last executing test programs: 6m11.610228771s ago: executing program 4 (id=1263): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x8, 0x0, 0xb49, 0x8000009, 0x7, 0x2, 0xc59}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="b0539a7d10ece7c02c53c54cfea7186b6d3ce20c42f15eeb7454f724e693d7", @ANYRES32], 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x3, 0x32, "bec50cffc86b2128b9c1c2fedb30b69e81440b0ab677224f6eede372d859507f25e916e94283d1afe5c09c54d0d3ae2db664"}}) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400000002500090122bd7008f9ffffff0200000024003d8020002280d3b34c2914bca58a0af52d7c2bbd0ac1c5a63bcebb01aa63cfd3cb7f0800030047000000958848d6493e05a753ee9ddcbdf5461f6968fcf106773f971900d6"], 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f00000047c0)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f00000037c0)=""/4096, 0xfffffef3}], 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x36}, 0x94) 6m10.550758755s ago: executing program 4 (id=1267): unshare(0x42000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0x4, 0x3, 0x2, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffe}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@multicast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x778a, 0xffff}, {0x3, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x1}}, 0xe8) close(r2) r3 = syz_pidfd_open(r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x90000008}) r6 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000200)={0xc0002001}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d}) r8 = pidfd_getfd(r3, r3, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r8, 0x0, 0x8940) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 6m10.202253613s ago: executing program 4 (id=1269): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 6m9.970919329s ago: executing program 4 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) 6m9.850294455s ago: executing program 4 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003100)=@newtfilter={0xeb0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe84, 0x2, [@TCA_FW_ACT={0xe80, 0x4, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2000000, 0x9, 0x0, 0x8e, 0x9}, 0x2}, [{0x10001, 0x2, 0x2, 0x1, 0x3, 0x6}, {0x8, 0x5, 0x7, 0x1, 0xc, 0x1}, {0x10, 0x8, 0x6, 0x9, 0xf, 0x1ff}, {0x6, 0x4, 0x0, 0x9, 0x4, 0x7}, {0x1, 0x9, 0x8, 0x0, 0x10, 0x8}, {0x2, 0x5, 0x4, 0x57, 0x10, 0x21fb}, {0x1, 0x0, 0x0, 0x8, 0x4a9, 0x6}, {0x400, 0x8000, 0x0, 0x4, 0x0, 0x7}, {0x5a5, 0x8, 0xfffffff7, 0x4, 0x8, 0x7ff}, {0x2, 0x4, 0x5, 0x2, 0x80000000, 0x7f}, {0x6, 0xfffffffc, 0x0, 0x0, 0x400, 0x2}, {0x7, 0x8, 0x8, 0x0, 0x1, 0x4}, {0x8, 0x0, 0x4554, 0x3, 0x79a, 0xc}, {0x8, 0x876, 0x3, 0x8, 0x3, 0x8}, {0xac7a, 0xffffffff, 0x5, 0x8001, 0x0, 0x10000}, {0x6, 0x1, 0x7, 0x5, 0x66d, 0x3}, {0xe465, 0x7, 0x2005, 0x51, 0x1, 0x6c0}, {0x6, 0xd1e2, 0xffffb438, 0x0, 0x3, 0x2}, {0x80000000, 0x1, 0x8, 0x0, 0x53af1bbb, 0x8}, {0x7f, 0x7fffffff, 0xfffffff8, 0x81c, 0xcc}, {0x401, 0x4, 0x1, 0x7ff, 0x2, 0x4}, {0x7, 0x9, 0x1, 0x0, 0x4, 0x2}, {0x3, 0x0, 0x335, 0x2, 0x80, 0x8}, {0x7, 0x5, 0x5, 0x28e, 0x3, 0x8}, {0x0, 0xc, 0x8001, 0x1, 0x7, 0x6}, {0x56, 0x80, 0xc, 0xfffffff0, 0x3, 0x2}, {0x3, 0x2, 0x4, 0x17, 0x2, 0x3}, {0x4, 0xffffff81, 0x5, 0x8, 0xb, 0x6}, {0x8, 0x7, 0xf, 0xe, 0x1, 0x8}, {0x9ff, 0x10, 0xf71, 0x5, 0x9, 0xe17fe50}, {0xff, 0x0, 0x2, 0x6, 0x8, 0x6}, {0x3, 0x4, 0x1d4, 0x80000001, 0x0, 0x1773}, {0x4, 0x7, 0x7, 0x3, 0x5, 0xff}, {0x8000, 0x6fe, 0xfffffe01, 0x80, 0x8, 0x6}, {0x40, 0x58b, 0xfffffffe, 0xff, 0x101, 0xfffff679}, {0x0, 0xf8e2, 0x8, 0xffffffff, 0x0, 0x7f}, {0x0, 0x9, 0x10001, 0x8, 0x400, 0xfffff690}, {0x3, 0x570, 0xf, 0xffffb9f3, 0x5, 0x772}, {0xf6e3, 0x1, 0x85, 0x0, 0xfffffffd, 0x1000}, {0x6, 0x4, 0x0, 0x5, 0x2, 0xaa3f}, {0xffffffff, 0x1, 0x2e8, 0x7, 0x5, 0xcc184cd}, {0x9, 0xfffffff7, 0xfffffff8, 0x5, 0x7, 0x6}, {0x101, 0x7, 0x1, 0x7fff, 0x8, 0xfffffff7}, {0x10, 0x7fffffff, 0x7fffffff, 0x8, 0x2, 0xd9}, {0xbae1, 0xfdfe, 0x3, 0x4530, 0x0, 0x10000}, {0x8, 0x9, 0x1000, 0x3, 0x10, 0xd5}, {0x3, 0x80000001, 0x2, 0x5616, 0x7fff, 0x7}, {0x6, 0x9, 0x5, 0x40, 0x65f2, 0x5}, {0x6, 0x0, 0xfffffffc, 0x28d6, 0xa5a4, 0x337}, {0xffffff8d, 0x8, 0x4, 0x1ff, 0x3}, {0x0, 0x0, 0x8, 0xd726, 0x8, 0x46e4}, {0xffff, 0x401, 0x5, 0xa2, 0x5, 0x38}, {0x5, 0x200, 0x10, 0x0, 0x100, 0x9}, {0x40, 0x29, 0x1, 0x10000, 0x1, 0x3}, {0xb5, 0x3, 0x2, 0x2201ee1a, 0x9f25, 0x9}, {0x8, 0x9, 0x10000, 0x99, 0x1, 0x1ff}, {0x4, 0x2, 0xa53, 0x5, 0x239, 0xfffffffd}, {0x3, 0x0, 0x1, 0x3, 0x1, 0xa}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x5}, {0xff, 0x4, 0x5, 0x0, 0x8, 0x800}, {0xfffffc00, 0x1, 0x0, 0x3d1, 0x8, 0x4}, {0x9, 0x1, 0x9, 0x100, 0x7f, 0x800}, {0xa, 0x800, 0x1, 0x5f, 0x6, 0x2}, {0x40, 0x7, 0x8000, 0x6, 0x3, 0x10001}, {0x7, 0x1, 0x5, 0x8001, 0x1, 0x5}, {0x61, 0xa, 0x2, 0x0, 0x4, 0x4}, {0x5, 0xb, 0x7a04, 0x8, 0xd, 0x9f4}, {0x7, 0xffffff81, 0x1, 0x0, 0x7, 0x9}, {0x3ff7, 0x7, 0x80, 0x3ff, 0x5, 0x6}, {0x4, 0x3, 0x9, 0x8, 0x1, 0x5}, {0x1, 0x9, 0x0, 0x4, 0x6, 0x6f04}, {0x8, 0x5, 0x2, 0x1, 0x5, 0xff}, {0xfffeffff, 0x6, 0x2, 0x1, 0x7, 0x80000001}, {0x2, 0xff, 0x8, 0x4, 0x3ff, 0x1}, {0x101, 0x5, 0xe8, 0x5, 0x8, 0x50}, {0x3, 0x8, 0x5, 0x1, 0x3, 0x1ff}, {0xdf7, 0x4, 0x4, 0x4, 0x1, 0xc2b2}, {0x0, 0x2d44, 0xa, 0xfff, 0x1, 0x4}, {0x1, 0x9, 0x8, 0x0, 0x7, 0x9}, {0xa0d, 0xcc7, 0xa, 0x4, 0x6, 0xae3}, {0x6c, 0x40, 0x2, 0x3, 0x7, 0x8}, {0x1, 0xfff, 0xa, 0xafa, 0xd8000000, 0x6}, {0x200, 0xfffffff9, 0x0, 0x1, 0x6, 0x4}, {0x2, 0x2, 0x3, 0x3, 0x4, 0xd}, {0x7, 0xfffffffc, 0x0, 0x3, 0x7fff, 0x9}, {0x5, 0x7f, 0x7, 0xfffffff9, 0x5, 0x9}, {0x8, 0x81, 0x6, 0x7, 0x4, 0xfffffd2a}, {0x9, 0x0, 0x7ff, 0x200, 0xf, 0x2df}, {0x200, 0xc3b8, 0xfffffff9, 0x80, 0xd}, {0x3, 0x0, 0x1, 0x8, 0x5, 0x7}, {0xff4, 0x8001, 0xfffff117, 0x1, 0x8368, 0xa6}, {0x4, 0x4, 0x101, 0x4, 0x80000001, 0x3}, {0x53, 0xa, 0x7, 0x4, 0x10, 0x7}, {0x3, 0x6, 0x66, 0x9, 0xffffffff, 0x6}, {0xffffffff, 0x10001, 0x0, 0x10000, 0x7f, 0x7f}, {0xfffffffb, 0x37c, 0x7, 0x5d, 0x7, 0xca}, {0x1, 0x800, 0x48000, 0x5, 0x2, 0x10000}, {0x6, 0x1, 0xfffffff9, 0x1, 0x0, 0x9}, {0x5b1ad289, 0x0, 0xe0000000, 0x3, 0x1000, 0x7fffffff}, {0x3, 0x1000, 0x5da, 0x0, 0x4, 0x1}, {0xffffffff, 0x7ff, 0x1fbd, 0x2, 0x2, 0x3}, {0x9, 0xd8, 0x9, 0x3, 0xff, 0x8}, {0x7fffffff, 0x2, 0x101, 0xd61c, 0x7, 0x3}, {0x0, 0xf2e, 0x66, 0x9e1, 0x5, 0x7}, {0x0, 0x0, 0x800, 0x5, 0x8, 0x101}, {0x5, 0x1, 0xfffffffc, 0x6, 0x7, 0xcf00000}, {0xfffffff9, 0xaa, 0x2, 0x9, 0x6, 0x4196020b}, {0x0, 0xfea, 0x9, 0x5, 0x3293, 0xffff}, {0x7, 0xfffffffa, 0x2, 0x9, 0x6, 0x7ff}, {0xee, 0xfffffff7, 0x7, 0xf, 0x10}, {0x0, 0x3, 0x1, 0x2, 0x2, 0xe}, {0x67bcd46a, 0xe8b, 0x3ff, 0xb4, 0x4, 0xa0}, {0x22b3, 0x3, 0x5, 0x78, 0x9, 0x26a5d5a4}, {0x401, 0x8005, 0x10, 0x9, 0x720, 0x8}, {0x6, 0x7f, 0x6, 0x101, 0x2, 0x3}, {0x6, 0x4, 0xff, 0xfffeffff, 0x1, 0x18000000}, {0x2, 0x7, 0xffffffff, 0xffffffff, 0x401, 0x7c}, {0x4, 0x8d, 0x1, 0x800, 0xf, 0xfffffff7}, {0x0, 0xffffffff, 0x4, 0x4b, 0x5, 0x4}, {0x1, 0x8000, 0x7, 0x9, 0x10000, 0xb6}, {0x0, 0x81, 0x9, 0x7, 0x401, 0x7}, {0x3, 0x8, 0x1400, 0x4c, 0x8, 0x7}, {0x0, 0x9, 0x9, 0x4, 0x9, 0x7}, {0x200, 0x9, 0x4, 0x1, 0x800, 0x2}, {0x143, 0x4, 0x6, 0x6, 0x400, 0x1}, {0x415, 0x8, 0x4, 0x9, 0xe}, {0x6, 0x5, 0x6, 0xfffffff8, 0x1, 0x7}, {0x0, 0x800, 0x1, 0x10000, 0xb, 0x318}], [{0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x2}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x2}, {0x2, 0x2}, {0x5}, {0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x3, 0x7a7e79f3715a24e4}, {0x3}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x4078d3a2fbf2a5ed}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x7a78bbe26a8b81d1}, {0x3}, {0x4, 0x1}, {0x2}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x358bac3bb0c51439, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xeb0}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6m9.492668127s ago: executing program 4 (id=1276): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0xa0200) r2 = dup3(r1, r0, 0x0) ioctl$TCSETAF(r2, 0x5433, 0x0) 6m9.105952735s ago: executing program 32 (id=1276): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0xa0200) r2 = dup3(r1, r0, 0x0) ioctl$TCSETAF(r2, 0x5433, 0x0) 5m49.494023238s ago: executing program 3 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0x7, 0xe5e}}, 0x28) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0xfffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 5m49.151185881s ago: executing program 3 (id=1380): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 5m48.86374326s ago: executing program 3 (id=1383): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 5m48.660671294s ago: executing program 3 (id=1385): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', r1, 0x0, 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 5m47.726633028s ago: executing program 3 (id=1386): listen(0xffffffffffffffff, 0xfffffffc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 5m47.48301476s ago: executing program 3 (id=1388): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1040800, 0x25, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 5m46.529366817s ago: executing program 33 (id=1388): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1040800, 0x25, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 5m44.582324366s ago: executing program 0 (id=1405): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000002400)={0x0, &(0x7f0000000780)=[@cpuid={0x64, 0x18, {0xff, 0x400}}], 0x18}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x4e}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m43.793593649s ago: executing program 0 (id=1407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r3, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m43.442830826s ago: executing program 0 (id=1410): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x518, 0x10, 0x3a, &(0x7f00000000c0)="70898e78ebe4c4d2694e03e4e24992d04bea124867a94cd763bdea7d3e4fafabbe4613bbd33975bbc1c1b7739b597cac9055bf769a694ff9eb4a"}, {0xe, 0x9a00, 0x0, 0x0}], 0x2}) 5m40.716686724s ago: executing program 0 (id=1415): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 5m39.747988697s ago: executing program 0 (id=1419): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0xb, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 5m39.340369325s ago: executing program 0 (id=1421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 5m38.849564533s ago: executing program 34 (id=1421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 13.256987577s ago: executing program 5 (id=2521): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffff", 0x9) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x5be, 0xfffffffc, 'syz0\x00'}, 0x1, 0x100, 0x8, 0x0, 0x0, 0xff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000480)) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000200)) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 11.265596289s ago: executing program 7 (id=2525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 10.638686581s ago: executing program 5 (id=2527): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) r1 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd8a, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x0, &(0x7f0000000380), 0x41000, 0x5f, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x4e, r5, {0x1}}, './file0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f00000001c0)='./file0\x00') close(r1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000000)="ee", 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 10.081456529s ago: executing program 2 (id=2528): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000700000000000000040000000000001c5c137f000000000010"], 0x24, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003b000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000046000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000001c0)="0f017500c4e2d1ac5916b84c4000000f23d80f21f835000000d00f23f80f79b7070000004566b841000f00d8650fc73a660f3882a1cee00000b9ad0a00000f32c4c18711d2"}], 0x1, 0x6b, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000640)={{0xfffc, 0x9, 0x2}, 'syz0\x00', 0x41}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_emit_ethernet(0x101e, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x5, 0x40) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x21c) write$P9_RVERSION(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x82880, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xc) ioctl$TCFLSH(r5, 0x540b, 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 10.060042573s ago: executing program 6 (id=2529): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00"], 0x48}}, 0x4000) 8.388153563s ago: executing program 7 (id=2530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x31) writev(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x1000009, 0x2) r4 = io_uring_setup(0x4621, &(0x7f0000000100)={0x0, 0xd6f4, 0x1, 0x2, 0x359, 0x0, r3}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000240)={0x1ff}, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f000064e000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000998000/0x3000)=nil, 0x0}, 0x68) r6 = socket(0x2b, 0x1, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0xa22, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0x88}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x1, 0xffff}}}, 0x24}}, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_usb_connect(0x3, 0x3a, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x73, 0x55, 0x78, 0x20, 0x545, 0x800d, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x7, 0x7, 0x80, 0x0, "", [{{0x9, 0x4, 0xa0, 0x6, 0x2, 0x7a, 0x8d, 0x91, 0x2, [], [{{0x9, 0x5, 0x85, 0x10, 0x8, 0xa, 0xfc}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x8, 0x7, 0x9, [@generic={0x2, 0xb}, @generic={0x2, 0x22}]}}]}}]}}]}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000001080)={0x2, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x801, 0x7fffffff, 0x1}, {0x7, 0x1, 0x1, 0x2000002, 0x2, 0x9, 0xfffffff1}]}) 8.23945123s ago: executing program 2 (id=2531): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x8, 0x0, 0xb49, 0x8000009, 0x7, 0x2, 0xc59}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="b0539a7d10ece7c02c53c54cfea7186b6d3ce20c42f15eeb7454f724e693d7", @ANYRES32], 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x3, 0x2f, "bec50cffc86b2128b9c1c2fedb30b69e81440b0ab677224f6eede372d859507f25e916e94283d1afe5c09c54d0d3ae"}}) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400000002500090122bd7008f9ffffff0200000024003d8020002280d3b34c2914bca58a0af52d7c2bbd0ac1c5a63bcebb01aa63cfd3cb7f0800030047000000958848d6493e05a753ee9ddcbdf5461f6968fcf106773f971900d6"], 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f00000047c0)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f00000037c0)=""/4096, 0xfffffef3}], 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x36}, 0x94) 7.849517703s ago: executing program 5 (id=2532): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a01040000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008040) connect$inet6(r2, 0x0, 0x0) writev(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x14008080) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x24000000) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x3b85, &(0x7f0000010400)={0x0, 0xad84, 0x1, 0x2, 0x338}, &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) 6.86308033s ago: executing program 6 (id=2534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x24044080) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x240040c4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100001002cbd7004000000000a100000fc02ff000000000008000400", @ANYRES32, @ANYBLOB="0600150008000000100016800c0001000000000000000009"], 0x3c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.369571765s ago: executing program 2 (id=2535): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.021760528s ago: executing program 1 (id=2536): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4", 0xc}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x370}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.901666071s ago: executing program 5 (id=2537): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r0) 5.71298241s ago: executing program 5 (id=2538): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,us', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 5.645550541s ago: executing program 1 (id=2539): r0 = inotify_init() r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 5.133987226s ago: executing program 6 (id=2540): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x3}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 5.102543387s ago: executing program 7 (id=2541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 4.625627225s ago: executing program 7 (id=2542): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x30, 0x0, &(0x7f00000002c0)=[@free_buffer, @free_buffer, @acquire_done={0x40106309, 0x1}, @register_looper], 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x38, 0x40, 0x1, 0xfff7fffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x4, 0x4a}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x250) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000020, &(0x7f00000011c0)=ANY=[@ANYBLOB='='], 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x54, 0x24, 0xf0b, 0x80, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 3.537367855s ago: executing program 1 (id=2543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x400, 0x3, 0x4, 0x0, 0xc3}) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000100)='1', 0x1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044800) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_TDX_GET_CPUID(r4, 0xc008aeba, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000280)={0x1, 0x0, [{0x80000008, 0x2, 0x2, 0x4, 0x1, 0x5}]}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x218, 0x218, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, 0xffffff00, 0x0, 0x4, 0x3, {@mac=@random="6fe80c8004a8", {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x6, 0x800, 0x70, 0x50, 0x1, 0x8000, 'macvlan0\x00', 'team_slave_0\x00', {}, {0xff}, 0x0, 0x6a0}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xf, 0x7, 0x4, 0x1, 0x0, "0cbdbac6b1002346035b94f29e1c5277204a4015babc52b0e4a205d3b3838a509849b17e487f5c00344c8e3d6127e76370f1f60429c111e7d36c2818d5ed1000"}}}, {{@arp={@remote, @dev={0xac, 0x14, 0x14, 0x13}, 0xffffffff, 0xffffffff, 0xa, 0x5, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="ad18eae7dedd", {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x5a, 0x1, 0x9, 0x2, 0x4, 'wlan0\x00', 'veth0_to_team\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x9, 0x1}}}, {{@arp={@local, @private=0xa010101, 0xff000000, 0xffffffff, 0x3, 0x6, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xfffd, 0x1, 0x6, 0xc, 0x1, 0x2, 'ip6gre0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x12a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @private=0xa010102, @rand_addr=0x64010101, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) readv(r2, &(0x7f0000000cc0)=[{&(0x7f00000007c0)=""/248, 0xf8}, {&(0x7f00000008c0)=""/156, 0x9c}, {&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000a40)=""/185, 0xb9}, {&(0x7f0000000b00)=""/178, 0xb2}, {0x0}], 0x6) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x1) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000d80)={0x9, 0x1, 0x0, 0x401, 0x6, 0x0, [{0xb, 0x2, 0x698, '\x00', 0x2006}, {0xf, 0xc, 0x0, '\x00', 0x1800}, {0x8, 0x10, 0x5, '\x00', 0x3}, {0x8, 0xf, 0x10, '\x00', 0x280}, {0x1, 0x3, 0x2, '\x00', 0x80}, {0x1000, 0x3, 0x3, '\x00', 0x4}]}) fsopen(&(0x7f0000000f40)='qnx6\x00', 0x1) r7 = eventfd(0x5) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000f80)={0x1, r7}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', 0x189001) write$P9_RREMOVE(r8, &(0x7f0000001000)={0x7, 0x7b, 0x2}, 0x7) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000001100)={0x1, 0x80000000, 0x98, &(0x7f0000001040)=""/152}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r8, 0x0) syz_io_uring_submit(0x0, r9, 0x0, &(0x7f00000011c0)=@IORING_OP_LINKAT={0x27, 0x1, 0x0, r8, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)='./file0\x00', r8, 0x400}) syz_io_uring_setup(0x1587, &(0x7f0000001200)={0x0, 0xd47f, 0x40, 0x0, 0x2eb, 0x0, r7}, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)) fcntl$addseals(r8, 0x409, 0x2) 3.315502894s ago: executing program 1 (id=2544): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x6000000d}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) close_range(r2, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x30, 0x25, 0x2, 0x70ff}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r5, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x44000160) dup(r7) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 2.367751526s ago: executing program 7 (id=2545): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x8, 0x0, 0xb49, 0x8000009, 0x7, 0x2, 0xc59}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="b0539a7d10ece7c02c53c54cfea7186b6d3ce20c42f15eeb7454f724e693d7", @ANYRES32], 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x3, 0x2f, "bec50cffc86b2128b9c1c2fedb30b69e81440b0ab677224f6eede372d859507f25e916e94283d1afe5c09c54d0d3ae"}}) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400000002500090122bd7008f9ffffff0200000024003d8020002280d3b34c2914bca58a0af52d7c2bbd0ac1c5a63bcebb01aa63cfd3cb7f0800030047000000958848d6493e05a753ee9ddcbdf5461f6968fcf106773f971900d6"], 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f00000047c0)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f00000037c0)=""/4096, 0xfffffef3}], 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000002004000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc30300ff51000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913d3c7cc59466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc4e51d2305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd574717ceaaa3b378cf546d48e4e9ee414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000a946a5345ae751cdf77af5171ab9aadabef2a07468eb3ac25ddd843229713837f78826137300f90ade789099ed29c773a3cf65bfd9bf48045d80de6adc2f85e6f140ede4a4307944b5a7462a545a7624ce64ec971e32c0173250e42ca339b4cc5040194ffac5f7a7e38d097c004f8eb48c604fd2a417b329c0af4841a5d72e44b4b9547df6fe"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x36}, 0x94) 2.351890442s ago: executing program 2 (id=2546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) 2.02612717s ago: executing program 2 (id=2547): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x46c}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240), 0x60000, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000380)=[@release], 0x0, 0x0, &(0x7f0000000400)}) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) syz_open_procfs(0xffffffffffffffff, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f0000000000)={0x9, 0x4, 0x200, 0xea, 0x9, 0x4000000000000, 0x1cb7, 0xffffffff, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0xa, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfd}, {0x2000, 0x0, 0x9, 0xa, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x7f, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0x11, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x1, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x10, 0xa, 0x26}, {0x58000, 0xfffe}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x1, 0x72f3a5e6]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000bce000/0x2000)=nil, 0x2000}, 0x1}) r8 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, 0x0, 0x4a) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.719372193s ago: executing program 2 (id=2548): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x21182, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r0, 0x9dc0d000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x4103, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x33ccc}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.431341773s ago: executing program 1 (id=2549): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4", 0xc}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x370}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 674.412181ms ago: executing program 6 (id=2550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb519864", 0x67}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282", 0x28}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871", 0x78}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 617.751922ms ago: executing program 1 (id=2551): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f000078a000/0x2000)=nil, 0x2000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000240)='fuse\x00', 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r2, 0x0, 0x0, 0x1000000000fe, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 446.08039ms ago: executing program 6 (id=2552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 230.848313ms ago: executing program 7 (id=2553): ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000001c0)={0x9, 0x3, 0x400a, 0x0, 0x9, 0x7}) r0 = socket(0x2, 0x80805, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000540)={&(0x7f0000000340)=[{0xee, 0x4a11, 0x1, &(0x7f0000000180)='W'}, {0x1, 0x6801, 0x3c, &(0x7f0000000900)="04"}], 0x2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000100)=0x10) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r4, 0xfff}, &(0x7f0000002440)=0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/exec\x00') fchdir(r5) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000023c0)={0x50, 0x0, r6, {0x7, 0x2d, 0x7ff, 0x10004400, 0x7, 0x3, 0x7, 0x0, 0x0, 0x0, 0x10, 0x6cc4}}, 0x50) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000300)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000340)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106, 0x9}}, 0x20) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x3, 0x12, 0x7, 0x7}, {0x9, 0xd, 0x1, 0x9}, {0xff00, 0x0, 0x0, 0x10}, {0x7, 0x40, 0x5, 0x1000000}]}, 0x10) r8 = accept4$vsock_stream(r7, &(0x7f0000002540)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000002580), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x80000, 0xffffffffffffffff, 0x0, 0x0}) 79.005335ms ago: executing program 5 (id=2554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x101, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) lseek(0xffffffffffffffff, 0xfffd, 0x3) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="03010000ac0fce405d0501904431000000010902120009000080040904"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b4000000", @ANYRES32=r6, @ANYRESDEC], 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 0s ago: executing program 6 (id=2555): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = io_uring_setup(0x74f8, &(0x7f00000005c0)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000001680)=[{&(0x7f0000000040)="cb", 0x1}, {&(0x7f0000000240)="12", 0x1}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 91711][ T5919] gspca_main: se401-2.14.0 probing 047d:5003 [ 615.711029][ T5919] gspca_se401: ExtraFeatures: 48 [ 615.723732][ T5831] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 615.736785][ T5919] gspca_se401: Frame size: 65532x65535 bayer [ 615.752555][ T5919] gspca_se401: Frame size: 135x16 bayer [ 615.759518][ T5919] gspca_se401: Frame size: 65535x3 bayer [ 615.771316][ T5919] gspca_se401: Frame size: 65535x65535 bayer [ 615.811192][ T5919] gspca_se401: Frame size: 0x0 1/16th janggu [ 615.820452][ T5919] gspca_se401: Frame size: 0x0 1/16th janggu [ 615.831565][ T5919] gspca_se401: Frame size: 0x0 1/16th janggu [ 615.849090][ T5919] gspca_se401: Frame size: 0x0 1/16th janggu [ 615.865585][ T5919] gspca_se401: Frame size: 4x0 1/16th janggu [ 615.876200][ T5919] gspca_se401: Frame size: 16x0 bayer [ 615.900088][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 615.924198][ T5919] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input98 [ 615.949374][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.980214][ T5831] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 615.998904][ T5919] usb 6-1: USB disconnect, device number 15 [ 616.098075][ T5831] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.195915][ T5831] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 616.230652][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.256138][ T5831] usb 2-1: Product: syz [ 616.267771][ T5831] usb 2-1: Manufacturer: syz [ 616.277799][ T5831] usb 2-1: SerialNumber: syz [ 616.552739][ T5831] usb 2-1: Can't get UAC3 power state for id 11 [ 616.586859][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 616.595194][ T5831] usb 2-1: 5:0: failed to get current value for ch 0 (-71) [ 616.639136][ T5831] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 616.881352][ T5831] usb 2-1: USB disconnect, device number 57 [ 616.912332][ T5919] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 617.114407][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 617.140325][ T5919] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 617.175353][ T5919] usb 6-1: config 0 has no interface number 0 [ 617.210218][ T5919] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 617.252273][ T5919] usb 6-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 617.295391][ T5919] usb 6-1: config 0 interface 41 has no altsetting 0 [ 617.321347][ T5919] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 617.338498][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.348347][ T5919] usb 6-1: Product: syz [ 617.364332][ T5919] usb 6-1: Manufacturer: syz [ 617.378269][ T5919] usb 6-1: SerialNumber: syz [ 617.416412][ T5919] usb 6-1: config 0 descriptor?? [ 617.433890][T13443] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 617.449311][ T5919] sr9700 6-1:0.41: probe with driver sr9700 failed with error -22 [ 617.848011][T13443] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 617.978208][ T5919] usb 6-1: USB disconnect, device number 16 [ 618.995217][T13484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.222071][ T5919] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 619.592911][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 619.622864][ T5919] usb 6-1: config index 0 descriptor too short (expected 52, got 36) [ 619.644026][ T5919] usb 6-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 619.685861][ T5919] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 619.726920][ T5919] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 619.752005][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.780453][ T5919] usb 6-1: Product: syz [ 619.790514][ T5919] usb 6-1: Manufacturer: syz [ 619.806028][ T5919] usb 6-1: SerialNumber: syz [ 619.847558][ T5919] usb 6-1: config 0 descriptor?? [ 619.882463][T13494] netlink: 'syz.1.1847': attribute type 61 has an invalid length. [ 620.021070][T13496] netlink: 'syz.7.1848': attribute type 61 has an invalid length. [ 620.029964][T13497] netlink: 'syz.1.1847': attribute type 4 has an invalid length. [ 620.135991][T13498] netlink: 'syz.7.1848': attribute type 4 has an invalid length. [ 621.665321][T13513] fuse: Bad value for 'fd' [ 621.906112][T13517] syzkaller0: entered promiscuous mode [ 621.911657][T13517] syzkaller0: entered allmulticast mode [ 622.117411][ T797] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 622.220042][ T5901] usb 6-1: USB disconnect, device number 17 [ 622.276184][ T797] usb 3-1: Using ep0 maxpacket: 32 [ 622.297964][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.309714][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.329434][ T797] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 622.349139][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.369942][ T797] usb 3-1: config 0 descriptor?? [ 622.808578][ T797] hid_parser_main: 4 callbacks suppressed [ 622.808597][ T797] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 622.837263][ T797] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 623.006830][ T797] ft260 0003:0403:6030.001A: chip code: 0000 0000 [ 623.220758][ T797] ft260 0003:0403:6030.001A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 623.438525][ T797] ft260 0003:0403:6030.001A: failed to retrieve status: -32, no wakeup [ 623.694181][T13523] i2c i2c-1: adapter quirk: 1st comb msg must be write (addr 0x0006, size 0, read) [ 623.730002][T13523] ft260 0003:0403:6030.001A: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 623.994982][T13523] ft260 0003:0403:6030.001A: failed to reset I2C controller: -108 [ 624.748116][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.756135][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.764110][ T797] usb 3-1: USB disconnect, device number 65 [ 624.866486][T13544] kvm: pic: level sensitive irq not supported [ 626.372752][T13557] netlink: 'syz.7.1861': attribute type 61 has an invalid length. [ 626.611741][T13557] netlink: 'syz.7.1861': attribute type 4 has an invalid length. [ 626.783670][T13567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.087970][T13573] kvm: pic: level sensitive irq not supported [ 627.088459][T13573] kvm: pic: single mode not supported [ 627.114654][T13573] kvm: pic: level sensitive irq not supported [ 627.137263][T13573] kvm: pic: non byte read [ 627.168536][T13573] kvm: pic: non byte read [ 627.180237][T13573] kvm: pic: non byte read [ 627.194483][T13573] kvm: pic: non byte read [ 627.221606][T13579] syzkaller0: entered promiscuous mode [ 627.228288][T13573] kvm: pic: non byte read [ 627.246913][T13579] syzkaller0: entered allmulticast mode [ 627.270997][T13573] kvm: pic: non byte read [ 627.293738][T13573] kvm: pic: non byte read [ 627.332628][T13573] kvm: pic: non byte read [ 627.361229][T13573] kvm: pic: non byte read [ 627.372698][T13573] kvm: pic: non byte read [ 627.762116][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 627.931986][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 627.949427][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 627.991344][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 628.008942][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.027392][ T24] usb 3-1: Product: syz [ 628.057890][ T24] usb 3-1: Manufacturer: syz [ 628.067903][ T24] usb 3-1: SerialNumber: syz [ 628.071979][ T5815] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 628.101284][ T24] usb 3-1: config 0 descriptor?? [ 628.148408][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 628.172410][ T24] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 628.273135][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 628.295660][ T5815] usb 6-1: unable to get BOS descriptor or descriptor too short [ 628.376838][ T5815] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 628.413190][ T5815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.456401][ T5815] usb 6-1: config 0 has no interface number 0 [ 628.490873][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1872'. [ 628.500366][ T5815] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 628.542560][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 628.582919][ T5815] usb 6-1: Product: syz [ 628.587190][ T5815] usb 6-1: Manufacturer: syz [ 628.624194][ T5815] usb 6-1: SerialNumber: syz [ 628.666381][ T5815] usb 6-1: config 0 descriptor?? [ 628.724829][ T24] em28xx 3-1:0.0: chip ID is em2765 [ 629.367566][ T24] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 629.393727][ T24] em28xx 3-1:0.0: board has no eeprom [ 629.691988][ T24] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 629.733378][ T24] em28xx 3-1:0.0: dvb set to bulk mode. [ 629.784018][ T5901] em28xx 3-1:0.0: Binding DVB extension [ 629.841183][ T24] usb 3-1: USB disconnect, device number 66 [ 629.904371][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 630.174735][ T5901] em28xx 3-1:0.0: Registering input extension [ 630.196764][ T24] em28xx 3-1:0.0: Closing input extension [ 630.263741][ T24] em28xx 3-1:0.0: Freeing device [ 631.100133][T13619] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 631.669258][ T5815] usb 6-1: USB disconnect, device number 18 [ 631.875747][ T5919] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 632.054867][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 632.092217][ T5919] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 632.138026][ T5919] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 632.202143][ T5919] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 632.288985][T13648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.359542][ T5919] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 632.402880][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.422180][ T5919] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 632.450155][ T5919] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 632.482084][ T5919] usb 2-1: Product: syz [ 632.489693][T13651] netlink: 'syz.5.1885': attribute type 61 has an invalid length. [ 632.502860][ T5919] usb 2-1: Manufacturer: syz [ 632.507573][ T5919] usb 2-1: SerialNumber: syz [ 632.533653][ T5919] usb 2-1: config 0 descriptor?? [ 632.556551][ T5919] ldusb 2-1:0.0: Interrupt in endpoint not found [ 632.720288][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1886'. [ 632.757429][T13656] netlink: 'syz.5.1885': attribute type 4 has an invalid length. [ 632.827279][ T797] usb 2-1: USB disconnect, device number 58 [ 633.165074][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1887'. [ 633.931969][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 634.098566][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 634.142909][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 634.175420][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 634.198964][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.237862][T13669] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 634.303447][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 634.393247][T13679] netlink: 'syz.5.1892': attribute type 61 has an invalid length. [ 634.645522][T13682] netlink: 'syz.5.1892': attribute type 4 has an invalid length. [ 634.780956][ T24] usb 3-1: USB disconnect, device number 67 [ 636.034679][ T5919] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 636.172873][T13706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.248981][ T5919] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 636.269840][ T5919] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 636.300684][ T5919] usb 3-1: config 8 has no interface number 0 [ 636.334485][ T5919] usb 3-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 636.352421][ T5919] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 636.389884][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.425186][ T5919] usb 3-1: NFC: intf ffff8880266b4000 id ffffffff8f1d3060 [ 637.638997][T13718] netlink: 'syz.7.1902': attribute type 61 has an invalid length. [ 637.952342][T13720] netlink: 'syz.7.1902': attribute type 4 has an invalid length. [ 638.582813][ T5919] usb 3-1: USB disconnect, device number 68 [ 638.912956][T13733] syzkaller0: entered promiscuous mode [ 638.918906][T13733] syzkaller0: entered allmulticast mode [ 639.259488][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 639.422373][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 639.441171][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 639.457477][ T24] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 639.476055][ T24] usb 2-1: config 13 has no interface number 0 [ 639.502380][ T24] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 639.522168][ T24] usb 2-1: config 13 interface 50 has no altsetting 0 [ 639.553890][ T24] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 639.581944][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.590007][ T24] usb 2-1: Product: syz [ 639.598204][ T24] usb 2-1: Manufacturer: syz [ 639.605013][ T24] usb 2-1: SerialNumber: syz [ 639.618685][T13737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 640.084300][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 640.094630][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 640.349753][ T24] usb 2-1: USB disconnect, device number 59 [ 640.495226][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.242713][ T29] audit: type=1800 audit(1776079801.330:1277): pid=13769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1920" name="bus" dev="ramfs" ino=49827 res=0 errno=0 [ 641.539424][T13787] netlink: 'syz.5.1924': attribute type 61 has an invalid length. [ 641.804067][T13788] netlink: 'syz.5.1924': attribute type 4 has an invalid length. [ 641.866637][T13790] syzkaller0: entered promiscuous mode [ 641.892587][T13790] syzkaller0: entered allmulticast mode [ 642.191585][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 643.238007][T13817] netlink: 'syz.2.1933': attribute type 61 has an invalid length. [ 643.350731][T13820] netlink: 'syz.2.1933': attribute type 4 has an invalid length. [ 643.491973][ T24] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 643.656893][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 643.684772][ T24] usb 6-1: config 0 has no interface number 0 [ 643.712052][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 643.744751][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 643.765488][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 643.780980][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.816034][ T24] usb 6-1: config 0 descriptor?? [ 643.823034][T13819] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 643.866776][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 644.114540][ T24] usb 6-1: USB disconnect, device number 19 [ 646.362511][T13853] fuse: Bad value for 'fd' [ 647.303926][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 647.447655][T13863] netlink: 'syz.2.1945': attribute type 61 has an invalid length. [ 647.639664][T13863] netlink: 'syz.2.1945': attribute type 4 has an invalid length. [ 647.730048][T13870] syzkaller0: entered promiscuous mode [ 647.750809][T13870] syzkaller0: entered allmulticast mode [ 647.902002][ T797] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 647.955740][T13874] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 648.178937][ T797] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 648.220918][ T797] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 648.262123][ T797] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 648.316002][ T797] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 648.344584][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.373283][T13868] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 650.537386][ T797] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 650.572053][ T797] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input100 [ 650.863405][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 650.925128][ T797] usb 2-1: USB disconnect, device number 60 [ 651.675514][T13936] syzkaller0: entered promiscuous mode [ 651.692001][ T5815] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 651.700202][T13936] syzkaller0: entered allmulticast mode [ 651.874175][ T5815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.898247][ T5815] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 651.921137][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.934207][T13938] tipc: Enabled bearer , priority 0 [ 651.961293][ T5815] usb 6-1: config 0 descriptor?? [ 651.981248][ T5815] pwc: Askey VC010 type 2 USB webcam detected. [ 652.164041][T13935] tipc: Resetting bearer [ 652.220511][T13935] tipc: Disabling bearer [ 652.385283][ T5815] pwc: recv_control_msg error -32 req 02 val 2b00 [ 652.402640][ T5815] pwc: recv_control_msg error -32 req 02 val 2700 [ 652.421839][ T5815] pwc: recv_control_msg error -32 req 02 val 2c00 [ 652.450971][ T5815] pwc: recv_control_msg error -32 req 04 val 1000 [ 652.466766][T13932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.511485][T13932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.592743][ T5815] pwc: recv_control_msg error -32 req 04 val 1300 [ 652.615989][ T5815] pwc: recv_control_msg error -32 req 04 val 1400 [ 652.633686][ T5815] pwc: recv_control_msg error -32 req 02 val 2000 [ 652.653830][ T5815] pwc: recv_control_msg error -32 req 02 val 2100 [ 652.668022][ T5815] pwc: recv_control_msg error -32 req 04 val 1500 [ 652.677840][T13944] syzkaller0: entered promiscuous mode [ 652.701953][T13944] syzkaller0: entered allmulticast mode [ 652.899486][ T5815] pwc: recv_control_msg error -71 req 02 val 2400 [ 652.941338][ T5815] pwc: recv_control_msg error -71 req 02 val 2600 [ 652.968866][ T5815] pwc: recv_control_msg error -71 req 02 val 2900 [ 652.982727][ T5815] pwc: recv_control_msg error -71 req 02 val 2800 [ 653.007460][ T5815] pwc: recv_control_msg error -71 req 04 val 1100 [ 653.038011][ T5815] pwc: recv_control_msg error -71 req 04 val 1200 [ 653.067666][ T5815] pwc: Registered as video103. [ 653.101255][ T5815] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input101 [ 653.167586][ T5815] usb 6-1: USB disconnect, device number 20 [ 653.234882][T13953] netlink: 'syz.2.1963': attribute type 61 has an invalid length. [ 653.434370][T13954] netlink: 'syz.2.1963': attribute type 4 has an invalid length. [ 654.741666][T13967] fuse: Bad value for 'fd' [ 655.191596][ T5815] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 655.448543][ T5815] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 655.494763][ T5815] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 655.547455][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.604287][ T5815] usb 6-1: Product: syz [ 655.642061][ T5815] usb 6-1: Manufacturer: syz [ 655.652863][ T5815] usb 6-1: SerialNumber: syz [ 655.734887][ T5815] usb 6-1: config 0 descriptor?? [ 657.000467][T13994] syzkaller0: entered promiscuous mode [ 657.028444][T13994] syzkaller0: entered allmulticast mode [ 657.795158][T14003] syzkaller0: entered promiscuous mode [ 657.823227][T14003] syzkaller0: entered allmulticast mode [ 658.390003][T14008] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 658.450233][T14008] syzkaller0: entered promiscuous mode [ 658.466103][T14008] syzkaller0: entered allmulticast mode [ 658.561292][T14012] syzkaller0: entered promiscuous mode [ 658.602324][T14012] syzkaller0: entered allmulticast mode [ 658.671341][ T5815] usb 6-1: USB disconnect, device number 21 [ 658.842443][T14021] fuse: Bad value for 'fd' [ 662.330066][T14068] fuse: Bad value for 'fd' [ 662.607639][T14077] syzkaller0: entered promiscuous mode [ 662.613485][T14077] syzkaller0: entered allmulticast mode [ 663.152215][ T5815] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 663.373594][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.391581][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 1024 [ 663.412448][ T5815] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 663.449868][ T5815] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.464044][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.476760][ T5815] usb 6-1: config 0 descriptor?? [ 663.493386][T14085] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 663.939462][ T5815] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 664.048074][T14101] fuse: Bad value for 'fd' [ 664.351814][ T5815] usb 6-1: USB disconnect, device number 22 [ 664.493216][T14100] fido_id[14100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 664.582935][ T797] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 664.747742][ T797] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 664.761395][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.773050][ T797] usb 2-1: Product: syz [ 664.777442][ T797] usb 2-1: Manufacturer: syz [ 664.788756][ T797] usb 2-1: SerialNumber: syz [ 664.817839][ T797] usb 2-1: config 0 descriptor?? [ 664.850003][ T797] hub 2-1:0.0: bad descriptor, ignoring hub [ 664.864039][ T797] hub 2-1:0.0: probe with driver hub failed with error -5 [ 665.054574][ T797] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 665.075743][ T797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 665.100335][ T797] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 665.126322][ T797] usb 2-1: media controller created [ 665.166921][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 665.502023][ T797] DVB: Unable to find symbol dib7000p_attach() [ 665.574209][T14122] netlink: 'syz.5.2005': attribute type 61 has an invalid length. [ 665.611731][ T797] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 665.792104][ T797] rc_core: IR keymap rc-dib0700-rc5 not found [ 665.824631][ T797] Registered IR keymap rc-empty [ 665.858464][ T797] dvb-usb: could not initialize remote control. [ 665.885218][ T797] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 666.599360][T14137] netlink: 'syz.2.2009': attribute type 61 has an invalid length. [ 666.822907][T14137] netlink: 'syz.2.2009': attribute type 4 has an invalid length. [ 667.715937][ T5901] usb 2-1: USB disconnect, device number 61 [ 667.835262][ T5901] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 669.527484][T14177] syzkaller0: entered promiscuous mode [ 669.549184][T14177] syzkaller0: entered allmulticast mode [ 669.929033][T14186] netlink: 'syz.1.2021': attribute type 61 has an invalid length. [ 670.252847][T14186] netlink: 'syz.1.2021': attribute type 4 has an invalid length. [ 670.730413][T14189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.737726][T14189] IPv6: NLM_F_CREATE should be set when creating new route [ 671.282424][T14197] fuse: Bad value for 'fd' [ 671.359850][T14199] netlink: 'syz.7.2024': attribute type 61 has an invalid length. [ 671.625542][T14200] netlink: 'syz.7.2024': attribute type 4 has an invalid length. [ 671.769255][T14203] syzkaller0: entered promiscuous mode [ 671.782252][T14203] syzkaller0: entered allmulticast mode [ 671.832008][ T5815] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 672.061997][ T5815] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 672.085132][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.106979][ T5815] usb 6-1: Product: syz [ 672.111174][ T5815] usb 6-1: Manufacturer: syz [ 672.144523][ T5815] usb 6-1: SerialNumber: syz [ 672.165174][ T5815] usb 6-1: config 0 descriptor?? [ 672.195064][ T5815] hub 6-1:0.0: bad descriptor, ignoring hub [ 672.217342][ T5815] hub 6-1:0.0: probe with driver hub failed with error -5 [ 672.347503][T14205] syzkaller0: entered promiscuous mode [ 672.366468][T14205] syzkaller0: entered allmulticast mode [ 672.517880][ T5815] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 672.715877][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 672.754264][T14214] syzkaller0: entered promiscuous mode [ 672.797228][T14214] syzkaller0: entered allmulticast mode [ 672.807101][ T5815] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 672.837196][T14216] syzkaller0: entered promiscuous mode [ 672.852898][T14216] syzkaller0: entered allmulticast mode [ 672.853354][ T5815] usb 6-1: media controller created [ 673.000481][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 673.248797][ T5815] DVB: Unable to find symbol dib7000p_attach() [ 673.300137][ T5815] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 673.478091][T14222] syzkaller0: entered promiscuous mode [ 673.494837][T14222] syzkaller0: entered allmulticast mode [ 673.562121][ T5815] rc_core: IR keymap rc-dib0700-rc5 not found [ 673.599762][ T5815] Registered IR keymap rc-empty [ 673.630838][ T5815] dvb-usb: could not initialize remote control. [ 673.656670][ T5815] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 673.722435][T14232] tipc: Enabled bearer , priority 0 [ 673.778235][T14234] syzkaller0: entered promiscuous mode [ 673.808614][T14234] syzkaller0: entered allmulticast mode [ 673.928967][T14232] tipc: Resetting bearer [ 673.979508][T14230] tipc: Resetting bearer [ 674.044154][T14230] tipc: Disabling bearer [ 674.375797][T14245] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 674.421746][T14245] syzkaller0: entered promiscuous mode [ 674.444347][T14245] syzkaller0: entered allmulticast mode [ 674.493893][T14245] tipc: Started in network mode [ 674.511707][T14245] tipc: Node identity 7230c4397fd6, cluster identity 4711 [ 674.535846][T14245] tipc: Enabled bearer , priority 0 [ 674.620482][T14244] tipc: Resetting bearer [ 674.686640][T14244] tipc: Disabling bearer [ 675.054235][T14253] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 675.233559][ T5919] usb 6-1: USB disconnect, device number 23 [ 675.343517][ T5919] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 675.494314][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2039'. [ 676.563117][T14277] syzkaller0: entered promiscuous mode [ 676.582176][T14277] syzkaller0: entered allmulticast mode [ 676.951315][T14293] fuse: Bad value for 'fd' [ 677.362118][ T5919] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 677.569059][ T5919] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 677.609739][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.648344][ T5919] usb 3-1: Product: syz [ 677.659423][ T5919] usb 3-1: Manufacturer: syz [ 677.678529][ T5919] usb 3-1: SerialNumber: syz [ 677.701828][ T5919] usb 3-1: config 0 descriptor?? [ 677.741279][ T5919] hub 3-1:0.0: bad descriptor, ignoring hub [ 677.758693][ T5919] hub 3-1:0.0: probe with driver hub failed with error -5 [ 678.016373][ T5919] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 678.057623][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 678.107314][ T5919] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 678.146402][ T5919] usb 3-1: media controller created [ 678.175869][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.322388][ T5919] DVB: Unable to find symbol dib7000p_attach() [ 678.338975][ T5919] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 678.442971][ T5919] rc_core: IR keymap rc-dib0700-rc5 not found [ 678.452488][ T5919] Registered IR keymap rc-empty [ 678.464634][ T5919] dvb-usb: could not initialize remote control. [ 678.491956][ T5919] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 679.608008][T14325] syzkaller0: entered promiscuous mode [ 679.615103][T14325] syzkaller0: entered allmulticast mode [ 679.849032][T14328] binder: 14327:14328 ioctl c0306201 2000000001c0 returned -14 [ 680.166204][T14332] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 680.212378][T14332] kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 680.235770][T14332] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 680.276285][T14332] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 680.313068][T14332] kvm: requested 58666 ns i8254 timer period limited to 200000 ns [ 680.362138][T14332] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 680.390438][T14332] kvm: requested 60342 ns i8254 timer period limited to 200000 ns [ 680.423972][T14332] kvm: requested 151695 ns i8254 timer period limited to 200000 ns [ 680.528257][ T797] usb 3-1: USB disconnect, device number 69 [ 680.700206][ T797] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 681.092171][ T5815] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 681.199726][T14348] IPv4: Oversized IP packet from 127.202.26.0 [ 681.244176][T14350] tipc: Enabled bearer , priority 0 [ 681.253929][T14350] syzkaller0: entered promiscuous mode [ 681.262386][T14350] syzkaller0: entered allmulticast mode [ 681.262822][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 681.286458][ T5815] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 681.309376][ T5815] usb 6-1: config 0 has no interface number 0 [ 681.333169][ T5815] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 681.355154][ T5815] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 681.355961][T14350] tipc: Resetting bearer [ 681.384801][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.396628][T14349] tipc: Resetting bearer [ 681.425965][ T5815] usb 6-1: Product: syz [ 681.442344][ T5815] usb 6-1: Manufacturer: syz [ 681.447941][T14349] tipc: Disabling bearer [ 681.454647][ T5815] usb 6-1: SerialNumber: syz [ 681.473299][ T5815] usb 6-1: config 0 descriptor?? [ 681.491087][T14346] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 681.640238][T14354] syzkaller0: entered promiscuous mode [ 681.646112][T14354] syzkaller0: entered allmulticast mode [ 681.727748][T14346] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 681.903274][T14359] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 681.957467][T14363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2071'. [ 681.986104][T14363] bond3: (slave bridge2): making interface the new active one [ 682.023451][T14363] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 682.045913][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 682.067826][T14365] fuse: Bad value for 'fd' [ 682.077509][T14359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 682.202128][T14366] ipip0: entered promiscuous mode [ 682.210481][T14366] ipip0: entered allmulticast mode [ 682.302346][T14368] syzkaller0: entered promiscuous mode [ 682.358648][T14368] syzkaller0: entered allmulticast mode [ 682.425255][T14373] syzkaller0: entered promiscuous mode [ 682.431123][T14373] syzkaller0: entered allmulticast mode [ 682.599735][T14376] syzkaller0: entered promiscuous mode [ 682.612048][T14376] syzkaller0: entered allmulticast mode [ 682.625719][T14378] syzkaller0: entered promiscuous mode [ 682.631283][T14378] syzkaller0: entered allmulticast mode [ 684.003005][T14397] syzkaller0: entered promiscuous mode [ 684.037856][T14397] syzkaller0: entered allmulticast mode [ 684.152769][ T797] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 684.199482][ T5815] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 684.245500][ T5815] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 684.310471][ T5815] asix 6-1:0.188: probe with driver asix failed with error -71 [ 684.357900][ T797] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 684.390704][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.417965][ T797] usb 3-1: Product: syz [ 684.436088][ T5815] usb 6-1: USB disconnect, device number 24 [ 684.443643][ T797] usb 3-1: Manufacturer: syz [ 684.476745][ T797] usb 3-1: SerialNumber: syz [ 684.506070][ T797] usb 3-1: config 0 descriptor?? [ 684.632409][ T797] hub 3-1:0.0: bad descriptor, ignoring hub [ 684.919701][ T797] hub 3-1:0.0: probe with driver hub failed with error -5 [ 685.061602][ T797] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 685.138794][ T797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 685.203675][ T797] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 685.258846][ T797] usb 3-1: media controller created [ 685.367024][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 685.661724][ T797] DVB: Unable to find symbol dib7000p_attach() [ 685.692086][ T797] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 685.832115][ T797] rc_core: IR keymap rc-dib0700-rc5 not found [ 685.850958][ T797] Registered IR keymap rc-empty [ 685.864339][ T797] dvb-usb: could not initialize remote control. [ 685.884620][ T797] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 685.920660][ T797] usb 3-1: USB disconnect, device number 70 [ 686.185169][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.213467][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.294210][T14423] syzkaller0: entered promiscuous mode [ 687.299810][T14423] syzkaller0: entered allmulticast mode [ 687.505702][ T797] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 688.091962][ T797] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 688.137895][T14441] syzkaller0: entered promiscuous mode [ 688.151967][T14441] syzkaller0: entered allmulticast mode [ 688.293751][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 688.326507][T14443] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 688.382578][T14443] picdev_read: 4123 callbacks suppressed [ 688.382600][T14443] kvm: pic: non byte read [ 688.392860][ T797] usb 3-1: unable to get BOS descriptor or descriptor too short [ 688.482447][ T797] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 688.500886][ T797] usb 3-1: config 0 has no interface number 0 [ 688.514627][ T797] usb 3-1: config 0 interface 88 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 688.534890][ T797] usb 3-1: config 0 interface 88 has no altsetting 0 [ 688.598297][ T797] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 688.612434][ T797] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 688.638140][ T797] usb 3-1: Product: syz [ 688.642451][ T797] usb 3-1: Manufacturer: syz [ 688.647142][ T797] usb 3-1: SerialNumber: syz [ 688.688277][ T797] usb 3-1: config 0 descriptor?? [ 689.002100][T14456] fuse: Bad value for 'fd' [ 689.034260][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2096'. [ 689.044644][T14454] syzkaller0: entered promiscuous mode [ 689.059146][T14454] syzkaller0: entered allmulticast mode [ 689.132633][T14461] fuse: Bad value for 'fd' [ 689.622022][ T5815] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 690.569429][T14472] syzkaller0: entered promiscuous mode [ 690.607404][T14472] syzkaller0: entered allmulticast mode [ 690.717869][ T797] usb 3-1: USB disconnect, device number 71 [ 690.976103][T14475] tipc: Enabled bearer , priority 0 [ 691.012680][T14475] syzkaller0: entered promiscuous mode [ 691.054911][T14475] syzkaller0: entered allmulticast mode [ 691.155670][T14475] tipc: Resetting bearer [ 691.190987][T14474] tipc: Resetting bearer [ 691.272478][T14474] tipc: Disabling bearer [ 691.305504][T14481] netlink: 'syz.1.2104': attribute type 61 has an invalid length. [ 691.400993][T14481] netlink: 'syz.1.2104': attribute type 4 has an invalid length. [ 691.434841][ T5815] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 691.466483][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.505966][ T5815] usb 6-1: Product: syz [ 691.534023][ T5815] usb 6-1: Manufacturer: syz [ 691.550056][ T5815] usb 6-1: SerialNumber: syz [ 691.577396][ T5815] usb 6-1: config 0 descriptor?? [ 691.600242][T14483] syzkaller0: entered promiscuous mode [ 691.615042][T14483] syzkaller0: entered allmulticast mode [ 691.891948][ T5815] hub 6-1:0.0: bad descriptor, ignoring hub [ 691.939388][ T5815] hub 6-1:0.0: probe with driver hub failed with error -5 [ 692.201069][T14492] syzkaller0: entered promiscuous mode [ 692.224803][T14492] syzkaller0: entered allmulticast mode [ 692.607207][ T5815] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 692.658319][ T5815] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 692.681289][ T5815] dib0700: firmware download failed at 7 with -22 [ 692.723553][ T5815] usb 6-1: USB disconnect, device number 25 [ 692.835164][T14505] syzkaller0: entered promiscuous mode [ 692.871462][T14505] syzkaller0: entered allmulticast mode [ 693.313050][T14512] syzkaller0: entered promiscuous mode [ 693.319278][T14512] syzkaller0: entered allmulticast mode [ 693.683674][T14514] tipc: Enabled bearer , priority 0 [ 693.691780][T14514] syzkaller0: entered promiscuous mode [ 693.698342][T14514] syzkaller0: entered allmulticast mode [ 693.835536][T14515] tipc: Resetting bearer [ 693.849710][T14513] tipc: Resetting bearer [ 693.950045][T14519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.047722][T14513] tipc: Disabling bearer [ 694.237379][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2119'. [ 694.247575][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2118'. [ 694.293044][T14529] bridge0: entered promiscuous mode [ 694.314365][T14529] macvtap1: entered promiscuous mode [ 694.335291][T14529] macvtap1: entered allmulticast mode [ 694.348009][T14529] bridge0: entered allmulticast mode [ 694.384433][T14531] macvtap1: left promiscuous mode [ 694.394208][T14531] macvtap1: left allmulticast mode [ 694.412536][T14531] bridge0: left allmulticast mode [ 694.666991][T14542] fuse: Bad value for 'fd' [ 694.800851][T14544] netlink: 'syz.1.2122': attribute type 61 has an invalid length. [ 694.929604][T14544] netlink: 'syz.1.2122': attribute type 4 has an invalid length. [ 695.925374][T14552] TC_ACT_REPEAT abuse ? [ 696.356493][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2127'. [ 696.370648][ T29] audit: type=1400 audit(1776079856.470:1278): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.299817][T14573] fuse: Bad value for 'fd' [ 697.692218][ T5901] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 697.953233][ T5901] usb 6-1: config 127 has an invalid interface number: 84 but max is 0 [ 697.983380][ T5901] usb 6-1: config 127 has no interface number 0 [ 698.066059][ T5901] usb 6-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 698.107505][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.125566][ T5901] usb 6-1: Product: syz [ 698.143180][ T5901] usb 6-1: Manufacturer: syz [ 698.147838][ T5901] usb 6-1: SerialNumber: syz [ 698.463313][T14585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.613256][ T5901] gspca_main: spca501-2.14.0 probing 040a:0002 [ 698.989284][T14595] netlink: 'syz.1.2135': attribute type 61 has an invalid length. [ 699.062543][ T5901] gspca_spca501: reg write: error -71 [ 699.070121][ T5901] spca501 6-1:127.84: Reg write failed for 0x00,0x01,0x02 [ 699.140502][ T5901] spca501 6-1:127.84: probe with driver spca501 failed with error -22 [ 699.216747][ T5901] usb 6-1: USB disconnect, device number 26 [ 699.305540][T14597] netlink: 'syz.1.2135': attribute type 4 has an invalid length. [ 700.464497][T14608] netlink: 'syz.5.2138': attribute type 61 has an invalid length. [ 700.546437][T14609] syzkaller0: entered promiscuous mode [ 700.561884][T14609] syzkaller0: entered allmulticast mode [ 700.670856][T14613] netlink: 'syz.5.2138': attribute type 4 has an invalid length. [ 700.795367][T14615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.954517][T14621] netlink: 'syz.1.2141': attribute type 61 has an invalid length. [ 701.039230][T14623] fuse: Bad value for 'fd' [ 701.159611][T14625] netlink: 'syz.1.2141': attribute type 4 has an invalid length. [ 704.094430][T14650] syzkaller0: entered promiscuous mode [ 704.100058][T14650] syzkaller0: entered allmulticast mode [ 704.318625][T14652] tipc: Enabled bearer , priority 0 [ 704.361976][T14652] syzkaller0: entered promiscuous mode [ 704.381976][T14652] syzkaller0: entered allmulticast mode [ 704.441944][T14652] tipc: Resetting bearer [ 704.455808][T14651] tipc: Resetting bearer [ 704.480819][T14651] tipc: Disabling bearer [ 704.581970][ T5815] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 704.761994][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 704.771648][ T5815] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 704.781210][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.789755][ T5815] usb 6-1: Product: syz [ 704.794135][ T5815] usb 6-1: Manufacturer: syz [ 704.798897][ T5815] usb 6-1: SerialNumber: syz [ 704.807636][ T5815] usb 6-1: config 0 descriptor?? [ 704.844328][T14663] fuse: Bad value for 'fd' [ 705.038737][ T5815] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 705.271933][ T5901] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 705.453924][ T5901] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 705.474276][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.500383][ T5901] usb 3-1: Product: syz [ 705.512093][ T5901] usb 3-1: Manufacturer: syz [ 705.552872][ T5901] usb 3-1: SerialNumber: syz [ 705.578081][ T5901] usb 3-1: config 0 descriptor?? [ 705.623484][ T5901] hub 3-1:0.0: bad descriptor, ignoring hub [ 705.649096][ T5901] hub 3-1:0.0: probe with driver hub failed with error -5 [ 706.173250][ T5901] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 706.214165][ T5901] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 706.224196][ T5901] dib0700: firmware download failed at 7 with -22 [ 706.389864][T14674] netlink: 'syz.6.2154': attribute type 61 has an invalid length. [ 706.498442][ T5815] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 706.567113][ T5815] usb 6-1: USB disconnect, device number 27 [ 706.605455][T14674] netlink: 'syz.6.2154': attribute type 4 has an invalid length. [ 706.725979][T14683] netlink: 'syz.7.2156': attribute type 61 has an invalid length. [ 706.936410][T14685] netlink: 'syz.7.2156': attribute type 4 has an invalid length. [ 707.711939][ T5901] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 707.891915][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 707.913538][ T5901] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 707.958539][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.003969][ T5901] usb 6-1: config 0 descriptor?? [ 708.058239][ T5901] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 708.159807][ T5901] usb 6-1: Detected FT4232H [ 708.232311][ T797] usb 3-1: USB disconnect, device number 72 [ 708.371740][ T5901] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 708.428128][ T5901] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 708.483118][ T5901] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 708.517472][T14695] syzkaller0: entered promiscuous mode [ 708.549552][T14695] syzkaller0: entered allmulticast mode [ 708.577801][ T5901] usb 6-1: USB disconnect, device number 28 [ 708.663392][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 708.710159][ T5901] ftdi_sio 6-1:0.0: device disconnected [ 708.857320][T14700] syzkaller0: entered promiscuous mode [ 708.883640][T14700] syzkaller0: entered allmulticast mode [ 709.324646][T14711] syzkaller0: entered promiscuous mode [ 709.332254][ T5901] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 709.353626][T14711] syzkaller0: entered allmulticast mode [ 709.410051][T14713] tipc: Started in network mode [ 709.416834][T14713] tipc: Node identity e2c633152f61, cluster identity 4711 [ 709.425235][T14713] tipc: Enabled bearer , priority 0 [ 709.469768][T14713] syzkaller0: entered promiscuous mode [ 709.475427][T14713] syzkaller0: entered allmulticast mode [ 709.499179][T14713] tipc: Resetting bearer [ 709.503728][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 709.510573][T14712] tipc: Resetting bearer [ 709.519765][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.545172][T14712] tipc: Disabling bearer [ 709.570190][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.606105][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 709.663228][ T5901] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 709.695142][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.723407][ T5901] usb 3-1: config 0 descriptor?? [ 710.000071][T14721] syzkaller0: entered promiscuous mode [ 710.005717][T14721] syzkaller0: entered allmulticast mode [ 710.109551][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 710.138820][T14729] fuse: Bad value for 'fd' [ 710.145468][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 710.189075][T14730] netlink: 'syz.5.2172': attribute type 61 has an invalid length. [ 710.208256][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 710.241059][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 710.306788][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 710.331052][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 710.403783][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 710.433694][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 710.476285][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 710.508227][T14730] netlink: 'syz.5.2172': attribute type 4 has an invalid length. [ 710.519747][T14717] kvm: kvm [14715]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 710.878360][T14735] syzkaller0: entered promiscuous mode [ 710.922885][T14735] syzkaller0: entered allmulticast mode [ 711.440443][T14744] netlink: 'syz.1.2175': attribute type 61 has an invalid length. [ 711.527923][ T5901] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001C/input/input106 [ 711.624689][ T5901] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001C/input/input107 [ 711.727935][ T5901] kye 0003:0458:5011.001C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 711.816989][T14747] netlink: 'syz.1.2175': attribute type 4 has an invalid length. [ 711.980488][T14751] binder: 14750:14751 ioctl c0306201 200000000480 returned -14 [ 712.283484][T14754] syzkaller0: entered promiscuous mode [ 712.309959][T14754] syzkaller0: entered allmulticast mode [ 712.732233][ T5815] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 713.472070][ T5901] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 713.582685][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'. [ 713.800103][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 713.892526][ T5919] usb 3-1: USB disconnect, device number 73 [ 713.900144][ T5901] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 714.002307][ T5901] usb 6-1: can't read configurations, error -71 [ 714.652021][T14789] netlink: 'syz.2.2186': attribute type 61 has an invalid length. [ 714.815683][T14791] netlink: 'syz.2.2186': attribute type 4 has an invalid length. [ 715.051969][ T5901] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 715.223048][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 715.256501][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 715.283406][ T5901] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 715.296284][ T5901] usb 6-1: config 0 has no interface number 0 [ 715.324406][ T5901] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 715.335429][ T5901] usb 6-1: config 0 interface 88 has no altsetting 0 [ 715.381251][ T5901] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 715.405150][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 715.423128][ T5901] usb 6-1: Product: syz [ 715.427662][T14793] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 715.473014][ T5901] usb 6-1: Manufacturer: syz [ 715.478840][ T5901] usb 6-1: SerialNumber: syz [ 715.513063][ T5901] usb 6-1: config 0 descriptor?? [ 716.652698][ T5919] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 716.822169][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 716.845725][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 716.879223][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 716.915749][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 716.945993][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.991056][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 717.025141][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.278389][ T5919] usb 2-1: usb_control_msg returned -32 [ 717.307490][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 717.649822][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 717.734372][T14810] syzkaller0: entered promiscuous mode [ 717.759325][T14810] syzkaller0: entered allmulticast mode [ 717.911422][ T5901] usb 6-1: USB disconnect, device number 30 [ 718.017122][ T29] audit: type=1400 audit(1776079878.110:1279): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=14812 comm="syz.6.2193" [ 718.128855][T14817] fuse: Bad value for 'fd' [ 718.182149][T14819] syzkaller0: entered promiscuous mode [ 718.187973][T14819] syzkaller0: entered allmulticast mode [ 718.541933][ T5919] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 718.763154][ T5919] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 718.788842][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.842849][ T5919] usb 6-1: Product: syz [ 718.894114][ T5919] usb 6-1: Manufacturer: syz [ 718.904321][ T5919] usb 6-1: SerialNumber: syz [ 718.948659][ T5919] usb 6-1: config 0 descriptor?? [ 718.975529][ T5919] hub 6-1:0.0: bad descriptor, ignoring hub [ 719.012087][ T5919] hub 6-1:0.0: probe with driver hub failed with error -5 [ 719.228968][ T5919] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 719.260089][ T5919] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 719.283977][ T5919] dib0700: firmware download failed at 7 with -22 [ 719.358827][ T5919] usb 2-1: USB disconnect, device number 62 [ 719.491332][T14835] syzkaller0: entered promiscuous mode [ 719.499232][T14835] syzkaller0: entered allmulticast mode [ 719.739318][T14841] netlink: 'syz.7.2200': attribute type 61 has an invalid length. [ 719.890450][T14844] netlink: 'syz.7.2200': attribute type 4 has an invalid length. [ 720.089354][T14846] syzkaller0: entered promiscuous mode [ 720.095864][T14846] syzkaller0: entered allmulticast mode [ 721.212970][ T5815] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 721.404333][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 721.441323][ T5815] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 721.451594][ T5919] usb 6-1: USB disconnect, device number 31 [ 721.504991][ T5815] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.562732][ T5815] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 721.615456][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 721.646758][ T5815] usb 3-1: Product: syz [ 721.665904][ T5815] usb 3-1: Manufacturer: syz [ 721.684259][ T5815] usb 3-1: SerialNumber: syz [ 721.936760][ T5815] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 722.141247][ T5815] usb 3-1: USB disconnect, device number 74 [ 722.162850][ T5815] usblp0: removed [ 722.290092][ T5826] Bluetooth: hci4: unexpected subevent 0x18 length: 25 > 19 [ 722.297787][ T5826] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 722.519590][T14870] syzkaller0: entered promiscuous mode [ 722.540713][T14870] syzkaller0: entered allmulticast mode [ 723.682172][ T5815] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 724.063514][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 724.193961][ T5815] usb 2-1: unable to get BOS descriptor or descriptor too short [ 724.266645][ T5815] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 724.297391][ T5815] usb 2-1: config 0 has no interface number 0 [ 724.335668][ T5815] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 724.358545][ T5815] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 724.372939][ T5815] usb 2-1: config 0 interface 88 has no altsetting 0 [ 724.537531][T14889] netlink: 'syz.6.2215': attribute type 61 has an invalid length. [ 724.875084][T14889] netlink: 'syz.6.2215': attribute type 4 has an invalid length. [ 725.286325][ T5815] usb 2-1: string descriptor 0 read error: -22 [ 725.314873][ T5815] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 725.341099][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 725.371659][ T5815] usb 2-1: config 0 descriptor?? [ 725.514832][ T5815] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input108 [ 725.796434][T12106] udevd[12106]: Error opening device "/dev/input/event4": Input/output error [ 725.812727][T12106] udevd[12106]: Unable to EVIOCGABS device "/dev/input/event4" [ 725.832574][T12106] udevd[12106]: Unable to EVIOCGABS device "/dev/input/event4" [ 726.237868][T14910] syzkaller0: entered promiscuous mode [ 726.263426][T14910] syzkaller0: entered allmulticast mode [ 726.281564][T14912] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 726.334958][T14912] syzkaller0: entered promiscuous mode [ 726.342790][T14912] syzkaller0: entered allmulticast mode [ 726.444150][T14912] tipc: Enabled bearer , priority 0 [ 726.486911][T14916] tipc: Resetting bearer [ 726.574634][T14916] tipc: Disabling bearer [ 726.871940][ T5901] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 727.054731][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.102045][ T5901] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 727.154458][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.230058][ T5901] usb 6-1: config 0 descriptor?? [ 727.293055][ T5901] pwc: Askey VC010 type 2 USB webcam detected. [ 727.461117][T14920] [U] Vд3ИТFйО"SЧС/ЩЪ4:УXTZ“WЁT‘’LWЕЋ= [ 727.728733][ T5901] pwc: recv_control_msg error -32 req 02 val 2b00 [ 727.752202][T14914] [U] J"—E:РЦ" [ 727.758477][ T5901] pwc: recv_control_msg error -32 req 02 val 2700 [ 727.789599][ T5901] pwc: recv_control_msg error -32 req 02 val 2c00 [ 727.807947][ T797] usb 2-1: USB disconnect, device number 63 [ 727.834452][ T5901] pwc: recv_control_msg error -32 req 04 val 1000 [ 727.880792][ T5901] pwc: recv_control_msg error -32 req 04 val 1300 [ 727.901160][ T5901] pwc: recv_control_msg error -32 req 04 val 1400 [ 727.939885][ T5901] pwc: recv_control_msg error -32 req 02 val 2000 [ 727.973352][ T5901] pwc: recv_control_msg error -32 req 02 val 2100 [ 728.005794][ T5901] pwc: recv_control_msg error -32 req 04 val 1500 [ 728.042233][ T5901] pwc: recv_control_msg error -32 req 02 val 2500 [ 728.071009][ T5901] pwc: recv_control_msg error -32 req 02 val 2400 [ 728.091699][ T5901] pwc: recv_control_msg error -32 req 02 val 2600 [ 728.122763][ T5901] pwc: recv_control_msg error -32 req 02 val 2900 [ 728.151808][ T5901] pwc: recv_control_msg error -32 req 02 val 2800 [ 728.170510][ T5901] pwc: recv_control_msg error -32 req 04 val 1100 [ 728.205666][ T5901] pwc: Registered as video103. [ 728.227032][ T5901] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input109 [ 728.420164][ T5815] usb 6-1: USB disconnect, device number 32 [ 728.477610][T14935] syzkaller0: entered promiscuous mode [ 728.520781][T14935] syzkaller0: entered allmulticast mode [ 728.699589][T14938] syzkaller0: entered promiscuous mode [ 728.716045][T14938] syzkaller0: entered allmulticast mode [ 728.754842][T14938] tc action pedit offset 14680064 out of bounds [ 729.282952][ T797] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 729.451927][ T797] usb 6-1: Using ep0 maxpacket: 32 [ 729.453813][ T797] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 729.453842][ T797] usb 6-1: config 0 has no interface number 0 [ 729.457559][ T797] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 729.457581][ T797] usb 6-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 729.457594][ T797] usb 6-1: Product: syz [ 729.457605][ T797] usb 6-1: Manufacturer: syz [ 729.457615][ T797] usb 6-1: SerialNumber: syz [ 729.460863][ T797] usb 6-1: config 0 descriptor?? [ 729.488298][T14954] syzkaller0: entered promiscuous mode [ 729.488318][T14954] syzkaller0: entered allmulticast mode [ 729.505584][ T797] ftdi_sio 6-1:0.132: FTDI USB Serial Device converter detected [ 729.507160][ T797] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 729.634789][T14954] tipc: Enabled bearer , priority 0 [ 729.642330][T14952] tipc: Resetting bearer [ 729.682084][ T5831] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 729.699027][ T797] usb 6-1: USB disconnect, device number 33 [ 729.700336][T14952] tipc: Disabling bearer [ 729.700461][ T797] ftdi_sio 6-1:0.132: device disconnected [ 730.241325][T14957] syzkaller0: entered promiscuous mode [ 730.241353][T14957] syzkaller0: entered allmulticast mode [ 731.160306][T14964] syzkaller0: entered promiscuous mode [ 731.162910][ T5831] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 731.193723][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.211036][ T5831] usb 2-1: Product: syz [ 731.219768][ T5831] usb 2-1: Manufacturer: syz [ 731.228970][ T5831] usb 2-1: SerialNumber: syz [ 731.264308][ T5831] usb 2-1: config 0 descriptor?? [ 731.292504][T14964] syzkaller0: entered allmulticast mode [ 731.451590][T14979] fuse: Bad value for 'fd' [ 731.657199][ T5831] usb 2-1: USB disconnect, device number 64 [ 731.872462][ T797] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 732.073585][ T797] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 732.087503][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.107199][ T797] usb 3-1: Product: syz [ 732.128408][ T797] usb 3-1: Manufacturer: syz [ 732.136354][ T797] usb 3-1: SerialNumber: syz [ 732.169195][ T797] usb 3-1: config 0 descriptor?? [ 732.207077][ T797] hub 3-1:0.0: bad descriptor, ignoring hub [ 732.220521][ T797] hub 3-1:0.0: probe with driver hub failed with error -5 [ 732.418169][ T797] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 732.443753][ T797] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 732.468096][ T797] dib0700: firmware download failed at 7 with -22 [ 735.542430][ T797] usb 3-1: USB disconnect, device number 75 [ 735.572270][T15005] netlink: 'syz.1.2242': attribute type 61 has an invalid length. [ 735.863567][T15012] netlink: 'syz.1.2242': attribute type 4 has an invalid length. [ 737.824417][T15025] netlink: 'syz.2.2246': attribute type 1 has an invalid length. [ 737.980603][T15031] bond1: (slave gretap1): making interface the new active one [ 738.026696][T15031] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 738.045541][T15025] macvlan3: entered promiscuous mode [ 738.052609][T15025] macvlan3: entered allmulticast mode [ 738.088887][T15025] bond1: entered promiscuous mode [ 738.096595][T15025] gretap1: entered promiscuous mode [ 738.122441][T15025] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 738.146142][T15025] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 738.186212][T15025] bond1: left promiscuous mode [ 738.192695][T15025] gretap1: left promiscuous mode [ 738.240939][T15035] syzkaller0: entered promiscuous mode [ 738.252928][T15035] syzkaller0: entered allmulticast mode [ 739.242288][T15046] tipc: Enabled bearer , priority 0 [ 739.262878][T15046] syzkaller0: entered promiscuous mode [ 739.279149][T15046] syzkaller0: entered allmulticast mode [ 739.379705][T15046] tipc: Resetting bearer [ 739.399800][T15044] tipc: Resetting bearer [ 739.447002][T15044] tipc: Disabling bearer [ 739.528124][T15054] fuse: Unknown parameter '00000000000000000000' [ 740.140011][T15060] syzkaller0: entered promiscuous mode [ 740.151617][T15060] syzkaller0: entered allmulticast mode [ 740.903118][T15070] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 740.988276][T15055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.097955][T15076] netlink: 'syz.1.2258': attribute type 61 has an invalid length. [ 741.275255][T15079] gtp0: entered promiscuous mode [ 741.309885][T15079] gtp0: entered allmulticast mode [ 741.379053][T15084] netlink: 'syz.1.2258': attribute type 4 has an invalid length. [ 741.428426][T15079] syzkaller1: entered promiscuous mode [ 741.450019][T15079] syzkaller1: entered allmulticast mode [ 741.614424][T15086] random: crng reseeded on system resumption [ 741.719198][ T797] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 741.915227][ T797] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.932068][ T797] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 742.002649][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.050206][ T797] usb 6-1: config 0 descriptor?? [ 742.091568][ T797] dvb-usb: found a 'TeVii S662' in warm state. [ 742.116993][ T797] dw2102: su3000_power_ctrl: 1, initialized 0 [ 742.195524][ T797] dvb-usb: bulk message failed: -22 (2/0) [ 742.219720][ T29] audit: type=1326 audit(1776079902.310:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 742.270940][ T797] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 742.336610][ T29] audit: type=1326 audit(1776079902.310:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 742.362178][ T797] dvb-usb: TeVii S662 error while loading driver (-19) [ 742.436321][ T797] usb 6-1: USB disconnect, device number 34 [ 742.485470][ T29] audit: type=1326 audit(1776079902.400:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 742.513021][ T29] audit: type=1326 audit(1776079902.400:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 742.536615][ T29] audit: type=1326 audit(1776079902.400:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 742.687386][ T29] audit: type=1326 audit(1776079902.780:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 742.771917][ T29] audit: type=1326 audit(1776079902.860:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 742.855260][ T29] audit: type=1326 audit(1776079902.900:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 744.448467][T15114] input: syz0 as /devices/virtual/input/input110 [ 745.276629][T15125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.370196][T15152] tipc: Enabled bearer , priority 0 [ 747.406520][T15152] syzkaller0: entered promiscuous mode [ 747.422934][T15152] syzkaller0: entered allmulticast mode [ 747.503617][T15152] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2278'. [ 747.512939][ T797] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 747.537503][T15152] tipc: Resetting bearer [ 747.547897][T15151] tipc: Resetting bearer [ 747.595566][T15151] tipc: Disabling bearer [ 747.627387][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.634354][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.700181][ T797] usb 6-1: Using ep0 maxpacket: 32 [ 747.729102][ T797] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 747.761604][ T797] usb 6-1: config 1 has no interface number 0 [ 747.782880][ T797] usb 6-1: config 1 interface 236 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 747.823475][ T797] usb 6-1: config 1 interface 236 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 747.880695][ T797] usb 6-1: config 1 interface 236 altsetting 9 endpoint 0xE has invalid maxpacket 8621, setting to 1024 [ 747.946294][ T797] usb 6-1: config 1 interface 236 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 748.007070][ T797] usb 6-1: config 1 interface 236 has no altsetting 0 [ 748.157591][ T797] usb 6-1: New USB device found, idVendor=15b8, idProduct=6001, bcdDevice=96.95 [ 748.264405][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.352045][ T797] usb 6-1: Product: syz [ 748.402747][ T797] usb 6-1: Manufacturer: syz [ 748.454670][ T797] usb 6-1: SerialNumber: syz [ 748.912501][ T797] gspca_main: vc032x-2.14.0 probing 15b8:6001 [ 748.961466][ T797] gspca_vc032x: reg_r err -71 [ 748.978781][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.036178][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.081289][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.098044][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.128545][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.164814][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.186114][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.211137][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.221280][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.231436][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.241587][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.256089][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.266232][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.281895][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.287423][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.302186][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.312135][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.341936][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.347368][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 749.367865][ T797] gspca_vc032x: Unknown sensor... [ 749.378269][ T797] vc032x 6-1:1.236: probe with driver vc032x failed with error -22 [ 749.419517][ T797] usb 6-1: USB disconnect, device number 35 [ 749.565706][T15168] tipc: Enabled bearer , priority 0 [ 749.593536][T15168] syzkaller0: entered promiscuous mode [ 749.599161][T15168] syzkaller0: entered allmulticast mode [ 749.755938][T15169] tipc: Resetting bearer [ 749.778642][T15165] tipc: Resetting bearer [ 749.801677][T15165] tipc: Disabling bearer [ 749.822128][ T797] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 749.984437][T15173] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2285'. [ 749.993292][ T797] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 749.998511][T15173] syzkaller0: entered promiscuous mode [ 750.008998][T15173] syzkaller0: entered allmulticast mode [ 750.009050][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.028746][T15173] tc action pedit offset must be on 32 bit boundaries [ 750.042787][ T797] usb 6-1: Product: syz [ 750.053681][ T797] usb 6-1: Manufacturer: syz [ 750.058743][ T797] usb 6-1: SerialNumber: syz [ 750.086334][ T797] usb 6-1: config 0 descriptor?? [ 750.312008][ T797] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 750.323554][T15184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.742565][ T797] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 751.781155][ T797] usb 6-1: USB disconnect, device number 36 [ 752.384303][T15203] syzkaller0: entered promiscuous mode [ 752.402576][T15203] syzkaller0: entered allmulticast mode [ 752.581158][T15208] tipc: Enabled bearer , priority 0 [ 752.606086][T15205] syzkaller0: entered promiscuous mode [ 752.625613][T15205] syzkaller0: entered allmulticast mode [ 752.650866][T15203] tipc: Resetting bearer [ 752.758966][T15207] syzkaller0: entered promiscuous mode [ 752.771562][T15207] syzkaller0: entered allmulticast mode [ 752.895332][T15202] tipc: Resetting bearer [ 752.918728][T15202] tipc: Disabling bearer [ 753.007742][ T5831] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 753.044187][ T5831] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 755.772185][ T5831] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 755.934236][ T5831] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 755.944797][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.965835][ T5831] usb 6-1: config 0 descriptor?? [ 755.975960][ T5831] cp210x 6-1:0.0: cp210x converter detected [ 756.519715][T15241] netlink: 'syz.6.2301': attribute type 30 has an invalid length. [ 756.800212][ T200] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.809532][ T200] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.832324][ T200] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.864458][ T200] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.920386][T15249] syzkaller0: entered promiscuous mode [ 756.946332][T15249] syzkaller0: entered allmulticast mode [ 759.911005][ T5831] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 760.003847][ T5831] cp210x 6-1:0.0: querying part number failed [ 760.101268][ T5831] usb 6-1: cp210x converter now attached to ttyUSB0 [ 760.172674][ T5831] usb 6-1: USB disconnect, device number 37 [ 760.209875][ T5831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 760.243482][ T5831] cp210x 6-1:0.0: device disconnected [ 760.691999][ T5831] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 761.198205][ T5831] usb 6-1: unable to get BOS descriptor or descriptor too short [ 761.335181][ T5831] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 761.349871][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.361529][ T5831] usb 6-1: Product: syz [ 761.375790][ T5831] usb 6-1: Manufacturer: syz [ 761.382458][ T5831] usb 6-1: SerialNumber: syz [ 761.791307][T15288] syzkaller0: entered promiscuous mode [ 761.800388][T15288] syzkaller0: entered allmulticast mode [ 761.918641][T15253] syz.2.2304 (15253): drop_caches: 1 [ 763.075196][T15296] kvm_pr_unimpl_wrmsr: 4 callbacks suppressed [ 763.075221][T15296] kvm: kvm [15295]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffbe000068d0 [ 763.146809][T15296] kvm: kvm [15295]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffd900003200 [ 764.135573][T15309] syzkaller0: entered promiscuous mode [ 764.156409][T15309] syzkaller0: entered allmulticast mode [ 764.407453][ T5831] snd-usb-us122l 6-1:1.1: usb_set_interface error [ 764.472587][ T5831] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 764.572640][ T5831] usb 6-1: USB disconnect, device number 38 [ 764.905918][T15328] tipc: Enabled bearer , priority 0 [ 764.924790][T15328] syzkaller0: entered promiscuous mode [ 764.934338][T15328] syzkaller0: entered allmulticast mode [ 765.029002][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2321'. [ 765.088375][T15328] tipc: Resetting bearer [ 765.140898][T15326] tipc: Resetting bearer [ 765.240386][T15326] tipc: Disabling bearer [ 766.923869][T15356] input: syz1 as /devices/virtual/input/input111 [ 767.533009][T15362] kvm: kvm [15361]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffffffe70000c900 [ 767.584310][T15362] kvm: kvm [15361]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffbf00000000 [ 767.597608][T15362] kvm: kvm [15361]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xfff700001c00 [ 767.635658][T15378] netlink: 'syz.2.2330': attribute type 61 has an invalid length. [ 767.814667][T15379] netlink: 'syz.2.2330': attribute type 4 has an invalid length. [ 769.451931][ T5815] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 769.670487][T15348] block device autoloading is deprecated and will be removed. [ 769.681969][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 769.733548][ T5815] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 769.741944][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.753101][ T5815] usb 3-1: config 0 has no interface number 0 [ 769.759237][ T5815] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 769.769512][ T5815] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 769.779459][ T5815] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 769.792534][ T5815] usb 3-1: config 0 interface 196 has no altsetting 0 [ 769.803354][ T5815] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 769.812482][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.820727][ T5815] usb 3-1: Product: syz [ 769.835057][ T5815] usb 3-1: Manufacturer: syz [ 769.845151][ T5815] usb 3-1: SerialNumber: syz [ 769.870169][ T5815] usb 3-1: config 0 descriptor?? [ 770.144637][T15386] netlink: 'syz.2.2333': attribute type 3 has an invalid length. [ 770.172157][T15386] netlink: 'syz.2.2333': attribute type 3 has an invalid length. [ 770.204365][T15386] netlink: 'syz.2.2333': attribute type 3 has an invalid length. [ 770.227244][T15386] netlink: 'syz.2.2333': attribute type 3 has an invalid length. [ 770.244846][T15386] netlink: 'syz.2.2333': attribute type 3 has an invalid length. [ 770.253945][T15386] netlink: 'syz.2.2333': attribute type 3 has an invalid length. [ 770.271951][T15386] netlink: 'syz.2.2333': attribute type 3 has an invalid length. [ 770.286683][T15386] netlink: 'syz.2.2333': attribute type 3 has an invalid length. [ 770.413301][ T5815] ipheth 3-1:0.196: Unable to find endpoints [ 770.462092][ T5815] usb 3-1: USB disconnect, device number 76 [ 771.290993][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2338'. [ 773.306862][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'. [ 773.361199][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'. [ 773.399956][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 773.431751][T15444] validate_nla: 46 callbacks suppressed [ 773.431766][T15444] netlink: 'syz.2.2345': attribute type 4 has an invalid length. [ 773.500643][T15434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 773.546407][T15444] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2345'. [ 773.660422][T15440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 773.703423][T15443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.711789][T15443] bond2: (slave bond0): making interface the new active one [ 773.797140][T15443] bond2: (slave bond0): Enslaving as an active interface with an up link [ 773.848751][T15444] .`: renamed from bond0 (while UP) [ 774.040021][ T49] bond2: (slave .`): link status definitely down, disabling slave [ 774.092622][ T49] bond2: now running without any active interface! [ 774.787893][ T5826] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 774.791892][ T797] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 775.005920][ T797] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 775.031734][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.066969][ T797] usb 2-1: Product: syz [ 775.091411][ T797] usb 2-1: Manufacturer: syz [ 775.096558][ T797] usb 2-1: SerialNumber: syz [ 775.298813][T15467] syzkaller0: entered promiscuous mode [ 775.315457][T15467] syzkaller0: entered allmulticast mode [ 775.345190][ T797] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 775.385182][ T797] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 775.398156][ T797] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 775.420700][ T797] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 775.449879][ T797] usb 2-1: USB disconnect, device number 65 [ 776.021677][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 776.049817][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 776.945124][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 776.994595][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 777.052683][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 777.100241][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 777.167483][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 777.247115][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 777.299992][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 777.361167][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 777.442172][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 777.494408][T15493] kvm: kvm [15492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 777.525138][T15499] netlink: 'syz.1.2360': attribute type 6 has an invalid length. [ 777.534961][T15499] netlink: 'syz.1.2360': attribute type 7 has an invalid length. [ 777.546447][T15499] netlink: 'syz.1.2360': attribute type 8 has an invalid length. [ 778.213137][T15509] netlink: 'syz.2.2362': attribute type 61 has an invalid length. [ 778.383402][T15509] netlink: 'syz.2.2362': attribute type 4 has an invalid length. [ 778.507384][T15519] fuse: Bad value for 'fd' [ 779.432521][ T5815] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 779.591964][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 779.649977][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.691538][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.712905][ T5815] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 779.751534][ T5815] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 779.764684][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.824641][ T5815] usb 2-1: config 0 descriptor?? [ 780.780674][T15522] random: crng reseeded on system resumption [ 780.859265][ T5815] usbhid 2-1:0.0: can't add hid device: -71 [ 780.885961][ T5815] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 780.932364][ T5815] usb 2-1: USB disconnect, device number 66 [ 781.671940][ T797] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 781.841912][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 781.876841][ T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.931561][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.998860][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 782.055514][ T797] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 782.114696][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.197763][ T797] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 782.247357][ T797] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 782.304015][ T797] usb 3-1: Manufacturer: syz [ 782.354164][ T797] usb 3-1: config 0 descriptor?? [ 782.822992][ T797] rc_core: IR keymap rc-hauppauge not found [ 782.855723][ T797] Registered IR keymap rc-empty [ 782.884747][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 782.951987][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.001694][ T797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 783.021568][ T797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input112 [ 783.037941][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.166204][T15571] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 783.192177][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.222071][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.242132][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.262264][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.282011][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.302150][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.321972][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.354444][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.382560][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.402160][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 783.427367][ T797] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 8b [ 783.436666][ T797] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 783.453035][ T797] usb 3-1: USB disconnect, device number 77 [ 783.820048][T15577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.671030][T15600] netlink: 'syz.1.2377': attribute type 61 has an invalid length. [ 785.771770][T15601] netlink: 'syz.1.2377': attribute type 4 has an invalid length. [ 786.423185][T15609] fuse: Bad value for 'fd' [ 786.782067][ T5815] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 786.997779][ T5815] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 787.066725][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.122086][ T5815] usb 6-1: Product: syz [ 787.198444][ T5815] usb 6-1: Manufacturer: syz [ 787.227644][ T5815] usb 6-1: SerialNumber: syz [ 787.278784][ T5815] usb 6-1: config 0 descriptor?? [ 787.321354][ T5815] hub 6-1:0.0: bad descriptor, ignoring hub [ 787.333745][ T5815] hub 6-1:0.0: probe with driver hub failed with error -5 [ 787.543135][ T29] audit: type=1326 audit(1776079947.620:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 787.621905][ T29] audit: type=1326 audit(1776079947.620:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 787.708177][ T29] audit: type=1326 audit(1776079947.620:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 787.826031][ T29] audit: type=1326 audit(1776079947.630:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 787.902069][ T5815] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 787.933511][ T29] audit: type=1326 audit(1776079947.630:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 788.037520][ T29] audit: type=1326 audit(1776079947.630:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 788.140507][ T29] audit: type=1326 audit(1776079947.630:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 788.242569][ T5815] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 788.252344][ T29] audit: type=1326 audit(1776079947.630:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 788.314529][ T29] audit: type=1326 audit(1776079947.670:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 788.371932][ T29] audit: type=1326 audit(1776079947.670:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15619 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d319c819 code=0x7ffc0000 [ 788.412706][ T5815] dib0700: firmware download failed at 7 with -22 [ 789.781990][ T797] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 789.899827][T15641] kAFS: unable to lookup cell 'џ' [ 789.911368][T15641] kAFS: unable to lookup cell '(,cОЬ' [ 789.924399][T15642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 789.939177][ T797] usb 3-1: Using ep0 maxpacket: 32 [ 789.957328][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.980293][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.002338][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 790.025807][ T797] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 790.041974][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.062962][ T797] usb 3-1: config 0 descriptor?? [ 790.509240][ T797] hid (null): report_id 0 is invalid [ 790.541532][ T797] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001E/input/input113 [ 790.562716][ T5815] usb 6-1: USB disconnect, device number 39 [ 790.676982][ T797] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001E/input/input114 [ 790.735668][T15634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2384'. [ 790.842065][ T797] kye 0003:0458:5011.001E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 791.190825][T15658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.227389][T15658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.741937][ T797] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 791.906254][ T797] usb 3-1: device descriptor read/64, error -32 [ 792.182510][ T797] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 792.305893][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2389'. [ 792.322155][ T797] usb 3-1: device descriptor read/64, error -32 [ 792.547176][T15676] netlink: 'syz.7.2391': attribute type 61 has an invalid length. [ 792.739547][T15683] openvswitch: netlink: Multiple metadata blocks provided [ 792.764424][T15676] netlink: 'syz.7.2391': attribute type 4 has an invalid length. [ 792.776939][T15685] netlink: 'syz.5.2394': attribute type 61 has an invalid length. [ 792.904390][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2393'. [ 792.998702][T15687] netlink: 'syz.5.2394': attribute type 4 has an invalid length. [ 793.244419][ T24] usb 3-1: USB disconnect, device number 78 [ 794.267628][T15695] kvm: pic: single mode not supported [ 794.267656][T15695] kvm: pic: level sensitive irq not supported [ 794.278670][T15695] kvm: pic: single mode not supported [ 794.284955][T15695] kvm: pic: level sensitive irq not supported [ 794.299166][T15695] kvm: pic: single mode not supported [ 794.318551][T15695] kvm: pic: single mode not supported [ 794.324138][T15695] kvm: pic: level sensitive irq not supported [ 794.331518][T15695] kvm: pic: level sensitive irq not supported [ 794.340642][T15695] kvm: pic: level sensitive irq not supported [ 794.353773][T15695] kvm: pic: level sensitive irq not supported [ 794.362012][T15695] kvm: pic: level sensitive irq not supported [ 794.374434][T15695] kvm: pic: single mode not supported [ 794.380608][T15695] kvm: pic: level sensitive irq not supported [ 794.391149][T15695] kvm: pic: single mode not supported [ 794.400952][T15695] kvm: pic: level sensitive irq not supported [ 794.410773][T15695] kvm: pic: single mode not supported [ 794.417099][T15695] kvm: pic: level sensitive irq not supported [ 794.437088][T15695] kvm: pic: single mode not supported [ 794.444473][T15695] kvm: pic: single mode not supported [ 794.457903][T15695] kvm: pic: single mode not supported [ 795.908533][T15712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.135076][T15715] syzkaller0: entered promiscuous mode [ 796.140880][T15715] syzkaller0: entered allmulticast mode [ 797.423716][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 797.423736][ T29] audit: type=1326 audit(1776079957.520:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.2403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x0 [ 797.716331][ T29] audit: type=1326 audit(1776079957.810:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15724 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d979c819 code=0x7ffc0000 [ 797.884980][ T29] audit: type=1326 audit(1776079957.840:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15724 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d979c819 code=0x7ffc0000 [ 797.910121][T15738] netlink: 'syz.1.2407': attribute type 61 has an invalid length. [ 797.918749][ T29] audit: type=1326 audit(1776079957.840:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15724 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f82d979c819 code=0x7ffc0000 [ 798.013646][ T29] audit: type=1326 audit(1776079957.840:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15724 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d979c819 code=0x7ffc0000 [ 798.051475][ T29] audit: type=1326 audit(1776079957.840:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15724 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d979c819 code=0x7ffc0000 [ 798.116393][ T29] audit: type=1326 audit(1776079957.840:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15724 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f82d979c819 code=0x7ffc0000 [ 798.146569][ T29] audit: type=1326 audit(1776079957.840:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15724 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d979c819 code=0x7ffc0000 [ 798.170853][ T29] audit: type=1326 audit(1776079957.850:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15724 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d979c819 code=0x7ffc0000 [ 798.258087][ T29] audit: type=1326 audit(1776079957.850:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15724 comm="syz.5.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f82d979c819 code=0x7ffc0000 [ 798.301503][T15741] netlink: 'syz.1.2407': attribute type 4 has an invalid length. [ 800.016685][T15755] vivid-000: disconnect [ 800.027666][T15756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2410'. [ 800.660399][T15754] vivid-000: reconnect [ 800.705511][T15761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.869166][T15734] Set syz1 is full, maxelem 65536 reached [ 802.241981][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 802.406107][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 802.425677][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.435839][ T24] usb 3-1: Product: syz [ 802.456078][ T24] usb 3-1: Manufacturer: syz [ 802.531002][ T24] usb 3-1: SerialNumber: syz [ 802.994944][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 803.037603][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 804.286514][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 804.751403][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 804.820451][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 804.865210][T15808] netlink: 'syz.5.2421': attribute type 61 has an invalid length. [ 804.945056][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 805.035426][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 805.100605][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 805.126798][T15813] netlink: 'syz.5.2421': attribute type 4 has an invalid length. [ 805.175175][ T24] usb 3-1: USB disconnect, device number 79 [ 805.670714][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 805.670736][ T29] audit: type=1326 audit(1776079965.760:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 805.791534][ T29] audit: type=1326 audit(1776079965.800:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 806.090066][ T29] audit: type=1326 audit(1776079965.800:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 806.146780][ T29] audit: type=1326 audit(1776079965.800:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 806.185974][T15824] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2424'. [ 806.195197][ T29] audit: type=1326 audit(1776079965.800:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 806.253643][ T29] audit: type=1326 audit(1776079965.810:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 806.308873][ T29] audit: type=1326 audit(1776079965.810:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 806.372973][ T29] audit: type=1326 audit(1776079965.820:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 806.431926][ T29] audit: type=1326 audit(1776079965.820:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 806.513339][ T29] audit: type=1326 audit(1776079965.820:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3aad9c819 code=0x7ffc0000 [ 808.122161][ T5831] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 808.302836][ T5831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 808.340501][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 808.407145][ T5831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 808.469008][ T5831] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 808.473592][T15858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.513182][T15858] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.540602][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.581428][ T5831] usb 3-1: Product: syz [ 808.586311][T15858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 808.607096][ T5831] usb 3-1: Manufacturer: syz [ 808.648268][ T5831] usb 3-1: SerialNumber: syz [ 808.667557][ T5831] usb 3-1: config 0 descriptor?? [ 808.684193][T15849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 808.713995][T15849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 808.769598][ T5831] usb 3-1: ucan: probing device on interface #0 [ 809.066686][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.073416][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.170905][ T5831] usb 3-1: ucan: device reported invalid device info [ 809.202907][ T5831] usb 3-1: ucan: probe failed; try to update the device firmware [ 810.338592][T15867] netlink: 'syz.6.2433': attribute type 1 has an invalid length. [ 810.844414][ T24] usb 3-1: USB disconnect, device number 80 [ 811.339083][T15876] syzkaller0: entered promiscuous mode [ 811.351988][T15876] syzkaller0: entered allmulticast mode [ 811.864725][T15886] netlink: 'syz.1.2438': attribute type 61 has an invalid length. [ 812.104780][T15887] netlink: 'syz.1.2438': attribute type 4 has an invalid length. [ 813.305516][T15891] dlm: non-version read from control device 0 [ 814.544120][T15902] syzkaller0: entered promiscuous mode [ 814.549695][T15902] syzkaller0: entered allmulticast mode [ 815.175352][ T5831] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 815.335147][ T5831] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.354584][ T5831] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 815.374174][ T5831] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 815.398270][ T5831] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 815.422209][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.450927][T15905] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 815.468157][ T5831] hub 6-1:1.0: bad descriptor, ignoring hub [ 815.484611][ T5831] hub 6-1:1.0: probe with driver hub failed with error -5 [ 815.499690][ T5831] cdc_wdm 6-1:1.0: skipping garbage [ 815.513148][ T5831] cdc_wdm 6-1:1.0: skipping garbage [ 815.537245][ T5831] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 815.549028][ T5831] cdc_wdm 6-1:1.0: Unknown control protocol [ 815.874814][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 815.881473][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 815.887833][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 815.894521][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 815.985026][T15919] fuse: Bad value for 'fd' [ 816.425661][T15923] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 816.440588][T15922] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2448'. [ 816.635397][ T5831] usb 6-1: USB disconnect, device number 40 [ 816.801924][ T5831] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 816.953146][T15928] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 816.973598][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 817.328372][ T5831] usb 6-1: config 0 has no interfaces? [ 817.413691][ T5831] usb 6-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 817.426943][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.472531][ T5831] usb 6-1: config 0 descriptor?? [ 817.811896][ T5831] usb 6-1: USB disconnect, device number 41 [ 821.364987][T15966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 821.375865][T15966] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 821.396943][T15966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 821.409112][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2461'. [ 821.418637][T15966] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 821.448083][T15966] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 821.473865][T15966] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 821.498975][T15966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 821.515936][T15966] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 821.892282][ T5831] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 821.945295][T15987] fuse: Bad value for 'fd' [ 822.052089][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 822.095047][ T5831] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 822.123931][ T5831] usb 6-1: config 0 has no interface number 0 [ 822.130185][ T5831] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 822.187696][ T5831] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 822.219182][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.257174][ T5831] usb 6-1: Product: syz [ 822.272082][ T797] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 822.284736][ T5831] usb 6-1: Manufacturer: syz [ 822.289367][ T5831] usb 6-1: SerialNumber: syz [ 822.354075][ T5831] usb 6-1: config 0 descriptor?? [ 822.374585][ T5831] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 822.424394][ T5831] em28xx 6-1:0.132: Video interface 132 found: [ 822.491692][ T797] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 822.517547][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.534767][ T797] usb 2-1: Product: syz [ 822.547780][ T797] usb 2-1: Manufacturer: syz [ 822.560650][ T797] usb 2-1: SerialNumber: syz [ 822.592326][ T797] usb 2-1: config 0 descriptor?? [ 822.614689][ T797] hub 2-1:0.0: bad descriptor, ignoring hub [ 822.629711][ T797] hub 2-1:0.0: probe with driver hub failed with error -5 [ 822.840316][ T5831] em28xx 6-1:0.132: chip ID is em2874 [ 822.889823][ T797] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 822.956293][ T797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.010230][ T797] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 823.048370][ T797] usb 2-1: media controller created [ 823.150882][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.383641][ T797] DVB: Unable to find symbol dib7000p_attach() [ 823.417180][ T797] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 823.465341][ T5831] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 823.530865][T16003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.550582][ T5831] em28xx 6-1:0.132: board has no eeprom [ 823.641892][ T5831] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 823.681297][ T5831] em28xx 6-1:0.132: analog set to bulk mode. [ 823.709365][ T5815] em28xx 6-1:0.132: Registering V4L2 extension [ 823.765895][ T797] rc_core: IR keymap rc-dib0700-rc5 not found [ 823.804055][ T797] Registered IR keymap rc-empty [ 823.869267][ T797] dvb-usb: could not initialize remote control. [ 823.933369][ T797] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 823.980856][ T5831] usb 6-1: USB disconnect, device number 42 [ 823.993547][ T5815] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 824.016546][ T5831] em28xx 6-1:0.132: Disconnecting em28xx [ 824.566787][ T5815] usb 6-1: Decoder not found [ 824.586140][ T5815] em28xx 6-1:0.132: failed to create media graph [ 824.596738][ T5815] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 824.649493][ T5815] em28xx 6-1:0.132: Remote control support is not available for this card. [ 824.689811][ T5831] em28xx 6-1:0.132: Closing input extension [ 824.746806][ T5831] em28xx 6-1:0.132: Freeing device [ 824.952885][T16040] netlink: 'syz.5.2470': attribute type 61 has an invalid length. [ 825.344891][T16047] netlink: 'syz.5.2470': attribute type 4 has an invalid length. [ 825.930354][ T5831] usb 2-1: USB disconnect, device number 67 [ 826.061503][ T5831] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 827.190997][T16072] IPVS: length: 4096 != 24 [ 827.550440][ T5815] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 827.714029][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 827.723542][ T5815] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 827.765823][ T5815] usb 6-1: config 0 has no interface number 0 [ 827.811437][ T5815] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.882207][ T5815] usb 6-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 827.946603][ T5815] usb 6-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 827.991982][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.078231][ T5815] usb 6-1: config 0 descriptor?? [ 828.312520][T16082] netlink: 'syz.1.2476': attribute type 61 has an invalid length. [ 828.520944][T16086] netlink: 'syz.1.2476': attribute type 4 has an invalid length. [ 828.536447][ T5815] logitech-djreceiver 0003:046D:C537.001F: unknown main item tag 0x0 [ 828.553611][ T5815] logitech-djreceiver 0003:046D:C537.001F: unknown main item tag 0x0 [ 828.580947][ T5815] logitech-djreceiver 0003:046D:C537.001F: unknown main item tag 0x0 [ 828.638463][ T5815] logitech-djreceiver 0003:046D:C537.001F: unknown main item tag 0x0 [ 828.650883][ T5815] logitech-djreceiver 0003:046D:C537.001F: unknown main item tag 0x0 [ 828.669176][ T5815] logitech-djreceiver 0003:046D:C537.001F: unknown main item tag 0x0 [ 828.686236][ T5815] logitech-djreceiver 0003:046D:C537.001F: unknown main item tag 0x0 [ 828.715289][ T5815] logitech-djreceiver 0003:046D:C537.001F: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.5-1/input4 [ 828.741447][T16085] tipc: Failed to remove unknown binding: 66,1,1/0:1342383987/1342383989 [ 828.852865][ T5815] usb 6-1: USB disconnect, device number 43 [ 828.924974][T16090] fido_id[16090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 828.940190][T16094] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2478'. [ 829.018200][T16094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.064753][ T797] IPVS: starting estimator thread 0... [ 829.082968][T16094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.152001][T16097] IPVS: using max 32 ests per chain, 76800 per kthread [ 829.162889][T16094] bond0 (unregistering): Released all slaves [ 831.991873][T16128] netlink: 'syz.2.2485': attribute type 61 has an invalid length. [ 832.167023][T16131] netlink: 'syz.2.2485': attribute type 4 has an invalid length. [ 833.626328][T16137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.673975][ T5815] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 837.856947][ T5815] usb 3-1: config 0 has no interfaces? [ 837.864928][ T5815] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 837.882794][ T5815] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 837.900898][ T5815] usb 3-1: Manufacturer: syz [ 837.937398][ T5815] usb 3-1: config 0 descriptor?? [ 839.016529][T16203] netlink: 'syz.7.2501': attribute type 61 has an invalid length. [ 839.272527][T16204] netlink: 'syz.7.2501': attribute type 4 has an invalid length. [ 841.063835][ T24] usb 3-1: USB disconnect, device number 81 [ 841.519716][T16222] xt_TCPMSS: Only works on TCP SYN packets [ 841.674653][T16223] sit1: entered allmulticast mode [ 842.305792][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 842.305807][ T29] audit: type=1326 audit(1776080002.400:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16225 comm="syz.1.2507" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7d319c819 code=0x0 [ 843.349687][T16241] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 843.541750][T16240] netlink: 'syz.1.2509': attribute type 10 has an invalid length. [ 843.886739][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 844.083241][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 844.122033][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 844.210700][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 844.263936][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.303909][T16242] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 844.338636][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 844.557500][T16240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.602981][T16240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.760263][ T29] audit: type=1800 audit(1776080005.850:1363): pid=16263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2513" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 846.174303][T16275] netlink: 'syz.5.2516': attribute type 61 has an invalid length. [ 846.392627][T16275] netlink: 'syz.5.2516': attribute type 4 has an invalid length. [ 846.536264][T16283] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2517'. [ 846.945551][ T797] usb 2-1: USB disconnect, device number 68 [ 847.079123][T16281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 847.225853][T16281] bond0: (slave bond1): Enslaving as an active interface with an up link [ 847.349724][T16291] netlink: 'syz.1.2519': attribute type 4 has an invalid length. [ 847.374378][T16283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.406338][T16283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.436914][T16283] bond0 (unregistering): (slave bond1): Releasing backup interface [ 847.480697][T16283] bond0 (unregistering): Released all slaves [ 850.157068][T16318] netlink: 'syz.6.2524': attribute type 1 has an invalid length. [ 850.260282][T16318] bond0: entered promiscuous mode [ 850.311349][T16318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.563956][T16317] bond0: (slave bridge2): making interface the new active one [ 850.571494][T16317] bridge2: entered promiscuous mode [ 850.590161][T16317] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 850.992696][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 851.345171][T16331] trusted_key: encrypted_key: insufficient parameters specified [ 851.817053][T16339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.253294][T16336] syz.2.2528 (16336): drop_caches: 2 [ 853.298100][T16333] syz.2.2528 (16333): drop_caches: 2 [ 853.737816][T16347] netlink: 'syz.2.2531': attribute type 61 has an invalid length. [ 853.867410][T16351] netlink: 'syz.2.2531': attribute type 4 has an invalid length. [ 854.990476][T16365] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2534'. [ 855.591873][ T5815] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 855.756035][ T5815] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 855.817888][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.847438][T16373] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 855.881353][ T5815] usb 3-1: Product: syz [ 855.910138][ T5815] usb 3-1: Manufacturer: syz [ 855.938654][ T5815] usb 3-1: SerialNumber: syz [ 855.977539][ T5815] usb 3-1: config 0 descriptor?? [ 856.105435][T16378] fuse: Bad value for 'fd' [ 856.235691][ T5815] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 856.402018][ T5831] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 856.461902][ T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 856.585380][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 856.616763][ T5831] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 856.635089][ T5831] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 856.646490][ T5831] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 856.656376][ T5831] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 856.699695][ T24] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 856.710223][ T5831] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.723982][ T5831] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 856.725484][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.741066][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.755642][ T24] usb 6-1: Product: syz [ 856.767591][ T24] usb 6-1: Manufacturer: syz [ 856.779198][ T24] usb 6-1: SerialNumber: syz [ 856.807085][ T24] usb 6-1: config 0 descriptor?? [ 856.844879][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 856.866944][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 856.987776][ T5831] usb 2-1: usb_control_msg returned -32 [ 857.007236][ T5831] usbtmc 2-1:16.0: can't read capabilities [ 857.078996][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 857.141124][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 857.192543][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 857.207286][ T24] usb 6-1: media controller created [ 857.261145][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.296438][ T5919] usb 2-1: USB disconnect, device number 69 [ 857.303356][T16379] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 857.332791][T16394] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 857.394637][T16395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.565975][ T24] DVB: Unable to find symbol dib7000p_attach() [ 857.581535][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 857.802968][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 857.811595][ T24] Registered IR keymap rc-empty [ 857.840308][ T24] dvb-usb: could not initialize remote control. [ 857.847212][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 858.629240][T16399] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2542'. [ 858.784550][ T5815] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 858.798557][ T5815] usb 3-1: USB disconnect, device number 82 [ 859.131168][T16409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.503586][T16412] netlink: 'syz.2.2546': attribute type 10 has an invalid length. [ 859.537678][T16412] bond2: option mode: unable to set because the bond device has slaves [ 859.589486][T16415] netlink: 'syz.7.2545': attribute type 61 has an invalid length. [ 859.795814][T16419] netlink: 'syz.7.2545': attribute type 4 has an invalid length. [ 860.313793][T16424] kernel read not supported for file / œ7ГЯќУЂW)ыs“ЇЧ!QіьЅfsѕl{T‡rв)rЇжOš˜ѕ2:"єРT+ЭŸv|еВDvcŽ“иж Х6вxуc: (pid: 16424 comm: syz.2.2548) [ 860.382403][ T29] audit: type=1800 audit(1776080020.470:1364): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2548" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=64339 res=0 errno=0 [ 861.399530][T16439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2551'. [ 861.471506][T16439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2551'. [ 861.525841][ T24] usb 6-1: USB disconnect, device number 44 [ 861.581010][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 861.679166][T16439] bridge0: entered promiscuous mode [ 861.694384][T16439] ip6gretap0: entered promiscuous mode [ 861.774355][ T24] [ 861.776715][ T24] ============================================ [ 861.782976][ T24] WARNING: possible recursive locking detected [ 861.789132][ T24] syzkaller #0 Tainted: G L [ 861.795101][ T24] -------------------------------------------- [ 861.801249][ T24] kworker/1:0/24 is trying to acquire lock: [ 861.807249][ T24] ffff888035170fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 861.816309][ T24] [ 861.816309][ T24] but task is already holding lock: [ 861.823688][ T24] ffff8880692e0fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 861.832969][ T24] [ 861.832969][ T24] other info that might help us debug this: [ 861.841049][ T24] Possible unsafe locking scenario: [ 861.841049][ T24] [ 861.848528][ T24] CPU0 [ 861.851823][ T24] ---- [ 861.855125][ T24] lock(&hsr->seqnr_lock); [ 861.859654][ T24] lock(&hsr->seqnr_lock); [ 861.864182][ T24] [ 861.864182][ T24] *** DEADLOCK *** [ 861.864182][ T24] [ 861.872337][ T24] May be due to missing lock nesting notation [ 861.872337][ T24] [ 861.880761][ T24] 13 locks held by kworker/1:0/24: [ 861.885899][ T24] #0: ffff8880321b9548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 861.896660][ T24] #1: ffffc900001e7c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 861.910021][ T24] #2: ffff888031db7538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 861.919290][ T24] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 861.928563][ T24] #4: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 861.937749][ T24] #5: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 861.947803][ T24] #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 861.957068][ T24] #7: ffff8880692e0fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 861.966595][ T24] #8: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 861.976123][ T24] #9: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 861.986175][ T24] #10: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 861.995626][ T24] #11: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 862.005687][ T24] #12: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 862.014973][ T24] [ 862.014973][ T24] stack backtrace: [ 862.021011][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.021051][ T24] Tainted: [L]=SOFTLOCKUP [ 862.021060][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 862.021075][ T24] Workqueue: mld mld_ifc_work [ 862.021101][ T24] Call Trace: [ 862.021110][ T24] [ 862.021119][ T24] dump_stack_lvl+0xe8/0x150 [ 862.021147][ T24] print_deadlock_bug+0x279/0x290 [ 862.021178][ T24] __lock_acquire+0x253f/0x2cf0 [ 862.021207][ T24] ? skb_network_protocol+0x23d/0x3f0 [ 862.021236][ T24] ? netif_skb_features+0xdf0/0x1480 [ 862.021271][ T24] lock_acquire+0xf0/0x2e0 [ 862.021295][ T24] ? hsr_dev_xmit+0x237/0x360 [ 862.021316][ T24] ? __pfx_netif_skb_features+0x10/0x10 [ 862.021343][ T24] ? hsr_dev_xmit+0x237/0x360 [ 862.021361][ T24] _raw_spin_lock_bh+0x36/0x50 [ 862.021384][ T24] ? hsr_dev_xmit+0x237/0x360 [ 862.021402][ T24] hsr_dev_xmit+0x237/0x360 [ 862.021419][ T24] ? hsr_dev_xmit+0x2d/0x360 [ 862.021438][ T24] dev_hard_start_xmit+0x2d8/0x870 [ 862.021471][ T24] __dev_queue_xmit+0x16d1/0x3890 [ 862.021500][ T24] ? __dev_queue_xmit+0x277/0x3890 [ 862.021527][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 862.021553][ T24] ? ebt_do_table+0x2665/0x2830 [ 862.021573][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 862.021600][ T24] ? ebt_do_table+0x2665/0x2830 [ 862.021631][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 862.021667][ T24] ? br_nf_post_routing+0x219/0xfe0 [ 862.021701][ T24] br_dev_queue_push_xmit+0x370/0x4a0 [ 862.021738][ T24] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 862.021765][ T24] NF_HOOK+0x360/0x3f0 [ 862.021789][ T24] ? NF_HOOK+0xa2/0x3f0 [ 862.021811][ T24] ? __pfx_NF_HOOK+0x10/0x10 [ 862.021834][ T24] ? ret_from_fork+0x51e/0xb90 [ 862.021858][ T24] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 862.021887][ T24] br_forward_finish+0xd3/0x130 [ 862.021914][ T24] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 862.021942][ T24] ? __pfx_br_forward_finish+0x10/0x10 [ 862.021969][ T24] NF_HOOK+0x360/0x3f0 [ 862.021998][ T24] ? NF_HOOK+0xa2/0x3f0 [ 862.022023][ T24] ? __pfx_NF_HOOK+0x10/0x10 [ 862.022051][ T24] ? __pfx_br_forward_finish+0x10/0x10 [ 862.022078][ T24] ? __skb_clone+0x483/0x7a0 [ 862.022110][ T24] ? br_handle_vlan+0x61/0x530 [ 862.022135][ T24] __br_forward+0x397/0x540 [ 862.022161][ T24] ? __pfx_br_forward_finish+0x10/0x10 [ 862.022190][ T24] br_flood+0x6ee/0xb80 [ 862.022222][ T24] ? br_dev_xmit+0x193/0x1980 [ 862.022244][ T24] br_dev_xmit+0x12bd/0x1980 [ 862.022266][ T24] ? br_dev_xmit+0x193/0x1980 [ 862.022288][ T24] ? __pfx_br_dev_xmit+0x10/0x10 [ 862.022312][ T24] ? dev_queue_xmit_nit+0x3d0/0xad0 [ 862.022340][ T24] dev_hard_start_xmit+0x2d8/0x870 [ 862.022372][ T24] __dev_queue_xmit+0x16d1/0x3890 [ 862.022403][ T24] ? __dev_queue_xmit+0x277/0x3890 [ 862.022432][ T24] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 862.022458][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 862.022483][ T24] ? __asan_memcpy+0x40/0x70 [ 862.022503][ T24] ? __pskb_copy_fclone+0x9c8/0xff0 [ 862.022529][ T24] ? __asan_memcpy+0x40/0x70 [ 862.022548][ T24] ? __pskb_copy_fclone+0x9c8/0xff0 [ 862.022577][ T24] ? hsr_create_tagged_frame+0x500/0xe10 [ 862.022601][ T24] ? __asan_memmove+0x40/0x70 [ 862.022627][ T24] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 862.022649][ T24] ? hsr_addr_subst_dest+0x30d/0xa90 [ 862.022683][ T24] hsr_forward_skb+0x157b/0x2860 [ 862.022706][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 862.022746][ T24] ? hsr_forward_skb+0xb3/0x2860 [ 862.022770][ T24] ? __pfx_hsr_forward_skb+0x10/0x10 [ 862.022792][ T24] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.022813][ T24] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 862.022837][ T24] ? hsr_dev_xmit+0x237/0x360 [ 862.022856][ T24] hsr_dev_xmit+0x242/0x360 [ 862.022875][ T24] ? hsr_dev_xmit+0x2d/0x360 [ 862.022894][ T24] dev_hard_start_xmit+0x2d8/0x870 [ 862.022926][ T24] __dev_queue_xmit+0x16d1/0x3890 [ 862.022956][ T24] ? __dev_queue_xmit+0x277/0x3890 [ 862.022984][ T24] ? ___neigh_create+0x1c5f/0x2280 [ 862.023004][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 862.023031][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 862.023058][ T24] ? neigh_connected_output+0x1ea/0x460 [ 862.023080][ T24] ? eth_header+0x11b/0x200 [ 862.023105][ T24] ? __asan_memcpy+0x40/0x70 [ 862.023125][ T24] ? eth_header+0x11b/0x200 [ 862.023147][ T24] ? __pfx_eth_header+0x10/0x10 [ 862.023170][ T24] ? neigh_connected_output+0x3b6/0x460 [ 862.023196][ T24] ? ip6_output+0x126/0x550 [ 862.023218][ T24] ip6_output+0x340/0x550 [ 862.023240][ T24] ? __pfx_ip6_output+0x10/0x10 [ 862.023261][ T24] NF_HOOK+0x177/0x4f0 [ 862.023284][ T24] ? __pfx_NF_HOOK+0x10/0x10 [ 862.023307][ T24] ? __pfx_dst_output+0x10/0x10 [ 862.023330][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 862.023356][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 862.023381][ T24] ? icmp6_dst_alloc+0x3a6/0x440 [ 862.023406][ T24] mld_sendpack+0x8b4/0xe40 [ 862.023429][ T24] ? look_up_lock_class+0x57/0x110 [ 862.023460][ T24] ? mld_sendpack+0x213/0xe40 [ 862.023481][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 862.023512][ T24] mld_ifc_work+0x835/0xe70 [ 862.023536][ T24] ? process_scheduled_works+0xa8d/0x18c0 [ 862.023562][ T24] process_scheduled_works+0xb6e/0x18c0 [ 862.023598][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 862.023626][ T24] ? assign_work+0x3d5/0x5e0 [ 862.023653][ T24] worker_thread+0xa53/0xfc0 [ 862.023689][ T24] kthread+0x388/0x470 [ 862.023709][ T24] ? __pfx_worker_thread+0x10/0x10 [ 862.023743][ T24] ? __pfx_kthread+0x10/0x10 [ 862.023762][ T24] ret_from_fork+0x51e/0xb90 [ 862.023788][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 862.023830][ T24] ? __switch_to+0xc7d/0x1450 [ 862.023854][ T24] ? __pfx_kthread+0x10/0x10 [ 862.023874][ T24] ret_from_fork_asm+0x1a/0x30 [ 862.023909][ T24] [ 862.856281][T16445] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 863.101855][ T797] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 863.253702][ T797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 863.263073][ T797] usb 6-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 863.272343][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.282055][ T797] usb 6-1: config 0 descriptor?? [ 863.289841][ T797] pwc: Samsung MPC-C30 USB webcam detected. [ 864.676530][ T797] pwc: send_video_command error -71 [ 864.682001][ T797] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 864.690013][ T797] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 864.706556][ T797] usb 6-1: USB disconnect, device number 45 [ 870.513477][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.520069][ T1301] ieee802154 phy1 wpan1: encryption failed: -22