last executing test programs: 14m40.382693213s ago: executing program 0 (id=1): pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e2, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x0, 0x54}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x3516, 0xa047, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r7, 0x401870cc, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) socket(0xf, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) unshare(0x22020600) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 14m38.106255705s ago: executing program 0 (id=9): r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) 14m37.643055555s ago: executing program 0 (id=13): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/20, 0x14}], 0x1) (async) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/20, 0x14}], 0x1) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m37.127068949s ago: executing program 0 (id=16): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000240012800b0001006970766c616e0000140002800600010001000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="016f000d01000000f70b14"], 0x36) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x89901) 14m36.057985664s ago: executing program 0 (id=24): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000524500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) io_setup(0x8, 0x0) 14m35.511309728s ago: executing program 0 (id=27): unshare(0x42000000) unshare(0xb0f613efcbd9f9ba) 14m34.705707277s ago: executing program 32 (id=27): unshare(0x42000000) unshare(0xb0f613efcbd9f9ba) 13m55.062364466s ago: executing program 5 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(0x0, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000640), 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) (async) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000009cc3ef00000000030b000a44000000060a0b0400000000000000000a00000018000480140001800b0001006e756d67656e0061b80002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000009cc3ef00000000030b000a44000000060a0b0400000000000000000a00000018000480140001800b0001006e756d67656e0061b80002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000001c0)='cdg\x00', 0x4) (async) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000001c0)='cdg\x00', 0x4) syz_usb_control_io(r6, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000000)={0x0, 0x8, 0x4, "000000d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0xc0}}, 0x44010) 13m54.706846619s ago: executing program 5 (id=183): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001000000f09a5ce9077274435f7b1dec65c3154c7b2b61f08972d48e995fe23ae4954b6f98e0daaec308640b2b673b6ad84f1e1a35e8141b4cae0b4291c70e62c232b65442bed1bd05c7ce", @ANYRES32=r0, @ANYRES32=r1], 0x18, 0x841}, 0x84) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}, {0xffff}}}, 0x24}}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001"], 0x148}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000040000000000e7ff0700009500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000100), 0x48) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000868895d7cf6cdf054b29537db0c950d0c62be793c65210592fd3543d0000000057815b9d000000000004"], 0x8) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x40004, 0x25dfdbfe, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0xe, @in6={0xa, 0x4e22, 0xea5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}}, @sadb_sa={0x2, 0x1, 0x5, 0x0, 0x0, 0x7, 0x0, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x200000f4}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}]}, 0x78}}, 0x8810) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000000)=0x1) 13m52.883037943s ago: executing program 5 (id=190): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x3, 0xfffff281, 0x10004, 0x26}, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x80000000000e97, 0x10200) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f00000003c0)={0x0, 0x0, {0xfffffff9, 0xfffffffd, 0xfffff1b4}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x1fffd, 0x8, 0x0, 0x0}}, 0x10) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x2c, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) close(r6) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) unshare(0x28000600) unshare(0x20020000) 13m51.247103754s ago: executing program 5 (id=193): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000012000300686173683a6e65742c706f727400000014000780080012400021000008000840"], 0x60}}, 0x0) r4 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x22000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f0000000000)) move_mount(r6, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r4], 0x30}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000540)={0x1, 0x0, [{0xd, 0x6, 0x5, 0xf}]}) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r2, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/34, 0x22}}], 0x1, 0x10162, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="64010000", @ANYRES16=r11, @ANYBLOB="010027bd7000fcdbdf25170000001c00068015000300ddab7a6be74e9a479a0df763692750c8190000002400068008000600080000000400050004000500080001004c140000080006"], 0x164}, 0x1, 0x0, 0x0, 0x4005}, 0x12) pwritev2(r1, 0x0, 0x0, 0x6, 0x2, 0x1a) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x8800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x2, 0x0, 0x25, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x528, 0xffffffff, 0x358, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0x4, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xb400}}}, {{@uncond, 0x0, 0x228, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0x1, 0xfffffffffffffff7, 0x4, 0x4, 0x1, 0x700000, 0x0, 0x0, 0x80, 0x8}, {0x9}}}, @common=@hl={{0x28}, {0x2, 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x4}, {0x2, 0x6}, 0x3, 0x3}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, "70b5"}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0x2}, {0x0, 0x1, 0x4}, 0x3, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) 13m50.796251797s ago: executing program 5 (id=197): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e08004800002c0000e000021190476d0000800100004e20000c907861100001"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff, 0x1}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x3, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2000000}, 0x1c) shutdown(r6, 0x1) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r7, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x1c8, 0x73, 0x1c8, 0x258, 0x258, 0x1c8, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbf) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 13m50.503556238s ago: executing program 5 (id=198): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffffb, 0x82) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', r3, 0x29, 0x4, 0x8, 0x1, 0x4, @local, @loopback, 0x80, 0x8000, 0x7, 0x118}}) lseek(r1, 0x8, 0x4) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x60, 0x0, 0x4, "83d838f2"}, 0x0, 0x0}) 13m49.645252174s ago: executing program 33 (id=198): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffffb, 0x82) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', r3, 0x29, 0x4, 0x8, 0x1, 0x4, @local, @loopback, 0x80, 0x8000, 0x7, 0x118}}) lseek(r1, 0x8, 0x4) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x60, 0x0, 0x4, "83d838f2"}, 0x0, 0x0}) 10m31.258440064s ago: executing program 6 (id=989): setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x8, 0x4) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x2, 0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9c5312948e213eb94cd46e19d9c65a018444a4da58ae36556dd38ea5c6776267517308a3d40aa1c788df600"}, 0xd8) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, 0xfffffffffffffeea) (async) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x83}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r1, 0x0, 0x0, 0xfffffee9, 0x6}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\x02\xea\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\r\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xc4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb<3\xaf\xcb\x8cP\xef\x84\x91\x87\x8b\xb5Z\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\xebR\xc0\xc6\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f?\x00\x00\x00\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xd5\x01\x1b\xd1\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x1b\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4\x85G\'+\xcc\xbf\r\xa9\x10Klb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fE\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93y\x9d\xc4K mC\x97\x1c\x91\xd7\xf3\x13)`\xfb\xbf\xd3\xcc\x8d\x0e\x1f\x80\x0f\xcag\xd5J\xd7\x99\x02B\xd9\xdb;\xbd\x05\xc8\x9a\xe9(\xb7\xd1\xce\xba\xf8\xc0\x1fPc\x8d\xfceY\xf8j9\xc4\v\xb5\x82\xbaI,\xf5\xbd\a\a\xa2\x83\x99]/@\xbc(*v%\xa1\xd9\xfb\v\xdc\xed\xa3\x93\x16\x0e\xa8\x96\x10\xfc\xae\xc6X@f\x17\xf4\xb78\xa6\n\xaa\xe5m5\x9d\x14\xd7\x91Q\xb5\x11\x88\x89i\x94,]\x91\x13\xa6~O\xcdV\xf36,\x8a\xc9P\xbd\xf6\x16\x99_\x01\x0f0/\xe1Yi\x00=nz\x1d\xbd\xb0\x85W\xeaU\xea\x03)!\xf2\xfa\x04\xecf\xad\xb5\x94\x97\xbb\xae7\xbf\vQpi\xf3x\x80\xf0\xd3B\x17\xbc\xf2H\xeej\xc4\xdd\xb31\xdc\xb3\x19\x12<\xf7\xca\x12\x86\x15kZ\xb4t\x87;\xfb\x97\xc6\xb4\xf5\xa6\x9b-|EW$\x0e\xb2\xef\xebW/\xff`)M\xe3\x99\xe5\xe2M\x8dxD\xbf!\b\xf4o-\xab\xe0\x1eN\xdb\x94x\xe9:\x92#\x80\x91\xc0\x04\xfd}\xd6\xd6\x0f4/\x13\xf2q\xbc&\xd0p\xe6\xe6\x01V\xf3Lc\xfd\"\xa5V\xce\x9b\xd9\xd3\xc2(Q+\xd0\x00\x00\x00\x00\xf9\x17\n\x9bHw\xfb1\x8e\xa0^\xe0\xbd\xfa\xb8\x9f\xb3~\xab\x1c\x85\x85\x91\xa6\xba\xc9\x81\xaa\xfc<\x18\xf0\xb7\xe0\x95,F\x94\x89\x13\xc1\xad\xaeU\x8bb\xbbc\xa1\xb7a5\xf2\"\xb0\xfb\x1c7ZH\x96\xc66\xd5\xe6r\x19\xb4\xd0\x80\'`\x8a\xe9.\a\xa6g\x13\xe5\t\x11', 0x6) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x6, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0934, {0x0, 0x80}, 0x3, 0xed}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) signalfd4(r0, &(0x7f0000000200)={[0x9]}, 0x8, 0x180000) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r6, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x28}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 10m31.088574007s ago: executing program 6 (id=992): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000800) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb55827c8935690806000186dd061000030000000000000000000000000058d1b29a567e4089def8f1396c5cc800000000000000000041f944e56536fc0100"/81], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="42050006060000002dbd700004dbdf2504000300380000dc0f00000000000000f9ffffffffffffffff7f000000000000530707531c6937880a2088ba13f64c012f0f21fa74feddba70ad7331204fc959c4a0a86cc99c2e817ac3e3aa484ef8e5a8a375c947b53ea383140115bafd52ed0a416fea34cbcb7f1e08c4ec4fc951c0f99d8b0d1be0a04e59d1cdbd4ec51a82fe96b5395169c07b6055bb24d089d81c6978492b1c506a2cd75743ffbe4f37ba58b16361a997827c3f7c0074fd73abc1eb04689685eadb8da751e882f522244b9c646caf892cbc11d661d17e7ec4c83cb233e09f793103d68eea4080", @ANYRESHEX=r3, @ANYRES64=r2, @ANYRES16=r6, @ANYRES8, @ANYRES16=r4, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES16=r2], 0x30}}, 0x4008810) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f0000000340)={0x88000003, 0x0, "679c51ecbc83d0e22e845e3ede5adc714d88a57474315dc49c00", 0x1, 0x0, 0x0, 0x200, 0x2}) 10m27.786535167s ago: executing program 6 (id=998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0x1, 0xc, 0x2, @SEQ_NOTEON=@special, 0xb, 0x83, 0x9}) r3 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000031c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000020c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10000008, 0x40f7, 0x7f, 0x0, 0x77ff, 0x0, 0x0, 0x8, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x6, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x28000600) fdatasync(r3) 10m26.039316431s ago: executing program 6 (id=1005): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1ff) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)) 10m25.992605214s ago: executing program 6 (id=1007): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000030c0)=ANY=[@ANYBLOB="280000001200017fffffff8100000000100000000c0035000000000000000000080031"], 0x28}], 0x1}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1001006f0a8843a54a7f919588eccd85816dd4885960c6ec2d0b2caeaa592954f73adc2ff0c19e558db843dd24755b46f3b1f824566f0620fe4a68b2d2c658dfb4006b08b8a2241c1d0c89f08dfea1c575b407ed0b4a7d016e626ecfc72171b40f06fbd1f7c9b86214b3781b"], 0x10}}], 0x2, 0xc88c5) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r4, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x6}, 0x0, [0x0, 0x0, 0x40000000000, 0x5, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB="4ec5959fed96f6511a016d60bf929810443964827908a374c99782057a8cd14258c163e8193492e414a9c98d3c9929e551ed2d07bb6625fbb0a792412fbb29024a2aa386c1f55bbd1fe452dcd4ea15a1016fe85238ae", @ANYRESDEC=0x0, @ANYBLOB]) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 10m24.943161463s ago: executing program 6 (id=1009): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, 0x4080) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f00000002c0)={'veth0\x00', @random="bc1a091f2845"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x220e}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x10002, 0x0) mq_notify(r5, &(0x7f0000000200)={0x0, 0x8, 0x1}) mq_timedsend(r5, 0x0, 0x0, 0x9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x200, 0x8af, 0x8}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x10200000}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r9, r9, 0x0, 0x10000000009) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r10, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x3ffffffffffff61, 0x2, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x3, {0x3, 0xc, "fb"}}, 0x0}, 0x0) 10m9.479141522s ago: executing program 34 (id=1009): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, 0x4080) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f00000002c0)={'veth0\x00', @random="bc1a091f2845"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x220e}, {{0x0, 0x0, 0x0}, 0x8000}], 0x2, 0x10002, 0x0) mq_notify(r5, &(0x7f0000000200)={0x0, 0x8, 0x1}) mq_timedsend(r5, 0x0, 0x0, 0x9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x200, 0x8af, 0x8}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x10200000}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r9, r9, 0x0, 0x10000000009) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r10, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x3ffffffffffff61, 0x2, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x3, {0x3, 0xc, "fb"}}, 0x0}, 0x0) 7.631291748s ago: executing program 2 (id=3360): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/152, 0x98}], 0x5, &(0x7f0000001680)=""/145, 0x91}, 0x2f}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000001740)=""/190, 0xbe}, {&(0x7f0000000480)=""/33, 0x21}], 0x3, &(0x7f0000001800)=""/121, 0x79}, 0x7ff}], 0x2, 0x0, &(0x7f0000001900)={0x77359400}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x58002, 0xae) r3 = fanotify_init(0x200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf250d00000018000180140002006261746164767d736c6176655f300000"], 0x2c}, 0x1, 0x0, 0x0, 0xc00}, 0x2de0d2a06d7aeea8) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) fanotify_mark(r3, 0x80, 0x40000009, r6, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000bd0400000800"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000068000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fc0100000000000000000000000000000000080000000000000008000000000004001c00"], 0xec}}, 0x0) 6.39602378s ago: executing program 2 (id=3364): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x0, 0x0, 0xa21b}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0x4e24, 0x0, @local, 0x9}, r2, 0x9dffffff}}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd6, 0x56, 0x26, 0x10, 0x1608, 0x207, 0x20ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0xa6, 0xff, 0xf9}}]}}]}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x5) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000001c0)={r4}) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, &(0x7f00000000c0)) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000100)={0x6, 0x1, 0x5}) 5.439250713s ago: executing program 1 (id=3366): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x8044, &(0x7f0000000080)={0x2, 0xfffe, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1}, 0x1}], 0x2, 0x102, 0x0) sendto$inet(r1, &(0x7f0000000380)="d7", 0x1, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f00000001c0)="9c90141da32e92c131d730b1ab", 0xd, 0x44000, 0x0, 0x0) 5.342025966s ago: executing program 1 (id=3367): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x36, {0x9, 0x21, 0xff, 0x3, 0x1, {0x22, 0xa5d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0xf8, 0x81}}}}}]}}]}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) (async) epoll_create1(0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$netlink(r7, &(0x7f0000000040), 0xc) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 4.515376128s ago: executing program 7 (id=3373): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x30314752, 0x3, 0x0, [{0x8, 0xf}, {0x0, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x6, 0x409}, {0x10001, 0x1800002}], 0x0, 0xd, 0x8, 0x3078182a3427730f}}) times(&(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) ppoll(&(0x7f00000000c0)=[{r0, 0x4000}, {r0, 0x14}, {r2, 0x400}, {r0, 0x1020}, {r1, 0x20}, {r0, 0x8}], 0x6, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) socket(0xa, 0x3, 0x3a) openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$dri(&(0x7f00000002c0), 0x7, 0x200080) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500202c00fe8000000000000000000000000000c6d7d217fbbbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"], 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r9) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r10, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) 4.49563199s ago: executing program 1 (id=3374): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x8, &(0x7f0000000080)=[{0x1, 0x1, 0x40, 0x1}, {0x10, 0x9, 0x40, 0x5}, {0x7ff, 0x9, 0x9, 0x9}, {0x847a, 0x6, 0x4, 0x1}, {0x7b3, 0xef, 0x5, 0x1}, {0x5, 0xb, 0x7, 0x6}, {0x2, 0x2, 0x9, 0x784}, {0x5, 0x2, 0x4, 0x5}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x434, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfff, 0x9, 0x3, 0x8, 0xa6, 0x7ff, 0x3, 0x4, 0x6, 0x5d01, 0x9, 0x9, 0x6, 0x1ff, 0x8000, 0x9, 0xfffffffa, 0x200, 0xfff, 0x1, 0x4, 0x6, 0x3, 0xb, 0x4, 0x5fe, 0x4, 0x9, 0x5, 0x7, 0x3, 0x4, 0xffffffff, 0x84, 0x400, 0x8000, 0x9, 0x2ff5, 0xffff, 0x7, 0x4, 0xd5, 0x4, 0x5, 0x8, 0x3ff, 0x4, 0x1, 0x8001, 0x8, 0xa85, 0x4, 0x7, 0x7, 0x1, 0x0, 0x8, 0xffff7fff, 0x1, 0xff, 0x7, 0x1, 0x4, 0x4, 0x0, 0xe6, 0x4, 0x1a, 0x1ff, 0xe, 0x55, 0x7, 0x6, 0x8000008, 0x400, 0x6, 0xffffffff, 0xfffffffe, 0x7, 0x0, 0x80000001, 0x400000, 0x6, 0x401, 0x3, 0x200, 0x1, 0x0, 0x6852, 0x10001, 0x0, 0x3, 0x4, 0xcb, 0xb0, 0xae, 0x8, 0x1, 0x80000000, 0x4, 0x0, 0x6, 0x8, 0x245, 0xfc, 0x8b, 0x80000000, 0x0, 0x5, 0x80000000, 0x5, 0x80000000, 0xa976362a, 0x9, 0x9, 0x8, 0xff, 0x80000000, 0x9, 0x8, 0xc869, 0xffff8001, 0xf7, 0x8, 0x40, 0x8, 0x1, 0xf1, 0x6, 0x7, 0x200, 0x2, 0x200, 0x8, 0x5, 0x8, 0x5, 0x7, 0x1, 0x9, 0x918, 0xc035, 0xe, 0x2, 0x3, 0x4, 0x5, 0x5, 0x7a60, 0x9d, 0xfffffffb, 0x1, 0x0, 0x5, 0x5, 0x1, 0x9, 0x8, 0x4, 0x6, 0xc93, 0x13e, 0xff, 0x4, 0x2, 0x7, 0xcd3, 0x6, 0x4, 0xe, 0xffffa776, 0x401, 0x4, 0x8000, 0x3, 0xdbf, 0x10001, 0x0, 0x4, 0x5683e473, 0x13, 0x81, 0xa187, 0x4, 0x1ff, 0x66c, 0x7ff, 0x3610, 0xfffffffd, 0x5, 0x0, 0x9, 0x5, 0xfffff801, 0x0, 0x81, 0xfffffffb, 0x401, 0x6, 0x6, 0xe, 0x101, 0x4, 0x9, 0x4, 0x97c, 0xdb, 0x1, 0x8, 0x7, 0x8, 0x4fbf, 0x160, 0x2, 0x1, 0x5, 0x3, 0x3, 0xfffffff9, 0x7, 0x8, 0x3, 0x4, 0xa, 0x4, 0x6, 0x400, 0x0, 0x9, 0x2d29, 0x1, 0xffffffff, 0x8001, 0x5, 0x7, 0x9, 0xa, 0xec, 0x5, 0x9, 0xffff8acb, 0x4, 0x9, 0x4, 0x2, 0xffffff35, 0x9, 0x8, 0x5, 0x9, 0x7fff, 0x1, 0x6b, 0x81, 0x1, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) write$tun(r5, &(0x7f0000002780)=ANY=[@ANYRES8], 0xfb5) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$nl_crypto(r5, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)=@alg={0xf0, 0x10, 0x402, 0x0, 0x25dfdbfc, {{'cbc-aes-ce\x00'}, '\x00', '\x00', 0x400}, [{0x8}, {0x8, 0x1, 0x1ff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008840) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 4.294164162s ago: executing program 2 (id=3376): socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = io_uring_setup(0x1946, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000003880)={0x8, 0xffffffff, 0x6000}, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x0, 0x0, 0x17, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8) close_range(r3, 0xffffffffffffffff, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x8004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r11, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.120832071s ago: executing program 1 (id=3378): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xa2}]}, &(0x7f0000000600)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="c9054aec96bf9ed32e043e0c040ac8009fad2f327a327baf223b2c50a58c8827f644bd791115e6788aa7df1f0947f5d6eb"], 0xf) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x18, 0x6, 0xd97, 0x40, @private1, @local, 0x40, 0x1, 0x5, 0x5}}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x79, 0xb9, 0x6, 0x6, 0x2a, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x40, 0x7, 0x4, 0x5}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r8], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@RTM_DELMDB={0x118, 0x55, 0x310, 0x70bd2a, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x3, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00', 0x18367}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x2, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x1, {@ip4=@private=0xa010102, 0xcdb3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x2, {@ip4=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x3, {@in6_addr=@private2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@in6_addr=@mcast1, 0x800}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x4010) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r9 = socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r10 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) getsockopt(r9, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0xfffffffffffffe4b, 0x0, 0x0) 3.796504239s ago: executing program 1 (id=3380): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1}}}}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x110) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0xa, 0x6, '\x00', 0x80001f8630ad}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages(&(0x7f0000eb5000/0x4000)=nil, 0x4000, 0x2, 0x8000000000000000, 0x40000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0x1fb7, 0x2}, 0x18, 0x0) kcmp(0x0, r7, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) 3.503286882s ago: executing program 7 (id=3382): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x437, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'nr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.389374744s ago: executing program 7 (id=3384): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) fcntl$dupfd(r2, 0x406, r2) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0xc01, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8baa, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000340)="f2", 0x1}, {&(0x7f0000000400)="a8d0b8053fa78749109075bc14a3981345183150d0aa08cfddf3990b3f23a4528302b2d3c3d81394683bf29f6f9432fc402a8cb6a0574025ed058c41a1dcc6457b0f65f19b4e80de41e898ad00ae425e05f29655a796108b0df7b9d4f3812c1a1aae8b72b294e502", 0x68}, {&(0x7f0000000480)="de1efa46090ec479c0dbf86b718c6d981de7df52c916cd35be4d72763f7f44b87ea0608622802a2cf16a0325cbe5a155f1573c873ebc8e82a9e31be25eedc92bea1ea0dae966abf6eeb0a07914cc6475d9d1b07e998f62c4eb7af5d66ecaa3775c4dd17425af0eb2c0a59a830a2f105a0020c2750ff8efc1621c1f7cc4", 0x7d}], 0x3}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000001b0003020000000000000000000052c463a810c0"], 0x48}}, 0x10) 2.705731075s ago: executing program 3 (id=3387): inotify_init1(0x400) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202401, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x3, 0x1000, 0x0, 0x101]}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x20, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xe000) 2.532064737s ago: executing program 3 (id=3389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0xd, 0x100000000008, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) (async) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x8010) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x141202, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x181640, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x0, 0x0, 0xb51d, 0xf}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) syz_io_uring_setup(0x4351, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x100, &(0x7f00000002c0)=0x47, 0x0, 0x4) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000009880), 0x2000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000098c0)) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007cc254082a11050068be0102030109022400010000000009041f000297de050300200007ff8009050801ff03060008"], 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) (async) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.503011656s ago: executing program 2 (id=3390): socket$inet_sctp(0x2, 0x5, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newtaction={0x4c, 0x1e, 0x100, 0x100, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x11, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, 'oX'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x9506c56c30e36a6}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 2.271127414s ago: executing program 2 (id=3391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x2, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000200)) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) shutdown(r6, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 2.081116026s ago: executing program 1 (id=3393): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x25, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20060400) r3 = socket(0x1d, 0x1, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r4, &(0x7f0000000280)="3f031c00033be564a822bf234a135ce302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c560906338e83fbbc74484da4bb988ea9f1e", 0x55, 0x0, &(0x7f0000000540)={0xc9, 0x3, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[], 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000380)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) r8 = dup(r7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r8, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r7}, 0x18) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) 1.923179866s ago: executing program 7 (id=3394): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x81204101, 0xfffffffffffffffe) 1.693927222s ago: executing program 3 (id=3395): ioctl$KVM_CAP_VM_TYPES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xeb, 0x0, 0x8}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x64}}, 0x1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x2bc, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1d, 0x3, "88bc318b787aa4e88b74ea307181af41d9923c45fcd2e33c71"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "638c514c3e45b1bd8fb05c20fc69fbaf1a3fe54a12"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xa2, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x81}, 0x20040000) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) (async) r6 = landlock_create_ruleset(&(0x7f00000007c0)={0x1454, 0x3, 0x2}, 0x18, 0x0) splice(r6, &(0x7f0000000800)=0x1, r5, &(0x7f0000000840), 0x9, 0x9) r7 = dup3(r0, r0, 0x80000) connect$inet6(r7, &(0x7f0000000880)={0xa, 0x4e20, 0x7, @mcast1, 0x7}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000008c0)={0x0, 0xe}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000940)={r8, 0x1}, &(0x7f0000000980)=0x8) setsockopt$MRT6_ASSERT(r7, 0x29, 0xcf, &(0x7f00000009c0)=0x1, 0x4) (async) vmsplice(r0, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="046260a0a88a94cfdb03e9beab915999f223d0c161e938f19a57a9af3122fff28b623bcb23199e488c2c488a9cc87a9ce5532fb56500f08609a95990dd8cdbadf2159f2d90f7363eebd112ec3db731d6e4dd6d077222635e66cdf52a885d193d84d62a09f52730bd031f63518f4ea7031d476b241abddd788fa9577f26f6e096debeb9a9c18cde9c7b62f2cda0a6dd550c45a54e485a074f3e2c64e4c6d9e186eecbeb33e62351ed1b", 0xa9}], 0x1, 0x8) (async) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c800) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000c00)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000c80)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @private1, 0x5}}, 0x9, 0x0, 0x8, 0x1, 0x11, 0x7, 0x9}, &(0x7f0000000d40)=0x9c) (async) fstatfs(r6, &(0x7f0000000d80)=""/252) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r10, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x5082412441566f3e}, 0x4) (async) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r7, 0x80184151, &(0x7f0000001080)={0x0, &(0x7f0000001000)="bc32b3953459858ab2f6779eca294fb6a71da7c0bd8aa634f067176b634e7f5822d634707e3a31948d7704f198f746a7082f20c7d5cc7724d48a1fe3850702ea93dd", 0x42}) (async) sendmsg$kcm(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000010c0)="5a756285b96567e2e24ee91f41bb51567f61c8b1daa90452b22b4802eee0c26d1273f27c4315c80c85ff5d1b4364bd99825a52fa6c86d636837038955a8c3ce864eab0c6ef558f14be737668d49cfdb86f3cf18f6fd122700aa101ef9eb1c01220c55dd34faf29a2e7f2c56f30d144e2158970457a66bd3d03aa86b98b2f0e706d3454618358cd7ad1917b486943542afbb3de3964bd6527185ccb322ef7fd6e009bde12c7", 0xa5}, {&(0x7f0000001180)="bf13ec9fa38e26862163596f87dd2858a361219d48b520771c8fc6004e7f0ce8e474e7d6ef60dd2bf2010d793f05b1aae60a1fa0c5c26c2b7610b76c27906038bae895944eeb9de6557a4ceac20422d19004a786862207cb4a888485dbb8b5b66a57289752cd8ae7da806320547c4f4a20c287880967d08088ffe2c19bb6", 0x7e}, {&(0x7f0000001200)="0e530cd44dd44fc06973c4e865d88616dc24b4fbcf740142ffc1aa222dd45d6c5c7a3128703eade789036da33d6702fbf4f58628d1826c5c515538aa8992b36263dfb18e0bd1a8a2613e4e82bdec9bd3baab8c6450b7b9e2", 0x58}, {&(0x7f0000001280)="1bc16324cd3f73356a98e6060b94f519f961d8551f2779d98df0dcad3e1c1b3d3971699f5b11cff39527da3ef5a9e1991439930624cbf32d95dea091affbb9a56fe7674335066e2ab5d88d750dc3695d40ebb4220239118a843d0684c5861682845fcecf49b4544fc4533c193e9da43a60556158eaee0e68154324f0940a2930aa3547df034399dce00cadb9c1c2274faf", 0x91}, {&(0x7f0000001340)="d31117e522f9017b4ff2ebc66ed3d57221543206c33bfc5df88cf17bb9e25e1c4179d528d84c71a8dadf4df8ccea506c64c1dcf47a8bd141edb9a178d0ec84c67ad5259d5fa0169822490fbdd30a1f4a50e41336417a2701cd24022fe1", 0x5d}], 0x5, &(0x7f0000001440)}, 0x44890) timer_settime(0x0, 0x1, &(0x7f0000001640)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.693704115s ago: executing program 4 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x5, &(0x7f0000000040)=@raw=[@exit, @map_idx={0x18, 0xc, 0x5, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000080)='GPL\x00', 0x1, 0x98, &(0x7f00000000c0)=""/152, 0x100, 0x40, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x6, 0xfffff163, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}}, 0x0) 1.5507735s ago: executing program 3 (id=3397): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x129040, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={0x0}) syz_emit_ethernet(0x66, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3c0800451f005800670000b32f9078ac141425e00000010421880b0000000300000800080086dd080088be00000002191769680100000000000002080022eb00000002240f3302020200000000000900c42c010800655800000004"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$isdn(0x22, 0x2, 0x11) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="080028bd7000fbdbdf25040000000800060004000000080004000000000008000400010000804400038008000300030000000600040008000000080003000300000008000300040000000600040006000000060007004e200000080005007f000001080001000000000018000180140003000000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r2, 0x1, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x20000804) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0xfffffffd) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f00000024c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r6, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x1, 0x902, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0xc0}}, 0x50) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffffa) syz_fuse_handle_req(r6, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) r8 = dup(r0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xe0e0e0e0}) r10 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01864ba, &(0x7f0000000180)={0x7, r9, r11, 0xcccccccc}) 978.957242ms ago: executing program 7 (id=3398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x20) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x400, 0x0) (async) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x400, 0x0) r4 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000004300)={0x34, &(0x7f00000040c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15, 0x3, "d3e4d6"}, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xa0, 0x4, 0xffff9b75}, 0x0}) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000001a00)=0xffffffff) r5 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) 963.967635ms ago: executing program 4 (id=3399): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000001bc0)=""/102, 0x66}, {&(0x7f0000000300)=""/59, 0xffffffffffffff0a}, {&(0x7f0000000680)=""/19, 0x13}, {&(0x7f0000000680)}, {&(0x7f00000007c0)=""/16, 0x10}], 0x6}, 0x80000001}, {{&(0x7f0000000880)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4089, 0xff9}, {&(0x7f00000019c0)=""/84, 0x54}], 0x3, &(0x7f00000003c0)=""/165, 0xa5}, 0x5}], 0x2, 0x40010122, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, 0x0) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x4000800) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000580)={0x18, r6}) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r6}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r6, 0x0, 0x1000, 0x2000}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001c40)=ANY=[@ANYBLOB="ffff00f26745b4e0f4326500", @ANYRES16=r1, @ANYBLOB="010000000000000000003a000000060065001bf5000025005b00ae15837e398591ec8e4686bc3158aea172756f13422a523377e554a373532debb60000000600650001000000060065000900000006006500070000000600650006000000060065000a0000000600650040000000"], 0x74}, 0x1, 0x0, 0x0, 0x8005}, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000000}, 0x8, 0x10, &(0x7f0000000000)={0x10}, 0x10}, 0x94) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 817.878997ms ago: executing program 4 (id=3400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1, 0x1, 0x1, 0xeffffdff, 0x0, [{0x0, 0xff}, {0x19, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7f}, {}, {0x0, 0x65, 0xff}, {0x0, 0x0, 0x2c}, {}, {0x0, 0x33, 0xfa}, {0x2, 0x9}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0x8, 0x5, '\x00', 0xfc}, {}, {0x3}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0xff}, {}, {0x0, 0x0, 0x4, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x8, 0x5}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) 564.231864ms ago: executing program 2 (id=3401): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = userfaultfd(0x80801) r1 = getpid() (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000541000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x84, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x84}}, 0x90) (async) get_robust_list(0x0, &(0x7f0000000340)=&(0x7f00000002c0)={&(0x7f0000000140), 0x0, &(0x7f0000000240)={&(0x7f00000001c0)}}, &(0x7f00000003c0)=0x18) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x2}) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @empty}, 0x10) shutdown(0xffffffffffffffff, 0x1) (async) sendto$inet(r5, &(0x7f0000000200)='@', 0x1, 0x40010, 0x0, 0x0) (async) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 491.111267ms ago: executing program 3 (id=3402): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000008864"], 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000f80)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) r4 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x1, 0x50b2, @vifc_lcl_addr=@loopback, @multicast1}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 488.730153ms ago: executing program 4 (id=3403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(0x0, 0x0, 0x2) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001"], 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x1, 0x1, 0x2000, &(0x7f0000653000/0x2000)=nil}) sendmsg$alg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000640)=[@op={0x18}], 0x18, 0x84}, 0xc800) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "6e1cdb32ff00", "4d71daa186888fc6e374943629b936cef51ca13ebb3a9bc9793d6eb58c6f5fe1", '1-j+', "27cc9aa51273fcd7"}, 0x38) io_uring_setup(0x2ef1, &(0x7f0000000280)={0x0, 0x5712, 0x10000, 0x0, 0x1}) (async) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@caif, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="59ac75c02e069cf4577b852002240675a041d8fd76d0a464fead5fcca07b8fd4c22e160895d59904758901f49da2c21c593716469822775cce28e0606c35b71d0864ede51ae1627e2bb09e59947fcc7698b792ad5bef0feb0fe3079f2d23aee5ce366ecc83c3aa83ef42c50b7140845456d41130911e83fee29ba09ecc4ee7a9913130f1a83fd7986e7dc8dd8e67ddfada3b9283963609e4fc826ef0cc636d460080195affc1d5d53d0c5930c793db56f5a589a7562f616e75d607d7131676e5023dc9", 0xc3}, {&(0x7f0000000440)="301de78e16c3addb4c70fb343d848e9d42ca3c5923c45fd1a9d606feec80400d3ee3581e65d74bae2bfc18f3d490b0c875adef53dc0904267f8dbdccc956fa3ef0ac36152479c0", 0x47}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df1604000000900000000000000001000000040500000b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851457d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="49a17ef7b62aa56639516d524792968588d9e61d9a4dfb7d995f68efa04900b75179afc9d2bf214e0d9a093b528664b7956d2c16d8aaca0c16cb23e9f39a5648b2f5af1d6a7b3e14f66a222df95fa05a6cf26836090ff04d009e0e1ee3b703fb56ab9990fcbda95c3e31aa9bd3387c2de4a56b", 0x73, 0x4000000, &(0x7f0000000240)={0x11, 0x5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) 186.338887ms ago: executing program 3 (id=3404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003580)=[{{&(0x7f00000002c0)=@isdn, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000380)=""/246, 0xf6}, 0x40053}, {{&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000600)=""/155, 0x9b}], 0x1, &(0x7f00000006c0)=""/229, 0xe5}, 0x8}, {{&(0x7f0000000500)=@caif, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002040)=""/225, 0xe1}, {&(0x7f0000000980)=""/37, 0x25}], 0x4, &(0x7f0000000a00)=""/141, 0x8d}, 0x8000}, {{&(0x7f0000000ac0)=@qipcrtr, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/111, 0x6f}], 0x2}, 0x401}, {{&(0x7f0000001c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001c80)=""/56, 0x38}, {&(0x7f0000001cc0)=""/66, 0x42}, {&(0x7f0000001d40)=""/36, 0x24}, {&(0x7f0000001f80)=""/174, 0xae}, {&(0x7f0000001e40)=""/231, 0xe7}, {&(0x7f0000004400)=""/4094, 0xffe}, {&(0x7f0000002f40)=""/125, 0x7d}], 0x7, &(0x7f0000003040)=""/142, 0x8e}, 0x6}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003100)=""/119, 0x77}, {&(0x7f0000003180)=""/48, 0x30}, {&(0x7f00000031c0)=""/88, 0x58}, {&(0x7f0000003240)=""/140, 0x8c}, {&(0x7f0000003300)=""/154, 0x9a}, {&(0x7f00000033c0)=""/110, 0x6e}, {&(0x7f0000003440)=""/136, 0x88}], 0x7}, 0x8001}], 0x6, 0x40010302, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000002400)=ANY=[]) r5 = syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(0x0, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r7, &(0x7f0000000000)="b1d7d8bd", 0x4, 0x0, 0x0, 0x2}]) sendmmsg$alg(r7, &(0x7f00000043c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)='-', 0x1}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040090}], 0x1, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000000c0), 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x109440, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 167.953931ms ago: executing program 4 (id=3405): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x300, 0x0) r1 = epoll_create(0x8e81) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000b80)={0x40002000}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ppoll(&(0x7f0000001880)=[{}, {r0, 0x100}, {r2, 0x6b4985f183d7137}], 0x3, &(0x7f00000018c0), &(0x7f0000001900)={[0x96]}, 0x8) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r4 = inotify_init1(0x800) ioctl$int_in(r4, 0x5452, &(0x7f0000000ec0)=0x3) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="38000000040801080000000000000000030000030900ae0073797a30000000000600024086dd000005b3c00006000000272040b826c5c01e1270cda6f46011829a9139fe81b7a37294fe1298efb6151bd419dc85bb67f288122f6de441fdbdae5040646047d2f2260f9b9414e3a65aa22c0af1e8"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000016c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x60, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x59b5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) preadv(r3, &(0x7f0000001540)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/116, 0x74}, {&(0x7f0000001440)=""/246, 0xf6}], 0x7, 0x7, 0x0) 58.503397ms ago: executing program 7 (id=3406): io_setup(0x222, &(0x7f0000000180)) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="3cb6091910d5fe61e5ac05f77000bd89f5bf91d3133966f0594b2b90366d7755ebc4bff3d952d74e89e95572041b66e17594443dfbf884536b4d648146524ee12b287632b86e9c14cfa2016f6aa38b428788ca9e0078defc9aba05d19054f06815248a1c9dc36af35ed4fbafe7fba2b6883347b2e754e623d973106f87db103fe70cf0910c3f32d979316fd05acad9548752bd6217612aa84daa2f8bb81f", 0x9e}, {&(0x7f0000000440)="c84384d76ee18c2ab5a215923d2b9a9efcbbef656c12b961f6ac11492324313b6e82be96bd7e079eca36afd6164c438f4c0be213fed0a77b9d6f24d035c5fe1a351678c309594d8a1f4ddec66bd4c1e20d2b1129afa5c6e325ef2fb72052daf789981da4852a874fa8e71869f25d1e23619c45e0e8d2554a1f976ef8a87b5b9824031d28320d57d5f5f72b1709d68362de8838a2f2bc4fc7faabd9a7d5", 0x9d}, {&(0x7f0000000000)="719f6812cc84220fe4f2ac451867c281b8b52613ac39f74897465a1401e7f2aeb572c869bc70087148b6f0", 0x2b}, {&(0x7f00000005c0)="acfd9a811fc7eac9b517ac505a65988506a71ae0cd6e7de7b8d6998d541634e99da80a8008fc49aebf8d418a36ee1574669f48dca0c5a873bebb373b64ae64c98d683f2471ab35259f2beaf0eef595fd25ec024de6dd37cf42c64fe541f4bb7a4d3001c95204a1c52c15b0aa1ae98b1270b0e89d95c2190b125a53d18a7af3b07b7e18a43d7255022ea8", 0x8a}], 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_clone3(0x0, 0x0) timer_create(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x1000, 0x6, 0xe227, 0x5, 0x0, 0xffffffffffffffff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x404) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x47, 0x0, 0xffffffea}, 0x4008080) 0s ago: executing program 4 (id=3407): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904", @ANYRES8=r2, @ANYRES32], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r6, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801, 0x80}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc811}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r10 = syz_io_uring_setup(0x49b, &(0x7f0000000400)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r9, 0xb, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r10, 0x3513, 0x217, 0xa1, 0x0, 0x0) kernel console output (not intermixed with test programs): 283][ T979] usb 5-1: Product: syz [ 837.437713][T13164] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 837.456720][ T979] usb 5-1: Manufacturer: syz [ 837.478855][ T979] usb 5-1: SerialNumber: syz [ 837.489587][ T979] usb 5-1: config 0 descriptor?? [ 837.498360][ T979] usb 5-1: bad CDC descriptors [ 837.504394][ T979] usb 5-1: unsupported MDLM descriptors [ 837.614556][ T5924] usb 3-1: 0:2 : does not exist [ 837.660800][T13164] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 837.685222][ T5924] usb 3-1: USB disconnect, device number 74 [ 837.701285][ T5978] usb 5-1: USB disconnect, device number 86 [ 837.725055][T13164] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 837.742713][T18335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2947'. [ 837.785523][T13164] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 837.814524][T13164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.857645][T18324] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 837.875317][T13164] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 837.966073][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2948'. [ 838.080843][ T979] usb 2-1: USB disconnect, device number 99 [ 838.379287][T18343] loop2: detected capacity change from 0 to 7 [ 838.424539][ T5986] Dev loop2: unable to read RDB block 7 [ 838.433054][ T5986] loop2: unable to read partition table [ 838.461484][ T5986] loop2: partition table beyond EOD, truncated [ 838.475100][T18343] Dev loop2: unable to read RDB block 7 [ 838.486456][T18343] loop2: unable to read partition table [ 838.584738][T18343] loop2: partition table beyond EOD, truncated [ 838.617963][T18343] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 838.708659][T18338] tipc: Resetting bearer [ 838.772709][T18347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.853707][T18353] netlink: 'syz.7.2951': attribute type 27 has an invalid length. [ 838.914691][T18353] lo: left allmulticast mode [ 838.969246][T18353] tunl0: left allmulticast mode [ 839.063680][T18353] gre0: left allmulticast mode [ 839.069468][T18353] gretap0: left allmulticast mode [ 839.074752][T18353] erspan0: left allmulticast mode [ 839.080313][T18353] ip_vti0: left allmulticast mode [ 839.085600][T18353] ip6_vti0: left allmulticast mode [ 839.091334][T18353] sit0: left allmulticast mode [ 839.096330][T18353] ip6tnl0: left allmulticast mode [ 839.106484][T18353] ip6gre0: left allmulticast mode [ 839.111952][T18353] syz_tun: left allmulticast mode [ 839.121025][T18353] ip6gretap0: left allmulticast mode [ 839.127226][T18353] bridge0: left allmulticast mode [ 839.132812][T18353] vcan0: left allmulticast mode [ 839.138146][T18353] bond0: left allmulticast mode [ 839.143131][T18353] dummy0: left allmulticast mode [ 839.150967][T18353] nlmon0: left allmulticast mode [ 839.156160][T18353] caif0: left allmulticast mode [ 839.161787][T18353] batadv0: left allmulticast mode [ 839.167455][T18353] veth0: left allmulticast mode [ 839.175474][T18353] veth1: left allmulticast mode [ 839.183559][T18353] wg0: left allmulticast mode [ 839.192431][T18353] wg1: left allmulticast mode [ 839.197534][T18353] wg2: left allmulticast mode [ 839.202675][T18353] veth0_to_bond: left allmulticast mode [ 839.208629][T18353] bond_slave_0: left allmulticast mode [ 839.214397][T18353] veth1_to_bond: left allmulticast mode [ 839.220546][T18353] bond_slave_1: left allmulticast mode [ 839.226741][T18353] veth0_to_team: left allmulticast mode [ 839.232986][T18353] team_slave_0: left allmulticast mode [ 839.239070][T18353] veth1_to_team: left allmulticast mode [ 839.245156][T18353] team_slave_1: left allmulticast mode [ 839.251247][T18353] veth0_to_batadv: left allmulticast mode [ 839.257535][T18353] batadv_slave_0: left allmulticast mode [ 839.263464][T18353] veth1_to_batadv: left allmulticast mode [ 839.269771][T18353] batadv_slave_1: left allmulticast mode [ 839.275694][T18353] xfrm0: left allmulticast mode [ 839.281210][T18353] veth0_to_hsr: left allmulticast mode [ 839.287170][T18353] veth1_to_hsr: left allmulticast mode [ 839.293880][T18353] hsr0: left allmulticast mode [ 839.299014][T18353] hsr_slave_0: left allmulticast mode [ 839.304448][T18353] hsr_slave_1: left allmulticast mode [ 839.310666][T18353] veth1_virt_wifi: left allmulticast mode [ 839.316872][T18353] veth0_virt_wifi: left allmulticast mode [ 839.322868][T18353] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 839.330615][T18353] veth1_macvtap: left allmulticast mode [ 839.337363][T18353] veth0_macvtap: left allmulticast mode [ 839.343506][T18353] macvtap0: left allmulticast mode [ 839.349410][T18353] macsec0: left allmulticast mode [ 839.355055][T18353] geneve0: left allmulticast mode [ 839.360644][T18353] geneve1: left allmulticast mode [ 839.466485][T18353] netdevsim netdevsim7 netdevsim1: left allmulticast mode [ 839.474208][T18353] netdevsim netdevsim7 netdevsim2: left allmulticast mode [ 839.482595][T18353] netdevsim netdevsim7 netdevsim3: left allmulticast mode [ 839.490241][T18353] mac80211_hwsim hwsim22 wlan0: left allmulticast mode [ 839.497715][T18353] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 839.505160][T18353] bridge1: left allmulticast mode [ 839.510667][T18353] bridge2: left allmulticast mode [ 839.516073][T18353] veth2: left allmulticast mode [ 839.521513][T18353] veth3: left allmulticast mode [ 839.556856][T18353] bond2: left allmulticast mode [ 839.581548][T18353] geneve2: left allmulticast mode [ 839.619839][T18353] gre1: left allmulticast mode [ 839.684996][ T9082] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.695321][ T9082] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 839.762340][ T9082] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.775235][ T9082] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 839.788413][ T9082] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.825221][ T9082] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 839.936688][ T9082] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.044968][ T9082] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 840.320277][ T5924] hid_parser_main: 427 callbacks suppressed [ 840.320293][ T5924] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 840.386853][ T30] audit: type=1326 audit(1758051107.948:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 840.416230][ T5924] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 840.482825][ T30] audit: type=1326 audit(1758051107.948:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 840.498868][T13164] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 840.577271][ T30] audit: type=1326 audit(1758051107.988:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 840.674814][ T30] audit: type=1326 audit(1758051107.988:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 840.722297][T13164] usb 3-1: not running at top speed; connect to a high speed hub [ 840.747126][T13164] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 840.809228][ T30] audit: type=1326 audit(1758051107.988:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 840.843673][ T30] audit: type=1326 audit(1758051107.988:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 840.867097][T13164] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 840.876158][T13164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.915088][ T30] audit: type=1326 audit(1758051107.988:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 840.960878][T13164] usb 3-1: Product: Н [ 840.965090][T13164] usb 3-1: Manufacturer: ܺ⨐啕룧ݑ䬶⥅蚸腵尀쏹㝫䞨䌯㱖噯⵼㽲濮꾹ᚏ䈚෉ࡓ嫅ꜞꉍٰ榽骝䯢亃㸰Ё᪽䏫쾹꽇㥀釾ꘗᕚ垲ꫨ篜ହꤵ齮쥫뽈⏻ᣗꟋᜱ嗎ᢄ⯲翦毾ꉯ侞鶠㿸 [ 841.072943][ T30] audit: type=1326 audit(1758051107.988:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 841.125062][T13164] usb 3-1: SerialNumber: ࠝ [ 841.158920][T18378] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 841.437786][T13164] cdc_ncm 3-1:1.0: bind() failure [ 841.452661][ T30] audit: type=1326 audit(1758051107.988:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 841.511479][T13164] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 841.554321][T13164] cdc_ncm 3-1:1.1: bind() failure [ 841.564922][T18396] loop2: detected capacity change from 0 to 7 [ 841.585243][T13164] usb 3-1: USB disconnect, device number 75 [ 841.596696][T18399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2962'. [ 841.621518][T18396] Dev loop2: unable to read RDB block 7 [ 841.660693][ T30] audit: type=1326 audit(1758051107.988:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 841.686691][T18399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2962'. [ 841.688235][T18396] loop2: unable to read partition table [ 841.688436][T18396] loop2: partition table beyond EOD, truncated [ 841.688468][T18396] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 841.996352][T18412] ptrace attach of "./syz-executor exec"[5883] was attempted by ""[18412] [ 842.760346][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 843.173759][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 843.202229][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 843.317131][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 843.326558][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.350428][T18423] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 843.369582][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 843.630160][ T9] usb 3-1: USB disconnect, device number 76 [ 844.791330][T18445] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2973'. [ 844.802514][T18445] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2973'. [ 846.065571][T18470] loop2: detected capacity change from 0 to 7 [ 846.083063][T18470] Dev loop2: unable to read RDB block 7 [ 846.093697][T18470] loop2: unable to read partition table [ 846.149299][T18470] loop2: partition table beyond EOD, truncated [ 846.302664][T18475] sg_write: process 65 (syz.3.2974) changed security contexts after opening file descriptor, this is not allowed. [ 846.314876][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 846.346939][T18470] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 846.576894][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 846.585355][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 846.599168][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.659884][ T9] usb 3-1: Product: syz [ 846.698427][ T9] usb 3-1: Manufacturer: syz [ 846.723568][ T9] usb 3-1: SerialNumber: syz [ 846.800372][ T9] usb 3-1: config 0 descriptor?? [ 846.823202][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 847.215304][ T9] gspca_sn9c20x: Write register 1001 failed -71 [ 847.234120][ T9] gspca_sn9c20x: Device initialization failed [ 847.247016][ T5978] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 847.255615][ T9] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 847.370198][ T9] usb 3-1: USB disconnect, device number 77 [ 847.501133][ T5978] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 847.536573][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.557261][ T5978] usb 5-1: Product: syz [ 847.561797][ T5978] usb 5-1: Manufacturer: syz [ 847.587197][ T5978] usb 5-1: SerialNumber: syz [ 847.638171][ T5978] r8152-cfgselector 5-1: Unknown version 0x0000 [ 847.646890][ T5978] r8152-cfgselector 5-1: config 0 descriptor?? [ 847.740119][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 847.866848][T18480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.879081][T18480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.973138][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 848.062566][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 848.095354][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 848.144030][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 848.179708][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 848.229298][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 848.241900][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 848.260756][ T9] usb 3-1: Product: syz [ 848.280188][ T9] usb 3-1: Manufacturer: syz [ 848.299549][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 848.310459][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 848.328753][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 848.345179][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 848.364548][ T5924] r8152-cfgselector 5-1: USB disconnect, device number 87 [ 848.940982][T18506] fuse: root generation should be zero [ 848.959723][T18507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.968961][T18507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.110607][ T5978] usb 3-1: USB disconnect, device number 78 [ 849.200839][T18509] netlink: 'syz.4.2989': attribute type 13 has an invalid length. [ 849.229578][T18509] gretap0: refused to change device tx_queue_len [ 849.248041][T18509] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 849.809858][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 849.809875][ T30] audit: type=1326 audit(1758051117.388:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.2.2991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f711798eba9 code=0x0 [ 850.472366][T18525] loop2: detected capacity change from 0 to 7 [ 850.492751][ T5986] Dev loop2: unable to read RDB block 7 [ 850.505558][ T5986] loop2: unable to read partition table [ 850.517801][ T5986] loop2: partition table beyond EOD, truncated [ 850.534380][T18525] Dev loop2: unable to read RDB block 7 [ 850.540711][T18525] loop2: unable to read partition table [ 850.582475][T18525] loop2: partition table beyond EOD, truncated [ 850.637454][T18525] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 850.796941][ T5945] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 851.066980][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 851.467762][ T5945] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 851.509838][ T5945] usb 4-1: config 0 interface 0 has no altsetting 0 [ 851.525094][ T5945] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 851.727507][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.753607][ T5945] usb 4-1: config 0 descriptor?? [ 852.816724][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2994'. [ 852.840924][T18551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.862601][T13164] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 852.885076][T18551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.633610][ T30] audit: type=1326 audit(1758051120.768:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.1.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 853.727456][T18564] sctp: [Deprecated]: syz.7.3003 (pid 18564) Use of int in max_burst socket option. [ 853.727456][T18564] Use struct sctp_assoc_value instead [ 853.733524][ T30] audit: type=1326 audit(1758051120.768:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.1.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 853.866926][ T30] audit: type=1326 audit(1758051120.768:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.1.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 853.938611][ T5945] usbhid 4-1:0.0: can't add hid device: -71 [ 853.962871][ T5945] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 853.995022][ T30] audit: type=1326 audit(1758051120.768:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.1.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 854.109190][ T5945] usb 4-1: USB disconnect, device number 27 [ 854.178726][ T30] audit: type=1326 audit(1758051120.768:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.1.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 854.323337][T18569] netlink: 'syz.4.3005': attribute type 4 has an invalid length. [ 854.379379][ T30] audit: type=1326 audit(1758051120.768:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.1.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 854.472598][T18572] loop2: detected capacity change from 0 to 7 [ 854.500271][T18572] Dev loop2: unable to read RDB block 7 [ 854.571319][T18572] loop2: unable to read partition table [ 854.620199][ T30] audit: type=1326 audit(1758051120.818:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.1.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 854.656257][T18572] loop2: partition table beyond EOD, truncated [ 854.692621][T18572] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 854.746629][ T30] audit: type=1326 audit(1758051120.848:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.1.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 854.769788][ T30] audit: type=1326 audit(1758051120.848:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.1.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 854.800128][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 854.813495][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 854.824087][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 854.833598][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 854.946396][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 855.163259][T18589] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 855.170616][T18589] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 855.412443][T18595] PM: Enabling pm_trace changes system date and time during resume. [ 855.412443][T18595] PM: Correct system time has to be restored manually after resume. [ 855.452469][T18596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.517177][ T5978] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 855.642965][T18598] netlink: 'syz.7.3012': attribute type 1 has an invalid length. [ 855.650847][T18598] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.3012'. [ 855.866049][ T5978] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 855.886331][ T5978] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 855.896598][ T5978] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 855.908711][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.921091][T18591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 855.932062][ T5978] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 855.957224][ T979] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 856.096920][ T979] usb 5-1: device descriptor read/64, error -71 [ 856.200388][T18616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'. [ 856.281949][T18617] loop2: detected capacity change from 0 to 7 [ 856.346918][ T979] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 856.387621][ T5953] usb 4-1: USB disconnect, device number 28 [ 856.410808][T18617] Dev loop2: unable to read RDB block 7 [ 856.446301][T18617] loop2: unable to read partition table [ 856.473214][T18617] loop2: partition table beyond EOD, truncated [ 856.482136][T18617] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 856.501408][ T979] usb 5-1: device descriptor read/64, error -71 [ 856.647606][ T979] usb usb5-port1: attempt power cycle [ 856.709888][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 856.709904][ T30] audit: type=1326 audit(1758051124.288:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 856.765961][ T30] audit: type=1326 audit(1758051124.318:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82cb8eba9 code=0x7ffc0000 [ 857.017512][ T979] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 857.088586][ T5866] Bluetooth: hci2: command tx timeout [ 857.107630][ T979] usb 5-1: device descriptor read/8, error -71 [ 857.179923][T18623] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 857.186565][T18623] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 857.214338][T18623] vhci_hcd vhci_hcd.0: Device attached [ 857.224446][T18624] vhci_hcd: connection closed [ 857.224738][T11836] vhci_hcd: stop threads [ 857.243718][T11836] vhci_hcd: release socket [ 857.264738][T11836] vhci_hcd: disconnect device [ 857.397512][ T979] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 857.427595][ T979] usb 5-1: device descriptor read/8, error -71 [ 857.543215][ T979] usb usb5-port1: unable to enumerate USB device [ 858.845708][T18656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3022'. [ 859.136913][ T5866] Bluetooth: hci2: command tx timeout [ 859.348198][ T12] bond0 (unregistering): Released all slaves [ 859.549310][ T12] bond1 (unregistering): Released all slaves [ 859.564852][ T12] bond2 (unregistering): Released all slaves [ 859.724553][ T12] bond3 (unregistering): Released all slaves [ 859.951657][ T12] bond4 (unregistering): Released all slaves [ 860.110574][ T12] bond5 (unregistering): Released all slaves [ 860.125506][T18662] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 860.173958][T18587] chnl_net:caif_netlink_parms(): no params data found [ 860.287747][ T12] : left promiscuous mode [ 860.454937][ T12] tipc: Left network mode [ 860.506879][T18677] sctp: [Deprecated]: syz.3.3027 (pid 18677) Use of int in maxseg socket option. [ 860.506879][T18677] Use struct sctp_assoc_value instead [ 860.527314][ T5953] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 860.543489][T18587] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.574437][T18587] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.590048][T18587] bridge_slave_0: entered allmulticast mode [ 860.598636][T18587] bridge_slave_0: entered promiscuous mode [ 860.638037][T18587] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.649654][T18587] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.665589][T18587] bridge_slave_1: entered allmulticast mode [ 860.678262][T18587] bridge_slave_1: entered promiscuous mode [ 860.724116][ T5953] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 860.772239][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.791224][ T5953] usb 5-1: config 0 descriptor?? [ 860.819914][ T5953] cp210x 5-1:0.0: cp210x converter detected [ 861.022461][T18669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.042838][T18587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.062316][T18669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.110625][T18587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.204602][T18587] team0: Port device team_slave_0 added [ 861.211448][ T5866] Bluetooth: hci2: command tx timeout [ 861.240421][T18587] team0: Port device team_slave_1 added [ 861.289952][ T5953] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 861.422604][T18587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.444800][T18587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.507550][T18587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.589049][T18587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.637175][ T5953] usb 5-1: cp210x converter now attached to ttyUSB0 [ 861.646904][T18587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.696164][T18587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.740092][ T5953] usb 5-1: USB disconnect, device number 93 [ 861.749344][ T5953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 861.815053][ T5953] cp210x 5-1:0.0: device disconnected [ 861.930128][T18713] netlink: 'syz.3.3033': attribute type 33 has an invalid length. [ 861.938157][T18713] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3033'. [ 862.667589][T18587] hsr_slave_0: entered promiscuous mode [ 862.674826][T18587] hsr_slave_1: entered promiscuous mode [ 862.753438][T18587] debugfs: 'hsr0' already exists in 'hsr' [ 862.759411][T18587] Cannot create hsr debugfs directory [ 862.890653][T18712] input: syz1 as /devices/virtual/input/input82 [ 862.988241][T18712] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 863.185507][ T12] hsr_slave_0: left promiscuous mode [ 863.207595][ T12] hsr_slave_1: left promiscuous mode [ 863.286941][ T5866] Bluetooth: hci2: command tx timeout [ 863.472014][ T12] pim6reg (unregistering): left allmulticast mode [ 863.559823][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3037'. [ 863.687205][ T5945] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 863.858960][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 863.871459][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 863.893722][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 863.951754][ T5945] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 863.984684][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.006938][ T5945] usb 2-1: Product: syz [ 864.011143][ T5945] usb 2-1: Manufacturer: syz [ 864.030443][ T5945] usb 2-1: SerialNumber: syz [ 864.051841][ T5945] usb 2-1: config 0 descriptor?? [ 864.081039][ T5945] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 864.117420][ T5945] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 864.407254][ T5953] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 864.483628][ T5945] em28xx 2-1:0.0: unknown em28xx chip ID (232) [ 864.644895][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 864.684979][ T5953] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 864.685486][ T5945] em28xx 2-1:0.0: Config register raw data: 0xe8 [ 864.693763][ T5953] usb 5-1: config 0 has no interface number 0 [ 864.707076][ T5953] usb 5-1: config 0 interface 41 has no altsetting 0 [ 864.723405][ T5953] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 864.726848][ T5945] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 864.732951][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.748384][ T5953] usb 5-1: Product: syz [ 864.766372][ T5953] usb 5-1: Manufacturer: syz [ 864.771543][ T5953] usb 5-1: SerialNumber: syz [ 864.789400][ T5953] usb 5-1: config 0 descriptor?? [ 864.802765][ T5953] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 865.021874][ T5945] em28xx 2-1:0.0: No AC97 audio processor [ 866.175618][ T5953] usb 2-1: USB disconnect, device number 100 [ 866.434793][ T12] IPVS: stop unused estimator thread 0... [ 866.573531][ T979] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 866.667821][ T5953] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 866.750063][ T979] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 866.759663][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.777202][ T979] usb 4-1: config 0 has no interface number 0 [ 866.792910][ T979] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 866.821870][ T979] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.844462][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 866.865003][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.896282][ T979] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 866.909314][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.927320][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.940901][ T5953] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 866.955439][ T979] usb 4-1: Product: syz [ 866.966318][ T979] usb 4-1: Manufacturer: syz [ 866.972956][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.986685][ T979] usb 4-1: SerialNumber: syz [ 867.010865][T18302] usb 5-1: USB disconnect, device number 94 [ 867.079565][ T979] usb 4-1: config 0 descriptor?? [ 867.086625][ T5953] usb 2-1: config 0 descriptor?? [ 867.303414][T18587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 867.342256][ T979] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 867.364242][T18587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 867.419956][ T979] usb 4-1: USB disconnect, device number 29 [ 867.432673][T18587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 867.479274][T18587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 867.536049][T18788] sctp: [Deprecated]: syz.4.3043 (pid 18788) Use of int in max_burst socket option deprecated. [ 867.536049][T18788] Use struct sctp_assoc_value instead [ 867.696031][ T5953] zydacron 0003:13EC:0006.0038: item fetching failed at offset 0/2 [ 867.739667][ T5953] zydacron 0003:13EC:0006.0038: parse failed [ 867.777383][ T5953] zydacron 0003:13EC:0006.0038: probe with driver zydacron failed with error -22 [ 867.874936][T18587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.909404][ T5924] usb 2-1: USB disconnect, device number 101 [ 867.992603][T18587] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.029789][T11836] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.037007][T11836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.114761][T11836] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.122856][T11836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.345841][T18812] ipvlan2: entered promiscuous mode [ 868.351329][T18812] ipvlan2: entered allmulticast mode [ 868.360451][T18812] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 868.442306][T18587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.497853][ T5953] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 868.584194][T18587] veth0_vlan: entered promiscuous mode [ 868.628738][T18587] veth1_vlan: entered promiscuous mode [ 868.669942][ T5953] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 868.825074][ T5953] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 868.882230][ T5953] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 868.917458][ T5953] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 868.927511][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.940268][T18587] veth0_macvtap: entered promiscuous mode [ 868.965548][T18587] veth1_macvtap: entered promiscuous mode [ 868.979946][ T5953] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 869.001488][ T5953] usb 4-1: invalid MIDI out EP 0 [ 869.019821][T18587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.062606][T18587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.124665][T10522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.153658][T10522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.265439][T10522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.290543][ T5953] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 869.310302][T10522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.378926][ T5953] usb 4-1: USB disconnect, device number 30 [ 869.665762][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.684184][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.743682][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.753937][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.816892][ T5953] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 869.887604][T18831] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 870.026873][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 870.079375][T18831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 870.098391][T18831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.098654][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.112635][T18831] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 870.133214][T18831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.184231][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.190589][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.219521][T18831] usb 2-1: config 0 descriptor?? [ 870.310178][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.408408][ T5953] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 870.482157][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.550303][ T5953] usb 4-1: config 0 descriptor?? [ 870.571604][T18862] netlink: 'syz.2.3054': attribute type 1 has an invalid length. [ 870.612354][T18862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3054'. [ 870.708886][T18831] isku 0003:1E7D:319C.0039: unknown global tag 0xc [ 870.827238][T18831] isku 0003:1E7D:319C.0039: item 0 4 1 12 parsing failed [ 870.835078][T18831] isku 0003:1E7D:319C.0039: parse failed [ 870.843398][T18835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.843487][T18831] isku 0003:1E7D:319C.0039: probe with driver isku failed with error -22 [ 870.890904][T18835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.016998][T18302] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 871.062614][ T30] audit: type=1326 audit(1758051138.638:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18870 comm="syz.7.3058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625518eba9 code=0x0 [ 871.218141][ T5953] hid_mf 0003:0079:1801.003A: item fetching failed at offset 0/2 [ 871.226687][ T5953] hid_mf 0003:0079:1801.003A: HID parse failed. [ 871.266836][T18302] usb 5-1: Using ep0 maxpacket: 8 [ 871.281791][T18302] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 871.303859][ T5953] hid_mf 0003:0079:1801.003A: probe with driver hid_mf failed with error -22 [ 871.312799][T18302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.356640][T18302] usb 5-1: Product: syz [ 871.380948][T18302] usb 5-1: Manufacturer: syz [ 871.398847][T18302] usb 5-1: SerialNumber: syz [ 871.489995][T18302] usb 5-1: config 0 descriptor?? [ 871.713086][T18302] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 871.820342][T18302] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 871.874182][T18302] usb 5-1: USB disconnect, device number 95 [ 872.158069][T18896] binder: BINDER_SET_CONTEXT_MGR already set [ 872.165614][T18896] binder: 18894:18896 ioctl 4018620d 200000004a80 returned -16 [ 872.174472][T18896] binder: 18894:18896 ioctl c0306201 2000000004c0 returned -22 [ 872.277195][ T5945] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 872.419909][ T5945] usb 3-1: device descriptor read/64, error -71 [ 872.427169][T18302] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 872.580565][T18831] usb 4-1: USB disconnect, device number 31 [ 872.587183][T18302] usb 5-1: Using ep0 maxpacket: 16 [ 872.624221][T18302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.654223][T18302] usb 5-1: config 0 has no interfaces? [ 872.657019][ T5945] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 872.670110][T18302] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 872.698279][T18302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.709895][ T5938] usb 2-1: USB disconnect, device number 102 [ 872.745182][T18302] usb 5-1: config 0 descriptor?? [ 872.801293][T18916] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 872.864846][ T5945] usb 3-1: device descriptor read/64, error -71 [ 872.900336][T18916] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 872.946356][T18916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 872.997861][ T5945] usb usb3-port1: attempt power cycle [ 873.377045][ T5945] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 873.398219][ T5945] usb 3-1: device descriptor read/8, error -71 [ 873.637038][ T5945] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 873.657619][ T5945] usb 3-1: device descriptor read/8, error -71 [ 873.725354][T15867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 873.761539][T15867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 873.767452][ T5945] usb usb3-port1: unable to enumerate USB device [ 873.789870][T15867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 873.800721][T15867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 873.811403][T15867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 874.192125][ T2980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.432968][ T2980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.679789][ T2980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.931322][ T2980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.050733][T18949] netlink: 'syz.2.3067': attribute type 4 has an invalid length. [ 875.119832][T18951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 875.130065][T18951] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 875.137772][T18951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3066'. [ 875.175427][T18302] usb 5-1: USB disconnect, device number 96 [ 875.676629][T18962] netlink: 'syz.4.3068': attribute type 27 has an invalid length. [ 875.941103][ T5866] Bluetooth: hci1: command tx timeout [ 876.097086][T18962] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.104608][T18962] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.199473][ T5938] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 876.385613][T18962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.428621][T18962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.457016][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 876.495945][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 876.587335][T13164] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 876.644636][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 876.755515][T18962] ipvlan2: left promiscuous mode [ 876.766886][T13164] usb 5-1: Using ep0 maxpacket: 16 [ 876.796404][ T5938] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 876.800639][T18962] ipvlan2: left allmulticast mode [ 876.826828][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.843990][T18962] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 876.861674][ T5938] usb 4-1: Product: syz [ 876.866030][T13164] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 876.878498][T13164] usb 5-1: config 0 has no interface number 0 [ 876.884666][ T5938] usb 4-1: Manufacturer: syz [ 876.890083][ T5938] usb 4-1: SerialNumber: syz [ 876.899080][T18931] chnl_net:caif_netlink_parms(): no params data found [ 876.922502][ T5938] usb 4-1: config 0 descriptor?? [ 876.950479][T13164] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 876.964991][ T5938] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 876.977121][T13164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.993526][T18967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.996908][ T5938] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 877.004113][T18967] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.014220][T13164] usb 5-1: Product: syz [ 877.022377][T18967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 877.034229][T13164] usb 5-1: Manufacturer: syz [ 877.042704][T13164] usb 5-1: SerialNumber: syz [ 877.050041][T10512] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.054589][T13164] usb 5-1: config 0 descriptor?? [ 877.064482][T10512] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.073550][T10512] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.086192][T13164] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 877.384291][ T2980] bond3 (unregistering): (slave gretap1): Releasing active interface [ 877.745781][T18960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.758414][T18960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.788350][ T2980] bond0 (unregistering): Released all slaves [ 877.870546][ T5938] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 877.877974][ T5938] em28xx 4-1:0.0: Config register raw data: 0x36 [ 877.891158][ T5938] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 877.900113][ T5938] em28xx 4-1:0.0: No AC97 audio processor [ 878.017010][ T5866] Bluetooth: hci1: command tx timeout [ 878.047024][T13164] gspca_spca1528: reg_w err -110 [ 878.116991][T13164] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 878.195711][ T2980] bond1 (unregistering): Released all slaves [ 878.469516][ T2980] bond2 (unregistering): Released all slaves [ 878.493807][ T2980] bond3 (unregistering): Released all slaves [ 878.731144][T19003] netlink: 'syz.7.3073': attribute type 6 has an invalid length. [ 878.941996][ T979] usb 5-1: USB disconnect, device number 97 [ 879.463228][ T2980] bond4 (unregistering): Released all slaves [ 879.814713][ T2980] bond5 (unregistering): Released all slaves [ 879.871251][T10512] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.087809][ T5866] Bluetooth: hci1: command tx timeout [ 880.224263][ T2980] tipc: Disabling bearer [ 880.243256][ T2980] tipc: Left network mode [ 880.247674][ T979] usb 4-1: USB disconnect, device number 32 [ 881.123052][T18931] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.150012][T18931] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.171672][T18931] bridge_slave_0: entered allmulticast mode [ 881.202113][T18931] bridge_slave_0: entered promiscuous mode [ 881.224187][T18931] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.246879][T18931] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.267112][T18931] bridge_slave_1: entered allmulticast mode [ 881.335867][T18931] bridge_slave_1: entered promiscuous mode [ 881.401830][T19028] pim6reg: entered allmulticast mode [ 881.483310][T18980] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 881.777198][T18980] usb 4-1: Using ep0 maxpacket: 8 [ 881.802985][T18931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.830391][T18980] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 881.860758][T18980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.861908][T18931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.110256][T18931] team0: Port device team_slave_0 added [ 882.167092][ T5866] Bluetooth: hci1: command tx timeout [ 882.176414][T18980] pvrusb2: Hardware description: Terratec Grabster AV400 [ 882.177925][T18931] team0: Port device team_slave_1 added [ 882.285833][T18980] pvrusb2: ********** [ 882.290984][T18980] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 882.307734][T18980] pvrusb2: Important functionality might not be entirely working. [ 882.330566][T18980] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 882.345745][T18980] pvrusb2: ********** [ 882.461426][T18931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.468654][T18931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.494595][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.597108][T18931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.792176][T18931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.810342][T18931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.839299][T18931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.887062][ T5938] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 882.943432][ T2980] hsr_slave_0: left promiscuous mode [ 882.950482][ T2980] hsr_slave_1: left promiscuous mode [ 882.976127][ T2980] veth1_macvtap: left promiscuous mode [ 882.986181][ T2980] veth0_macvtap: left promiscuous mode [ 883.065001][ T5938] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 883.077884][ T5938] usb 3-1: config 179 has no interface number 0 [ 883.097919][ T5938] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 883.114898][ T5938] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 883.125520][T13164] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 883.140102][ T5938] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 883.151908][ T5938] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 883.164146][ T5938] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 883.177886][ T5938] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 883.201437][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.225552][T19061] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 883.272464][ T5938] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 883.290698][ T2980] pim6reg (unregistering): left allmulticast mode [ 883.292445][T13164] usb 5-1: Using ep0 maxpacket: 8 [ 883.303003][ T5938] xpad 3-1:179.65: probe with driver xpad failed with error -90 [ 883.317386][T13164] usb 5-1: config 0 has an invalid interface number: 27 but max is 0 [ 883.326630][T13164] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 883.341052][T13164] usb 5-1: config 0 has no interface number 0 [ 883.363461][T13164] usb 5-1: config 0 interface 27 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 883.382583][T13164] usb 5-1: config 0 interface 27 altsetting 0 endpoint 0x86 has invalid maxpacket 29821, setting to 64 [ 883.431767][T13164] usb 5-1: New USB device found, idVendor=07d1, idProduct=3c0a, bcdDevice=e2.1d [ 883.441400][T13164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.450314][T13164] usb 5-1: Product: syz [ 883.454653][T13164] usb 5-1: Manufacturer: syz [ 883.459567][T13164] usb 5-1: SerialNumber: syz [ 883.475384][T13164] usb 5-1: config 0 descriptor?? [ 883.679797][T18982] usb 3-1: USB disconnect, device number 83 [ 883.747307][T13164] usb 5-1: USB disconnect, device number 98 [ 883.816301][ T2344] pvrusb2: Invalid write control endpoint [ 883.845516][T18980] usb 4-1: USB disconnect, device number 33 [ 883.925549][ T2344] pvrusb2: Invalid write control endpoint [ 883.933244][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 883.951877][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 883.962362][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 883.977747][ T2344] pvrusb2: Device being rendered inoperable [ 883.986454][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 884.052066][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 884.094724][ T2344] pvrusb2: Attached sub-driver cx25840 [ 884.109654][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 884.125718][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 886.422560][T19097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.448472][T19097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.792683][T19105] netlink: 'syz.7.3093': attribute type 46 has an invalid length. [ 886.801478][T19105] netlink: 55 bytes leftover after parsing attributes in process `syz.7.3093'. [ 886.856999][ T5938] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 886.894571][T19090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 887.003016][ T5938] usb 5-1: device descriptor read/64, error -71 [ 887.073417][T18931] hsr_slave_0: entered promiscuous mode [ 887.109361][T18931] hsr_slave_1: entered promiscuous mode [ 887.128137][T18931] debugfs: 'hsr0' already exists in 'hsr' [ 887.164445][T18931] Cannot create hsr debugfs directory [ 887.356962][ T5938] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 887.464172][ T5924] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 887.527717][ T5938] usb 5-1: device descriptor read/64, error -71 [ 887.628524][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 887.637259][ T5938] usb usb5-port1: attempt power cycle [ 887.651204][ T5924] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 887.674279][T13164] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 887.692623][ T5924] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 887.711803][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 887.751279][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 887.782961][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 887.797285][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 887.813599][ T5924] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 887.830182][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.846147][ T2980] IPVS: stop unused estimator thread 0... [ 887.864438][T13164] usb 3-1: device descriptor read/64, error -71 [ 887.905008][ T5924] usb 4-1: config 0 descriptor?? [ 887.983464][T19132] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3098'. [ 887.996390][ T5938] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 888.038508][ T5938] usb 5-1: device descriptor read/8, error -71 [ 888.138020][T13164] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 888.160397][ T5924] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 888.187223][ T5924] usb 4-1: USB disconnect, device number 34 [ 888.226281][ T5924] usblp0: removed [ 888.302154][ T5938] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 888.310282][T13164] usb 3-1: device descriptor read/64, error -71 [ 888.363358][ T5938] usb 5-1: device descriptor read/8, error -71 [ 888.418335][T13164] usb usb3-port1: attempt power cycle [ 888.444453][T18931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 888.461892][T18931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 888.482295][T18931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 888.489207][ T5938] usb usb5-port1: unable to enumerate USB device [ 888.505367][T18931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 888.644283][T18931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.658723][ T5924] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 888.680290][T18931] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.701704][T10512] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.708954][T10512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.730697][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.737940][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.771744][T13164] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 888.798124][T13164] usb 3-1: device descriptor read/8, error -71 [ 888.817095][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 888.824374][ T5924] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 888.836740][ T5924] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 888.853190][T18931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 888.864074][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 888.874983][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 888.902747][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 888.925197][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 888.948708][T18931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.951447][ T5924] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 888.981410][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.996264][ T5924] usb 4-1: config 0 descriptor?? [ 889.047027][T13164] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 889.052623][T18931] veth0_vlan: entered promiscuous mode [ 889.069116][T13164] usb 3-1: device descriptor read/8, error -71 [ 889.071697][T18931] veth1_vlan: entered promiscuous mode [ 889.145840][T18931] veth0_macvtap: entered promiscuous mode [ 889.163327][T18931] veth1_macvtap: entered promiscuous mode [ 889.187357][T13164] usb usb3-port1: unable to enumerate USB device [ 889.193257][T18931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.217430][T18931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.225617][ T5924] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 889.265160][T11836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.286089][T11836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.305017][T11836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.325976][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.477518][T11838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.503698][T11838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.623606][T10512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.639742][T10512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.966931][T18983] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 890.071920][ T5924] usb 4-1: USB disconnect, device number 35 [ 890.100048][ T5924] usblp0: removed [ 890.130281][T18983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.163505][T18983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.399345][T18983] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 890.425581][T18983] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 890.458997][T18983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.502827][T18983] usb 5-1: config 0 descriptor?? [ 890.956386][T18983] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 890.976972][T13164] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 891.182751][T13164] usb 3-1: not running at top speed; connect to a high speed hub [ 891.211660][T18983] usb 5-1: USB disconnect, device number 103 [ 891.228294][T13164] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 891.241796][T13164] usb 3-1: config 0 has no interface number 0 [ 891.249134][T13164] usb 3-1: config 0 interface 1 has no altsetting 0 [ 891.315451][T13164] usb 3-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=58.e0 [ 891.326881][T13164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.355275][T13164] usb 3-1: Product: syz [ 891.372339][T13164] usb 3-1: Manufacturer: syz [ 891.392656][T13164] usb 3-1: SerialNumber: syz [ 891.414681][T13164] usb 3-1: config 0 descriptor?? [ 893.734829][T19224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.818502][T18991] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 893.926508][T13164] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 893.942923][T13164] usb 3-1: USB disconnect, device number 88 [ 893.991050][T18991] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 894.008892][T18991] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 894.014661][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.055202][T18991] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 894.084054][T18991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.140819][T19237] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 894.151271][T18991] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 894.396614][ T979] usb 4-1: USB disconnect, device number 36 [ 895.014219][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3117'. [ 895.027142][T19244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3117'. [ 895.047974][T19244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3117'. [ 895.190736][T19248] loop2: detected capacity change from 0 to 7 [ 895.199558][ T5986] Dev loop2: unable to read RDB block 7 [ 895.207882][ T5986] loop2: unable to read partition table [ 895.226547][ T5986] loop2: partition table beyond EOD, truncated [ 895.248523][T19248] Dev loop2: unable to read RDB block 7 [ 895.256201][T19248] loop2: unable to read partition table [ 895.262328][T19248] loop2: partition table beyond EOD, truncated [ 895.273648][T19248] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 895.434518][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 895.575842][T19259] netdevsim netdevsim4: Direct firmware load for x failed with error -2 [ 895.588662][T19259] netdevsim netdevsim4: Falling back to sysfs fallback for: x [ 895.707120][ T979] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 895.856922][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 895.858997][T19265] No buffer was provided with the request [ 895.877636][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.901854][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.921496][ T979] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 895.924932][T19265] trusted_key: encrypted_key: insufficient parameters specified [ 895.947591][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.964884][ T979] usb 2-1: config 0 descriptor?? [ 896.517951][ T979] savu 0003:1E7D:2D5A.003C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 896.878041][T18991] usb 2-1: USB disconnect, device number 103 [ 897.601255][T18983] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 898.306998][T18983] usb 5-1: Using ep0 maxpacket: 16 [ 898.316995][T18983] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 898.325235][T18983] usb 5-1: config 0 has no interface number 0 [ 898.346250][T18983] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 898.356022][T18983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.364557][T18983] usb 5-1: Product: syz [ 898.369185][T18983] usb 5-1: Manufacturer: syz [ 898.399350][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'. [ 898.413538][T18983] usb 5-1: SerialNumber: syz [ 898.504796][T18983] usb 5-1: config 0 descriptor?? [ 898.512955][T19296] loop2: detected capacity change from 0 to 7 [ 898.523685][T19296] Dev loop2: unable to read RDB block 7 [ 898.525257][T18983] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 898.540354][T19296] loop2: unable to read partition table [ 898.546298][T19296] loop2: partition table beyond EOD, truncated [ 898.555136][T19296] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 898.679251][T19299] geneve2: entered promiscuous mode [ 898.689673][ T2980] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 48783 - 0 [ 898.699017][ T2980] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 48783 - 0 [ 898.708340][ T2980] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 48783 - 0 [ 898.718708][ T2980] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 48783 - 0 [ 899.690780][T18983] gspca_spca1528: reg_w err -110 [ 899.876974][T18983] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 900.461381][T13164] usb 5-1: USB disconnect, device number 104 [ 900.629305][T19322] syz_tun: entered promiscuous mode [ 900.648454][T19322] batadv_slave_0: entered promiscuous mode [ 900.685995][T19322] debugfs: 'hsr1' already exists in 'hsr' [ 900.732242][T19322] Cannot create hsr debugfs directory [ 900.750364][T19322] hsr1: entered allmulticast mode [ 900.758671][T19322] syz_tun: entered allmulticast mode [ 900.763992][T19322] batadv_slave_0: entered allmulticast mode [ 900.998631][ T979] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 901.166866][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 901.181223][ T979] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 901.194525][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.220103][ T979] usb 4-1: config 0 has no interface number 0 [ 901.226876][T13164] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 901.229186][ T979] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 901.244732][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.253240][ T979] usb 4-1: Product: syz [ 901.257820][ T979] usb 4-1: Manufacturer: syz [ 901.262479][ T979] usb 4-1: SerialNumber: syz [ 901.277567][ T979] usb 4-1: config 0 descriptor?? [ 901.286639][ T979] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 901.387140][T13164] usb 3-1: Using ep0 maxpacket: 32 [ 901.402754][T13164] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 901.411220][T13164] usb 3-1: config 0 has no interface number 0 [ 901.419590][T13164] usb 3-1: config 0 interface 89 has no altsetting 0 [ 901.428494][T13164] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 901.441172][T13164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.460415][T13164] usb 3-1: Product: syz [ 901.473369][T13164] usb 3-1: Manufacturer: syz [ 901.493113][T19328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.503156][T19328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.572838][T13164] usb 3-1: SerialNumber: syz [ 901.593332][ T979] usb 4-1: USB disconnect, device number 37 [ 901.597156][T19336] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3140'. [ 901.663906][T13164] usb 3-1: config 0 descriptor?? [ 901.734648][T13164] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 901.816961][T13164] em28xx 3-1:0.89: Video interface 89 found: bulk [ 902.403277][T13164] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 902.703780][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 903.037005][T18991] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 903.209022][T18991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.220797][T18991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.221916][T19330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.231784][T18991] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 903.294765][T18991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.305011][T19330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.322309][T18991] usb 5-1: config 0 descriptor?? [ 903.397570][T19330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.462527][T19330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.502921][T13164] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 903.511882][T13164] em28xx 3-1:0.89: board has no eeprom [ 903.541388][T19347] i2c i2c-0: Invalid block read size 255 [ 903.610598][T13164] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 903.628654][T13164] em28xx 3-1:0.89: analog set to bulk mode. [ 903.638761][ T5924] em28xx 3-1:0.89: Registering V4L2 extension [ 903.644923][T19349] loop2: detected capacity change from 0 to 7 [ 903.645879][T19349] Dev loop2: unable to read RDB block 7 [ 903.662308][T19349] loop2: unable to read partition table [ 903.669157][T13164] usb 3-1: USB disconnect, device number 89 [ 903.685504][T19349] loop2: partition table beyond EOD, truncated [ 903.716470][T19349] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 903.736731][T13164] em28xx 3-1:0.89: Disconnecting em28xx [ 903.776884][ T5924] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 903.818403][ T5924] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 903.832518][T18991] lg-g15 0003:046D:C222.003D: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 903.875071][ T5924] em28xx 3-1:0.89: No AC97 audio processor [ 903.902652][T19355] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3145'. [ 903.952739][ T5924] usb 3-1: Decoder not found [ 903.962641][ T5924] em28xx 3-1:0.89: failed to create media graph [ 903.965346][T19355] sit1: entered promiscuous mode [ 903.986858][ T5924] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 903.995852][T18991] usb 5-1: USB disconnect, device number 105 [ 904.058628][ T5924] em28xx 3-1:0.89: Registering snapshot button... [ 904.099386][ T5924] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input85 [ 904.139054][T19354] fido_id[19354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 904.163489][ T5924] em28xx 3-1:0.89: Remote control support is not available for this card. [ 904.194934][T13164] em28xx 3-1:0.89: Closing input extension [ 904.219762][T13164] em28xx 3-1:0.89: Deregistering snapshot button [ 904.343263][T13164] em28xx 3-1:0.89: Freeing device [ 905.046889][T18983] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 905.198228][T18983] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 905.209070][T18983] usb 5-1: config 1 has an invalid descriptor of length 43, skipping remainder of the config [ 905.219732][T18983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 905.249926][T18983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 209, changing to 11 [ 905.261699][T18983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17885, setting to 1024 [ 905.309807][T18983] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 905.355032][T18983] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 905.382965][T18983] usb 5-1: Product: syz [ 905.387873][T18983] usb 5-1: Manufacturer: syz [ 905.400692][T19369] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 905.420221][T18983] cdc_wdm 5-1:1.0: skipping garbage [ 905.447915][T18983] cdc_wdm 5-1:1.0: skipping garbage [ 905.477755][T18983] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 905.489436][T18983] cdc_wdm 5-1:1.0: Unknown control protocol [ 905.618922][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.625926][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.632194][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.638773][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.645070][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.651681][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.658074][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.664654][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.671686][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.678272][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.686979][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.693611][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.700077][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.706773][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.713100][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.719688][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.725921][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.732593][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.738883][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 905.745480][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 905.870224][ T5924] usb 5-1: USB disconnect, device number 106 [ 906.355524][T19425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3161'. [ 906.390975][T19425] unsupported nlmsg_type 40 [ 906.564681][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.582623][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.617366][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.630217][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.647255][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.691989][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.724626][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.762936][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.782795][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.853200][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.921619][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 906.977079][T18983] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 906.994915][T19431] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3162'. [ 907.151497][T18983] usb 2-1: Using ep0 maxpacket: 8 [ 907.163839][T18983] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 907.204279][T18983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.213193][T18982] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 907.239509][T18983] usb 2-1: config 0 descriptor?? [ 907.398403][T18982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.426921][T18982] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 907.436383][T18982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.514279][T18982] usb 5-1: config 0 descriptor?? [ 907.531282][T18982] pwc: Askey VC010 type 2 USB webcam detected. [ 907.662011][T19455] loop2: detected capacity change from 0 to 7 [ 907.673096][ T5986] Dev loop2: unable to read RDB block 7 [ 907.679007][ T5986] loop2: unable to read partition table [ 907.685061][ T5986] loop2: partition table beyond EOD, truncated [ 907.695410][T19455] Dev loop2: unable to read RDB block 7 [ 907.702967][T19455] loop2: unable to read partition table [ 907.712147][T19455] loop2: partition table beyond EOD, truncated [ 907.716860][ T5924] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 907.729044][T19455] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 907.876943][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 907.883776][ T5924] usb 4-1: config 5 has an invalid interface number: 206 but max is 1 [ 907.907111][ T5924] usb 4-1: config 5 has an invalid interface number: 157 but max is 1 [ 907.915699][ T5924] usb 4-1: config 5 has no interface number 0 [ 907.921979][ T5924] usb 4-1: config 5 has no interface number 1 [ 907.928732][ T5924] usb 4-1: config 5 interface 206 has no altsetting 0 [ 907.934399][T18982] pwc: recv_control_msg error -32 req 02 val 2b00 [ 907.935590][ T5924] usb 4-1: config 5 interface 157 has no altsetting 0 [ 907.960186][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=66.9d [ 907.960336][T18982] pwc: recv_control_msg error -32 req 02 val 2700 [ 907.980511][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.982624][T18982] pwc: recv_control_msg error -32 req 02 val 2c00 [ 907.991269][ T5924] usb 4-1: Product: syz [ 907.999127][T18982] pwc: recv_control_msg error -32 req 04 val 1000 [ 908.018280][T18982] pwc: recv_control_msg error -32 req 04 val 1300 [ 908.024835][ T5924] usb 4-1: Manufacturer: syz [ 908.035891][ T5924] usb 4-1: SerialNumber: syz [ 908.037073][T18982] pwc: recv_control_msg error -32 req 04 val 1400 [ 908.050125][T18982] pwc: recv_control_msg error -32 req 02 val 2000 [ 908.074015][T18982] pwc: recv_control_msg error -32 req 02 val 2100 [ 908.098519][T18982] pwc: recv_control_msg error -32 req 04 val 1500 [ 908.111697][T18982] pwc: recv_control_msg error -32 req 02 val 2500 [ 908.124520][T18982] pwc: recv_control_msg error -32 req 02 val 2400 [ 908.147598][T18982] pwc: recv_control_msg error -32 req 02 val 2600 [ 908.155000][T18982] pwc: recv_control_msg error -32 req 02 val 2900 [ 908.162806][T18982] pwc: recv_control_msg error -32 req 02 val 2800 [ 908.173906][T18982] pwc: recv_control_msg error -32 req 04 val 1100 [ 908.196979][T18982] pwc: recv_control_msg error -32 req 04 val 1200 [ 908.217482][T18982] pwc: Registered as video103. [ 908.224860][T18982] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input86 [ 908.287576][ T5924] usb 4-1: USB disconnect, device number 38 [ 908.311306][T19469] fuse: Unknown parameter 'rZ4$NX0200' [ 908.377190][T18982] usb 5-1: USB disconnect, device number 107 [ 909.188361][T18983] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 909.203058][T18983] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 909.225184][T18983] asix 2-1:0.0: probe with driver asix failed with error -71 [ 909.245790][T18983] usb 2-1: USB disconnect, device number 104 [ 909.536914][T18980] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 909.687033][T18980] usb 4-1: device descriptor read/64, error -71 [ 909.926977][T18980] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 910.306916][ T979] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 910.465353][T19508] loop2: detected capacity change from 0 to 7 [ 910.473270][T19508] Dev loop2: unable to read RDB block 7 [ 910.480161][T19508] loop2: unable to read partition table [ 910.486667][T19508] loop2: partition table beyond EOD, truncated [ 910.511750][ T979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.522002][T18980] usb 4-1: device descriptor read/64, error -71 [ 910.530753][ T979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.555435][T19505] random: crng reseeded on system resumption [ 910.586535][ T979] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 910.596817][T19508] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 910.628768][ T979] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 910.643627][T18980] usb usb4-port1: attempt power cycle [ 910.727018][ T979] usb 2-1: config 1 interface 1 has no altsetting 0 [ 910.767098][ T979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 910.812515][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.873162][ T979] usb 2-1: Product: syz [ 910.907036][ T979] usb 2-1: Manufacturer: syz [ 910.958454][ T979] usb 2-1: SerialNumber: syz [ 910.996203][ T979] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 911.021178][T18980] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 911.102459][T18980] usb 4-1: device descriptor read/8, error -71 [ 911.214167][ T979] usb 2-1: USB disconnect, device number 105 [ 911.407205][T18980] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 911.430462][T18980] usb 4-1: device descriptor read/8, error -71 [ 911.516878][T18983] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 911.547530][T18980] usb usb4-port1: unable to enumerate USB device [ 911.678646][T18983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.689239][T18983] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 911.712561][T18983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.748041][T18983] usb 3-1: config 0 descriptor?? [ 911.773751][T18983] pwc: Askey VC010 type 2 USB webcam detected. [ 912.106947][T13164] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 912.173863][T18983] pwc: recv_control_msg error -32 req 02 val 2b00 [ 912.256975][T13164] usb 2-1: Using ep0 maxpacket: 32 [ 912.263965][T13164] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 912.272284][T13164] usb 2-1: config 0 has no interface number 0 [ 912.279527][T13164] usb 2-1: config 0 interface 106 has no altsetting 0 [ 912.291232][T13164] usb 2-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 912.301224][T13164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.309297][T13164] usb 2-1: Product: syz [ 912.313465][T13164] usb 2-1: Manufacturer: syz [ 912.318128][T13164] usb 2-1: SerialNumber: syz [ 912.325146][T13164] usb 2-1: config 0 descriptor?? [ 912.335612][T13164] cdc_phonet 2-1:0.106: probe with driver cdc_phonet failed with error -22 [ 912.383435][T18983] pwc: recv_control_msg error -71 req 02 val 2c00 [ 912.400476][T19544] __nla_validate_parse: 56 callbacks suppressed [ 912.400495][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3194'. [ 912.434867][T18983] pwc: recv_control_msg error -71 req 04 val 1000 [ 912.445121][T18983] pwc: recv_control_msg error -71 req 04 val 1300 [ 912.453309][T18983] pwc: recv_control_msg error -71 req 04 val 1400 [ 912.460728][T18980] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 912.469152][T18983] pwc: recv_control_msg error -71 req 02 val 2000 [ 912.476264][T18983] pwc: recv_control_msg error -71 req 02 val 2100 [ 912.483591][T18983] pwc: recv_control_msg error -71 req 04 val 1500 [ 912.490698][T18983] pwc: recv_control_msg error -71 req 02 val 2500 [ 912.502911][T18983] pwc: recv_control_msg error -71 req 02 val 2400 [ 912.517148][T18983] pwc: recv_control_msg error -71 req 02 val 2600 [ 912.529342][T18983] pwc: recv_control_msg error -71 req 02 val 2900 [ 912.541180][T18982] usb 2-1: USB disconnect, device number 106 [ 912.556034][T18983] pwc: recv_control_msg error -71 req 02 val 2800 [ 912.566154][T18983] pwc: recv_control_msg error -71 req 04 val 1100 [ 912.578343][T18983] pwc: recv_control_msg error -71 req 04 val 1200 [ 912.587227][T18983] pwc: Registered as video103. [ 912.595911][T18983] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87 [ 912.646682][T18983] usb 3-1: USB disconnect, device number 90 [ 912.653356][T18980] usb 4-1: Using ep0 maxpacket: 32 [ 912.670647][T18980] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 912.690122][T18980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.718717][T18980] usb 4-1: config 0 descriptor?? [ 912.729586][T18980] gspca_main: sunplus-2.14.0 probing 041e:400b [ 913.302554][T19558] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 913.309101][T19558] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 913.320185][T19558] vhci_hcd vhci_hcd.0: Device attached [ 913.507650][ T5924] vhci_hcd: vhci_device speed not set [ 913.544883][T18980] gspca_sunplus: reg_w_riv err -71 [ 913.550254][T18980] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 913.567258][T13164] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 913.578661][ T5924] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 913.595669][T18980] usb 4-1: USB disconnect, device number 43 [ 913.740887][T13164] usb 2-1: not running at top speed; connect to a high speed hub [ 913.758710][T13164] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 913.785319][T13164] usb 2-1: config 1 interface 0 has no altsetting 0 [ 913.794483][T13164] usb 2-1: New USB device found, idVendor=056a, idProduct=0011, bcdDevice= 0.40 [ 913.806591][T13164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.814994][T13164] usb 2-1: Product: 앗ｼ旀秮炙ῠꨕ蒦ﰴꩲづꢛ䍴똅긝糆믞栭몕퇥湰ྯ裫Ỗ荁橀 [ 913.827086][T13164] usb 2-1: Manufacturer: ᔊ쒥玐攬矐晞䏶䬣㝨タⴭ㣊♧㫎쥥ନ뿒츙⤆훸䛵ྠꮌ倒酊䠮ꘝ鴁ੂ橢鎱붏昖⽳ [ 913.940690][T13164] usb 2-1: SerialNumber: 蛹歹䒈斲啘뉅섶爠䇒ﵶⶮ됮፿槕值ຮؒ쵺蹜彪⸚짡蚷ぱᄠ讜ᇛ愗ꎡᄙ鬙Ձ஼꧌무렐뢺祷棩唟榿Q댑뷐褴平Θ꽃嫅 [ 914.250355][T19563] vhci_hcd: connection reset by peer [ 914.270212][T13164] usbhid 2-1:1.0: can't add hid device: -71 [ 914.277016][ T5938] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 914.277142][T11836] vhci_hcd: stop threads [ 914.290002][T13164] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 914.319833][T13164] usb 2-1: USB disconnect, device number 107 [ 914.326304][T11836] vhci_hcd: release socket [ 914.328693][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 914.336833][T11836] vhci_hcd: disconnect device [ 914.376440][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3205'. [ 914.392244][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 914.403381][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3205'. [ 914.438866][ T5938] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 914.450759][ T5938] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 914.467252][ T5938] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 914.487510][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.510474][T19573] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 914.532600][ T5938] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.731835][ T5938] usb 5-1: USB disconnect, device number 108 [ 914.766884][T18980] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 914.949298][T18980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.962016][T18980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.017010][T18980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 915.030438][T18980] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 915.040372][T18980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.052269][T18980] usb 4-1: config 0 descriptor?? [ 915.464156][T18980] plantronics 0003:047F:FFFF.003E: invalid report_size 1725011497 [ 915.475876][T18980] plantronics 0003:047F:FFFF.003E: item 0 4 1 7 parsing failed [ 915.487680][T18980] plantronics 0003:047F:FFFF.003E: parse failed [ 915.495215][T18980] plantronics 0003:047F:FFFF.003E: probe with driver plantronics failed with error -22 [ 915.664119][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3210'. [ 916.376074][T19612] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3211'. [ 916.638332][T18980] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 916.817245][T18980] usb 2-1: Using ep0 maxpacket: 8 [ 916.843252][T18980] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 916.867767][T19621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3214'. [ 916.880680][T18980] usb 2-1: config 0 has no interface number 0 [ 916.892237][T18980] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 916.901950][T18980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.981162][T18980] usb 2-1: Product: syz [ 916.993477][T18980] usb 2-1: Manufacturer: syz [ 917.008841][T18980] usb 2-1: SerialNumber: syz [ 917.019829][T18980] usb 2-1: config 0 descriptor?? [ 917.259636][T19612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.282121][T19612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.364344][T18980] usb 4-1: USB disconnect, device number 44 [ 917.571137][T19636] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3217'. [ 917.695613][T19641] PKCS7: Unknown OID: [5] (bad) [ 917.701503][T19641] PKCS7: Only support pkcs7_signedData type [ 918.036879][ T5938] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 918.199932][ T5938] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 918.212141][ T5938] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 918.234656][ T5938] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 918.261749][ T5938] usb 4-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.290486][ T5938] usb 4-1: config 1 interface 0 has no altsetting 0 [ 918.300556][ T5938] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 918.310734][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.319213][ T5938] usb 4-1: Product: syz [ 918.323604][ T5938] usb 4-1: Manufacturer: syz [ 918.328705][ T5938] usb 4-1: SerialNumber: syz [ 918.345432][T19643] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 918.354332][T19643] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 918.537599][T19651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3222'. [ 918.590916][ T5938] rtl8150 4-1:1.0: couldn't find required endpoints [ 918.609545][ T5938] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 918.632839][ T5938] usb 4-1: USB disconnect, device number 45 [ 918.717035][ T5924] vhci_hcd: vhci_device speed not set [ 918.729450][T18980] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 918.974200][T18980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.018272][T18980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 919.047347][T19656] netlink: 'syz.4.3223': attribute type 1 has an invalid length. [ 919.055172][T18980] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 919.095154][T19656] bond1: entered promiscuous mode [ 919.101432][T19656] bond1: entered allmulticast mode [ 919.117572][T18980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.119780][T19656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.139710][T18980] usb 3-1: config 0 descriptor?? [ 919.203996][T19657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 919.222051][T19657] bond2: entered promiscuous mode [ 919.227487][T19657] bond2: entered allmulticast mode [ 919.233570][T19657] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 919.391047][ T5938] usb 2-1: USB disconnect, device number 108 [ 919.489205][T19662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 919.655791][T18980] kye 0003:0458:5015.003F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 919.743165][T18980] kye 0003:0458:5015.003F: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 919.765372][T18980] kye 0003:0458:5015.003F: tablet-enabling feature report not found [ 919.886249][T18980] kye 0003:0458:5015.003F: tablet enabling failed [ 919.892840][T18983] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 920.060211][T18980] usb 3-1: USB disconnect, device number 91 [ 920.157392][ T5938] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 920.164732][T19669] fido_id[19669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 920.262570][T18983] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 920.273944][T18983] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 920.315455][T18983] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 920.356821][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 920.362547][T18983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.395822][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.428869][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 920.463801][ T5938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 920.517918][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.614213][T19666] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 920.628926][T18983] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 920.910293][ T5938] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 920.942970][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.999676][T18983] usb 4-1: USB disconnect, device number 46 [ 921.005719][ T5938] usb 2-1: Product: syz [ 921.027208][ T5938] usb 2-1: Manufacturer: syz [ 921.042807][ T5938] usb 2-1: SerialNumber: syz [ 921.158303][ T5938] usb 2-1: config 0 descriptor?? [ 921.375087][ T5938] mcba_usb 2-1:0.0: Can't find endpoints [ 921.511237][T19679] netem: change failed [ 921.782287][T19685] loop2: detected capacity change from 0 to 7 [ 921.794708][T19685] Dev loop2: unable to read RDB block 7 [ 921.850137][T19685] loop2: unable to read partition table [ 921.866072][T19685] loop2: partition table beyond EOD, truncated [ 921.907636][T19685] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 922.753284][T19699] input input88: cannot allocate more than FF_MAX_EFFECTS effects [ 923.605123][ T5938] usb 2-1: USB disconnect, device number 109 [ 924.006001][T19711] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 924.086910][ T5938] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 924.307488][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 924.315869][ T5938] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 924.328555][ T5938] usb 2-1: config 0 has no interface number 0 [ 924.334786][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 924.350118][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 924.363570][ T5938] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 924.377079][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 924.395124][ T5938] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 924.417950][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.434491][ T5938] usb 2-1: config 0 descriptor?? [ 924.455739][ T5938] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 924.547116][ T5924] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 924.778970][T18986] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 924.892011][T18991] usb 2-1: USB disconnect, device number 110 [ 924.926030][T18991] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 924.956875][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 924.973634][ T5924] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 924.995203][ T5924] usb 4-1: config 2 has no interface number 0 [ 925.021445][ T5924] usb 4-1: config 2 interface 31 has no altsetting 0 [ 925.037224][T18986] usb 5-1: device descriptor read/64, error -71 [ 925.046590][ T5924] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 925.065753][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.081051][ T5924] usb 4-1: Product: syz [ 925.091726][ T5924] usb 4-1: Manufacturer: syz [ 925.104924][ T5924] usb 4-1: SerialNumber: syz [ 925.139957][ T5924] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 925.330130][T18986] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 925.588708][T18986] usb 5-1: device descriptor read/64, error -71 [ 925.707118][T18986] usb usb5-port1: attempt power cycle [ 926.106994][T18986] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 926.137346][T18986] usb 5-1: device descriptor read/8, error -71 [ 926.187635][ T5924] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 926.375196][ T5924] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 926.388688][T18986] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 926.396511][ T5924] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 926.409520][ T5924] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 926.422302][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.440754][T18986] usb 5-1: device descriptor read/8, error -71 [ 926.454264][T19737] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 926.473728][ T5924] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 926.557648][T18986] usb usb5-port1: unable to enumerate USB device [ 926.677119][ T5924] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 926.698995][T18982] usb 2-1: USB disconnect, device number 111 [ 926.889806][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 926.903201][ T5924] usb 3-1: no configurations [ 926.925877][ T5924] usb 3-1: can't read configurations, error -22 [ 927.125906][T18986] usb 4-1: USB disconnect, device number 47 [ 927.505417][T19751] loop2: detected capacity change from 0 to 7 [ 927.514145][T19751] Dev loop2: unable to read RDB block 7 [ 927.520582][T19751] loop2: unable to read partition table [ 927.526441][T19751] loop2: partition table beyond EOD, truncated [ 927.536409][T19751] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 927.669872][T18982] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 927.840190][T18982] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 927.849036][T18982] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 927.859856][T18982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 927.869191][T18982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 927.885266][T18982] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 927.896469][T18982] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 927.907858][T18982] usb 5-1: Product: syz [ 927.912742][T18982] usb 5-1: Manufacturer: syz [ 927.931788][T18982] cdc_wdm 5-1:1.0: skipping garbage [ 927.948395][T18982] cdc_wdm 5-1:1.0: skipping garbage [ 927.958474][T18982] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 927.968420][T18982] cdc_wdm 5-1:1.0: Unknown control protocol [ 928.582621][T15867] Bluetooth: hci0: command 0x0406 tx timeout [ 928.781182][T19777] loop2: detected capacity change from 0 to 7 [ 928.790082][ T5986] Dev loop2: unable to read RDB block 7 [ 928.804807][ T5986] loop2: unable to read partition table [ 928.815154][ T5986] loop2: partition table beyond EOD, truncated [ 928.841749][T19777] Dev loop2: unable to read RDB block 7 [ 928.858802][T19777] loop2: unable to read partition table [ 928.867043][T19777] loop2: partition table beyond EOD, truncated [ 928.917125][T19777] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 929.427185][T18986] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 929.579005][T18986] usb 2-1: config 0 interface 0 has no altsetting 0 [ 929.595093][T18986] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 929.608122][T18986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.631830][T18986] usb 2-1: config 0 descriptor?? [ 930.266024][T18986] uclogic 0003:5543:0003.0040: item fetching failed at offset 0/2 [ 930.287210][T18986] uclogic 0003:5543:0003.0040: parse failed [ 930.299586][T18986] uclogic 0003:5543:0003.0040: probe with driver uclogic failed with error -22 [ 930.333971][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3262'. [ 930.357816][T18980] usb 5-1: USB disconnect, device number 113 [ 930.375717][T19809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3262'. [ 930.444867][T19790] input: syz0 as /devices/virtual/input/input89 [ 930.461511][T19790] input: failed to attach handler leds to device input89, error: -6 [ 930.495353][T18982] usb 2-1: USB disconnect, device number 112 [ 930.887029][T19819] vlan0: entered promiscuous mode [ 930.894440][T19819] bridge0: entered promiscuous mode [ 930.904283][T19819] vlan0: entered allmulticast mode [ 930.912435][T19819] bridge0: entered allmulticast mode [ 931.371273][T19826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.386412][T19826] nfs: Unknown parameter ' ' [ 931.538707][T18980] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 931.727587][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.736999][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.809449][T18980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.826247][T18980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.848128][T18980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 931.891722][T18980] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 931.947149][T18980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.998100][T19832] netlink: 'syz.2.3269': attribute type 20 has an invalid length. [ 932.042207][T19832] IPv6: NLM_F_CREATE should be specified when creating new route [ 932.085947][T18980] usb 2-1: config 0 descriptor?? [ 932.096076][T19832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 932.103338][T19832] IPv6: NLM_F_CREATE should be set when creating new route [ 932.354548][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 932.602608][T18980] itetech 0003:048D:8595.0041: item fetching failed at offset 3/7 [ 932.637006][T18986] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 932.669916][T18980] itetech 0003:048D:8595.0041: probe with driver itetech failed with error -22 [ 932.797090][T18986] usb 3-1: Invalid ep0 maxpacket: 32 [ 932.825583][ T5924] usb 2-1: USB disconnect, device number 113 [ 932.987232][T18986] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 933.217256][T18986] usb 3-1: Invalid ep0 maxpacket: 32 [ 933.225413][T18986] usb usb3-port1: attempt power cycle [ 933.257104][ T5938] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 933.260753][T19855] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3273'. [ 933.466903][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 933.496880][ T5938] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 933.509999][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.534975][ T5938] usb 5-1: config 0 descriptor?? [ 933.555243][T19859] fuse: Unknown parameter '0000000000000000000001400000000000000000000' [ 933.597266][T18986] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 933.631263][T18986] usb 3-1: Invalid ep0 maxpacket: 32 [ 933.766882][T18986] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 933.777341][ T5938] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 933.788138][ T5938] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 933.815024][ T5924] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 933.873730][T18986] usb 3-1: Invalid ep0 maxpacket: 32 [ 933.881291][T18986] usb usb3-port1: unable to enumerate USB device [ 933.897717][ T5938] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 934.016943][ T5924] usb 2-1: device descriptor read/64, error -71 [ 934.257029][ T5924] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 934.397051][ T5924] usb 2-1: device descriptor read/64, error -71 [ 934.529249][ T5924] usb usb2-port1: attempt power cycle [ 934.927178][ T5924] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 934.958882][ T5924] usb 2-1: device descriptor read/8, error -71 [ 935.196848][ T5924] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 935.218122][ T5924] usb 2-1: device descriptor read/8, error -71 [ 935.329043][ T5924] usb usb2-port1: unable to enumerate USB device [ 935.768794][T19851] delete_channel: no stack [ 935.811046][T19883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 936.715416][T19904] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3288'. [ 936.758994][T19904] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3288'. [ 937.909009][T19920] netlink: 'syz.1.3292': attribute type 8 has an invalid length. [ 938.151376][T19932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.160830][T18980] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 938.318561][T18980] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.336816][T18980] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.357225][T18980] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 938.366605][T18980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.380469][T18980] usb 2-1: Product: syz [ 938.384666][T18980] usb 2-1: Manufacturer: syz [ 938.389391][T18980] usb 2-1: SerialNumber: syz [ 938.457724][T18986] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 938.612122][T18980] usb 2-1: 0:2 : does not exist [ 938.623779][T18980] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 938.638635][T18986] usb 4-1: Using ep0 maxpacket: 16 [ 938.648930][T18986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.663082][T18980] usb 2-1: USB disconnect, device number 118 [ 938.665105][T18986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.706804][T18986] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 938.733040][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 938.751954][T18986] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 938.761147][T18986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.787332][T18986] usb 4-1: config 0 descriptor?? [ 939.208153][T19934] loop6: detected capacity change from 0 to 7 [ 939.234745][T19934] Dev loop6: unable to read RDB block 7 [ 939.251405][T19934] loop6: unable to read partition table [ 939.258837][T19934] loop6: partition table beyond EOD, truncated [ 939.273895][T19934] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 939.366860][T18986] usbhid 4-1:0.0: can't add hid device: -71 [ 939.389368][T18986] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 939.524528][T19955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 939.571738][T18986] usb 4-1: USB disconnect, device number 48 [ 939.782894][T18980] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 939.937332][T18980] usb 3-1: device descriptor read/64, error -71 [ 940.246890][T18980] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 940.426803][T18980] usb 3-1: device descriptor read/64, error -71 [ 940.607824][T18980] usb usb3-port1: attempt power cycle [ 941.017169][T18980] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 941.071677][T18980] usb 3-1: device descriptor read/8, error -71 [ 941.397231][T18980] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 941.537456][T19980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.674937][T18980] usb 3-1: device descriptor read/8, error -71 [ 941.867474][T18980] usb usb3-port1: unable to enumerate USB device [ 942.028065][T18982] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 942.554762][T18982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.688108][ T30] audit: type=1800 audit(1758051210.258:1269): pid=19993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3309" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 942.716928][T18982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 942.771864][T18982] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 942.816353][T18982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.853795][T18982] usb 2-1: config 0 descriptor?? [ 942.888871][T18982] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 942.915960][T18982] dvb-usb: bulk message failed: -22 (3/0) [ 942.957808][T18982] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 942.993720][T18982] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 943.012680][T18982] usb 2-1: media controller created [ 943.013279][T19998] fuse: Unknown parameter 'r' [ 943.059170][T18982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 943.203220][T18982] dvb-usb: bulk message failed: -22 (6/0) [ 943.285811][T18982] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 943.455274][T18982] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input90 [ 943.480738][T20010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.551996][T20010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.565385][T18982] dvb-usb: schedule remote query interval to 150 msecs. [ 943.628054][T18982] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 943.716933][T13164] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 943.787045][T18980] dvb-usb: bulk message failed: -22 (1/0) [ 943.800614][T18980] dvb-usb: error while querying for an remote control event. [ 943.821871][T18982] usb 2-1: USB disconnect, device number 119 [ 943.888612][T13164] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 943.925922][T18982] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 943.948553][T13164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.987550][T13164] usb 3-1: config 0 descriptor?? [ 944.219235][T13164] usbhid 3-1:0.0: can't add hid device: -71 [ 944.227035][T13164] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 944.314996][T13164] usb 3-1: USB disconnect, device number 102 [ 944.575479][T20026] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3316'. [ 944.586642][T20026] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3316'. [ 944.596007][T20026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3316'. [ 944.955355][T20033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 945.169342][T20032] fuse: Bad value for 'fd' [ 945.438569][T20035] kernel profiling enabled (shift: 6) [ 945.666641][T20039] cifs: Unknown parameter 'fd' [ 945.796997][T18982] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 945.971966][T18982] usb 3-1: Using ep0 maxpacket: 8 [ 946.000734][T18982] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 946.030577][T18982] usb 3-1: config 0 has no interface number 0 [ 946.061095][T18982] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 946.096695][T18982] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 946.217023][T18982] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 946.252088][T18982] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 946.347619][T18982] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 946.431357][T18982] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 946.491278][T18982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.519981][T18982] usb 3-1: Product: syz [ 946.529146][T18982] usb 3-1: Manufacturer: syz [ 946.533855][T18982] usb 3-1: SerialNumber: syz [ 946.554919][T18982] usb 3-1: config 0 descriptor?? [ 946.782691][T18982] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 946.803713][T18982] usb 3-1: USB disconnect, device number 103 [ 947.088906][T20081] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3332'. [ 947.735529][T20092] ALSA: mixer_oss: invalid OSS volume '' [ 948.207795][T13164] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 948.233941][T20097] kvm: pic: non byte write [ 948.241524][T20097] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=832 (1664 ns) > initial count (256 ns). Using initial count to start timer. [ 948.376825][T13164] usb 4-1: Using ep0 maxpacket: 8 [ 948.411402][T13164] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 948.611087][T13164] usb 4-1: config 179 has no interface number 0 [ 948.620146][T13164] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 948.631613][T13164] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 948.645693][T13164] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 948.657495][T13164] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 948.669358][T13164] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 948.684085][T13164] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 948.695017][T13164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.712744][T20091] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 949.227048][T13164] usb 4-1: USB disconnect, device number 49 [ 949.233070][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 949.233127][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 949.348000][T20113] loop2: detected capacity change from 0 to 7 [ 949.355165][T20113] Dev loop2: unable to read RDB block 7 [ 949.363291][T20113] loop2: unable to read partition table [ 949.371249][T20113] loop2: partition table beyond EOD, truncated [ 949.379920][T20113] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 949.451369][T20116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3339'. [ 949.768219][T20116] vimc link validate: Scaler:src:16x16 (0x33424752, 10, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 949.862987][T20128] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3344'. [ 950.004672][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'. [ 950.014619][T20130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3345'. [ 950.024074][T20130] netlink: 'syz.3.3345': attribute type 11 has an invalid length. [ 950.033391][T20130] netlink: 'syz.3.3345': attribute type 12 has an invalid length. [ 950.116458][T20132] dvmrp8: entered allmulticast mode [ 950.124252][T20132] dvmrp8: left allmulticast mode [ 950.370302][T20136] tipc: Started in network mode [ 950.375216][T20136] tipc: Node identity e2aa12031a3a, cluster identity 4711 [ 950.410939][T20136] tipc: Enabled bearer , priority 0 [ 950.465198][T20136] tipc: Disabling bearer [ 950.786836][ T5924] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 950.867058][T18980] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 950.974893][ T5924] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.016579][ T5924] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 951.037053][T18980] usb 4-1: Using ep0 maxpacket: 16 [ 951.057858][T18980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.070938][T18980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.085514][T18980] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 951.085732][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 951.124127][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.135933][ T5924] usb 3-1: Product: syz [ 951.140493][T18980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.141331][ T5924] usb 3-1: Manufacturer: syz [ 951.153589][ T5924] usb 3-1: SerialNumber: syz [ 951.170981][T18980] usb 4-1: config 0 descriptor?? [ 951.375740][T20149] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 951.805997][T20149] loop3: detected capacity change from 0 to 1 [ 951.813707][T20149] Dev loop3: unable to read RDB block 1 [ 951.819816][T20149] loop3: unable to read partition table [ 951.827199][T20149] loop3: partition table beyond EOD, truncated [ 951.841483][T20149] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 952.102027][T20149] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 952.226351][T20157] loop2: detected capacity change from 0 to 7 [ 952.234501][T20157] Dev loop2: unable to read RDB block 7 [ 952.242234][T20157] loop2: unable to read partition table [ 952.249306][T20157] loop2: partition table beyond EOD, truncated [ 952.255736][T20157] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 952.320302][ T5924] cdc_ncm 3-1:1.0: failed to get mac address [ 952.340161][ T5924] cdc_ncm 3-1:1.0: bind() failure [ 952.380285][ T5924] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 952.406629][ T5924] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 952.416098][ T5924] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 952.445915][ T5924] usb 3-1: USB disconnect, device number 104 [ 952.866078][T20162] gretap0: entered promiscuous mode [ 952.894871][T20161] gretap0: left promiscuous mode [ 952.968161][T20164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3354'. [ 953.357507][T20173] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3358'. [ 954.184775][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 954.270054][T18980] usbhid 4-1:0.0: can't add hid device: -71 [ 954.282818][T18980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 954.294273][T18980] usb 4-1: USB disconnect, device number 50 [ 954.461687][T20194] input input91: cannot allocate more than FF_MAX_EFFECTS effects [ 954.876053][T20197] program syz.2.3364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 955.126946][T18980] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 955.367498][T18980] usb 3-1: Using ep0 maxpacket: 16 [ 955.369604][T18980] usb 3-1: config 4 has an invalid interface number: 186 but max is 0 [ 955.369630][T18980] usb 3-1: config 4 has no interface number 0 [ 955.409675][T18980] usb 3-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=20.ed [ 955.419160][T18980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.427349][T18980] usb 3-1: Product: syz [ 955.431644][T18980] usb 3-1: Manufacturer: syz [ 955.436583][T18980] usb 3-1: SerialNumber: syz [ 955.444995][T18980] io_ti 3-1:4.186: required endpoints missing [ 956.315088][ T5924] usb 3-1: USB disconnect, device number 105 [ 956.636933][T13164] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 956.808869][T13164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 956.814427][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3374'. [ 956.821026][T13164] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 956.894858][T13164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.944731][T13164] usb 4-1: config 0 descriptor?? [ 956.961142][T20236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3375'. [ 956.972163][T20217] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 957.073804][T20240] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3377'. [ 957.205041][T20246] vlan2: entered promiscuous mode [ 957.215643][T20246] bridge0: entered promiscuous mode [ 957.418989][T13164] elan 0003:04F3:0755.0042: unknown main item tag 0x0 [ 957.438993][T13164] elan 0003:04F3:0755.0042: item fetching failed at offset 3/5 [ 957.511024][T13164] elan 0003:04F3:0755.0042: Hid Parse failed [ 957.528989][T13164] elan 0003:04F3:0755.0042: probe with driver elan failed with error -22 [ 957.603311][T18986] usb 4-1: USB disconnect, device number 51 [ 958.794190][T20290] netlink: 'syz.2.3390': attribute type 12 has an invalid length. [ 958.849037][T20290] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3390'. [ 958.936332][T20295] bridge_slave_0: left allmulticast mode [ 959.017237][T20295] bridge_slave_0: left promiscuous mode [ 959.034297][T20295] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.114329][T20295] bridge_slave_1: left allmulticast mode [ 959.219961][T20295] bridge_slave_1: left promiscuous mode [ 959.225867][T20295] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.372114][T20295] bond0: (slave bond_slave_0): Releasing backup interface [ 959.502997][T20295] bond0: (slave bond_slave_1): Releasing backup interface [ 959.621717][T20295] team0: Port device team_slave_0 removed [ 959.742268][T20295] team0: Port device team_slave_1 removed [ 959.774777][T20295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.886914][T20295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.057840][T20295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.082897][T20295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.163113][T20306] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3394'. [ 960.614252][T20322] delete_channel: no stack [ 961.303362][T20360] [ 961.305735][T20360] ============================================ [ 961.311889][T20360] WARNING: possible recursive locking detected [ 961.318058][T20360] syzkaller #0 Not tainted [ 961.322471][T20360] -------------------------------------------- [ 961.328618][T20360] syz.7.3406/20360 is trying to acquire lock: [ 961.334776][T20360] ffff88807aef8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 961.345774][T20360] [ 961.345774][T20360] but task is already holding lock: [ 961.353220][T20360] ffff88807aef8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 961.363040][T20360] and the lock comparison function returns 0: [ 961.369087][T20360] [ 961.369087][T20360] other info that might help us debug this: [ 961.377124][T20360] Possible unsafe locking scenario: [ 961.377124][T20360] [ 961.384565][T20360] CPU0 [ 961.387835][T20360] ---- [ 961.391105][T20360] lock(&dev_instance_lock_key#20); [ 961.396409][T20360] lock(&dev_instance_lock_key#20); [ 961.401715][T20360] [ 961.401715][T20360] *** DEADLOCK *** [ 961.401715][T20360] [ 961.409851][T20360] May be due to missing lock nesting notation [ 961.409851][T20360] [ 961.418154][T20360] 2 locks held by syz.7.3406/20360: [ 961.423325][T20360] #0: ffffffff8f539f48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 961.432285][T20360] #1: ffff88807aef8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 961.442530][T20360] [ 961.442530][T20360] stack backtrace: [ 961.448398][T20360] CPU: 1 UID: 0 PID: 20360 Comm: syz.7.3406 Not tainted syzkaller #0 PREEMPT(full) [ 961.448411][T20360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 961.448418][T20360] Call Trace: [ 961.448423][T20360] [ 961.448428][T20360] dump_stack_lvl+0x189/0x250 [ 961.448444][T20360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 961.448456][T20360] ? __pfx__printk+0x10/0x10 [ 961.448470][T20360] ? print_lock_name+0xde/0x100 [ 961.448483][T20360] print_deadlock_bug+0x28b/0x2a0 [ 961.448495][T20360] validate_chain+0x1a3f/0x2140 [ 961.448506][T20360] ? stack_trace_save+0x9c/0xe0 [ 961.448517][T20360] ? __pfx_stack_trace_save+0x10/0x10 [ 961.448529][T20360] __lock_acquire+0xab9/0xd20 [ 961.448544][T20360] ? __netdev_update_features+0xcb1/0x1be0 [ 961.448555][T20360] lock_acquire+0x120/0x360 [ 961.448568][T20360] ? __netdev_update_features+0xcb1/0x1be0 [ 961.448592][T20360] __mutex_lock+0x187/0x1350 [ 961.448608][T20360] ? __netdev_update_features+0xcb1/0x1be0 [ 961.448629][T20360] ? __lock_acquire+0xab9/0xd20 [ 961.448649][T20360] ? __netdev_update_features+0xcb1/0x1be0 [ 961.448662][T20360] ? __pfx___mutex_lock+0x10/0x10 [ 961.448675][T20360] __netdev_update_features+0xcb1/0x1be0 [ 961.448691][T20360] ? __pfx___netdev_update_features+0x10/0x10 [ 961.448703][T20360] ? __lock_acquire+0xab9/0xd20 [ 961.448717][T20360] ? __lock_acquire+0xab9/0xd20 [ 961.448733][T20360] netdev_change_features+0x72/0xd0 [ 961.448745][T20360] ? __pfx_netdev_change_features+0x10/0x10 [ 961.448756][T20360] ? __team_compute_features+0x23/0x4c0 [ 961.448770][T20360] ? __team_compute_features+0x456/0x4c0 [ 961.448782][T20360] ? __team_compute_features+0x23/0x4c0 [ 961.448795][T20360] team_device_event+0x400/0x600 [ 961.448808][T20360] notifier_call_chain+0x1b3/0x3e0 [ 961.448820][T20360] netdev_features_change+0x85/0xc0 [ 961.448829][T20360] ? __pfx_netdev_features_change+0x10/0x10 [ 961.448838][T20360] ? security_capable+0x7e/0x2e0 [ 961.448854][T20360] dev_ethtool+0x1536/0x19b0 [ 961.448869][T20360] ? __pfx_dev_ethtool+0x10/0x10 [ 961.448882][T20360] ? dev_load+0x21/0x1f0 [ 961.448892][T20360] dev_ioctl+0x392/0x1150 [ 961.448902][T20360] sock_do_ioctl+0x22c/0x300 [ 961.448915][T20360] ? __pfx_sock_do_ioctl+0x10/0x10 [ 961.448927][T20360] ? __lock_acquire+0xab9/0xd20 [ 961.448943][T20360] sock_ioctl+0x576/0x790 [ 961.448955][T20360] ? __pfx_sock_ioctl+0x10/0x10 [ 961.448967][T20360] ? __fget_files+0x2a/0x420 [ 961.448983][T20360] ? __fget_files+0x3a0/0x420 [ 961.448990][T20360] ? __fget_files+0x2a/0x420 [ 961.448998][T20360] ? bpf_lsm_file_ioctl+0x9/0x20 [ 961.449011][T20360] ? __pfx_sock_ioctl+0x10/0x10 [ 961.449023][T20360] __se_sys_ioctl+0xf9/0x170 [ 961.449036][T20360] do_syscall_64+0xfa/0x3b0 [ 961.449046][T20360] ? lockdep_hardirqs_on+0x9c/0x150 [ 961.449055][T20360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.449064][T20360] ? clear_bhb_loop+0x60/0xb0 [ 961.449074][T20360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.449083][T20360] RIP: 0033:0x7f625518eba9 [ 961.449095][T20360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.449104][T20360] RSP: 002b:00007f6255ffd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 961.449115][T20360] RAX: ffffffffffffffda RBX: 00007f62553d5fa0 RCX: 00007f625518eba9 [ 961.449122][T20360] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 961.449129][T20360] RBP: 00007f6255211e19 R08: 0000000000000000 R09: 0000000000000000 [ 961.449136][T20360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.449142][T20360] R13: 00007f62553d6038 R14: 00007f62553d5fa0 R15: 00007f62554ffa28 [ 961.449152][T20360]