last executing test programs: 2m35.458079208s ago: executing program 2 (id=206): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x4880) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffa, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r4, &(0x7f0000000000)=""/165, 0xa5, 0x3) syz_io_uring_setup(0x3ac6, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, r6, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0xe327, 0x384302) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x2, 0x0, 0x0, 0x200000], [0x10040], [0x6]], '\x00', [{0x0, 0xffffffff}, {0x0, 0x7c75c941}, {}, {}, {0x40000000, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x3}, {0xb90}], '\x00', 0x1000}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) 2m34.43162167s ago: executing program 2 (id=208): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000053000/0x2000)=nil, 0x500500, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/profiling', 0x200000, 0x80) unshare(0x22020400) accept4(r2, 0x0, 0x0, 0xc00) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth1_vlan\x00'}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x9, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2810e9, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080007401000000d0500020007000000080006400000000108000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000080)={[{0x3, 0x0, 0x40, 0x6f, 0x9, 0x3, 0x8, 0x4, 0xf, 0x60, 0x4, 0x5, 0x8}, {0x7, 0x6, 0x0, 0x0, 0x2, 0x5, 0x13, 0x6b, 0x8, 0x1, 0x2, 0x6, 0x2}, {0x9, 0xfe, 0xd1, 0x7, 0x0, 0x1, 0x4, 0xf5, 0x2, 0x9, 0x7f, 0xc0, 0x1}], 0x5}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r7, 0x107, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) personality(0x8) userfaultfd(0x1) 2m33.821271752s ago: executing program 2 (id=210): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9bf3fa9bed6e241cb192770aea3cb43693be9700e269b60774ae76b400"/41], 0x50) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r7}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 2m31.659122648s ago: executing program 2 (id=222): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = io_uring_setup(0x17ba, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x80f7, 0x40, 0x4, 0x5, {{0x2e, 0x4, 0x3, 0x36, 0xb8, 0x67, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @local, {[@timestamp_prespec={0x44, 0x4c, 0xe0, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x7}, {@loopback, 0x4d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@broadcast, 0x5}, {@private=0xa010102, 0x7}, {@empty, 0x6}, {@multicast2, 0xfffffc00}, {@remote, 0x1}]}, @end, @rr={0x7, 0x1b, 0xa2, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @empty, @rand_addr=0x64010101]}, @ssrr={0x89, 0xb, 0x1d, [@local, @rand_addr=0x64010100]}, @ssrr={0x89, 0x7, 0x1d, [@remote]}, @ssrr={0x89, 0x27, 0xc3, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @multicast1, @broadcast, @multicast1, @local]}, @noop]}}}}}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x8, '\x00', r3, r4, 0x2, 0x4, 0x2}, 0x50) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000280)=""/239, 0xef) 2m29.882888206s ago: executing program 2 (id=231): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) epoll_create(0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 2m29.797629038s ago: executing program 2 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x1}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf80b, 0x400, 0xfffffffd, 0x379, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x5a, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@ssrr={0x89, 0x17, 0xe2, [@local, @dev, @remote, @broadcast, @private]}, @timestamp={0x44, 0x4, 0x5, 0x2}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x140, 0x0, 0x8}, &(0x7f0000000140)='./file0\x00', 0xfffffd71, 0x0, 0x23456}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x28011, r7, 0x17b6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 2m14.721235568s ago: executing program 32 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x1}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000002c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf80b, 0x400, 0xfffffffd, 0x379, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x5a, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@ssrr={0x89, 0x17, 0xe2, [@local, @dev, @remote, @broadcast, @private]}, @timestamp={0x44, 0x4, 0x5, 0x2}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x140, 0x0, 0x8}, &(0x7f0000000140)='./file0\x00', 0xfffffd71, 0x0, 0x23456}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x28011, r7, 0x17b6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 7.063637832s ago: executing program 3 (id=824): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f0000000040)=0x1c) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xe, 0x1ff, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x7800, 0x700, 0x5, 0x2}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @empty, @remote, 0x4, 0x1, 0x4536, 0x100, 0x6, 0x40000000, r1}) (async, rerun: 32) symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) (async, rerun: 64) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) (rerun: 64) write$cgroup_subtree(r5, &(0x7f0000000300)={[{0x2d, 'blkio'}, {0x2d, 'rlimit'}, {0x2b, 'rdma'}]}, 0x15) (async, rerun: 32) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x150, 0x150, 0xffffffff, 0x150, 0x150, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, &(0x7f0000000340), {[{{@ip={@private=0xa010102, @local, 0xff000000, 0xffffff00, 'veth0_virt_wifi\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @gre_key=0x4}}}}, {{@ip={@multicast2, @remote, 0xff000000, 0xffffff00, 'sit0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x20}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x32}, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x4}}, @common=@unspec=@time={{0x38}, {0xe, 0x3, 0x395a, 0xf659, 0x8, 0x2, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @rand_addr=0x64010102, @rand_addr=0x64010101, @icmp_id=0x65, @gre_key=0x2}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x800}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x17, @private=0xa010102, @broadcast, @port=0x4e23, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000800)=0x5) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000840)={@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, 0x1, "3e20abba1e9b7e90238264566052266cd4ee2148e86a096ce645317da80426d3", 0xb, 0x7, 0x401, 0x3}, 0x3c) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f00000008c0)={{0x8, 0xb2}, {0x2, 0xf}, 0x1, 0x2, 0xff}) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000940)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000980)="c37821f29a7a2130c43b8e1a528c188c99b87cb28310d8c2ca1be3764f3f48d824d10fde02a5503ae98d18192a500bc3ff71f21505a98070e1a9211606a1d0bdf8cdb2296b627186405fb9f7884d0db09a65e240f539d1b211ed68eab9adb5912b7a6746809ee57e117e061ad56eaddbf99658e5ecc61c8c3bcd", 0x7a}], 0x1, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x180}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x98}, 0x800) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000b40)={0x3a, 0xb, '\x00', [@pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x40, {0x0, 0xe, 0x3, 0xb8, [0x5, 0x7f, 0xfff, 0x8, 0x8, 0x10001, 0x2]}}, @pad1]}, 0x68) (async) preadv(r6, &(0x7f0000001e40)=[{&(0x7f0000000bc0)=""/41, 0x29}, {&(0x7f0000000c00)=""/33, 0x21}, {&(0x7f0000000c40)=""/94, 0x5e}, {&(0x7f0000000cc0)=""/243, 0xf3}, {&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x6, 0x2b29c0c7, 0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001ec0)={{0x1, 0x1, 0x18, r4, {0xffffffce}}, './file0\x00'}) setsockopt$packet_int(r9, 0x107, 0x13, &(0x7f0000001f00)=0x7fffffff, 0x4) (async, rerun: 32) ioctl$SOUND_MIXER_WRITE_RECSRC(r9, 0xc0044dff, &(0x7f0000001f40)=0x40b92dea) (async, rerun: 32) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000001f80)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000002040)={{0x7, 0x7, 0xf7c2, 0x1, 'syz0\x00', 0xf4f}, 0x3, 0x400, 0x3b, r10, 0x8, 0xff, 'syz0\x00', &(0x7f0000001fc0)=[' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'REDIRECT\x00', '.}-\x00', '#@/*#\x00', 'veth0_vlan\x00', 'cgroup.subtree_control\x00', 'sit0\x00', '\x00'], 0x4b}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000002180)={0x2008}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f00000021c0)={0x4, 0x1, 0x1, 0xfffffffb, 0x2, 0x3}) ioctl$HIDIOCSREPORT(r9, 0x400c4808, &(0x7f0000002240)={0x2, 0x2, 0x1}) (async, rerun: 32) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000002280)={'netpci0\x00', {0x2, 0x0, @multicast1}}) (rerun: 32) 6.712222369s ago: executing program 3 (id=826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket(0x2, 0x3, 0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000049e9835b00000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000102"], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x20, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) 6.29413529s ago: executing program 3 (id=828): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571105b000000000085ff0000008000809500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x341300, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_io_uring_setup(0x4000839, &(0x7f00000000c0)={0x0, 0xf8aa, 0x4000, 0x2000006, 0x3cd}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = syz_open_dev$dri(&(0x7f0000000000), 0xa, 0x40000) ioctl$DRM_IOCTL_MODE_GETENCODER(r8, 0xc01464a6, &(0x7f0000000180)) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) ioctl$HIDIOCGUSAGE(r10, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYRES32=r11], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYRES64=r11]}]}) 5.85153137s ago: executing program 1 (id=829): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x400, 0x56, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x104, 0x800000000000000}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in=@rand_addr=0x64010101, 0x3506, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1ff}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0xc048) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f00000003c0)={0x283, 0x3}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x81, 0xffffffff}) r6 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000040)={0x6, 0x3, 0x6, 0xdedb, 0xd}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRESDEC=r4, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r13, 0x40046207, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r14, 0x407, 0x7000000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r14, 0x3ba0, &(0x7f0000000180)={0x48}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x13020104}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd7000fbdbdf257f00000008000300", @ANYRES32=r12, @ANYBLOB="14005500a234a392c81665b412dd4f52a77a034c0a00f50008021100000100000a00f50008021100000100008a00f5005050505050500000"], 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x804) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x40090}, 0x4044194) 5.553242987s ago: executing program 4 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000c00)={&(0x7f0000000000)={0x50, 0xfffffffffffffffe, 0xfffffffffffffffe, {0x7, 0x2b, 0x6, 0x800, 0xd, 0x43, 0x2, 0x4, 0x0, 0x0, 0x80, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.189600632s ago: executing program 4 (id=832): syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x73}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000200)=0xfffffffb) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffff, 0x800) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000280), 0x3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f00000002c0), 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000300)={0x1, 0x5, 0x1, 0x6, 0xb, 0x6, 0x9, 0x10000, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000380)={r6, 0x2}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x200}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4a2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x50) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000001900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000780)={0x1134, r1, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1100, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf0, 0x2, "86c1a3d93c6a7e3f691a4d769990d22acd68abcf540f3adb7cef75e4bd7cc5aecd60577d2efabde87e144df7feecb53b5bbbcd814a247f29bc6c30b2938aed31078b96a4a1ed9206fd8901a0057aaecef32996147f482392dc2d07eb349f87727197d6103ed1b713206892f82310f90ea6816c500b74c59622496550fbacb413bb15e1f71da831b15d1f972dcce64404e792f1e5a2321796cc78c9eaaa5969f66d36261c371893c389d2de9158a9f69053aab2a7bc88f52400551b43189aa090b295b9d5b70d512e5489daa6e23154d3d4fee7c60d5cac4981f041ab5a49f6493fcbc3016ac885c537b694c9"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x1134}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000001940)=0xd) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r11, &(0x7f0000001b80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a00)={0x124, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x266}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x10}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xf}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001bc0)={r7, 0x100}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000001c00)={r6}, &(0x7f0000001c40)=0x8) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000025c0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002580)={&(0x7f0000001cc0)=@newtaction={0x898, 0x30, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{0x5a4, 0x1, [@m_sample={0x60, 0x12, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x401}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffeffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x816}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xe8, 0x2, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x3, 0x0, 0xa, 0x401}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xece, 0x5d, 0x4, 0x4d, 0x9}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf061, 0x5, 0x7, 0x7fffffff, 0x401}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0x42, 0x6, "1c571b4b21df5693529779a85eaab767e9e5111f69cd3855e251131e308d0bbabb58a3e145c66dc09aa5c5cb0353550cb5914fb2448cc3575b511e6876eb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x60, 0x10, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x3, 0x6, 0x7fffffff, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7d, 0x1000, 0x3, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ct={0x5c, 0x15, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xa98}, @TCA_CT_MARK={0x8, 0x5, 0x7ff}]}, {0x22, 0x6, "d345fa3811c8dc69d5a4a081fd25ee5bef2c0342453210194fe1069db5e0"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x7c, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x29b5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}]}, {0x25, 0x6, "ad6f339b00b7c08e1e7a17923235367a0af380b58763556c86f4a73645a13c6770"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x70, 0x12, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'l2tp\x00'}]}, {0x2f, 0x6, "9a2cd8cc076f94e52e998a44195ae108891b9d61e7a398411f083c47e4eafb3d4090d8e7d3628097a33627"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x138, 0x7, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x1, 0x3c, 0x1, 0xa995}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x7, 0x3, 0xc, 0xfffffffb}, {0x1, 0x10, 0x5, 0x3}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x7, 0x9, 0x4, 0x400}, {0x4, 0xe, 0xff, 0x4}, {0x800, 0x23, 0x8, 0x7}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0xfffffffb, 0x4, 0x80000000, 0x7}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xfffb, 0x18, 0x3, 0x7}, {0x18, 0x9, 0x2, 0x5}]}]}, {0x96, 0x6, "68b829da8996190e4aff0864440c9f15917df43f5b7b8df1f2ffa67d6d0c7c00d9c370dfb3183b954b1dda166d4c3da3dfff3f1b1e444842343e5f08318d59aff525d5ba7350ffff1170c34ac87ceee5d84ccc126f38639d54809e04c13619e82163f8ab36608fa3c4f403b5b07c5acf189a8cf3715a39e8894533123a345d906e5d819b879678a783909b85f7687d4f16f3"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x178, 0x15, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_PRIO={0x8, 0x3, @val=0xffff}]}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x1e74}, @TCA_IFE_DMAC={0xa, 0x3, @random="fa97fac0b82f"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1ff, 0xfffffff9, 0x3, 0x0, 0x9}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xffff2214}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x40}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xffff}]}]}, {0xbd, 0x6, "d5fe0fb88939210165063d69ba6a90ab7acce23c86ca3880bf72d724a2a3f1f5c246fbcf943a258e8c67768e998ac7bc6394f97506d17055f80a8b44979c5bbce70af3096e23f4aeda4eeb38f4d50280f77da313c162a10e504695b08fe9ab1ff59fd6e78a749bd518fc5159817e2acb9656bf8a63346c118a9eb38ec741747f0ea3b27a8d06d5d3e674bf76c31715ddb46f0516361c54384ef36f3909b7a110c73497164963f6a5a880c81af1b75481cefb9e7b76bde84448"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x2e0, 0x1, [@m_ctinfo={0x100, 0x20, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x8, 0x1, 0xfffffffe, 0x8}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0xa4, 0x6, "aac5ba10df01dc6676a0094d1184df83de4d539e83c4316d2999173a5f7e1e24db2ad21ba0e53add8ffde9d9b73073d7732b5cee9480aa807e3ad41cbe5929fd6755e8f5375caf75f9dd121aafc3fed30ea057f639864be0235a83ba586be91a10e1ef31a397064bb14772bbeb0371d257dc50f7b981741e7db0ccc007e1c5048929c985f7507cd5040d2b4bf0a7987af24a717a4b0154a2b22f11847290f62f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x108, 0x13, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x0, 0x4, 0x3, 0x7}, 0xf}}]}, {0xb7, 0x6, "43c32ecca4868f9e0ca9822f756c8997c0ed4d0ab91c35c2b401a80c58c6062cd0105e8ed7ae154cd381a622a497fa8d94538313b05d3d64dcad0758cf22212ccadf0454f992a17a76819fd33d0e83a4ce7d43bc74dae011acee43128f77c0b540a2635ff28834d59d0bf2823f3f8749f2b268a78494b97d5e47001724ad665bebb5a7b8ad8efdc59e9df4a1d6578237f6e1466623de27b68205eab4e26af4a39093154371bc362ac6b0deb8ed2cb49f18496a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0xd4, 0x10, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xaa}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2005}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x73, 0x6, "df5a46701d8a3cf7f2d99e69fbbf4d89ffe8f558704033ad1b8d99cce347b87cb2c27228032526f02fa5ffbe4cb15a785e0549de18d1b6535dc69bc22d7e947120b13c298ffa15bec0883b1d5a4f768246cf123c29600023263f1ab0f0a711def280955f82831945dfa51f0376f3fc"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x898}}, 0x48010) sendmsg(r5, &(0x7f0000003840)={&(0x7f0000002600)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002680)="5ad27acc337440676b20fc22c398b66d6a28a7dfb7b517602466f9f5c0118f6513e2f53a9741d2feb16a2495aebc048cb260425248784201db23aec41568ea3e8d4698815476e834fb6d759fa4dc47e855bcd32c8e5d585bdca8d472d275d9bf035d16e3d185e1803d7d787742555f0b734c973650692ed11da5ea670dc9bdb48436d79d5814cd551937c2a3b78b4c621e99d837c17e", 0x96}, {&(0x7f0000002740)="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", 0x1000}], 0x2, &(0x7f0000003780)=[{0x88, 0x29, 0x9, "6144fb168b3c3b875cefa2141bb1391439ae7bb3503535e8d2b988c67181302a1772a5a40bd8f076ff3b341e5e40f2c3e9422da9b47b59de5d6104b51fa1dda4b660f697ce2126994fed1f2863eae1cd59483dd7e8e22e06636eb6af7eb004a819489e932f852d9e1938e02a9950ef84988a2c12"}], 0x88}, 0x20004800) 4.771673475s ago: executing program 1 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xf8f98ced9c9c1015) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x1, 0x1, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "10003d2b00f7006c", "20e48560999fd10000000000000000ff06100000050000108f00000f00"}) (async) write$sndseq(r1, &(0x7f0000000380)=[{0x5, 0x3, 0x0, 0x0, @time={0x0, 0x99}, {0xd}, {0x0, 0x21}, @addr={0xfc, 0x1}}, {0x2, 0x2, 0x7, 0x4, @tick, {0x14, 0x5}, {0x0, 0x2}, @queue={0x81, {0x2, 0xfffffffb}}}, {0x7, 0xe0, 0x4d, 0x8f, @time={0xfffffffe}, {0x3, 0x4e}, {0x10, 0x1}, @connect={{0xd, 0xc}, {0x8, 0x4}}}], 0x54) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="000000f0620000001c001280090001007866726d000000000c00028008000200ea000023b713120003007866726d3000"/58], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "5059deb6e56b798675a5bcf052cd327532357d754d5974a05be6b86eb69889af326d700a8bfda6b307770598ddadaf99b7ca39c862437460cf3c44bb91a3e0f0", 0x30}, 0x48, 0xfffffffffffffffa) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) r9 = semget$private(0x0, 0x4000000009, 0x0) semctl$IPC_RMID(r9, 0x0, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYRESDEC=r9, @ANYRESOCT=0x0, @ANYRES8=r7, @ANYRES32=r3, @ANYRES64=r0, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRESOCT=r2, @ANYRES8=r4], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r10, 0xc02464bb, &(0x7f0000000180)={0x0, 0x0, 0x9, 0x5, 0xa40000, 0x0, 0x6, 0x8, 0x81}) (async) r11 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r11) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r11, 0x0) (async) r12 = userfaultfd(0x80801) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000000c0)) 4.730611987s ago: executing program 4 (id=834): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB="4ecaf9c7fd0b2c5672b3e4acb4e4aea325e72b6982bc6b7f367513dccd0c4229019ce732fa7a08bbee7945476322b3f68f78e0180d6b9726a279bed09c281d5c9d8fef2f6deca3", @ANYBLOB="1912af50aa42b9d0a1c33f3944115c1b474afdc247513b701f08a4ea0069a5ecbdcfdcdcfbcd295cc2b9a19d67f8b6d7eb0c9fe53fa18994092acc1667f9fdb2", @ANYRESDEC=r0], 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYBLOB="4ecaf9c7fd0b2c5672b3e4acb4e4aea325e72b6982bc6b7f367513dccd0c4229019ce732fa7a08bbee7945476322b3f68f78e0180d6b9726a279bed09c281d5c9d8fef2f6deca3", @ANYBLOB="1912af50aa42b9d0a1c33f3944115c1b474afdc247513b701f08a4ea0069a5ecbdcfdcdcfbcd295cc2b9a19d67f8b6d7eb0c9fe53fa18994092acc1667f9fdb2", @ANYRESDEC=r0], 0x0) 4.295521748s ago: executing program 1 (id=836): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x2000400, 0x0, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005700)='./file0\x00', &(0x7f0000005740), 0x100) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x101000) 4.131226617s ago: executing program 5 (id=837): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (async) r3 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x6, 0x0, 0x9, 0xf6, 'syz0\x00', 0xffffffff}, 0x2, 0x400, 0x7, r3, 0x3, 0xe10, 'syz1\x00', &(0x7f0000000100)=['/dev/fuse\x00', '&/-(\'}![&\\$\x00', '(\x00'], 0x18}) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) (async) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000080)={0x6, 0x8, 0x7, 0x9}, 0x10) 3.970376883s ago: executing program 5 (id=838): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x8, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x3b, 0x0, 0x0, 0x3}]}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(r4, 0x0, r5, 0x0, 0x2, 0xc) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$NBD_DISCONNECT(r6, 0xab08) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080), 0x0, 0x6, 0x0, 0x2, 0x7, 0x18}) 3.515576296s ago: executing program 0 (id=839): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x8000, 0x2c4501) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x184, r2, 0x6, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xba, 0x22}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8a37}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}, @NL80211_ATTR_FRAME_MATCH={0x74, 0x5b, "b0f4663440280dc39f90e1752f6eddee99cb2687ce496b520aea0151eeee1d9756cff3adb6d8b0bffac4348bf9dd7a409e166c9585d65bf145540f0a9bcc6736b646416e74196b70b675b15709c53acc6c20f7cb1123506d80a1d15f50ba5acc997d83701fa696576d6aa0c7fb884325"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xbd, 0x5b, "84f79df841a733001dfd1a845eadf38526f20caf6ed5fd56a80c58d6fb46cd9565e3470d43804f763a253c71d3d7f662de9bc81582ab139e8bda2e4be6a1e7bc0e1ab9464bc77bf2152a632e23d8ccd28e91bdc4e95dea916c0129c777f3fffcb09ac9746542dabd24f48e5bd148c43b37262e70c2e9620111f126ffe47f45d67a21a6ff3b04dc1e66dc7d496ba95a6a33a9d2a66e799e0b286817446fa3fef0e7984697d56200e71d0f3f4bc6118564187356db5e4f4c0444"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x4055) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x25, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "9aa8e100", "f11bb8cba3046ce3"}, 0x28) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x25, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "9aa8e100", "f11bb8cba3046ce3"}, 0x28) 3.472668616s ago: executing program 0 (id=840): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xa, 0x1000, &(0x7f0000000180)="219b59c10fd10f588433", &(0x7f0000000680)=""/4096, 0x7b13a66b, 0x0, 0x32, 0x6f, &(0x7f0000000200)="bade8d728a06ef92c063451ab31045189c545967e19a2f39fe32916bef159f8379d1549f8a52c95b11deb39cb14323f4002f", &(0x7f00000002c0)="36031f3d3c51ed64fb5f7cf9c5c76c62b41fe162f32ac5201e7496cdfc958d2d002d3097d9c3aee96083b211d29be649f806845168b78409a831a22ba4eb47ee6cb8ba65be3459d1ff2e89b7b9b7ffb67e51f8023c6923d7e1c4301ea7515a63180075ca4a5b9c2aa235e747aef2e4", 0x2, 0x0, 0x4}, 0x50) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x2000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) close(r10) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x20040000) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0x83, 0x7, 0x3, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x8, 0x3f9a, 0xffffffffffff0000, 0x8000000010001, 0x3}, 0x0, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) write$cgroup_type(r7, 0x0, 0x0) write(r5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x2048ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x4, 0x0, 0x69}, &(0x7f0000000080), &(0x7f0000ff4000)) read$eventfd(r4, &(0x7f0000000140), 0x8) r11 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x2de}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r11, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.394406472s ago: executing program 1 (id=841): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160005000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x25, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x710, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770) 3.283080267s ago: executing program 1 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x1, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r5, 0x3, 0x9, 0x3ffc}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x19) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@deltclass={0xd54, 0x29, 0x738, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3, 0xa}, {0x1, 0xfff1}, {0x9, 0x10}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0xcf4, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x3, 0x581e, 0x8, 0x8000, 0x3, 0x8001, 0x4, 0xc737, 0x1, 0x7, 0x7, 0x5, 0xff, 0x5, 0x4, 0xf, 0x8, 0xffffff01, 0x8, 0x100, 0x289, 0x0, 0xa5, 0x94fa, 0x9, 0x7, 0x7, 0x7, 0x800, 0xb, 0x3, 0x7, 0xa, 0x2, 0x5, 0x6, 0x7fff, 0x6, 0x6, 0x8, 0x6, 0x8, 0xf70300, 0x7, 0x8, 0x3, 0xfffff975, 0x8000, 0xe, 0x0, 0x8000, 0x1, 0x2, 0x5, 0x8, 0x6, 0xfff, 0xa26, 0x1, 0xfffffff1, 0x1, 0x400, 0xffffffff, 0xfffffffa, 0x1, 0x4, 0xa, 0x7fffffff, 0xfffffff8, 0x1, 0x4, 0xffffffff, 0x4, 0x1, 0x6, 0x3, 0x3, 0x3, 0x8, 0x7, 0x9, 0x7, 0x57, 0x1, 0x0, 0x8, 0x9, 0x7ff, 0x9, 0xfffffff6, 0x1, 0x15d, 0x2, 0xe2, 0x7, 0x0, 0x40, 0x5, 0xe, 0x6, 0x101, 0x7, 0x3ff, 0x100, 0x0, 0xab, 0x4000000, 0x9, 0x8000, 0x4, 0x8, 0x5, 0x8, 0x7, 0x9, 0x0, 0x1, 0x5, 0x8, 0x6, 0x7, 0xfffffff9, 0xff3, 0x31d9, 0x7e, 0x6, 0x7fffffff, 0x8, 0x80000000, 0x6, 0x28d, 0x1000, 0x8, 0x9, 0x6, 0x4, 0x5, 0x8, 0x9, 0x3, 0x1, 0x4, 0x1, 0x0, 0xfffffffd, 0x2c, 0x6, 0x1, 0x9, 0x7fffffff, 0x9, 0x8001, 0x2, 0x101, 0x7, 0xb8, 0x80000000, 0x8, 0x0, 0x9, 0x4, 0x7, 0x3ff, 0x7, 0x2, 0x1, 0x2, 0x5, 0x0, 0x8, 0x40, 0xffffffff, 0x18000000, 0x3, 0x4, 0x80000000, 0xffff2891, 0x8, 0x4, 0x133, 0x80, 0x3, 0x7, 0xffff, 0x7ff, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfffffffb, 0x3, 0x8, 0x87, 0x0, 0x8, 0x824, 0x8, 0xffff, 0x4, 0x2, 0x5, 0x3, 0x80000000, 0x800, 0xb, 0x8, 0x80, 0x7fffffff, 0x2, 0x3, 0x7f, 0x100, 0x8, 0x6, 0x7ff, 0x3, 0x2, 0xf28, 0x0, 0x6, 0x100, 0x8, 0x80000000, 0x401, 0x6, 0x0, 0x5, 0x6, 0x40aa9188, 0xff, 0x1, 0x31a4, 0x8, 0xf7ee, 0xe0c, 0xb, 0xfffffffb, 0x2, 0xf41c, 0x8, 0x0, 0x7f, 0x2, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1000, 0x5, 0x6, 0x9, 0x6, 0xffffffff]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7fffffff}, @TCA_HTB_CEIL64={0xc, 0x7, 0xc6}, @TCA_HTB_CTAB={0x404, 0x3, [0x3dd1, 0x0, 0x9, 0x1, 0xfed, 0x30a, 0x7, 0x4, 0x7561, 0xffffffff, 0x6, 0x3, 0xfa8, 0x127, 0x2, 0xfffffff9, 0x80000001, 0xbc33, 0xd70, 0x20000000, 0x8000, 0x6, 0x40, 0x7, 0x3, 0x934d, 0xea, 0xffa, 0x5, 0x1ff, 0x1, 0x2, 0x400, 0x7fffffff, 0xa8, 0x6, 0x3, 0xcfa, 0x1, 0x5, 0x7, 0x9, 0x14, 0x70, 0x49e, 0x7, 0x5, 0x8000, 0xa, 0x6, 0xd, 0x3, 0x4, 0x2, 0x101, 0x5, 0x3ff, 0xff, 0x2, 0x9, 0x4, 0x2, 0x400, 0x4, 0xe40, 0x7, 0x7ff, 0x4, 0x6, 0x40, 0x7, 0x2, 0x2, 0x0, 0xe, 0x85c, 0x6, 0xdb0, 0x0, 0x8000, 0x8, 0x1ff, 0x2, 0x9, 0xef9c, 0x80000001, 0xe, 0xcf, 0x9, 0x4, 0x8, 0xb7, 0x6, 0x0, 0xfffffffa, 0xd, 0x80, 0xffff, 0x1, 0x3, 0x6, 0x8, 0x9, 0x9, 0x8000, 0xfff, 0x0, 0x7, 0x2, 0xfffffffc, 0x0, 0x0, 0x8, 0x2, 0x3, 0xf, 0x4, 0xffff, 0x8, 0x9e0d, 0x7, 0x6, 0x2, 0x7fffffff, 0x3, 0x2, 0xffffffff, 0x400, 0x3ff, 0x7, 0x9, 0x4, 0x4, 0x1, 0x81, 0x6, 0x4, 0x4, 0x101, 0xad, 0x7, 0x0, 0x52, 0x8, 0xfffff52e, 0x1, 0x2, 0x7, 0x2, 0x27, 0xff, 0x4, 0x6, 0xfffffff9, 0x71d, 0x100, 0x9f, 0xb, 0x80000000, 0x9, 0xfffffffb, 0x5, 0x7ff, 0x3, 0x800, 0x5, 0x1, 0xb3bd, 0x400, 0x5, 0x1e8f, 0xd157, 0x3, 0x3, 0xd0000000, 0x18b, 0x0, 0x7, 0x98a, 0xc9, 0xffff8001, 0x6, 0x1, 0x3, 0x0, 0x2, 0x8001, 0x2, 0x2, 0xfffffff9, 0x6, 0x300, 0x10, 0xc9b, 0x9, 0x1, 0x7ff, 0x3ff, 0xfffff94f, 0x5, 0x4, 0xfffffff9, 0x6, 0x8, 0x39edc030, 0x7, 0x6, 0x3, 0x6a, 0x3, 0x72, 0x1, 0x5, 0x8, 0x10, 0xe, 0x8, 0x5, 0x22, 0x1, 0x1, 0x101, 0x2015, 0xa, 0x9, 0x3, 0xd, 0xfffffffe, 0xb, 0x6, 0x6, 0x1, 0x3, 0x7e8f4a31, 0x0, 0x8, 0xf7, 0x7, 0x3fd, 0x8, 0xde, 0x7f, 0xd6, 0xfffffff8, 0x6, 0x80000000, 0x2, 0x7, 0x7, 0x8, 0x6, 0x23e, 0x5, 0x9, 0x1000, 0x778]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x1, 0x8000, 0xfffb, 0xd0b8, 0x22}, {0x1, 0x1, 0x9, 0xfb73, 0x6, 0x9}, 0x1ff, 0x6, 0x4, 0x7, 0x38000}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x2, 0x2, 0x4, 0x72ea, 0x6, 0x7143}, {0x8, 0x2, 0x23a, 0x1ff, 0x10, 0xfffff000}, 0x1, 0xcf1b, 0x3, 0xd53d, 0x27756e69}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x1, 0x9, 0x9, 0x6}, {0x9, 0x1, 0x101, 0x2, 0x2e53, 0x3800000}, 0x68900c95, 0x9, 0xc, 0x1, 0x6}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x1, 0xb, 0x8001, 0x8, 0x2}, {0x6, 0x2, 0x9, 0x5, 0x7}, 0x23e, 0x3ff, 0xd, 0x81, 0x4}}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x80000001, 0x3ff, 0x709, 0xf, 0x2, 0x8, 0x7, 0xffff, 0x5, 0x2c00, 0x5, 0x2, 0xc0000, 0x1, 0xa, 0xa, 0x3, 0x6, 0x6, 0x6e0, 0x3, 0x4, 0x8, 0x6, 0x0, 0x2, 0x2, 0x4, 0x1, 0x4, 0x7, 0x3, 0xffffffff, 0x5, 0xd8, 0x2, 0x8, 0xf, 0x8, 0x3, 0x2, 0x9, 0x10001, 0x400, 0xbe, 0x7ff, 0x4, 0x78, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x8, 0xd, 0x4, 0x0, 0x200, 0x0, 0x7, 0x28, 0x4, 0x101, 0x4, 0x400, 0x1, 0x4, 0x7bfe, 0x8, 0xdaf0, 0x6, 0xfffffff8, 0x101, 0x2, 0x7, 0x6, 0x5, 0x101, 0x5, 0x9, 0x401, 0xcda, 0x1, 0x6, 0x7, 0xed, 0x80000001, 0x610, 0x5, 0x5, 0x34, 0x9, 0xc, 0x1, 0x0, 0x3a3b, 0x80, 0x4, 0x1, 0x7, 0xe402, 0x5, 0xfffffffe, 0x0, 0x9, 0x3, 0x4, 0x6, 0x80cf, 0x6350ca1f, 0x7, 0x7, 0x80000000, 0x5, 0xd4f, 0x0, 0x9, 0x101, 0x101, 0x2bce, 0x2, 0x4, 0x10000, 0x5, 0x1, 0x5, 0xbf7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x6, 0x0, 0x8, 0x8, 0x24b, 0x6, 0x200, 0x1ff, 0x584729ec, 0x7, 0x6, 0xe, 0x81, 0x8, 0x80000000, 0x8, 0x1, 0x0, 0x3, 0x4, 0x6, 0x8, 0x7, 0x0, 0xca04, 0x2808, 0x9, 0x9, 0x81, 0x7, 0x0, 0x7fffffff, 0x80000001, 0x4, 0x1, 0x1, 0x3, 0x10000000, 0x9, 0x8, 0x3, 0x4, 0x8, 0x3, 0x800, 0x8, 0x7, 0x4, 0x5, 0x6, 0x81, 0x948, 0x0, 0x9, 0x1000, 0x87a, 0x2, 0x0, 0x1af, 0x2, 0x3, 0x2, 0x3, 0x3, 0x40, 0xdb91, 0x0, 0x6, 0x5, 0x3, 0x3, 0xe, 0x7, 0x2, 0x2, 0x1, 0x4, 0x5, 0x1, 0x3, 0xc, 0x7f, 0x4, 0x0, 0x8, 0x40, 0x2c064184, 0xdee8, 0x1, 0x8001, 0x0, 0x9, 0x7fffffff, 0x8, 0xb1a, 0x80000000, 0x8, 0x3, 0x8, 0x2, 0x80, 0x6, 0x0, 0x10, 0xfffffffc, 0x3, 0x0, 0x1, 0xfffff499, 0x8, 0x1, 0x200, 0x9, 0x6, 0xe, 0x7fffffff, 0x86eb, 0x2, 0x2, 0xfffffffc, 0x66bace97, 0x4, 0x7fff]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @tclass_kind_options=@c_red={0x8}]}, 0xd54}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) poll(&(0x7f0000002300)=[{r6, 0x80}], 0x1, 0xfffffa48) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf250700000008000100560000000c0099003a5fa3077e0000000a0018000303030303030000080005000b000000050053000000000008000500000000000a00180003030303030300000a00180003030303030300000a0018000303030303000000"], 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x4000005) write$tun(r0, &(0x7f0000000080)=ANY=[], 0x22) 2.648582051s ago: executing program 5 (id=843): openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x1) (async) sendmmsg$unix(r0, 0x0, 0x0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) (async) sendfile(r3, r2, 0x0, 0x578410eb) 2.447616537s ago: executing program 3 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r1, 0x100, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x24004805) 2.283573142s ago: executing program 0 (id=845): openat$tun(0xffffffffffffff9c, 0x0, 0x60880, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000001880)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @private2, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x0, 0x64}}}], 0x18}, 0x20004040) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 2.22467517s ago: executing program 3 (id=846): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) lseek(r0, 0x3ff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac14140008", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xecc, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xea0, 0x2, [@TCA_FW_ACT={0xe9c, 0x4, [@m_pedit={0xe98, 0x1, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x0, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0xe, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x200, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x5d8adb0f, 0x5, 0x3, 0xab9, 0x7, 0x4}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0x1, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x2, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0xc4f, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x93d}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x80000001, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xecc}, 0x1, 0x0, 0x0, 0x81}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 2.080999137s ago: executing program 0 (id=847): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r0, &(0x7f0000000300)='./cgroup/../file0\x00', &(0x7f0000000040)={0x5b5501, 0xc8, 0xd}, 0x18) (fail_nth: 10) 1.235178611s ago: executing program 4 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) (async, rerun: 32) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) (async, rerun: 32) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, 0xfffffffffffffffd) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) (async) fcntl$dupfd(r0, 0x0, r0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r10 = socket(0x10, 0x80002, 0x0) connect$inet6(r10, 0x0, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) 1.226041053s ago: executing program 5 (id=849): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00000000000600", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 1.175570678s ago: executing program 0 (id=850): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xf, 0x32, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) (async, rerun: 32) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x2a) (rerun: 32) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x50093}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000740)={0x40, 0x21, 0x8, {0x8, 0x2, "f7c10ded1612"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x1c, &(0x7f0000000800)={0x0, 0x0, 0xb5, "2263cde097167892d9166a783fbd49bceafa8ece27c4c972ee82689f54dd523df0432a168f9f934e6f0631cb5c17f14ded2a9071adf01bcad2b2717f5d384ef67864050b90b8a5dd4cfeab40767917f176daf26b1c0802454d1091d9bd5f2bf86eff89c3028890ef2e713d58214bd86c276f21be8be7d13e69e04ea76b5997875f2a207100d55c61b526e041fa3f3e0368ab1e338309dca5406106f31ca3e1112e51a6b77e3e94af425525c1ebec2790ce7c89508b"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7f}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) (async) sendto$packet(r1, &(0x7f0000000040)="6f3d7b6e3595904ad44263292847", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8}]}}}]}, 0x44}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)="b670a57690313a5f4dd53ec4f822a41a03e0ca87ab7e5451f1f68c4ff08e7c296b0fca72c117d94e652c21d1a9a0541f0bf781058c794ecacfa5623b3967e5b16c3135b5cc4db8a3a49da7323b3fe7500d0fe9b64fc955e970bbb8d1551fba0a29dd51df0fe47d22abf910d568", 0x6d}, {&(0x7f00000000c0)="79e7914c98bb", 0x6}, {&(0x7f0000000300)="22ff5f49c9e0d1fc710ac1466150321bf0df7edf7db410316477652934610bbd34d63f820781f5b12042cc21635869b2f5592a9d8d3487987ba5392f8e2ee706aa3d7382e22305bf4c466d866e80f804f294aae0317bd90bff26d0a4fcf2259b09584fe063bce36e25be782b3d4cc925e9e70a6f2f235833262e9a7fb271ac37b6ffc32cd0237b1d5dc60ada0e177aab109427a77e67dc05a4eb62758d7280e0dd9655862030f8b5192725f652ba5c5fbeb047d374bfd78d99905a7a123e3e6e1c9affdd16ff0c9f70", 0xc9}, {&(0x7f0000000140)="af4a7b33e68219dcc8959173866d20e67beb7bff98ffcc8d5dc7eafbc964c07542ed919580b69961246769ba00b48cd653c9980e9aa1e59ca310f1d749d440a01f699721193935e3f85d59d1a7e39b0bd90b48ea0b9b6ed967f06c8ee4cbd6ad66402cd3feca7e20168eefeb9884e52727dd08b30e6d2d4814c7509a927f5f70c2997197d361b6a6af9683d19983548126f8feb90ce1d65d298eb87a963e0c0c9f4f874d244ba5dd851fd93ab813ed1b5eef76909b572a2f", 0xb8}, {&(0x7f0000000400)="ae1b55c4583e25ea05fafe9586fb83ef5ae3d7e8d0fdd9b157501068863534a4a9cce960a6f0411df55b62aa46335259149065caffb32bd500d02c3984df4db89e02e5331155a132a08e47ee40bccf465eb465905823806d42d2fb0a3481364c0119fdfd5121db38503d5cf7ee3277cacac550103eca94de8822d0a628de", 0x7e}, {&(0x7f0000000480)="847376a4b0a22ec42f6c4b85f1c31ce9584e60baefe9393d8355729dc9aac98b065cafe8c37cb0e5923dd7aec1b8fd7b779a1ba0024fb1e88bd01f9edb21b7cd3c7894caa44a8902c3e3d62b461b41372bde181bb64263939632ab80868193f5dc5bcab5d15813ee988ac0531239bf1cf2fb68416eab0dbb", 0x78}, {&(0x7f0000000500)="ad5f7ad0f97d85345073c7a26be9c6f5b86426b6f95354845287262b95426d8178aa00433ca0515e5651f5dea4ecfbf09a010e3fa3d09d8d5c9915dd274eaa430e0216c07ed30990074b7d51bfe7db9c69a73781decd9c64e58301d8e9a05274be6438eca325be3f9f6f9d2b7dd7faa2899c5e3cf0ed7b738bc3a1bb15e793e3181f2b2ce4f2eb4663f826f39d3869a31be7b5db6d09deed88e3ee104b5f2e496185fd638cbd95070f046b1d20bf9d313b325b1e50f827432ad33f7b48e55ecb3475acb3c6e0370f5d8d94e5319e", 0xce}, {&(0x7f0000000600)="0644dbb881c94fe7943d5824a3a980793c37f28a0b6c7f37854d647ccccc16a4dde0523bd87766a3c11a431e8a076428437ec7a4e8c8a8ce829b7e0c86a285e43c4f66", 0x43}], 0x8}, 0x20008801) 1.09551823s ago: executing program 1 (id=851): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x15, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dri(0x0, 0x7, 0x220042) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_io_uring_setup(0x5a02, &(0x7f0000000280)={0x0, 0xb749, 0x2, 0x2, 0x31e}, &(0x7f0000000400)=0x0, &(0x7f0000000500)) syz_io_uring_complete(r7) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000440)={0x5}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed"], 0x10}}, 0x0) 953.163893ms ago: executing program 4 (id=852): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160005000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2b, 0x0, &(0x7f0000002000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x25, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x710, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770) 857.36455ms ago: executing program 5 (id=853): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}, 0x91}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @remote}, 0x1c) listen(r1, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x30, 0x2, 0x56, 0xfffff008}, {0x6, 0x0, 0x8, 0x10000004}]}, 0x10) 683.136601ms ago: executing program 4 (id=854): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r1, 0xc00c5512, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0xf4}, 0x16, 0x3) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="c7", 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/238, 0xee}], 0x2, &(0x7f0000000540)=""/68, 0x44}}, {{&(0x7f0000000380)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000880)=""/100, 0x64}], 0x1, &(0x7f0000000200)=""/5, 0x5}, 0x800}, {{&(0x7f00000005c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=""/27, 0x1b}, 0x7ff}], 0x3, 0x20010160, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000008c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r9, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r6, 0x3516, 0xf400, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg2\x00'}) capget(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000018000000bfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff0000000015040000000002000f040000000000003404ffc101ed0a0065040000170000801f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3cea8bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1e"], 0x0}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x0, &(0x7f0000000040), 0xda, 0x0, &(0x7f0000000280)="8ff692e197d5fa148f5664dda9804a723011215889c46f0f6524e984b7501990562361268482ba3a97d94c4c8a4542c535256f6ec8b45bc6fcdced993082d168747db242b57e445a084ece6a9ad2bde986373062f203ac816c41769ef72ec772d9ceed8ff8c513b8b4de54a226c50c91faa71fb77d9f722772d5ecfaa8255523d86e9a54e3a27db4d1e006cf70e8ceb1d9f836a53598dad63516c8b10bdd44616a574da2ea3c0743bd491435e94d4ef3533521319050294076ab697f10ffd6da41f6f5f98a86e69faca0f5d5123a5971d12c97173d6f5c8c0008"}) 467.591642ms ago: executing program 5 (id=855): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xa, 0x1000, &(0x7f0000000180)="219b59c10fd10f588433", &(0x7f0000000680)=""/4096, 0x7b13a66b, 0x0, 0x32, 0x6f, &(0x7f0000000200)="bade8d728a06ef92c063451ab31045189c545967e19a2f39fe32916bef159f8379d1549f8a52c95b11deb39cb14323f4002f", &(0x7f00000002c0)="36031f3d3c51ed64fb5f7cf9c5c76c62b41fe162f32ac5201e7496cdfc958d2d002d3097d9c3aee96083b211d29be649f806845168b78409a831a22ba4eb47ee6cb8ba65be3459d1ff2e89b7b9b7ffb67e51f8023c6923d7e1c4301ea7515a63180075ca4a5b9c2aa235e747aef2e4", 0x2, 0x0, 0x4}, 0x50) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x1000, 0xc, 0x9, 0x4, 0xc4, 0x0, 0x5, 0x6a, 0x3, 0x0, 0xfb}, {0x1, 0xd000, 0x6, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x4, 0x4}, {0x6000, 0x100000, 0xf, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3e}, {0xeefe0000, 0x0, 0x0, 0x78, 0x8, 0x0, 0x2, 0x0, 0x40, 0xfe, 0x5}, {0x0, 0xeeee8000, 0x0, 0x4, 0x4, 0x2, 0xa1, 0x20}, {0xf000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x8}, {0x80a0000, 0x3}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x122, 0x0, 0x800, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r10, 0x0, 0xf3a, 0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0x83, 0x7, 0x3, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x8, 0x3f9a, 0xffffffffffff0000, 0x8000000010001, 0x3}, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000140)=0x5000) write(r3, &(0x7f0000000240)="94", 0x1) write$cgroup_type(r10, 0x0, 0x0) write(r4, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x2048ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x4, 0x0, 0x69}, &(0x7f0000000080), &(0x7f0000ff4000)) r11 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r11, 0x627, 0x4c1, 0x43, 0x0, 0x0) 202.361438ms ago: executing program 3 (id=856): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000680)={0x0, @reserved}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x7) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r2, 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r4) (async) keyctl$get_persistent(0x16, 0x0, r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) unshare(0x28040680) r7 = timerfd_create(0x0, 0x0) timerfd_gettime(r7, &(0x7f0000000040)) (async) timerfd_gettime(r7, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=857): socket(0xf, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @random="fcf4d5eaa000", @val={@val={0x88a8, 0x4}, {0x8100, 0x7, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x1}, 0x2a, 0x0, 0x0, 0x0, "efc4f7587c6a11160601e640eec70c5ac2c92b09d96b619c0b5c77ebfd52240c27a7b660d27e87799e34845f01908bf4b1f7dea8e24adb9d06d4b6ef391ace0d"}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0xffffff82, &(0x7f0000000040)=0x6) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x1) socket(0xb, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) ioctl$int_in(r3, 0x5452, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): has invalid maxpacket 0 [ 472.557189][ T5962] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.600533][ T5962] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 472.620016][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.688198][ T5962] usb 5-1: config 0 descriptor?? [ 472.925695][ T5962] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 473.099774][ T5962] usb 5-1: USB disconnect, device number 31 [ 473.123223][ T5962] usblp0: removed [ 473.695466][ T5958] usb 4-1: USB disconnect, device number 35 [ 473.921575][ T7728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.439'. [ 473.963826][ T7727] bridge1: port 1(macvlan2) entered blocking state [ 474.011528][ T7727] bridge1: port 1(macvlan2) entered disabled state [ 474.029742][ T7727] macvlan2: entered allmulticast mode [ 474.053540][ T7727] macvlan2: entered promiscuous mode [ 474.138115][ T7734] sctp: [Deprecated]: syz.1.441 (pid 7734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.138115][ T7734] Use struct sctp_sack_info instead [ 474.231158][ T5953] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 474.301096][ T5848] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 474.391666][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 474.399459][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.410037][ T5953] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 474.441943][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.461064][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 474.470339][ T5953] usb 5-1: config 0 descriptor?? [ 474.481125][ T5848] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 474.495277][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.513686][ T5953] gspca_main: spca501-2.14.0 probing 0000:0000 [ 474.531134][ T5848] usb 1-1: config 0 descriptor?? [ 474.746973][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.757674][ T5848] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 474.767975][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.791333][ T7730] random: crng reseeded on system resumption [ 474.875887][ T5848] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 474.888468][ T5848] dib0700: firmware download failed at 7 with -22 [ 474.900642][ T5848] usb 1-1: USB disconnect, device number 39 [ 474.952962][ T5922] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 475.233206][ T5953] gspca_spca501: reg write: error -110 [ 475.238845][ T5953] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 475.260417][ T5953] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 475.311084][ T5962] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 475.332948][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.344946][ T5922] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 475.359254][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.369630][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.396681][ T5922] usb 2-1: Product: syz [ 475.408779][ T5922] usb 2-1: Manufacturer: syz [ 475.419819][ T5922] usb 2-1: SerialNumber: syz [ 475.481087][ T5962] usb 6-1: Using ep0 maxpacket: 8 [ 475.492449][ T5962] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 475.501011][ T5962] usb 6-1: config 0 has no interface number 0 [ 475.513313][ T5962] usb 6-1: New USB device found, idVendor=0763, idProduct=200d, bcdDevice=b3.36 [ 475.522504][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.549122][ T5962] usb 6-1: Product: syz [ 475.561446][ T5962] usb 6-1: Manufacturer: syz [ 475.576509][ T5962] usb 6-1: SerialNumber: syz [ 475.630224][ T5962] usb 6-1: config 0 descriptor?? [ 475.664567][ T7743] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 476.328632][ T7743] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 476.333589][ T5958] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 476.466248][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 476.501649][ T5958] usb 1-1: device descriptor read/64, error -71 [ 476.537162][ T5922] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 476.544667][ T5922] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 476.552756][ T5922] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 476.623511][ T30] audit: type=1326 audit(1762020215.481:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 476.648131][ T30] audit: type=1326 audit(1762020215.481:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 476.671149][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.679320][ T30] audit: type=1326 audit(1762020215.481:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 476.702035][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.709507][ T30] audit: type=1326 audit(1762020215.481:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 476.733269][ T30] audit: type=1326 audit(1762020215.481:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 476.748624][ T5922] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 476.756035][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.771977][ T5958] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 476.783819][ T30] audit: type=1326 audit(1762020215.481:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 476.806491][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.855253][ T30] audit: type=1326 audit(1762020215.481:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 476.887149][ T5953] usb 5-1: USB disconnect, device number 32 [ 476.936093][ T30] audit: type=1326 audit(1762020215.481:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 476.959705][ T5958] usb 1-1: device descriptor read/64, error -71 [ 476.978553][ T5922] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 477.005046][ T30] audit: type=1326 audit(1762020215.481:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 477.045246][ T7771] program syz.5.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.068600][ T5922] usb 2-1: USB disconnect, device number 26 [ 477.072003][ T5958] usb usb1-port1: attempt power cycle [ 477.083290][ T30] audit: type=1326 audit(1762020215.481:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14abb8efc9 code=0x7ffc0000 [ 477.105481][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.114167][ T5922] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 477.421131][ T5958] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 477.442783][ T5958] usb 1-1: device descriptor read/8, error -71 [ 477.660147][ T7778] i2c i2c-0: Invalid block write size 37 [ 477.731669][ T5958] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 477.766570][ T5958] usb 1-1: device descriptor read/8, error -71 [ 477.824673][ T7790] loop6: detected capacity change from 0 to 7 [ 477.855999][ T7790] Dev loop6: unable to read RDB block 7 [ 477.868493][ T7790] loop6: unable to read partition table [ 477.891439][ T5958] usb usb1-port1: unable to enumerate USB device [ 477.898423][ T7790] loop6: partition table beyond EOD, truncated [ 477.920759][ T7790] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 478.232600][ T7801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.288081][ T5958] usb 6-1: USB disconnect, device number 5 [ 478.590442][ T7810] binder: BINDER_SET_CONTEXT_MGR already set [ 478.605018][ T7810] binder: 7807:7810 ioctl 4018620d 200000000040 returned -16 [ 478.680913][ T7812] binder: 7807:7812 ioctl c0306201 2000000003c0 returned -14 [ 479.703361][ T7845] loop6: detected capacity change from 0 to 7 [ 479.727541][ T7845] Dev loop6: unable to read RDB block 7 [ 479.747174][ T7845] loop6: unable to read partition table [ 479.780504][ T7845] loop6: partition table beyond EOD, truncated [ 479.806933][ T7845] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 479.931205][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 480.015954][ T7851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.116928][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 480.158248][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 480.201461][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 480.265032][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 82, changing to 7 [ 480.312092][ T10] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=53.c8 [ 480.387752][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.524660][ T10] usb 4-1: Product: syz [ 480.622464][ T10] usb 4-1: Manufacturer: syz [ 480.688132][ T10] usb 4-1: SerialNumber: syz [ 480.874983][ T10] usb 4-1: config 0 descriptor?? [ 480.886054][ T10] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 480.923785][ T5953] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 481.081192][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 481.090002][ T5953] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 481.100383][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.149200][ T5953] usb 5-1: Product: syz [ 481.159872][ T5953] usb 5-1: Manufacturer: syz [ 481.192738][ T5953] usb 5-1: SerialNumber: syz [ 481.222272][ T5953] usb 5-1: config 0 descriptor?? [ 481.239711][ T5953] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 481.682665][ T5922] usb 4-1: USB disconnect, device number 36 [ 481.989013][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 482.200286][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.208103][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.321414][ T5936] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 482.493505][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.505154][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.525621][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.567558][ T5936] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.578832][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.611660][ T5936] usb 2-1: config 0 descriptor?? [ 482.771995][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.796681][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.820599][ T7898] netlink: 'syz.5.479': attribute type 15 has an invalid length. [ 482.829508][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.479'. [ 483.120765][ T5936] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 483.174854][ T5953] gspca_stk1135: reg_w 0x200 err -71 [ 483.183349][ T5953] gspca_stk1135: serial bus timeout: status=0x00 [ 483.213454][ T5953] gspca_stk1135: Sensor write failed [ 483.230528][ T5953] gspca_stk1135: serial bus timeout: status=0x00 [ 483.250539][ T5953] gspca_stk1135: Sensor write failed [ 483.273454][ T5951] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.297696][ T5953] gspca_stk1135: serial bus timeout: status=0x00 [ 483.320486][ T5951] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.346602][ T5953] gspca_stk1135: Sensor read failed [ 483.359920][ T5953] gspca_stk1135: serial bus timeout: status=0x00 [ 483.377906][ T5951] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.434938][ T5953] gspca_stk1135: Sensor read failed [ 483.483249][ T5951] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.498540][ T5953] gspca_stk1135: Detected sensor type unknown (0x0) [ 483.531317][ T5953] gspca_stk1135: serial bus timeout: status=0x00 [ 483.547209][ T5953] gspca_stk1135: Sensor read failed [ 483.561127][ T5953] gspca_stk1135: serial bus timeout: status=0x00 [ 483.578196][ T5953] gspca_stk1135: Sensor read failed [ 483.668054][ T5953] gspca_stk1135: serial bus timeout: status=0x00 [ 483.729973][ T5953] gspca_stk1135: Sensor write failed [ 483.755563][ T5953] gspca_stk1135: serial bus timeout: status=0x00 [ 483.788104][ T5953] gspca_stk1135: Sensor write failed [ 483.810796][ T5953] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 483.854080][ T5953] usb 5-1: USB disconnect, device number 33 [ 484.501611][ T5922] usb 2-1: reset high-speed USB device number 27 using dummy_hcd [ 484.665167][ T7929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.235103][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 485.235193][ T30] audit: type=1326 audit(1762020223.971:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 485.263548][ T5953] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 485.451048][ T5953] usb 5-1: device descriptor read/64, error -71 [ 485.986918][ T5953] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 486.003894][ T10] usb 2-1: USB disconnect, device number 27 [ 486.151999][ T30] audit: type=1326 audit(1762020223.971:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 486.293530][ T5953] usb 5-1: device descriptor read/64, error -71 [ 486.531075][ T30] audit: type=1326 audit(1762020223.971:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 486.553810][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.595453][ T5953] usb usb5-port1: attempt power cycle [ 486.651616][ T7943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.490'. [ 486.743807][ T30] audit: type=1326 audit(1762020224.091:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 486.861138][ T30] audit: type=1326 audit(1762020224.091:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 487.001211][ T30] audit: type=1326 audit(1762020224.091:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 487.076045][ T30] audit: type=1326 audit(1762020224.091:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 487.099836][ T5953] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 487.131978][ T5953] usb 5-1: device descriptor read/8, error -71 [ 487.184616][ T30] audit: type=1326 audit(1762020224.091:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 487.271277][ T30] audit: type=1326 audit(1762020224.091:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 487.293921][ T7962] netlink: 476 bytes leftover after parsing attributes in process `syz.3.495'. [ 487.381142][ T30] audit: type=1326 audit(1762020224.091:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.1.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 487.403238][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.414160][ T5953] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 487.439990][ T7969] program syz.1.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.594820][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 487.710068][ T7980] netlink: 30728 bytes leftover after parsing attributes in process `syz.4.501'. [ 487.725356][ T5953] usb 5-1: device not accepting address 37, error -71 [ 487.756650][ T5953] usb usb5-port1: unable to enumerate USB device [ 487.766657][ T7975] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 487.802719][ T6036] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 487.831566][ T6036] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 487.957070][ T7980] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 487.968984][ T7980] bond1 (unregistering): Released all slaves [ 487.998626][ T6036] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 488.015422][ T6036] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 488.061579][ T5983] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 488.247549][ T5983] usb 1-1: Using ep0 maxpacket: 8 [ 488.259044][ T5983] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 488.269101][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.277932][ T5983] usb 1-1: Product: syz [ 488.282482][ T5983] usb 1-1: Manufacturer: syz [ 488.287302][ T5983] usb 1-1: SerialNumber: syz [ 488.303613][ T5983] usb 1-1: config 0 descriptor?? [ 488.324416][ T5983] ipw 1-1:0.0: IPWireless converter converter detected [ 488.862403][ T7999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.505'. [ 488.888180][ T5983] usb 1-1: USB disconnect, device number 44 [ 488.902967][ T5983] ipw 1-1:0.0: device disconnected [ 488.943909][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.505'. [ 489.575685][ T8017] netlink: 476 bytes leftover after parsing attributes in process `syz.0.510'. [ 489.789192][ T8022] binder: 8021:8022 unknown command 0 [ 489.802003][ T8022] binder: 8021:8022 ioctl c0306201 200000000080 returned -22 [ 489.904559][ T8025] loop6: detected capacity change from 0 to 7 [ 489.964435][ T8028] binder: BINDER_SET_CONTEXT_MGR already set [ 489.970440][ T8028] binder: 8021:8028 ioctl 4018620d 200000000040 returned -16 [ 489.981227][ T8025] Dev loop6: unable to read RDB block 7 [ 490.010108][ T8025] loop6: unable to read partition table [ 490.055730][ T8025] loop6: partition table beyond EOD, truncated [ 490.090346][ T8025] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 490.384125][ T8035] netlink: 3 bytes leftover after parsing attributes in process `syz.1.516'. [ 490.826035][ T8051] netlink: 'syz.1.516': attribute type 11 has an invalid length. [ 491.316088][ T8069] netlink: 476 bytes leftover after parsing attributes in process `syz.3.523'. [ 491.343612][ T8071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.394910][ T8071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.748070][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 491.748082][ T30] audit: type=1326 audit(1762020230.601:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 491.825233][ T8075] could not allocate digest TFM handle digest_null [ 491.860423][ T30] audit: type=1326 audit(1762020230.601:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 492.060860][ T30] audit: type=1326 audit(1762020230.601:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 492.201970][ T30] audit: type=1326 audit(1762020230.601:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 492.293048][ T8097] loop6: detected capacity change from 0 to 7 [ 492.321140][ T5953] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 492.417944][ T8097] Dev loop6: unable to read RDB block 7 [ 492.435442][ T30] audit: type=1326 audit(1762020230.601:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 492.479960][ T8097] loop6: unable to read partition table [ 492.512492][ T8097] loop6: partition table beyond EOD, truncated [ 492.531123][ T30] audit: type=1326 audit(1762020230.601:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 492.570291][ T30] audit: type=1326 audit(1762020230.601:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 492.583570][ T8097] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 492.625834][ T5953] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 492.691915][ T5953] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 492.716656][ T5953] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 492.736544][ T30] audit: type=1326 audit(1762020230.601:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 492.765841][ T5953] usb 1-1: config 1 has no interface number 1 [ 492.778189][ T5953] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 492.807259][ T30] audit: type=1326 audit(1762020230.631:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 492.840196][ T5953] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 492.912800][ T5953] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.932072][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.962178][ T30] audit: type=1326 audit(1762020230.631:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.5.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 493.034150][ T5953] usb 1-1: Product: syz [ 493.078920][ T5953] usb 1-1: Manufacturer: syz [ 493.111466][ T5953] usb 1-1: SerialNumber: syz [ 493.201068][ T5962] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 493.348890][ T5936] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 493.484616][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.491513][ T5936] usb 2-1: device descriptor read/64, error -71 [ 493.502345][ T5962] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 493.543556][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.587079][ T5962] usb 5-1: config 0 descriptor?? [ 493.761422][ T5936] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 493.899608][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.534'. [ 493.911187][ T5936] usb 2-1: device descriptor read/64, error -71 [ 494.012345][ T5962] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 494.021801][ T5936] usb usb2-port1: attempt power cycle [ 494.085927][ T5962] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input15 [ 494.321256][ T5962] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 494.371569][ T5936] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 494.423171][ T5936] usb 2-1: device descriptor read/8, error -71 [ 494.541410][ T5962] usb 5-1: USB disconnect, device number 38 [ 494.552413][ T5958] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 494.657739][ T8116] fido_id[8116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 494.678199][ T5936] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 494.712162][ T5936] usb 2-1: device descriptor read/8, error -71 [ 494.731875][ T5958] usb 6-1: Using ep0 maxpacket: 32 [ 494.753181][ T5958] usb 6-1: unable to get BOS descriptor or descriptor too short [ 494.765044][ T5958] usb 6-1: config 129 has an invalid interface number: 249 but max is 0 [ 494.788589][ T5958] usb 6-1: config 129 has no interface number 0 [ 494.816733][ T5958] usb 6-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 494.837017][ T5936] usb usb2-port1: unable to enumerate USB device [ 494.863644][ T5958] usb 6-1: config 129 interface 249 altsetting 247 bulk endpoint 0xA has invalid maxpacket 164 [ 494.888942][ T5958] usb 6-1: config 129 interface 249 has no altsetting 0 [ 494.918941][ T5958] usb 6-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 494.977805][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.986337][ T5953] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 494.997204][ T8122] fuse: Bad value for 'user_id' [ 495.002240][ T5953] usb 1-1: MIDIStreaming interface descriptor not found [ 495.003726][ T8124] netlink: 476 bytes leftover after parsing attributes in process `syz.3.536'. [ 495.014275][ T5958] usb 6-1: Product: syz [ 495.039304][ T5958] usb 6-1: Manufacturer: syz [ 495.053846][ T8122] fuse: Bad value for 'user_id' [ 495.062169][ T5958] usb 6-1: SerialNumber: syz [ 495.108498][ T8115] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 495.119214][ T5953] usb 1-1: USB disconnect, device number 45 [ 495.132920][ T8115] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 495.214679][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.360876][ T5958] smsc95xx v2.0.0 [ 495.376825][ T5958] smsc95xx 6-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 495.390660][ T5958] smsc95xx 6-1:129.249: probe with driver smsc95xx failed with error -71 [ 495.428619][ T5958] usb 6-1: USB disconnect, device number 6 [ 495.494182][ T8135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.541'. [ 495.504207][ T8135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.541'. [ 495.531093][ T5936] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 495.536654][ T8135] bond1: entered promiscuous mode [ 495.661678][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 495.681072][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 495.688255][ T5936] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 495.697387][ T5936] usb 4-1: config 0 has no interface number 0 [ 495.708144][ T5936] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 495.723098][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.732207][ T5936] usb 4-1: Product: syz [ 495.736528][ T5936] usb 4-1: Manufacturer: syz [ 495.741714][ T5936] usb 4-1: SerialNumber: syz [ 495.749727][ T5936] usb 4-1: config 0 descriptor?? [ 495.763360][ T5936] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 495.801215][ T5962] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 495.837448][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 495.851863][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 495.859480][ T10] usb 5-1: can't read configurations, error -71 [ 495.931102][ T5962] usb 1-1: device descriptor read/64, error -71 [ 495.967726][ T5936] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 495.986216][ T5936] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 496.012944][ T8139] loop6: detected capacity change from 0 to 7 [ 496.020595][ T8139] Dev loop6: unable to read RDB block 7 [ 496.027063][ T8139] loop6: unable to read partition table [ 496.033610][ T8139] loop6: partition table beyond EOD, truncated [ 496.053209][ T8139] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 496.181182][ T5962] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 496.227593][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.539'. [ 496.341180][ T5962] usb 1-1: device descriptor read/64, error -71 [ 496.451484][ T5962] usb usb1-port1: attempt power cycle [ 496.791055][ T5962] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 496.827131][ T5962] usb 1-1: device descriptor read/8, error -71 [ 496.979540][ T8159] ptrace attach of "./syz-executor exec"[5878] was attempted by "./syz-executor exec"[8159] [ 497.010568][ T8159] netlink: 'syz.1.544': attribute type 6 has an invalid length. [ 497.141347][ T5962] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 497.161755][ T5962] usb 1-1: device descriptor read/8, error -71 [ 497.421487][ T5962] usb usb1-port1: unable to enumerate USB device [ 497.723876][ T5958] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 497.924540][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.945480][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.962738][ T5958] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 497.983419][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.002959][ T5958] usb 5-1: config 0 descriptor?? [ 498.043657][ T8167] netlink: 476 bytes leftover after parsing attributes in process `syz.5.549'. [ 498.360270][ T10] usb 4-1: USB disconnect, device number 37 [ 498.531446][ T8175] loop6: detected capacity change from 0 to 7 [ 498.554844][ T8175] Dev loop6: unable to read RDB block 7 [ 498.566936][ T8175] loop6: unable to read partition table [ 498.586344][ T8175] loop6: partition table beyond EOD, truncated [ 498.603425][ T8175] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 498.643959][ T5958] usbhid 5-1:0.0: can't add hid device: -71 [ 498.672479][ T5958] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 498.708543][ T5958] usb 5-1: USB disconnect, device number 41 [ 498.751139][ T5953] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 498.841792][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 498.841808][ T30] audit: type=1326 audit(1762020237.651:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 498.910411][ T30] audit: type=1326 audit(1762020237.651:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 498.971046][ T30] audit: type=1326 audit(1762020237.651:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 498.995113][ T30] audit: type=1326 audit(1762020237.651:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 499.020763][ T30] audit: type=1326 audit(1762020237.651:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 499.051321][ T30] audit: type=1326 audit(1762020237.651:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 499.063444][ T5953] usb 6-1: not running at top speed; connect to a high speed hub [ 499.074772][ T30] audit: type=1326 audit(1762020237.661:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 499.207542][ T5953] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 499.266284][ T5953] usb 6-1: config 95 has no interface number 0 [ 499.275458][ T30] audit: type=1326 audit(1762020237.661:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 499.294813][ T5953] usb 6-1: config 95 interface 1 has no altsetting 0 [ 499.326970][ T5953] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 499.338827][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.368980][ T5953] usb 6-1: Product: syz [ 499.374222][ T30] audit: type=1326 audit(1762020237.661:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 499.381182][ T5953] usb 6-1: Manufacturer: syz [ 499.477333][ T5953] usb 6-1: SerialNumber: syz [ 499.532268][ T30] audit: type=1326 audit(1762020237.661:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.1.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd833d8efc9 code=0x7ffc0000 [ 499.739512][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.752945][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.762601][ T8203] netlink: 476 bytes leftover after parsing attributes in process `syz.3.560'. [ 501.792787][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.801163][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.189819][ T5953] usb 6-1: USB disconnect, device number 7 [ 502.303276][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.311461][ T5962] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 502.312358][ T8229] loop6: detected capacity change from 0 to 7 [ 502.360043][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.403720][ T8229] Dev loop6: unable to read RDB block 7 [ 502.422709][ T8229] loop6: unable to read partition table [ 502.429169][ T8229] loop6: partition table beyond EOD, truncated [ 502.482792][ T5962] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 502.495136][ T5962] usb 4-1: config 0 has no interface number 0 [ 502.534197][ T8229] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 502.575784][ T5962] usb 4-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 502.664792][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.731035][ T5962] usb 4-1: Product: syz [ 502.735503][ T5962] usb 4-1: Manufacturer: syz [ 502.762525][ T5962] usb 4-1: SerialNumber: syz [ 502.784160][ T5962] usb 4-1: config 0 descriptor?? [ 502.852934][ T5962] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 502.900764][ T5962] dvb-usb: bulk message failed: -22 (4/0) [ 502.957470][ T5962] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 502.987463][ T8239] tc_dump_action: action bad kind [ 502.993462][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 503.082156][ T5962] dvb-usb: bulk message failed: -22 (5/0) [ 503.109880][ T5848] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 503.158483][ T5962] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 503.362207][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 503.394971][ T5848] usb 5-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 503.400413][ T5962] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 503.722805][ T5962] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 503.903361][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.904204][ T5962] usb 4-1: USB disconnect, device number 38 [ 504.012263][ T5848] usb 5-1: Product: syz [ 504.026637][ T5848] usb 5-1: Manufacturer: syz [ 504.041552][ T5848] usb 5-1: SerialNumber: syz [ 504.259844][ T5848] usb 5-1: config 0 descriptor?? [ 504.292277][ T5848] gspca_main: etoms-2.14.0 probing 102c:6251 [ 504.472077][ T8253] netlink: 476 bytes leftover after parsing attributes in process `syz.0.571'. [ 505.421093][ T5950] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 505.555580][ T5953] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 505.556487][ T5962] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 505.591093][ T5950] usb 6-1: Using ep0 maxpacket: 8 [ 505.598284][ T5950] usb 6-1: config 0 interface 0 has no altsetting 0 [ 505.605945][ T5950] usb 6-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 505.751694][ T5922] usb 5-1: USB disconnect, device number 42 [ 505.809832][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.823240][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 505.843924][ T5962] usb 4-1: config 5 has an invalid interface number: 206 but max is 0 [ 505.853437][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 505.859907][ T5953] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.870376][ T5962] usb 4-1: config 5 has no interface number 0 [ 505.879094][ T5950] usb 6-1: config 0 descriptor?? [ 505.891082][ T5962] usb 4-1: config 5 interface 206 has no altsetting 0 [ 505.908318][ T5953] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.922417][ T5962] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 505.932445][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.963323][ T5953] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.966933][ T5962] usb 4-1: Product: syz [ 505.980186][ T5962] usb 4-1: Manufacturer: syz [ 505.988234][ T5962] usb 4-1: SerialNumber: syz [ 505.998442][ T5953] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 506.016846][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.071748][ T5953] usb 1-1: config 0 descriptor?? [ 506.141624][ T8277] loop6: detected capacity change from 0 to 7 [ 506.149137][ T8277] Dev loop6: unable to read RDB block 7 [ 506.155833][ T8277] loop6: unable to read partition table [ 506.162357][ T8277] loop6: partition table beyond EOD, truncated [ 506.169758][ T8277] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 506.370607][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 506.370624][ T30] audit: type=1326 audit(1762020245.221:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 506.451475][ T30] audit: type=1326 audit(1762020245.221:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 506.507656][ T5953] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 506.515418][ T30] audit: type=1326 audit(1762020245.221:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 506.537896][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.544447][ T5950] wacom 0003:056A:00BA.000C: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 506.579642][ T5950] wacom 0003:056A:00BA.000C: hidraw0: USB HID v0.02 Device [HID 056a:00ba] on usb-dummy_hcd.5-1/input0 [ 506.601797][ T5953] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 506.614884][ T5950] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00BA.000C/input/input16 [ 506.627773][ T5953] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 506.631127][ T30] audit: type=1326 audit(1762020245.221:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 506.645668][ T5953] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 506.699423][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.713431][ T30] audit: type=1326 audit(1762020245.221:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 506.737299][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.785877][ T5962] usb_ehset_test 4-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 506.787933][ T5953] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 506.840118][ T5962] usb 4-1: USB disconnect, device number 39 [ 506.859434][ T30] audit: type=1326 audit(1762020245.221:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 506.911660][ T30] audit: type=1326 audit(1762020245.221:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 506.940842][ T5953] nzxt-smart2 0003:1E71:2009.000B: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 506.959706][ T30] audit: type=1326 audit(1762020245.221:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 507.070355][ T30] audit: type=1326 audit(1762020245.221:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 507.127554][ T8291] netlink: 476 bytes leftover after parsing attributes in process `syz.3.582'. [ 507.199079][ T30] audit: type=1326 audit(1762020245.221:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.5.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 507.239928][ T5953] usb 1-1: USB disconnect, device number 50 [ 507.352420][ T8290] fido_id[8290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 507.401219][ T8298] netlink: 'syz.0.583': attribute type 33 has an invalid length. [ 507.438921][ T8298] netlink: 152 bytes leftover after parsing attributes in process `syz.0.583'. [ 507.488554][ T8298] `: renamed from team0 [ 507.934798][ T5922] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 507.968406][ T8312] netlink: 'syz.4.581': attribute type 5 has an invalid length. [ 508.131225][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 508.140299][ T5922] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 508.161983][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.217417][ T5950] usb 6-1: USB disconnect, device number 8 [ 508.247783][ T5922] usb 1-1: config 0 descriptor?? [ 508.322892][ T8314] binder: 8313:8314 unknown command 0 [ 508.349501][ T8314] binder: 8313:8314 ioctl c0306201 200000000080 returned -22 [ 508.424656][ T8314] binder: 8313:8314 ioctl c0306201 2000000003c0 returned -14 [ 508.467832][ T5922] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 508.508471][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.571340][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 508.580792][ T5922] usb 1-1: media controller created [ 508.688556][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.910916][ T8317] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 509.008031][ T5922] DVB: Unable to find symbol dib7000p_attach() [ 509.080769][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 509.381066][ T5922] rc_core: IR keymap rc-dib0700-rc5 not found [ 509.389914][ T5922] Registered IR keymap rc-empty [ 509.404406][ T5922] dvb-usb: could not initialize remote control. [ 509.430874][ T8328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.591'. [ 509.488294][ T5922] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 509.536823][ T5922] usb 1-1: USB disconnect, device number 51 [ 509.740743][ T8332] netlink: 76 bytes leftover after parsing attributes in process `syz.5.592'. [ 509.906471][ T5922] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 509.916838][ T8337] loop9: detected capacity change from 0 to 7 [ 509.945941][ T8338] netlink: 476 bytes leftover after parsing attributes in process `syz.4.594'. [ 509.973744][ T8337] Dev loop9: unable to read RDB block 7 [ 509.979464][ T8337] loop9: AHDI p4 [ 510.018609][ T8337] loop9: partition table partially beyond EOD, truncated [ 510.083451][ T8341] loop6: detected capacity change from 0 to 7 [ 510.161276][ T8341] Dev loop6: unable to read RDB block 7 [ 510.195216][ T8341] loop6: unable to read partition table [ 510.272193][ T8341] loop6: partition table beyond EOD, truncated [ 510.291151][ T8341] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 510.801582][ T5950] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 510.804081][ T8356] tipc: Enabled bearer , priority 0 [ 510.896374][ T8356] syzkaller0: entered promiscuous mode [ 510.926277][ T8356] syzkaller0: entered allmulticast mode [ 510.971053][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 510.983470][ T8356] sch_fq: defrate 6 ignored. [ 510.996751][ T5950] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 511.001509][ T8356] tipc: Resetting bearer [ 511.036041][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.066722][ T5950] usb 5-1: Product: syz [ 511.080124][ T5950] usb 5-1: Manufacturer: syz [ 511.105159][ T5950] usb 5-1: SerialNumber: syz [ 511.119618][ T5950] usb 5-1: config 0 descriptor?? [ 511.134063][ T5950] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 511.337398][ T5950] usb 5-1: USB disconnect, device number 43 [ 511.377577][ T8349] tipc: Resetting bearer [ 511.504300][ T8349] tipc: Disabling bearer [ 512.451104][ T5922] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 512.574560][ T8385] netlink: 408 bytes leftover after parsing attributes in process `syz.0.607'. [ 512.604362][ T5922] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 512.626809][ T5922] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 512.675738][ T5922] usb 5-1: config 0 has no interface number 0 [ 512.700813][ T5922] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 8 [ 512.762256][ T5922] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 512.805020][ T5922] usb 5-1: config 0 interface 52 has no altsetting 0 [ 512.827089][ T8388] loop9: detected capacity change from 0 to 7 [ 512.898019][ T8388] Dev loop9: unable to read RDB block 7 [ 512.911643][ T8388] loop9: AHDI p4 [ 512.924199][ T8388] loop9: partition table partially beyond EOD, truncated [ 512.952195][ T8390] loop6: detected capacity change from 0 to 7 [ 513.019498][ T8390] Dev loop6: unable to read RDB block 7 [ 513.066438][ T8390] loop6: unable to read partition table [ 513.093964][ T8390] loop6: partition table beyond EOD, truncated [ 513.110661][ T8390] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 513.524679][ T8399] xt_hashlimit: size too large, truncated to 1048576 [ 513.558842][ T5950] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 513.716381][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 513.734848][ T5950] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 513.746728][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.779149][ T5950] usb 1-1: Product: syz [ 513.783979][ T5950] usb 1-1: Manufacturer: syz [ 513.798400][ T5950] usb 1-1: SerialNumber: syz [ 513.830245][ T5950] usb 1-1: config 0 descriptor?? [ 514.241853][ T5848] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 514.388978][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 514.389029][ T30] audit: type=1326 audit(1762020253.231:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 514.393381][ T5848] usb 2-1: device descriptor read/64, error -71 [ 514.401043][ T30] audit: type=1326 audit(1762020253.231:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 514.464754][ T30] audit: type=1326 audit(1762020253.241:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 514.522993][ T5950] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 1001494076 serial A8848A13.AE863ED1 (2 channels) [ 514.545206][ T5950] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 514.547158][ T30] audit: type=1326 audit(1762020253.241:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 514.668246][ T5848] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 514.671436][ T5950] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 514.765568][ T30] audit: type=1326 audit(1762020253.241:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 514.891069][ T5848] usb 2-1: device descriptor read/64, error -71 [ 514.899370][ T30] audit: type=1326 audit(1762020253.241:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 514.973195][ T5950] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 514.999337][ T5922] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 515.011530][ T5848] usb usb2-port1: attempt power cycle [ 515.035063][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 515.082864][ T5922] usb 5-1: config 0 descriptor?? [ 515.088172][ T30] audit: type=1326 audit(1762020253.241:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 515.103940][ T5922] usb 5-1: can't set config #0, error -71 [ 515.358083][ T30] audit: type=1326 audit(1762020253.241:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 515.395039][ T8423] netlink: 408 bytes leftover after parsing attributes in process `syz.4.618'. [ 515.551736][ T30] audit: type=1326 audit(1762020253.241:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 515.577065][ T30] audit: type=1326 audit(1762020253.241:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 515.631134][ T5848] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 515.651585][ T5848] usb 2-1: device descriptor read/8, error -71 [ 515.763154][ T5922] usb 5-1: USB disconnect, device number 44 [ 515.891315][ T5848] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 515.912383][ T5848] usb 2-1: device descriptor read/8, error -71 [ 516.031700][ T5848] usb usb2-port1: unable to enumerate USB device [ 516.246487][ T8434] loop6: detected capacity change from 0 to 7 [ 516.256164][ T8434] Dev loop6: unable to read RDB block 7 [ 516.263164][ T8434] loop6: unable to read partition table [ 516.269347][ T8434] loop6: partition table beyond EOD, truncated [ 516.281131][ T8434] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 516.326427][ T5950] usb 1-1: USB disconnect, device number 52 [ 516.341153][ T5848] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 516.361109][ T5936] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 516.521098][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 516.535275][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 516.557101][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 516.571040][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 516.591666][ T5936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 516.599575][ T5848] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 516.632540][ T5936] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 516.632578][ T5936] usb 5-1: can't read configurations, error -71 [ 516.634963][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.634987][ T5848] usb 6-1: Product: syz [ 516.635000][ T5848] usb 6-1: Manufacturer: syz [ 516.635012][ T5848] usb 6-1: SerialNumber: syz [ 516.639753][ T5848] usb 6-1: config 0 descriptor?? [ 516.813017][ T5848] rc_core: IR keymap rc-streamzap not found [ 516.838567][ T5848] Registered IR keymap rc-empty [ 516.859001][ T5848] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 516.919872][ T5848] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 517.034477][ T5922] usb 6-1: USB disconnect, device number 9 [ 517.093039][ T5958] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 517.259305][ T8458] netlink: 408 bytes leftover after parsing attributes in process `syz.4.629'. [ 517.321985][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.358240][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 517.412184][ T5958] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 517.423154][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.461640][ T5958] usb 4-1: Product: syz [ 517.489762][ T5958] usb 4-1: Manufacturer: syz [ 517.506837][ T5958] usb 4-1: SerialNumber: syz [ 517.526988][ T5958] usb 4-1: config 0 descriptor?? [ 517.553727][ T5958] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 517.594402][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.665803][ T5958] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 517.719719][ T5958] usb 4-1: media controller created [ 517.881094][ T5936] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 518.003698][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.132348][ T5936] usb 5-1: too many configurations: 164, using maximum allowed: 8 [ 518.193266][ T5936] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 518.202858][ T5958] DVB: Unable to find symbol tda10046_attach() [ 518.209215][ T5958] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 518.218082][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.244132][ T5936] usb 5-1: config 0 descriptor?? [ 518.249336][ T5958] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 518.262812][ T5936] usb 5-1: bad CDC descriptors [ 518.281182][ T5958] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 518.319542][ T5958] usb 4-1: USB disconnect, device number 40 [ 518.365606][ T8476] cifs: Unknown parameter 'fd' [ 518.549750][ T8484] loop6: detected capacity change from 0 to 7 [ 518.568321][ T8484] Dev loop6: unable to read RDB block 7 [ 518.578340][ T8484] loop6: unable to read partition table [ 518.591346][ T8484] loop6: partition table beyond EOD, truncated [ 518.607824][ T8484] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 518.631155][ T5936] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 518.654690][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 518.741737][ T5958] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 519.001133][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.020278][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.031137][ T5936] usb 1-1: device descriptor read/64, error -71 [ 519.052300][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 519.070506][ T8489] syzkaller0: entered promiscuous mode [ 519.077231][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.088869][ T8489] syzkaller0: entered allmulticast mode [ 519.099826][ T5958] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 519.119720][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.141184][ T5958] usb 4-1: Product: syz [ 519.153978][ T5958] usb 4-1: Manufacturer: syz [ 519.158689][ T5958] usb 4-1: SerialNumber: syz [ 519.181973][ T5958] usb 4-1: config 0 descriptor?? [ 519.216900][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.437690][ T5936] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 519.677997][ T5958] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 519.851210][ T5936] usb 1-1: device descriptor read/64, error -71 [ 519.919713][ T5958] gspca_sn9c2028: read1 error -32 [ 519.961650][ T5936] usb usb1-port1: attempt power cycle [ 520.107277][ T8497] netlink: 408 bytes leftover after parsing attributes in process `syz.5.640'. [ 520.342882][ T5936] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 520.387324][ T5961] usb 4-1: USB disconnect, device number 41 [ 520.899494][ T5936] usb 1-1: device descriptor read/8, error -71 [ 520.996037][ T5961] usb 5-1: USB disconnect, device number 47 [ 521.163788][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 521.164451][ T30] audit: type=1804 audit(1762020260.021:350): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.643" name="/newroot/131/file1" dev="tmpfs" ino=701 res=1 errno=0 [ 521.211196][ T5936] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 521.481128][ T5936] usb 1-1: device descriptor read/8, error -71 [ 521.599183][ T5936] usb usb1-port1: unable to enumerate USB device [ 522.227263][ T8526] libceph: resolve '. [ 522.227263][ T8526] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 522.227263][ T8526] ' (ret=-3): failed [ 522.639040][ T8537] netlink: 312 bytes leftover after parsing attributes in process `syz.4.650'. [ 522.963008][ T8540] netlink: 408 bytes leftover after parsing attributes in process `syz.3.651'. [ 523.295439][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.5.652'. [ 524.141132][ T5983] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 524.304260][ T5983] usb 4-1: Using ep0 maxpacket: 8 [ 524.317940][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.359671][ T8551] netlink: 112 bytes leftover after parsing attributes in process `syz.0.654'. [ 524.376742][ T5983] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 524.468900][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.508983][ T5983] usb 4-1: config 0 descriptor?? [ 524.595025][ T8556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.642216][ T5922] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 524.657210][ T8556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.811572][ T5950] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 524.827798][ T5922] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 524.857247][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.948307][ T5922] usb 2-1: config 0 descriptor?? [ 524.966366][ T5983] hid-corsair-void 0003:1B1C:1B25.000D: item fetching failed at offset 0/1 [ 524.997886][ T5983] hid-corsair-void 0003:1B1C:1B25.000D: parse failed (reason: -22) [ 525.053878][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 525.073609][ T5950] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 525.083629][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.097254][ T5950] usb 1-1: Product: syz [ 525.106177][ T5950] usb 1-1: Manufacturer: syz [ 525.117509][ T5950] usb 1-1: SerialNumber: syz [ 525.130547][ T5950] usb 1-1: config 0 descriptor?? [ 525.160629][ T5983] hid-corsair-void 0003:1B1C:1B25.000D: probe with driver hid-corsair-void failed with error -22 [ 525.207385][ T5983] usb 4-1: USB disconnect, device number 42 [ 525.372893][ T5922] usb 2-1: Cannot set MAC address [ 525.382344][ T5922] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 525.410293][ T5922] usb 2-1: USB disconnect, device number 37 [ 525.512770][ T5950] usb 1-1: USB disconnect, device number 57 [ 526.273325][ T8573] netlink: 68 bytes leftover after parsing attributes in process `syz.0.659'. [ 527.001554][ T5922] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 527.196446][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 527.214522][ T5922] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 527.231206][ T5922] usb 1-1: config 0 has no interface number 0 [ 527.245155][ T5922] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 527.256390][ T8582] netlink: 408 bytes leftover after parsing attributes in process `syz.1.663'. [ 527.272302][ T5922] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 32 [ 527.302974][ T5922] usb 1-1: config 0 interface 167 has no altsetting 0 [ 527.366909][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 527.402068][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.430586][ T5922] usb 1-1: Product: syz [ 527.438192][ T5922] usb 1-1: Manufacturer: syz [ 527.451029][ T5922] usb 1-1: SerialNumber: syz [ 527.481103][ T5983] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 527.493887][ T5922] usb 1-1: config 0 descriptor?? [ 527.505175][ T8572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 527.521308][ T8572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 527.731142][ T5961] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 527.745599][ T5983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.760500][ T5983] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 527.773624][ T5983] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 527.795586][ T5983] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.805343][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.823445][ T5983] usb 5-1: Product: syz [ 527.827853][ T5983] usb 5-1: Manufacturer: syz [ 527.832926][ T5983] usb 5-1: SerialNumber: syz [ 527.848286][ T5983] cdc_mbim 5-1:1.0: skipping garbage [ 527.901673][ T5961] usb 4-1: Using ep0 maxpacket: 8 [ 527.926366][ T5961] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.961084][ T5950] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 527.998643][ T5961] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 528.048007][ T8580] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.058000][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 528.115138][ T5961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 528.151121][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 528.212997][ T5961] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 528.222224][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.260365][ T5961] hub 4-1:1.0: bad descriptor, ignoring hub [ 528.293741][ T5961] hub 4-1:1.0: probe with driver hub failed with error -5 [ 528.329488][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.343209][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.394814][ T5961] cdc_wdm 4-1:1.0: skipping garbage [ 528.407767][ T5961] cdc_wdm 4-1:1.0: skipping garbage [ 528.427063][ T5961] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 528.440850][ T5961] cdc_wdm 4-1:1.0: Unknown control protocol [ 528.461015][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.487627][ T5983] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 528.494512][ T5983] cdc_mbim 5-1:1.0: bind() failure [ 528.521519][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.538385][ T5983] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 528.604598][ T5983] cdc_ncm 5-1:1.1: bind() failure [ 528.605437][ T5961] usb 4-1: USB disconnect, device number 43 [ 528.672719][ T5983] usb 5-1: USB disconnect, device number 48 [ 528.971034][ T5958] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 528.972441][ T5922] usbtest 1-1:0.167: couldn't get endpoints, -22 [ 529.091228][ T5922] usbtest 1-1:0.167: probe with driver usbtest failed with error -22 [ 529.101144][ T5958] usb 6-1: device descriptor read/64, error -71 [ 529.215790][ T5922] usb 1-1: USB disconnect, device number 58 [ 529.334295][ T8605] loop9: detected capacity change from 0 to 7 [ 529.351188][ T5958] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 529.363713][ T8605] Dev loop9: unable to read RDB block 7 [ 529.377403][ T8605] loop9: AHDI p3 p4 [ 529.401385][ T8605] loop9: partition table partially beyond EOD, truncated [ 529.424474][ T8605] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 529.501387][ T5958] usb 6-1: device descriptor read/64, error -71 [ 529.611462][ T5958] usb usb6-port1: attempt power cycle [ 529.782816][ T5869] udevd[5869]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 529.871064][ T5983] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 529.951136][ T5958] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 529.965377][ T8618] netlink: 408 bytes leftover after parsing attributes in process `syz.4.675'. [ 530.002014][ T5958] usb 6-1: device descriptor read/8, error -71 [ 530.021936][ T5983] usb 4-1: Using ep0 maxpacket: 32 [ 530.034784][ T5983] usb 4-1: config 0 has an invalid interface number: 38 but max is 0 [ 530.049018][ T5983] usb 4-1: config 0 has no interface number 0 [ 530.069320][ T5983] usb 4-1: config 0 interface 38 has no altsetting 0 [ 530.089264][ T5983] usb 4-1: New USB device found, idVendor=093a, idProduct=0000, bcdDevice= 0.00 [ 530.099202][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.129902][ T5983] usb 4-1: Product: syz [ 530.140154][ T5983] usb 4-1: Manufacturer: syz [ 530.154807][ T5983] usb 4-1: SerialNumber: syz [ 530.192284][ T5983] usb 4-1: config 0 descriptor?? [ 530.241360][ T5958] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 530.271791][ T5958] usb 6-1: device descriptor read/8, error -71 [ 530.392340][ T5958] usb usb6-port1: unable to enumerate USB device [ 530.695401][ T5922] usb 4-1: USB disconnect, device number 44 [ 530.810876][ T5950] usb 2-1: unable to get BOS descriptor or descriptor too short [ 530.841115][ T5950] usb 2-1: no configurations [ 530.858905][ T5950] usb 2-1: can't read configurations, error -22 [ 531.261136][ T5950] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 531.451203][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 531.458114][ T5950] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 531.470998][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.493988][ T5950] usb 2-1: config 0 descriptor?? [ 531.505256][ T8640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.681'. [ 531.567081][ T5950] gspca_main: sq930x-2.14.0 probing 041e:403c [ 531.742050][ T8643] netlink: 40 bytes leftover after parsing attributes in process `syz.5.682'. [ 531.798600][ T8645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.801119][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.682'. [ 531.968367][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.016616][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.351067][ T5950] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 532.370776][ T5950] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 532.601195][ T5958] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 532.777468][ T5958] usb 5-1: config 252 has an invalid interface number: 191 but max is 0 [ 532.828228][ T5958] usb 5-1: config 252 has no interface number 0 [ 532.879989][ T5958] usb 5-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 532.913005][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.972283][ T5958] usb 5-1: Product: syz [ 532.999063][ T5958] usb 5-1: Manufacturer: syz [ 533.105080][ T5958] usb 5-1: SerialNumber: syz [ 533.132842][ T5958] usb-storage 5-1:252.191: USB Mass Storage device detected [ 533.152063][ T5958] usb-storage 5-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 533.303330][ T5950] usb 2-1: USB disconnect, device number 39 [ 534.384838][ T8668] netlink: 408 bytes leftover after parsing attributes in process `syz.1.686'. [ 534.446293][ T5983] usb 5-1: USB disconnect, device number 49 [ 534.916590][ T8673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.386910][ T8685] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 535.426144][ T8685] net_ratelimit: 11 callbacks suppressed [ 535.426162][ T8685] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 535.465350][ T5958] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 535.487508][ T7391] udevd[7391]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 535.586283][ T8687] bond_slave_0: entered promiscuous mode [ 535.592453][ T8687] bond_slave_1: entered promiscuous mode [ 535.612799][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 535.622497][ T8687] vlan2: entered promiscuous mode [ 535.627733][ T8687] bond0: entered promiscuous mode [ 535.671085][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 535.701596][ T8687] bond2: entered promiscuous mode [ 535.713049][ T5958] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 535.723525][ T8691] netlink: 'syz.0.691': attribute type 4 has an invalid length. [ 535.754419][ T8691] netlink: 152 bytes leftover after parsing attributes in process `syz.0.691'. [ 535.771045][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.793298][ T5958] usb 4-1: Product: syz [ 535.800902][ T5958] usb 4-1: Manufacturer: syz [ 535.837422][ T5958] usb 4-1: SerialNumber: syz [ 535.856503][ T8691] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 535.872918][ T5958] usb 4-1: config 0 descriptor?? [ 535.884032][ T5958] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 535.896929][ T5958] usb 4-1: Detected FT232H [ 535.971063][ T5922] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 536.053012][ T8701] netlink: 408 bytes leftover after parsing attributes in process `syz.5.698'. [ 536.084384][ T5958] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 536.115749][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.126455][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.154438][ T5922] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 536.171020][ T5922] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 536.209765][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.242112][ T5848] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 536.251650][ T5922] usb 5-1: config 0 descriptor?? [ 536.447593][ T5958] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 536.481862][ T5848] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 536.498127][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.525492][ T5848] usb 2-1: config 0 has no interfaces? [ 536.539668][ T5848] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 536.564011][ T5922] usb 4-1: USB disconnect, device number 45 [ 536.583741][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.625299][ T5848] usb 2-1: config 0 descriptor?? [ 536.634116][ T5922] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 536.665260][ T5922] ftdi_sio 4-1:0.0: device disconnected [ 536.761544][ T5936] usb 5-1: USB disconnect, device number 50 [ 537.971103][ T5961] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 538.011042][ T5848] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 538.152937][ T5961] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 538.171056][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 538.176469][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.182742][ T5848] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 538.203888][ T5961] usb 6-1: config 0 descriptor?? [ 538.204644][ T5848] usb 4-1: config 0 has no interface number 0 [ 538.231121][ T5961] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 538.241952][ T5848] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 538.290121][ T5848] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 538.324250][ T5848] usb 4-1: config 0 interface 126 has no altsetting 0 [ 538.339805][ T5848] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 538.385477][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.415223][ T5848] usb 4-1: Product: syz [ 538.423251][ T5848] usb 4-1: Manufacturer: syz [ 538.427910][ T5848] usb 4-1: SerialNumber: syz [ 538.443798][ T5848] usb 4-1: config 0 descriptor?? [ 538.453166][ T8732] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 538.461361][ T8732] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 538.559368][ T8738] netlink: 408 bytes leftover after parsing attributes in process `syz.4.709'. [ 538.651266][ T5958] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 538.813177][ T5958] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 538.835856][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.866768][ T5958] usb 1-1: config 0 descriptor?? [ 538.885131][ T5958] cp210x 1-1:0.0: cp210x converter detected [ 538.956347][ T5936] usb 2-1: USB disconnect, device number 40 [ 539.316760][ T5958] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 539.544397][ T5958] usb 1-1: cp210x converter now attached to ttyUSB0 [ 539.702441][ T8752] syzkaller0: entered promiscuous mode [ 539.726908][ T8752] syzkaller0: entered allmulticast mode [ 539.739218][ T5958] usb 1-1: USB disconnect, device number 59 [ 539.776585][ T5958] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 539.848722][ T8755] sch_fq: defrate 6 ignored. [ 539.860606][ T5961] gspca_stv06xx: I2C: Read error writing address: -71 [ 539.873072][ T5958] cp210x 1-1:0.0: device disconnected [ 539.906358][ T5961] usb 6-1: USB disconnect, device number 14 [ 540.635483][ T8768] syzkaller0: entered promiscuous mode [ 540.671934][ T8768] syzkaller0: entered allmulticast mode [ 540.723735][ T8768] sch_fq: defrate 6 ignored. [ 540.806741][ T8772] netlink: 408 bytes leftover after parsing attributes in process `syz.0.720'. [ 540.853388][ T5848] ir_usb 4-1:0.126: IR Dongle converter detected [ 540.901229][ T5848] usb 4-1: IRDA class descriptor not found, device not bound [ 540.947939][ T5848] usb 4-1: USB disconnect, device number 46 [ 541.036969][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 541.539729][ T8786] fuse: Bad value for 'group_id' [ 541.547612][ T8786] fuse: Bad value for 'group_id' [ 541.570078][ T8786] vlan2: entered promiscuous mode [ 541.577721][ T8786] vlan2: entered allmulticast mode [ 541.584384][ T8786] hsr_slave_1: entered allmulticast mode [ 541.601325][ T5958] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 541.644972][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.726'. [ 541.656918][ T8791] netlink: 104 bytes leftover after parsing attributes in process `syz.1.727'. [ 541.713022][ T8793] binder: 8785:8793 ioctl c018620c 200000000380 returned -22 [ 541.940210][ T5958] usb 1-1: device descriptor read/64, error -71 [ 542.094030][ T8798] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 542.201341][ T5958] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 542.356821][ T5958] usb 1-1: device descriptor read/64, error -71 [ 542.366878][ T8798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.381240][ T8804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.729'. [ 542.570222][ T5958] usb usb1-port1: attempt power cycle [ 542.583625][ T5922] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 542.633870][ T8799] bond2: (slave geneve4): making interface the new active one [ 542.656191][ T8799] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 542.682493][ T6040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.706020][ T6040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.751110][ T5922] usb 4-1: device descriptor read/64, error -71 [ 542.758801][ T6040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.793133][ T6040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.920696][ T8812] netlink: 408 bytes leftover after parsing attributes in process `syz.1.732'. [ 542.940921][ T5958] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 542.982328][ T5958] usb 1-1: device descriptor read/8, error -71 [ 543.070569][ T5922] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 543.127981][ T8819] netlink: 'syz.5.733': attribute type 10 has an invalid length. [ 543.189495][ T8819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.211933][ T8819] team0: Port device bond0 added [ 543.431133][ T5922] usb 4-1: device descriptor read/64, error -71 [ 543.437715][ T5958] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 543.541410][ T5922] usb usb4-port1: attempt power cycle [ 543.688447][ T5958] usb 1-1: device descriptor read/8, error -71 [ 543.971083][ T5922] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 543.991733][ T5922] usb 4-1: device descriptor read/8, error -71 [ 544.021511][ T5958] usb usb1-port1: unable to enumerate USB device [ 544.241020][ T5922] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 544.262813][ T5922] usb 4-1: device descriptor read/8, error -71 [ 544.371815][ T5922] usb usb4-port1: unable to enumerate USB device [ 545.801058][ T5958] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 545.832061][ T8847] FAULT_INJECTION: forcing a failure. [ 545.832061][ T8847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.857658][ T8847] CPU: 0 UID: 0 PID: 8847 Comm: syz.1.741 Not tainted syzkaller #0 PREEMPT(full) [ 545.857684][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 545.857695][ T8847] Call Trace: [ 545.857702][ T8847] [ 545.857710][ T8847] dump_stack_lvl+0x189/0x250 [ 545.857747][ T8847] ? __pfx____ratelimit+0x10/0x10 [ 545.857769][ T8847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.857791][ T8847] ? __pfx__printk+0x10/0x10 [ 545.857808][ T8847] ? __might_fault+0xb0/0x130 [ 545.857842][ T8847] should_fail_ex+0x414/0x560 [ 545.857870][ T8847] _copy_from_user+0x2d/0xb0 [ 545.857892][ T8847] __se_sys_openat2+0x142/0x2c0 [ 545.857920][ T8847] ? __pfx___se_sys_openat2+0x10/0x10 [ 545.857946][ T8847] ? do_syscall_64+0xbe/0xfa0 [ 545.857970][ T8847] do_syscall_64+0xfa/0xfa0 [ 545.857990][ T8847] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.858012][ T8847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.858028][ T8847] ? clear_bhb_loop+0x60/0xb0 [ 545.858049][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.858065][ T8847] RIP: 0033:0x7fd833d8efc9 [ 545.858081][ T8847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.858095][ T8847] RSP: 002b:00007fd834bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 545.858113][ T8847] RAX: ffffffffffffffda RBX: 00007fd833fe5fa0 RCX: 00007fd833d8efc9 [ 545.858126][ T8847] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000003 [ 545.858138][ T8847] RBP: 00007fd834bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 545.858148][ T8847] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 545.858159][ T8847] R13: 00007fd833fe6038 R14: 00007fd833fe5fa0 R15: 00007fd83410fa28 [ 545.858188][ T8847] [ 545.983279][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 546.138531][ T8851] netlink: 408 bytes leftover after parsing attributes in process `syz.5.744'. [ 546.376066][ T5958] usb 1-1: can't read configurations, error -61 [ 546.541164][ T5958] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 546.723549][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 546.733903][ T5958] usb 1-1: can't read configurations, error -61 [ 546.764791][ T5958] usb usb1-port1: attempt power cycle [ 546.779101][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.5.747'. [ 547.151419][ T5958] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 547.174703][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 547.217695][ T5958] usb 1-1: can't read configurations, error -61 [ 547.251710][ T8873] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3283193434 (52531094944 ns) > initial count (33131078544 ns). Using initial count to start timer. [ 547.351294][ T5958] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 547.393920][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 547.413497][ T5958] usb 1-1: can't read configurations, error -61 [ 547.440840][ T5958] usb usb1-port1: unable to enumerate USB device [ 547.689213][ T8887] FAULT_INJECTION: forcing a failure. [ 547.689213][ T8887] name failslab, interval 1, probability 0, space 0, times 1 [ 547.741301][ T8887] CPU: 1 UID: 0 PID: 8887 Comm: syz.5.753 Not tainted syzkaller #0 PREEMPT(full) [ 547.741326][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 547.741336][ T8887] Call Trace: [ 547.741343][ T8887] [ 547.741352][ T8887] dump_stack_lvl+0x189/0x250 [ 547.741386][ T8887] ? __pfx____ratelimit+0x10/0x10 [ 547.741407][ T8887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.741428][ T8887] ? __pfx__printk+0x10/0x10 [ 547.741451][ T8887] ? __pfx___might_resched+0x10/0x10 [ 547.741469][ T8887] ? fs_reclaim_acquire+0x7d/0x100 [ 547.741499][ T8887] should_fail_ex+0x414/0x560 [ 547.741528][ T8887] should_failslab+0xa8/0x100 [ 547.741547][ T8887] kmem_cache_alloc_noprof+0x74/0x6e0 [ 547.741570][ T8887] ? getname_flags+0xb8/0x540 [ 547.741592][ T8887] getname_flags+0xb8/0x540 [ 547.741611][ T8887] do_sys_openat2+0xbc/0x1c0 [ 547.741633][ T8887] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.741664][ T8887] __se_sys_openat2+0x226/0x2c0 [ 547.741687][ T8887] ? __pfx___se_sys_openat2+0x10/0x10 [ 547.741714][ T8887] ? do_syscall_64+0xbe/0xfa0 [ 547.741739][ T8887] do_syscall_64+0xfa/0xfa0 [ 547.741758][ T8887] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.741779][ T8887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.741796][ T8887] ? clear_bhb_loop+0x60/0xb0 [ 547.741817][ T8887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.741832][ T8887] RIP: 0033:0x7fd74db8efc9 [ 547.741847][ T8887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.741861][ T8887] RSP: 002b:00007fd74e9e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 547.741880][ T8887] RAX: ffffffffffffffda RBX: 00007fd74dde5fa0 RCX: 00007fd74db8efc9 [ 547.741893][ T8887] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000003 [ 547.741904][ T8887] RBP: 00007fd74e9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 547.741915][ T8887] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 547.741926][ T8887] R13: 00007fd74dde6038 R14: 00007fd74dde5fa0 R15: 00007fd74df0fa28 [ 547.741955][ T8887] [ 548.205222][ T8896] netlink: 408 bytes leftover after parsing attributes in process `syz.5.756'. [ 548.261074][ T5936] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 548.423593][ T5936] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 548.434979][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.467345][ T5936] usb 4-1: config 0 has no interface number 0 [ 548.475356][ T5936] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 548.485744][ T5936] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.510671][ T5936] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 548.642665][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.687242][ T5936] usb 4-1: Product: syz [ 548.698264][ T5936] usb 4-1: Manufacturer: syz [ 548.778481][ T5983] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 548.851402][ T5936] usb 4-1: SerialNumber: syz [ 548.912050][ T5936] usb 4-1: config 0 descriptor?? [ 549.017125][ T8906] blkio.reset_stats is deprecated [ 549.031122][ T5983] usb 6-1: Using ep0 maxpacket: 16 [ 549.041115][ T5983] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 549.060629][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.079154][ T5983] usb 6-1: Product: syz [ 549.094611][ T5983] usb 6-1: Manufacturer: syz [ 549.109326][ T5983] usb 6-1: SerialNumber: syz [ 549.204031][ T5983] usb 6-1: config 0 descriptor?? [ 549.296052][ T5983] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 549.309533][ T5983] usb 6-1: Detected FT-X [ 549.369771][ T30] audit: type=1326 audit(1762020288.221:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fd698efc9 code=0x0 [ 549.401636][ T5922] usb 4-1: USB disconnect, device number 51 [ 549.503192][ T5983] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 549.524324][ T5983] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 549.550557][ T5983] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 549.583527][ T5983] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 549.707367][ T5983] usb 6-1: USB disconnect, device number 15 [ 549.766014][ T5983] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 549.802110][ T5983] ftdi_sio 6-1:0.0: device disconnected [ 549.902043][ T5922] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 550.122989][ T5922] usb 1-1: config 0 has no interfaces? [ 550.153776][ T5922] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 550.179240][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.219045][ T5922] usb 1-1: Product: syz [ 550.237217][ T5922] usb 1-1: Manufacturer: syz [ 550.252149][ T5922] usb 1-1: SerialNumber: syz [ 550.285826][ T5922] usb 1-1: config 0 descriptor?? [ 550.371679][ T5983] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 550.501165][ T5958] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 550.561139][ T5983] usb 4-1: Using ep0 maxpacket: 16 [ 550.593353][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24953, setting to 1024 [ 550.635305][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.652142][ T5936] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 550.680784][ T5958] usb 6-1: unable to get BOS descriptor set [ 550.724891][ T5958] usb 6-1: not running at top speed; connect to a high speed hub [ 550.776640][ T5983] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 550.792891][ T5958] usb 6-1: config 1 interface 0 has no altsetting 0 [ 550.824600][ T5958] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 550.834197][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.854338][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.875111][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.897529][ T5983] usb 4-1: config 0 descriptor?? [ 550.911167][ T8916] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 550.918077][ T8916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 550.921040][ T5936] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 550.956091][ T8916] vhci_hcd vhci_hcd.0: Device attached [ 550.966302][ T5958] usb 6-1: Product: syz [ 550.984032][ T8935] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 550.990684][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 550.993291][ T5958] usb 6-1: Manufacturer: syz [ 551.022812][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.023986][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 551.036973][ T5958] usb 6-1: SerialNumber: syz [ 551.065211][ T5936] usb 5-1: config 0 descriptor?? [ 551.101084][ T5936] pwc: Askey VC010 type 2 USB webcam detected. [ 551.105591][ T8916] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 551.114020][ T8916] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 551.139847][ T5922] vhci_hcd: vhci_device speed not set [ 551.152147][ T8932] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 551.153085][ T8916] vhci_hcd vhci_hcd.0: Device attached [ 551.251085][ T5922] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 551.259839][ T8916] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 551.320112][ T8936] vhci_hcd: connection closed [ 551.323875][ T8933] vhci_hcd: connection reset by peer [ 551.332683][ T5958] usb 6-1: USB disconnect, device number 16 [ 551.337122][ T6046] vhci_hcd: stop threads [ 551.352385][ T6046] vhci_hcd: release socket [ 551.369002][ T8938] vhci_hcd: connection closed [ 551.379646][ T6046] vhci_hcd: disconnect device [ 551.382641][ T5953] usb 1-1: USB disconnect, device number 68 [ 551.416213][ T6046] vhci_hcd: stop threads [ 551.420865][ T6046] vhci_hcd: release socket [ 551.442141][ T6046] vhci_hcd: disconnect device [ 551.451441][ T6046] vhci_hcd: stop threads [ 551.463546][ T6046] vhci_hcd: release socket [ 551.477349][ T6046] vhci_hcd: disconnect device [ 551.508203][ T5936] pwc: recv_control_msg error -32 req 02 val 2b00 [ 551.516272][ T5936] pwc: recv_control_msg error -32 req 02 val 2700 [ 551.529600][ T5936] pwc: recv_control_msg error -32 req 02 val 2c00 [ 551.550100][ T5936] pwc: recv_control_msg error -32 req 04 val 1000 [ 551.574554][ T5936] pwc: recv_control_msg error -32 req 04 val 1300 [ 551.584769][ T5936] pwc: recv_control_msg error -32 req 04 val 1400 [ 551.592880][ T5936] pwc: recv_control_msg error -32 req 02 val 2000 [ 551.600461][ T5936] pwc: recv_control_msg error -32 req 02 val 2100 [ 551.608089][ T5936] pwc: recv_control_msg error -32 req 04 val 1500 [ 551.616022][ T5936] pwc: recv_control_msg error -32 req 02 val 2500 [ 551.623450][ T5936] pwc: recv_control_msg error -32 req 02 val 2400 [ 551.833015][ T8942] netlink: 408 bytes leftover after parsing attributes in process `syz.1.768'. [ 552.289087][ T8957] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 552.338435][ T8957] bond2: (slave geneve2): making interface the new active one [ 552.348787][ T8957] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 552.359124][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.384673][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.431705][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 552.439167][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.647400][ T8966] syz_tun: entered allmulticast mode [ 552.801115][ T5961] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 552.962949][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.974852][ T5961] usb 1-1: config 0 has no interfaces? [ 552.995060][ T5961] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.024752][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.088209][ T5961] usb 1-1: config 0 descriptor?? [ 553.136676][ T5983] usbhid 4-1:0.0: can't add hid device: -71 [ 553.171624][ T5983] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 553.193377][ T5983] usb 4-1: USB disconnect, device number 52 [ 553.267650][ T8971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.776'. [ 553.396430][ T5961] usb 1-1: USB disconnect, device number 69 [ 553.504105][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 553.549286][ T8978] loop9: detected capacity change from 0 to 7 [ 553.591204][ T5936] pwc: recv_control_msg error -71 req 02 val 2900 [ 553.599143][ T5936] pwc: recv_control_msg error -71 req 02 val 2800 [ 553.605888][ T5869] Dev loop9: unable to read RDB block 7 [ 553.630790][ T5869] loop9: AHDI p3 p4 [ 553.651655][ T5869] loop9: partition table partially beyond EOD, truncated [ 553.652889][ T5936] pwc: recv_control_msg error -71 req 04 val 1100 [ 553.704882][ T5869] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 553.721274][ T5936] pwc: recv_control_msg error -71 req 04 val 1200 [ 553.736966][ T8978] Dev loop9: unable to read RDB block 7 [ 553.752899][ T8978] loop9: AHDI p3 p4 [ 553.757366][ T5936] pwc: Registered as video103. [ 553.765012][ T8978] loop9: partition table partially beyond EOD, truncated [ 553.786620][ T5936] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 553.797981][ T8984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.779'. [ 553.801279][ T8978] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 554.002683][ T8986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.121203][ T5936] usb 5-1: USB disconnect, device number 51 [ 554.156424][ T5869] udevd[5869]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 554.311670][ T8991] netlink: 476 bytes leftover after parsing attributes in process `syz.3.781'. [ 554.332512][ T5869] udevd[5869]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 554.349738][ T30] audit: type=1326 audit(1762020293.201:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8992 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd698efc9 code=0x7ffc0000 [ 554.462871][ T30] audit: type=1326 audit(1762020293.201:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8992 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd698efc9 code=0x7ffc0000 [ 554.556447][ T30] audit: type=1326 audit(1762020293.201:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8992 comm="syz.0.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f0fd698efc9 code=0x7ffc0000 [ 554.811124][ T5936] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 555.043389][ T5936] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 555.119052][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.137770][ T5936] usb 4-1: Product: syz [ 555.149151][ T5936] usb 4-1: Manufacturer: syz [ 555.164366][ T5936] usb 4-1: SerialNumber: syz [ 555.180256][ T5936] usb 4-1: config 0 descriptor?? [ 555.399930][ T5936] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 556.282413][ T9013] loop9: detected capacity change from 0 to 7 [ 556.333589][ T9013] Dev loop9: unable to read RDB block 7 [ 556.361848][ T9013] loop9: AHDI p1 p2 [ 556.378263][ T9013] loop9: partition table partially beyond EOD, truncated [ 556.411185][ T5922] vhci_hcd: vhci_device speed not set [ 556.422001][ T30] audit: type=1326 audit(1762020295.271:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.5.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 556.441301][ T9013] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 556.466746][ T30] audit: type=1326 audit(1762020295.271:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.5.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 556.558961][ T30] audit: type=1326 audit(1762020295.271:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.5.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 556.584728][ T5950] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 556.652580][ T30] audit: type=1326 audit(1762020295.271:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.5.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 556.721899][ T30] audit: type=1326 audit(1762020295.271:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.5.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 556.746266][ T30] audit: type=1326 audit(1762020295.271:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.5.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 556.793050][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 556.804522][ T5950] usb 1-1: config 0 has no interfaces? [ 556.818768][ T5950] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 556.834209][ T30] audit: type=1326 audit(1762020295.271:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.5.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 556.859761][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.879884][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.893079][ T5950] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 556.925810][ T30] audit: type=1326 audit(1762020295.271:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.5.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74db8efc9 code=0x7ffc0000 [ 556.930704][ T5950] usb 1-1: Product: syz [ 557.002520][ T5950] usb 1-1: Manufacturer: syz [ 557.048227][ T5950] usb 1-1: SerialNumber: syz [ 557.101913][ T5950] usb 1-1: config 0 descriptor?? [ 557.391119][ T5983] usb 1-1: USB disconnect, device number 70 [ 557.436916][ T9036] netlink: 476 bytes leftover after parsing attributes in process `syz.1.792'. [ 557.864013][ T5936] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 558.045353][ T5936] usb 4-1: USB disconnect, device number 53 [ 558.323515][ T9053] syzkaller0: entered promiscuous mode [ 558.331062][ T5983] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 558.338753][ T9053] syzkaller0: entered allmulticast mode [ 558.379459][ T9053] sch_fq: defrate 6 ignored. [ 558.531156][ T5936] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 558.551017][ T5983] usb 2-1: Using ep0 maxpacket: 16 [ 558.560222][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 558.599015][ T5983] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 558.610294][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.636721][ T5983] usb 2-1: Product: syz [ 558.650041][ T5983] usb 2-1: Manufacturer: syz [ 558.664154][ T5983] usb 2-1: SerialNumber: syz [ 558.681020][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 558.688427][ T5936] usb 1-1: unable to get BOS descriptor or descriptor too short [ 558.706385][ T5936] usb 1-1: config 3 has an invalid interface number: 182 but max is 0 [ 558.719749][ T5983] usb 2-1: config 0 descriptor?? [ 558.751747][ T5936] usb 1-1: config 3 has no interface number 0 [ 558.803542][ T5983] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 558.813329][ T5936] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 558.830330][ T5983] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 558.844319][ T5936] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 558.891807][ T5936] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10 [ 558.937125][ T5936] usb 1-1: config 3 interface 182 has no altsetting 0 [ 558.971141][ T5936] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 559.002942][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.029511][ T5936] usb 1-1: Product: syz [ 559.045342][ T5936] usb 1-1: Manufacturer: syz [ 559.065121][ T5936] usb 1-1: SerialNumber: syz [ 559.483956][ T5983] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 559.505404][ T5936] usbtest 1-1:3.182: couldn't get endpoints, -71 [ 559.544015][ T5936] usbtest 1-1:3.182: probe with driver usbtest failed with error -71 [ 559.612593][ T5936] usb 1-1: USB disconnect, device number 71 [ 559.831224][ T5953] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 559.966590][ T9072] loop9: detected capacity change from 0 to 7 [ 559.976622][ T5881] Dev loop9: unable to read RDB block 7 [ 559.983474][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 559.988868][ T5881] loop9: AHDI p3 p4 [ 559.994145][ T5881] loop9: partition table partially beyond EOD, truncated [ 560.005903][ T5881] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 560.006104][ T5953] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 560.023307][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.032229][ T5958] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 560.032438][ T5953] usb 4-1: Product: syz [ 560.061217][ T9072] Dev loop9: unable to read RDB block 7 [ 560.071413][ T9072] loop9: AHDI p3 p4 [ 560.081244][ T5953] usb 4-1: Manufacturer: syz [ 560.085907][ T5953] usb 4-1: SerialNumber: syz [ 560.091794][ T9072] loop9: partition table partially beyond EOD, truncated [ 560.108466][ T5983] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 560.124010][ T9072] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 560.134342][ T5953] usb 4-1: config 0 descriptor?? [ 560.141572][ T5983] em28xx 2-1:0.0: board has no eeprom [ 560.162072][ T9074] netlink: 476 bytes leftover after parsing attributes in process `syz.0.804'. [ 560.201685][ T5958] usb 5-1: Using ep0 maxpacket: 8 [ 560.212989][ T5958] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 560.237385][ T5958] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 560.267501][ T5958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.274884][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 560.278820][ T5958] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 560.319444][ T5958] usb 5-1: config 0 has no interface number 0 [ 560.335903][ T5958] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.353302][ T5953] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 560.359925][ T5958] usb 5-1: config 0 interface 150 has no altsetting 0 [ 560.368815][ T5958] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 560.381238][ T5983] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 560.381705][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 560.390126][ T5983] em28xx 2-1:0.0: dvb set to bulk mode. [ 560.406527][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.414968][ T24] em28xx 2-1:0.0: Binding DVB extension [ 560.451165][ T5983] usb 2-1: USB disconnect, device number 42 [ 560.467665][ T5958] usb 5-1: config 0 descriptor?? [ 560.485211][ T5983] em28xx 2-1:0.0: Disconnecting em28xx [ 560.549288][ T24] em28xx 2-1:0.0: Registering input extension [ 560.549658][ T5983] em28xx 2-1:0.0: Closing input extension [ 560.595599][ T5983] em28xx 2-1:0.0: Freeing device [ 560.661280][ T5936] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 560.828717][ T5936] usb 6-1: not running at top speed; connect to a high speed hub [ 560.857357][ T5936] usb 6-1: config 5 has an invalid interface number: 193 but max is 3 [ 560.880997][ T5936] usb 6-1: config 5 has an invalid interface number: 145 but max is 3 [ 560.914387][ T5936] usb 6-1: config 5 has an invalid interface number: 199 but max is 3 [ 560.931388][ T5936] usb 6-1: config 5 has an invalid interface number: 117 but max is 3 [ 560.939634][ T5936] usb 6-1: config 5 has no interface number 0 [ 560.966040][ T5936] usb 6-1: config 5 has no interface number 1 [ 561.002593][ T5936] usb 6-1: config 5 has no interface number 2 [ 561.018312][ T5936] usb 6-1: config 5 has no interface number 3 [ 561.042745][ T5950] usb 5-1: USB disconnect, device number 52 [ 561.044158][ T5936] usb 6-1: config 5 interface 193 altsetting 0 endpoint 0x87 has invalid maxpacket 1112, setting to 64 [ 561.102557][ T5936] usb 6-1: config 5 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 561.214530][ T5936] usb 6-1: config 5 interface 145 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 561.225850][ T5936] usb 6-1: config 5 interface 145 altsetting 14 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 561.237493][ T5936] usb 6-1: config 5 interface 145 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 561.242193][ T5922] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 561.249638][ T5936] usb 6-1: config 5 interface 145 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 561.267908][ T5936] usb 6-1: config 5 interface 145 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 561.279325][ T5936] usb 6-1: config 5 interface 145 altsetting 14 has a duplicate endpoint with address 0xD, skipping [ 561.290435][ T5936] usb 6-1: config 5 interface 145 altsetting 14 endpoint 0x1 has invalid maxpacket 528, setting to 64 [ 561.301941][ T5983] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 561.341365][ T5936] usb 6-1: config 5 interface 145 altsetting 14 has a duplicate endpoint with address 0x4, skipping [ 561.361516][ T5936] usb 6-1: config 5 interface 145 altsetting 14 has a duplicate endpoint with address 0x4, skipping [ 561.376130][ T5936] usb 6-1: config 5 interface 145 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 561.418659][ T5936] usb 6-1: config 5 interface 199 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 561.434509][ T5922] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 561.451136][ T5936] usb 6-1: config 5 interface 199 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 561.461363][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 561.490128][ T5936] usb 6-1: config 5 interface 199 altsetting 15 has a duplicate endpoint with address 0x1, skipping [ 561.494636][ T5922] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.511050][ T5936] usb 6-1: config 5 interface 199 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 561.533880][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 561.548163][ T5936] usb 6-1: config 5 interface 199 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 561.569456][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 561.581034][ T5936] usb 6-1: config 5 interface 199 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 561.599423][ T5936] usb 6-1: config 5 interface 199 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 561.611270][ T5922] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 561.612251][ T5936] usb 6-1: config 5 interface 199 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 561.635646][ T5936] usb 6-1: config 5 interface 145 has no altsetting 0 [ 561.644678][ T5936] usb 6-1: config 5 interface 199 has no altsetting 0 [ 561.648714][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 561.683917][ T5922] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.708004][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 561.713151][ T5936] usb 6-1: config 5 interface 117 has no altsetting 0 [ 561.746982][ T5936] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=e0.bb [ 561.785029][ T5953] gspca_sunplus: reg_w_riv err -71 [ 561.790826][ T5953] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 561.795383][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 561.811793][ T5953] usb 4-1: USB disconnect, device number 54 [ 561.821075][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.829115][ T5936] usb 6-1: Product: 卓뮢鿈眆䝺Ǚ聋馻༓㗳璇ග䴙曐矣Ⰶ駖貊ヾ䲗டｳ흁쭑摫㾷ﹶ軔䶩ຍ⫼ଖ꧖畠銍붯㨩ᵬၿ钡揱叿鼙燛杷疙崽ꃰ清곧阮괒闧⢨瓃伂赱馮 [ 561.869317][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 561.869335][ T30] audit: type=1800 audit(1762020300.691:374): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.813" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 561.875213][ T5922] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 561.957269][ T5936] usb 6-1: Manufacturer: 暔ლㅙ鹓㕛Ｚ墘蘎鎏刀橼않삺ṥО⫧ [ 561.976603][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 561.979803][ T5936] usb 6-1: SerialNumber: 䞨㸃徔鹞熼ᕖ﹘⯰횋५ꁣ䭥畹扛鹯뺚╈ꎆ熨ﳑ㏅鲩꜏㔯വ㬹Ὥ⛥ⵥ셂ﶁ䩠ビ媒ሄ읃蓈륖湗렫翽㾸数ﺸ붞㫱茕೰騑โⷍ鿪瓟﹬싦䙴䳭뱯ꔜ釳⇨伜固ᯏ퍺ौꈝᐪ掬鈨䃐⳿嵓쁿晳贰⾿쟯⹂ [ 561.987869][ T5922] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.065752][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 562.084388][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 562.102946][ T5922] usb 1-1: string descriptor 0 read error: -22 [ 562.109618][ T5922] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 562.126694][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.161794][ T5922] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 562.373285][ T5983] usb 2-1: device descriptor read/64, error -71 [ 562.488343][ T9094] misc userio: Begin command sent, but we're already running [ 562.502260][ T9094] misc userio: Begin command sent, but we're already running [ 562.624264][ T5983] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 562.705995][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 562.716503][ T9117] xt_ipcomp: unknown flags 1D [ 562.842779][ T5983] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.859055][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 562.874579][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 562.886301][ T5983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 562.909392][ T5983] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 562.934573][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.966713][ T5983] usb 2-1: config 0 descriptor?? [ 562.991619][ T5958] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 563.069894][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.076891][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.091077][ T5922] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 563.171049][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 563.179115][ T5958] usb 4-1: unable to get BOS descriptor or descriptor too short [ 563.188837][ T5958] usb 4-1: config 4 has an invalid interface number: 122 but max is 0 [ 563.210424][ T5958] usb 4-1: config 4 has no interface number 0 [ 563.224678][ T5922] usb 5-1: device descriptor read/64, error -71 [ 563.229251][ T5958] usb 4-1: config 4 interface 122 has no altsetting 0 [ 563.255976][ T5958] usb 4-1: New USB device found, idVendor=0582, idProduct=0052, bcdDevice=f5.6b [ 563.265798][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.275593][ T5958] usb 4-1: Product: syz [ 563.279864][ T5958] usb 4-1: Manufacturer: syz [ 563.293308][ T5958] usb 4-1: SerialNumber: syz [ 563.482485][ T5922] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 563.549053][ T5958] usb 4-1: USB disconnect, device number 55 [ 563.582306][ T5983] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 563.624925][ T5983] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 563.701290][ T5922] usb 5-1: device descriptor read/64, error -71 [ 563.865834][ T5922] usb usb5-port1: attempt power cycle [ 564.226465][ T5922] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 564.262656][ T5922] usb 5-1: device descriptor read/8, error -71 [ 564.525348][ T5922] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 564.582029][ T5922] usb 5-1: device descriptor read/8, error -71 [ 564.678338][ T5983] usb 1-1: USB disconnect, device number 72 [ 564.692125][ T5922] usb usb5-port1: unable to enumerate USB device [ 564.927715][ T5936] usb 6-1: USB disconnect, device number 17 [ 565.141075][ T5867] Bluetooth: hci5: command 0x0406 tx timeout [ 565.966208][ T5922] usb 2-1: USB disconnect, device number 44 [ 566.801254][ T5983] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 566.957909][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.044689][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.092740][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 567.132175][ T5983] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 567.155184][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.198412][ T5983] usb 4-1: config 0 descriptor?? [ 567.411403][ T9188] fuse: Bad value for 'fd' [ 567.617350][ T5983] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 567.703453][ T5983] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 567.878356][ T9206] netlink: 'syz.3.828': attribute type 33 has an invalid length. [ 567.966705][ T9206] netlink: 152 bytes leftover after parsing attributes in process `syz.3.828'. [ 568.054027][ T9206] `: renamed from team0 [ 568.287011][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.361419][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.384734][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.453138][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.661327][ T5950] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 568.801026][ T5950] usb 5-1: device descriptor read/64, error -71 [ 569.051104][ T5950] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 569.191511][ T5950] usb 5-1: device descriptor read/64, error -71 [ 569.291054][ T5936] usb 4-1: reset high-speed USB device number 56 using dummy_hcd [ 569.323698][ T5950] usb usb5-port1: attempt power cycle [ 569.791540][ T5950] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 569.901899][ T5950] usb 5-1: device descriptor read/8, error -71 [ 570.222218][ T5950] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 570.255158][ T5950] usb 5-1: device descriptor read/8, error -71 [ 570.371506][ T5950] usb usb5-port1: unable to enumerate USB device [ 570.479870][ T9261] trusted_key: encrypted_key: insufficient parameters specified [ 570.654508][ T5983] usb 4-1: USB disconnect, device number 56 [ 570.765612][ T9267] FAULT_INJECTION: forcing a failure. [ 570.765612][ T9267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.982297][ T9267] CPU: 1 UID: 0 PID: 9267 Comm: syz.0.847 Not tainted syzkaller #0 PREEMPT(full) [ 570.982322][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 570.982332][ T9267] Call Trace: [ 570.982339][ T9267] [ 570.982347][ T9267] dump_stack_lvl+0x189/0x250 [ 570.982374][ T9267] ? __pfx____ratelimit+0x10/0x10 [ 570.982397][ T9267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.982418][ T9267] ? __pfx__printk+0x10/0x10 [ 570.982449][ T9267] should_fail_ex+0x414/0x560 [ 570.982479][ T9267] _copy_to_user+0x31/0xb0 [ 570.982503][ T9267] simple_read_from_buffer+0xe1/0x170 [ 570.982532][ T9267] proc_fail_nth_read+0x1b3/0x220 [ 570.982557][ T9267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.982580][ T9267] ? rw_verify_area+0x2a6/0x4d0 [ 570.982601][ T9267] ? __lock_acquire+0xab9/0xd20 [ 570.982617][ T9267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.982645][ T9267] vfs_read+0x200/0xa30 [ 570.982666][ T9267] ? fdget_pos+0x247/0x320 [ 570.982690][ T9267] ? __pfx___mutex_lock+0x10/0x10 [ 570.982714][ T9267] ? __pfx_vfs_read+0x10/0x10 [ 570.982734][ T9267] ? __fget_files+0x2a/0x420 [ 570.982749][ T9267] ? __fget_files+0x3a0/0x420 [ 570.982762][ T9267] ? __fget_files+0x2a/0x420 [ 570.982787][ T9267] ksys_read+0x145/0x250 [ 570.982811][ T9267] ? __pfx_ksys_read+0x10/0x10 [ 570.982837][ T9267] ? do_syscall_64+0xbe/0xfa0 [ 570.982862][ T9267] do_syscall_64+0xfa/0xfa0 [ 570.982881][ T9267] ? lockdep_hardirqs_on+0x9c/0x150 [ 570.982902][ T9267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.982920][ T9267] ? clear_bhb_loop+0x60/0xb0 [ 570.982941][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.982958][ T9267] RIP: 0033:0x7f0fd698d9dc [ 570.982980][ T9267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 570.982995][ T9267] RSP: 002b:00007f0fd77c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.983014][ T9267] RAX: ffffffffffffffda RBX: 00007f0fd6be5fa0 RCX: 00007f0fd698d9dc [ 570.983027][ T9267] RDX: 000000000000000f RSI: 00007f0fd77c80a0 RDI: 0000000000000004 [ 570.983038][ T9267] RBP: 00007f0fd77c8090 R08: 0000000000000000 R09: 0000000000000000 [ 570.983049][ T9267] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000002 [ 570.983059][ T9267] R13: 00007f0fd6be6038 R14: 00007f0fd6be5fa0 R15: 00007f0fd6d0fa28 [ 570.983090][ T9267] [ 571.624870][ T9272] loop9: detected capacity change from 0 to 7 [ 571.638566][ T9272] Dev loop9: unable to read RDB block 7 [ 571.644411][ T9272] loop9: AHDI p3 p4 [ 571.648402][ T9272] loop9: partition table partially beyond EOD, truncated [ 571.656801][ T9272] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 571.827677][ T5869] udevd[5869]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 572.031496][ T5950] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 572.241066][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 572.260556][ T5950] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 572.303881][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.324749][ T9290] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 572.385677][ T5950] usb 1-1: config 0 descriptor?? [ 572.597304][ T5950] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 572.620008][ T9298] netlink: 14 bytes leftover after parsing attributes in process `syz.3.856'. [ 572.643612][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.661638][ T31] INFO: task syz.2.232:6941 blocked for more than 143 seconds. [ 572.734020][ T31] Not tainted syzkaller #0 [ 572.751846][ T5950] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 572.759734][ T31] Blocked by coredump. [ 572.765237][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.774659][ T5950] usb 1-1: media controller created [ 572.783153][ T31] task:syz.2.232 state:D stack:23624 pid:6941 tgid:6940 ppid:5882 task_flags:0x400448 flags:0x00080000 [ 572.835633][ T31] Call Trace: [ 572.860337][ T31] [ 572.906630][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.923504][ T31] __schedule+0x1798/0x4cc0 [ 572.959509][ T31] ? __lock_acquire+0xab9/0xd20 [ 572.989225][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.036145][ T31] ? __pfx___schedule+0x10/0x10 [ 573.086027][ T31] ? schedule+0x91/0x360 [ 573.090327][ T31] schedule+0x165/0x360 [ 573.099460][ T5950] az6027: usb out operation failed. (-71) [ 573.119815][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.125530][ T5950] az6027: usb out operation failed. (-71) [ 573.147656][ T5950] stb0899_attach: Driver disabled by Kconfig [ 573.158159][ T31] __mutex_lock+0x7e6/0x1350 [ 573.167400][ T31] ? __mutex_lock+0x5bb/0x1350 [ 573.173209][ T5950] az6027: no front-end attached [ 573.173209][ T5950] [ 573.186220][ T31] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 573.196669][ T5950] az6027: usb out operation failed. (-71) [ 573.205093][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.216138][ T5950] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 573.225861][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 573.238764][ T31] ? _raw_spin_unlock+0x28/0x50 [ 573.245239][ T5950] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 573.266196][ T31] ? xa_erase+0xd5/0xf0 [ 573.275590][ T31] io_uring_del_tctx_node+0xf0/0x2c0 [ 573.290416][ T31] io_uring_clean_tctx+0xd4/0x1a0 [ 573.316059][ T5950] dvb-usb: schedule remote query interval to 400 msecs. [ 573.326211][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.334577][ T5950] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 573.345820][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 573.360448][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.385323][ T5950] usb 1-1: USB disconnect, device number 73 [ 573.396135][ T31] ? io_uring_drop_tctx_refs+0x108/0x1c0 [ 573.409907][ T31] io_uring_cancel_generic+0x6ca/0x7d0 [ 573.424861][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 573.440263][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 573.453073][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.475260][ T31] ? io_uring_unreg_ringfd+0x52f/0x540 [ 573.497629][ T31] do_exit+0x345/0x2300 [ 573.520873][ T31] ? do_raw_spin_lock+0x21f/0x290 [ 573.545686][ T31] ? __pfx_do_exit+0x10/0x10 [ 573.577634][ T31] do_group_exit+0x21c/0x2d0 [ 573.594720][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.616455][ T31] get_signal+0x1285/0x1340 [ 573.644503][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 573.668633][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 573.681931][ T31] ? __se_sys_futex+0x36f/0x400 [ 573.689259][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 573.697464][ T31] exit_to_user_mode_loop+0x72/0x130 [ 573.713041][ T31] do_syscall_64+0x2bd/0xfa0 [ 573.734653][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.749254][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.763357][ T31] ? clear_bhb_loop+0x60/0xb0 [ 573.775541][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.789737][ T31] RIP: 0033:0x7f5a60f8efc9 [ 573.794949][ T31] RSP: 002b:00007f5a61e940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 573.803810][ T31] RAX: fffffffffffffe00 RBX: 00007f5a611e5fa8 RCX: 00007f5a60f8efc9 [ 573.812464][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5a611e5fa8 [ 573.820846][ T31] RBP: 00007f5a611e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 573.867188][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.891219][ T31] R13: 00007f5a611e6038 R14: 00007f5a6130f940 R15: 00007f5a6130fa28 [ 573.900522][ T9309] ptrace attach of "./syz-executor exec"[5884] was attempted by "./syz-executor exec"[9309] [ 573.935166][ T31] [ 573.948620][ T31] [ 573.948620][ T31] Showing all locks held in the system: [ 573.967789][ T31] 1 lock held by khungtaskd/31: [ 574.043543][ T31] #0: ffffffff8df3d4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.071074][ T31] 2 locks held by getty/5590: [ 574.088352][ T31] #0: ffff88814d4540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.200560][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 574.240810][ T31] 3 locks held by kworker/1:4/5936: [ 574.257433][ T31] 7 locks held by kworker/0:5/5950: [ 574.274069][ T31] #0: ffff888140ef9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.300092][ T31] #1: ffffc90004c3fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.334080][ T31] #2: ffff8881457cd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 574.356475][ T31] #3: ffff888022306198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 574.378775][ T31] #4: ffff888021394160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 574.404373][ T31] #5: ffffffff8ed59268 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x328/0x640 [ 574.431024][ T31] #6: ffffffff8df42f78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 574.459536][ T31] 2 locks held by kworker/1:5/5953: [ 574.471034][ T31] 2 locks held by kworker/u8:8/6037: [ 574.486643][ T31] #0: ffff88801e31d948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.504540][ T31] #1: ffffc900051b7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.517080][ T31] 1 lock held by syz.2.232/6941: [ 574.522395][ T31] #0: ffff8880572360a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_uring_del_tctx_node+0xf0/0x2c0 [ 574.536237][ T31] 1 lock held by syz.2.232/6946: [ 574.543140][ T31] 2 locks held by syz.3.856/9298: [ 574.548251][ T31] #0: ffffffff8f2cb508 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x346/0x700 [ 574.559485][ T31] #1: ffffffff8df42f78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 574.571819][ T31] 1 lock held by syz.0.857/9308: [ 574.587753][ T31] [ 574.600072][ T31] ============================================= [ 574.600072][ T31] [ 574.609982][ T31] NMI backtrace for cpu 1 [ 574.609999][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 574.610018][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 574.610029][ T31] Call Trace: [ 574.610036][ T31] [ 574.610043][ T31] dump_stack_lvl+0x189/0x250 [ 574.610073][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.610095][ T31] ? __pfx__printk+0x10/0x10 [ 574.610125][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 574.610147][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.610168][ T31] ? __pfx__printk+0x10/0x10 [ 574.610190][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.610217][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 574.610238][ T31] watchdog+0xf60/0xfa0 [ 574.610260][ T31] ? watchdog+0x1e2/0xfa0 [ 574.610283][ T31] kthread+0x711/0x8a0 [ 574.610307][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.610323][ T31] ? __pfx_kthread+0x10/0x10 [ 574.610346][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.610367][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.610386][ T31] ? __pfx_kthread+0x10/0x10 [ 574.610408][ T31] ret_from_fork+0x4bc/0x870 [ 574.610429][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 574.610452][ T31] ? __switch_to_asm+0x39/0x70 [ 574.610466][ T31] ? __switch_to_asm+0x33/0x70 [ 574.610477][ T31] ? __pfx_kthread+0x10/0x10 [ 574.610499][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.610530][ T31] [ 574.610536][ T31] Sending NMI from CPU 1 to CPUs 0: [ 574.714621][ T5950] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 574.716229][ C0] NMI backtrace for cpu 0 [ 574.716246][ C0] CPU: 0 UID: 0 PID: 5950 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 574.716263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 574.716274][ C0] Workqueue: usb_hub_wq hub_event [ 574.716292][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 574.716309][ C0] Code: e8 6e 33 ab fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f e8 10 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 51 34 06 cc 44 89 f9 80 e1 07 [ 574.716322][ C0] RSP: 0018:ffffc90004c3ec90 EFLAGS: 00000002 [ 574.716334][ C0] RAX: 1ffffffff335d300 RBX: 00000000000003fd RCX: 0000000000000000 [ 574.716345][ C0] RDX: 00000000000003fd RSI: 000000000001e916 RDI: 000000000001e917 [ 574.716355][ C0] RBP: ffffffff99aea1b0 R08: ffff8881427e0237 R09: 1ffff110284fc046 [ 574.716367][ C0] R10: dffffc0000000000 R11: ffffffff8514d2d0 R12: dffffc0000000000 [ 574.716379][ C0] R13: 0000000000000000 R14: ffffffff99ae9f20 R15: 0000000000000000 [ 574.716389][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 574.716401][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.716412][ C0] CR2: 0000200001000000 CR3: 000000007e7ac000 CR4: 00000000003526f0 [ 574.716426][ C0] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000080 [ 574.716435][ C0] DR3: 000000000f000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 574.716444][ C0] Call Trace: [ 574.716450][ C0] [ 574.716459][ C0] wait_for_lsr+0x1a1/0x2f0 [ 574.716479][ C0] serial8250_console_write+0x134c/0x1ba0 [ 574.716506][ C0] ? __lock_acquire+0xab9/0xd20 [ 574.716522][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 574.716544][ C0] ? console_flush_all+0x13a/0xb10 [ 574.716563][ C0] ? console_flush_all+0x13a/0xb10 [ 574.716584][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 574.716604][ C0] ? console_flush_all+0x13a/0xb10 [ 574.716622][ C0] console_flush_all+0x6f3/0xb10 [ 574.716641][ C0] ? console_flush_all+0x13a/0xb10 [ 574.716662][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 574.716692][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 574.716714][ C0] console_unlock+0xbb/0x190 [ 574.716730][ C0] ? vprintk_emit+0x2ee/0x590 [ 574.716746][ C0] ? __pfx_console_unlock+0x10/0x10 [ 574.716762][ C0] ? vprintk_emit+0x2c0/0x590 [ 574.716779][ C0] ? vprintk_emit+0x495/0x590 [ 574.716795][ C0] ? vprintk_emit+0x2ee/0x590 [ 574.716810][ C0] ? vprintk_emit+0x2ee/0x590 [ 574.716827][ C0] vprintk_emit+0x4c5/0x590 [ 574.716844][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 574.716863][ C0] ? __free_frozen_pages+0x65e/0xd30 [ 574.716890][ C0] _printk+0xcf/0x120 [ 574.716907][ C0] ? __pfx__printk+0x10/0x10 [ 574.716924][ C0] ? free_large_kmalloc+0x13a/0x1f0 [ 574.716946][ C0] dvb_usb_device_exit+0x29b/0x350 [ 574.716966][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.716985][ C0] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 574.717003][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 574.717024][ C0] ? usb_disable_interface+0x31d/0x350 [ 574.717049][ C0] usb_unbind_interface+0x26e/0x910 [ 574.717069][ C0] ? __pfx_usb_unbind_interface+0x10/0x10 [ 574.717085][ C0] device_release_driver_internal+0x4d9/0x800 [ 574.717108][ C0] bus_remove_device+0x34d/0x410 [ 574.717125][ C0] device_del+0x511/0x8e0 [ 574.717143][ C0] ? __pm_runtime_barrier+0x212/0x460 [ 574.717163][ C0] ? __pfx_device_del+0x10/0x10 [ 574.717178][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 574.717202][ C0] usb_disable_device+0x3e9/0x8a0 [ 574.717226][ C0] usb_disconnect+0x330/0x950 [ 574.717249][ C0] hub_event+0x1cf5/0x4a20 [ 574.717275][ C0] ? do_raw_spin_lock+0x121/0x290 [ 574.717295][ C0] ? register_lock_class+0x51/0x320 [ 574.717317][ C0] ? __pfx_hub_event+0x10/0x10 [ 574.717330][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 574.717349][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.717366][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 574.717381][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 574.717397][ C0] process_scheduled_works+0xae1/0x17b0 [ 574.717426][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.717450][ C0] worker_thread+0x8a0/0xda0 [ 574.717478][ C0] kthread+0x711/0x8a0 [ 574.717497][ C0] ? __pfx_worker_thread+0x10/0x10 [ 574.717513][ C0] ? __pfx_kthread+0x10/0x10 [ 574.717532][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.717548][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.717565][ C0] ? __pfx_kthread+0x10/0x10 [ 574.717583][ C0] ret_from_fork+0x4bc/0x870 [ 574.717599][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 574.717617][ C0] ? __switch_to_asm+0x39/0x70 [ 574.717630][ C0] ? __switch_to_asm+0x33/0x70 [ 574.717642][ C0] ? __pfx_kthread+0x10/0x10 [ 574.717659][ C0] ret_from_fork_asm+0x1a/0x30 [ 574.717680][ C0] [ 575.505577][ T9298] macvlan2 (unregistering): left allmulticast mode [ 575.512562][ T9298] macvlan2 (unregistering): left promiscuous mode [ 575.519113][ T9298] bridge1: port 1(macvlan2) entered disabled state [ 575.536650][ T9298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.547511][ T9298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.558387][ T9298] bond0 (unregistering): Released all slaves [ 576.738699][ T6946] syz_tun (unregistering): left allmulticast mode [ 576.990155][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.124179][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.188161][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.240036][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.375207][ T12] bridge_slave_1: left allmulticast mode [ 577.384427][ T12] bridge_slave_1: left promiscuous mode [ 577.392058][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.404937][ T12] bridge_slave_0: left allmulticast mode [ 577.410590][ T12] bridge_slave_0: left promiscuous mode [ 577.416593][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.724600][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.738109][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.748712][ T12] bond0 (unregistering): Released all slaves [ 577.999820][ T12] hsr_slave_0: left promiscuous mode [ 578.006106][ T12] hsr_slave_1: left promiscuous mode [ 578.016501][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.024693][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.033326][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.040844][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.079671][ T12] veth1_macvtap: left promiscuous mode [ 578.087693][ T12] veth0_macvtap: left promiscuous mode [ 578.093863][ T12] veth1_vlan: left promiscuous mode [ 578.099408][ T12] veth0_vlan: left promiscuous mode [ 578.624853][ T12] team0 (unregistering): Port device team_slave_1 removed [ 578.667607][ T12] team0 (unregistering): Port device team_slave_0 removed