last executing test programs: 46m39.78189328s ago: executing program 4 (id=694): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)=0x4) 46m39.602592784s ago: executing program 4 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x5, 0x32315258, 0x0, 0x0, [{0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x2}], 0x0, 0x0, 0x0, 0x1, 0x2}}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x113802, 0x0) r3 = gettid() ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x2, "e9d7c922ff149dac75b4faee3128e5bdf98c83c6a2cc84066a41969e148aa045", 0x38303553}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r6, 0x1) flock(r6, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, r3) tkill(r3, 0x13) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x1ab4496, &(0x7f0000000240)=ANY=[]) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x3}) 46m35.946258136s ago: executing program 4 (id=709): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r0, 0x6) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x2000, 0x103) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x1, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) (async) mknod$loop(&(0x7f0000000140)='./file7\x00', 0x2000, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6002adf700383aff00000000000000000000ffff0a010102ff02000000000000000000000000000102009078000000006000641a00003aff0000000000000000000000000000000000000000000000000006e7"], 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000100000128000480240001800b000100657874686472000014000280080006400000000105000200050000000900010073797a30000000000900020073797a32000000001400"], 0x7c}}, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) 46m35.685526886s ago: executing program 4 (id=713): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118000000000000002900000037"], 0x40}, 0x10) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x27, &(0x7f0000000000)=0x6, 0x4) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000240)={0xfbb, 0x87, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7ff, 0x7}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x8, 0x61, 0x7, 0x4, 0x7, 0xf, 0x0, 0x64, 0x5, 0x0, 0x8000, 0x0, 0x5c, 0xa0, 0xdf5, [0x7, 0x4]}}) read$FUSE(r0, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x888007, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_ad=', @ANYRESDEC=r11, @ANYBLOB=',allow_other,max_read=0x00000000000004b0,appraise,nomand,\x00'], 0x0, 0x0, &(0x7f0000000280)) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 46m34.726667578s ago: executing program 4 (id=716): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000140)) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700000009007a30000000004c00279e0000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007379e1b043d37a30000000000800054000000021100011800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214009d07800c000100636f"], 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r9, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r3, 0x7, r6, &(0x7f0000000000)={r2, r8, 0x8}) 46m33.776281457s ago: executing program 4 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 46m33.124857215s ago: executing program 32 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 37m30.313636451s ago: executing program 1 (id=3097): syz_open_dev$usbfs(0x0, 0x2, 0x404200) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000c80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x11c0, 0x5506, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0xe44, 0x4, 0x1, {0x22, 0x226}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0xf, 0x8}}}}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000001180)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x8, @string={0x8, 0x3, "6fdb4e6be9db"}}, &(0x7f0000001100)={0x0, 0x22, 0xd, {[@local=@item_012={0x0, 0x2, 0x7}, @main=@item_012={0x1, 0x0, 0x0, 'N'}, @main=@item_4={0x3, 0x0, 0xb, "cbb5468f"}, @local=@item_4={0x3, 0x2, 0x0, "f3e4020c"}]}}, &(0x7f0000001140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0xe98}}}}, &(0x7f0000001340)={0x2c, &(0x7f00000011c0)={0x20, 0xe, 0x2b, "fc4f9d77fc50924edb0274988c1477f5c0c4ed19c37dafd65cdb59eb5aadd54faf8550a5c636a52996bc65"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001280)={0x20, 0x1, 0x49, "35020f0a53372c5585da99d9a5694288d9581321b7ff5f866f80db57baff5d0fc91cc08e7617d091caac636668c45d3eb3ba999f610c13801b84d274143af74d908ee27910fb3aed76"}, &(0x7f0000001300)={0x20, 0x3, 0x1, 0x2}}) execveat(0xffffffffffffffff, &(0x7f0000001380)='./file0\x00', &(0x7f0000001540)={[&(0x7f00000013c0)=',\'-$3\x00', &(0x7f0000001400)='/dev/dlm-control\x00', &(0x7f0000001440)='}^@,\'\x00', &(0x7f0000001480)='team0\x00', &(0x7f00000014c0)='\x00', &(0x7f0000001500)='-.-/-@\x00']}, &(0x7f00000017c0)={[&(0x7f0000001580)='#@]\x00', &(0x7f00000015c0)='devlink\x00', &(0x7f0000001600)=')/,![\x00', &(0x7f0000001640)='-#+(^\x00', &(0x7f0000001680)='veth0_vlan\x00', &(0x7f00000016c0)='\x00', &(0x7f0000001700)='syztnl1\x00', &(0x7f0000001740)='&&\x00', &(0x7f0000001780)='team0\x00']}, 0x1000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000001840)={[{0x3, 0x1, 0x7, 0x0, 0x4, 0x8, 0x9, 0x6, 0x3, 0x3, 0x1, 0x95, 0xfffffffffffffffe}, {0x0, 0x1, 0xff, 0x4, 0xf3, 0x3, 0x3, 0x26, 0x5, 0xbd, 0x1, 0xfb, 0x1fa}, {0xfc32, 0x4, 0x5, 0xd, 0x1, 0xfc, 0x1, 0x9, 0x1, 0x5, 0x5, 0x0, 0x724d}]}) 37m27.48777192s ago: executing program 1 (id=3104): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r0, 0x0, 0x6, &(0x7f0000000180)='(\xb8!W\x82\x00'}, 0x30) r6 = socket(0x10, 0x3, 0x0) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0x100, 0xc, 0x8, 0x17f0}, {0x4, 0x1, 0x6, 0x6, 0x9, 0xa}, 0x8, 0x7fffffff, 0xedf}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9a0dda9318033136}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc97e282e19f569d9}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 37m26.621024671s ago: executing program 1 (id=3109): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x8f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$kcm(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)}, {&(0x7f0000000080)="bcc9b1557de1fed1f955144629ed4dcfda58d1b606fa77a7658dcf3c33679ea22502e3cff80000f5d43921bc111a262f295a8eb540", 0x35}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x24040001) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x42000000) r6 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3e, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x9bf\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) 37m22.897997643s ago: executing program 1 (id=3121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) socket$l2tp(0x2, 0x2, 0x73) socket$can_raw(0x1d, 0x3, 0x1) semget$private(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f00000004c0)={0x2, [0xb, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0xffff, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x2, 0x1, 0x0, 0x1}, {0x7ff, 0x6a, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x3, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x83b, &(0x7f0000000380)={0x0, 0x8011e, 0x2, 0x3, 0x4e, 0x0, r3}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456, {0x0, r10}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000080)=""/26) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) 37m19.65195948s ago: executing program 1 (id=3132): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xe4, 0xfc, 0xea, 0x8, 0xa257, 0x2013, 0x5448, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4c, 0x96, 0x78}}]}}]}}, 0x0) (async, rerun: 32) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x280800, 0x0) (rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000002000010029bd7000fedb"], 0x40}}, 0x40010) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) write$cgroup_int(r6, &(0x7f0000000100)=0xd4b4, 0x12) (async) splice(r4, 0x0, r3, 0x0, 0x409, 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @mcast2, [], "80ac97989e0ad479"}}}}}}}, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000100c0"]) 37m18.569196893s ago: executing program 1 (id=3137): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x18, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 37m17.918148375s ago: executing program 33 (id=3137): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x18, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 8.388909865s ago: executing program 2 (id=15243): r0 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockname$packet(r0, &(0x7f0000000540), &(0x7f0000000580)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x8, 0x1, 0x40, @local, @loopback, 0x700, 0x10, 0x1918c336, 0x2}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x2, 0x0, 0x4}, 0xfd}, 0x18) 7.864697101s ago: executing program 3 (id=15246): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000200)="952bb3e006"}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000480)=""/115) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="200050800500020002000000090001007ee5d52ffd000000080003000dac0f00"], 0x3c}}, 0x40000) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "be07dd3106cdc3726fef26b52c4845e0"}) 7.773377979s ago: executing program 3 (id=15247): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) dup(r3) close(r2) 7.67752589s ago: executing program 2 (id=15248): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f00000000c0)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x7a]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000100)={0x1c, 0x4e0cdd70e9af79cc, 0x4}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{&(0x7f00000003c0)=@llc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f00000009c0)=""/216, 0xd8}, {&(0x7f0000000840)=""/99, 0x63}], 0x7, &(0x7f00000002c0)}, 0x9}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x17d0, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x0, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r8, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) 7.660088279s ago: executing program 5 (id=15249): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000026c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000ffffffff3900000008000300a08195440a57209cc05b682c0fcd75ece91bc48d485831c0249503888426039533bd24c311195cd4569fe0e6236fdba6c3eb7cd87b3ec3a73a7768a2a07d3c6143e1441b9758ecc5a41849dd8c1da3b9c781a2741ab5a48b71f3c035fddc64f48c0afcbca0ac6149bea3ed968f6c0316a9949112bec9a810c963296c1fe7b1a4830beaaccda10ec92d6d02637e7f8dbc94fee9864a87df1dd63a4954f53b13067a1c58169295cb1ea68694ce9ccbd0318633364ea1c21b429814ee3474ae2e14a3756fe984", @ANYRES32=0x0, @ANYBLOB="0c00990003200000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000065}, 0x8004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendmsg$qrtr(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc, &(0x7f0000002640)=[{&(0x7f00000001c0)="9293dc047220fc697403666d0b76b070f5c4e58d6ade817e5d5eb380d1c443f6e50805e67938f5242d2913466a26cb57115664eac3a5ea84b72dc573452a86f359254a94e6f19eb24d713e596869ac3772bcece0ea8fe8b11f7e521e51ab044bb644f81aeaacaa0f3a2dc8c5cc61cd8f341a337215be6b0823a7e824eaebbf346abe2cbf75a7095052acc06f86f85998f7452286d3c06db30e9194524e3981b02514e41ec8bd64601159a50479dfdb5a93e1de03dcbc0242627cdca264c59c2ee52a5c006c3f4e0315882cda5033eb0700f616045426ad0b7a00f955454028182642", 0xe2}, {&(0x7f0000000300)="3d2a7e800171cd1627113256e167f8565b20e3c05d60d2800afbc1388a5484f9648ee88260aed1fa42f91cf9252cff07e69a518648d9af73c8dbdef63a8beaea33acf0e5d913d005e0896a063f421092f2dad466f0df41667894447a789211438de933d3ddd4791987c7150a37e804663d33696c55a0fa4799", 0x79}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000380)="7b736893511c2a2dca12427b4c8c42cde07c4edfcbdcf8a9eb8d204b71cf0f0bc882f555fe4a91aa3a634110cdfca7a105b9ba00ea5c95fc31b0252d624cf0d5fca3bfc5dee0aaa201386a9f570f9b2a23d7bca377d7a2f10df53545b2b9ad48e6456c9012117b2040908852b73ef2ce745650d668", 0x75}, {&(0x7f0000001640)="98d3dc181e47ab05c38fb2966b3595f2ee4a32a34c156bd1a4fcd17c821f55c4aa0a278c548fd64656ac530f97406a68c5df2f79fde2fd7ab77503c2155f36b30a7eb9ba9e460a49548ec501ff4943f413aaffc80c76e1106379f1ffb709c9c6666735e7ce9813f7e14d5d3f7d3168d50782eb25d7e13ddd53e0a6c25fe1f1b5aa51cc9163006143d06fa18eb163a8ea7a1c1b39b7645fdc9b8c4d064f01672012b53d8dca695603c07b7eca17f45d3fc88528084cb1902c0517a360a6c39578e94b35ca7f2594a7f52e8d4f5ebfc8a489199fa1c3f8dbc8dcdccfc5ac909b084c224d50724c3ea9e2074b4e5fa669fe269f0e1e1fea02e709f343a9d93b4a46f8d4559ea638e7c6a9cbc38064b0c1df52482a3bf587b0f8905f2221d89e49cab0f38ca7381c83a74643224f28df612b6ac4f66a2680686b031917f2e4302d0364ab71f71b1d2e36cbeb6ac69b7240b25767eec326b3f9ef1ad0df8e2f60528ea175e660d30a4dd2bc13a0073d6a61d2a991e4b565f6f1a8d1c1131ee4fcdf8c06507c038b2bb7f49417f60e9ef05f02508d21071a2d899bc4b5a9d314c6395f34804e99c728717af219d73baec2ac0030fe7345ad5d55dce87e63bb92b0b33af96203e3f961d56ae99c2decfc213ab5df35bffa424e6d34203b41ca122634cd9df448cf43d66e563c456f20e1d6be661b8e9d99ddb41a1f2531e7162a574f558b47ea80ed2ff5cb69ff4941f36ae584a939e4239b4ddaed7f64cbaedcfaadf38f78768c87e55cac9b4f25000182404b031b93e4b7d346a77e03e79a27cad16e219f09a923d4c84eb16faa2a035f506e94edfd29360eeba28d1cc1d2005d6ad985347f0c0bd1b9bd7fcd664bc4c55241d8d31833753edcf1ce8d8f2326922f0bddd01e38443b3c485424d0ab5f4e65a46c36ca7ae689a56f6a97da0c6ed5a469800a48bf4e2576dd2a8ab7a91d58ba4d0a33495a10a838d5f3e3188e457888126866e541ddc055372a45bee0ecfa86bbbce488dac4373e284b8f5e8dcdeed6e507abc722faa4923da3c2caf32dba11afe9b82e0033a3b30ae3894bbf2248f7d01b581c670233b8da9aa4fbfe0a889717dab44f37317e5bfae20d5fef0589e3cfcfde0464482ff4d01b0db32a6da59e360c2f1a398563ae39886b15d2909d8a8d6d506c0630f57d29aec951464091c9f70d2fbd299326bcd242f41883654da64842ea8ba3611dd5956e509c2683c23cbd21af707493bbc94a1da1ee3fe90d900234657b514ff9e62335f1ddb80388be99cfd33b45b8aca73f616c17b5db8d52ca4fdd2ee69814bf715ad45e757faf87fcd06fcd6e73471591ae0a18e6096fe65cc2f0931c645d7af4e894ea56f8a64b32a44c1b4b37cf6926f83d64a2ddcb878d0b39e813067b2cd33f419efd7e2df0267329b3e250834056f34d95deb96719452f3752f528a51da524bac5fa82cf4928cf8e9dc9c55810a059fd5f8eafbdc2917ade97489806e9459710f95c113f3fc2058ed947b2b663150b5cd8c651a1723c2b55fe5d10f4baea7ef88cf6a94e03a61b0ae949bb4a15a35a95df7c9e8fe6553ef8b0ab5889f226d18b360cee4bd24f82260d26f13b0b54f93afe792030b5cc36983cf859f067659a42a1f0c12959931ec849322496a065261d8b0483d4f6df38d97c5f1a81fb59ae0c961b152bfbe7b84d0664f584b74c8e1ca75fd2e9880d304f7bd93f2d05945e1555dcab5cb0bf2fdb23095b414e498277b711e927b12802c28560877317bd4bc9e8c3f1436ff3c3d6b3ce9dabeb966a194d0dd222967131bbe80207c7616ae1aaf7b23773b524797992629d617a11883d480a730be1b28eb5d07b8a1a8f3be617de4b8935787e7502b85b80d72f34d4f59dc74ae825466eccb1d3ec44f307d7d54f068062505cf55a553201c3fe9d74cab8ae3ea01f1fff3872ec7d7325af475694ea0436a7c0098d30e12ab484d534307b3b95d11ba12e878b5656e60c2662ad646c1fbf67c2fb50d1c25b0729f0d1af15328d4cb7c6e38ace7928a1c04f2e7864cb954ccb040ff6021085d6533d4dc78ffc69bb743dd143f16882ca19259d2b432b220fa7aabda1c40f94097722354d543eea3b5ee524ab2c73034164843a5f30ba99a8c181fc3e083d0c2eb37929637ec450430ebfd1f1bd4be35c1d466bc98ecdbc5a1f66e0ff295c491c581074f99100221ecf77140d95f7c0185662a5739340b1bf3d86feaa00074af34187794bbabc1611c284b75e16bed7acab6e7673f21cf43b0f986f21ae01572c9be6556db4096d9aa88094474f7ed71f69225839c53a7d88c9efae9d0238448e137fada6e543a8c7c7219fa0d6c9e813f91be52d8c8d7bd493213007cf3d0cb9fb17833b73b50d92fb9217faaee2b616f1a8e95da5be8091f2d2d1cdd48ac43d441be50ef4025b7ba10afcbfa25a9977fd24c983d37d483b0bf764de6ae2a48d1f135f9ca4635bd8dbdd42fa991dfffc6f1265d73d156843cf7dae6dde510aa4a78ba1c664b38f9087f95b789d22bf08876185c07e93ef4c2ac60dd756b2cf9ba9ab62122961b7456850b65cd869894fb0b725c9d63c5cd3ddff533816f0380f61d8da5d847d6863e74049840a887b62b18d50620fab008604865b6b2db36ac2421688c481c53e8bad40535823b6c9b9967c914c1feb7c22be21f926aaeddf5230f25fa04438465f3a57a47e188c53d3c9fa978cf26e7820463d2457fc57a11748ce1083f5d775a01b01ede2dbbb82ffc1d3ecd341f3185eeef0ed6d2cafa6b5b46672a20be45fa0b0f10a44b951fdeaed8c7179f9f939033caa982da1cc0f1d4c315544bf694f63dd397eef34c0c9b0b381c0c408c323c29ad72d14bdf52529ed40c17a09cb611f0ab2077de706f3caf4d6030591f9ff5a9497f05e8923f91245d52815bce84f6489fc0afe3fd87ce9c046d6a53d4b715ef026f17a6b6c730171e6047a08c178bbb902aa7fab19329d939c380a181e252ae5e37e51c117b62edbdbf0cf265fef0e46d67718b711108809aedf17913e1f5ef28e3f7db46dd221c90b76224c420a4b9ad32e8f1d6a0535b5d665f3e1f5f783e53902a5856380945b43455148097f3ba5fe9c3b16d3034c85be42039fea1384398b239ce433e81ee61640a0dcae8ec0df83383ceb04cf10d80ca038dd896c288f5e8e0c7cfedf116a9a3357bda1c10125db4b6ef689e00838325fe2d13a3ee2840e414d2d417ac4c737bc337916561e55b2d1dbf7740b17d2d69e66398a5c54f1db80db07ac4438e6d9e4f808ed75a065915792b9229af6370e59fc9204235a5beddb75e1e3659bfc20e27b0999234d3b32208a986b69e313d7bd418f70044738676f89d0b6bed92835629cbea7aead24405c1c73801f3e90619c6f6316ac1ad553adcdca87acba346cc00979488387aea8ea17e73ebd83d8eed54d5fa915e74bed0b4580567a670e8f34ea714a59dfc32ebd0c2d01c53222aca654fd498f84c10069c9ee819646620e82c3c8de75c0c48ce34752adec7f9b78635f8c58d14ce2d9aae32acb56ff0238ace47123e8a78033dda799cfd2a90b012725c536c2073f493347c597a029d649b555b946db5ae472f01c09b0403c97b40afd279275440f4320fd8b9d29c07d4578aa4b982a0d46fc1f3a2d049731c45853def242f0b24bfdbef85fc840e7288c531866e1680193d9dd1036aa94191dbde4eb3f2c5cbe256947de7fbd955623d451c70cf18f0efa40e5578fc480b2af2c3bf496bd024344149ee53f6d936514b9765857b27a3516e052eda546706d010a11fe54eaa674ada02356845b3f2e69dc68dd0ed865cee9f66db75fb2f30d03469a4c0996743ec342807f24e42fa10d127bcdb4ec58d55a391821daff099ff442251301e73c674e030a98b525ceb58a129ab0a196a46b201069c84e2f000bd6672b8eda69a6cee082d9630a1a642ded5153702e45716805db854a1bc9e426e8184c543fcdcb14e5080fd54ff1ce2753d755e6acb65254c8487f0b025aad01cc1d7d5533b8c0b96cd4099c380c1502ccf7af107fb343158e966cb58240d0781a886e2553a4c4ed0fd5270a51b16f5b50daf15e01954bb271f6453e528bd5672cc13b8a51694581ea7a1cec04d3fc678b942443e10c5e67d49ca75808d964ca746db5095d7b0cd523f15533d10be26d8de4861b987838e2a6ce2abcc2ed3e5305271ef84e121f9d36597f3e6d1d8c1c4365e359f4b744987e1f5ef4004423c002a982dfe360062d280806e3a886b93d0bb54b9e5c856feb10391bf1d672a8a7a3605ff959b77eef582b56e91ec8960f9b0a529dd834486afd9e8f0664d04c86da93a551b9beca32686fa573cbb11046346bdc1432b48d8fa0c84f62823c716a9fb637e13e7d02352e722baad6585ab0397902ee791c5f40ed497ca36c0ab62104f31d754642ba835fc2de324d236aa7c2cfdd286c2efea85ffff131bb92ed070f5ad819f176da5bf591f4d0dc7b4b52aca56b86227b778b7e0ab44af19c05c0bfdf721786d1beaa649394072048c18c56c7861cebc57ca0af01018cde6525ff2b72cfc548f4375d4ceeacaa7a5743612857ee2beadd211ade1bb10e02eecf3b487e597917f6fb89ad1d059d6193a937797902d9915e961d0e7bf6ac2919f4ba481db49f8902f91c8b348f9f4c16a112840c3d6dd1be8568e5c6e2b59b12d69a5636575b344c720cac7d1db4eb9472599955605a3d1194256c81908073d55104885a7fddfc6f1cdc93ab60048751f1fb7c3a66d978e3e82246973a79dad76430176507dd571feb40c3c6ad87bdd038a37257634cbbb8aac05fe40cf9fb314a52c00e241df53742e4b06fd4412389b940df654184cf43cba2a3759df62b8a7d18702afb9f3fe335e46088a6ed57079ed1b86ef0f2cacae74c41d0491648f1c1db15c5eddac1afb38b75d70b523d4ec176d91cd1d05b93a7a854912cfe364fbf702363e23f95305f0b95fb07b6e2fe555bd06dc23a85755dd02555750e77c55e1da52f8260559e33ba0e64aec8b80b87819ecf394c18c2e5a0eab5f0518d8a69a739a2058b80f15cbbc165044fd3272e19ff398f4b1378e5f12c0a721ef80e5474031b3444bb443fbd2e726438072c135dbad4f8db636b5a2c16ae9d377730f8955cdb34c091f6d2414e9c80594271e6ff3b6902df11a08ae8de53cd11580957123718a91d0a85eb122f0458d8ab0b787fbd9c2357d183c7e3ac00d1577d94f359f717467f02d179f914cf1f734f853ab691721874bc9e24222ddd2b13f80d28a2c5d5e43634844d460e2002963ab29883abf3ee5908c058128b6708c6e42a55d1d0b135c24635ee9c3a4862087a82a16b158fea05bb0cbcdd154a45f952e7be143b4384480c4420c264b95c96573952b5e52c4b6d26d13ee3bb10f08d2ddd0ab2f46d9481414f1f318e97606ba9d0ec91fe27cdef69a20c3bd77373063da363769758b3a6410e01920e32a8d3b2a146ceed06f5c6a251624d38241f8e52fbe75c7b6e7382dd5d88e560a54eea4d18427da29a49057e165eb80730521c6b180b3d3692c5362c83ac3666fc07b9a6ca63f1689772e62f9eab5794bf84cbadfd1001d93c7a1fc6ed605a8e0d0558a86f906f945df0bf62eaf4bf914f49f94bb3b6521c98507094a7dfe8e9da64e8e331b19bfa29219fefdf44ac2b1b19fec884055992d010e3914aa4098260a92c509e6b35361236040611d89212d73f8d92f79a1295112e29e8f1f01d65bc379c00f0b976832b364e12f4916193ad", 0x1000}, {&(0x7f0000000400)="1814687ad2060c1cd95db4bbc7632ddcef53e4cec53df014e8f874c2ba9697ba684010f5e167621fc9ada136df29560493ff34e35993381c9fde27e784401f9910bfecfd70664b64d60b71b1e7ecd799d97c852bb4bb8c44c2fd729b51f7db75b7c07b1fa725caf7dbd2201d0b8026449a310a76c5ded8af1175d941d81bffc7fb3f660d9ddc2d", 0x87}, {&(0x7f00000004c0)="d9caf8f88bf8c15acbd5d218de8b211a76092c447d89a104ec4bc81d82b5352c435c11a88b6a32b2f1bc1e7862101e90bd3bb7ecbdf13b43e8b3a3462c24daf274b183f3c50a4103c3f6b628e267582e500953b727c044f8624c7c91", 0x5c}], 0x7, 0x0, 0x0, 0x41}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 6.5830749s ago: executing program 2 (id=15250): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x3009}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) gettid() 6.159319921s ago: executing program 3 (id=15251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_usb_connect(0x0, 0xc06, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000862c6b203b0904a10100010203010902f40b03000010000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x400, 0x2, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x80000001, 0x0, 0x9, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40808) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 5.985627145s ago: executing program 6 (id=15252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000f000092000040"]) 5.741740188s ago: executing program 6 (id=15253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETDEVNETNS(r0, 0xff08, 0x0) 5.614820231s ago: executing program 6 (id=15254): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x1}}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) r2 = syz_io_uring_setup(0x1510, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0xfffffffc, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x8e2f, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x101001) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0xfbf1a000, 0x8000], [0x7fff]], '\x00', [{0x0, 0x9}, {0x0, 0xa}, {0x0, 0x1efb660a}, {}, {0x1}, {}, {}, {0x0, 0x9}], '\x00', 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x000W'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.574760762s ago: executing program 2 (id=15255): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200)=0x7fff, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{&(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="45a02af77f7c9dc03497479adfc00235e7383abe86f81e7ab2afed1900c76eaafc1ce0bfffecd9d6ebe17eb35b9e8e7494957402153edd07dbe2b1060ac924a1a126a313366e7926220b31ceeac770d8186eadf88a45e3fd4177864d8652792c26", 0x61}, {&(0x7f0000000480)="d3f8aca23b64ce75f82013d5cd792cae", 0x10}, {&(0x7f0000000c80)="7703343d2b8d2c94bfc90a9b069f0148dbbc4e99638c54e438b50d6297b319fa7ca2510db185f458b15f18e6f42506c7f9682954ab328ba5138fd212611204723b897d88c7ac530aa6cbbf203a1c87fa5de73e3e59fbff9258b1fd0bcb5023b4795b06baf3e30d0736e676db7a19bbdf06bfc54bcd27e70ca425680a15c26d0fcd34036b347f15c7d8cc0a85453a1b89a3f6ce19e052afdca0e40e7d7311097e411aa511cac0934925a99e2850a597e71b0ec0989156bd528e2abf0f24e54dcaf8df191af051401646dd32f7aa953ff7bf42e90b0a1e675ea0fcdffdf81e987e7a9622beac91a7525441ffe28a7f2e910f49586012834a1fe2fe93b23cfeaa6599ce7612d2adce4678f27774b81d09a7fc1e5caa4666fe785a4727457e1ce7053120b928a27b1b6c22e8301a8844db9f05f6d308ff1771877644cf049e92286401a26e558aec04e45ff65925f6156bb50628aeb0e772fb402e210079fc87e3837834a20451c37669f6fdb5f34fdd99c5f3ef30624a91eadca61335c2bdcf1919421b90f2913c637529da9a3936b8cd0268149908f138a400ed3cbe038645cb4a372b0ebbcd134e3065f8b4374a16a0b1d5d6a4ef8f237e8a3252fa05d899ea39618d117a447fb255152e4d1cbf1dd156188e415a1e9be341f9e3025c6fe7fb6889df49e4208bf2c8a34127d67c75bc59b311debc9d6d93dc398d7cbe68829ea943be377160daf2f51cffdf53b129d880517a4d2a6e713b43db0d667a89f7fb1183dfcf63b40f8a9f1980eb3a7bec950d283d51881269ecf484909529a4cd27d9e17d7d218e52919dad9160e0d8973fcba06671e34eaaffdab2d822070e2b92e2b93a65da3e1306bb0939bd0618fecfbe40c6ce0690a6a8af1e045f4da768d8156745fce2e83eea9c3cbff92ae8c39712816b703c241ce27605fbecfb4b3a2a098ce59d61b445434accad5df9200e402832766a67b7cda5a6e2620380886ecb190cdc9098d29c2ab570a82d741f9379f1f926d9dfa12c8c577b7d3862de2c2c9e8b1cfa76d93463bc0d036847968b719f5f58f82a37d06893adb2bf9be886f3fd735822a87c30b6b986d8b5cd64006ab9b80457c9c81e2c811fdb0e0338fff3d05f6b953d7bae8782200d051010c9efba536dead9811b6d2b9cf97de358146b0fa44afbfe19babb403584721fa8d35e37223add8fa4d971739c41449dde82fcd999177844911cf177cc2a4cdb2518d38f0115e5ac403c8c6102307e3b23000401dffaef7081ac12ca984e1ee8918208de0b3b4dfcfa59c560e00bc497bc102898b5f0c0fa282801416c5e20e311b7f030313a9684d3b085716ccc265a800391b85cd57abc2b2d369ca49756535d2133bf093d3edb29bd79d1c8a66beb4438acbb0d8a196a1c04a1b53115b76f1aab2f94b22524ebae7e3450f9cc07ee8d61d5a8cb6d14c53d8500cd8b62e909b28937c9d31847b2ccfbbbe80c81de8e674f39cc47c97e9b487a7341af6cf7cd2009560c5ea1c5b3d95ef08065226974f70b3279999d510b6574e4116cc4d0fa58146d1f218306986bad97f5cdb143daa2477ca2f65aac3e6a96cf8e727b95f6c6b6024e54e641e7b5cc5fcc8532a4d6d32029566ed17899bbcadba5e2ed6bfa28b80e2c3e308302da6ea0975a2d77c3b6b95be95b885cdc4e8bf773f141eb9c2efcdcc9fe27d40ea52802b3198f662f0ea49aa96b9714d498da6b8faa29d33f5950c2d27e2adb0b62d3dd54a004e4fdbb35379a04052026191359b591c1d053afdb4b2e277dc63d87fe7aa7b11e1003aa45b5bb7a5086d931f1c901fd56c527fdcd8a071e35d5cb93e32ce2308fe272777da244a564b0194ff6b02b913af6fd22e04033f320a820c7d4d2eebfe8cfd5fa4ca8e12858189fe83c1bfd84cd6a00ff68ab91d191c788dbcd0792c32c5fb9814c12e177442b83c921671ece837ea7da0d0035a64d23745c9618ef69807fcdf5ba8662b9e924bd963c4e7fd98b43b59fc2da7dc358abfab529f5789f60d1c40e94c8b276392e9dbc96aed61ccd4d209715f17e24391800b6c0fe93b536deca1e2bd575e1776b652b97a0cfdd666a8b47e1339bbf50435510243b6dc02964f63f5d51a1cc6d9b5db7759e75a3bfec7680c41343d551021a7fde7439c155598d64d874001fe878ef65883fe705d10121ba9a76e7f610d45a89b76335ce24b0462a8f85e7dc99f200f9c97fd07a86e24094aa3cab82e33fdad7c8c879d1fc253a35cf9c4ebd0c8bc425698a04037658ea8129e15b064c44c61e1d8d14ca8bbcf762d51176ffe657050edc9a93f4ad351242b815e6f9bff7f87e840a739fac11e5f714d948fe24e86befd0d8c75b614e9fd74bc6e5047f9dfd1c86bdb3a243ff3bc1d13b741b1564106f9a3b623c705a2ad97cb3ea357dd29a4a548b7c875fa8f06714b7e7d9d0788397854e710f4a2ca580217a295c235e20328a632501823c3dac7038a26d37eaff1fecca1d5b2c248daf4d8a90d24f6f76cb580cf9a31b82a330dcae6fcc322d50a57752667badf2888940a17228f3f71e17683b59766c0010c65543e17e0be56c34f4460e5ea2630996ed610412b8a454d4d61e1fd45e849e76cb4541b1a20a58ed307d593aa250d51681fdc4cb834912c39f103b22147a022f37e55bab8d2576b8e71e8a6a8fb2b9c4ecdc30acd4b1eae83abfcb22d61fad90e4fdba4aa9d946ef2fb09bad96a933c63747cc68a644af40c1bf97b02b3748ec802dee3d1c1e853a378342810c43ffa46c630d06e39d40dd772cfe8e9c29db76ec5d2a2e61009cbbb17259ff060782fe68495d34fc44d519af74b8f18e18215f0783341381e0f45d810a3db04537dc0087eefbfb18329f291565697d2df03321780001ca00ec2c0c7a2e28c6f13b1ab8215bd2a9e532e311a40b079c597710b45eb683ea935922b5b73719c0e1f847f2f9f10331c260f69170620738c399a367e88e2e72ad165bca724bc1dfc1d505628a0e1b92b4bc8a37626a3faf932fb4ad8a821dac4473af9b0387160d2436359ca51edb6c80e8af2d1c1cecaf1ad6dd484ad3b9c99ed5abb4670b39510417b357cc907f9d8a83b00eb7a88298d3d1df03638505d8f46b6919cbc5c30e0815b872cddb333b82e33da2c74b4dcd3d03a5d4b5e363f35ee8ac1c780a20acc3af6b948bd256ea265a7f21c625120511ecfe97d8b047821c6834a5f277d01a402ef06d25ec87b3b07ffd7a1b35ac81b080f8ae3bfb09105f28a13a6477a1dad857caafd462367e9c9b378198f6b6886ee2a22e6f0834a22168ca695f151b51c8fef8322e8713a648b48bad19dd399cfc1ea4b82b9b5e3b1bc27fe35b8dbe335c5048f0f178607de224e1b3d76ceedc626406e111f9da4dc004620189c8e5eca21cb8f54ffdaa10a3628b17d75cfd820e35fc8ae0879ce652ed1ca3742a7b8e12246ccaaa4fe5726ef3aa81d287e098d6a28d7f9d0d4221a8e371e08c11e324e8a8e7600027518822072e092906e8d7880a45ef572987c161f89b24c152b6dd7ff7c892b1e68f37a549d1e7dc432cf7cc713f5091451d00c36c49afd161d3a8af45b336dfa419eec7cca9f5648a28fc51891a709a142aa4d236b934fe5db6b9c5af2465124902ecae9f06186663053e03b4cdb60cff91987f3957e9f3f2f5bc90f1e00b77cd3c31e7f6827add1807aa69ea5e00b6629a94863d120cb7578e7ed3d91f2ca62697766dbbeb9548c50beb248f71c1f1f242616a0f305be20032df187c1c273ce3a3bf80a415070c91643e64b3d016abd2e73d69c518434ff01cde7b5628f67be3b85f46487e8d057b623e27b58b5558d8c19388cabd1ccd9467a16edb05178db9a0f6de321bd34acbc177539d5571e21ed396fcd1a231903f140d0dbda7eb0e329608a91026b740ae01d1b35d4013666bb02e0d50fd39f21695300e7fc90ce110e3a883737a015853f9a6798f4816bce47d0d5a31e574bb279830110afbe84cce50ad870fd981804c2bf4bd6b84da48753d60d55bbc7e228710c9ed6f49588962e9b7f2fe5a1d0f05f807a98f89b8bbbe5059991b9c74f2ae3247d8595783ed3e164b1484b82e4164d83effcc875a27b037f69f0ff5500cea9fe342ef3e46232871dffca290c9519888a0c1bbaa8c307186c5284a0d751c27e22d3d5de5fe9ebf7830f2f5723120888c19fd1f0e5392da1ed421c62bda1ac3afbf8f70a67dcdb956a4b86a7e9489bb71c90674bd1611680661fb4133a49c30b863930c92a56e8c2e76f887e8798e8ec122420a488772aa19e8f5c6b39be2bb3d14f52027ea624cdd1e21b7d2d0c0d2af6cd39bff661a23328b8bf55407123b78e24f60ef493d0e6d9f15883b0e7ba3ff213b57fa5212d48fb1a623339ad4362aabeb85fd36c1d8ace2aaa64298c24f7edc3a2cbfda9da762ac233cad2c7ee2aea74c5cc6685dd5ad1726431000fe1aaa84d1f3caf19818e2e882ceb8b78bf71d9dee243199a32a9ce696a5285cb41228a3980fa64a45b5c0f019538c83bb47551992a2c621596da26dbbaac5eb8d24d14c179b5d9b613954ff6e04012a88af0760f21c4bb57a29518b900d5b749f25afd34e0031986f101bc1b3e9c56094bb9b8945239cfafab428860511484036006f1d1664223e7756ca983c11ca3769ab6c3d786a00c36a2b0a5f317453b91745fa64ca817580c324df66e8dfd49f6527741d48d9b38c1fba1a10bda6c89fd2d3b3cb7fa4d2d26711a46970b7bacc4e8fb00cdfe2420885a8dc39c2cddb7448d607de082c9963a17106ba33a8df34af587f8c5c0339a1eb804fe6209e3d057f788928379473824ddbe307480bb8cb28974bbc8eccdc16bfe9c569f85b4f3904b6ebdb0873fe7a0ee18b714252244be3c4dc1612e1682fad2e6cb3ef73719b89b34effa91b5a82e0a9c63c88581fb799c06caaa66f1f4bd9778568832632428e61ee062d7a777365b11ff09b865e685e3f09f1c28d4755c0e0f0176344b217f91d5c5d45f0afcc6c807950d112866468182eac7bfb63c1fdf086bc8dae42ebc0f6c56a5c87bd929e89ff2b265d4e6e7dc60489d571fe433a19c898d066745d5bd6f17b9205efc4f5261b1651f14b65cf8b3646d71249415f96889df15930495a10b1f217276ab5b39e91d1007668bd2f85eafdfe3017fbaf7f8f28710679a0075ec453285b6a53c51e0bdadb74a54f41f75ad88926deb090ba7af890831a336f27b98713891feeeb4f9b6b8c2bf6246f2e61d76106a9c052bbc3351884ebe79a62a01643d2bc05d610db90f09ca0ef7d385b9b5b6f84b8588dc1ed7f99581ed243443d9d7060b863bb6007363cdebe3aacffdc2a5f141b9e0298b596c3e2127a87e2a20169d78c0a81d1096befc76e5f4e37eeff0b1209390eed35fa97fd14893a644648d997c4fb51eff4c18ed9cb9ac757b886a83d38bbef158f3982d1ee942c9a528a07096d5455db7c8196c70918f660379e2e00ea781dad2027993281653ea94dabfa51c1972a2ec4aebb919af4c74d2a5d17ebd5e0bdfec34654307f022aeab47e74b0da208fe5780845a5dec87b7c0d2cdbe88a0ddf2ec981a4147823f4c3d97d5bf945c23524ebaf4b4f69c21f34986a5591a597c7895d3967a03efa770d6a03fa6a4b315975f7ddf8b99a401aeffc1a7c73a88625f7fc2e2da2206706609230cef2d1933b9509f9376581b51effd30a798720a1282558628675e2752687085029d922fc2974da08bb0ec6d7569ef584699885bb7635c07ddc8b5121ae4de00a5a8ef2b3004b", 0x1000}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f00000004c0)="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", 0xfb}], 0x5, &(0x7f0000002c80)=[{0x1010, 0x113, 0x800, "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"}, {0xb0, 0x1, 0xfffffff7, "877fbff1ccc54185bc7ea1779250f4bc6676196df298ec6725c6a3b04f1259f22ad79299c5ff4dfbd1cdd8a164f1ad5f1fd9c407352fb735a11202814a1d3193b54e99c1e474fb481d439f86781400dcd0d65b58a81f489ef75b15bb463126ed53fcd6a27a473642ede95699f8240442cf10e2ce178544009e7badbe49743eb4815d522b22d3d11f103ce1114f48578483e8743ec0dd05422f699a4f"}, {0x108, 0x102, 0x6, "c48b13f365c9970a3b8e601575289aa766725e583191dfd95497d0066a3a7ab9aa5b66c3cc448cc4f7147557c2215c1b3183d47e10f7105d0c3c90501c081d875213cab20a4c867bab14fb6aaee74f86a280465643412986b7c2b38eb8bffc43fb60f332b6b49d7f13f5820f238d50f5e971ad9b511ca1d963f08715c6a60b9406bf917f5eee90e70a7eac9121d17370f4dac0ab7b3459c56d7f018066f50a7e5b1180915fc2b00832766e25c92083eca7fa39b49a22a5a895ec593838669aeb957fa6826314705b78a145109ef07f7dfd768efa60e9ef1275338d02d1331a9abb3bb7563729479295eba467f2cb90077680"}, {0x98, 0x9f, 0x0, "b05510ca16062f98706059d1cf06e81db6fa60315e9bcc446f09674b9632276f1b96db8388626f48eb54bdf13f4f928eae0cc7d139c3ff6cc6c24c288db81f5edef828e99d9ed94853d26d46e0435aff5e480476bf950d668dd1fb070a41640f0039a07f8021fcacd6bd891ff2b6772d8af64570f37b3383894318ebb38eb3e4e5"}, {0x10, 0x11, 0x51bc}, {0x60, 0x107, 0x3, "8bee862dac08398f8750917ef3773802d7d2a3ace8323e771d0da5b9f52e1696e5c4726478da2b2d729a64fb6372a62bfe8753bb464932b326c94da278d8aa64efcd79cf44669bc5db9d72940d520a07"}, {0x1010, 0x0, 0x7, "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"}], 0x22e0}}, {{&(0x7f00000006c0)=@caif=@util={0x25, "132f23e2d424ca3ecb64ae3a3dc6eda1"}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)="ce9840d2ee45f5fd7860a02628b79e2e579070e79577909ddfdb0abb3d6057866b37bd701447743bd9f899feed13a7fa7cc48df4adf2b413cf791791aeaa3335039146bf361223fb60686dd3cef2b7713c7c035abaff9a197d10fb7989a1be9c94a8ed708483704672a998fee444af5c73aed05832959cb224491fcc1c62e9d75e60d1c50e32334c76bc91abba73a1e3c339b7eebe823c0b24704f687efff637b992bd4c32ab2bae45bb1028f85651e0467855c95f5e9bf52191513332f19bbfd6d69b4acd8e6f42f373cfb93a1a48af53bfd3933c5022b2de088c55d8e7027aff618e2ddcee6813d7d62317444622c255", 0xf1}, {&(0x7f0000000640)="0d4951a6cd96224efaa3144a187c58ae26fa0c4c02bec07188edf2e705a3d0edd510e692c8a859494a8c9d", 0x2b}, {&(0x7f0000000840)="097022e3303016894f48530c9398cc299d638f0883e2cd87a920dd", 0x1b}, {&(0x7f0000000880)="be94339cd52a652765301f9cd96ca1b2b0ac923ac1849c370257fce32f6c07bf21e018b62477fd9477349950ad5fee9398efd9c561e4aebf066a76e07f0c81da255c60f79d0dd31d3ee5aaf5198de99b253cebadd5aca21567d2ccbb392419ff0f8b5c65fbe73939af25622c4b143d1cc8621c46480e879a32f00433020929df7b572482903806c456957855e0473705610aae57cc1d76920c2ef02b591d5d3dff1911a3a1a57f223de1d89def23fdc032df27", 0xb3}], 0x4, &(0x7f0000000980)=[{0xa0, 0x6, 0x0, "13f58a359551441b062a39422703f6e20993d7daf3195cb403409c2a0286d1519d70ed4a55b211f347fc64d09454cdc8ee6a7dba068a88ae377a431b3983904cdf32d948918731e0cfd79bd843c0402b7dfc5f984a0f672c1507b0c279fe5d704af07e817fb7811498a37d249bcd9b5e5091c7ae2db415dc7081f0d6b004e65acb5660ed0dd62087b7a06963f4"}, {0x60, 0x22a, 0x9f4, "c2ec2d6bfc21c0f8a7027ed4a69aadf096567c13e616649501b64aab9feccd09b1d2c5b5d2a0cab854fa44cbefe977b1669d8e4baf56182ceb2b0d756294b7ca1e966533cfbd89ff6aec4f9eda"}, {0x38, 0x84, 0x1, "deb0a4928d49579ce55ab652ef2b5ada2c9466eb77fe17e6100df30569bfe993314765ac575e"}], 0x138}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="a5dea468635c4f27d3fad7454a3524117103299b7865effcd3523db897cecd2a7c975aa86e9d5f855a9287625b45e589b75de691e32eff76f225967c570a58a7d5ab8693575c69ebd57838b06ce563141bde5492664a4abdf1edc8b138d15c7a5a02ea915ee52b66bfca44e3439db28368b9f0f690b8ee0f61c146cffbdac592d34f25374f7987d3b6f250c441ff7399bfa6bda65d2faa597ab8d506b5b0b73695ca0a8e612a78ebe4fc4c4bbc9d49c29e7b348478775b64bb", 0xb9}], 0x1, &(0x7f0000004f80)=[{0x60, 0x10f, 0x0, "2911b86a7b21a16643d351e1a4692b15d1bf1b5913ceb8fa10acd31c02b85f1860c9f5b9956cda0223196e36746862c7c757efaa00210ff0884a2aeb50229af59dfb24ad3fb36bc724d6"}, {0x1010, 0xb, 0x3, "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"}, {0x28, 0x113, 0x6, "85cbe7bdf338e90c2e89a1e7ab75b3d004"}], 0x1098}}, {{&(0x7f0000000bc0)=@hci={0x1f, 0x2, 0x4c6d429ca25e00a2}, 0x80, &(0x7f0000006380)=[{&(0x7f0000006040)="04610ff26a2a3a0a5a095834472d05c7321822708b546d41b23a7f351713ab1c0cc3b98312fed084305bbbc6d91663d6985089c0987edb777449584310860741b3a2e056fed15cf85b510b382688c35a48203c5b2fc1e5445d64c3368b58a488635daa4002e6df296c79e3fce93206e1c000a7d13891d61eacff56d93fcdda63aa7b097a1bb1f0845aa97482d9bdc77017df14688c9afe15cc7dc42da75add494f184250e1e43b30088d7ab4b47f301ef3d614ac49645c32b4bea0fcfe4cf69440221acd97785461e2ab45c8c168dc0fad35529d0070ab6ed9353f01e93d874f2f49249d9847", 0xe6}, {&(0x7f0000006140)="66fa8198812b99b34cc2e02aa36b2d7330525b34451fb181857b24246c55303612a64033360becc277b43c", 0x2b}, {&(0x7f0000006180)="ab58169b054f945834097ddf2b185aac376e4670e52e917aa4f05a8340d10ef460f1ea663271d839c7262e2a0a6b3042dbef38081b2a2f3683195cef383ec1e870", 0x41}, {&(0x7f0000006200)="c39be94473907570fecb6ebf97b2b3b280cce8a30964bdbb615e679209af73e0caadde0fab90d520b289454bc937901f733dee17d237e796923bc1da664659ac91f2a02fc2d274ce90c2e4f78e2c2f8e316a0a3befb473edf92bf33dda325ec57b2bca67bb34cf53f80df5a9fc948c31b1f3a2e17f756374ff437606e5a3e754748f662c95f9559f93142f3f7eb22c58244420f3b9288a8f3438e0a11a043e1a10e66aaba613d2dd61e8ee74580b9dd618d8ba15c064f723fd731a1a9a2f26a52a990567c662c0e66262ca6ef3843836df", 0xd1}, {&(0x7f0000006300)="27f3b4119871d2fe384d0f82a4f6b35d6262e3936c4cff9896489d601a03753a0b66d8b274b4e2ac7e771079bf3abe153ae5294f596278cc4379bc7419f1a0b0778cb2e6fb5238af72d231e9c99377", 0x4f}], 0x5}}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000006400)="2eecc2646a3ab9e111b4a7fb1a96b83165bcc01390d32ff94430ca74183e946397ba35b85292d31ab6fb77e20fcffe51a82954f3ef661a8a0e939f4d5fb4efe00a1ca954165aaead31ac27bbdba18b89e41455fbeb65707ece058cfa7ede8fb0", 0x60}, {&(0x7f0000006480)="8e18692e3157d743740ebe2c2d12450cfc765a007f226943d26adb70187310a9a77ef3cf9017889e7d287e27c544202816ab9ad465cf4e55e37fc5bb76c87cfc4675ee6693751415fbb45ee7d20d384828c4391f1d95cb7e711851aadfd3cf299e", 0x61}, {&(0x7f0000006500)="26214d10ae25c3bd0fb82d0cc69bf8945f2227bc90e1fcd7e00a13", 0x1b}, {&(0x7f0000006540)="51acf545aad8b199662e11a324245915c1c4ad49d5baf56bdeff55ff70", 0x1d}, {&(0x7f0000006580)="16175b0e1cf50b505e11dc548fddadcb9dab921bd8dad6262501e97340acf81bacfe5e2fc7492763507c564c071d758a162ebc5e298ced520d9a6c103fdc07a67032", 0x42}], 0x5, &(0x7f0000006680)=[{0x30, 0x29, 0x3, "34e0088cbcdc3cfddc8e2bd1d5ad4be61a5ea35f96a03d73911019518b"}, {0xc0, 0x10b, 0x9, "b7439e801125a1713c8ba8c40aba111eb7bf630763564e42076df91e99f7d2bc6dd1218c1c6e40b5b4485d8d76464ec3b9577f09317cad20e39be97ecdbf0a0e6b9b477317128cea7581e87e40104ff308004c8a8a81eed468b9587785d1c861e38c86abab841038a99cb4d14f74e38bb3b4de70f1fba542093548eab15d0c0d9998fcc8f98097a85c90f4cf3ffd71c96e06034fd15438bd2c3be70ccbb9707ed89ebcab1174ead87a"}, {0x88, 0x19a, 0x4, "dbe6bc736aad7376bdb3f5229081d9eaa307ce6dd6b53ed44d60d31b83110df06f04aa08dde5149cd520414334793658eec21a4064d8579394bf918d96c0dcba4958e78f601556b12574b00bc052934d0ec412cad8fcb88741ef293a799461a3a532d29d595e7d6bae43128000a258621ba7"}, {0x48, 0x114, 0x8, "c43ca01ab8dc5b7cd2494297e72f3d2cdd3c384dc91bd5a4037f1c29c775855c1f8861cf8168a0a954215ee47165fe9a2a"}, {0x10, 0x3a, 0x8}, {0xb0, 0x107, 0xffffffff, "9dcac70b787055396ef8ebb7f79cdc5fc67207c1f77fcfd631c8c06d96af12650a7be2e1c0b0e323a17ed605bd560d2e18c91fa39c5ccc633e81b07372a245c34888b720af607be4f77882d60d1ed12c674c1c46d9a5cf561947e9979bae5151a428cb211dd3a35f44383c542308cb12c7fde93572aeb275d120e244d30480ddf21b3afe7c947e32d23a8edc88b8a888afd98779a62e7bc0b82836dca97bcb23"}, {0x28, 0x117, 0x1, "813ad2d6a860eb94b6673e7d05b5264c1ed6396aa763"}], 0x2a8}}], 0x5, 0x40) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_NH_ID={0x8, 0x1e, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000380)) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x161300, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000c40)) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000180)=0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000003200207f0455c00000000000010902240001000060020904000407030003012205000905810300040c0206000000000000"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000075f000000000000000000000000000000000000002ff5e6215d12c456f3b8d1c3574d12ca20b9558466405860325ea2563", @ANYRES16=r0, @ANYRES16=r10, @ANYRESDEC=r7, @ANYRES32=r5], 0x50) 5.330858219s ago: executing program 5 (id=15256): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000100)={0x10002, 0x0, 0x40, &(0x7f00000001c0)=[0x0, 0x9, 0x7, 0x6, 0x3, 0x36, 0x1, 0xffffffffffffffff, 0x80, 0xffffffffffffec4a, 0xf45, 0x0, 0x14, 0x7, 0x7ffe, 0x7, 0xffffffffffffffd2, 0x1, 0x7, 0xf, 0xffe, 0x7fffffffffffffff, 0x52, 0xfffffffffffffff6, 0x5a, 0xfffffffffffffff8, 0xcbf, 0x612, 0x4, 0x22, 0xd16, 0xe, 0x7, 0x401, 0xc000000000, 0x8, 0x3, 0x4, 0xfffffffb, 0x64, 0x2, 0x824c, 0x8, 0xbe485ef, 0x800000, 0xe504, 0x10, 0x7, 0xe6, 0x102, 0x3, 0x10005, 0x6, 0x1001, 0x800000006007, 0x4, 0x6, 0xfffffffffffffbff, 0xfff, 0x8004, 0x4000000000000, 0x80000000, 0x8000, 0x4, 0x80000000, 0x7fff, 0x800, 0x7, 0x7ff, 0x298b, 0x39, 0x1, 0x3, 0xd8e, 0x9, 0x9, 0x1, 0x9, 0xf3a, 0x3, 0x3, 0x100000000000007, 0x3d6b, 0x55, 0x3ff, 0x468, 0x2, 0x9, 0x100, 0x7, 0x7, 0x5, 0x4, 0xae7d, 0x10, 0x6, 0xffffffffffff7fff, 0x1000, 0x3c, 0x2, 0x12000000, 0x2, 0x7fff, 0x6, 0x25, 0x7, 0x8, 0x4, 0x4, 0x0, 0x5fa, 0x8020000000000008, 0x9, 0xfffffffffffffffa, 0x5, 0xff, 0x2, 0x2, 0x5, 0x4, 0x3, 0xffff, 0x1ffffffff, 0x1ff, 0x0, 0xffffffffffffffff, 0x2, 0x5ae]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[]) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001002500000008000a00", @ANYRES32=r5], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000100008002bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000300e08002002800128009000100760000000018000280100072c1c79379241fc7f3b85e18bd00587e04800c00010001000000f80b00000400b10b0155b5177f8b9132d70d6d5d3808886e9cf53083"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.702707428s ago: executing program 5 (id=15257): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x7, &(0x7f0000000200)="952bb3e006ae9a"}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000480)=""/115) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="200050800500020002000000090001007ee5d52ffd000000080003000dac0f00"], 0x3c}}, 0x40000) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "be07dd3106cdc3726fef26b52c4845e0"}) 4.597583052s ago: executing program 0 (id=15258): r0 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockname$packet(r0, &(0x7f0000000540), &(0x7f0000000580)=0x14) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x2, 0x0, 0x4}, 0xfd}, 0x18) 4.520192631s ago: executing program 5 (id=15259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async) r2 = socket(0x10, 0x3, 0x9) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x22, 0x2, 0x21) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r4 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0xde5f, 0x10100, 0x2, 0x33a}, &(0x7f0000002bc0)=0x0, &(0x7f0000002900)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x44054}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) (async) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) fsync(r3) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="800000000206010200000000000000000600000a05000100070000004800078008000940000000041800018014000240200100000000000000000000000000020c00028008000140ac1e0101080008400000001008000840000008ca0800124000000008050005000500000011000300116173683a69702c5761726b00000000"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7ff, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000180)=[{0x0, 0x2c}, {&(0x7f00000000c0)="8a946abd", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x60) sendfile(r2, r8, 0x0, 0x7fffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r10, 0x101, 0x0) (async) getdents(r10, 0x0, 0x0) (async) close(r2) 4.201364673s ago: executing program 0 (id=15260): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000b80)=@allocspi={0x98, 0x16, 0x2, 0x70bd2d, 0x25dfdbfe, {{{@in=@remote, @in6=@local, 0x4e23, 0x0, 0x4e21, 0xfff, 0x14, 0x100, 0x80, 0x1d, 0x0, r3}, {@in=@broadcast, 0x4d5, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffff801, 0xffffffffffffb79a, 0x0, 0xfffffffffffffffe, 0x6, 0x4, 0x1, 0x80000001}, {0x10000, 0x7, 0x6}, {0xc2e, 0x1, 0x9}, 0x70bd2c, 0x3500, 0x2, 0x3, 0x8, 0x80}, 0x50001, 0x61}, [@algo_crypt={0x85, 0x2, {{'ecb(arc4)-generic\x00'}, 0x1e8, "4271441818fd70f76563a2b95af06ee81ec6959e068083a1aaa95d136035356ddf836115815a8f40aeda5de76a72d803a012669592e37b6587ba94459b"}}, @srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000060000000000000014000000110001"], 0xa4}}, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x121042, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x4, r9}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8001}}, '\x00'}) 4.174123712s ago: executing program 5 (id=15261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4100) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="100100003b00020025bd7000fbdbdf250400000008002300", @ANYRES32=r2, @ANYBLOB="ec00240071b17885d613b708afc0ff398c2cdb7e21ccd1edd07dfa25bd48134cb79b667b889c567375526d3a6fb49b6519f16a433d44f422545a4fec563339f76d9a5500f6485a0c655a33da27a2360d2421d6a5db9dd7ae4b74cb618c56fe64ab8f33f681f452c4ead793424dc6f81eb416ce0ee54502fecad3f6ccec36bc737d9d849b2d10b1b8500107da6e36e59935edb76334ede79d3fa0a9622025e58442bf069f006ea15b2f96ef1208ab01b39aa093ad6f5b609a60ba68b710706e32beb3043f09d90809814a3d82d143b78b176cbebc2cdbf2d510af444c530d0b4bcef283759f5d2d25e7df4862894208003b0005000000"], 0x110}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7733, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r9, 0x100000000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001040)={0x24, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x6c00}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}, [@migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0x138}}, 0x0) setsockopt$sock_int(r13, 0x1, 0x2b, &(0x7f0000000000)=0x1, 0x4) r14 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r13, 0x50009401, &(0x7f0000000780)={{r14}, "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"}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 3.233328974s ago: executing program 0 (id=15262): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x7, 0xb, 0x1, 0x6, 0x0}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000440)={r5, @in={{0x2, 0x4e23, @loopback}}}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f0000176000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f00007bb000/0x1000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8004) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x40c0094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0xd, &(0x7f0000000500)=0x0) io_submit(r10, 0x9, &(0x7f0000000ec0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x5, r2, &(0x7f0000000580)="d9e447ef8bc8b8bf616695d5ba801966791a47d2fc8a1853145537b7b99cb115e11a9b8a6adcfb789a05c070ed12086a79bf1e183219b252ed0a99bf79e77b6ee3d6c259aec66631b2fc3f40f1568089cc6f104cb65a412168dd57c33248ada4f3bbf12150ce7a266aa38fb9b41cfa9525df62667598be1b4d086a5e52a1b48e5f202b9a795bfdd80b9b858f4c4c7b6d05db30917a0ef94bc08dc5bab23371b3d200873be2d33be6e644aee7348e8a7e647290af17531c190e3d7fdf2e9048e396b3f69521c02cac1e6af067046c20a36084f5311760b543800739756ea2f2c5e6f76f3084ad9983878d628d7466c74a5691d9", 0xf3, 0x1cc3, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x6, r8, &(0x7f0000000700)="9558c88abb820d6bd18bf1d4064984a473bf39c8fa50ef10db4efa407ea6917bdb3285a1e8548dce49b08a72a07a0d30e79d61f91f88091f2366e7e472495d352e755e83965df420f297cee4c507bd091d913ae52b146b44923873e2dbe3e1eab52574067874e95251e9de2d192174d00b2eaa653e23c99e1479cd3b6b0ffb8f50ad389146eba38326979fba8afc6a7df1f69b8c56aefff32045f844bb72f4b075e2bf381cccfe587259eb8a213f3c060aeceafbc48246e1dcfe7d6ccb16a81bef475335221cd5ee109f950047f62c5377b450e94e15f4fbde34e6811d8c9dbb7f06b133", 0xe4, 0x100000001, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000000840)="1f455422970f356578a34c5e2535754953691ade68400e354a55", 0x1a, 0x9, 0x0, 0x1, r9}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000000900)="e3438690e7b0122d69aa55b7deeb8e852b94daa6216c2a9b4820d73217046aae72313bcee9ebffac94447eef082adbac86b3746dee116984a6b29ec90838032ee19882918cdc8cf7b02177ed205fd0a8ab223b8c0c9adb7787a76170ff107613cfa62f4fe8b881a4c77f8ebbec98788ea35186372de014f92c2a1c3d0b484090a6877c3a737caffae49383a32b63b2f884cb5c43bf4aee768d74238c9214adaa59c832f4f5b25cd8204f494a5b03a881d3c9895e598bf75193b8d9d4ec44ec160a8a44d8d6e00b67b6442acb90409ea3bd6f32ed0713c4bd", 0xd8, 0x4, 0x0, 0x4}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x1ff, r6, &(0x7f0000000a40)="99072e87eecdf4d2fb6821454cb79f207af707a96e745afa6f629720b33a754883a51d2ca88ae774e7a466b212184319d5f2046aafb0c4cee197496af2f6809ec4fed89c529b0833de54b1e0492f475ccdcdf51250ccf7eb888601cfb07e664a742bd2", 0x63, 0x6, 0x0, 0x2, r8}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x712f, 0xffffffffffffffff, &(0x7f0000000b00)="cb86728385f9a63f925716d4dbd7d94d8088e7946bf14407411bca04297475e129a1a637fc1975123ff993a056fa7d3bbec4797f780500c2080a19b4a914d7fd0c4503fc1b2ad4da2f7d2a2ec26f13995c6593e18b1c57886f2180751cd56be2d49c879a3306f749f55d1e6326f6e71e25f54c09b6a941fd6e47eb167ef396a5ef7d776f6f962417498fca196e4391e21468c4674d042f3e133258607e557424a17b3247282af189f44ea1389b976152a5e4fbd349b703ac3a3c2c5efa080102b8829b6232f0aa88406d853e6f61e1", 0xcf, 0x75f2, 0x0, 0x1}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000f40)="3637a3ce7501c94a08ffeeb3e6b71db7ff09bf81f5287ec9c188b6dacd4d31a8d3afa216e04912edd15446df8e008f48480bb1cdc37179b269894e3d445c2f2eaf9d266dfe447a71a6791fd6771dcb3a3a727157433a498821d9621332b2842a010dc26557d79063c92af9218ceeac8bf8cba2f1be79a14db45df8b761944d55325b431c422b4af25002b526796fbf573958fb436be484527f84e7effcc8b4264b3710ad306337dc3628e3be", 0xac, 0xfffffffffffffffe, 0x0, 0x2}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x8, 0x9, r8, &(0x7f0000000d40)="aa7cf96cd4c9cb999d7de51d83a39002c957280035436e16cdeb13fad61b79971288803510da819766b2d13e5eed168b42b102c6d2fe11f5dbae", 0x3a, 0x573, 0x0, 0x1}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x8c9, 0xffffffffffffffff, &(0x7f0000000dc0)="eea2e2a81d2e562b0132834f32daae965bdb56d839109bc5caff0e3aca63e97e590a89761c4fce691ddb4774b517f60e9048c5dae7efa30a3b508cda25f6cef658e70a6844697b3ae7e20dbeee6a5210ccf641401e9ed845da02d3fdfca7c0f0b295eb1556d6cdfd8c50e14959a730e9486232e507349f0c228276f55f3374edfbe16bd8d6b07ecceaf8173ef88509690a8c84b53d4ea0abcb5bae73ba3d78f716d7364573f45d476bd09bf21632c688145bf3cb1f136f", 0xb7, 0x3, 0x0, 0x0, r8}]) sendfile(r7, r8, 0x0, 0x20000023896) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x10000, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000340)={0x3, [0x0, 0x0, 0x0]}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) 2.385244822s ago: executing program 6 (id=15263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3904feffffff000705769600000008000300", @ANYRES32, @ANYBLOB='\b\x00k'], 0x24}}, 0x4004000) 2.382140414s ago: executing program 2 (id=15264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETDEVNETNS(r0, 0xff08, 0x0) 2.250518996s ago: executing program 5 (id=15265): r0 = fsopen(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x57, 0x7, 0x4, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x6}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000000a44000000060a01040000000000000000020000001800048014000180090001006861736800000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a4f891d7a100239c8b432"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000000c0), 0x4) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}], 0x2}, 0x24040001) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x42000000) r7 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3e, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x9bf\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) 2.181452485s ago: executing program 6 (id=15266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000080)) listen(r1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r6, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x4}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$BLKPBSZGET(r7, 0x127b, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000280)=""/199, 0xc7}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) creat(0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES8=r8], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.16185912s ago: executing program 3 (id=15267): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, 0x0, 0x0, 0x8008801) sendto$inet6(r0, &(0x7f0000000100)="9a751f0e4be4be2e7d03ab7b427239e9f9753af86c9e648af85ab4023722c5b380443b27faddc1816033c72004423365ea66ce29321ff35d65dcdd7130ad5e661a9809ab4269a0dc0bb2d0c714013856d901808389ad60473cdd7b82d183c640205ab23605674b72780f90deb0373d1f38c35e2e1e011eda023dbb11958f881e470f333bfce28c81416412896141f5fba76f1092c1fadbcb1ca8233fee4d4c821eb69adcecfb04f19fa869880773a63b1135bdc926d0bae16e25c8f9cb47cc9bc219921bbe1c65d4a7", 0xc9, 0x480c0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="11", 0x1}], 0x1}}], 0x1, 0x0) 1.979413615s ago: executing program 0 (id=15268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f00000001c0)=0xe1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000d07000000fbff14"], 0x24) 1.701110319s ago: executing program 3 (id=15269): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x7, &(0x7f0000000200)="952bb3e006ae9a"}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000480)=""/115) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="200050800500020002000000090001007ee5d52ffd000000080003000dac0f00"], 0x3c}}, 0x40000) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "be07dd3106cdc3726fef26b52c4845e0"}) 1.535440649s ago: executing program 0 (id=15270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) 1.437394906s ago: executing program 3 (id=15271): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000001010000021020000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x300}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x1, 0x4}) r1 = socket(0xf, 0x1, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000400)={0x3}, 0x10) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="180039f4b12508609c8bf62088b1e50a0050ff7ba08c7d689f08494082ca348e7bc09fa3cc3e91ce6b0a0aa41b8d7d98aeaa3b404a6e7153da39376bdccdf3c7a1071326945ec00b06af1427446a93291ac31b8cd199ad85d7b056af5d533b787fab8a5f79fad3f1ec77ce40930092cfc3e662e2828ced45", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008818) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = syz_open_dev$sg(0x0, 0xf9ba, 0x14b082) close_range(r6, r6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xf}, {0xfff3, 0x8}}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 1.177595188s ago: executing program 0 (id=15272): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x9) accept4(r6, &(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, 0x0, 0x800) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r5, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07f28c2298b4656d07"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, 0x0) r8 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r8, &(0x7f0000000280)='.log\x00', 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x5a6c40, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000380)={{{0xf}}, 0x4a, 0x6, &(0x7f00000001c0)="99ba00a7504a61422015234472a6dd06c922df098ea59d3a34e59164b56488280af5a015b5a82d8b93d1ba7e5056f5d6c1a7178da6d4cb7e1c1e3e45de1236c3b1d5e18cef67166b1a52"}) write$P9_RSTATu(r2, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) 328.357711ms ago: executing program 6 (id=15273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040012"], 0x24}}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_usb_connect(0x0, 0xc06, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000862c6b203b0904a10100010203010902f40b03000010000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x400, 0x2, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000140)={{}, {r3, r4/1000+10000}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x80000001, 0x0, 0x9, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40808) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x624182) writev(r7, &(0x7f00000003c0)=[{&(0x7f00000001c0)="cf51b978a5b162b00f0f78dbe865536edc75e223c0b92df1d1e51e515cbcbb4775ba", 0x22}, {&(0x7f0000000300)="ce2ee8d040ff086218144ee1e3648f778a755f46230711f3cd7b727316c52d001babd19e28cd8f08ddb797948f1288cff202b93631f4167756474cf02747526868c9d6f79339e0a3f4ccea08", 0x4c}, {&(0x7f0000000440)="c749d1034f3d06ab028387cf1b204573a8ec7bf564b78866e755a5e7918f6276328fcf82c6179256dfd7baf0e51ca0014d3da7e2f83014dee5e080a2bb26f20571be19c51c34cdeb883ebc95dea8088b6f9791d4daa81a7ab474d0dea8251cafc05a143a469b6c3f0f699a50272cafaf091ca78d47b8a1eb8ad76c85a37182f7d2bafc0d001f4a634f2c96d5d85f4b226914d14865a7407ba55c7495c25aa711467027d8203cdc1c515ba2e7986d31504550b8ed9f3a97fc9e8f9d0d8593f143f0affbab7066ed0a40b27632b654271bf4ed0350fc6232a2fd9ea7da54ca6426033a", 0xe2}], 0x3) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 0s ago: executing program 2 (id=15274): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='rw\x00', &(0x7f00000006c0)='sysfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x108, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x5e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x50, 0x4004, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): [ 2927.939209][T10843] cx231xx 4-1:0.1: Failed to read PCB config [ 2927.946434][T10843] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 2927.958226][T10843] usb 4-1: USB disconnect, device number 50 [ 2928.071481][T31795] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 2928.431415][T10843] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2928.591470][T10843] usb 4-1: Using ep0 maxpacket: 32 [ 2928.598964][T10843] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2928.607430][T10843] usb 4-1: config 0 has no interface number 0 [ 2928.613651][T10843] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2928.625150][T10843] usb 4-1: config 0 interface 1 has no altsetting 0 [ 2928.634231][T10843] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2928.643762][T10843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2928.652142][T10843] usb 4-1: Product: syz [ 2928.656348][T10843] usb 4-1: Manufacturer: syz [ 2928.660974][T10843] usb 4-1: SerialNumber: syz [ 2928.668874][T10843] usb 4-1: config 0 descriptor?? [ 2928.691555][T32141] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2928.853727][T32141] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2928.864852][T32141] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2928.904239][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2928.928699][T32141] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2928.940999][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2928.949818][T32141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2928.982225][T32141] usb 6-1: config 0 descriptor?? [ 2929.049815][T10843] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2929.068988][T32141] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2929.093089][T32141] dvb-usb: bulk message failed: -22 (3/0) [ 2929.099949][T10843] cx231xx 4-1:0.1: Failed to read PCB config [ 2929.118446][T10843] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -32 [ 2929.124207][T32141] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2929.130851][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14758'. [ 2929.138268][T32141] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2929.154331][T32141] usb 6-1: media controller created [ 2929.163592][T32141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2929.187579][T32141] dvb-usb: bulk message failed: -22 (6/0) [ 2929.207005][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14758'. [ 2929.211916][T32141] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2929.230910][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14758'. [ 2929.241178][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14758'. [ 2929.358254][T32141] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input206 [ 2929.450545][T32141] dvb-usb: schedule remote query interval to 150 msecs. [ 2929.479863][T32141] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2929.540975][T32141] usb 6-1: USB disconnect, device number 28 [ 2929.599387][T32141] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2929.801633][T31795] usb 3-1: device descriptor read/64, error -71 [ 2930.041708][T31795] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 2930.057836][T31795] usb 3-1: device reset changed ep0 maxpacket size! [ 2930.102378][ T5885] usb 3-1: USB disconnect, device number 39 [ 2930.266115][T32193] usb 4-1: USB disconnect, device number 51 [ 2930.286626][ T9834] bond0: entered promiscuous mode [ 2930.344813][ T9834] bond_slave_0: entered promiscuous mode [ 2930.385939][ T9834] bond_slave_1: entered promiscuous mode [ 2930.425433][ T5885] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2930.436190][ T9834] dummy0: entered promiscuous mode [ 2930.487492][ T9834] hsr1: entered promiscuous mode [ 2930.501875][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2930.501892][ T30] audit: type=1326 audit(1762132194.226:13446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2930.554105][ T9834] hsr1: entered allmulticast mode [ 2930.559634][ T9834] bond0: entered allmulticast mode [ 2930.590058][ T9834] bond_slave_0: entered allmulticast mode [ 2930.608610][ T9834] bond_slave_1: entered allmulticast mode [ 2930.651657][ T9834] dummy0: entered allmulticast mode [ 2930.691381][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 2930.699646][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2930.710345][ T30] audit: type=1326 audit(1762132194.226:13447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2930.796589][ T5885] usb 3-1: config index 0 descriptor too short (expected 51, got 18) [ 2930.845092][ T30] audit: type=1326 audit(1762132194.236:13448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2930.966024][ T5885] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 2930.967875][ T30] audit: type=1326 audit(1762132194.236:13449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2930.996775][ C1] vkms_vblank_simulate: vblank timer overrun [ 2930.997088][ T5885] usb 3-1: config 4 has no interface number 0 [ 2930.997125][ T5885] usb 3-1: config 4 interface 30 has no altsetting 0 [ 2931.076767][ T30] audit: type=1326 audit(1762132194.236:13450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2931.099659][ T5885] usb 3-1: string descriptor 0 read error: -22 [ 2931.099789][ T5885] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 2931.106135][ T30] audit: type=1326 audit(1762132194.236:13451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2931.167388][ T30] audit: type=1326 audit(1762132194.236:13452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2931.169680][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2931.204814][ T30] audit: type=1326 audit(1762132194.236:13453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2931.227722][ C1] vkms_vblank_simulate: vblank timer overrun [ 2931.237328][ T30] audit: type=1326 audit(1762132194.236:13454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2931.259789][ C1] vkms_vblank_simulate: vblank timer overrun [ 2931.371563][ T30] audit: type=1326 audit(1762132194.236:13455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.14764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eb98efc9 code=0x7ffc0000 [ 2931.377060][ T5885] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 2931.394265][ C1] vkms_vblank_simulate: vblank timer overrun [ 2931.553813][ T5885] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2931.560462][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 2931.661122][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2931.780789][ T5885] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 2931.811718][ T5885] usb 3-1: media controller created [ 2931.817652][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 2931.823931][ T5885] dw2102: i2c transfer failed. [ 2931.828737][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 2931.834570][ T5885] dw2102: i2c transfer failed. [ 2931.839574][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 2931.845652][ T5885] dw2102: i2c transfer failed. [ 2931.850534][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 2931.859165][ T5885] dw2102: i2c transfer failed. [ 2931.869508][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 2931.871414][T32193] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2931.892951][ T5885] dw2102: i2c transfer failed. [ 2931.903119][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 2931.921727][ T5885] dw2102: i2c transfer failed. [ 2931.926680][ T5885] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2931.996259][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2932.031523][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 2932.034529][T32193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2932.037688][ T5885] dw2102: command 0x0e transfer failed. [ 2932.056834][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 2932.063732][ T5885] dw2102: command 0x0e transfer failed. [ 2932.077049][T32193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2932.114828][T32193] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2932.115681][ T9895] FAULT_INJECTION: forcing a failure. [ 2932.115681][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.143694][ T9895] CPU: 0 UID: 0 PID: 9895 Comm: syz.0.14769 Not tainted syzkaller #0 PREEMPT(full) [ 2932.143719][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2932.143728][ T9895] Call Trace: [ 2932.143736][ T9895] [ 2932.143744][ T9895] dump_stack_lvl+0x189/0x250 [ 2932.143770][ T9895] ? __pfx____ratelimit+0x10/0x10 [ 2932.143792][ T9895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2932.143815][ T9895] ? __pfx__printk+0x10/0x10 [ 2932.143840][ T9895] ? __pfx___might_resched+0x10/0x10 [ 2932.143858][ T9895] ? fs_reclaim_acquire+0x7d/0x100 [ 2932.143889][ T9895] should_fail_ex+0x414/0x560 [ 2932.143920][ T9895] should_failslab+0xa8/0x100 [ 2932.143940][ T9895] __kmalloc_noprof+0xcb/0x7f0 [ 2932.143963][ T9895] ? tomoyo_encode+0x28b/0x550 [ 2932.143994][ T9895] tomoyo_encode+0x28b/0x550 [ 2932.144030][ T9895] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2932.144065][ T9895] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2932.144086][ T9895] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2932.144111][ T9895] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2932.144131][ T9895] ? __seccomp_filter+0x3c6/0x1e10 [ 2932.144192][ T9895] ? __fget_files+0x2a/0x420 [ 2932.144213][ T9895] ? __fget_files+0x3a0/0x420 [ 2932.144229][ T9895] ? __fget_files+0x2a/0x420 [ 2932.144250][ T9895] security_file_ioctl+0xcb/0x2d0 [ 2932.144273][ T9895] __se_sys_ioctl+0x47/0x170 [ 2932.144298][ T9895] do_syscall_64+0xfa/0xfa0 [ 2932.144319][ T9895] ? lockdep_hardirqs_on+0x9c/0x150 [ 2932.144342][ T9895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2932.144360][ T9895] ? clear_bhb_loop+0x60/0xb0 [ 2932.144381][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2932.144399][ T9895] RIP: 0033:0x7fe23418efc9 [ 2932.144415][ T9895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2932.144429][ T9895] RSP: 002b:00007fe23504e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2932.144450][ T9895] RAX: ffffffffffffffda RBX: 00007fe2343e5fa0 RCX: 00007fe23418efc9 [ 2932.144463][ T9895] RDX: 00002000000000c0 RSI: 00000000c0045520 RDI: 0000000000000003 [ 2932.144476][ T9895] RBP: 00007fe23504e090 R08: 0000000000000000 R09: 0000000000000000 [ 2932.144487][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2932.144498][ T9895] R13: 00007fe2343e6038 R14: 00007fe2343e5fa0 R15: 00007fe23450fa28 [ 2932.144530][ T9895] [ 2932.144650][ T9895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2932.181487][T32193] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2932.383005][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 2932.420884][ T5885] dw2102: command 0x0e transfer failed. [ 2932.429267][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 2932.459717][ T5885] dw2102: command 0x0e transfer failed. [ 2932.466076][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 2932.472545][ T5885] dw2102: command 0x51 transfer failed. [ 2932.478514][ T5885] dvb-usb: bulk message failed: -22 (5/0) [ 2932.485539][ T5885] dw2102: i2c probe for address 0x68 failed. [ 2932.492132][ T5885] dvb-usb: bulk message failed: -22 (5/0) [ 2932.497872][ T5885] dw2102: i2c probe for address 0x69 failed. [ 2932.551493][ T5885] dvb-usb: bulk message failed: -22 (5/0) [ 2932.560788][ T5885] dw2102: i2c probe for address 0x6a failed. [ 2932.577851][ T5885] dw2102: probing for demodulator failed. Is the external power switched on? [ 2932.607091][ T5885] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 2932.715777][ T5885] rc_core: IR keymap rc-tt-1500 not found [ 2932.731310][ T5885] Registered IR keymap rc-empty [ 2932.752137][ T5885] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2932.767964][ T5885] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input207 [ 2932.781736][ T5885] dvb-usb: schedule remote query interval to 250 msecs. [ 2932.789198][ T5885] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2932.817431][ T5885] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 2932.826873][T32193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2932.839741][ T9908] syzkaller0: entered promiscuous mode [ 2932.856178][ T9908] syzkaller0: entered allmulticast mode [ 2932.863415][ T5885] usb 3-1: USB disconnect, device number 40 [ 2932.874118][T32193] usb 6-1: config 0 descriptor?? [ 2933.008097][ T5885] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 2933.462290][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14774'. [ 2933.491905][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2933.502980][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14775'. [ 2933.523537][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2933.586481][ T9879] FAULT_INJECTION: forcing a failure. [ 2933.586481][ T9879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2933.610661][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.5.14768 Not tainted syzkaller #0 PREEMPT(full) [ 2933.610685][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2933.610695][ T9879] Call Trace: [ 2933.610703][ T9879] [ 2933.610711][ T9879] dump_stack_lvl+0x189/0x250 [ 2933.610737][ T9879] ? __pfx____ratelimit+0x10/0x10 [ 2933.610760][ T9879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2933.610783][ T9879] ? __pfx__printk+0x10/0x10 [ 2933.610813][ T9879] should_fail_ex+0x414/0x560 [ 2933.610842][ T9879] _copy_to_user+0x31/0xb0 [ 2933.610865][ T9879] simple_read_from_buffer+0xe1/0x170 [ 2933.611029][ T9879] proc_fail_nth_read+0x1b3/0x220 [ 2933.611055][ T9879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2933.611080][ T9879] ? rw_verify_area+0x2a6/0x4d0 [ 2933.611100][ T9879] ? __lock_acquire+0xab9/0xd20 [ 2933.611113][ T9879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2933.611134][ T9879] vfs_read+0x200/0xa30 [ 2933.611155][ T9879] ? fdget_pos+0x247/0x320 [ 2933.611177][ T9879] ? __pfx___mutex_lock+0x10/0x10 [ 2933.611202][ T9879] ? __pfx_vfs_read+0x10/0x10 [ 2933.611226][ T9879] ? __fget_files+0x2a/0x420 [ 2933.611247][ T9879] ? __fget_files+0x3a0/0x420 [ 2933.611271][ T9879] ? __fget_files+0x2a/0x420 [ 2933.611293][ T9879] ksys_read+0x145/0x250 [ 2933.611316][ T9879] ? __pfx_ksys_read+0x10/0x10 [ 2933.611333][ T9879] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 2933.611355][ T9879] ? syscall_user_dispatch+0x4f/0x90 [ 2933.611377][ T9879] do_syscall_64+0xfa/0xfa0 [ 2933.611399][ T9879] ? lockdep_hardirqs_on+0x9c/0x150 [ 2933.611422][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2933.611440][ T9879] ? clear_bhb_loop+0x60/0xb0 [ 2933.611461][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2933.611479][ T9879] RIP: 0033:0x7f4601b8d9dc [ 2933.611497][ T9879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2933.611512][ T9879] RSP: 002b:00007f46029e5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2933.611532][ T9879] RAX: ffffffffffffffda RBX: 00007f4601de5fa0 RCX: 00007f4601b8d9dc [ 2933.611546][ T9879] RDX: 000000000000000f RSI: 00007f46029e50a0 RDI: 0000000000000008 [ 2933.611558][ T9879] RBP: 00007f46029e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2933.611569][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2933.611580][ T9879] R13: 00007f4601de6038 R14: 00007f4601de5fa0 R15: 00007f4601f0fa28 [ 2933.611612][ T9879] [ 2933.991423][T32141] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2934.132415][T32193] usbhid 6-1:0.0: can't add hid device: -71 [ 2934.231379][T32141] usb 3-1: Using ep0 maxpacket: 32 [ 2934.237196][T32193] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2934.300226][T32141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2934.324522][T32193] usb 6-1: USB disconnect, device number 29 [ 2934.347304][T32141] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2934.464219][T32141] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2934.475579][T32141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2934.515574][T32141] usb 3-1: Product: syz [ 2934.525142][T32141] usb 3-1: Manufacturer: syz [ 2934.530494][T32141] usb 3-1: SerialNumber: syz [ 2934.569565][T32141] usb 3-1: config 0 descriptor?? [ 2934.607095][T32141] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 2934.682072][T32193] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2934.843686][T32193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2934.861435][T32193] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2934.878527][T32193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2935.000635][T32193] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2935.035702][T32193] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2935.046009][T32193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2935.054082][T32193] usb 6-1: Product: syz [ 2935.058435][T32193] usb 6-1: Manufacturer: syz [ 2935.063222][T32193] usb 6-1: SerialNumber: syz [ 2935.073875][T32193] usb 6-1: config 0 descriptor?? [ 2935.102766][T32193] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 2935.719106][T32193] scsi host1: usb-storage 6-1:0.0 [ 2935.795892][T32193] usb 6-1: USB disconnect, device number 30 [ 2936.456802][T10031] C: renamed from team_slave_0 [ 2936.464980][T10031] netlink: 'syz.3.14785': attribute type 2 has an invalid length. [ 2936.474260][T10031] netlink: 116 bytes leftover after parsing attributes in process `syz.3.14785'. [ 2936.483960][T10031] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2936.641628][T10843] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2936.771398][T10843] usb 6-1: device descriptor read/64, error -71 [ 2937.021801][T10843] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2937.161461][T10843] usb 6-1: device descriptor read/64, error -71 [ 2937.233024][T32193] usb 3-1: USB disconnect, device number 41 [ 2937.274292][T10843] usb usb6-port1: attempt power cycle [ 2937.643273][T10843] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2937.672069][T10843] usb 6-1: device descriptor read/8, error -71 [ 2937.865148][T10085] fuse: Unknown parameter 'grou00000000000000000000' [ 2937.974255][T10843] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2938.040729][T10843] usb 6-1: device descriptor read/8, error -71 [ 2938.152880][T10090] team0: Device gtp1 is of different type [ 2938.231823][T10843] usb usb6-port1: unable to enumerate USB device [ 2939.610749][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2939.620120][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2939.661394][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2939.675954][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2939.691777][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2939.705645][T10145] fuse: Bad value for 'group_id' [ 2939.711023][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2939.711038][T10145] fuse: Bad value for 'group_id' [ 2939.734614][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2939.842484][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2939.861724][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2939.872461][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14797'. [ 2940.206697][T10148] tipc: Enabled bearer , priority 10 [ 2940.506087][T10156] kvm: pic: non byte read [ 2940.513032][T10156] kvm: pic: non byte read [ 2940.663673][T13473] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 2940.765443][T25036] Bluetooth: hci2: command 0x0406 tx timeout [ 2940.801461][T13473] usb 4-1: device descriptor read/64, error -71 [ 2940.837803][T10176] JFS: charset not found [ 2941.041434][T13473] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 2941.181883][T13473] usb 4-1: device descriptor read/64, error -71 [ 2941.191768][T31795] tipc: Node number set to 1042259179 [ 2941.225225][T10182] FAULT_INJECTION: forcing a failure. [ 2941.225225][T10182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2941.275387][T10182] CPU: 1 UID: 0 PID: 10182 Comm: syz.6.14810 Not tainted syzkaller #0 PREEMPT(full) [ 2941.275413][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2941.275425][T10182] Call Trace: [ 2941.275433][T10182] [ 2941.275442][T10182] dump_stack_lvl+0x189/0x250 [ 2941.275470][T10182] ? __pfx____ratelimit+0x10/0x10 [ 2941.275493][T10182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2941.275516][T10182] ? __pfx__printk+0x10/0x10 [ 2941.275534][T10182] ? __might_fault+0xb0/0x130 [ 2941.275569][T10182] should_fail_ex+0x414/0x560 [ 2941.275597][T10182] _copy_from_user+0x2d/0xb0 [ 2941.275619][T10182] ___sys_sendmsg+0x158/0x2a0 [ 2941.275639][T10182] ? __pfx____sys_sendmsg+0x10/0x10 [ 2941.275679][T10182] ? __fget_files+0x2a/0x420 [ 2941.275692][T10182] ? __fget_files+0x3a0/0x420 [ 2941.275711][T10182] __sys_sendmmsg+0x227/0x430 [ 2941.275729][T10182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2941.275750][T10182] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2941.275781][T10182] ? ksys_write+0x22a/0x250 [ 2941.275800][T10182] ? __pfx_ksys_write+0x10/0x10 [ 2941.275822][T10182] __x64_sys_sendmmsg+0xa0/0xc0 [ 2941.275837][T10182] do_syscall_64+0xfa/0xfa0 [ 2941.275854][T10182] ? lockdep_hardirqs_on+0x9c/0x150 [ 2941.275871][T10182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2941.275884][T10182] ? clear_bhb_loop+0x60/0xb0 [ 2941.275900][T10182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2941.275913][T10182] RIP: 0033:0x7fb3eb98efc9 [ 2941.275935][T10182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2941.275947][T10182] RSP: 002b:00007fb3e9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2941.275963][T10182] RAX: ffffffffffffffda RBX: 00007fb3ebbe6180 RCX: 00007fb3eb98efc9 [ 2941.275973][T10182] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000005 [ 2941.275982][T10182] RBP: 00007fb3e9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2941.275991][T10182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2941.275999][T10182] R13: 00007fb3ebbe6218 R14: 00007fb3ebbe6180 R15: 00007fb3ebd0fa28 [ 2941.276021][T10182] [ 2941.611762][T13473] usb usb4-port1: attempt power cycle [ 2941.952205][T31795] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2941.981856][T13473] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 2942.020432][T13473] usb 4-1: device descriptor read/8, error -71 [ 2942.102804][T31795] usb 3-1: config 0 has no interfaces? [ 2942.108666][T31795] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2942.158603][T31795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2942.184367][T31795] usb 3-1: config 0 descriptor?? [ 2942.271401][T13473] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 2942.302448][T13473] usb 4-1: device descriptor read/8, error -71 [ 2942.312659][T10206] tipc: Enabling of bearer rejected, failed to enable media [ 2942.353786][T10208] FAULT_INJECTION: forcing a failure. [ 2942.353786][T10208] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2942.371466][T10208] CPU: 1 UID: 0 PID: 10208 Comm: syz.6.14816 Not tainted syzkaller #0 PREEMPT(full) [ 2942.371492][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2942.371502][T10208] Call Trace: [ 2942.371510][T10208] [ 2942.371519][T10208] dump_stack_lvl+0x189/0x250 [ 2942.371546][T10208] ? __pfx____ratelimit+0x10/0x10 [ 2942.371569][T10208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2942.371591][T10208] ? __pfx__printk+0x10/0x10 [ 2942.371612][T10208] ? fs_reclaim_acquire+0x7d/0x100 [ 2942.371646][T10208] should_fail_ex+0x414/0x560 [ 2942.371675][T10208] prepare_alloc_pages+0x213/0x610 [ 2942.371699][T10208] __alloc_frozen_pages_noprof+0x123/0x370 [ 2942.371722][T10208] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2942.371751][T10208] ? policy_nodemask+0x27c/0x720 [ 2942.371766][T10208] ? __lock_acquire+0xab9/0xd20 [ 2942.371790][T10208] alloc_pages_mpol+0x232/0x4a0 [ 2942.371813][T10208] vma_alloc_folio_noprof+0xe4/0x200 [ 2942.371839][T10208] ? page_table_check_set+0x18d/0x730 [ 2942.371863][T10208] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2942.371893][T10208] folio_prealloc+0x30/0x180 [ 2942.371919][T10208] __handle_mm_fault+0x2a8b/0x5400 [ 2942.371958][T10208] ? __pfx___handle_mm_fault+0x10/0x10 [ 2942.371994][T10208] ? follow_page_pte+0x7ef/0x13e0 [ 2942.372026][T10208] handle_mm_fault+0x40a/0x8e0 [ 2942.372059][T10208] __get_user_pages+0x165c/0x2a00 [ 2942.372113][T10208] __gup_longterm_locked+0xde4/0x1660 [ 2942.372148][T10208] ? sanity_check_pinned_pages+0x123a/0x1300 [ 2942.372179][T10208] gup_fast_fallback+0x1d65/0x22d0 [ 2942.372236][T10208] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2942.372264][T10208] ? rcu_is_watching+0x15/0xb0 [ 2942.372284][T10208] ? is_valid_gup_args+0x11f/0x200 [ 2942.372306][T10208] ? pin_user_pages_fast+0x4d/0xb0 [ 2942.372329][T10208] rds_info_getsockopt+0x1fb/0x470 [ 2942.372359][T10208] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 2942.372382][T10208] ? __might_fault+0xb0/0x130 [ 2942.372408][T10208] ? rds_getsockopt+0x2b4/0x500 [ 2942.372425][T10208] ? __pfx_rds_getsockopt+0x10/0x10 [ 2942.372444][T10208] do_sock_getsockopt+0x372/0x450 [ 2942.372467][T10208] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2942.372484][T10208] ? do_syscall_64+0xa0/0xfa0 [ 2942.372518][T10208] __x64_sys_getsockopt+0x1a5/0x250 [ 2942.372535][T10208] ? do_syscall_64+0xa0/0xfa0 [ 2942.372559][T10208] ? do_syscall_64+0xa0/0xfa0 [ 2942.372583][T10208] do_syscall_64+0xfa/0xfa0 [ 2942.372604][T10208] ? lockdep_hardirqs_on+0x9c/0x150 [ 2942.372626][T10208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2942.372641][T10208] ? clear_bhb_loop+0x60/0xb0 [ 2942.372661][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2942.372678][T10208] RIP: 0033:0x7fb3eb98efc9 [ 2942.372694][T10208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2942.372709][T10208] RSP: 002b:00007fb3ec77b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2942.372729][T10208] RAX: ffffffffffffffda RBX: 00007fb3ebbe5fa0 RCX: 00007fb3eb98efc9 [ 2942.372743][T10208] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000004 [ 2942.372754][T10208] RBP: 00007fb3ec77b090 R08: 0000200000000000 R09: 0000000000000000 [ 2942.372766][T10208] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000002 [ 2942.372777][T10208] R13: 00007fb3ebbe6038 R14: 00007fb3ebbe5fa0 R15: 00007fb3ebd0fa28 [ 2942.372810][T10208] [ 2942.734681][T31795] usb 3-1: USB disconnect, device number 42 [ 2942.768321][T13473] usb usb4-port1: unable to enumerate USB device [ 2942.814150][T10201] syz.0.14814 (10201): drop_caches: 2 [ 2942.871666][T10219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2943.240591][T10247] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 2943.247144][T10247] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2943.257340][T10247] vhci_hcd vhci_hcd.0: Device attached [ 2943.271418][T10248] vhci_hcd: cannot find a urb of seqnum 170 max seqnum 1 [ 2943.282979][T26356] vhci_hcd: stop threads [ 2943.287288][T26356] vhci_hcd: release socket [ 2943.292411][T26356] vhci_hcd: disconnect device [ 2943.644628][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2943.644646][ T30] audit: type=1804 audit(1762132207.376:13463): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.14828" name="/newroot/594/file1" dev="fuse" ino=1 res=1 errno=0 [ 2943.851387][T32193] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2944.071393][T32193] usb 4-1: Using ep0 maxpacket: 32 [ 2944.081369][T32193] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 2944.093738][T32193] usb 4-1: config 0 has no interface number 0 [ 2944.100831][T32193] usb 4-1: config 0 interface 255 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2944.145996][T32193] usb 4-1: config 0 interface 255 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2944.172377][T32193] usb 4-1: config 0 interface 255 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2944.190420][T32193] usb 4-1: config 0 interface 255 has no altsetting 0 [ 2944.207632][T32193] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 2944.227932][T32193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2944.248844][T32193] usb 4-1: config 0 descriptor?? [ 2944.995556][T32193] uclogic 0003:28BD:1903.0099: interface is invalid, ignoring [ 2945.012950][T10263] futex_wake_op: syz.3.14827 tries to shift op by 32; fix this program [ 2945.052596][T31795] usb 4-1: USB disconnect, device number 56 [ 2945.079296][T10301] batadv_slave_1: entered promiscuous mode [ 2945.586625][T10297] batadv_slave_1: left promiscuous mode [ 2945.755569][T10331] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2945.762209][T10331] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2945.773881][T10331] vhci_hcd vhci_hcd.0: Device attached [ 2945.781186][T10332] vhci_hcd: cannot find a urb of seqnum 170 max seqnum 0 [ 2945.789506][T26356] vhci_hcd: stop threads [ 2945.796191][T26356] vhci_hcd: release socket [ 2945.801075][T26356] vhci_hcd: disconnect device [ 2946.341401][T31795] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2946.411544][T10843] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2946.491443][T31795] usb 6-1: Using ep0 maxpacket: 8 [ 2946.500205][T31795] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2946.509588][T31795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2946.517824][T31795] usb 6-1: Product: syz [ 2946.522240][T31795] usb 6-1: Manufacturer: syz [ 2946.526946][T31795] usb 6-1: SerialNumber: syz [ 2946.534372][T31795] usb 6-1: config 0 descriptor?? [ 2946.543467][T31795] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2946.563233][T10843] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2946.578995][T10843] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2946.588597][T10843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2946.597046][T10843] usb 3-1: Product: syz [ 2946.601352][T10843] usb 3-1: Manufacturer: syz [ 2946.606018][T10843] usb 3-1: SerialNumber: syz [ 2946.819924][T10843] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2947.352506][T31795] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 2947.427195][T10384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2947.439930][T10384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2947.456860][T10384] binder: 10354:10384 unknown command 0 [ 2947.464354][T10384] binder: 10354:10384 ioctl c0306201 200000000080 returned -22 [ 2947.571368][T31795] gspca_sq930x: Sensor ov9630 not yet treated [ 2947.578832][T31795] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 2947.635112][T31795] usb 6-1: USB disconnect, device number 35 [ 2947.902581][T10393] __nla_validate_parse: 58 callbacks suppressed [ 2947.902601][T10393] netlink: 96 bytes leftover after parsing attributes in process `syz.6.14851'. [ 2948.187864][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14854'. [ 2948.297188][T10409] syzkaller1: entered promiscuous mode [ 2948.305358][T10409] syzkaller1: entered allmulticast mode [ 2948.440655][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14857'. [ 2948.545173][T10425] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2948.553295][T10425] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2948.566234][T10425] vhci_hcd vhci_hcd.0: Device attached [ 2948.574431][T10426] vhci_hcd: cannot find a urb of seqnum 170 max seqnum 0 [ 2948.582210][ T2831] vhci_hcd: stop threads [ 2948.586519][ T2831] vhci_hcd: release socket [ 2948.592570][ T2831] vhci_hcd: disconnect device [ 2948.726155][T10434] FAULT_INJECTION: forcing a failure. [ 2948.726155][T10434] name failslab, interval 1, probability 0, space 0, times 0 [ 2948.739638][T10434] CPU: 0 UID: 0 PID: 10434 Comm: syz.6.14862 Not tainted syzkaller #0 PREEMPT(full) [ 2948.739660][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2948.739670][T10434] Call Trace: [ 2948.739678][T10434] [ 2948.739685][T10434] dump_stack_lvl+0x189/0x250 [ 2948.739709][T10434] ? __pfx____ratelimit+0x10/0x10 [ 2948.739729][T10434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2948.739750][T10434] ? __pfx__printk+0x10/0x10 [ 2948.739774][T10434] ? __pfx___might_resched+0x10/0x10 [ 2948.739792][T10434] ? fs_reclaim_acquire+0x7d/0x100 [ 2948.739821][T10434] should_fail_ex+0x414/0x560 [ 2948.739848][T10434] should_failslab+0xa8/0x100 [ 2948.739867][T10434] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2948.739889][T10434] ? __alloc_skb+0x112/0x2d0 [ 2948.739903][T10434] ? __pfx_netlink_unicast+0x10/0x10 [ 2948.739928][T10434] __alloc_skb+0x112/0x2d0 [ 2948.739948][T10434] netlink_sendmsg+0x5c6/0xb30 [ 2948.739973][T10434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2948.739993][T10434] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2948.740017][T10434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2948.740032][T10434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2948.740049][T10434] __sock_sendmsg+0x21c/0x270 [ 2948.740073][T10434] ____sys_sendmsg+0x52d/0x830 [ 2948.740096][T10434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2948.740124][T10434] ? import_iovec+0x74/0xa0 [ 2948.740149][T10434] ___sys_sendmsg+0x21f/0x2a0 [ 2948.740169][T10434] ? __pfx____sys_sendmsg+0x10/0x10 [ 2948.740212][T10434] ? __might_fault+0xb0/0x130 [ 2948.740240][T10434] __sys_sendmmsg+0x227/0x430 [ 2948.740265][T10434] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2948.740292][T10434] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2948.740316][T10434] ? ksys_write+0x22a/0x250 [ 2948.740337][T10434] ? __pfx_ksys_write+0x10/0x10 [ 2948.740357][T10434] __x64_sys_sendmmsg+0xa0/0xc0 [ 2948.740395][T10434] do_syscall_64+0xfa/0xfa0 [ 2948.740419][T10434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2948.740442][T10434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2948.740452][T10434] ? clear_bhb_loop+0x60/0xb0 [ 2948.740463][T10434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2948.740473][T10434] RIP: 0033:0x7fb3eb98efc9 [ 2948.740484][T10434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2948.740494][T10434] RSP: 002b:00007fb3ec77b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2948.740512][T10434] RAX: ffffffffffffffda RBX: 00007fb3ebbe5fa0 RCX: 00007fb3eb98efc9 [ 2948.740525][T10434] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 2948.740538][T10434] RBP: 00007fb3ec77b090 R08: 0000000000000000 R09: 0000000000000000 [ 2948.740550][T10434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2948.740561][T10434] R13: 00007fb3ebbe6038 R14: 00007fb3ebbe5fa0 R15: 00007fb3ebd0fa28 [ 2948.740590][T10434] [ 2949.023173][ C0] vkms_vblank_simulate: vblank timer overrun [ 2949.306301][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14868'. [ 2949.317332][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14868'. [ 2949.443814][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14868'. [ 2949.517628][T10464] netlink: 'syz.3.14871': attribute type 63 has an invalid length. [ 2949.599485][T32193] usb 3-1: USB disconnect, device number 43 [ 2949.644828][T32193] usblp0: removed [ 2950.086221][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14876'. [ 2950.192928][T10484] netlink: 348 bytes leftover after parsing attributes in process `syz.5.14876'. [ 2950.471076][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14873'. [ 2950.483159][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14873'. [ 2950.571405][T32193] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 2950.643486][T25036] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2950.661673][T25036] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2950.674817][T25036] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2950.686109][T25036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2950.709088][T25036] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2950.755642][T32193] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2950.774810][T32193] usb 4-1: not running at top speed; connect to a high speed hub [ 2950.786763][T32193] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2950.797935][T32193] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2950.811127][T32193] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2950.826515][T32193] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 2950.860589][T32193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2950.886491][T32193] usb 4-1: Product: syz [ 2950.898249][T32193] usb 4-1: Manufacturer: syz [ 2950.908406][T32193] usb 4-1: SerialNumber: syz [ 2950.932945][T10488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2951.192578][T32193] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input208 [ 2951.215308][ T5183] bcm5974 4-1:1.0: could not read from device [ 2951.234042][ T5183] bcm5974 4-1:1.0: could not read from device [ 2951.282489][T32193] usb 4-1: USB disconnect, device number 57 [ 2951.311472][T31795] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2951.472083][T31795] usb 6-1: Using ep0 maxpacket: 8 [ 2951.480866][T31795] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2951.493767][T31795] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2951.494141][T26356] bond0: (slave netdevsim0): Releasing backup interface [ 2951.522663][T31795] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2951.546461][T31795] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2951.561123][T31795] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2951.657041][T31795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 2951.672772][T31795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2951.715040][T31795] usb 6-1: SerialNumber: syz [ 2951.787384][T31795] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 2951.822803][T31795] usbtest 6-1:1.0: Linux gadget zero [ 2951.836605][T10502] chnl_net:caif_netlink_parms(): no params data found [ 2951.841722][T31795] usbtest 6-1:1.0: high-speed {control in/out bulk-in int-in} tests (+alt) [ 2951.943685][T10688] dummy0: entered promiscuous mode [ 2951.951015][T10688] dummy0: left promiscuous mode [ 2951.988063][T26356] bridge_slave_1: left allmulticast mode [ 2951.993886][T26356] bridge_slave_1: left promiscuous mode [ 2951.999604][T26356] bridge0: port 2(bridge_slave_1) entered disabled state [ 2952.009476][T26356] bridge_slave_0: left allmulticast mode [ 2952.015794][T26356] bridge_slave_0: left promiscuous mode [ 2952.022713][T26356] bridge0: port 1(bridge_slave_0) entered disabled state [ 2952.141418][T31795] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2952.176652][ T30] audit: type=1326 audit(1762132215.906:13464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.5.14878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2952.217295][ T30] audit: type=1326 audit(1762132215.906:13465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.5.14878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2952.240878][ T30] audit: type=1326 audit(1762132215.906:13466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.5.14878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2952.267926][T32141] usb 6-1: USB disconnect, device number 36 [ 2952.290298][ T30] audit: type=1326 audit(1762132215.906:13467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.5.14878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2952.335253][ T30] audit: type=1326 audit(1762132215.906:13468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.5.14878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2952.360134][ T30] audit: type=1326 audit(1762132215.906:13469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.5.14878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2952.401763][ T30] audit: type=1326 audit(1762132215.906:13470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.5.14878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2952.402898][T31795] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2952.431166][T31795] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2952.453740][ T30] audit: type=1326 audit(1762132215.906:13471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.5.14878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2952.453814][T31795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2952.486629][T31795] usb 3-1: Product: syz [ 2952.491019][T31795] usb 3-1: Manufacturer: syz [ 2952.497195][T31795] usb 3-1: SerialNumber: syz [ 2952.734194][T31795] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2952.754400][T26356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2952.776462][T26356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2952.786938][T26356] bond0 (unregistering): Released all slaves [ 2952.799806][T26356] bond1 (unregistering): Released all slaves [ 2952.820917][T26356] bond2 (unregistering): Released all slaves [ 2952.841457][T25036] Bluetooth: hci5: command tx timeout [ 2952.975858][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 2952.984087][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2952.991966][T10502] bridge_slave_0: entered allmulticast mode [ 2953.000501][T10502] bridge_slave_0: entered promiscuous mode [ 2953.010762][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2953.022176][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 2953.029892][T10502] bridge_slave_1: entered allmulticast mode [ 2953.052276][T10502] bridge_slave_1: entered promiscuous mode [ 2953.067972][T26356] tipc: Left network mode [ 2953.378322][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2953.391095][T10502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2953.435060][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2953.448671][T10502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2953.513801][T10804] binder: 10675:10804 unknown command 0 [ 2953.520078][T10804] binder: 10675:10804 ioctl c0306201 200000000080 returned -22 [ 2953.541052][T10502] team0: Port device team_slave_0 added [ 2954.075503][T10502] team0: Port device team_slave_1 added [ 2954.335455][T32193] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2954.512321][T32193] usb 6-1: Using ep0 maxpacket: 8 [ 2954.521185][T32193] usb 6-1: config 162 has an invalid interface number: 204 but max is 3 [ 2954.538841][T32193] usb 6-1: config 162 has an invalid interface number: 27 but max is 3 [ 2954.570411][T32193] usb 6-1: config 162 contains an unexpected descriptor of type 0x2, skipping [ 2954.590118][T32193] usb 6-1: config 162 has an invalid interface number: 41 but max is 3 [ 2954.610579][T32193] usb 6-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 2954.634550][T32193] usb 6-1: config 162 has 3 interfaces, different from the descriptor's value: 4 [ 2954.675690][T32193] usb 6-1: config 162 has no interface number 0 [ 2954.691195][T32193] usb 6-1: config 162 has no interface number 1 [ 2954.714415][T32193] usb 6-1: config 162 has no interface number 2 [ 2954.739819][T32193] usb 6-1: config 162 interface 204 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2954.766975][T32193] usb 6-1: config 162 interface 27 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 2954.781211][T10502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2954.808994][T32193] usb 6-1: config 162 interface 27 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 2954.830347][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2954.877196][T32193] usb 6-1: config 162 interface 41 altsetting 16 endpoint 0x5 has invalid maxpacket 33900, setting to 1024 [ 2954.899429][T32193] usb 6-1: config 162 interface 41 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 2954.931203][T25036] Bluetooth: hci5: command tx timeout [ 2954.958879][T32193] usb 6-1: config 162 interface 27 has no altsetting 0 [ 2954.966755][T32193] usb 6-1: config 162 interface 41 has no altsetting 0 [ 2954.998512][T32193] usb 6-1: New USB device found, idVendor=19d2, idProduct=ff94, bcdDevice=3f.70 [ 2955.010854][T32193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2955.020955][T32193] usb 6-1: Product: syz [ 2955.026148][T10502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2955.026216][T32193] usb 6-1: Manufacturer: syz [ 2955.052343][T32193] usb 6-1: SerialNumber: syz [ 2955.212016][T10502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2955.219684][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2955.359414][T10502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2955.518484][T10809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2955.576762][T10809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2955.654688][T10843] usb 3-1: USB disconnect, device number 44 [ 2955.714676][T10843] usblp0: removed [ 2955.784249][T10933] fuse: Bad value for 'fd' [ 2955.834971][T32193] option 6-1:162.204: GSM modem (1-port) converter detected [ 2955.993491][T32193] usb 6-1: USB disconnect, device number 37 [ 2956.015536][T32193] option 6-1:162.204: device disconnected [ 2956.146739][T10502] hsr_slave_0: entered promiscuous mode [ 2956.198358][T10502] hsr_slave_1: entered promiscuous mode [ 2956.223623][T10502] debugfs: 'hsr0' already exists in 'hsr' [ 2956.229406][T10502] Cannot create hsr debugfs directory [ 2956.511539][T26356] hsr_slave_0: left promiscuous mode [ 2956.598436][T26356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2956.719051][T26356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2956.756410][T11016] __nla_validate_parse: 2 callbacks suppressed [ 2956.756428][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14901'. [ 2956.925611][T31795] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2957.003004][T25036] Bluetooth: hci5: command tx timeout [ 2957.081191][T26356] pim6reg (unregistering): left allmulticast mode [ 2957.118419][T31795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2957.240030][T31795] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2957.279496][T31795] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 2957.308004][T31795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2957.325042][T26356] pimreg (unregistering): left allmulticast mode [ 2957.398856][T31795] usb 4-1: config 0 descriptor?? [ 2958.567745][T26356] team0 (unregistering): Port device team_slave_1 removed [ 2959.051234][T31795] usb 4-1: USB disconnect, device number 58 [ 2959.081686][T25036] Bluetooth: hci5: command tx timeout [ 2959.166662][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.173269][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.949898][T11066] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14904'. [ 2960.038801][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14904'. [ 2960.202709][T11101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14908'. [ 2960.446960][T26356] IPVS: stop unused estimator thread 0... [ 2960.638781][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14908'. [ 2960.956129][T11129] netlink: 'syz.3.14910': attribute type 12 has an invalid length. [ 2961.221058][T11129] netlink: 120 bytes leftover after parsing attributes in process `syz.3.14910'. [ 2961.460593][T11158] fuse: Unknown parameter 'grou00000000000000000000' [ 2962.518829][T10502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2962.532946][T11209] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 2962.539473][T11209] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2962.563047][T10502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2962.582016][T11209] vhci_hcd vhci_hcd.0: Device attached [ 2962.596373][T11215] vhci_hcd: connection closed [ 2962.596714][T26356] vhci_hcd: stop threads [ 2962.606375][T26356] vhci_hcd: release socket [ 2962.610911][T26356] vhci_hcd: disconnect device [ 2962.620814][T10502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2962.659831][T10502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2962.671407][T32141] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2962.822665][T32141] usb 6-1: device descriptor read/64, error -71 [ 2963.045935][T10502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2963.071828][T32141] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2963.136447][T10502] 8021q: adding VLAN 0 to HW filter on device team0 [ 2963.167329][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 2963.174676][T12165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2963.221459][T32141] usb 6-1: device descriptor read/64, error -71 [ 2963.407042][T32141] usb usb6-port1: attempt power cycle [ 2963.582905][T11236] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2963.635973][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 2963.643185][T12165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2963.761456][T32141] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2963.792906][T32141] usb 6-1: device descriptor read/8, error -71 [ 2963.810451][ T30] audit: type=1804 audit(1762132227.536:13472): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.14921" name="/newroot/214/file1" dev="fuse" ino=1 res=1 errno=0 [ 2964.031380][T32141] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2964.062120][T32141] usb 6-1: device descriptor read/8, error -71 [ 2964.169080][T10502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2964.176851][T32141] usb usb6-port1: unable to enumerate USB device [ 2964.268408][T10502] veth0_vlan: entered promiscuous mode [ 2964.283443][T10502] veth1_vlan: entered promiscuous mode [ 2964.380988][T10502] veth0_macvtap: entered promiscuous mode [ 2964.424084][T10502] veth1_macvtap: entered promiscuous mode [ 2964.455988][T10502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2964.493420][T10502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2964.527378][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.545770][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.619573][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.791188][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.999488][ T5829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2965.034766][ T5829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2965.078954][T19514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2965.089701][T19514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2965.143796][T11414] netlink: 'syz.3.14924': attribute type 1 has an invalid length. [ 2965.254362][T11423] macvlan2: entered promiscuous mode [ 2965.280590][T11423] macvlan2: entered allmulticast mode [ 2965.305380][T11423] bond2: entered promiscuous mode [ 2965.325538][T11423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2965.360921][T11423] bond2: left promiscuous mode [ 2965.532508][T11459] syzkaller0: entered promiscuous mode [ 2965.548364][T11459] syzkaller0: entered allmulticast mode [ 2965.579847][T11468] netlink: 'syz.0.14926': attribute type 3 has an invalid length. [ 2965.961242][T31795] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2966.153055][T31795] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2966.175348][T31795] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2966.191629][T31795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2966.201638][T31795] usb 4-1: Product: syz [ 2966.207864][ T30] audit: type=1804 audit(1762132229.936:13473): pid=11509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.14931" name="/newroot/217/file1" dev="fuse" ino=1 res=1 errno=0 [ 2966.220271][T31795] usb 4-1: Manufacturer: syz [ 2966.304207][T31795] usb 4-1: SerialNumber: syz [ 2966.527898][T31795] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2966.529917][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.548953][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.560140][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.570297][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.583888][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.596133][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.612103][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.623540][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.633074][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.644934][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14930'. [ 2966.718446][T11532] syz.5.14930 (11532): drop_caches: 2 [ 2966.944632][T11539] syzkaller1: entered promiscuous mode [ 2966.950603][T11539] syzkaller1: entered allmulticast mode [ 2966.986102][ T30] audit: type=1326 audit(1762132230.716:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.0.14935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33818efc9 code=0x7ffc0000 [ 2967.009465][ C1] vkms_vblank_simulate: vblank timer overrun [ 2967.018659][ T30] audit: type=1326 audit(1762132230.716:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.0.14935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fd33818efc9 code=0x7ffc0000 [ 2967.043452][ T30] audit: type=1326 audit(1762132230.716:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.0.14935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33818efc9 code=0x7ffc0000 [ 2967.070036][ T30] audit: type=1326 audit(1762132230.716:13477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.0.14935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd33818efc9 code=0x7ffc0000 [ 2967.092725][ C1] vkms_vblank_simulate: vblank timer overrun [ 2967.099942][ T30] audit: type=1326 audit(1762132230.716:13478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.0.14935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33818efc9 code=0x7ffc0000 [ 2967.125244][ T30] audit: type=1326 audit(1762132230.716:13479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.0.14935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33818efc9 code=0x7ffc0000 [ 2967.148112][ C1] vkms_vblank_simulate: vblank timer overrun [ 2967.157219][T11556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2967.166452][T11556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2967.186800][T11556] binder: 11482:11556 unknown command 0 [ 2967.202579][T11556] binder: 11482:11556 ioctl c0306201 200000000080 returned -22 [ 2967.831425][T10843] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2967.881947][T31795] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2967.983019][T10843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2967.993132][T10843] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2968.003661][T10843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2968.014374][T10843] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2968.027230][T10843] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2968.036668][T10843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.046085][T10843] usb 3-1: Product: syz [ 2968.053290][T31795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2968.064291][T10843] usb 3-1: Manufacturer: syz [ 2968.068910][T10843] usb 3-1: SerialNumber: syz [ 2968.073596][T31795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2968.085135][T31795] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2968.095396][T10843] usb 3-1: config 0 descriptor?? [ 2968.100662][T31795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2968.111479][T10843] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 2968.123015][T31795] usb 6-1: config 0 descriptor?? [ 2968.438333][T10843] scsi host1: usb-storage 3-1:0.0 [ 2968.462852][T10843] usb 3-1: USB disconnect, device number 45 [ 2968.542715][T31795] cp2112 0003:10C4:EA90.009A: unknown main item tag 0x0 [ 2968.549765][T31795] cp2112 0003:10C4:EA90.009A: unknown main item tag 0x0 [ 2968.560735][T31795] cp2112 0003:10C4:EA90.009A: unknown main item tag 0x0 [ 2968.568442][T31795] cp2112 0003:10C4:EA90.009A: unknown main item tag 0x0 [ 2968.582700][T31795] cp2112 0003:10C4:EA90.009A: unknown main item tag 0x0 [ 2968.589894][T31795] cp2112 0003:10C4:EA90.009A: unknown main item tag 0x0 [ 2968.605846][T31795] cp2112 0003:10C4:EA90.009A: unknown main item tag 0x0 [ 2968.617901][T31795] cp2112 0003:10C4:EA90.009A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 2968.738832][T31795] cp2112 0003:10C4:EA90.009A: Part Number: 0x82 Device Version: 0xFE [ 2969.039613][T11603] syzkaller0: entered promiscuous mode [ 2969.045784][T11603] syzkaller0: entered allmulticast mode [ 2969.328854][T32141] usb 4-1: USB disconnect, device number 59 [ 2969.343228][T32141] usblp0: removed [ 2969.685745][T11636] FAULT_INJECTION: forcing a failure. [ 2969.685745][T11636] name failslab, interval 1, probability 0, space 0, times 0 [ 2969.723404][T11636] CPU: 1 UID: 0 PID: 11636 Comm: syz.6.14944 Not tainted syzkaller #0 PREEMPT(full) [ 2969.723431][T11636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2969.723442][T11636] Call Trace: [ 2969.723450][T11636] [ 2969.723458][T11636] dump_stack_lvl+0x189/0x250 [ 2969.723487][T11636] ? __pfx____ratelimit+0x10/0x10 [ 2969.723509][T11636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2969.723531][T11636] ? __pfx__printk+0x10/0x10 [ 2969.723556][T11636] ? __pfx___might_resched+0x10/0x10 [ 2969.723573][T11636] ? fs_reclaim_acquire+0x7d/0x100 [ 2969.723604][T11636] should_fail_ex+0x414/0x560 [ 2969.723635][T11636] should_failslab+0xa8/0x100 [ 2969.723656][T11636] __kmalloc_noprof+0xcb/0x7f0 [ 2969.723679][T11636] ? tomoyo_encode+0x28b/0x550 [ 2969.723709][T11636] tomoyo_encode+0x28b/0x550 [ 2969.723739][T11636] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2969.723773][T11636] ? tomoyo_domain+0xd9/0x130 [ 2969.723796][T11636] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2969.723818][T11636] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2969.723842][T11636] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2969.723903][T11636] ? __fget_files+0x2a/0x420 [ 2969.723929][T11636] ? __fget_files+0x3a0/0x420 [ 2969.723945][T11636] ? __fget_files+0x2a/0x420 [ 2969.723966][T11636] security_file_ioctl+0xcb/0x2d0 [ 2969.723990][T11636] __se_sys_ioctl+0x47/0x170 [ 2969.724015][T11636] do_syscall_64+0xfa/0xfa0 [ 2969.724036][T11636] ? lockdep_hardirqs_on+0x9c/0x150 [ 2969.724059][T11636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2969.724077][T11636] ? clear_bhb_loop+0x60/0xb0 [ 2969.724099][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2969.724117][T11636] RIP: 0033:0x7fb3eb98efc9 [ 2969.724134][T11636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2969.724149][T11636] RSP: 002b:00007fb3ec77b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2969.724168][T11636] RAX: ffffffffffffffda RBX: 00007fb3ebbe5fa0 RCX: 00007fb3eb98efc9 [ 2969.724182][T11636] RDX: 00002000000004c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 2969.724194][T11636] RBP: 00007fb3ec77b090 R08: 0000000000000000 R09: 0000000000000000 [ 2969.724206][T11636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2969.724216][T11636] R13: 00007fb3ebbe6038 R14: 00007fb3ebbe5fa0 R15: 00007fb3ebd0fa28 [ 2969.724247][T11636] [ 2969.724716][T11636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2969.831401][T10843] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2970.031564][T32141] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2970.271353][T32141] usb 4-1: Using ep0 maxpacket: 16 [ 2970.280894][T32141] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2970.293264][T32141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2970.302722][T32141] usb 4-1: Product: syz [ 2970.307266][T32141] usb 4-1: Manufacturer: syz [ 2970.312418][T32141] usb 4-1: SerialNumber: syz [ 2970.312444][T10843] usb 3-1: Using ep0 maxpacket: 8 [ 2970.321755][T32141] usb 4-1: config 0 descriptor?? [ 2970.338186][ T30] audit: type=1804 audit(1762132234.066:13480): pid=11664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.14948" name="/newroot/7/file1" dev="fuse" ino=1 res=1 errno=0 [ 2970.359113][ C1] vkms_vblank_simulate: vblank timer overrun [ 2970.370068][T10843] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2970.407076][T10843] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2970.421932][T32141] as10x_usb: device has been detected [ 2970.431952][T32141] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2970.449789][T32141] usb 4-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 2970.465736][T32141] as10x_usb: error during firmware upload part1 [ 2970.472961][T32141] Registered device Sky IT Digital Key (green led) [ 2970.503685][T10843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2970.624536][T10843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2970.636866][T10843] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2970.646517][T10843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2970.669095][T10843] hub 3-1:1.0: bad descriptor, ignoring hub [ 2970.684313][T10843] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2970.751772][T10843] cdc_wdm 3-1:1.0: skipping garbage [ 2970.763735][T10843] cdc_wdm 3-1:1.0: skipping garbage [ 2970.792255][T10843] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 2970.840449][T10843] cdc_wdm 3-1:1.0: Unknown control protocol [ 2970.998990][T11695] random: crng reseeded on system resumption [ 2971.051993][ T4011] usb 6-1: USB disconnect, device number 42 [ 2971.165528][T32141] usb 4-1: USB disconnect, device number 60 [ 2971.234789][T32193] usb 3-1: USB disconnect, device number 46 [ 2971.271746][ T4011] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 2971.295166][T32141] Unregistered device Sky IT Digital Key (green led) [ 2971.304106][T32141] as10x_usb: device has been disconnected [ 2971.457050][T11735] ªªªªªª: renamed from wg2 (while UP) [ 2971.616670][ T4011] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2971.641638][ T4011] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2971.655938][ T4011] usb 6-1: can't read configurations, error -71 [ 2972.731470][T13473] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2972.871477][T13473] usb 3-1: device descriptor read/64, error -71 [ 2973.131762][T13473] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2973.269716][ T3593] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2973.361400][T13473] usb 3-1: device descriptor read/64, error -71 [ 2973.425683][ T30] audit: type=1804 audit(1762132237.156:13481): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.14963" name="/newroot/139/file1" dev="fuse" ino=1 res=1 errno=0 [ 2973.461376][ T3593] usb 4-1: Using ep0 maxpacket: 16 [ 2973.471138][ T3593] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2973.492016][T13473] usb usb3-port1: attempt power cycle [ 2973.511049][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2973.562949][ T3593] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2973.643991][ T3593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2973.653142][ T3593] usb 4-1: Product: syz [ 2973.658549][ T3593] usb 4-1: Manufacturer: syz [ 2973.670907][ T3593] usb 4-1: SerialNumber: syz [ 2973.732882][ T3593] usb 4-1: config 0 descriptor?? [ 2973.741805][ T3593] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2973.751058][ T3593] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2973.831598][T13473] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2973.852194][T13473] usb 3-1: device descriptor read/8, error -71 [ 2973.863385][T11794] __nla_validate_parse: 42 callbacks suppressed [ 2973.863403][T11794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14964'. [ 2974.091429][T13473] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2974.112360][T13473] usb 3-1: device descriptor read/8, error -71 [ 2974.231937][T13473] usb usb3-port1: unable to enumerate USB device [ 2974.345166][ T3593] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2974.353106][ T3593] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 2974.967732][ T3593] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 2975.047803][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14971'. [ 2975.136357][T11872] fuse: Unknown parameter 'grou00000000000000000000' [ 2975.529925][T11891] netlink: 27 bytes leftover after parsing attributes in process `syz.2.14976'. [ 2975.653168][ T30] audit: type=1804 audit(1762132239.386:13482): pid=11897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.14977" name="/newroot/224/file1" dev="fuse" ino=1 res=1 errno=0 [ 2975.671493][ T5885] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2975.831567][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 2975.837861][ T5885] usb 6-1: too many configurations: 133, using maximum allowed: 8 [ 2975.848108][ T5885] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2975.855949][ T5885] usb 6-1: can't read configurations, error -61 [ 2976.001634][ T5885] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2976.171387][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 2976.177359][ T5885] usb 6-1: too many configurations: 133, using maximum allowed: 8 [ 2976.187222][ T5885] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2976.195717][ T5885] usb 6-1: can't read configurations, error -61 [ 2976.204240][ T5885] usb usb6-port1: attempt power cycle [ 2976.533225][ T3593] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 2976.542809][ T3593] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 2976.558260][ T3593] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 2976.565582][ T5885] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2976.574627][ T3593] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 2976.587145][ T3593] usb 4-1: USB disconnect, device number 61 [ 2976.612024][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 2976.623911][ T5885] usb 6-1: too many configurations: 133, using maximum allowed: 8 [ 2976.637739][ T5885] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2976.649116][ T5885] usb 6-1: can't read configurations, error -61 [ 2976.677468][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14980'. [ 2976.698404][ T30] audit: type=1326 audit(1762132240.426:13483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.2.14980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2098efc9 code=0x7ffc0000 [ 2976.723299][ C0] vkms_vblank_simulate: vblank timer overrun [ 2976.731894][ T30] audit: type=1326 audit(1762132240.426:13484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.2.14980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2098efc9 code=0x7ffc0000 [ 2976.754483][ C0] vkms_vblank_simulate: vblank timer overrun [ 2976.761594][ T30] audit: type=1326 audit(1762132240.426:13485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.2.14980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdd2098efc9 code=0x7ffc0000 [ 2976.791418][ T30] audit: type=1326 audit(1762132240.426:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.2.14980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2098efc9 code=0x7ffc0000 [ 2976.816480][ T5885] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2976.825652][ T30] audit: type=1326 audit(1762132240.426:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.2.14980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2098efc9 code=0x7ffc0000 [ 2976.849667][ T30] audit: type=1326 audit(1762132240.456:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.2.14980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fdd2098efc9 code=0x7ffc0000 [ 2976.872305][ C0] vkms_vblank_simulate: vblank timer overrun [ 2976.881559][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 2976.887763][ T30] audit: type=1326 audit(1762132240.466:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.2.14980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2098efc9 code=0x7ffc0000 [ 2976.887964][ T5885] usb 6-1: too many configurations: 133, using maximum allowed: 8 [ 2976.922315][ T5885] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2976.935097][ T5885] usb 6-1: can't read configurations, error -61 [ 2976.941437][ T30] audit: type=1326 audit(1762132240.466:13490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.2.14980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2098efc9 code=0x7ffc0000 [ 2976.941527][ T30] audit: type=1326 audit(1762132240.466:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.2.14980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd2098efc9 code=0x7ffc0000 [ 2976.967591][ T5885] usb usb6-port1: unable to enumerate USB device [ 2976.987861][ C0] vkms_vblank_simulate: vblank timer overrun [ 2977.253135][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14981'. [ 2977.264911][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14981'. [ 2977.274146][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14981'. [ 2977.283289][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14981'. [ 2977.292477][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14981'. [ 2977.301934][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14981'. [ 2977.669307][T11928] fuse: Unknown parameter 'grou00000000000000000000' [ 2978.685929][T11949] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 2978.692484][T11949] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2978.733059][T11949] vhci_hcd vhci_hcd.0: Device attached [ 2978.746804][T11952] vhci_hcd: connection closed [ 2978.747105][ T2801] vhci_hcd: stop threads [ 2978.757879][ T2801] vhci_hcd: release socket [ 2978.799030][ T2801] vhci_hcd: disconnect device [ 2979.122719][T11965] __nla_validate_parse: 40 callbacks suppressed [ 2979.122733][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14991'. [ 2980.719075][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14993'. [ 2981.031144][T12002] cgroup: fork rejected by pids controller in /syz2 [ 2981.466012][ T2037] syz_tun (unregistering): left allmulticast mode [ 2981.532817][T26356] syzkaller0: tun_net_xmit 76 [ 2981.537769][T26356] syzkaller0: tun_net_xmit 48 [ 2981.543886][T12119] syzkaller0: create flow: hash 3675042740 index 1 [ 2981.561734][T13473] syzkaller0: tun_net_xmit 76 [ 2981.690816][T12118] syzkaller0: delete flow: hash 3675042740 index 1 [ 2981.892533][T31795] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2982.080963][T31795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2982.092856][T31795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2982.118795][T31795] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 2982.128448][T31795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2982.168920][T31795] usb 4-1: config 0 descriptor?? [ 2982.287838][T12147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2982.330036][T12147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2982.345572][T12147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2982.357902][T12147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2982.368295][T12147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2982.600722][T31795] lenovo 0003:17EF:6067.009B: unknown main item tag 0x0 [ 2982.609227][T31795] lenovo 0003:17EF:6067.009B: unknown main item tag 0x0 [ 2982.617297][T31795] lenovo 0003:17EF:6067.009B: unknown main item tag 0x0 [ 2982.631604][T31795] lenovo 0003:17EF:6067.009B: unknown main item tag 0x0 [ 2982.638743][T31795] lenovo 0003:17EF:6067.009B: unknown main item tag 0x0 [ 2982.646667][T31795] lenovo 0003:17EF:6067.009B: unknown main item tag 0x0 [ 2982.685714][T31795] lenovo 0003:17EF:6067.009B: unknown main item tag 0x0 [ 2982.724638][T31795] lenovo 0003:17EF:6067.009B: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 2982.870524][T13473] usb 4-1: USB disconnect, device number 62 [ 2982.903770][T12158] fido_id[12158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 2983.734255][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15007'. [ 2984.453260][T12147] Bluetooth: hci1: command tx timeout [ 2984.761574][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2985.126964][T13473] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2985.286327][T13473] usb 6-1: Using ep0 maxpacket: 16 [ 2985.295544][T13473] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2985.306753][T13473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2985.315389][T13473] usb 6-1: Product: syz [ 2985.319577][T13473] usb 6-1: Manufacturer: syz [ 2985.324460][T13473] usb 6-1: SerialNumber: syz [ 2985.332128][T13473] usb 6-1: config 0 descriptor?? [ 2985.345845][T13473] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 2985.782363][T13473] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 2985.871379][T32141] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2986.063247][T32141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2986.074783][T32141] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2986.087004][T32141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2986.098523][T32141] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 2986.109047][T32141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2986.129629][T12151] chnl_net:caif_netlink_parms(): no params data found [ 2986.130991][T32141] usb 4-1: config 0 descriptor?? [ 2986.165386][T32141] em28xx 4-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 2986.176386][T32141] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2986.363171][T12151] bridge0: port 1(bridge_slave_0) entered blocking state [ 2986.371971][T12151] bridge0: port 1(bridge_slave_0) entered disabled state [ 2986.379897][T12151] bridge_slave_0: entered allmulticast mode [ 2986.388390][T12151] bridge_slave_0: entered promiscuous mode [ 2986.458699][T12151] bridge0: port 2(bridge_slave_1) entered blocking state [ 2986.470074][T12151] bridge0: port 2(bridge_slave_1) entered disabled state [ 2986.486636][T12151] bridge_slave_1: entered allmulticast mode [ 2986.505333][T12151] bridge_slave_1: entered promiscuous mode [ 2986.531447][T12147] Bluetooth: hci1: command tx timeout [ 2986.604266][T12151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2986.656951][T12151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2986.751194][T12151] team0: Port device team_slave_0 added [ 2986.763905][T12151] team0: Port device team_slave_1 added [ 2986.902520][T12151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2986.938300][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2986.992800][T12151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2986.998573][T32141] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2987.009099][T12151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2987.029849][T32141] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 2987.038390][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2987.065207][T32141] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 2987.075818][T12151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2987.076389][T32141] em28xx 4-1:0.0: No AC97 audio processor [ 2987.119039][T32141] usb 4-1: USB disconnect, device number 63 [ 2987.140291][T32141] em28xx 4-1:0.0: Disconnecting em28xx [ 2987.164917][T32141] em28xx 4-1:0.0: Freeing device [ 2987.227116][T12151] hsr_slave_0: entered promiscuous mode [ 2987.235606][T12151] hsr_slave_1: entered promiscuous mode [ 2987.244027][T12151] debugfs: 'hsr0' already exists in 'hsr' [ 2987.249879][T12151] Cannot create hsr debugfs directory [ 2987.553712][T12151] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2987.667198][T12151] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2987.768219][T12151] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2987.846205][T12151] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2987.909449][T31795] usb 6-1: USB disconnect, device number 49 [ 2987.937781][T31795] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 2987.945473][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2987.945491][ T30] audit: type=1326 audit(1762132251.676:13509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2987.991578][ T30] audit: type=1326 audit(1762132251.676:13510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2988.021772][T12583] binder: 12582:12583 ioctl ab07 4 returned -22 [ 2988.038684][ T30] audit: type=1326 audit(1762132251.676:13511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2988.040062][T31795] visor 6-1:0.0: device disconnected [ 2988.064056][ T30] audit: type=1326 audit(1762132251.676:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2988.263621][ T30] audit: type=1326 audit(1762132251.676:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2988.276000][T12594] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 2988.293029][T12594] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2988.359178][ T30] audit: type=1326 audit(1762132251.676:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2988.407525][T12594] vhci_hcd vhci_hcd.0: Device attached [ 2988.439886][T12602] vhci_hcd: connection closed [ 2988.440304][ T5829] vhci_hcd: stop threads [ 2988.450634][ T30] audit: type=1326 audit(1762132251.676:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2988.473881][ T5829] vhci_hcd: release socket [ 2988.473904][ T5829] vhci_hcd: disconnect device [ 2988.492234][T12151] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2988.506677][T12151] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2988.515266][ T30] audit: type=1326 audit(1762132251.676:13516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2988.540909][T12151] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2988.556461][T12151] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2988.568585][ T30] audit: type=1326 audit(1762132251.676:13517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2988.612982][T12147] Bluetooth: hci1: command tx timeout [ 2988.613120][ T30] audit: type=1326 audit(1762132251.676:13518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12582 comm="syz.5.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4601b8efc9 code=0x7ffc0000 [ 2988.816686][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15021'. [ 2989.379932][T12628] bridge_slave_1: left allmulticast mode [ 2989.425445][T12628] bridge_slave_1: left promiscuous mode [ 2989.431924][T12628] bridge0: port 2(bridge_slave_1) entered disabled state [ 2989.480322][T12628] bridge_slave_0: left allmulticast mode [ 2989.488181][T12628] bridge_slave_0: left promiscuous mode [ 2989.514946][T12628] bridge0: port 1(bridge_slave_0) entered disabled state [ 2990.197666][T12151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2990.265346][T12151] 8021q: adding VLAN 0 to HW filter on device team0 [ 2990.329447][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 2990.336689][T12165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2990.449346][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15027'. [ 2990.759523][T12147] Bluetooth: hci1: command tx timeout [ 2990.855601][ T2840] bridge0: port 2(bridge_slave_1) entered blocking state [ 2990.862914][ T2840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2991.197334][T12151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2991.374000][T12151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2991.694422][T12151] veth0_vlan: entered promiscuous mode [ 2991.726882][T12151] veth1_vlan: entered promiscuous mode [ 2992.153370][T12151] veth0_macvtap: entered promiscuous mode [ 2992.172753][T13473] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2992.192698][T12151] veth1_macvtap: entered promiscuous mode [ 2992.238361][T12151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2992.269051][T12151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2992.374983][T13473] usb 6-1: Using ep0 maxpacket: 32 [ 2992.390225][T13473] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2992.454553][T19514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2992.533819][T13473] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2992.562943][T19514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2992.598593][T13473] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2992.704195][T12688] netlink: 'syz.6.15031': attribute type 10 has an invalid length. [ 2992.719733][T13473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.732315][T12688] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15031'. [ 2992.741775][T13473] usb 6-1: Product: syz [ 2992.746363][T13473] usb 6-1: Manufacturer: syz [ 2992.749055][T19514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2992.750970][T13473] usb 6-1: SerialNumber: syz [ 2992.770409][T12688] dummy0: entered promiscuous mode [ 2992.799907][T12688] team0: Port device dummy0 removed [ 2992.834063][T12688] bridge0: port 4(dummy0) entered blocking state [ 2992.864107][T13473] usb 6-1: config 0 descriptor?? [ 2992.871531][T12688] bridge0: port 4(dummy0) entered disabled state [ 2992.878100][T12688] dummy0: entered allmulticast mode [ 2992.913535][T19514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2992.939586][T26356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2992.956777][T26356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2992.980702][T13473] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 2993.134922][T19514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2993.152973][T19514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2993.338036][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15033'. [ 2993.392183][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15033'. [ 2993.718080][T12721] IPv6: Can't replace route, no match found [ 2994.353456][T12728] bond3: option resend_igmp: invalid value (18446744073709551606) [ 2994.364622][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15038'. [ 2994.377646][T12728] bond3: option resend_igmp: allowed values 0 - 255 [ 2994.399637][T12728] bond3 (unregistering): Released all slaves [ 2994.589147][T12803] IPVS: set_ctl: invalid protocol: 92 172.20.20.139:21 [ 2994.719254][T12807] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 2994.941474][T12807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2995.701400][T13473] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2995.783401][T32141] usb 6-1: USB disconnect, device number 50 [ 2995.832883][T12821] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 2995.941842][T13473] usb 4-1: Using ep0 maxpacket: 16 [ 2995.951906][T13473] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2995.991920][T13473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2996.035516][T13473] usb 4-1: Product: syz [ 2996.045633][T13473] usb 4-1: Manufacturer: syz [ 2996.050484][T13473] usb 4-1: SerialNumber: syz [ 2996.082528][T13473] usb 4-1: config 0 descriptor?? [ 2996.100333][T13473] as10x_usb: device has been detected [ 2996.152430][T13473] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2996.259352][T13473] usb 4-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 2996.297164][T12814] tipc: Enabled bearer , priority 10 [ 2996.304881][T13473] as10x_usb: error during firmware upload part1 [ 2996.332270][T12814] random: crng reseeded on system resumption [ 2996.342101][T13473] Registered device Sky IT Digital Key (green led) [ 2996.507949][T13473] usb 4-1: USB disconnect, device number 64 [ 2996.508930][T12863] netlink: 76 bytes leftover after parsing attributes in process `syz.5.15048'. [ 2996.583509][T13473] Unregistered device Sky IT Digital Key (green led) [ 2996.619611][T13473] as10x_usb: device has been disconnected [ 2996.886116][T12876] syz.0.15045 (12876): drop_caches: 2 [ 2996.963279][T12885] netlink: 'syz.2.15051': attribute type 1 has an invalid length. [ 2996.972753][T12885] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x42474752, 6, 1, 5, 0) [ 2997.513836][T12889] netlink: 'syz.3.15052': attribute type 1 has an invalid length. [ 2997.696859][T12892] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2999.117706][T12920] netlink: 'syz.2.15057': attribute type 1 has an invalid length. [ 2999.222182][T12919] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x42474752, 6, 1, 5, 0) [ 3000.403644][T12949] ip6tnl0: Caught tx_queue_len zero misconfig [ 3000.968170][T12957] veth0: entered promiscuous mode [ 3001.321566][T13473] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 3001.531432][T12974] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15065'. [ 3001.624779][T12972] syz.3.15063 (12972): drop_caches: 2 [ 3001.723127][T12975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3001.833644][T12975] vim2m vim2m.0: vidioc_s_fmt queue busy [ 3002.091445][T13473] usb 6-1: Using ep0 maxpacket: 16 [ 3002.115992][T13473] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3002.125101][T13473] usb 6-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3002.169358][T13473] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3002.284903][T13473] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 3002.334578][T13473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3002.355784][T13473] usb 6-1: Product: syz [ 3002.361848][T13473] usb 6-1: Manufacturer: syz [ 3002.373489][T13473] usb 6-1: SerialNumber: syz [ 3002.630570][T13473] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input210 [ 3002.692242][ T5183] bcm5974 6-1:1.0: could not read from device [ 3002.742448][ T5183] bcm5974 6-1:1.0: could not read from device [ 3002.783668][T13473] usb 6-1: USB disconnect, device number 51 [ 3004.207949][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15075'. [ 3004.631396][T13473] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 3004.786085][T13473] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3004.801450][T13473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 3004.813218][T13473] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 3004.845200][T13473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3005.090371][T13075] netlink: 76 bytes leftover after parsing attributes in process `syz.6.15077'. [ 3005.142417][T13473] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 3005.151889][T13473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3005.170638][T13473] usb 6-1: Product: syz [ 3005.175005][T13473] usb 6-1: Manufacturer: syz [ 3005.180139][T13473] usb 6-1: SerialNumber: syz [ 3005.187908][T13473] usb 6-1: config 0 descriptor?? [ 3005.266624][T13473] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 3005.856964][T13473] usb 6-1: USB disconnect, device number 52 [ 3006.181519][ T6426] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 3006.336960][ T6426] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 3006.364603][ T6426] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3006.427795][T13115] syz.0.15080 (13115): drop_caches: 2 [ 3006.431042][ T6426] usb 4-1: config 1 has no interface number 0 [ 3006.440089][ T6426] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3006.458715][ T6426] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3006.468430][T13473] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 3006.477020][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.496763][ T6426] usb 4-1: Product: syz [ 3006.504996][ T6426] usb 4-1: Manufacturer: syz [ 3006.514492][ T6426] usb 4-1: SerialNumber: syz [ 3006.543389][ T6426] usb 4-1: selecting invalid altsetting 1 [ 3006.661394][T13473] usb 3-1: Using ep0 maxpacket: 32 [ 3006.678253][T13473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3006.698027][T13473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3006.729255][T13473] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3006.740932][T13103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3006.751427][T31795] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 3006.780599][T13103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3006.789635][T13473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3006.805025][T13473] usb 3-1: config 0 descriptor?? [ 3006.842195][T13473] hub 3-1:0.0: USB hub found [ 3006.922458][T31795] usb 6-1: Using ep0 maxpacket: 32 [ 3006.951962][T31795] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 3006.962341][T31795] usb 6-1: config 0 has no interface number 0 [ 3006.975627][T31795] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3006.984858][T31795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3006.993161][T31795] usb 6-1: Product: syz [ 3006.999976][T31795] usb 6-1: Manufacturer: syz [ 3007.015396][T31795] usb 6-1: SerialNumber: syz [ 3007.020283][T13473] hub 3-1:0.0: 1 port detected [ 3007.036189][T31795] usb 6-1: config 0 descriptor?? [ 3007.233846][T13153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3007.249542][T13103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3007.313352][T13153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3007.321800][T13103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3007.322395][T31795] smsc95xx v2.0.0 [ 3007.504164][ T6426] cdc_ncm 4-1:1.1: SET_CRC_MODE failed [ 3007.593598][ T6426] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 3007.631446][ T6426] usb 4-1: selecting invalid altsetting 1 [ 3007.711328][T13473] hub 3-1:0.0: activate --> -90 [ 3007.726946][ T6426] cdc_ncm 4-1:1.1: bind() failure [ 3007.759310][ T6426] usb 4-1: USB disconnect, device number 65 [ 3008.278073][T13473] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 3008.290454][ T6426] usb 3-1: USB disconnect, device number 51 [ 3008.411822][T13118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3008.420973][T13118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3008.439516][T31795] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 3008.452432][T31795] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3008.472263][T31795] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 3008.512503][T31795] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 3008.595975][T31795] usb 6-1: USB disconnect, device number 53 [ 3008.789274][T13216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3009.091328][T13237] netlink: 'syz.5.15092': attribute type 1 has an invalid length. [ 3009.152928][ T6426] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 3009.156241][T13237] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 3009.193010][T13237] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 3009.229861][T13278] bond1: (slave gretap1): making interface the new active one [ 3009.242226][T13278] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 3009.281124][T13237] macvlan2: entered promiscuous mode [ 3009.287166][T13237] macvlan2: entered allmulticast mode [ 3009.296581][T13237] bond1: entered promiscuous mode [ 3009.303139][T13237] gretap1: entered promiscuous mode [ 3009.313220][T13237] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3009.327317][ T6426] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3009.338105][ T6426] usb 4-1: config 0 has no interfaces? [ 3009.344603][T13237] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 3009.346050][ T6426] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 3009.366991][T13237] bond1: left promiscuous mode [ 3009.372728][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3009.382954][T13237] gretap1: left promiscuous mode [ 3009.391412][ T6426] usb 4-1: Product: syz [ 3009.399487][ T6426] usb 4-1: Manufacturer: syz [ 3009.419378][ T6426] usb 4-1: SerialNumber: syz [ 3009.438783][ T6426] usb 4-1: config 0 descriptor?? [ 3009.486439][T13236] ALSA: mixer_oss: invalid OSS volume 'u' [ 3009.766521][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15095'. [ 3009.841936][T31795] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 3010.004553][T31795] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3010.004582][T31795] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3010.172401][T31795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3010.172550][T31795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3010.172565][T31795] usb 6-1: Product: syz [ 3010.172573][T31795] usb 6-1: Manufacturer: syz [ 3010.172581][T31795] usb 6-1: SerialNumber: syz [ 3010.188968][T31795] cdc_mbim 6-1:1.0: skipping garbage [ 3010.379707][T13296] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3011.683326][T13296] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3011.691846][T31795] cdc_mbim 6-1:1.0: setting tx_max = 32 [ 3011.701954][T31795] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 3011.815266][T31795] wwan wwan0: port wwan0mbim0 attached [ 3011.875458][T31795] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 22:fd:a0:a4:cf:6c [ 3012.264904][ T6426] usb 6-1: USB disconnect, device number 54 [ 3012.284014][ T6426] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 3012.482956][ T6426] wwan wwan0: port wwan0mbim0 disconnected [ 3012.851773][ T6426] usb 4-1: USB disconnect, device number 66 [ 3013.071375][T13404] syz.2.15097 (13404): drop_caches: 2 [ 3013.547240][T13418] vlan0: entered promiscuous mode [ 3013.567329][T13418] vlan0: entered allmulticast mode [ 3013.586281][T13418] hsr_slave_1: entered allmulticast mode [ 3013.618152][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15101'. [ 3014.171606][T31795] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 3014.213755][ T6426] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3014.246012][T13472] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15105'. [ 3014.334754][T31795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 3014.369642][T31795] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 3014.381534][ T6426] usb 3-1: Using ep0 maxpacket: 8 [ 3014.391678][ T6426] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3014.411394][ T6426] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3014.411858][T31795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 3014.434384][ T6426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3014.457996][ T6426] usb 3-1: config 0 descriptor?? [ 3014.462942][T31795] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 3014.466437][T31795] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 3014.531355][T31795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3014.551398][T31795] usb 4-1: Product: syz [ 3014.555611][T31795] usb 4-1: Manufacturer: syz [ 3014.565249][ T6426] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3014.571387][T31795] usb 4-1: SerialNumber: syz [ 3014.582923][T31795] usb 4-1: config 0 descriptor?? [ 3014.616996][T31795] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 3014.723832][T13497] geneve1: entered promiscuous mode [ 3014.879286][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 3014.879302][ T30] audit: type=1326 audit(1762132278.606:13558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.6.15108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3eb98efc9 code=0x0 [ 3015.075732][T31795] scsi host1: usb-storage 4-1:0.0 [ 3015.139841][T31795] usb 4-1: USB disconnect, device number 67 [ 3015.920123][T13548] netlink: 'syz.0.15114': attribute type 1 has an invalid length. [ 3015.930718][T13548] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x42474752, 6, 1, 5, 0) [ 3015.996098][T13432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3016.089059][T13432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3016.641834][T13556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.728351][T13557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.748830][T13557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.819655][T13559] syz.5.15112 (13559): drop_caches: 2 [ 3017.221359][T13473] IPVS: starting estimator thread 0... [ 3017.311625][T13569] IPVS: using max 29 ests per chain, 69600 per kthread [ 3017.849323][T13473] usb 3-1: USB disconnect, device number 52 [ 3019.480472][T13620] ªªªªªª: renamed from wg2 (while UP) [ 3019.777311][T31795] IPVS: starting estimator thread 0... [ 3019.841412][T10843] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 3019.885903][T13628] IPVS: using max 51 ests per chain, 122400 per kthread [ 3019.994790][T10843] usb 4-1: config 0 has no interfaces? [ 3020.000681][T10843] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3020.049342][T10843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3020.083512][T10843] usb 4-1: config 0 descriptor?? [ 3020.320594][T10843] usb 4-1: USB disconnect, device number 68 [ 3020.608840][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.617817][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.814231][T13661] tipc: Enabling of bearer rejected, failed to enable media [ 3020.997177][T13668] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 3021.003724][T13668] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3021.021603][T13668] vhci_hcd vhci_hcd.0: Device attached [ 3021.028088][ T30] audit: type=1800 audit(1762132284.756:13559): pid=13667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15140" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=299367 res=0 errno=0 [ 3021.096989][T13670] vhci_hcd: cannot find a urb of seqnum 170 max seqnum 0 [ 3021.110152][T12165] vhci_hcd: stop threads [ 3021.114928][T12165] vhci_hcd: release socket [ 3021.119543][T12165] vhci_hcd: disconnect device [ 3021.508619][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15144'. [ 3021.524060][ T30] audit: type=1326 audit(1762132285.246:13560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.15144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd33818efc9 code=0x0 [ 3021.862047][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15147'. [ 3023.131430][ T5885] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 3023.296718][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3023.350001][ T5885] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 3023.353126][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3023.368129][ T5885] usb 3-1: config 0 descriptor?? [ 3024.025239][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3024.028206][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3025.664937][ T5885] usb 3-1: string descriptor 0 read error: -71 [ 3025.682257][ T5885] uclogic 0003:5543:0081.009C: failed retrieving string descriptor #200: -71 [ 3025.691212][ T5885] uclogic 0003:5543:0081.009C: failed retrieving pen parameters: -71 [ 3025.752625][ T5885] uclogic 0003:5543:0081.009C: failed probing pen v2 parameters: -71 [ 3025.807989][ T5885] uclogic 0003:5543:0081.009C: failed probing parameters: -71 [ 3025.836153][T13798] netlink: 76 bytes leftover after parsing attributes in process `syz.3.15159'. [ 3025.837830][ T5885] uclogic 0003:5543:0081.009C: probe with driver uclogic failed with error -71 [ 3025.934610][ T5885] usb 3-1: USB disconnect, device number 53 [ 3026.663065][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15163'. [ 3027.959443][T13845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3027.968518][T13845] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3027.983274][T13845] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3028.048969][T13845] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 3028.103989][T13845] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3028.181767][T13845] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 3028.195414][T13845] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 3028.244585][T13857] netlink: 'syz.5.15170': attribute type 28 has an invalid length. [ 3028.273122][T13845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3028.314698][T13845] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3028.382592][T13845] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3028.549962][T13870] vlan2: entered promiscuous mode [ 3028.566279][T13870] batadv0: entered promiscuous mode [ 3028.929559][T13894] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3028.948414][ T30] audit: type=1326 audit(1762132292.676:13561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.2.15180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ea78efc9 code=0x7ffc0000 [ 3028.990876][ T30] audit: type=1326 audit(1762132292.676:13562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.2.15180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ea78efc9 code=0x7ffc0000 [ 3029.074590][ T30] audit: type=1326 audit(1762132292.676:13563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.2.15180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff8ea78efc9 code=0x7ffc0000 [ 3029.119213][ T30] audit: type=1326 audit(1762132292.676:13564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.2.15180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ea78efc9 code=0x7ffc0000 [ 3029.391401][ T5885] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 3029.641448][T12147] Bluetooth: hci3: command 0x0c1a tx timeout [ 3029.803733][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3029.815480][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3029.825714][ T5885] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3029.841510][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3029.861855][ T5885] usb 6-1: config 0 descriptor?? [ 3030.041653][T12147] Bluetooth: hci2: command 0x0406 tx timeout [ 3030.042299][T25036] Bluetooth: hci0: command 0x0405 tx timeout [ 3030.121470][T25036] Bluetooth: hci5: command 0x0c1a tx timeout [ 3030.290214][T25036] Bluetooth: hci1: command 0x0c1a tx timeout [ 3030.329800][ T5885] cp2112 0003:10C4:EA90.009D: unknown main item tag 0x0 [ 3030.337314][ T5885] cp2112 0003:10C4:EA90.009D: unknown main item tag 0x0 [ 3030.346646][ T5885] cp2112 0003:10C4:EA90.009D: unknown main item tag 0x0 [ 3030.354649][ T5885] cp2112 0003:10C4:EA90.009D: unknown main item tag 0x0 [ 3030.375524][ T5885] cp2112 0003:10C4:EA90.009D: unknown main item tag 0x0 [ 3030.384691][ T5885] cp2112 0003:10C4:EA90.009D: unknown main item tag 0x0 [ 3030.391876][ T5885] cp2112 0003:10C4:EA90.009D: unknown main item tag 0x0 [ 3030.420908][ T5885] cp2112 0003:10C4:EA90.009D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 3030.520955][ T5885] cp2112 0003:10C4:EA90.009D: Part Number: 0x82 Device Version: 0xFE [ 3031.701448][ T5885] usb 6-1: reset high-speed USB device number 55 using dummy_hcd [ 3032.123887][T25036] Bluetooth: hci2: command 0x0406 tx timeout [ 3032.211607][T25036] Bluetooth: hci5: command 0x0c1a tx timeout [ 3032.371724][T25036] Bluetooth: hci1: command 0x0c1a tx timeout [ 3033.264500][T31795] usb 6-1: USB disconnect, device number 55 [ 3034.281639][T25036] Bluetooth: hci5: command 0x0c1a tx timeout [ 3034.453021][T25036] Bluetooth: hci1: command 0x0c1a tx timeout [ 3035.050008][T14014] program syz.0.15196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3037.319826][ T30] audit: type=1800 audit(1762132301.036:13565): pid=14047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15204" name="/" dev="fuse" ino=0 res=0 errno=0 [ 3037.711541][ T6426] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 3037.743108][T14068] geneve1: Caught tx_queue_len zero misconfig [ 3037.861546][ T6426] usb 4-1: Using ep0 maxpacket: 8 [ 3037.868746][ T6426] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3037.957311][ T6426] usb 4-1: config index 0 descriptor too short (expected 51, got 18) [ 3037.981413][ T6426] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 3038.005753][ T6426] usb 4-1: config 4 has no interface number 0 [ 3038.018915][ T6426] usb 4-1: config 4 interface 30 has no altsetting 0 [ 3038.103041][ T6426] usb 4-1: string descriptor 0 read error: -22 [ 3038.109654][ T6426] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 3038.130208][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.195987][ T6426] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 3038.201478][T10843] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 3038.249439][T31795] IPVS: starting estimator thread 0... [ 3038.268982][ T6426] dw2102: su3000_power_ctrl: 1, initialized 0 [ 3038.329197][ T6426] dvb-usb: bulk message failed: -22 (2/0) [ 3038.351487][T14080] IPVS: using max 51 ests per chain, 122400 per kthread [ 3038.367223][T10843] usb 6-1: Using ep0 maxpacket: 32 [ 3038.385913][T10843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3038.408702][T10843] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 3038.420222][ T6426] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3038.448584][ T6426] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 3038.449838][T10843] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 3038.477659][T10843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.497662][ T6426] usb 4-1: media controller created [ 3038.507006][ T6426] dvb-usb: bulk message failed: -22 (6/0) [ 3038.508539][T10843] usb 6-1: Product: syz [ 3038.530760][ T6426] dw2102: i2c transfer failed. [ 3038.536829][T10843] usb 6-1: Manufacturer: syz [ 3038.546971][T10843] usb 6-1: SerialNumber: syz [ 3038.547530][ T6426] dvb-usb: bulk message failed: -22 (6/0) [ 3038.565275][T10843] usb 6-1: config 0 descriptor?? [ 3038.584994][T10843] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 3038.625292][ T6426] dw2102: i2c transfer failed. [ 3038.675429][ T6426] dvb-usb: bulk message failed: -22 (6/0) [ 3038.690758][ T6426] dw2102: i2c transfer failed. [ 3038.711006][ T6426] dvb-usb: bulk message failed: -22 (6/0) [ 3038.755722][ T6426] dw2102: i2c transfer failed. [ 3038.776501][ T6426] dvb-usb: bulk message failed: -22 (6/0) [ 3038.792504][ T6426] dw2102: i2c transfer failed. [ 3038.890642][ T6426] dvb-usb: bulk message failed: -22 (6/0) [ 3038.897128][ T6426] dw2102: i2c transfer failed. [ 3038.902291][ T6426] dvb-usb: MAC address: 02:02:02:02:02:02 [ 3039.319692][ T6426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3039.342780][ T6426] dvb-usb: bulk message failed: -22 (3/0) [ 3039.348548][ T6426] dw2102: command 0x0e transfer failed. [ 3039.392147][ T6426] dvb-usb: bulk message failed: -22 (3/0) [ 3039.397917][ T6426] dw2102: command 0x0e transfer failed. [ 3039.723234][ T6426] dvb-usb: bulk message failed: -22 (3/0) [ 3039.730345][ T6426] dw2102: command 0x0e transfer failed. [ 3039.738561][ T6426] dvb-usb: bulk message failed: -22 (3/0) [ 3039.747479][ T6426] dw2102: command 0x0e transfer failed. [ 3039.756944][ T6426] dvb-usb: bulk message failed: -22 (1/0) [ 3039.763077][ T6426] dw2102: command 0x51 transfer failed. [ 3039.769503][ T6426] dvb-usb: bulk message failed: -22 (5/0) [ 3039.791370][ T6426] dw2102: i2c probe for address 0x68 failed. [ 3039.798573][ T6426] dvb-usb: bulk message failed: -22 (5/0) [ 3039.809530][ T6426] dw2102: i2c probe for address 0x69 failed. [ 3039.818051][ T6426] dvb-usb: bulk message failed: -22 (5/0) [ 3039.905642][ T6426] dw2102: i2c probe for address 0x6a failed. [ 3039.916462][ T6426] dw2102: probing for demodulator failed. Is the external power switched on? [ 3039.936145][ T6426] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 3040.051555][ T6426] rc_core: IR keymap rc-tt-1500 not found [ 3040.059979][ T6426] Registered IR keymap rc-empty [ 3040.069781][T14124] binder: 14123:14124 ioctl c018620c 200000000240 returned -22 [ 3040.081859][ T6426] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 3040.096115][ T6426] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input211 [ 3040.111821][ T6426] dvb-usb: schedule remote query interval to 250 msecs. [ 3040.132989][ T6426] dw2102: su3000_power_ctrl: 0, initialized 1 [ 3040.150187][ T6426] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 3040.444699][ T6426] dvb-usb: bulk message failed: -22 (1/0) [ 3040.459007][ T6426] dw2102: i2c transfer failed. [ 3040.486337][T32193] usb 4-1: USB disconnect, device number 69 [ 3040.921478][T32193] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 3040.955759][ T6426] usb 6-1: USB disconnect, device number 56 [ 3041.401832][T10843] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 3041.495217][T32193] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 3041.561540][T10843] usb 6-1: Using ep0 maxpacket: 32 [ 3041.572964][T10843] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 3041.585559][T10843] usb 6-1: config 0 has no interface number 0 [ 3041.594793][T10843] usb 6-1: config 0 interface 96 has no altsetting 0 [ 3041.615669][T10843] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 3041.645407][T10843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3041.687954][T10843] usb 6-1: Product: syz [ 3041.703770][T32193] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 3041.715364][T32193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 3041.726583][T32193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 3041.791732][T10843] usb 6-1: Manufacturer: syz [ 3041.796572][T10843] usb 6-1: SerialNumber: syz [ 3041.809492][T10843] usb 6-1: config 0 descriptor?? [ 3041.817753][T10843] legousbtower 6-1:0.96: interrupt endpoints not found [ 3041.818738][T32193] usb 4-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 3041.894466][T32193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3041.910724][T32193] usb 4-1: config 0 descriptor?? [ 3041.925791][T14160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3042.491879][T32193] wacom 0003:056A:0039.009E: hidraw0: USB HID v0.00 Device [HID 056a:0039] on usb-dummy_hcd.3-1/input0 [ 3042.513677][T13473] usb 6-1: USB disconnect, device number 57 [ 3042.633374][T32193] usb 4-1: USB disconnect, device number 70 [ 3042.747411][T14216] fido_id[14216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 3043.270965][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15234'. [ 3043.795002][T14255] ªªªªªª: renamed from wg2 (while UP) [ 3043.981587][T32141] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 3044.146233][T32141] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 3044.155826][T32141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3044.164815][T32141] usb 3-1: Product: syz [ 3044.173981][T32141] usb 3-1: Manufacturer: syz [ 3044.185396][T32141] usb 3-1: SerialNumber: syz [ 3044.928586][T32141] rtl8150 3-1:1.0: eth9: rtl8150 is detected [ 3045.171680][T10843] usb 3-1: USB disconnect, device number 54 [ 3045.223816][T14287] ptrace attach of "./syz-executor exec"[10502] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ     ×þ  \x07ÿ\x07  vÎÿÿ [ 3045.297425][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15240'. [ 3048.081546][T14366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15250'. [ 3048.119960][T14366] sctp: [Deprecated]: syz.2.15250 (pid 14366) Use of int in max_burst socket option. [ 3048.119960][T14366] Use struct sctp_assoc_value instead [ 3048.802189][T32141] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3049.094598][T32141] usb 4-1: Using ep0 maxpacket: 32 [ 3049.112596][T32141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3049.131385][T32141] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 3049.160685][T32141] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 3049.174312][T32141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3049.183425][T32141] usb 4-1: Product: syz [ 3049.187595][T32141] usb 4-1: Manufacturer: syz [ 3049.192981][T32141] usb 4-1: SerialNumber: syz [ 3049.228533][T32141] usb 4-1: config 0 descriptor?? [ 3049.247989][T14397] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2177743363 (34843893808 ns) > initial count (13635709840 ns). Using initial count to start timer. [ 3049.300844][T32141] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 3050.960058][T14426] delete_channel: no stack [ 3051.516109][T14444] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15262'. [ 3052.327757][T32141] usb 4-1: USB disconnect, device number 71 [ 3052.435128][T14464] binder: 14452:14464 ioctl 400c620e 200000000380 returned -22 [ 3052.476673][T14464] binder: 14452:14464 ioctl 8010671f 200000000100 returned -22 [ 3053.194862][T14501] netlink: 'syz.0.15270': attribute type 23 has an invalid length. [ 3053.419105][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15271'. [ 3054.603872][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15273'. [ 3054.631739][T14507] ================================================================== [ 3054.639811][T14507] BUG: KASAN: slab-use-after-free in ipt_do_table+0x6e3/0x1640 [ 3054.647360][T14507] Read of size 8 at addr ffff888045160120 by task syz.3.15271/14507 [ 3054.655365][T14507] [ 3054.657681][T14507] CPU: 1 UID: 0 PID: 14507 Comm: syz.3.15271 Not tainted syzkaller #0 PREEMPT(full) [ 3054.657697][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3054.657704][T14507] Call Trace: [ 3054.657709][T14507] [ 3054.657713][T14507] dump_stack_lvl+0x189/0x250 [ 3054.657730][T14507] ? __kasan_check_byte+0x12/0x40 [ 3054.657742][T14507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3054.657754][T14507] ? lock_release+0x4b/0x3e0 [ 3054.657765][T14507] ? __virt_addr_valid+0x4a5/0x5c0 [ 3054.657779][T14507] print_report+0xca/0x240 [ 3054.657792][T14507] ? ipt_do_table+0x6e3/0x1640 [ 3054.657802][T14507] kasan_report+0x118/0x150 [ 3054.657812][T14507] ? ipt_do_table+0x6e3/0x1640 [ 3054.657824][T14507] ipt_do_table+0x6e3/0x1640 [ 3054.657840][T14507] ? __lock_acquire+0xab9/0xd20 [ 3054.657849][T14507] ? ipt_do_table+0x2a3/0x1640 [ 3054.657858][T14507] ? __pfx_ipt_do_table+0x10/0x10 [ 3054.657870][T14507] ? iptable_mangle_hook+0x189/0x4c0 [ 3054.657882][T14507] ? nf_hook+0x9d/0x380 [ 3054.657894][T14507] ? apparmor_ip_postroute+0xcd/0x420 [ 3054.657904][T14507] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 3054.657916][T14507] nf_hook_slow+0xc5/0x220 [ 3054.657928][T14507] nf_hook+0x217/0x380 [ 3054.657940][T14507] ? nf_hook+0x9d/0x380 [ 3054.657951][T14507] ? __pfx_nf_hook+0x10/0x10 [ 3054.657963][T14507] ? __pfx_ip_finish_output+0x10/0x10 [ 3054.657975][T14507] ? dev_loopback_xmit+0x2f6/0x490 [ 3054.657988][T14507] ip_mc_output+0x42d/0x590 [ 3054.657999][T14507] ? __pfx_ip_finish_output+0x10/0x10 [ 3054.658012][T14507] ip_send_skb+0x74/0x100 [ 3054.658025][T14507] udp_send_skb+0xaf1/0x14c0 [ 3054.658044][T14507] udp_sendmsg+0x195a/0x2170 [ 3054.658055][T14507] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 3054.658068][T14507] ? __pfx_udp_sendmsg+0x10/0x10 [ 3054.658081][T14507] ? do_wp_page+0x22eb/0x5800 [ 3054.658100][T14507] ? sock_rps_record_flow+0x19/0x410 [ 3054.658116][T14507] ? inet_sendmsg+0x29c/0x370 [ 3054.658129][T14507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3054.658141][T14507] __sock_sendmsg+0x19c/0x270 [ 3054.658154][T14507] ____sys_sendmsg+0x52d/0x830 [ 3054.658166][T14507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3054.658177][T14507] ? import_iovec+0x74/0xa0 [ 3054.658191][T14507] ___sys_sendmsg+0x21f/0x2a0 [ 3054.658201][T14507] ? __pfx____sys_sendmsg+0x10/0x10 [ 3054.658219][T14507] ? __might_fault+0xb0/0x130 [ 3054.658233][T14507] __sys_sendmmsg+0x227/0x430 [ 3054.658244][T14507] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3054.658256][T14507] ? __pfx_do_futex+0x10/0x10 [ 3054.658276][T14507] __x64_sys_sendmmsg+0xa0/0xc0 [ 3054.658287][T14507] do_syscall_64+0xfa/0xfa0 [ 3054.658300][T14507] ? lockdep_hardirqs_on+0x9c/0x150 [ 3054.658313][T14507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3054.658324][T14507] ? clear_bhb_loop+0x60/0xb0 [ 3054.658335][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3054.658345][T14507] RIP: 0033:0x7f44d758efc9 [ 3054.658356][T14507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3054.658365][T14507] RSP: 002b:00007f44d834d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3054.658377][T14507] RAX: ffffffffffffffda RBX: 00007f44d77e6090 RCX: 00007f44d758efc9 [ 3054.658385][T14507] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 3054.658392][T14507] RBP: 00007f44d7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 3054.658399][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3054.658405][T14507] R13: 00007f44d77e6128 R14: 00007f44d77e6090 R15: 00007f44d790fa28 [ 3054.658416][T14507] [ 3054.658420][T14507] [ 3055.008913][T14507] Allocated by task 5815: [ 3055.013322][T14507] kasan_save_track+0x3e/0x80 [ 3055.018170][T14507] __kasan_slab_alloc+0x6c/0x80 [ 3055.023712][T14507] kmem_cache_alloc_node_noprof+0x433/0x710 [ 3055.029603][T14507] kmalloc_reserve+0xbd/0x290 [ 3055.034960][T14507] __alloc_skb+0x142/0x2d0 [ 3055.039575][T14507] tcp_stream_alloc_skb+0x3d/0x340 [ 3055.044715][T14507] tcp_sendmsg_locked+0x1c7f/0x5540 [ 3055.050439][T14507] tcp_sendmsg+0x2f/0x50 [ 3055.054684][T14507] __sock_sendmsg+0x19c/0x270 [ 3055.059364][T14507] sock_write_iter+0x279/0x360 [ 3055.064129][T14507] vfs_write+0x5c9/0xb30 [ 3055.068382][T14507] ksys_write+0x145/0x250 [ 3055.072703][T14507] do_syscall_64+0xfa/0xfa0 [ 3055.077205][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3055.083186][T14507] [ 3055.085493][T14507] Freed by task 0: [ 3055.089210][T14507] kasan_save_track+0x3e/0x80 [ 3055.093976][T14507] __kasan_save_free_info+0x46/0x50 [ 3055.099733][T14507] __kasan_slab_free+0x5c/0x80 [ 3055.104879][T14507] kmem_cache_free+0x19b/0x690 [ 3055.109819][T14507] skb_release_data+0x62d/0x7c0 [ 3055.114663][T14507] __kfree_skb+0x55/0x70 [ 3055.118892][T14507] tcp_ack+0x2266/0x6950 [ 3055.123298][T14507] tcp_rcv_established+0x148b/0x2670 [ 3055.128679][T14507] tcp_v4_do_rcv+0xa90/0x1430 [ 3055.133350][T14507] tcp_v4_rcv+0x2675/0x2f20 [ 3055.137839][T14507] ip_protocol_deliver_rcu+0x221/0x440 [ 3055.143305][T14507] ip_local_deliver_finish+0x3bb/0x6f0 [ 3055.148925][T14507] NF_HOOK+0x30c/0x3a0 [ 3055.152974][T14507] ip_sublist_rcv_finish+0x221/0x2a0 [ 3055.158356][T14507] ip_sublist_rcv+0x74c/0xa10 [ 3055.163064][T14507] ip_list_rcv+0x3e2/0x430 [ 3055.167561][T14507] __netif_receive_skb_list_core+0x7d2/0x800 [ 3055.173534][T14507] netif_receive_skb_list_internal+0x96f/0xcb0 [ 3055.179684][T14507] napi_complete_done+0x2f2/0x7c0 [ 3055.184709][T14507] virtnet_poll+0x23cb/0x2db0 [ 3055.189383][T14507] __napi_poll+0xc7/0x360 [ 3055.193731][T14507] net_rx_action+0x5f7/0xdf0 [ 3055.198835][T14507] handle_softirqs+0x286/0x870 [ 3055.203604][T14507] __irq_exit_rcu+0xca/0x1f0 [ 3055.208199][T14507] irq_exit_rcu+0x9/0x30 [ 3055.212529][T14507] common_interrupt+0xbb/0xe0 [ 3055.217246][T14507] asm_common_interrupt+0x26/0x40 [ 3055.222342][T14507] [ 3055.224649][T14507] The buggy address belongs to the object at ffff888045160000 [ 3055.224649][T14507] which belongs to the cache skbuff_small_head of size 704 [ 3055.239203][T14507] The buggy address is located 288 bytes inside of [ 3055.239203][T14507] freed 704-byte region [ffff888045160000, ffff8880451602c0) [ 3055.253162][T14507] [ 3055.255557][T14507] The buggy address belongs to the physical page: [ 3055.261964][T14507] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45160 [ 3055.270786][T14507] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3055.280140][T14507] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3055.287784][T14507] page_type: f5(slab) [ 3055.291760][T14507] raw: 00fff00000000040 ffff88801deebc80 dead000000000122 0000000000000000 [ 3055.300345][T14507] raw: 0000000000000000 0000000080130013 00000000f5000000 0000000000000000 [ 3055.309457][T14507] head: 00fff00000000040 ffff88801deebc80 dead000000000122 0000000000000000 [ 3055.318388][T14507] head: 0000000000000000 0000000080130013 00000000f5000000 0000000000000000 [ 3055.327051][T14507] head: 00fff00000000002 ffffea0001145801 00000000ffffffff 00000000ffffffff [ 3055.336241][T14507] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 3055.344903][T14507] page dumped because: kasan: bad access detected [ 3055.351314][T14507] page_owner tracks the page as allocated [ 3055.357021][T14507] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5815, tgid 5815 (syz-executor), ts 3054512594156, free_ts 3054486452588 [ 3055.380289][T14507] post_alloc_hook+0x240/0x2a0 [ 3055.385049][T14507] get_page_from_freelist+0x2365/0x2440 [ 3055.390846][T14507] __alloc_frozen_pages_noprof+0x181/0x370 [ 3055.397729][T14507] alloc_pages_mpol+0x232/0x4a0 [ 3055.402688][T14507] allocate_slab+0x96/0x350 [ 3055.408785][T14507] ___slab_alloc+0xe94/0x18a0 [ 3055.413981][T14507] __slab_alloc+0x65/0x100 [ 3055.418392][T14507] kmem_cache_alloc_node_noprof+0x4c5/0x710 [ 3055.424308][T14507] kmalloc_reserve+0xbd/0x290 [ 3055.428989][T14507] __alloc_skb+0x142/0x2d0 [ 3055.433488][T14507] tcp_stream_alloc_skb+0x3d/0x340 [ 3055.438860][T14507] tcp_sendmsg_locked+0x1c7f/0x5540 [ 3055.444060][T14507] tcp_sendmsg+0x2f/0x50 [ 3055.448306][T14507] __sock_sendmsg+0x19c/0x270 [ 3055.453060][T14507] sock_write_iter+0x279/0x360 [ 3055.457824][T14507] vfs_write+0x5c9/0xb30 [ 3055.462072][T14507] page last free pid 14510 tgid 14504 stack trace: [ 3055.468837][T14507] __free_frozen_pages+0xbc4/0xd30 [ 3055.473943][T14507] free_large_kmalloc+0x13a/0x1f0 [ 3055.478968][T14507] device_release+0x9c/0x1c0 [ 3055.483652][T14507] kobject_put+0x22b/0x480 [ 3055.488069][T14507] netdev_run_todo+0xd2e/0xea0 [ 3055.493981][T14507] rtnl_dellink+0x5aa/0x700 [ 3055.498751][T14507] rtnetlink_rcv_msg+0x7cf/0xb70 [ 3055.503781][T14507] netlink_rcv_skb+0x208/0x470 [ 3055.508636][T14507] netlink_unicast+0x82f/0x9e0 [ 3055.513570][T14507] netlink_sendmsg+0x805/0xb30 [ 3055.518319][T14507] __sock_sendmsg+0x21c/0x270 [ 3055.523068][T14507] ____sys_sendmsg+0x505/0x830 [ 3055.527810][T14507] ___sys_sendmsg+0x21f/0x2a0 [ 3055.532549][T14507] __x64_sys_sendmsg+0x19b/0x260 [ 3055.537464][T14507] do_syscall_64+0xfa/0xfa0 [ 3055.541970][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3055.547842][T14507] [ 3055.550141][T14507] Memory state around the buggy address: [ 3055.555757][T14507] ffff888045160000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3055.563800][T14507] ffff888045160080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3055.572107][T14507] >ffff888045160100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3055.580163][T14507] ^ [ 3055.585353][T14507] ffff888045160180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3055.593593][T14507] ffff888045160200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3055.602523][T14507] ================================================================== [ 3055.611274][ C1] vkms_vblank_simulate: vblank timer overrun [ 3055.617583][T14507] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3055.624769][T14507] CPU: 1 UID: 0 PID: 14507 Comm: syz.3.15271 Not tainted syzkaller #0 PREEMPT(full) [ 3055.634393][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3055.644621][T14507] Call Trace: [ 3055.647919][T14507] [ 3055.650872][T14507] dump_stack_lvl+0x99/0x250 [ 3055.655574][T14507] ? __asan_memcpy+0x40/0x70 [ 3055.660960][T14507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3055.666178][T14507] ? __pfx__printk+0x10/0x10 [ 3055.670855][T14507] vpanic+0x237/0x6d0 [ 3055.674938][T14507] ? __pfx_vpanic+0x10/0x10 [ 3055.680262][T14507] panic+0xb9/0xc0 [ 3055.684032][T14507] ? __pfx_panic+0x10/0x10 [ 3055.688471][T14507] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 3055.695340][T14507] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 3055.702054][T14507] ? ipt_do_table+0x6e3/0x1640 [ 3055.707951][T14507] check_panic_on_warn+0x89/0xb0 [ 3055.713979][T14507] ? ipt_do_table+0x6e3/0x1640 [ 3055.718950][T14507] end_report+0x78/0x160 [ 3055.723253][T14507] kasan_report+0x129/0x150 [ 3055.727767][T14507] ? ipt_do_table+0x6e3/0x1640 [ 3055.732564][T14507] ipt_do_table+0x6e3/0x1640 [ 3055.737245][T14507] ? __lock_acquire+0xab9/0xd20 [ 3055.742294][T14507] ? ipt_do_table+0x2a3/0x1640 [ 3055.747046][T14507] ? __pfx_ipt_do_table+0x10/0x10 [ 3055.752056][T14507] ? iptable_mangle_hook+0x189/0x4c0 [ 3055.757339][T14507] ? nf_hook+0x9d/0x380 [ 3055.761521][T14507] ? apparmor_ip_postroute+0xcd/0x420 [ 3055.766890][T14507] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 3055.772518][T14507] nf_hook_slow+0xc5/0x220 [ 3055.776926][T14507] nf_hook+0x217/0x380 [ 3055.780983][T14507] ? nf_hook+0x9d/0x380 [ 3055.785124][T14507] ? __pfx_nf_hook+0x10/0x10 [ 3055.789703][T14507] ? __pfx_ip_finish_output+0x10/0x10 [ 3055.795081][T14507] ? dev_loopback_xmit+0x2f6/0x490 [ 3055.800649][T14507] ip_mc_output+0x42d/0x590 [ 3055.805162][T14507] ? __pfx_ip_finish_output+0x10/0x10 [ 3055.810797][T14507] ip_send_skb+0x74/0x100 [ 3055.815311][T14507] udp_send_skb+0xaf1/0x14c0 [ 3055.819929][T14507] udp_sendmsg+0x195a/0x2170 [ 3055.824526][T14507] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 3055.830252][T14507] ? __pfx_udp_sendmsg+0x10/0x10 [ 3055.835206][T14507] ? do_wp_page+0x22eb/0x5800 [ 3055.839981][T14507] ? sock_rps_record_flow+0x19/0x410 [ 3055.845267][T14507] ? inet_sendmsg+0x29c/0x370 [ 3055.849937][T14507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3055.855486][T14507] __sock_sendmsg+0x19c/0x270 [ 3055.860696][T14507] ____sys_sendmsg+0x52d/0x830 [ 3055.865568][T14507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3055.871024][T14507] ? import_iovec+0x74/0xa0 [ 3055.875707][T14507] ___sys_sendmsg+0x21f/0x2a0 [ 3055.880396][T14507] ? __pfx____sys_sendmsg+0x10/0x10 [ 3055.885627][T14507] ? __might_fault+0xb0/0x130 [ 3055.890614][T14507] __sys_sendmmsg+0x227/0x430 [ 3055.895477][T14507] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3055.900768][T14507] ? __pfx_do_futex+0x10/0x10 [ 3055.905475][T14507] __x64_sys_sendmmsg+0xa0/0xc0 [ 3055.910348][T14507] do_syscall_64+0xfa/0xfa0 [ 3055.914866][T14507] ? lockdep_hardirqs_on+0x9c/0x150 [ 3055.920176][T14507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3055.926446][T14507] ? clear_bhb_loop+0x60/0xb0 [ 3055.931303][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3055.937281][T14507] RIP: 0033:0x7f44d758efc9 [ 3055.941694][T14507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3055.961298][T14507] RSP: 002b:00007f44d834d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3055.969732][T14507] RAX: ffffffffffffffda RBX: 00007f44d77e6090 RCX: 00007f44d758efc9 [ 3055.977972][T14507] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 3055.985936][T14507] RBP: 00007f44d7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 3055.994266][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3056.002507][T14507] R13: 00007f44d77e6128 R14: 00007f44d77e6090 R15: 00007f44d790fa28 [ 3056.010496][T14507] [ 3056.013787][T14507] Kernel Offset: disabled [ 3056.018108][T14507] Rebooting in 86400 seconds..