={0x0, 0x3ae7, 0x0, 0x1, 0xbfdffffc, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000340), 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x80053c) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x6c) fcntl$notify(r4, 0x402, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r8 = socket(0x1d, 0x2, 0x6) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) r10 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffff6, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r11 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r11, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r10, 0xc2604111, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r8, &(0x7f0000000500)=""/31, 0x1f, 0x80) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fe800000000000000000000000000029fe8000000000000000000000000000aa00004001", @ANYRES64=0x0, @ANYRES32=0x41424344, @ANYRES8=r7], 0x0) 31.910658365s ago: executing program 2 (id=87): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="016f000d01000000f70b14"], 0x36) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x89901) 29.672549738s ago: executing program 2 (id=92): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30000000001400000011"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 28.742021334s ago: executing program 2 (id=96): r0 = socket$isdn(0x22, 0x3, 0x2) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000010000407d1ed43000000000000109022400010000000009040000010300000009210066549170acfa21c719ddbfe1a9c9000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00220a0000000b3319f0bf97467f0b838886861e444c2a0cf972be099cc6677ad6bbd0570c8e331d14b8d9502ae4dd389850146e5c8c9067e84b08389fb0802d599116823e346989fd9777ebbe89aa8f2514a55523f5251c3d8b016b1ff702341f32199729e27b8a5d41f294bf6b4e209e6a3bbed683accd9f3f190a693b23114591d9d0b255d32c2ae421b76102a4653ede041755a725"], 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = socket(0x1d, 0x800, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000f80)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000640)="25215b9b935fc9937cd35e6b730726db4ae294e04b5efdaf6bb5e54906c0e3fb9f1cdbe596921518ac5474b3c13d781e57ce9aed263ece2c8af468518a4b3d6050511652cbba14be720fc738e6de42377d589a6eb87e654f765a25b0c8025bdb7d59ed5dfa5b63a8cba0a2fc61bd5f22086fcbea14677244098252805a3a5f9148e95a04f499ed9ec861e72913626e1c211f7d3a8c113953b0da39b617a5d9026d0d2c3b0ba050cb9c773461f2497d3d7fed8a0ce4387d52", 0xb8}, {&(0x7f00000002c0)="a1ab9adff3f9e64d8c237b163e84c2b5bc39615c6d", 0x15}, {&(0x7f0000000700)="5cd4cecf37f4ed20156257f0f79682d26345e1a351edab63ef0ead3ac8a57ec691bb219d897eecb32354e644963350da1c661843fdb81f7438fd4d6e28b01070b34951c2e5bf5eb65c9876ace66c5cabc1a7517a69d77229314a69fbd844254c5771fdf64341f70c1786c70c74bec3b5f6a835f98cbfbe4223bcb3c5950ee4028b25cecdfda99e70cc66fbe892ba4ad0b4c2a09c", 0x94}, {&(0x7f0000000bc0)="6b223149cfb813671773bfd424825159c672274b6b1605c97ca30b64f36820435db96d548a5b4817b247326a9466c8ebf052c6dfef54d22db31033161625b212d5", 0x41}, {&(0x7f0000000840)="df6bd9cfc6960f84b5e250cc98a77e2cbd2499589c8d20435fed168a897f365cc92e92cf6471774a676a5c2779ebc2fea2831ded3e4d00a62d89bb541609131c182a00620158f7b5b53bfb681510903e29bb3bf0ee1f446a2f79d45df61b599e8431fd696a4da40f29a22193418a10c9c1808c531af1cfc3f74eebb34963df2827de3f683875c00ee12a21f33aeccf9dffd82e8596e5df5c02d622368652a94b1ebd88c5d5cb3edb6fa05d874e8f4cb06bebb7697f96eaef614ad10809e4d48dd732744e2a1b13c04f0846dd8a71e3", 0xcf}, {&(0x7f0000000940)="d5ef4dad06d4ecd0d6c50c88b09f69c3e59fb7a2e2d9907e5c8894e804abb5dbac5f697d01462806769023d73108166dad6d9b6b8f99668d7fd8c29d0f2caa5cc4c62dc1f1722c8182f3c9f964dd4fc5936442b0f59287696f690be4ba96ed1218edd3580b65e92fcb43508d4e30", 0x6e}], 0x7, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, r0, r2, r0, r3]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r5, r5, r5, 0xffffffffffffffff, r2, r0, r4]}}], 0x148, 0x800}}], 0x1, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d0001070000000904000505030000000921000208012294030905810300000000000905"], 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000ec0)={0x5, 0x0, [{0x0, 0x90, &(0x7f0000000c40)=""/144}, {0x1, 0xc8, &(0x7f0000000d00)=""/200}, {0x80a0000, 0x1000, &(0x7f00000023c0)=""/4096}, {0xeeee0000, 0x7f, &(0x7f00000007c0)=""/127}, {0x10000, 0x9b, &(0x7f0000000e00)=""/155}]}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0x1b}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept$alg(r3, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000280), 0x10000000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r9, 0x80685600, &(0x7f00000005c0)) writev(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)="a170b635002b70a233dea67878e10428ea0cb3f8fa26390f7ae26f00539d042fa5ec41cb5aeacfef78f69f722a7f886116e6a865f4e4742c54c1f12c395a7ef096da245d3cc71fb68ee2b8a77e47231d42087a723336d0f87cd855e643d1aeb009ce65ad33c10263a82a763507c6d1c2f68130078358a8cbc4fec43d4a10473dff3b704c1ea25803f6ea3dd0273298f9ad2b206b0a7c7685fba016fa4b548b5ca34bbfb29c0c912c", 0xa8}, {&(0x7f0000000180)="4df4a3d66292c826dea42b9d1bafc1be4cc565a005d02b66934c2d8b772d188e53df73c889646bb9c8a7b416d4", 0x2d}, {&(0x7f00000001c0)="09f368dc4456990593b0f8b4f46d89bd74fa0fd33e2b92cc61aad85ba29da42c647dd0930e2f4474b6145686d88e4d0ca30ea2cbce49f3d0cf5a0602e3275cfce3048d11dd229f35e74fe910ae749275f052bf5a5042493a9a17af5261c5a806fb94519d5878993db29ada6bdf2143b9bdf1c9f08e8be04c77c1cb505b5f07632ef8171ee233054952aa2c37e7fa78883d627aa76c755c170a7e3c38bd6b9a8a45329cc678dd6733c272bb1ca5bd4b8758f32c106fec783845f21b13e0da90a5", 0xc0}], 0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12015001df802643df5f6156beb00102030109022400010707000609047b0602071932ff09050c02080010084409050708200002070e"], 0x0) shutdown(0xffffffffffffffff, 0x2) write$cgroup_int(r2, &(0x7f0000000040)=0x1c9, 0x12) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000000)={0x5, 0x2, 0x6382, 0x7, 0x2a, 0x9}) 27.668870826s ago: executing program 32 (id=96): r0 = socket$isdn(0x22, 0x3, 0x2) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000010000407d1ed43000000000000109022400010000000009040000010300000009210066549170acfa21c719ddbfe1a9c9000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00220a0000000b3319f0bf97467f0b838886861e444c2a0cf972be099cc6677ad6bbd0570c8e331d14b8d9502ae4dd389850146e5c8c9067e84b08389fb0802d599116823e346989fd9777ebbe89aa8f2514a55523f5251c3d8b016b1ff702341f32199729e27b8a5d41f294bf6b4e209e6a3bbed683accd9f3f190a693b23114591d9d0b255d32c2ae421b76102a4653ede041755a725"], 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = socket(0x1d, 0x800, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000f80)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000640)="25215b9b935fc9937cd35e6b730726db4ae294e04b5efdaf6bb5e54906c0e3fb9f1cdbe596921518ac5474b3c13d781e57ce9aed263ece2c8af468518a4b3d6050511652cbba14be720fc738e6de42377d589a6eb87e654f765a25b0c8025bdb7d59ed5dfa5b63a8cba0a2fc61bd5f22086fcbea14677244098252805a3a5f9148e95a04f499ed9ec861e72913626e1c211f7d3a8c113953b0da39b617a5d9026d0d2c3b0ba050cb9c773461f2497d3d7fed8a0ce4387d52", 0xb8}, {&(0x7f00000002c0)="a1ab9adff3f9e64d8c237b163e84c2b5bc39615c6d", 0x15}, {&(0x7f0000000700)="5cd4cecf37f4ed20156257f0f79682d26345e1a351edab63ef0ead3ac8a57ec691bb219d897eecb32354e644963350da1c661843fdb81f7438fd4d6e28b01070b34951c2e5bf5eb65c9876ace66c5cabc1a7517a69d77229314a69fbd844254c5771fdf64341f70c1786c70c74bec3b5f6a835f98cbfbe4223bcb3c5950ee4028b25cecdfda99e70cc66fbe892ba4ad0b4c2a09c", 0x94}, {&(0x7f0000000bc0)="6b223149cfb813671773bfd424825159c672274b6b1605c97ca30b64f36820435db96d548a5b4817b247326a9466c8ebf052c6dfef54d22db31033161625b212d5", 0x41}, {&(0x7f0000000840)="df6bd9cfc6960f84b5e250cc98a77e2cbd2499589c8d20435fed168a897f365cc92e92cf6471774a676a5c2779ebc2fea2831ded3e4d00a62d89bb541609131c182a00620158f7b5b53bfb681510903e29bb3bf0ee1f446a2f79d45df61b599e8431fd696a4da40f29a22193418a10c9c1808c531af1cfc3f74eebb34963df2827de3f683875c00ee12a21f33aeccf9dffd82e8596e5df5c02d622368652a94b1ebd88c5d5cb3edb6fa05d874e8f4cb06bebb7697f96eaef614ad10809e4d48dd732744e2a1b13c04f0846dd8a71e3", 0xcf}, {&(0x7f0000000940)="d5ef4dad06d4ecd0d6c50c88b09f69c3e59fb7a2e2d9907e5c8894e804abb5dbac5f697d01462806769023d73108166dad6d9b6b8f99668d7fd8c29d0f2caa5cc4c62dc1f1722c8182f3c9f964dd4fc5936442b0f59287696f690be4ba96ed1218edd3580b65e92fcb43508d4e30", 0x6e}], 0x7, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, r0, r2, r0, r3]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r5, r5, r5, 0xffffffffffffffff, r2, r0, r4]}}], 0x148, 0x800}}], 0x1, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d0001070000000904000505030000000921000208012294030905810300000000000905"], 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000ec0)={0x5, 0x0, [{0x0, 0x90, &(0x7f0000000c40)=""/144}, {0x1, 0xc8, &(0x7f0000000d00)=""/200}, {0x80a0000, 0x1000, &(0x7f00000023c0)=""/4096}, {0xeeee0000, 0x7f, &(0x7f00000007c0)=""/127}, {0x10000, 0x9b, &(0x7f0000000e00)=""/155}]}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0x1b}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept$alg(r3, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000280), 0x10000000, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r9, 0x80685600, &(0x7f00000005c0)) writev(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)="a170b635002b70a233dea67878e10428ea0cb3f8fa26390f7ae26f00539d042fa5ec41cb5aeacfef78f69f722a7f886116e6a865f4e4742c54c1f12c395a7ef096da245d3cc71fb68ee2b8a77e47231d42087a723336d0f87cd855e643d1aeb009ce65ad33c10263a82a763507c6d1c2f68130078358a8cbc4fec43d4a10473dff3b704c1ea25803f6ea3dd0273298f9ad2b206b0a7c7685fba016fa4b548b5ca34bbfb29c0c912c", 0xa8}, {&(0x7f0000000180)="4df4a3d66292c826dea42b9d1bafc1be4cc565a005d02b66934c2d8b772d188e53df73c889646bb9c8a7b416d4", 0x2d}, {&(0x7f00000001c0)="09f368dc4456990593b0f8b4f46d89bd74fa0fd33e2b92cc61aad85ba29da42c647dd0930e2f4474b6145686d88e4d0ca30ea2cbce49f3d0cf5a0602e3275cfce3048d11dd229f35e74fe910ae749275f052bf5a5042493a9a17af5261c5a806fb94519d5878993db29ada6bdf2143b9bdf1c9f08e8be04c77c1cb505b5f07632ef8171ee233054952aa2c37e7fa78883d627aa76c755c170a7e3c38bd6b9a8a45329cc678dd6733c272bb1ca5bd4b8758f32c106fec783845f21b13e0da90a5", 0xc0}], 0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12015001df802643df5f6156beb00102030109022400010707000609047b0602071932ff09050c02080010084409050708200002070e"], 0x0) shutdown(0xffffffffffffffff, 0x2) write$cgroup_int(r2, &(0x7f0000000040)=0x1c9, 0x12) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000000)={0x5, 0x2, 0x6382, 0x7, 0x2a, 0x9}) 7.178302689s ago: executing program 4 (id=173): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x7a, 0xdd, 0x15, 0x20, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x62, 0x0, 0x0, 0xa1, 0xc3, 0x85}}]}}]}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x20040, 0x0) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r1}, &(0x7f0000000240)=""/92, 0x5c, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.425552776s ago: executing program 3 (id=177): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x1007, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/17, &(0x7f0000000280)=0x11) write$dsp(r0, 0x0, 0xffda) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/130, 0x82}], 0x1, 0x7fffffffffffffff, 0x0) syz_io_uring_setup(0x6808, &(0x7f0000000040)={0x0, 0x4d1a, 0x400, 0x2, 0x7b, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000100)) 5.316245214s ago: executing program 4 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x9}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 5.233910244s ago: executing program 0 (id=181): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x5, 0x5}, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1a, &(0x7f00000001c0)={0x0, 0x80000, 0x8}) r0 = socket$alg(0x26, 0x5, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001000)=[{{&(0x7f00000003c0)=@alg, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/18, 0x12}, {&(0x7f0000000500)=""/48, 0x30}, {&(0x7f0000001080)=""/132, 0x84}, {&(0x7f0000000680)=""/158, 0x9e}, {&(0x7f0000000740)=""/41, 0x29}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000000800)=""/43, 0x2b}, {&(0x7f0000000840)=""/87, 0x57}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x9, &(0x7f0000000980)=""/233, 0xe9}, 0x4}, {{&(0x7f0000000a80)=@xdp, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/101, 0x65}, {&(0x7f0000000c40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/231, 0xe7}], 0x4, &(0x7f0000000f40)=""/163, 0xa3}, 0x1}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc02864cf, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x30e1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000380)={@dev}, 0x14) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001180)=ANY=[@ANYBLOB="012ff384f62d7032460100000000000067cdc0c145a051c55a0dbd063863c97f7130f7845707a050b2dfca71edd925104955f5aa3cd301a3a856ae223b437c5cb11ba7b48460659ffa84c7851d0be8af25ac750bee2b817b47a1923d9a58d729a1432b2226d7fcc8ac7028c40d14cbe060e73e0bfa5dbcc8b109e62b63c6b46cc94ce09d2a2fd1a35089c5e5763081764aefe01a83", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008080) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r7 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5b08bc1af2ca68b357310dce47d455f52", 0x29}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000100)="923ce7433d416ca64738d58d81d98214e1ee9ce11934c1b92733fe965ff68207759809cc99e61af687d3c76f2647e5e3f91c1e4abb3c757af8a5e05c0e5f95dd97f6f2bc9b8a18e4f5fb907105291257ec142375267d0bebcbd1aabd352f2301a6a2a4e101155e1040f325fd90c7b1da319acdb383bce65d9ff2ce536e60202657722d89a2e4f31981674b8bb69de805288a6bb27595766e2efed6a6b4dce6e3483e627e09fb78b71c003b7ec5e5", 0xae}, {&(0x7f00000002c0)="88faf5495d90f0c792ddd50b1b4f5dc805df51cbbe9995ddf8f61eea2038fd02c69168d0f0df23b9e8d52cf6b89087b9148c525fc833fb0ac9cb246d76577169bfec18294406a2b697aa1ae00b46bd4e1db5b485c0b14d686ceff9713b1a48a23872ae4b0db686843cb551dd5bd8fc6a4ff3e3d2c548957cb2ac961025e6d614cbf8de39c310effb6d07078d34d4f0a9464a0965713180829266fab25c55723d6938c981853943721310631744f53b056111ed651dd595addac8cd8a0c5648571aa425e0", 0xc4}], 0x2, 0x8, 0x101, 0x14) recvmmsg(r7, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000004b40)=""/231, 0xe7}], 0x2}, 0xe}], 0x2, 0x2021, 0x0) 5.110388072s ago: executing program 4 (id=182): syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='@\x00\xad\b\xe47\xd0\x920\x80sO\x82\xfe\xe1\x96^\x84.Z\x11j\x1a\f\x1c\xa31\x8du\xe4\xff\xca\xd1\xb0\x13\xfa\x8ex9\xe4\x81\x16]{\np\xa83\x02\"w\x97\x8c\x8f\x11W]\xfe\xf6t\x19f\x92\x1e\x16ni\xc5%H\xc9\xbe\xe5\x9a\xe5\xbf\x00\x00\xaa\xd9\a\x00\x9d\xbb\x92\x8btf\xa83\\2\x9d0c\x06\xa8\xf1s:&\xab\xb9\xe2T\xfc%\x1fH\x1e/\xa2|)\xb0,\x10\xb1\x85P\x7f\xdeR\xe8\xdf\xd9\xf7\t\x01\xca\xdc\xe2\x9f{_\xf1\x16R\x10\xbaV\x9c4\x99\xa8!lc\x9ePl.\x95\x00\x00\x00\x00\x00\x00\xbb\xcb\x03\xa6\xce\x03\xe7\xb8ND\x1bn\xaeNv2\xeb\x1eB$\xc5\xdc\xf8\x88\tX\x80Od^TN\xb3P\xb05)V\x1e9\x96>W\a\x1b\'\xe78\vn\x1d\xb5\xeb\xf0\xdfI\xe4\x86\x93\xbc\xd2\x06\x01\x8a\xa1\xdf\xf34\xbf\x88Rq\x84\xd2\x9e\x97\x9d\x84\x13\xcaJ\xb1M\xc7\xb96\xe1\xe7n\x93\xa0\xf6\x8d\xfc\xb9\xedq\x06\xdc\xc2\xee\x8e\xeb\xac\xe6\x15\x97\xc8\xe7f\x9as\xf5|\x12\x05\xef\xa0e\x1a4\x00\xafN\xf7\'\xa0\xe8^q\xfb\xd3B\x05\xde\xc89UxkY\x88%0[F\'\xbcC\xcd\xf0\xae\xa2\xfb\x1c\xa9;,\x1dP\xaeM\x0e\xe5\xaf\xfe\xde\xebjJ\xa7\xbb\x91W\x87\x1cuB\xf7\xd4i\xc3C;\xbbWh7\xfe\xbe\x90\xea\x05\x9b\xa7S\x9c\x8dx;N~\xb8Te\x87v\x84') madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000) 4.13040833s ago: executing program 0 (id=185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}}, 0x8000) 4.129139028s ago: executing program 4 (id=186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x400) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000003c0)=@abs={0x1}, 0x2) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) 3.936006139s ago: executing program 1 (id=187): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x20}, 0x80, 0x0, 0x0, &(0x7f0000001380)=ANY=[], 0x1130}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.924113682s ago: executing program 0 (id=188): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001051, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x6, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000240), 0x3, 0x80000) ioctl$RTC_PIE_OFF(r5, 0x7006) write$binfmt_misc(r4, &(0x7f00000000c0), 0xfdef) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/169, 0xa9}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/163, 0xa3}], 0x3) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x3, 0x5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf25000000", @ANYRES32=r9, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000013c0)={'ip6_vti0\x00', &(0x7f0000001340)={'ip6gre0\x00', 0x0, 0x8, 0x4, 0x8, 0x9, 0x20, @dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, 0x10, 0x1, 0x73, 0x13}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r0, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(r6, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001500)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0x58, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000001740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB="f80000005500000429bd7000fcdbdf2507000000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="010100007f0000010000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="01010400fc02000000000000000000000000000086dd000020000100", @ANYRES32=0x0, @ANYBLOB="00000000000000000010000008000000200001007c1857f95c113e4f6357ab77332f4151d290034af267067e94b9e0bcda53044c08f1717b318833cb91f558113d8435bbc9d8414bd5f7bb3cdc906d5018894f5bdecf44d0c22d10ed47b30d4215bf9cae78ea2f02b92adec97fc09c8e672928bf1a31f2a5decaaf394b82e10f55222e5eb899f98c3cb984719b3b8bad3ebbfde3b934a4572d0e70a3d27653bde1ac4730f665ec498e9e24ebd343796aed41ac7d90c1adfb6271c9b1ffa2771bea22babddcaa87baaf7eb667a9fa4be53cc330f47773d45cee24b0617c69ffc1130d3d76c213c33e6cc698db883a544261b74ac9f14f917e35f1552c8cf151485815931f4624babd7885bed30cd3e49a44750903ead026d81e208102ebb4a6671c3426cea2564f72181659ca1cb815316a0496a8ce3ea8b1b7444efbaabbf0a2732c87291a802c2ee262538a21bad2d75e52912bcc36cda34bba6584ab508bc1bd84d8259f0028440ecf555dbd5910f03a", @ANYRES32=r11, @ANYBLOB="01040300ac1e01010000000000000000000000000000000020000100", @ANYRES32=0x0, @ANYBLOB="01000100200100000000000000000000000000000000000020000100", @ANYRES32=r12, @ANYBLOB="010303000000000000000000000000000000000186dd000020000100", @ANYRES32=r13, @ANYBLOB="00010300"/24], 0xf8}, 0x1, 0x0, 0x0, 0x4000980}, 0x0) r14 = landlock_create_ruleset(&(0x7f0000000140)={0xeb32, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r14, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0xb}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0xb, 0x1000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x806c0, 0x0) 3.73069365s ago: executing program 1 (id=189): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="366667f30f011e0f22640fc77aeb0f06cb673e0f070f57df66b80500000066b9004000000f01c1f20f01439d0fc7b84992", 0x31}], 0x1, 0x44, 0x0, 0xfffffffffffffeb5) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa9}]}, 0x74}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64]) times(&(0x7f0000000040)) 3.313367917s ago: executing program 3 (id=191): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x182b, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 3.169674903s ago: executing program 3 (id=192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x9}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 2.9650979s ago: executing program 3 (id=193): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x20010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e", 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, &(0x7f00000002c0)={'sit0\x00', @ifru_map={0x5, 0x80000000, 0xe, 0x4, 0x7, 0x9}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0x80a0000) ioctl$KVM_NMI(r2, 0xae9a) socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x5, 0x2, 0xfa, 0x7}, {0x4ec9, 0x4, 0x4, 0x2c}, {0x800, 0x8, 0x3e, 0xe}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x28c1004, &(0x7f00000002c0)=ANY=[]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) umount2(&(0x7f0000000180)='./file0\x00', 0x2) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x4, 0x3, 0x3, 0x0, 0x1, 0xffff, {0x0, 0x0, 0x4, 0x3, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, r5, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r5], 0x7c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet_sctp(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0], 0x30}, 0x0) 1.961921989s ago: executing program 0 (id=194): creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a300000000028000480"], 0x9c}}, 0x0) (async) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000000)=0x8, 0x12) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x161, 0x40000867, r4, 0x0) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r2, 0x0, r3, &(0x7f00000002c0)=0x87ffffe, 0x4, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xfff, 0xb4c, 0x7fffffffffffffff, 0x6, 0x0, 0x5}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000c060104000000000000000005000006050fe961d0dc47518968ea342900010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) recvmmsg(r7, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) (async) socket$unix(0x1, 0x5, 0x0) 1.853083038s ago: executing program 3 (id=195): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x7, 0x5, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe, 0xde, 0x84, 0x20, 0x85a, 0x9, 0xa347, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xeb, 0x0, 0x2, 0x79, 0x16, 0xfd, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x400, 0x7, 0x4, 0x97, [@generic={0x9, 0x4, "0cc57295551d3e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xf9, 0xb, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x2, 0x5e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0xe3, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x6, 0x24, 0x6, 0x0, 0x0, "a5"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x4, 0xa1, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x44, 0x6, 0x6b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x73, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x6, 0x6}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xd, 0x7, 0xdc, 0x10, 0x8}, 0x8d, &(0x7f0000000380)={0x5, 0xf, 0x8d, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xb2, 0x2, 0x7, 0xf00f, 0x0, [0x3f0f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x28, 0x4, 0x8}, @ptm_cap={0x3}, @generic={0x58, 0x10, 0xa, "da2a447aed3c46d2300388b675894356feb0a3db7ff8037cb00d313e1991dfc8e81555d8afd791491c94284793b3bdfbf03385866fc0593450c1898c502dedf136f523ccdf83259953c62bd080619b8da9c42a8932"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0x7, 0x8, 0x1000, 0x8b}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xfcff}}, {0x98, &(0x7f00000004c0)=@string={0x98, 0x3, "7494e2f1a1c3513db30ad1cc0ae78c6d5bc7b518fd866a03408ee43e25582f20ba9feab92d75a8244dfc404fd81849a0513da621dac83efcabb941cc23402359e4ccf09bb06c83931fa6e3a7c64eba8c17fcab7a5178a6a737d2b877c09e12f039a39f2cfd6558c36ca00f0f2c7a3bd2f81e1c13ad904e4e05ebb583698f368f2cf4574a7dc32e8dd92c13403252a4a7f331f640cbf0"}}, {0xb7, &(0x7f0000000600)=@string={0xb7, 0x3, "3f7862de0cd16c96b98e55c0dfd01fe4334664f2d32be98d98954e8de4fc1bec2b149e098f5691e740f04744de59619691cd2936d46857911617c3b0084da9d9cc4cb859db6d47636bbbb7e0a97ef2a9a359adb867d930d5496beea9b6b85f0fe5e42799a6f96c14fd49d6cfe0f0488a64b800c60ad0bc897d0c45279c2e58caf898391bbd624ba0f06a74a1032ba803e1e9b881c21595ab6a6aee69fb9ce00112d97843bbe2c22f7ce29757b7b1f18d4891ef9d29"}}, {0x73, &(0x7f00000006c0)=ANY=[@ANYBLOB="730300bbf1bd6a5705f819fbfd691b5163ea5a0db495c540a6d99f929237079808000000489ec235d1952f5bcc9deff66b9055fa773d0f2ce640434fce83d04f9bf0fd34eb7aeb0b8c629911bd19fb922650ce0ac684c56c7d6e21645174fd2d85ce52641c9f395773c782de5ddc7dafb1c8cd"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42a}}, {0x32, &(0x7f0000000740)=@string={0x32, 0x3, "3bbff58ffd398a33e2e416348bda0cbb667ca6995a19cc8c4df35e4b5a7ca7cbb15d581d5594a9d449bf716607fe7b08"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41e}}, {0xfc, &(0x7f00000007c0)=@string={0xfc, 0x3, "66b2a893946b53e8f2da492d9d8a9a03bdd1273dad309883eba32382b54d8ca6c32ad71df581ca57db61707fe01ab3184adc0f125a004cbc51b4b17523615170ea51b8ac1d3b9ecebf01492ae930048b38a835fe8641defe279e7f5c0cbfc30c2e717529d10300876ac5e3067ce8e178b8d65424e4fff7c1b2f1a783ccd7bc8f6cebbf76206d47a56cee2c9c8c6b1d3874e9c96db263847327679d4036a169b77e9992ee7329e8cc4a31f83ea0a146b16dbc9824f52fc07741ada1cdb2cbb7bde00bd96782f4fc1930d59ccbc5755e6ef94c9fa4760440e1cbebeae648b64d616fbe4347cb0d5f5f0d6fd8909be5bdc00612828bd2df86d882ca"}}, {0x73, &(0x7f00000008c0)=@string={0x73, 0x3, "6ab419df569a4e636edcb0333e8e594c1de39f829ed3a83375e33e84c18a1ee5cf785c1e67b90bd7666cec43343a9979fe94f36c03a369addba6c423c4dc3b97fa5c963c85b36c08b9b3968189fae1120a07284a619e9144d544c72b154674bf00e47b803399b68608e8cfe328fc6851e7"}}]}) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000a00)={0x0, 0x7, 0x50, {0x50, 0xd, "392c00000000e4a361d9360e9c81bad7489c11eeba41b82b4dedd14f98b003872f0ea87e24c2d5ea657712ffa201ad5ea182bb40f2922722d69f8b086f2652e89b94e398ae56dc7668cd983a88c1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310329bd7000ffffffff0900000008000300", @ANYRES32, @ANYBLOB="080006000209"], 0x24}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="e500000008000000d5000000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x7, 0x5, 0x40}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe, 0xde, 0x84, 0x20, 0x85a, 0x9, 0xa347, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xeb, 0x0, 0x2, 0x79, 0x16, 0xfd, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x400, 0x7, 0x4, 0x97, [@generic={0x9, 0x4, "0cc57295551d3e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xf9, 0xb, 0x3}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x5e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0xe3, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x6, 0x24, 0x6, 0x0, 0x0, "a5"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x4, 0xa1, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x44, 0x6, 0x6b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x73, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x6, 0x6}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xd, 0x7, 0xdc, 0x10, 0x8}, 0x8d, &(0x7f0000000380)={0x5, 0xf, 0x8d, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xb2, 0x2, 0x7, 0xf00f, 0x0, [0x3f0f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x28, 0x4, 0x8}, @ptm_cap={0x3}, @generic={0x58, 0x10, 0xa, "da2a447aed3c46d2300388b675894356feb0a3db7ff8037cb00d313e1991dfc8e81555d8afd791491c94284793b3bdfbf03385866fc0593450c1898c502dedf136f523ccdf83259953c62bd080619b8da9c42a8932"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0x7, 0x8, 0x1000, 0x8b}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xfcff}}, {0x98, &(0x7f00000004c0)=@string={0x98, 0x3, "7494e2f1a1c3513db30ad1cc0ae78c6d5bc7b518fd866a03408ee43e25582f20ba9feab92d75a8244dfc404fd81849a0513da621dac83efcabb941cc23402359e4ccf09bb06c83931fa6e3a7c64eba8c17fcab7a5178a6a737d2b877c09e12f039a39f2cfd6558c36ca00f0f2c7a3bd2f81e1c13ad904e4e05ebb583698f368f2cf4574a7dc32e8dd92c13403252a4a7f331f640cbf0"}}, {0xb7, &(0x7f0000000600)=@string={0xb7, 0x3, "3f7862de0cd16c96b98e55c0dfd01fe4334664f2d32be98d98954e8de4fc1bec2b149e098f5691e740f04744de59619691cd2936d46857911617c3b0084da9d9cc4cb859db6d47636bbbb7e0a97ef2a9a359adb867d930d5496beea9b6b85f0fe5e42799a6f96c14fd49d6cfe0f0488a64b800c60ad0bc897d0c45279c2e58caf898391bbd624ba0f06a74a1032ba803e1e9b881c21595ab6a6aee69fb9ce00112d97843bbe2c22f7ce29757b7b1f18d4891ef9d29"}}, {0x73, &(0x7f00000006c0)=ANY=[@ANYBLOB="730300bbf1bd6a5705f819fbfd691b5163ea5a0db495c540a6d99f929237079808000000489ec235d1952f5bcc9deff66b9055fa773d0f2ce640434fce83d04f9bf0fd34eb7aeb0b8c629911bd19fb922650ce0ac684c56c7d6e21645174fd2d85ce52641c9f395773c782de5ddc7dafb1c8cd"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42a}}, {0x32, &(0x7f0000000740)=@string={0x32, 0x3, "3bbff58ffd398a33e2e416348bda0cbb667ca6995a19cc8c4df35e4b5a7ca7cbb15d581d5594a9d449bf716607fe7b08"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41e}}, {0xfc, &(0x7f00000007c0)=@string={0xfc, 0x3, "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"}}, {0x73, &(0x7f00000008c0)=@string={0x73, 0x3, "6ab419df569a4e636edcb0333e8e594c1de39f829ed3a83375e33e84c18a1ee5cf785c1e67b90bd7666cec43343a9979fe94f36c03a369addba6c423c4dc3b97fa5c963c85b36c08b9b3968189fae1120a07284a619e9144d544c72b154674bf00e47b803399b68608e8cfe328fc6851e7"}}]}) (async) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000a00)={0x0, 0x7, 0x50, {0x50, 0xd, "392c00000000e4a361d9360e9c81bad7489c11eeba41b82b4dedd14f98b003872f0ea87e24c2d5ea657712ffa201ad5ea182bb40f2922722d69f8b086f2652e89b94e398ae56dc7668cd983a88c1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310329bd7000ffffffff0900000008000300", @ANYRES32, @ANYBLOB="080006000209"], 0x24}}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="e500000008000000d5000000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) (async) 1.851826437s ago: executing program 1 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r5, &(0x7f0000000000)=0x8, 0x12) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000240)={"1666572787d61da604c5597d0973324d6aea63e6ba1ffb47cd3a0bceb7f9c564e41b6fba3eb889879b037159f14b29c52ffd6a6a1c2ab2ad958dc83666c0493484b22a6f4bb7644e7d3f2e19e46f9c5a6101e5e1159b11ec6e532a483aa90765c1c68d03c2cd3690006e0ab3d0f189f95270dba50deea7b97fa35b2550347815e943e01e6253d1453edeb85a87702bb023427d2224a7178252bfc1286722ad1071fc195172df183848c8992e3903fc22bb7a1f72d99f74554a3575b03fbf0f99278b116ec8634563df02fa1642550e1e253730ec1bf73913ea9b176813e64cf3a3e113e5b4158547faf9a53d561c78ae1fd6302fa2a2b4ce863e08bbf94978df19f5a877f329c106ac214624f368e15789926b45d508416504b199131fd347fb6eeaa4cb7d7c32f1c69a00c367d069b905f088575ca069b81dce97ad39b1790fb4de9770c7c4e55c7056fc7b4be56ca8c2dfc9f87ced776c2f15b5be2f380aa1ebc9daca4848ea85bdacd424db8cfb4c5921e2b1fb5418b8b13c7a895510375db455b05edfff4e557cbf7ab259e9d100aa7bdd1b74c2c85a6041416075c6d512dd796fb340363ab439555d3bec5ce6c93f9d63d83bc1280aa25ca75fec87d30a15b3bf8b79faa4b159d5edbf32e890607e039fd02f8e675359956ea703b0ce734fbfc0c5c2d946fa91c1bee0072c585152ab83edeea6aef1c7ed70aaa1de9f4701efa0152f06c50bdb793b5df95fb1b24f44da7966b969e38f3efd73ea8199b85041d62583644bcc3dbb3255ef01fe73369a575f9916d681953d832b004f93b6a4f63380e3a04675006a1b5e970271c21d8034f50098a012780bd5edd45caf820f1a0750cf99937c328892be316285748b4eaf94e9438fb7bfc87b8b1da0f0e067c8dc206a84dbb4bb23956bd47fd5665b1fc0cc8991ace4e244f5e073a31d56b3d4ea29d3d911459a8f5a25cf12203713c25a844e5122a807639e97e4f3c1a790cca125a672512978ac1078517581267af159cc7a21b32355b4fa3ef3aafe7aa35e22022300d3a63212f0f6172f61f1b6cde1e56dda5b99ba52ea2503b53cc94e6bfcf5cd06def7b9611caaad9e015ac1216279b5a35b1040502a7a1d09f8d83d60b2a2ddab1c48e589543fc8f8a0bef0812ef21dbc7835675423463c3cf4a15549800b741f5ed17b3a7ad94879feb38dd425d622976ecdb4082615a70fe28ab7c6f7271ec29f4c33bf30c955b5b438147a5fdc5911ff972dcb9bb292785df35e301a2d111c355551c08ce25c875af6d0f01f38c1d33df88253d0cf1d4e8f8a45f28f87916eed1d3adfc040c6df4be0367dcd66164b45405b4f4d8a5dd9b30b00ed8ca3cc38d7e054dc887923e0401ac9727e9c7abf2a0265f236658988d3357b2a4f38cbc87730e2cf665427c5aba8f5817a97c5ec5b34e7737266bced423f"}) close(r5) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'ip6tnl0\x00'}}, 0x1e) splice(r4, 0x0, r5, 0x0, 0x74, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x1000000, 0x0}) 1.670224418s ago: executing program 0 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000020300)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0xfff3, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_ACT={0x64, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}}, 0x4) 1.633693727s ago: executing program 1 (id=198): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xc9}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) fanotify_init(0x4, 0x101000) 1.555876941s ago: executing program 1 (id=199): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @remote, 0xffffffff}}, 0x24) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0) shutdown(r1, 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r6, 0x0, 0xffffffff004) (async) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000140)) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x11) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000400)={0x0, 0x5, 0x2, '\b\n'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x20, 0x16, 0x5, "40be966db7"}, 0x0, 0x0}) 1.482096577s ago: executing program 0 (id=200): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x4040140) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_io_uring_setup(0x3380, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) 1.366296323s ago: executing program 1 (id=202): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x24048050) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00f4"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r4 = epoll_create1(0x0) pselect6(0x40, &(0x7f00000000c0)={0x5, 0x7f, 0xd2d1, 0x8, 0x3fc, 0x0, 0xa20e, 0x6}, 0x0, &(0x7f0000000300)={0xb6, 0x6, 0x0, 0x8000000000000001, 0x7fa1, 0x5, 0x7, 0xce}, 0x0, 0x0) flistxattr(r4, &(0x7f0000001880)=""/67, 0x43) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000001b0003020000000000000000000052c463a810c0"], 0x48}}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001840)={&(0x7f0000001740)={0x1d, r7}, 0x10, &(0x7f0000001800)={&(0x7f0000001780)=@canfd={{0x0, 0x1, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "7f3428c177ece93a5fc08b381355f331ae8f7ac284c9d099a798b763ee1669c65d166a106cff3d799bf4ecab16df942c6dbcb6bfd94bf913c6c95ac22340dcb9"}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001b40)=[{&(0x7f0000000400)="1282cb6323b96773d68283f092a36757f9186f3e45709adbba6354d3843a4de60bfe6e5b3cafcdbce0f226440610080c8a345793402b770bcfa30544e88532a7f7895069", 0x44}, {&(0x7f0000000580)="790114ac96aa325676cb094d292d16eb209539a635d5f383b9baeae3898d763d17551b87eea059f535ad1ef0aa66b4da381ec5a94eae24e5c6a221e3db348a218ba0b68028ee2a01", 0x48}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000100)="3d2c0ec1ca7cf16c95b488880f93dbe58ab3ada2285cad626fc7cd03a5750583eba283a2ee9afef5775b33c31fd93c2f", 0x30}, {&(0x7f0000001940)="b796ff3a4f17294ec6503bf98e8340cd7fa485ee33bc7039da04f1697e0d041a1a27685d3d8842f67f39d95ce9eaef2badb0ecb98d6e2cf94ea272b31eda2c00f236c66c660db01367fb298515fef1f773264d51e4ed1e45243dac918e22f386c0099560a0bf49b84fefa27d77ea734a0103c22aca040c1b4b52652076955564e20c1372d953a4dfcd75cfb82283f53f5868ac4595644626db02c341c93b2c4ff24f0f8bf9d07218ec00f3ec6ebfc898256193277f7cb4f3a09bec25caab38e6c9150ff211e90a99c91bacc0b7bd7a7a30d8a35f1c080ae09293d7e1ae9793a31226451d316cb150535e422af715cd", 0xef}, {&(0x7f0000001a40)="e6b0fea2e25a067d54bd687abb34af91968d34144c0856b8d85d85d094870fb8c176f25209b987cb062e6da0fb14a853a7bcdb60f024c8a6fa9680ea33d6d6d98d3a8d5acc816323796d4aaf68531a83634f2b4ca3b6788faf7f22207c76e577a5861db0367f497ccb4f52f6ec98582bf691b8c48b4b33f44acea15197bf599f2d38053fe8782ce6e76b63dd43b1e0573bcdb6491027402309c64d3afd9f50220badc57b8b9a3b2ad027a12ba3200a55214233ac58ca87486c0057caa629a0239424b90ea83cfcbeb5b2e5b1909e", 0xce}, {&(0x7f0000001600)="4374e622e451659ea3dfd36d9dbe4c33c4955acd05d8093444bf4cd6a5cfe153555f3408e11e14f2ed8f3a8386f0d7d5637d513ae8ec3737e5685e396b34de7f3042393f61b72e", 0x47}], 0x7) read$alg(r3, &(0x7f0000000000)=""/70, 0x46) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000016c0)={{0xa, 0x4e20, 0x3, @mcast2, 0x9}, {0xa, 0x4e24, 0x1, @mcast2, 0x6}, 0x0, {[0x42, 0x101, 0x10, 0x7fff, 0x3, 0x54e8, 0x3, 0x2]}}, 0x5c) 1.230229487s ago: executing program 5 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x9}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 1.145663834s ago: executing program 5 (id=204): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1, 0x2dc, 0x6, 0x1, 0xff, 0x2, 0x4, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x7, 0x4, 0x9c, 0x8000, 0x9}}, 0x0) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffff}) (async, rerun: 32) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001200050926bd7000fb09df255f7b6719b560c33041aa23f90a0904004e224166fbffffff240900000600000006000000fdffffff", @ANYRES32=0x0, @ANYBLOB="0a0000090010000006000000ffffffff22"], 0x70}, 0x1, 0x0, 0x0, 0x26000001}, 0x800) (rerun: 32) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) (async) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f0000000100), 0x0, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0xffffdfff}}], 0x18}, 0x40) (async) ftruncate(0xffffffffffffffff, 0x1ff) (async) syz_clone(0x860111, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="008711400000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r7 = socket$kcm(0xa, 0x5, 0x0) (async) r8 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) (async) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, &(0x7f0000000000)={r8}) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)) 1.042468489s ago: executing program 5 (id=205): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000007110b200000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000008, r0, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r2, r4, 0x4e, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000800)={'#! ', './file0'}, 0xb) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x156) (async) r7 = syz_io_uring_setup(0x460, &(0x7f0000000280)={0x0, 0x4000001c, 0x10, 0x2, 0x8, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x20, 0x0, {0x2}}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) 938.371053ms ago: executing program 4 (id=206): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r0, 0x3ff, {0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x12, 0x15, 0x10, "deb38e383665f0be1c46c0db659153ff065e7ea4dd25e94302cb2f9ea62a27be1f580b216b210ae93f95721b03bfee2d18454e67d3892f57380dc5e69ced0bb7", "ac388f90476f6f809f49d1ac5d9719f6b8db68e131346f945f75c33cb978fb26e8a2c353e0c842e4ef26b15866dd509a331e13b87a1b9526cd8e90b057de6334", "cc114f54a1ea3bdbf34af74f1895cd71a7000000000000a691650700c700", [0x6, 0x5]}}) linkat(r1, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', r1, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x200) 867.585838ms ago: executing program 5 (id=207): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, 0x2, 0x7, 0xd01, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb46}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000180c2000000080045000028006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04ffff4acc7df7a36e7801fa390000"], 0x0) 812.010101ms ago: executing program 4 (id=208): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000680)="e6", 0x1}], 0x1}}], 0x1, 0x200400c0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xc, [{{0x9, 0x4, 0x0, 0x43, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x80}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x2, 0xc, 0xf9, 0x3}, {0x5, 0xff, 0x6, 0x54}]}) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) pipe2$watch_queue(&(0x7f0000000180), 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) sendmmsg$alg(r4, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r6], 0x20}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'geneve1\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x100, 0x45, "77f8a4cf1e08a95950e0348431af2113e01dee8307a9049ff12a260faedc4831b4e06be1331b5cc1232fea0969adef2ad96ab829f5fd0f8c5e619faed7bedec336cfc1f16a"}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c40)={0x24, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x9, "13f1"}, @local=@item_012={0x1, 0x2, 0x0, "c0"}]}}, 0x0}, 0x0) 628.030986ms ago: executing program 3 (id=209): r0 = open(&(0x7f0000000180)='.\x00', 0x180000, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000000)='.\x00', 0x10000, 0x0) flock(r2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) 536.55865ms ago: executing program 5 (id=210): syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x64, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x80, 0x40, 0x503, 0xfffffaad, {{0xe, 0x4, 0x2, 0x6, 0x38, 0x68, 0x0, 0x6, 0x2f, 0x0, @local, @empty, {[@ssrr={0x89, 0xf, 0xd5, [@multicast1, @loopback, @private=0xa010101]}, @lsrr={0x83, 0x13, 0xf7, [@multicast1, @loopback, @multicast2, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xec, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000040}, 0x4840) r5 = syz_open_dev$sg(&(0x7f0000000740), 0xfffffffffffffffe, 0x140083) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000780)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc041) openat$nullb(0xffffffffffffff9c, &(0x7f00000009c0), 0x4e4900, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r7, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x8044) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000b40), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000b80)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000bc0)={0x28, 0x5, r9, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10}) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000c00), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000c40)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x6b, 0x3a, '', 0x3a, '\xcf&!', 0x3a, './file0', 0x3a, [0x43, 0x50, 0x50]}, 0x2d) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000cc0), 0x13f, 0x2}}, 0x20) r12 = socket$inet6(0xa, 0x4, 0x2f) bind$inet6(r12, &(0x7f0000000d40)={0xa, 0x7, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) r13 = getpgrp(0x0) ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000d80)={'\x00', 0x9, 0x401, 0x6, 0xdfd7, 0x55a, r13}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffff7}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x87a}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x4}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xa8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x3) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x400) 0s ago: executing program 5 (id=211): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040580411500000000000010902240001000000000904000002030000000921feff000122050009058103"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) listxattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=""/212, 0xd4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) sched_setattr(r5, &(0x7f0000000380)={0x38, 0x5, 0x1c, 0x7, 0x8, 0xfffffffeffffffff, 0x401, 0xffff, 0x4, 0xb}, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x9, [@typedef={0x6}, @enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0xf, 0x7}, {0x4, 0xbb5}, {0x9, 0x4}, {0xa}]}, @union={0x5, 0x4, 0x0, 0x5, 0x0, 0x9, [{0xf, 0x3, 0xa12}, {0xc, 0x2, 0x1}, {0xc, 0x3, 0x1}, {0x8, 0x4}]}, @ptr={0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x2}]}, @float={0xf, 0x0, 0x0, 0x10, 0xc}, @func={0xb, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x2e, 0x30, 0x61, 0x0, 0x61, 0x61]}}, &(0x7f0000000840)=""/228, 0xcd, 0xe4, 0x1, 0x7f, 0x10000, @value=r6}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"/313], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r9 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x81800) accept4$packet(r9, 0x0, &(0x7f0000000440), 0x80800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 84.203918][ T5852] cgroup: Unknown subsys name 'net' [ 84.361583][ T5852] cgroup: Unknown subsys name 'cpuset' [ 84.370653][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.067123][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.781561][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.788198][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.797092][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.798885][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.806373][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.821397][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.828906][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.836829][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.844675][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.846452][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.901869][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.909356][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.909356][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.911404][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.920989][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.926914][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.938888][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.947497][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.953944][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.967622][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.973429][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.975892][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.990341][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.996750][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.017608][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.654346][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 89.793016][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 89.902624][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 89.930499][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 89.976921][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 90.064286][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.072255][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.080260][ T5880] bridge_slave_0: entered allmulticast mode [ 90.087922][ T5880] bridge_slave_0: entered promiscuous mode [ 90.146476][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.154713][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.162540][ T5880] bridge_slave_1: entered allmulticast mode [ 90.170549][ T5880] bridge_slave_1: entered promiscuous mode [ 90.266504][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.273839][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.281561][ T5883] bridge_slave_0: entered allmulticast mode [ 90.289292][ T5883] bridge_slave_0: entered promiscuous mode [ 90.345374][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.353159][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.360608][ T5883] bridge_slave_1: entered allmulticast mode [ 90.368802][ T5883] bridge_slave_1: entered promiscuous mode [ 90.379525][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.392663][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.429381][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.436538][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.443805][ T5882] bridge_slave_0: entered allmulticast mode [ 90.451180][ T5882] bridge_slave_0: entered promiscuous mode [ 90.460447][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.467975][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.475158][ T5884] bridge_slave_0: entered allmulticast mode [ 90.482925][ T5884] bridge_slave_0: entered promiscuous mode [ 90.546448][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.553815][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.562123][ T5882] bridge_slave_1: entered allmulticast mode [ 90.569624][ T5882] bridge_slave_1: entered promiscuous mode [ 90.576900][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.584712][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.592099][ T5884] bridge_slave_1: entered allmulticast mode [ 90.599432][ T5884] bridge_slave_1: entered promiscuous mode [ 90.612190][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.635483][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.642792][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.650163][ T5881] bridge_slave_0: entered allmulticast mode [ 90.657918][ T5881] bridge_slave_0: entered promiscuous mode [ 90.708534][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.733406][ T5880] team0: Port device team_slave_0 added [ 90.742830][ T5880] team0: Port device team_slave_1 added [ 90.749447][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.756664][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.764206][ T5881] bridge_slave_1: entered allmulticast mode [ 90.771866][ T5881] bridge_slave_1: entered promiscuous mode [ 90.795168][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.879334][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.906580][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.920879][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.931807][ T5883] team0: Port device team_slave_0 added [ 90.939832][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.946794][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.973857][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.984656][ T5872] Bluetooth: hci1: command tx timeout [ 90.991802][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.031569][ T5883] team0: Port device team_slave_1 added [ 91.038413][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.045371][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.057751][ T5872] Bluetooth: hci3: command tx timeout [ 91.072404][ T5875] Bluetooth: hci0: command tx timeout [ 91.077046][ T5872] Bluetooth: hci4: command tx timeout [ 91.082461][ T5875] Bluetooth: hci2: command tx timeout [ 91.093179][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.107060][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.132922][ T5882] team0: Port device team_slave_0 added [ 91.204603][ T5881] team0: Port device team_slave_0 added [ 91.213231][ T5882] team0: Port device team_slave_1 added [ 91.222378][ T5884] team0: Port device team_slave_0 added [ 91.232152][ T5884] team0: Port device team_slave_1 added [ 91.255260][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.262575][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.289261][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.303375][ T5881] team0: Port device team_slave_1 added [ 91.367149][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.374515][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.401023][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.443968][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.451082][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.477165][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.489498][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.496471][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.523690][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.543600][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.550924][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.577345][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.602859][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.609977][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.636079][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.648516][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.655581][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.682159][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.694761][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.702176][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.728185][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.752839][ T5880] hsr_slave_0: entered promiscuous mode [ 91.759523][ T5880] hsr_slave_1: entered promiscuous mode [ 91.825133][ T5884] hsr_slave_0: entered promiscuous mode [ 91.832091][ T5884] hsr_slave_1: entered promiscuous mode [ 91.838596][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 91.844434][ T5884] Cannot create hsr debugfs directory [ 91.925464][ T5881] hsr_slave_0: entered promiscuous mode [ 91.932293][ T5881] hsr_slave_1: entered promiscuous mode [ 91.942227][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 91.948048][ T5881] Cannot create hsr debugfs directory [ 92.033019][ T5883] hsr_slave_0: entered promiscuous mode [ 92.040440][ T5883] hsr_slave_1: entered promiscuous mode [ 92.046913][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 92.053195][ T5883] Cannot create hsr debugfs directory [ 92.113412][ T5882] hsr_slave_0: entered promiscuous mode [ 92.121229][ T5882] hsr_slave_1: entered promiscuous mode [ 92.128035][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 92.133795][ T5882] Cannot create hsr debugfs directory [ 92.706122][ T5884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.721154][ T5884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.741817][ T5884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.762533][ T5884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.827676][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.864807][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.892924][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.907072][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.976217][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.001773][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.021164][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.044982][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.057853][ T5875] Bluetooth: hci1: command tx timeout [ 93.138439][ T5875] Bluetooth: hci4: command tx timeout [ 93.143914][ T5875] Bluetooth: hci0: command tx timeout [ 93.150123][ T51] Bluetooth: hci3: command tx timeout [ 93.150217][ T5872] Bluetooth: hci2: command tx timeout [ 93.162876][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.195007][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.208340][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.223054][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.246641][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.343118][ T5883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.356181][ T5883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.384519][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.393970][ T5883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.405858][ T5883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.434201][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.441611][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.466381][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.486576][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.493801][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.602020][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.635553][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.642865][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.654834][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.662012][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.830957][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.861549][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.911953][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.942397][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.962162][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.979686][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.986934][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.999991][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.030224][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.037424][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.059417][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.066588][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.091485][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.106595][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.113737][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.125764][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.161972][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.169161][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.223020][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.230211][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.265818][ T5880] veth0_vlan: entered promiscuous mode [ 94.330785][ T5880] veth1_vlan: entered promiscuous mode [ 94.420372][ T5884] veth0_vlan: entered promiscuous mode [ 94.471616][ T5884] veth1_vlan: entered promiscuous mode [ 94.499903][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.507989][ T5880] veth0_macvtap: entered promiscuous mode [ 94.529037][ T5880] veth1_macvtap: entered promiscuous mode [ 94.566040][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.603488][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.614990][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.652359][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.666361][ T5884] veth0_macvtap: entered promiscuous mode [ 94.686186][ T5884] veth1_macvtap: entered promiscuous mode [ 94.716540][ T1158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.726875][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.761053][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.770363][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.794853][ T5882] veth0_vlan: entered promiscuous mode [ 94.822524][ T5882] veth1_vlan: entered promiscuous mode [ 94.846174][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.867140][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.924237][ T5881] veth0_vlan: entered promiscuous mode [ 94.946799][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.957939][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.987526][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.005195][ T5883] veth0_vlan: entered promiscuous mode [ 95.013031][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.022309][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.044947][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.067148][ T5883] veth1_vlan: entered promiscuous mode [ 95.072797][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.092368][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.092635][ T5881] veth1_vlan: entered promiscuous mode [ 95.138925][ T5872] Bluetooth: hci1: command tx timeout [ 95.173326][ T5883] veth0_macvtap: entered promiscuous mode [ 95.184795][ T5883] veth1_macvtap: entered promiscuous mode [ 95.195044][ T5882] veth0_macvtap: entered promiscuous mode [ 95.216320][ T5880] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.236920][ T5872] Bluetooth: hci2: command tx timeout [ 95.236930][ T5875] Bluetooth: hci4: command tx timeout [ 95.238569][ T5875] Bluetooth: hci0: command tx timeout [ 95.245229][ T5872] Bluetooth: hci3: command tx timeout [ 95.280365][ T5882] veth1_macvtap: entered promiscuous mode [ 95.323630][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.344463][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.404572][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.423170][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.435250][ T5881] veth0_macvtap: entered promiscuous mode [ 95.448324][ T3534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.459815][ T3534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.479299][ T3534] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.519153][ T5881] veth1_macvtap: entered promiscuous mode [ 95.526663][ T3534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.554394][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.585592][ T5882] percpu: allocation failed, size=8 align=8 atomic=1, atomic alloc failed, no space left [ 95.599281][ T5882] IPv6: batadv_slave_1: Failed to add prefix route for address fe80::3f; dropping [ 95.609178][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.706815][ T5965] netlink: 'syz.3.6': attribute type 12 has an invalid length. [ 95.733658][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.739587][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.749137][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.751341][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.765107][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.775053][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.797804][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.818623][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.871763][ T3501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.882322][ T3501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.906254][ T3501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.939084][ T3501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.043322][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.118380][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.136564][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.231928][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.259512][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.394165][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.407899][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.509049][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.544003][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.595385][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.618989][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.693447][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.718020][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.888026][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.088608][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 97.130808][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.163626][ T9] cfg80211: failed to load regulatory.db [ 97.191675][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.214389][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.219487][ T5872] Bluetooth: hci1: command tx timeout [ 97.231836][ T5995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.235176][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.298057][ T5872] Bluetooth: hci3: command tx timeout [ 97.299053][ T5875] Bluetooth: hci0: command tx timeout [ 97.303511][ T5872] Bluetooth: hci2: command tx timeout [ 97.303549][ T5872] Bluetooth: hci4: command tx timeout [ 97.396383][ T6000] FAULT_INJECTION: forcing a failure. [ 97.396383][ T6000] name failslab, interval 1, probability 0, space 0, times 1 [ 97.397473][ T5958] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.409951][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.431562][ T6002] fuse: Bad value for 'group_id' [ 97.436553][ T6002] fuse: Bad value for 'group_id' [ 97.491144][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 97.491173][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.491195][ T6000] Call Trace: [ 97.491204][ T6000] [ 97.491215][ T6000] dump_stack_lvl+0x189/0x250 [ 97.491252][ T6000] ? __pfx____ratelimit+0x10/0x10 [ 97.491286][ T6000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.491313][ T6000] ? __pfx__printk+0x10/0x10 [ 97.491346][ T6000] ? __pfx___might_resched+0x10/0x10 [ 97.491367][ T6000] ? fs_reclaim_acquire+0x7d/0x100 [ 97.491406][ T6000] should_fail_ex+0x414/0x560 [ 97.491441][ T6000] should_failslab+0xa8/0x100 [ 97.491475][ T6000] __kmalloc_noprof+0xcb/0x4f0 [ 97.491504][ T6000] ? tomoyo_encode+0x28b/0x550 [ 97.491530][ T6000] tomoyo_encode+0x28b/0x550 [ 97.491559][ T6000] tomoyo_realpath_from_path+0x58d/0x5d0 [ 97.491592][ T6000] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 97.491623][ T6000] tomoyo_path_number_perm+0x1e8/0x5a0 [ 97.491658][ T6000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.491719][ T6000] ? __lock_acquire+0xab9/0xd20 [ 97.491774][ T6000] ? __fget_files+0x2a/0x420 [ 97.491797][ T6000] ? __fget_files+0x2a/0x420 [ 97.491814][ T6000] ? __fget_files+0x3a0/0x420 [ 97.491832][ T6000] ? __fget_files+0x2a/0x420 [ 97.491855][ T6000] security_file_ioctl+0xcb/0x2d0 [ 97.491888][ T6000] __se_sys_ioctl+0x47/0x170 [ 97.491918][ T6000] do_syscall_64+0xfa/0x3b0 [ 97.491938][ T6000] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.491969][ T6000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.491991][ T6000] ? clear_bhb_loop+0x60/0xb0 [ 97.492017][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.492038][ T6000] RIP: 0033:0x7f7f3e38ebe9 [ 97.492065][ T6000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.492083][ T6000] RSP: 002b:00007f7f3f1ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.492110][ T6000] RAX: ffffffffffffffda RBX: 00007f7f3e5c5fa0 RCX: 00007f7f3e38ebe9 [ 97.492126][ T6000] RDX: 00002000000008c0 RSI: 00000000c0185500 RDI: 0000000000000005 [ 97.492140][ T6000] RBP: 00007f7f3f1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 97.492157][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.492169][ T6000] R13: 00007f7f3e5c6038 R14: 00007f7f3e5c5fa0 R15: 00007f7f3e6efa28 [ 97.492203][ T6000] [ 97.492266][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.492295][ T6000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.730726][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 97.797933][ T10] usbtmc 5-1:16.0: can't read capabilities [ 97.828270][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 97.849987][ T5958] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 97.861585][ T5958] usb 2-1: config 0 has no interface number 1 [ 97.893070][ T5958] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.938995][ T5958] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 97.997922][ T5958] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 98.047900][ T5958] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 98.077793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.087741][ T5958] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.141205][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 98.163891][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 98.217095][ T5958] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 98.238303][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.253890][ T5958] usb 2-1: Product: syz [ 98.273277][ T5958] usb 2-1: Manufacturer: syz [ 98.278539][ T5958] usb 2-1: SerialNumber: syz [ 98.297825][ T5958] usb 2-1: config 0 descriptor?? [ 98.317337][ T5923] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.337122][ T5989] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.387648][ T6007] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.414922][ T5958] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.452534][ T5958] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.498451][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 98.522650][ T5923] usb 4-1: config 5 has an invalid interface number: 35 but max is 1 [ 98.541342][ T5923] usb 4-1: config 5 has an invalid interface number: 4 but max is 1 [ 98.550819][ T6007] usb 3-1: Using ep0 maxpacket: 16 [ 98.571024][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.591962][ T5923] usb 4-1: config 5 has an invalid interface number: 4 but max is 1 [ 98.612483][ T5923] usb 4-1: config 5 has no interface number 0 [ 98.619285][ T6007] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.631495][ T5923] usb 4-1: config 5 has no interface number 1 [ 98.642464][ T6007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.655246][ T5923] usb 4-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.671990][ T6007] usb 3-1: Product: syz [ 98.676197][ T6007] usb 3-1: Manufacturer: syz [ 98.686751][ T6007] usb 3-1: SerialNumber: syz [ 98.691709][ T10] usb 2-1: USB disconnect, device number 2 [ 98.703498][ T5923] usb 4-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 98.719152][ T5923] usb 4-1: config 5 interface 35 has no altsetting 0 [ 98.749161][ T5923] usb 4-1: config 5 interface 4 has no altsetting 0 [ 98.772364][ T6007] usb 3-1: config 0 descriptor?? [ 98.780330][ T5923] usb 4-1: config 5 interface 4 has no altsetting 1 [ 98.801264][ T6007] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.830940][ T5923] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 98.853588][ T6007] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 98.862527][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.883421][ T5923] usb 4-1: Product: syz [ 98.900421][ T5923] usb 4-1: Manufacturer: syz [ 98.920123][ T5923] usb 4-1: SerialNumber: syz [ 99.049918][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.139125][ T6007] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 99.276041][ T6007] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 99.290401][ T5923] ttusbir 4-1:5.35: cannot find expected altsetting [ 99.319825][ T6007] em28xx 3-1:0.0: board has no eeprom [ 99.332770][ T5923] ttusbir 4-1:5.4: cannot find expected altsetting [ 99.345950][ T6031] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 6031 comm: syz.1.15) [ 99.348847][ T5923] usb 4-1: USB disconnect, device number 2 [ 99.362378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.397298][ T6007] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 99.411009][ T6007] em28xx 3-1:0.0: dvb set to bulk mode. [ 99.431812][ T5958] em28xx 3-1:0.0: Binding DVB extension [ 99.447502][ T30] audit: type=1800 audit(1756931345.950:2): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=8833 res=0 errno=0 [ 99.504331][ T6007] usb 3-1: USB disconnect, device number 2 [ 99.555790][ T6007] em28xx 3-1:0.0: Disconnecting em28xx [ 99.603069][ T24] usb 5-1: USB disconnect, device number 2 [ 99.652339][ T5958] em28xx 3-1:0.0: Registering input extension [ 99.674400][ T6007] em28xx 3-1:0.0: Closing input extension [ 99.681115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.753267][ T6007] em28xx 3-1:0.0: Freeing device [ 99.844414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 100.059232][ T6045] hub 9-0:1.0: USB hub found [ 100.089665][ T6045] hub 9-0:1.0: 1 port detected [ 100.099340][ T6007] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.270745][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 100.328489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.336902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.348669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.356982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.385249][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 100.406869][ T6007] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 100.431934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.443434][ T6007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.465015][ T6007] usb 3-1: config 0 descriptor?? [ 100.517601][ T5958] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.677414][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 100.706660][ T5958] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 100.720636][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.729129][ T5958] usb 4-1: Product: syz [ 100.740076][ T5958] usb 4-1: Manufacturer: syz [ 100.748334][ T5958] usb 4-1: SerialNumber: syz [ 100.775698][ T5958] r8152-cfgselector 4-1: Unknown version 0x0000 [ 100.787509][ T5958] r8152-cfgselector 4-1: config 0 descriptor?? [ 101.055312][ T5958] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 101.548971][ T6007] ath6kl: Failed to submit usb control message: -110 [ 101.657579][ T6007] ath6kl: unable to send the bmi data to the device: -110 [ 101.822265][ T6007] ath6kl: Unable to send get target info: -110 [ 101.836902][ T6007] ath6kl: Failed to init ath6kl core: -110 [ 101.922296][ T6007] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 102.035679][ T6007] usb 3-1: USB disconnect, device number 3 [ 102.258377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 102.779483][ T6079] FAULT_INJECTION: forcing a failure. [ 102.779483][ T6079] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.824450][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) [ 102.824475][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.824487][ T6079] Call Trace: [ 102.824494][ T6079] [ 102.824501][ T6079] dump_stack_lvl+0x189/0x250 [ 102.824525][ T6079] ? __pfx____ratelimit+0x10/0x10 [ 102.824549][ T6079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.824568][ T6079] ? __pfx__printk+0x10/0x10 [ 102.824590][ T6079] ? __might_fault+0xb0/0x130 [ 102.824620][ T6079] should_fail_ex+0x414/0x560 [ 102.824645][ T6079] _copy_from_user+0x2d/0xb0 [ 102.824665][ T6079] proc_control+0x9a/0x110 [ 102.824679][ T6079] ? __pfx_proc_control+0x10/0x10 [ 102.824703][ T6079] usbdev_ioctl+0xc5b/0x20c0 [ 102.824734][ T6079] ? __pfx_usbdev_ioctl+0x10/0x10 [ 102.824755][ T6079] ? __fget_files+0x2a/0x420 [ 102.824768][ T6079] ? __fget_files+0x3a0/0x420 [ 102.824780][ T6079] ? __fget_files+0x2a/0x420 [ 102.824796][ T6079] ? bpf_lsm_file_ioctl+0x9/0x20 [ 102.824819][ T6079] ? __pfx_usbdev_ioctl+0x10/0x10 [ 102.824843][ T6079] __se_sys_ioctl+0xf9/0x170 [ 102.824869][ T6079] do_syscall_64+0xfa/0x3b0 [ 102.824883][ T6079] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.824906][ T6079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.824921][ T6079] ? clear_bhb_loop+0x60/0xb0 [ 102.824940][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.824955][ T6079] RIP: 0033:0x7f9aaa78ebe9 [ 102.824968][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.824981][ T6079] RSP: 002b:00007f9aab628038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.824997][ T6079] RAX: ffffffffffffffda RBX: 00007f9aaa9c5fa0 RCX: 00007f9aaa78ebe9 [ 102.825008][ T6079] RDX: 00002000000008c0 RSI: 00000000c0185500 RDI: 0000000000000005 [ 102.825018][ T6079] RBP: 00007f9aab628090 R08: 0000000000000000 R09: 0000000000000000 [ 102.825027][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.825035][ T6079] R13: 00007f9aaa9c6038 R14: 00007f9aaa9c5fa0 R15: 00007f9aaaaefa28 [ 102.825059][ T6079] [ 103.352896][ T30] audit: type=1804 audit(1756931349.850:3): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.27" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=8936 res=1 errno=0 [ 104.293202][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.601463][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 104.744150][ T6102] hub 9-0:1.0: USB hub found [ 104.752110][ T6102] hub 9-0:1.0: 1 port detected [ 104.820162][ T10] usb 4-1: config 3 has an invalid interface number: 21 but max is 0 [ 104.987305][ T10] usb 4-1: config 3 has no interface number 0 [ 105.126880][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0011, bcdDevice=49.69 [ 105.140786][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.184279][ T10] usb 4-1: Product: syz [ 105.194935][ T10] usb 4-1: Manufacturer: syz [ 105.206315][ T10] usb 4-1: SerialNumber: syz [ 105.774160][ T10] usb-storage 4-1:3.21: USB Mass Storage device detected [ 105.980941][ T10] usb 4-1: USB disconnect, device number 4 [ 106.274355][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.347325][ T5923] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.555269][ T6126] FAULT_INJECTION: forcing a failure. [ 106.555269][ T6126] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 106.573238][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT(full) [ 106.573261][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.573270][ T6126] Call Trace: [ 106.573277][ T6126] [ 106.573284][ T6126] dump_stack_lvl+0x189/0x250 [ 106.573307][ T6126] ? __pfx____ratelimit+0x10/0x10 [ 106.573332][ T6126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.573350][ T6126] ? __pfx__printk+0x10/0x10 [ 106.573374][ T6126] ? fs_reclaim_acquire+0x7d/0x100 [ 106.573405][ T6126] should_fail_ex+0x414/0x560 [ 106.573430][ T6126] prepare_alloc_pages+0x213/0x610 [ 106.573451][ T6126] __alloc_frozen_pages_noprof+0x123/0x370 [ 106.573470][ T6126] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.573484][ T6126] ? do_raw_spin_lock+0x121/0x290 [ 106.573509][ T6126] ? policy_nodemask+0x27c/0x720 [ 106.573531][ T6126] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 106.573555][ T6126] alloc_pages_mpol+0x232/0x4a0 [ 106.573581][ T6126] alloc_pages_noprof+0xa9/0x190 [ 106.573605][ T6126] get_free_pages_noprof+0xf/0x80 [ 106.573621][ T6126] do_proc_control+0x1a7/0xe40 [ 106.573650][ T6126] proc_control+0xc8/0x110 [ 106.573664][ T6126] ? __pfx_proc_control+0x10/0x10 [ 106.573688][ T6126] usbdev_ioctl+0xc5b/0x20c0 [ 106.573719][ T6126] ? __pfx_usbdev_ioctl+0x10/0x10 [ 106.573740][ T6126] ? __fget_files+0x2a/0x420 [ 106.573753][ T6126] ? __fget_files+0x3a0/0x420 [ 106.573765][ T6126] ? __fget_files+0x2a/0x420 [ 106.573781][ T6126] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.573801][ T6126] ? __pfx_usbdev_ioctl+0x10/0x10 [ 106.573824][ T6126] __se_sys_ioctl+0xf9/0x170 [ 106.573847][ T6126] do_syscall_64+0xfa/0x3b0 [ 106.573861][ T6126] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.573884][ T6126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.573899][ T6126] ? clear_bhb_loop+0x60/0xb0 [ 106.573920][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.573936][ T6126] RIP: 0033:0x7fbcda78ebe9 [ 106.573949][ T6126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.573962][ T6126] RSP: 002b:00007fbcdb6af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.573978][ T6126] RAX: ffffffffffffffda RBX: 00007fbcda9c5fa0 RCX: 00007fbcda78ebe9 [ 106.573990][ T6126] RDX: 00002000000008c0 RSI: 00000000c0185500 RDI: 0000000000000005 [ 106.573999][ T6126] RBP: 00007fbcdb6af090 R08: 0000000000000000 R09: 0000000000000000 [ 106.574008][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.574017][ T6126] R13: 00007fbcda9c6038 R14: 00007fbcda9c5fa0 R15: 00007fbcdaaefa28 [ 106.574044][ T6126] [ 106.834134][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.875160][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.887120][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.898125][ T5923] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 106.907420][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.917762][ T5923] usb 5-1: config 0 descriptor?? [ 106.997786][ T5958] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.167417][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 107.190249][ T6134] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.196710][ T5958] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 107.242220][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.366370][ T6110] @: renamed from bond_slave_0 (while UP) [ 107.400023][ T5958] usb 4-1: config 0 descriptor?? [ 107.474620][ T5958] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 107.493899][ T5958] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 107.593087][ T5923] usbhid 5-1:0.0: can't add hid device: -71 [ 107.604527][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 107.693497][ T5923] usb 5-1: USB disconnect, device number 3 [ 107.871561][ T6142] team0: Device gtp0 is of different type [ 108.130952][ T6154] pimreg: entered allmulticast mode [ 108.277830][ T6159] pimreg: left allmulticast mode [ 109.179630][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 109.201150][ T6164] vlan2: entered allmulticast mode [ 109.206772][ T6164] veth1_to_bond: entered allmulticast mode [ 111.124347][ T6175] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET) [ 111.415290][ T10] usb 4-1: USB disconnect, device number 5 [ 111.816535][ T6182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.48'. [ 111.880459][ T6182] openvswitch: netlink: Flow key attr not present in new flow. [ 113.277431][ T5857] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 113.409258][ T6188] tipc: Started in network mode [ 113.414341][ T6188] tipc: Node identity 4671c45a64b3, cluster identity 4711 [ 113.422000][ T6188] tipc: Enabled bearer , priority 0 [ 113.434041][ T6188] syzkaller0: entered promiscuous mode [ 113.442287][ T6189] FAULT_INJECTION: forcing a failure. [ 113.442287][ T6189] name failslab, interval 1, probability 0, space 0, times 0 [ 113.457285][ T6188] syzkaller0: entered allmulticast mode [ 113.481515][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT(full) [ 113.481535][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.481544][ T6189] Call Trace: [ 113.481550][ T6189] [ 113.481556][ T6189] dump_stack_lvl+0x189/0x250 [ 113.481587][ T6189] ? __pfx____ratelimit+0x10/0x10 [ 113.481610][ T6189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.481628][ T6189] ? __pfx__printk+0x10/0x10 [ 113.481651][ T6189] ? __pfx___might_resched+0x10/0x10 [ 113.481665][ T6189] ? fs_reclaim_acquire+0x7d/0x100 [ 113.481693][ T6189] should_fail_ex+0x414/0x560 [ 113.481717][ T6189] should_failslab+0xa8/0x100 [ 113.481740][ T6189] __kmalloc_noprof+0xcb/0x4f0 [ 113.481760][ T6189] ? usb_alloc_urb+0x46/0x150 [ 113.481778][ T6189] usb_alloc_urb+0x46/0x150 [ 113.481795][ T6189] do_proc_control+0x1d3/0xe40 [ 113.481822][ T6189] proc_control+0xc8/0x110 [ 113.481835][ T6189] ? __pfx_proc_control+0x10/0x10 [ 113.481858][ T6189] usbdev_ioctl+0xc5b/0x20c0 [ 113.481888][ T6189] ? __pfx_usbdev_ioctl+0x10/0x10 [ 113.481908][ T6189] ? __fget_files+0x2a/0x420 [ 113.481920][ T6189] ? __fget_files+0x3a0/0x420 [ 113.481932][ T6189] ? __fget_files+0x2a/0x420 [ 113.481947][ T6189] ? bpf_lsm_file_ioctl+0x9/0x20 [ 113.481966][ T6189] ? __pfx_usbdev_ioctl+0x10/0x10 [ 113.481989][ T6189] __se_sys_ioctl+0xf9/0x170 [ 113.482009][ T6189] do_syscall_64+0xfa/0x3b0 [ 113.482022][ T6189] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.482044][ T6189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.482059][ T6189] ? clear_bhb_loop+0x60/0xb0 [ 113.482076][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.482091][ T6189] RIP: 0033:0x7f7f3e38ebe9 [ 113.482104][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.482116][ T6189] RSP: 002b:00007f7f3f1ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.482132][ T6189] RAX: ffffffffffffffda RBX: 00007f7f3e5c5fa0 RCX: 00007f7f3e38ebe9 [ 113.482143][ T6189] RDX: 00002000000008c0 RSI: 00000000c0185500 RDI: 0000000000000005 [ 113.482152][ T6189] RBP: 00007f7f3f1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 113.482161][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.482170][ T6189] R13: 00007f7f3e5c6038 R14: 00007f7f3e5c5fa0 R15: 00007f7f3e6efa28 [ 113.482192][ T6189] [ 113.748144][ T5857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.779008][ T5857] usb 4-1: not running at top speed; connect to a high speed hub [ 113.858355][ T5857] usb 4-1: config 1 has an invalid interface number: 94 but max is 0 [ 113.977599][ T6188] tipc: Resetting bearer [ 113.984981][ T5857] usb 4-1: config 1 has no interface number 0 [ 114.010345][ T5857] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=51.70 [ 114.041576][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.068819][ T6188] tipc: Disabling bearer [ 114.080344][ T5857] usb 4-1: Product: syz [ 114.084558][ T5857] usb 4-1: Manufacturer: syz [ 114.096707][ T5857] usb 4-1: SerialNumber: syz [ 114.717682][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.867424][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 114.886294][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 114.916971][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.946932][ T9] usb 1-1: Product: syz [ 114.960113][ T9] usb 1-1: Manufacturer: syz [ 114.980177][ T9] usb 1-1: SerialNumber: syz [ 115.003380][ T9] usb 1-1: config 0 descriptor?? [ 115.228259][ T9] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 115.618448][ T6213] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.58'. [ 115.619278][ T5857] usb 4-1: Invalid firmware size=18. [ 115.640753][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.660842][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.677577][ T5857] usb 4-1: USB disconnect, device number 6 [ 115.908827][ T5958] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.176128][ T5958] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 116.277338][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.285644][ T5958] usb 2-1: Product: syz [ 116.310302][ T5958] usb 2-1: Manufacturer: syz [ 116.318044][ T5958] usb 2-1: SerialNumber: syz [ 116.324438][ T9] usb write operation failed. (-71) [ 116.345847][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.432345][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 116.456579][ T9] usb 1-1: media controller created [ 116.506657][ T9] usb read operation failed. (-71) [ 116.715161][ T9] usb write operation failed. (-71) [ 116.774492][ T9] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 116.795186][ T9] usb 1-1: USB disconnect, device number 2 [ 116.838007][ T6007] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.096949][ T6007] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 117.105195][ T6007] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.143946][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.270502][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.282404][ T6007] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.315918][ T6007] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.346155][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.427893][ T6007] usb 5-1: config 0 descriptor?? [ 117.446658][ T6239] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 117.855738][ T6239] capability: warning: `syz.4.63' uses 32-bit capabilities (legacy support in use) [ 117.943279][ T6007] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 118.065212][ T6007] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 118.674356][ T6248] block nbd0: Attempted send on invalid socket [ 118.686444][ T6248] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 118.827807][ T5932] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.855831][ T6248] mmap: syz.3.66 (6248) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.999458][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.022672][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.045675][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.074550][ T5932] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.086347][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.100591][ T5932] usb 1-1: config 0 descriptor?? [ 119.388551][ T5923] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 119.547797][ T6261] ======================================================= [ 119.547797][ T6261] WARNING: The mand mount option has been deprecated and [ 119.547797][ T6261] and is ignored by this kernel. Remove the mand [ 119.547797][ T6261] option from the mount to silence this warning. [ 119.547797][ T6261] ======================================================= [ 119.661961][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.696656][ T5932] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 119.852221][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 119.898898][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 119.927771][ T5949] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.958936][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.011147][ T9] usb 4-1: config 0 descriptor?? [ 120.140531][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 120.160864][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 120.176351][ T5949] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 120.213322][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.263569][ T5949] usb 3-1: config 0 descriptor?? [ 120.279142][ T9] aquacomputer_d5next 0003:0C70:F011.0003: hidraw2: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 120.303417][ T6007] usb 5-1: USB disconnect, device number 4 [ 120.463803][ T9] usb 4-1: USB disconnect, device number 7 [ 120.523971][ T5949] usb 3-1: USB disconnect, device number 4 [ 120.534159][ T6269] fido_id[6269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 120.679146][ T5958] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -EPROTO [ 120.693014][ T5958] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 120.713475][ T6007] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.725952][ T5958] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 120.740908][ T5958] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 120.769012][ T5958] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 120.796057][ T5958] usb 2-1: USB disconnect, device number 3 [ 120.897308][ T6007] usb 5-1: Using ep0 maxpacket: 32 [ 120.903966][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.917511][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.927695][ T6007] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 120.936769][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.952837][ T6007] usb 5-1: config 0 descriptor?? [ 121.161112][ T5958] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.357725][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 121.373156][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.386199][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.403588][ T6007] aquacomputer_d5next 0003:0C70:F0B6.0004: unknown main item tag 0x2 [ 121.412104][ T5958] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 121.427073][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.437959][ T6007] aquacomputer_d5next 0003:0C70:F0B6.0004: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 121.450852][ T5975] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.468858][ T5958] usb 2-1: config 0 descriptor?? [ 121.607685][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 121.613388][ T6007] usb 5-1: USB disconnect, device number 5 [ 121.618348][ T5932] usb 1-1: USB disconnect, device number 3 [ 121.621572][ T5975] usb 3-1: Using ep0 maxpacket: 16 [ 121.659657][ T5975] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 121.674765][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 121.717671][ T5975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 121.768810][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 121.784370][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.796982][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 121.817252][ T5975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 121.842913][ T5975] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 121.843227][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.866887][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.905766][ T5975] usb 3-1: Product: syz [ 121.917173][ T5958] hid_mf 0003:0079:1801.0005: item fetching failed at offset 0/2 [ 121.927538][ T5975] usb 3-1: Manufacturer: syz [ 121.931700][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.946766][ T5975] usb 3-1: SerialNumber: syz [ 121.968499][ T5958] hid_mf 0003:0079:1801.0005: HID parse failed. [ 121.972087][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 121.999319][ T5958] hid_mf 0003:0079:1801.0005: probe with driver hid_mf failed with error -22 [ 122.009372][ T5975] usb 3-1: config 0 descriptor?? [ 122.017097][ T6277] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 122.020631][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 122.077465][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 122.077719][ T5975] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 122.096839][ T5975] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 122.118279][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.133285][ T9] usb 4-1: config 0 descriptor?? [ 122.144501][ T6279] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 122.254665][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 122.331150][ T5975] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 122.362394][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.397860][ T5975] usb 3-1: USB disconnect, device number 5 [ 122.414430][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.457643][ T5877] Bluetooth: hci5: unexpected event 0x12 length: 1 < 8 [ 122.468738][ T5877] Bluetooth: hci5: Malformed Event: 0x02 [ 122.474599][ T5877] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 122.475169][ T5877] Bluetooth: hci5: connection err: -111 [ 122.496651][ T5958] usb 2-1: USB disconnect, device number 4 [ 122.664312][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.690331][ T5877] Bluetooth: hci5: unexpected event 0x12 length: 1 < 8 [ 122.698468][ T5877] Bluetooth: hci5: Malformed Event: 0x02 [ 122.704370][ T5877] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 122.704408][ T5877] Bluetooth: hci5: connection err: -111 [ 122.727587][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.747119][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.760639][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.904688][ T5923] usb 4-1: USB disconnect, device number 8 [ 122.911629][ T5872] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 123.727381][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.78'. [ 123.768411][ T6318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.447386][ T5932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.497399][ T5923] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.620860][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.642055][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.687421][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 124.701844][ T5923] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 124.715024][ T5923] usb 1-1: config 0 has no interface number 0 [ 124.737112][ T5923] usb 1-1: New USB device found, idVendor=10c4, idProduct=8418, bcdDevice=fb.35 [ 124.758357][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.775503][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.821753][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.847630][ T5923] usb 1-1: Product: syz [ 124.879665][ T5923] usb 1-1: Manufacturer: syz [ 124.907357][ T5932] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.928095][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.974932][ T5932] usb 2-1: config 0 descriptor?? [ 124.999163][ T5923] usb 1-1: SerialNumber: syz [ 125.423211][ T5923] usb 1-1: config 0 descriptor?? [ 125.583966][ T5932] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 125.632930][ T5923] cp210x 1-1:0.39: cp210x converter detected [ 125.842885][ T5923] cp210x 1-1:0.39: failed to get vendor val 0x370b size 1: -71 [ 125.884122][ T5923] cp210x 1-1:0.39: querying part number failed [ 125.943052][ T5923] usb 1-1: cp210x converter now attached to ttyUSB0 [ 126.002111][ T5923] usb 1-1: USB disconnect, device number 4 [ 126.058656][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.083446][ T5923] cp210x 1-1:0.39: device disconnected [ 126.221625][ T9] usb 2-1: USB disconnect, device number 5 [ 126.279499][ T30] audit: type=1326 audit(1756931372.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.4.88" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe13838ebe9 code=0x0 [ 127.842439][ T3534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.100327][ T3534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.344238][ T3534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.487130][ T3534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.106221][ T6390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.177453][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.392075][ T3534] bridge_slave_1: left allmulticast mode [ 129.416789][ T3534] bridge_slave_1: left promiscuous mode [ 129.444265][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.446430][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 129.478900][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 129.478999][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 129.479017][ T6394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.104'. [ 129.598931][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.598971][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.598997][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.599044][ T5932] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.599071][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.624203][ T5932] usb 2-1: config 0 descriptor?? [ 130.130398][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.132743][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.133530][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.135402][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.136265][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.268006][ T5932] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 130.268059][ T5932] microsoft 0003:045E:07DA.0007: no inputs found [ 130.268077][ T5932] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 130.322040][ T3534] bridge_slave_0: left allmulticast mode [ 130.322088][ T3534] bridge_slave_0: left promiscuous mode [ 130.322349][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.474981][ T5932] usb 2-1: USB disconnect, device number 6 [ 130.532072][ T6400] fido_id[6400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 131.377801][ T9] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 131.607488][ T9] usb 2-1: device descriptor read/64, error -71 [ 131.877493][ T9] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 132.017438][ T9] usb 2-1: device descriptor read/64, error -71 [ 132.127805][ T9] usb usb2-port1: attempt power cycle [ 132.177459][ T5877] Bluetooth: hci4: command tx timeout [ 132.517481][ T9] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 132.545909][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.589107][ T9] usb 2-1: device descriptor read/8, error -71 [ 132.609915][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.667104][ T3534] bond0 (unregistering): Released all slaves [ 132.837445][ T9] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 132.880176][ T9] usb 2-1: device descriptor read/8, error -71 [ 133.026171][ T9] usb usb2-port1: unable to enumerate USB device [ 133.818410][ T6446] Zero length message leads to an empty skb [ 134.257447][ T5872] Bluetooth: hci4: command tx timeout [ 134.319358][ T6446] geneve2: entered promiscuous mode [ 134.324637][ T6446] geneve2: entered allmulticast mode [ 134.780131][ T3534] hsr_slave_0: left promiscuous mode [ 134.789502][ T3534] hsr_slave_1: left promiscuous mode [ 134.805458][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.816531][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.840373][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.848270][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.874542][ T3534] veth1_macvtap: left promiscuous mode [ 134.884286][ T3534] veth0_macvtap: left promiscuous mode [ 134.900182][ T3534] veth1_vlan: left promiscuous mode [ 134.909345][ T3534] veth0_vlan: left promiscuous mode [ 135.772691][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 135.813030][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 136.030492][ T5923] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.200251][ T5923] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 136.220033][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.234869][ T5923] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 136.249701][ T5923] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 136.258194][ T5923] usb 4-1: Manufacturer: syz [ 136.267668][ T5923] usb 4-1: config 0 descriptor?? [ 136.337521][ T5872] Bluetooth: hci4: command 0x040f tx timeout [ 136.390502][ T5923] rc_core: IR keymap rc-hauppauge not found [ 136.396555][ T5923] Registered IR keymap rc-empty [ 136.424915][ T5923] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 136.471673][ T5923] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 136.600144][ T6482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.601475][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 136.667312][ T6482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.003054][ C1] igorplugusb 4-1:0.0: receive overflow, at least 13 lost [ 137.214810][ T5932] usb 4-1: USB disconnect, device number 9 [ 137.554156][ T6500] loop2: detected capacity change from 0 to 7 [ 137.593909][ T6023] Dev loop2: unable to read RDB block 7 [ 137.622086][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.634744][ T6023] loop2: unable to read partition table [ 137.638173][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.672293][ T6023] loop2: partition table beyond EOD, [ 137.672300][ T6398] bridge_slave_0: entered allmulticast mode [ 137.676632][ T6398] bridge_slave_0: entered promiscuous mode [ 137.707335][ T6023] truncated [ 137.731917][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.792733][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.810206][ T6500] Dev loop2: unable to read RDB block 7 [ 137.816111][ T6500] loop2: unable to read partition table [ 137.832382][ T6398] bridge_slave_1: entered allmulticast mode [ 137.867450][ T6398] bridge_slave_1: entered promiscuous mode [ 137.890058][ T6500] loop2: partition table beyond EOD, truncated [ 137.896316][ T6500] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 137.977472][ T5857] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 138.112199][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.124660][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.134299][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.182836][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.203354][ T5857] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 975, setting to 64 [ 138.234789][ T5857] usb 1-1: config 1 interface 0 has no altsetting 0 [ 138.249728][ T5857] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 138.259314][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.267664][ T5857] usb 1-1: Product: syz [ 138.272000][ T5857] usb 1-1: Manufacturer: syz [ 138.276636][ T5857] usb 1-1: SerialNumber: syz [ 138.293628][ T6504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.427431][ T5877] Bluetooth: hci4: command 0x040f tx timeout [ 138.646223][ T6398] team0: Port device team_slave_0 added [ 138.689701][ T6398] team0: Port device team_slave_1 added [ 138.943634][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.004306][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.136853][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.176318][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.222528][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.335803][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.685594][ T6524] sctp: [Deprecated]: syz.1.125 (pid 6524) Use of int in max_burst socket option. [ 139.685594][ T6524] Use struct sctp_assoc_value instead [ 139.801864][ T6398] hsr_slave_0: entered promiscuous mode [ 139.835246][ T6398] hsr_slave_1: entered promiscuous mode [ 139.880730][ T6398] debugfs: 'hsr0' already exists in 'hsr' [ 139.907033][ T6398] Cannot create hsr debugfs directory [ 140.114387][ T6531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.128'. [ 140.497779][ T5877] Bluetooth: hci4: command 0x040f tx timeout [ 140.627543][ T5923] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.770466][ T5923] usb 4-1: device descriptor read/64, error -71 [ 140.792055][ T6398] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.824269][ T5857] usbhid 1-1:1.0: can't add hid device: -71 [ 140.839630][ T6007] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.841710][ T5857] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 140.930367][ T5857] usb 1-1: USB disconnect, device number 5 [ 141.017360][ T6007] usb 5-1: Using ep0 maxpacket: 32 [ 141.037825][ T5923] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.055371][ T6007] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 141.073509][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.105905][ T6007] usb 5-1: Product: syz [ 141.118401][ T6007] usb 5-1: Manufacturer: syz [ 141.123306][ T6007] usb 5-1: SerialNumber: syz [ 141.126943][ T6398] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.155603][ T6398] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.164235][ T6007] usb 5-1: config 0 descriptor?? [ 141.184553][ T6398] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.197555][ T5923] usb 4-1: device descriptor read/64, error -71 [ 141.204215][ T6007] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 141.277352][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 141.328854][ T5923] usb usb4-port1: attempt power cycle [ 141.449617][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 141.471335][ T9] usb 2-1: config 1 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.511754][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 141.550708][ T9] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.40 [ 141.577093][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.586669][ T9] usb 2-1: Product: syz [ 141.592695][ T9] usb 2-1: Manufacturer: syz [ 141.625947][ T9] usb 2-1: SerialNumber: syz [ 141.665460][ T6579] sctp: [Deprecated]: syz.0.137 (pid 6579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.665460][ T6579] Use struct sctp_sack_info instead [ 141.688995][ T5923] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.744288][ T5923] usb 4-1: device descriptor read/8, error -71 [ 141.810486][ T6549] fuse: blksize only supported for fuseblk [ 141.922588][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.991708][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.000202][ T5923] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 142.035703][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.043738][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.054937][ T5923] usb 4-1: device descriptor read/8, error -71 [ 142.101396][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.108680][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.168450][ T5923] usb usb4-port1: unable to enumerate USB device [ 142.211138][ T6594] loop6: detected capacity change from 0 to 7 [ 142.237089][ T6594] Dev loop6: unable to read RDB block 7 [ 142.256143][ T6594] loop6: AHDI p3 [ 142.266631][ T6594] loop6: partition table partially beyond EOD, truncated [ 142.345042][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.511916][ T6398] veth0_vlan: entered promiscuous mode [ 142.530841][ T6007] gspca_ov534_9: reg_w failed -110 [ 142.557149][ T6398] veth1_vlan: entered promiscuous mode [ 142.646668][ T6398] veth0_macvtap: entered promiscuous mode [ 142.666960][ T6398] veth1_macvtap: entered promiscuous mode [ 142.716608][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.777795][ T6602] delete_channel: no stack [ 142.800366][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.827272][ T6007] gspca_ov534_9: Unknown sensor 0000 [ 142.827372][ T6007] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 142.844846][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.870448][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.893322][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.916715][ T6007] usb 5-1: USB disconnect, device number 6 [ 142.935448][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.951553][ T6606] netlink: 'syz.0.142': attribute type 29 has an invalid length. [ 143.006364][ T6606] netlink: 'syz.0.142': attribute type 29 has an invalid length. [ 143.085330][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.094839][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.139455][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.150635][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.240511][ T6007] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.297533][ T5932] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.427957][ T6007] usb 5-1: Using ep0 maxpacket: 16 [ 143.437805][ T5932] usb 1-1: device descriptor read/64, error -71 [ 143.451547][ T6007] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 143.474071][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.584882][ T6007] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.598871][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.609111][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 143.624507][ T6007] usb 5-1: Product: syz [ 143.634974][ T6007] usb 5-1: Manufacturer: syz [ 143.646531][ T6007] usb 5-1: SerialNumber: syz [ 143.668548][ T6007] usb 5-1: config 0 descriptor?? [ 143.685939][ T6007] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.687352][ T5932] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.726270][ T6007] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 143.749118][ T6610] Invalid logical block size (7) [ 144.008615][ T5932] usb 1-1: device descriptor read/64, error -71 [ 144.171296][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 144.215026][ T5932] usb usb1-port1: attempt power cycle [ 144.220653][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 144.266153][ T9] usb 2-1: USB disconnect, device number 11 [ 144.373724][ T6007] em28xx 5-1:0.0: chip ID is em28178 [ 144.494703][ T6624] kvm: pic: single mode not supported [ 144.495137][ T6624] kvm: pic: single mode not supported [ 144.511152][ T6624] kvm: pic: single mode not supported [ 144.516984][ T6624] kvm: pic: single mode not supported [ 144.597622][ T5932] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 144.638075][ T5932] usb 1-1: device descriptor read/8, error -71 [ 144.877371][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.918553][ T5932] usb 1-1: device descriptor read/8, error -71 [ 145.048407][ T5932] usb usb1-port1: unable to enumerate USB device [ 145.397324][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 145.557302][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 145.564397][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.574976][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.587276][ T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=83.0d [ 145.601840][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.609972][ T10] usb 2-1: Product: syz [ 145.614172][ T10] usb 2-1: Manufacturer: syz [ 145.622412][ T10] usb 2-1: SerialNumber: syz [ 145.629642][ T10] usb 2-1: config 0 descriptor?? [ 145.839386][ T5932] usb 2-1: USB disconnect, device number 12 [ 145.956174][ T9] usb 5-1: USB disconnect, device number 7 [ 145.985808][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 146.002446][ T9] em28xx 5-1:0.0: Freeing device [ 146.079363][ T6642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.105873][ T6643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.118568][ T6642] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 146.123222][ T6643] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.225357][ T6643] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.256547][ T6642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.279845][ T6642] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 146.304134][ T6643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.312076][ T6643] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.333376][ T6643] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.342706][ T6655] pimreg7: entered allmulticast mode [ 146.353120][ T6642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.359886][ T6642] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 146.362687][ T6643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.404889][ T6643] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.418009][ T6643] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.428475][ T6643] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.435583][ T6642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.463135][ T6643] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 146.493849][ T6642] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 146.521144][ T6643] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 146.562586][ T6642] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.592945][ T6642] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 146.753324][ T6671] loop6: detected capacity change from 0 to 7 [ 146.764216][ T6671] Dev loop6: unable to read RDB block 7 [ 146.778100][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.787455][ T6671] loop6: AHDI p3 [ 146.791159][ T6671] loop6: partition table partially beyond EOD, truncated [ 146.910950][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 146.929302][ T10] usb 6-1: device descriptor read/64, error -71 [ 147.025608][ T6677] syz_tun: entered allmulticast mode [ 147.039575][ T6677] vivid-001: ================= START STATUS ================= [ 147.060857][ T6677] vivid-001: Interlaced VBI Format: false [ 147.084056][ T6677] vivid-001: ================== END STATUS ================== [ 147.142614][ T6677] dvmrp8: entered allmulticast mode [ 147.166173][ T6675] syz_tun: left allmulticast mode [ 147.166319][ T30] audit: type=1800 audit(1756931393.660:5): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.162" name="/" dev="fuse" ino=1 res=0 errno=0 [ 147.190988][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 147.329210][ T5975] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.335506][ T6692] fuse: Bad value for 'fd' [ 147.357484][ T10] usb 6-1: device descriptor read/64, error -71 [ 147.467771][ T10] usb usb6-port1: attempt power cycle [ 147.487544][ T5975] usb 5-1: Using ep0 maxpacket: 16 [ 147.498941][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.519178][ T5975] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 147.520144][ T5949] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 147.532458][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.561290][ T5975] usb 5-1: config 0 descriptor?? [ 147.725369][ T5949] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.750160][ T5949] usb 1-1: not running at top speed; connect to a high speed hub [ 147.762404][ T5949] usb 1-1: config 129 has an invalid interface number: 135 but max is 1 [ 147.772032][ T5949] usb 1-1: config 129 has no interface number 1 [ 147.781305][ T5949] usb 1-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 147.795767][ T5949] usb 1-1: config 129 interface 135 has no altsetting 0 [ 147.804736][ T5949] usb 1-1: config 129 interface 0 has no altsetting 0 [ 147.816966][ T5949] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 147.837314][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 147.885220][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.895727][ T5949] usb 1-1: Product: ட䥶ᱮ໾㉈ﱌ﮴渐進藰ℵ嬾ᛉﶔ빠뵏婽럈⃮淝㮞㩟ୈ餂ࠑ溑阕ꏬ⑤ᑶ뿦萏ᅃ냩灤ⲅ혹ꈍ웫뗈䁔⭝穜봩캵꫄丮 [ 147.916654][ T10] usb 6-1: device descriptor read/8, error -71 [ 147.924804][ T5949] usb 1-1: Manufacturer: 㐁 [ 147.931902][ T5949] usb 1-1: SerialNumber: 豽眚쉺뮣겝䵣髨黡㉾됻匧Ѐ [ 148.034127][ T5975] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 148.177720][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 148.206760][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.217923][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.226341][ T6688] netlink: 'syz.0.165': attribute type 7 has an invalid length. [ 148.238478][ T10] usb 6-1: device descriptor read/8, error -71 [ 148.281270][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.284367][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 148.294055][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.319756][ T5975] usb 5-1: USB disconnect, device number 8 [ 148.355033][ T10] usb usb6-port1: unable to enumerate USB device [ 148.412501][ T5949] au0828: au0828: Device initialization failed. [ 148.437499][ T5949] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 148.486997][ T5949] usb 1-1: USB disconnect, device number 10 [ 148.847329][ T5975] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 148.994299][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 149.037290][ T5975] usb 2-1: Using ep0 maxpacket: 16 [ 149.069685][ T5975] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 149.087360][ T5975] usb 2-1: config 0 has no interface number 0 [ 149.097542][ T5975] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 149.143071][ T5975] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 149.162722][ T6714] loop6: detected capacity change from 0 to 7 [ 149.179353][ T5975] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 149.181136][ T6714] Dev loop6: unable to read RDB block 7 [ 149.194466][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.196539][ T6714] loop6: AHDI p3 [ 149.211854][ T5975] usb 2-1: Product: syz [ 149.212842][ T6714] loop6: partition table partially beyond EOD, truncated [ 149.216206][ T5975] usb 2-1: Manufacturer: syz [ 149.238388][ T5975] usb 2-1: SerialNumber: syz [ 149.261910][ T5975] usb 2-1: config 0 descriptor?? [ 149.269494][ T6706] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.276783][ T6706] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.386807][ T30] audit: type=1326 audit(1756931395.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbf8ebe9 code=0x7ffc0000 [ 149.436384][ T30] audit: type=1326 audit(1756931395.920:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f7cdbf8ebe9 code=0x7ffc0000 [ 149.478481][ T5958] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.522491][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.539334][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.567364][ T30] audit: type=1326 audit(1756931395.920:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbf8ebe9 code=0x7ffc0000 [ 149.677450][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.685698][ T30] audit: type=1326 audit(1756931395.920:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cdbf8ebe9 code=0x7ffc0000 [ 149.717892][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 149.756745][ T30] audit: type=1326 audit(1756931395.920:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbf8ebe9 code=0x7ffc0000 [ 149.775088][ T5958] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 149.790961][ T6706] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.816715][ T6706] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.830393][ T30] audit: type=1326 audit(1756931395.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7cdbf8ebe9 code=0x7ffc0000 [ 149.837359][ T5958] usb 5-1: config 0 has no interface number 0 [ 149.873863][ T5958] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 149.884986][ T30] audit: type=1326 audit(1756931395.920:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbf8ebe9 code=0x7ffc0000 [ 149.885168][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 149.895932][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.929569][ T30] audit: type=1326 audit(1756931395.920:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cdbf8ebe9 code=0x7ffc0000 [ 149.957012][ T5958] usb 5-1: config 0 descriptor?? [ 149.960625][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.973299][ T10] usb 1-1: Product: syz [ 149.985366][ T10] usb 1-1: Manufacturer: syz [ 149.990971][ T10] usb 1-1: SerialNumber: syz [ 149.996020][ T30] audit: type=1326 audit(1756931395.920:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cdbf8ebe9 code=0x7ffc0000 [ 149.999681][ T6007] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 150.035510][ T10] usb 1-1: config 0 descriptor?? [ 150.050694][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 150.071259][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.081507][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.083083][ T5975] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 150.106579][ T5975] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 150.120987][ T5975] asix 2-1:0.251: probe with driver asix failed with error -5 [ 150.180175][ T6007] usb 6-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 150.189350][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.203293][ T6007] usb 6-1: config 0 descriptor?? [ 150.224156][ T6007] pwc: Philips SPC 900NC USB webcam detected. [ 150.297581][ T10] gspca_sunplus: reg_r err -71 [ 150.315522][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 150.352442][ T10] usb 1-1: USB disconnect, device number 11 [ 150.389715][ T6729] binder: 6704:6729 ioctl c0306201 200000000c40 returned -22 [ 150.398823][ T5975] usb 5-1: USB disconnect, device number 9 [ 150.534169][ T6007] pwc: Failed to set LED on/off time (-71) [ 150.572715][ T6007] pwc: send_video_command error -71 [ 150.613541][ T6007] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 150.633881][ T6007] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 150.676955][ T6007] usb 6-1: USB disconnect, device number 6 [ 150.796842][ T10] usb 2-1: USB disconnect, device number 13 [ 150.960336][ T6741] syz.0.179 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 152.517638][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 152.548132][ T6772] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 152.667393][ T10] usb 5-1: device descriptor read/64, error -71 [ 152.837379][ T5932] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 152.845184][ T5949] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 152.907304][ T6007] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 152.927491][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 153.007564][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 153.016065][ T5932] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 153.035211][ T5932] usb 2-1: config 0 has no interface number 0 [ 153.044127][ T5949] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.057686][ T5932] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 153.067379][ T6007] usb 6-1: Using ep0 maxpacket: 32 [ 153.069130][ T10] usb 5-1: device descriptor read/64, error -71 [ 153.083638][ T5949] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 153.086319][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.099983][ T5932] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.138304][ T5949] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 153.143936][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.149127][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.177448][ T5949] usb 1-1: Product: syz [ 153.181747][ T5949] usb 1-1: Manufacturer: syz [ 153.184226][ T6007] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.186393][ T5949] usb 1-1: SerialNumber: syz [ 153.211536][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.219983][ T5932] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 153.230407][ T10] usb usb5-port1: attempt power cycle [ 153.236358][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.255838][ T5932] usb 2-1: Product: syz [ 153.262707][ T5932] usb 2-1: Manufacturer: syz [ 153.263843][ T6007] usb 6-1: config 0 descriptor?? [ 153.295080][ T5932] usb 2-1: SerialNumber: syz [ 153.306583][ T6007] hub 6-1:0.0: USB hub found [ 153.327887][ T5932] usb 2-1: config 0 descriptor?? [ 153.333706][ T6775] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 153.362179][ T5932] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 153.404239][ T5932] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 153.492422][ T5949] usb 1-1: Invalid number of CPorts: 0 [ 153.506092][ T5949] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 153.510370][ T6007] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 153.569218][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.189'. [ 153.590083][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 153.618601][ T10] usb 5-1: device descriptor read/8, error -71 [ 153.731130][ T5958] usb 1-1: USB disconnect, device number 12 [ 153.813535][ T5975] usb 2-1: USB disconnect, device number 14 [ 153.845173][ T5975] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 153.867674][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 153.893502][ T5975] cyberjack 2-1:0.69: device disconnected [ 153.911115][ T10] usb 5-1: device descriptor read/8, error -71 [ 153.966461][ T6007] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 154.038816][ T10] usb usb5-port1: unable to enumerate USB device [ 154.315324][ T6007] usb 6-1: USB disconnect, device number 7 [ 154.697520][ T5949] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 154.860624][ T5949] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 154.895235][ T5949] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.921128][ T6842] tipc: Enabling of bearer rejected, failed to enable media [ 154.929309][ T5949] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 154.957295][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.981559][ T5949] usb 4-1: config 0 descriptor?? [ 154.998062][ T6819] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 155.175582][ T6851] capability: warning: `syz.5.204' uses deprecated v2 capabilities in a way that may be insecure [ 155.184206][ T5975] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.349644][ T5975] usb 1-1: Using ep0 maxpacket: 16 [ 155.366013][ T5975] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 155.388105][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.396512][ T5975] usb 1-1: Product: syz [ 155.397488][ T5932] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 155.403228][ T5975] usb 1-1: Manufacturer: syz [ 155.416479][ T5975] usb 1-1: SerialNumber: syz [ 155.425663][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.447861][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.476748][ T5975] usb 1-1: config 0 descriptor?? [ 155.487055][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.509585][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.568560][ T6863] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 155.594523][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.207'. [ 155.605900][ T5949] usbhid 4-1:0.0: can't add hid device: -71 [ 155.636513][ T5949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.648121][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.668150][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.689412][ T5949] usb 4-1: USB disconnect, device number 14 [ 155.697553][ T5932] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.729557][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.740239][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.750916][ T5932] usb 2-1: Product: syz [ 155.768141][ T5932] usb 2-1: Manufacturer: syz [ 155.774018][ T5932] usb 2-1: SerialNumber: syz [ 155.847530][ T6007] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 155.994670][ T5975] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 156.026456][ T5932] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 156.035817][ T5932] cdc_ncm 2-1:1.0: bind() failure [ 156.089734][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.127125][ T5975] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 156.140948][ T5975] usb 1-1: media controller created [ 156.168495][ T6007] usb 5-1: Using ep0 maxpacket: 32 [ 156.172506][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.181330][ T6007] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.195639][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.213201][ T6007] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 156.233250][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.273052][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.301067][ T6842] ------------[ cut here ]------------ [ 156.307121][ T6842] usb 1-1: BOGUS control dir, pipe 80000d80 doesn't match bRequestType c0 [ 156.335941][ T6007] usb 5-1: config 0 descriptor?? [ 156.618536][ T6842] WARNING: CPU: 0 PID: 6842 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 156.628392][ T6842] Modules linked in: [ 156.632900][ T6842] CPU: 0 UID: 0 PID: 6842 Comm: syz.0.200 Not tainted syzkaller #0 PREEMPT(full) [ 156.642202][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.652772][ T6842] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 156.660802][ T6842] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 00 ff 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 76 63 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 156.682280][ T6842] RSP: 0018:ffffc9000e1af830 EFLAGS: 00010246 [ 156.689079][ T6842] RAX: 1c360c3b256f0d00 RBX: ffff8880337d2a00 RCX: 0000000000080000 [ 156.697087][ T6842] RDX: ffffc9000b909000 RSI: 0000000000003765 RDI: 0000000000003766 [ 156.705394][ T6842] RBP: 1ffff1100ef5e9cc R08: 0000000000000003 R09: 0000000000000004 [ 156.713445][ T6842] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000 [ 156.721519][ T6842] R13: ffff888077af4e60 R14: 0000000080000d80 R15: ffff8880759a4440 [ 156.729838][ T6842] FS: 00007f7cdcdb86c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 156.739577][ T6842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.746196][ T6842] CR2: 00007f1ff7372020 CR3: 0000000024868000 CR4: 00000000003526f0 [ 156.754501][ T6842] Call Trace: [ 156.758047][ T6842] [ 156.761018][ T6842] usb_start_wait_urb+0x114/0x4c0 [ 156.766127][ T6842] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 156.771784][ T6842] usb_control_msg+0x232/0x3e0 [ 156.776786][ T6842] dtv5100_i2c_msg+0x250/0x330 [ 156.781814][ T6842] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 156.786796][ T6842] __i2c_transfer+0x874/0x2170 [ 156.791782][ T6842] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.797059][ T6842] ? __pfx___i2c_transfer+0x10/0x10 [ 156.802423][ T6842] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 156.807871][ T6842] ? i2c_transfer+0x11d/0x3a0 [ 156.812677][ T6842] i2c_transfer+0x25b/0x3a0 [ 156.817503][ T6842] ? __pfx_i2c_transfer+0x10/0x10 [ 156.822562][ T6842] ? _copy_from_user+0x94/0xb0 [ 156.827422][ T6842] i2cdev_ioctl_rdwr+0x460/0x740 [ 156.832381][ T6842] i2cdev_ioctl+0x64b/0x7f0 [ 156.836892][ T6842] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 156.842053][ T6842] ? __fget_files+0x3a0/0x420 [ 156.846753][ T6842] ? __fget_files+0x2a/0x420 [ 156.851447][ T6842] ? bpf_lsm_file_ioctl+0x9/0x20 [ 156.856559][ T6842] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 156.861814][ T6842] __se_sys_ioctl+0xf9/0x170 [ 156.866447][ T6842] do_syscall_64+0xfa/0x3b0 [ 156.871014][ T6842] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.876242][ T6842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.882384][ T6842] ? clear_bhb_loop+0x60/0xb0 [ 156.887074][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.893027][ T6842] RIP: 0033:0x7f7cdbf8ebe9 [ 156.897509][ T6842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.917288][ T6842] RSP: 002b:00007f7cdcdb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.925764][ T6842] RAX: ffffffffffffffda RBX: 00007f7cdc1c5fa0 RCX: 00007f7cdbf8ebe9 [ 156.933827][ T6842] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000007 [ 156.941901][ T6842] RBP: 00007f7cdc011e19 R08: 0000000000000000 R09: 0000000000000000 [ 156.949979][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.958157][ T6842] R13: 00007f7cdc1c6038 R14: 00007f7cdc1c5fa0 R15: 00007f7cdc2efa28 [ 156.966165][ T6842] [ 156.969419][ T6842] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 156.976710][ T6842] CPU: 0 UID: 0 PID: 6842 Comm: syz.0.200 Not tainted syzkaller #0 PREEMPT(full) [ 156.985914][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.996075][ T6842] Call Trace: [ 156.999381][ T6842] [ 157.002327][ T6842] dump_stack_lvl+0x99/0x250 [ 157.006979][ T6842] ? __asan_memcpy+0x40/0x70 [ 157.011594][ T6842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.016978][ T6842] ? __pfx__printk+0x10/0x10 [ 157.021594][ T6842] vpanic+0x281/0x750 [ 157.025590][ T6842] ? __pfx__printk+0x10/0x10 [ 157.030201][ T6842] ? __pfx_vpanic+0x10/0x10 [ 157.034751][ T6842] ? is_bpf_text_address+0x292/0x2b0 [ 157.040075][ T6842] panic+0xb9/0xc0 [ 157.043830][ T6842] ? __pfx_panic+0x10/0x10 [ 157.048286][ T6842] __warn+0x31b/0x4b0 [ 157.052298][ T6842] ? usb_submit_urb+0x112b/0x1830 [ 157.057370][ T6842] ? usb_submit_urb+0x112b/0x1830 [ 157.062424][ T6842] report_bug+0x2be/0x4f0 [ 157.066791][ T6842] ? usb_submit_urb+0x112b/0x1830 [ 157.071821][ T6842] ? usb_submit_urb+0x112b/0x1830 [ 157.076848][ T6842] ? usb_submit_urb+0x112d/0x1830 [ 157.082140][ T6842] handle_bug+0x84/0x160 [ 157.086403][ T6842] exc_invalid_op+0x1a/0x50 [ 157.090924][ T6842] asm_exc_invalid_op+0x1a/0x20 [ 157.095865][ T6842] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 157.101512][ T6842] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 00 ff 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 76 63 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 157.121131][ T6842] RSP: 0018:ffffc9000e1af830 EFLAGS: 00010246 [ 157.127743][ T6842] RAX: 1c360c3b256f0d00 RBX: ffff8880337d2a00 RCX: 0000000000080000 [ 157.135825][ T6842] RDX: ffffc9000b909000 RSI: 0000000000003765 RDI: 0000000000003766 [ 157.144168][ T6842] RBP: 1ffff1100ef5e9cc R08: 0000000000000003 R09: 0000000000000004 [ 157.152352][ T6842] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000 [ 157.160355][ T6842] R13: ffff888077af4e60 R14: 0000000080000d80 R15: ffff8880759a4440 [ 157.168391][ T6842] usb_start_wait_urb+0x114/0x4c0 [ 157.173450][ T6842] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 157.179060][ T6842] usb_control_msg+0x232/0x3e0 [ 157.183852][ T6842] dtv5100_i2c_msg+0x250/0x330 [ 157.188804][ T6842] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 157.193784][ T6842] __i2c_transfer+0x874/0x2170 [ 157.198592][ T6842] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.203821][ T6842] ? __pfx___i2c_transfer+0x10/0x10 [ 157.209033][ T6842] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 157.214693][ T6842] ? i2c_transfer+0x11d/0x3a0 [ 157.219386][ T6842] i2c_transfer+0x25b/0x3a0 [ 157.223900][ T6842] ? __pfx_i2c_transfer+0x10/0x10 [ 157.228950][ T6842] ? _copy_from_user+0x94/0xb0 [ 157.233731][ T6842] i2cdev_ioctl_rdwr+0x460/0x740 [ 157.238682][ T6842] i2cdev_ioctl+0x64b/0x7f0 [ 157.243188][ T6842] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 157.248216][ T6842] ? __fget_files+0x3a0/0x420 [ 157.252897][ T6842] ? __fget_files+0x2a/0x420 [ 157.257494][ T6842] ? bpf_lsm_file_ioctl+0x9/0x20 [ 157.262448][ T6842] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 157.267484][ T6842] __se_sys_ioctl+0xf9/0x170 [ 157.272093][ T6842] do_syscall_64+0xfa/0x3b0 [ 157.276605][ T6842] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.281830][ T6842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.287916][ T6842] ? clear_bhb_loop+0x60/0xb0 [ 157.292604][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.298505][ T6842] RIP: 0033:0x7f7cdbf8ebe9 [ 157.302960][ T6842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.322657][ T6842] RSP: 002b:00007f7cdcdb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.331097][ T6842] RAX: ffffffffffffffda RBX: 00007f7cdc1c5fa0 RCX: 00007f7cdbf8ebe9 [ 157.339119][ T6842] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000007 [ 157.347101][ T6842] RBP: 00007f7cdc011e19 R08: 0000000000000000 R09: 0000000000000000 [ 157.355083][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.363064][ T6842] R13: 00007f7cdc1c6038 R14: 00007f7cdc1c5fa0 R15: 00007f7cdc2efa28 [ 157.371061][ T6842] [ 157.374259][ T6842] Kernel Offset: disabled [ 157.378589][ T6842] Rebooting in 86400 seconds..