last executing test programs: 6m11.264040385s ago: executing program 4 (id=3184): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="001109f87daee86f5995bd01040000a3bf7346caf255880810cf8df1a732cadf1db0fd13309747d4f36909fe97db57323b3313a9a7f8e22feb0a1389e0acb7318ccce829f24b9d15849cda2994ed1f0dd519cfe0db9e9c95e2333cf97f860e21feb020aeb000b3726e7ff46faf4d494db7f44e7f170d7fd9d0bb1cf0e4c14900b136adc18e09b015a6e69d346bc115e536ba9a1c5342c335"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6m10.473823582s ago: executing program 4 (id=3186): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x1d, 0x2, 0x6) bind$inet(r4, &(0x7f00000000c0)={0x1d, 0x4e20, @remote}, 0x10) getsockopt$packet_int(r3, 0x107, 0xc, 0x0, &(0x7f0000001600)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) socket$inet(0x2, 0x1, 0x6) fanotify_init(0x202, 0xc0000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x7c4c, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r10 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f0000000500)=""/128, 0x80}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000000980)=""/182, 0xb6}], 0x2b, &(0x7f0000000880)=""/137, 0x89}, 0xffff8000}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x0, 0x376}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r10, 0x0, 0x0}) chmod(&(0x7f00000001c0)='./file0\x00', 0x40) io_uring_enter(r11, 0x47ba, 0x3e81, 0x20, 0x0, 0x62) 6m9.087555958s ago: executing program 4 (id=3193): io_setup(0x2, &(0x7f0000000540)=0x0) io_pgetevents(r0, 0x5, 0x5, &(0x7f00000022c0)=[{}, {}, {}, {}, {}], &(0x7f0000002380)={0x0, 0x989680}, &(0x7f0000002400)={&(0x7f00000023c0)={[0x36a]}, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1ae, &(0x7f00000003c0)=""/4085}, 0x94) 6m8.609815382s ago: executing program 4 (id=3195): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file1/../file0', [{0x20, '\x00.\x11U!\xac\xb2\x80\x9f4Lg\x1d\xbek\xefL !\t\xa8\x81\x1a\x84O\xcb\x9b5\x0e^\xe8\xd72L\xba\x06\xef7m\xb6z\xa2\xfev 2\x12X\xbb\xe3-1\xac\xdc\xeaX\xb8\xdb\x88\x80;\xd2\xf7\x11\xcd\xc1\x81\x144\x96tJ&\xaa\x8e\x111HX\xc2Z\xdc\xa5\xe1\xc2p/\xc1\xa7\x82*\v\xbfk\x12S\x92\xa3\x87\xa8v\xa0\x01\xca\xab\xa1\x19\'j\x8a\xbdf \xf5@\xb1\x8aE <\xa7K\xe3\xedG\xffM\xd2e\xadfi\xba\x121\x175\x1a\xee+X*\x8a\x82\x8aNm9\x96\x11\x15\xe9\xb5;3\t\x06-\xe6\xf2\xdf%[C6,\x91\xe6\xfb\xef\xcd\xd3\x0fg\x8e;p\xa7_\x98\xcen\xb2\a\xfb7y\xec\xd1\xdb\xd3\x1e\xd1\xcc\xc7e\x82\xf6\xe0\xbb\xeftD\x7f\x89\xb7\xf8\xc1\x1f\xfbz9\xa8\xc9\x87\x0f\xb8!\xb5\x93\xf6\xe9m\xb4\x13M\xf9E\x06\x85\x1f]\xd7\n3\x0e\x1f\x1aT\x05\xc7\x81\xdfs\'UJ\x92\xc3\x9a\xfe\xa8\xa7\xa9G\xd3'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d"}, 0x161) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="66b9800000c00f326635002000000f30ba420066b80000010066ef0f0666b9800000c00f326635000100000f300f01c90f49c1d9f00ebaf80c66b85c25ad8666efbafc0c66b80000008066ef66b8bb5a3d5e0f23d00f21f866350000000a0f23f8", 0x61}], 0x1, 0x40, &(0x7f00000000c0), 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000240)=""/74, 0x4a}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000c00)=""/135, 0x87}], 0x1}, 0xc}], 0x2, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "380022eb00000000"}}}}}, 0x0) 6m5.433270528s ago: executing program 4 (id=3208): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x41624800ab113288, 0x4}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) lsm_list_modules(0x0, &(0x7f0000000000)=0xffffffffffffff74, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={&(0x7f0000000340), 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2b31}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xc4, 0x7, 0x1, 0x0, "2bc70af50ac598029e5bacdc068a8537e8873c13ad450a1205270b9ea29df3b4480373aeaa1d6442638c5d73fd15f353287949a97df968a701e57daea7d7dbb71a2e7b6fa12105977e87093abde238a7deffb04c2e0faffb139d199f6c2c97e6c510ef1be7a171d4b2b04049b6bf5daa16f27b93a9e0ba61794e7bb20b91db55346606b596237903f9675f21d7a08d4a1922cb196e85c8acb52450280df8fa08543377a6cd4ac60ae37510391625b00034c5ade8cedb91cebfcf1d95b7ba94ec"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x96, 0x7, 0x1, 0x0, "810f0d898d09fe93b3cdadf14cf918148f179bf18dc23801b6c4413312f2bb38fe74c0cadca088bb4e1348f9be7ba793049eada39f842ad8ab9a77b3cddab74f6e853e09ca53c4985865adb40dbf511f790a7fddd3e5bdb9c36e997cd3b65185403d04cfd44a2c8e8a024a9e179d78ce3fce35c06d1d10be527018d05424f191a49467035172a6e72260e515e0e0e1c014bb"}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xb}]}}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xeb}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x384}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4008}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)) syz_usb_connect(0x2, 0x58, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x0) 6m4.175635762s ago: executing program 4 (id=3212): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020e000508000000000000000000000002000700da0000000a"], 0x40}}, 0x0) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, ',[.-[\xce!,'}, {}], 0xa, "d1de004c9b138a102ef23956445c9dde71388d49b6ad7c49de86fba88b631c8fc4d7a1678a8897c181ae53685898887f8c1c7dbfa4d39de2d2e972eceb889f4ace0000000000"}, 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000016c0)='L', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000039c0)='m', 0x1}], 0x1}}], 0x2, 0x4) close(r2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000a80)={{r7}, "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"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 6m3.686393981s ago: executing program 32 (id=3212): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020e000508000000000000000000000002000700da0000000a"], 0x40}}, 0x0) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, ',[.-[\xce!,'}, {}], 0xa, "d1de004c9b138a102ef23956445c9dde71388d49b6ad7c49de86fba88b631c8fc4d7a1678a8897c181ae53685898887f8c1c7dbfa4d39de2d2e972eceb889f4ace0000000000"}, 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000016c0)='L', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000039c0)='m', 0x1}], 0x1}}], 0x2, 0x4) close(r2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000a80)={{r7}, "fad7b9428d93038f63c4dafa1da7e07527fe756bde6d960d81bfd34ba5cca803ad5bdebe227152d43a607faa0dc407fc189b0d7e7468ab55f146ff0337aed82849987da5e1ab963dda992d377e4eacce0e342581ab9962694df4a98aef6d7813fb8b796948ff95415e9d71a47ede207b1794f624b034487af5832e243034017f4f93e15abf71e2dc1e26f97de375b5a1f1a24f98467d2d07d33c06c55c3f89c8d5282a18faedb7595cdedc33c345c89deca5b925cf8467200094111705e71154b451ed8407d1c89255b27d9b243d3a333b099595c33db04682ac22a418c49f5c39a0918c015e8393d2cb7c20feb2c54c82b6387812412e3237e938369453e1e8030d49fcd1c91bf36f2422d1a72f49b31ec3889ebc0d28c929b0c6736f00b53b9ccfd3934a7d933a8202fd2bdb2a8b0d58d6180c1a69b7fb41255ce92795786d10a8c7d9e4f680517f4e34b1e8f884e81e09bd5ec5ecf38b7b8f1637afb0aee0e708c4074eec24e3141b9e12ced6b4beaedec6d55dbae69d5a63142b3e81997458d7151a84d0d7cd4ebd25d24f3d2a3b4c403ab707fe38aa61cab1b070d4730625f76dc37f201e8698204637fe62fe52ed11ae0d8f98f69d4f92762bcba03b8b42feeca7a9fa9300ca4759ff9d7e9162479f954b1316775fcbfc6640b91dd1cb976ceaf2f9f28040ecfdc0e28bb9705a1b985274c7d08bd96aacd6a00f865f3a22f86ef2ace146c4f40bb20798e0bc2db4ce62f0873c09a85e7892729489a7b9c8c9a2939812595942b1ca2d3260315bc723ac2edf24d88f0f49d586a8065817ad936dc8161e438eb5b845df96b2c9a56eb7535ee9e255f41def5d9e9720857fbfd84b4bf1c97c574f568933df8f25d6df5d74a374e4f9a6a2e76644df77da621a8c9ce947af8f20feda0e22ef467eb210665589823025c9144ec05d80276574d3cae61c639d3b12438e012ffe1ca3823b4b79185ce1896b7a41aa36a47776fade667af70c25d9543bc036f40aec1c521f39239cdbf2748883f86b89349ffee1f528f955bdf6f29686c57a49b66ebfc26ee604316f27f9547cf3c21c221581458246b04d627e29e8b846e099e5d8234ce0db1d3e77130147580622b8eeaa34707ea25369c250ce5f5adc14b7afcfbce3c25e5e65d04858dc056456e2f2d2bd6afb59afae8d63b7ab5b8b6ad3386d52dbcee60c7f0945517a77edeeda33789acdb3b7b3242704d6c51940c004cde1d3a342477607581a92a50716caf93495cbc1a6b2f1be20081f7ba8a013416e6b8433383299b752feabd1455bc336b868b38f5ad73f397f0381a51748ffa8550510837d9128ab095629b7a159c6b0dfadfd8a8bff53c80481c59d861954790c593524d8a53cd8b2f2c234b850ec7576a46074293453a86cb3c0c346a8cbbac65eda4a2130e00053f5a054603776ea1d2975e4badbaa83518dad9274c22ac17f20686f56315340e5581c787a2f71ab3a2063664bcc82c7380a13cc8eb106c036800c7b0f14ed667f39af9a5cc01dcdd5809b534fad505858508845d9c547e19c632cd8024ecd777e193c2258312b7a5998a875d33dd8b861500946852af487bbefa54e9b16a83b6131ac343eacb2558e759a9b6ce5db0f1ab173d457d144fd5a65f092e553e1d0e3f9972ec57d27bb48c78332c7a6fab0d5958c61898b3a5ae8810e2246ae36291cd5f79f9475e697c9da84d05cc8dc197485ad790d2a8da5400583dce8ffa3c8adfe276884ed5d33f0e7bc4fb1748e83884213c10ec673dbbbf55670da7fbdd6d8927cd41106064ce22cd2ae14084c439e8f07e4e261667507c0acb03033f30665dbf928d31ff9cf38f61a46d6d1286065bfad5839b0247c975673839f6f685ebaad9396c5f93b3a5f346202a40969ab5c72d0355fd609d33b9443093a53dfbf8052a405389ce269f71da8ae1fb39b30f6a701f56838ca11527de58850f17b4fcc6397614da8e2e331f06024f1ee7f6a8b2f910711526361244a585dfacb4bab57738d7938adb436cf17cfeceb95016e339aa5f2ba30515f289ba35118d32504f52710044e78666dd2834fc2d9fad35e2df29b10e0557ab4789c7dc718d2d03434062bb58fd824c13a0bc6298ed9bdc3d0cc79d008972fcc9f751af4824b2be0823313581cd2fd2b436f84b14719b93dd95a38941c11af5b51f3b0503f3db3569ac847a93ea9124622044b37b083fcf8882a788041289905296e1bf2eb12aadb5228f366a925269a20f7ca9db7f317d5117a70d93f90b402993a7f84328409bda0fdc6306dd5c126fdb179fde4e4d7314d2ee419c8635e62895f8dffdf73f38188121f7b24dae40531b6e43054d3b9b459df2f2613536819643e6b7038de55ffa43bc9edc72e2038e2bf9da70a4a24a3fce0b8673f7f8f5099fcf0d23ab90c7f8770bdfd23e6aaabf7d110768ff08c8754ff6d962e43ff215d78d2ebd882353490da27dabd92ab08291338eaacf3e1ebe6a7da8286d3d57e272b9eac7c70a9a1bd67fb3f4e3052779422a7e19b7cfb01760f949ce4562ce5ad5292cb607e42d513d1facd0903a87836d5c30c181b5728db474154d3cb4e524ba5e03336534ca9f6b093fd6d9e5b89ede5becc677996321d65e9022d1c00e2907767a51c75c9f0688e4e82e045dc972e6be8948c7fc8a84ca8e1a992d44ac8e7a962a931d8eb3d0c4756b838c1339758a4a563d108d35940366b582c48567b5ca539839fbd327361ed76f4204f8ec84ec6401079a189b271747129c3d0025ccc25c9d7fbea0aa4f6a0e5f10422e9866e42ab0f86d6e9022688652536eef7fd28dc5961670a4058eaec61ba3e11273111be9cc3da57edc16321e1382d20f4cf52827032b5f79e395e742113303b0aa595f7188a417ddfdc3b6259b56f9f8f7b133774bfb5c181f1288713e3144ac4ff69fc146cc633dc70c8aee1da2384b72115b49cdbdfe9508b2e06fcd02df78d895e12cf6f0cf4171c7570809b949c6bfbff07da4018935a186630be06d42a4844521428afbed6b3a34aa0226a948fa12e8bdfbb27d13fd5627093511f52a51a6dcd33e0122d2dd1736885c797e1d1c65c06739790767be42582349c147d52e377732742f176b79243edd2c6b585d5512702ce4a7395835e2ab038a5deff84f7ff0d4622aebcd31c58d2dbbaad54638473e5fb428b827a577215460489001af429b40d0dae3521be9a381913740ea72a8b707d2ed4a12f5791fc2d0ea9674d59d68ff02a7b7dda9b9a1917db6093bf8ba4a186c952434dfd664cf9607d9b194b874c24ad03b04148d6f1951d4127146b22783be7eceefc686c4bef899e6cce8ce1344e9e49cfc0d43633098983a40276b4b4fcbe4ce0b695d58471afcfcce714ff1da6e975bd1494d127fbcda25c0110f596e4e0882e01acc674446d2c6e3d08d8034eebd4432968b1aab2e825eba0f76612ae6617667ad6c823fb8234363d5bb341c440fe0a0cad018b6c36ca317e3473eedbcc5f6740a7fad23b55a6fb626d8093ea62d6f35d2babd391e138b24a4ddfa86fef5487a710289f2994f36e87fadd178a5e139455d398a8809e30d2569650ceee90ad6b68942087ae0e33c49c6f7952b08da8762be2c9066e56d27a69a926fc58c82565877e913bff08e0827c45f9e74c964f282d5023efb21e976b93177464a686150ef09a32c352505c534e467ce014fec144dbbdcc8e2d28b6bf619ddf63a48054406dfa33aa541cb9beafa70cabcd8600cabf93d138de261f6f5b63273691669e363e06bc583bdee1ed210179f2ab50a6bc0a727475551e90b0265e1e8ca02acabe93b596b7a782151d792a5679e21e730b7e964c38a49717d0a1385bbb1b0459916424133149720bf47ac38687178a8b351ae3f29bf4a6ea369c90f85f4f123416c8c09c3f25b133ddcdb71b1289821d81581b78ae66c075c535e30151ae1bd48e787b55cc45951c83b5ce097711df0764feab81f24d63940915c471479c24222bd5569201ac4c56577168b76c1f0684f981df516cf5ac5d4307ef2bf429d818c9809f6669f43b1eb160bdcb817154bc36cd8bd24cd6c75e037edab6fa0fe9a0f19b6dbaf99dd68f0318382ccf8d20fe2fdc08134a86b5b0794a534992751fca4ec726dfca985cc239bae2b04ce49416e07e14f752767d05f6584479b5da973fa22477be64fef48b5f3c07936c2be9fa8b92c9e8a0412a2718932edf53382efe2aa1531bbde87363fee5a15501a490c16d26354c0ffeeccf0d05705a6b68a0b88de1e15736092014273f7494474a24555e7e7a6b4e274a9dd4d534cac979a0e99758203f74309af7b221e925c592ad25e13c7907c1030fc79bb728bce4437047470cf97ebc48f45ef67695585caa73178057802a24e3e4fea0a55111275c738d2b09aa7e7a00e91be43ee507b6533c6c6e9d1848e708240d7547b08bb9121fc024caed12805a0a8bfb72f72c6787b760ccd3657328507050f8ad3e348597b38685ad6d44125266382dbf433a9628c548f89eea1691e92fc755502e4656d2faa2077ab1d749a3d2d0543cd5248db49cdb1a60f006ec8cb5b3ecfc1b6b38ed802a6885c6733dbdfbe9d6c0a0daacda38f9bdbd728bfae407e2be620cd8e66743c70073e38e87ede0daf00e7e6205bc0f5cc3ff5657ad559ad13a865d01357215e2e813153212d13d6817ff2badace7edac682ea459e30b476b98ea7ca540c9ec3f8a0550ab51340e04425e3eb0d36fcfa6612bfe947263322afb876ef4a86edf8adf41f4bf4fd617c2cc57c0639baa79f4e6468258e53b76ae51c83f37b6d128cbe4eaf3e58e7d24a7c24451289c991984bed04ce060e4ee13a0c0e43fc98baae2352366672075a6c8c26165aa538b1bac0765ffda39bfafaa401cea38646e418fc99704540acd08e128121bb0b8ab8e316f924cfdae1002d54e2ef3cf3477558d77881beaa3c31cb9cc2429eaf858ebaf06709910faf26d7433290a3250cca586c0e49c3d2456a6409da11259bc7b7e2345146a360404f3d7333487343d9dfbb2813bbeba56a1e1f90d421aca2d1e6ca075b1fcb5733df856fc45de7fe5dbe6174ebc4a6241576e46503a3f7e4ad18b5965c0525faa3d031b09b2b9aa1874285c874382359e93775a69701bb63fccc33d095aac42e79a74ec9700218add3c93114c0686f6897f3228cf3bee05ca63f709075df1b5e89e44c05feb00356c0de06190b84e09285443e58a361840e93da22a3ab64d8a4a0474466d13738c07c71847b6b2e47adb22db94e92524a08ca0dbb02de2e0eb5c2edb7e29d89ed5c2d76bb2fc5da5cd57b89bfd47465b5a57ebd72261ddfb443a141415670a59ae82acde715d73b4ab62602b9a347764a05a15159d25abfa2e26531efc90cce8692bb61d859ef6ecb4d9d6d44813085915e8d97916127241aa470b55cdf629ad52b7ad48d4253b2539726f26cf169c208a591ed4a3d4c0474446493a2da85d1226e58d988bcd484ed94d8b18f3298815be6627d1eb5bde9a2f8a3864b2e0c772502854afab501e8cbf1425028bebc3aece71cae8fc40f1606902d0ebcb124be02fcfb6a2810f580942e9f6a2871f9e9bd4a43bb3428c8e4cc16c5b7f3f6cf92bc0aec8c7826c2e759d6062c7409e2e770e3780bbff8e390bc9b551d12c5d295dda72b46cbf9a20c76f6881d69ec27a003b6edb5b2983483d06b246cc3cbd2c8524e601ce0d45c7441bb9e1dcd676ccb5ac3a9e59e6d65c4eee6b120b6bb71eafc80f9ca5de3529ff04fc2f3546"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 52.021513473s ago: executing program 3 (id=4493): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0x0, 0x11c3adec, 0x0}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x14) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)) capget(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000001c0)={0x7b4, 0x3, 0xe6, 0x10000, 0x100, 0x9}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) getrlimit(0xd, &(0x7f0000000080)) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0x0, 0x11c3adec}) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x14) (async) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)) (async) capget(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000001c0)={0x7b4, 0x3, 0xe6, 0x10000, 0x100, 0x9}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) getrlimit(0xd, &(0x7f0000000080)) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) (async) 51.787092437s ago: executing program 3 (id=4494): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, 0x0}, 0x2}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_GET_FPEXC(0x45, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x1, [0x7fffffff]}}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x7f, 0x101500) 49.593351722s ago: executing program 3 (id=4500): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 49.393812545s ago: executing program 3 (id=4503): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(r3) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r6 = fanotify_init(0x200, 0x101000) fanotify_mark(r6, 0x1, 0x8000000, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}], 0x20}}], 0x2, 0x4000001) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xeafd}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x60}}, 0x0) 48.674845669s ago: executing program 3 (id=4509): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x1fff, 0x6, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r2, &(0x7f0000000140)="84650000", 0x4) r3 = socket$kcm(0x10, 0xd, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="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", 0x139}], 0x1}, 0x4000010) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x7]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000240)={'ip_vti0\x00'}) 47.91818359s ago: executing program 3 (id=4511): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/48, 0x30}, 0x85ae}], 0x1, 0x60010062, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000fc0)="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", 0x186}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ff", 0x1}], 0x1}}], 0x2, 0x40408e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000003c0)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000400)) r3 = memfd_secret(0x80000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000440)) ftruncate(r3, 0x9) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r4, &(0x7f0000000280)='./cgroup\x00', r4, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ftruncate(r3, 0x51a9497) read$FUSE(r3, &(0x7f00000012c0)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x9, 0x71, {0x71, 0x23, "03fe0c627acbe3cf832d3290f38e4882fac087746a4283bccfd59b636dd866651240c8a279f7f9a1e659d0da390a9b4e77503033a3835b1819acfd5d2c1dc67479db54af5cda537c6bf30a06380965760c9b98207d32a5b02650c09f2404e06e2fb0e12c72b7f3ba930b377e71a9ed"}}, &(0x7f0000000080)={0x0, 0x3, 0xa3, @string={0xa3, 0x3, "c07d6df256c0a5e072bb80b4aa841a0c54669aa0ae07933886a4eabc530b2becbffd64434c307a69bae3809d4930670987a46a405ec3667874d664059ece302d52b0cb6e42e816a9d14cc2727a74d9587701600233548b5dd6dd14dc390e6e153ab62c18549a05638957ca8abab92f9de059b06249f478b69df8717c2ec74c4d2be2e79da0b74c526f7ebb0078f5e2ea2e0c1cf5ba8bead71abbe03acf35216510"}}}, &(0x7f0000000340)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="400000000100"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0x20, 0x0, 0x68, {0x66, "292c671daf12e5e31375fcdc91a99d2735d347e3a6f79bc0446357e107a628e6b6ba24aa951894ad8dc452b9592a5abbf697d28f918c9b3aaeca1c56fa91c09d885758e525a21625a1d508e45684fa382f2dd4b1462e0b56dbd37eb214e8cdae26aecb3ef705"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 47.301825968s ago: executing program 33 (id=4511): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/48, 0x30}, 0x85ae}], 0x1, 0x60010062, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000fc0)="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", 0x186}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ff", 0x1}], 0x1}}], 0x2, 0x40408e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000003c0)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000400)) r3 = memfd_secret(0x80000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000440)) ftruncate(r3, 0x9) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r4, &(0x7f0000000280)='./cgroup\x00', r4, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ftruncate(r3, 0x51a9497) read$FUSE(r3, &(0x7f00000012c0)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x9, 0x71, {0x71, 0x23, "03fe0c627acbe3cf832d3290f38e4882fac087746a4283bccfd59b636dd866651240c8a279f7f9a1e659d0da390a9b4e77503033a3835b1819acfd5d2c1dc67479db54af5cda537c6bf30a06380965760c9b98207d32a5b02650c09f2404e06e2fb0e12c72b7f3ba930b377e71a9ed"}}, &(0x7f0000000080)={0x0, 0x3, 0xa3, @string={0xa3, 0x3, "c07d6df256c0a5e072bb80b4aa841a0c54669aa0ae07933886a4eabc530b2becbffd64434c307a69bae3809d4930670987a46a405ec3667874d664059ece302d52b0cb6e42e816a9d14cc2727a74d9587701600233548b5dd6dd14dc390e6e153ab62c18549a05638957ca8abab92f9de059b06249f478b69df8717c2ec74c4d2be2e79da0b74c526f7ebb0078f5e2ea2e0c1cf5ba8bead71abbe03acf35216510"}}}, &(0x7f0000000340)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="400000000100"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0x20, 0x0, 0x68, {0x66, "292c671daf12e5e31375fcdc91a99d2735d347e3a6f79bc0446357e107a628e6b6ba24aa951894ad8dc452b9592a5abbf697d28f918c9b3aaeca1c56fa91c09d885758e525a21625a1d508e45684fa382f2dd4b1462e0b56dbd37eb214e8cdae26aecb3ef705"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 10.886971995s ago: executing program 6 (id=4642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$alg(0x26, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x10, 0x0, 0x0, 0x0, 0xc, 0x5, 0x8, 0x5, 0x8, 0xc, 0xd, 0x8, 0x0, 0x2e2, 0x5, 0x9, 0x0, 0x4, 0xf, '\x00', 0xff, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0xb000000) 10.593946476s ago: executing program 6 (id=4644): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203110902120001000000000904"], 0x0) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "eb0200", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) gettid() clock_nanosleep(0xb, 0x0, 0x0, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x80000000004, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x6, 0x0, &(0x7f0000000000)) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r3, 0xffff8000) dup(r2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) 8.517479861s ago: executing program 5 (id=4654): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a81, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac141400"], 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000500d0000850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000005340)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c880) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009058202400000000009050302"], 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x8, 0x5, 0x10, 0x10000}, {0x2, 0xff, 0xa, 0x3}, {0xfff8, 0x9, 0x2, 0x6}, {0x520c, 0xff, 0x1, 0xfff}, {0x7, 0x4, 0xa, 0x4}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_RESET(r6, 0x5514) close_range(r0, 0xffffffffffffffff, 0x0) 7.202705064s ago: executing program 6 (id=4657): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000056, 0x1, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x3f491140, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0xffffffffffffffdc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) close(r6) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x44e880, 0x0) ftruncate(r7, 0x200004) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x11, 0x8, &(0x7f00000002c0)="f7000000ff00"/17, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000180)) r10 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r10, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r10, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r10, 0x0) 7.014294019s ago: executing program 0 (id=4659): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000420001bf8bd9ddeed3a630b953005c"], 0x14}}, 0x24040000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xd10}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9}}}}}]}}]}}, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 6.561708438s ago: executing program 2 (id=4660): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001002bbd70f7fadbdf250a808000000000000000000006001d004e210000"], 0x24}}, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000046c0)=""/220, 0xdc}], 0x5}, 0x0, 0x40000103, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000023c0)}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x4, 0x10001, 0x3}, 0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$packet(0x11, 0x2, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f000000a240)=[{{&(0x7f00000047c0)=@qipcrtr, 0x80, &(0x7f00000002c0)=[{&(0x7f0000004840)=""/126, 0x7e}, {&(0x7f0000000100)=""/15, 0xf}], 0x2, &(0x7f00000048c0)=""/4096, 0x1000}, 0xfffffc01}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f00000058c0)=""/23, 0x17}, {&(0x7f0000005900)=""/190, 0xbe}, {&(0x7f00000059c0)=""/43, 0x2b}], 0x3, &(0x7f0000005a40)=""/47, 0x2f}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000005a80)=""/23, 0x17}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000006ac0)=""/85, 0x55}, {&(0x7f0000006b40)=""/120, 0x78}], 0x4}, 0x5}, {{&(0x7f0000006c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000007000)=[{&(0x7f0000006c80)=""/69, 0x45}, {&(0x7f0000006d00)=""/66, 0x42}, {&(0x7f0000006d80)=""/131, 0x83}, {&(0x7f0000006e40)=""/19, 0x13}, {&(0x7f0000006e80)=""/107, 0x6b}, {&(0x7f0000006f00)=""/48, 0x30}, {&(0x7f0000006f40)=""/116, 0x74}, {&(0x7f0000006fc0)=""/46, 0x2e}], 0x8, &(0x7f0000007080)=""/11, 0xb}, 0x5194}, {{&(0x7f00000070c0)=@qipcrtr, 0x80, &(0x7f0000007380)=[{&(0x7f0000007140)=""/10, 0xa}, {&(0x7f0000007180)=""/158, 0x9e}, {&(0x7f0000007240)=""/126, 0x7e}, {&(0x7f00000072c0)=""/48, 0x30}, {&(0x7f0000007300)=""/115, 0x73}], 0x5, &(0x7f0000007400)=""/42, 0x2a}, 0x3}, {{&(0x7f0000007440)=@phonet, 0x80, &(0x7f00000074c0), 0x0, &(0x7f0000007500)=""/193, 0xc1}, 0x1}, {{&(0x7f0000007600)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000008a80)=[{&(0x7f0000007680)=""/148, 0x94}, {&(0x7f0000007740)=""/228, 0xe4}, {&(0x7f0000007840)=""/228, 0xe4}, {&(0x7f0000007940)=""/116, 0x74}, {&(0x7f00000079c0)=""/4096, 0x1000}, {&(0x7f00000089c0)=""/177, 0xb1}], 0x6, &(0x7f0000008b00)=""/107, 0x6b}, 0x319752c3}, {{&(0x7f0000008b80)=@rc={0x1f, @none}, 0x80, &(0x7f0000008c80)=[{&(0x7f0000008c00)=""/75, 0x4b}], 0x1, &(0x7f0000008cc0)=""/254, 0xfe}, 0x417d}, {{&(0x7f0000008dc0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000008f00)=[{&(0x7f0000008e40)=""/169, 0xa9}], 0x1, &(0x7f0000008f40)=""/162, 0xa2}, 0x1}, {{&(0x7f0000009000)=@rc={0x1f, @none}, 0x80, &(0x7f000000a180)=[{&(0x7f0000009080)=""/4096, 0x1000}, {&(0x7f000000a080)=""/243, 0xf3}], 0x2, &(0x7f000000a1c0)=""/87, 0x57}, 0x7}], 0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020}, 0x2020) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000140), 0x0, 0x2000400, 0x0, 0x1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) 6.443458539s ago: executing program 2 (id=4661): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) mount$fuse(0x20, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) 5.62552365s ago: executing program 1 (id=4662): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000008340)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x0, 0xf, 0xfff, 0x400, 0x2}, &(0x7f0000008400)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000008440)={r3, @in6={{0xa, 0x4e23, 0x20c, @dev={0xfe, 0x80, '\x00', 0x11}, 0x101}}, [0x4a8e, 0x5, 0x4, 0x8, 0x7, 0x1, 0x67, 0x4000000, 0x4, 0x6, 0xa, 0x1000, 0x101, 0xc295, 0x7ff]}, &(0x7f0000008540)=0xffffffffffffffac) statx(r1, &(0x7f0000000040)='./file0\x00', 0x400, 0x1, &(0x7f0000000800)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001080)={0x5, 0x6, {0xffffffffffffffff}, {0xee00}, 0xd528}) getpgrp(0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f0000000140)=""/255, &(0x7f0000000240)=0xff) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) fcntl$getownex(r0, 0x10, &(0x7f00000010c0)={0x0, 0x0}) r6 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r7 = syz_usb_connect(0x5, 0x3d, &(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES64=r5, @ANYRESOCT=r0], 0x0) syz_usb_disconnect(r7) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)='J', 0x1}], 0x1) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080)=r6, 0x12) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) kexec_load(0xffffffffffffffff, 0x0, 0x0, 0x2) 5.401846595s ago: executing program 2 (id=4663): r0 = eventfd2(0xfffffffd, 0x801) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af24, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100"], 0x18}, 0x0, 0x40000, 0x1}) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) pipe2(0x0, 0x800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60680, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x0, 0x30, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x38, 0x0, @fd, 0x1, 0x0, 0x0, 0x10, 0x1, {0x3, r10}}) syz_io_uring_submit(r7, r8, &(0x7f0000000840)=@IORING_OP_RECVMSG={0xa, 0x26, 0x1, r2, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/75, 0x4b}, {&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/254, 0xfe}, {&(0x7f0000000240)=""/3, 0x3}], 0x6}, 0x0, 0x2, 0x1, {0x2, r10}}) 5.140809422s ago: executing program 0 (id=4664): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206070002030109022a00010000000009040000db09"], 0x0) close(0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="062586c0d44dc999855a9d3cefd7768dfec2125480724340518100"/45, 0x2d}, {&(0x7f0000000400)="970000", 0x3}, {&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8b7167e5618904aa41d48ac1bd75caa8fd7e3927f5f21ab33ea7a672a6ce9a41b73fdf30daaca9929948d99f66e020dd8f3309ade190ba4d3e3f7ee6099e3520c7178196572d1ff629e257df16f1187eac57979b53881ce418ee4d200841478ae8ad6e8507a0c7ab1ddb4bb35de204f62bd244a706e04bbcd16ce45f82e7025b2", 0x90}], 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 4.400015658s ago: executing program 6 (id=4665): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) exit(0xfe) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$igmp(0x2, 0x3, 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000c80)={0x30, 0x0, 0x1, 0x0, 0x10000, 0xffffffffffff9dce, 0xe8, 0x0}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x800c2, 0x0) write$vga_arbiter(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes i'], 0xd) ptrace(0x10, r6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) keyctl$setperm(0x5, r8, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) ptrace$pokeuser(0x6, r6, 0x358, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.15373243s ago: executing program 5 (id=4666): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000e9a1969339999cd2b1540dd400000000000a20000000000a01010000ceddbde2b3ba01000000000000010000000900010073797a30000000003c000000090a0104000000000000000600000008000a40000000ea0800020073797a32000000000900010073797a3000000000080005400000000c4c0000000c0a010300a0b244ca0000000100000008000440005a8635c70001b114fd36a7692a410024000380200000800400018018000b80140001800c000100636f756e74657200040002801400000010000100001b0000f72c00000000000a00"], 0xd0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000240)='./file0\x00', 0x2802, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0xfffdfffd, 0x25dfdbfa, {{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x7}, {0x4, 0x8, 0x0, 0x2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e22, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}}, 0x4044004) mprotect(&(0x7f0000a15000/0x1000)=nil, 0x1000, 0x5) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r6, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=""/194, 0xc2}], 0x1}, 0x6}], 0x1, 0x40000001, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f35f9b0f1d5e10505f04f71953a83feb7bf92a972b2ce7078e010cbd7635974f7e65de83e096e3c2dfd45cfd6c27dca02424549ae8724a1041b602be9dcd108ccf2ac66751c244e770b305b43f663473015c4516449415f93fd0aca3755fb8b5fc885bd275182a27fa3a0d9f2a5c3013f89fe2fea2445149dd2d1862a6bcb9b07189c91b95116806e26fbe5266e7045e52c96b6a7c3e5339d2b2f2594b088eb6f517445d3afcba0ce6b394e5f3c264a8226808eb9fb78ff8fe2e6a6202", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) write$FUSE_IOCTL(r6, &(0x7f00000002c0)={0x20, 0x0, r8, {0x2, 0x0, 0x2, 0x9}}, 0x20) bind$can_raw(r5, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) read$FUSE(r3, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000000200)={0x20, 0x0, r9, {0x7, 0x0, 0xfffffffc, 0x1ff}}, 0x20) fanotify_mark(r2, 0x161, 0x40000867, r3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 3.863700404s ago: executing program 5 (id=4667): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 64) r2 = socket(0x2b, 0x80801, 0x1) bind$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000100)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000080)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB="03000000000050c691906de73600000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="04000000050000000100"/28], 0x50) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYBLOB="a7a47eadde80ee29ecea852ec99db441dd37e82fb3575adb51e90ccb59444ac28f2bda0799ca69699cf22003d0d99f65a4a10fe7d54852408085997df40f451423eddca2a83e49665064c5107f1ba4a4c078980f660731bab978de816048ecb828e6ccbdd9980b47e499f7fcbf7b621dfd98586916108f2a17b7319a23408e5c8f", @ANYBLOB="140012800b0001006d61630a81f1d43b7f91e6cdcfcc07a695c0189fe9fd6164e0cc50a581b2ff218746f229bbf47a2403bd1efa8a1cdd0c688e281fe9c7840af9ec64a00ae19df3d1823efb462d67ca2bdfc49bafc5580081015a91538385b710e485348d4d6cc784c0c87f0e322458b81fb9f2a3d4d974"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.578471043s ago: executing program 5 (id=4668): unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x38}}, 0x8040) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_clone(0x4010100, &(0x7f0000000000)="4f0958389bea95230f78efe92b858fe2069bc6261216dec7b11beff4a12ed1fab83e62dbcfb042adf77c", 0x2a, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.559703461s ago: executing program 2 (id=4669): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa08, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) (async, rerun: 64) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000", @ANYBLOB="f0f406d08062895407a7f7e8ee572fa81b3afc3dd0ac4d247a11b604a1b03bc33a654aa80c888734b69eb944af5fd5f55e19ceb1d3b750ed6885e79087e409a1269f299f6feedde961133efe1ab924ee400af7ed390ce3ad492c50b80fb85b8103f3917c3c2e4a91f5dfc79bb6cc74b2fcea18ef5624a19f97be3955f46e1867302d2cfcc9ccdf65ec5358a810091186aabff36e53c23c9dd595c6fa23bee25ff290b2d25e6a1f754171e14e9010ce5c75d4192c393e15cfc721e4d1ab80c59c27de1278", @ANYRES16=r1], 0xb4}, 0x1, 0x0, 0x0, 0xc014}, 0x40000) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000004f40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000003e00)=@newsa={0x108, 0x10, 0x100, 0x70bd29, 0x25dfdbff, {{@in6=@private1, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0x20, 0x11, 0x0, r4}, {@in=@broadcast, 0x4d5, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x9, 0xb8a, 0x8000000000000000, 0x100, 0x100, 0xfffffffffffffffe, 0x7, 0x9}, {0x1, 0xfffffffffffffffa, 0x800}, {0x7, 0x25d2, 0x101}, 0x70bd29, 0x3506, 0x2, 0x4, 0x82, 0x100}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xa}]}, 0x108}}, 0x28880) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000103f440f40b47e716de9e5c4ad4746c559390fdb000107000000000000000a000000f20d"], 0x20}}, 0x800) (async) recvmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) 3.193928716s ago: executing program 2 (id=4670): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dbea210a5036f75d0fdb19ada952cef0a5d7644dbe60b75985b966e187c24142d984006d85b9e10b1ed03bf82e62a73e388e4336c3ca57bed058c2049cd463bc36c58c122dd9da14d2e28821b90add24c585a4881fb1cf66c6400ba1e553e4ba16b494965d9050388d15ec971a9be1c347bbd5f601701000000f6c95c3f8c170c254c7161b4cd37ffbf27046fd24f0000000000000000", @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB="07fafb0a001411b6a9b793248ac8c07665266a3fc44cdef97b7249695259a30b55846b50dd24ccf121ad80f76c43bef956802b55981f5629c0dfbb9064a338d136e9af982446a0bb2d635fd51629882c205aadb3030000005ba4f04c11c942f9c9369a2630cd50b998a0ffe51f55a76dc7b6d7242856f645e846576116b351002349"], 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000000c0)={r5, 0x1, r6, 0x4, 0x80000}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x1, 0x0, 0x80000001, 0xfffffffffffffffd, 0x1000, 0x9, 0x105}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, 0x0, 0xfffffffffffffeea) bind$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x41) sched_getattr(0xffffffffffffffff, &(0x7f0000000040)={0x38}, 0x38, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file3\x00', 0xc000, 0x10000) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, 0x0, 0x0) 2.852309025s ago: executing program 5 (id=4671): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x85, 0xa7, 0x81, 0x9, 0xf9a2, 0xa0000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7fe, 0x4, 0x4007f, 0xffffffff, 0x6, 0x1], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x7, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009"], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.467601627s ago: executing program 6 (id=4672): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) dup(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0xb, 0x2, 0x3}, 0x0, &(0x7f0000000400)={0x7fc, 0x12, 0x800000, 0x0, 0x0, 0xc3ad, 0x4}, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x3, 0x8, 0xa, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x80, 0x8}}) r5 = getuid() sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@migrate={0x268, 0x21, 0x100, 0x70bd2d, 0x25dfdbfe, {{@in6=@empty, @in=@loopback, 0x4e24, 0x6, 0x4e21, 0x6, 0x2, 0x20, 0x0, 0x88, 0x0, r3}, 0x6e6bbf, 0x1}, [@policy_type={0xa, 0x10, {0x1}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2b, 0x6}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_auth_trunc={0x147, 0x14, {{'rmd160-generic\x00'}, 0x7d8, 0xa0, "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"}}, @policy={0xac, 0x7, {{@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4e24, 0x8, 0x4e23, 0x380, 0x2, 0x80, 0x0, 0x84, r4, r5}, {0x7, 0x8000, 0xe, 0x1000, 0x1, 0x5, 0x0, 0x5}, {0x100000000, 0x0, 0x909}, 0x4, 0x6e6bb3, 0xa83f8cb2dfce265a, 0x0, 0x2, 0x2}}]}, 0x268}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000001c0)={r10}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={r10, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000600)={r11}, &(0x7f00000001c0)=0x8) 2.31793134s ago: executing program 1 (id=4673): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) unshare(0x22020400) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (fail_nth: 3) 2.311165088s ago: executing program 5 (id=4674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x3, 0x40800) ioctl$I2C_SLAVE(r3, 0x703, 0x43) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, &(0x7f0000000100)={0x41, &(0x7f0000000180)="6a16cebaf679809ad0b1be0c77578d5e87953bd6a9683a0f022d1cb6b2a925bf4ba4bdbd0614bbd1e03fdf3ea8592ab284ba4aa5a072fe957f760cb04f90d52e2e"}) syz_open_dev$vim2m(&(0x7f0000000140), 0x3ff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x20, 0x0, 0x26, {0x26, 0x22, "80130beac53a81cd169674fdf4659a28f599e761b5a28837efa002b96c623482a8581512"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000300)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x8, "3d756aa5"}, @main=@item_4={0x3, 0x0, 0xb, "b6a3e069"}, @local=@item_4={0x3, 0x2, 0xa, "7c75b9b5"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xa5, 0x1, {0x22, 0x8f1}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x20, 0x18, 0xb, "d910f90d3d1c8c5dbc1ad8"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xf7}, &(0x7f00000004c0)={0x20, 0x1, 0x94, "8bfe4022387f18ce33acb9d4484ef72d985bb3619cb03bac079647b5cd71b004dbf0f7f9aa36e4ea7a14fac102c08ec5e26d20b84040c76a35866b7d0fa0a27e5877f59d1fe0aa58de8335b9d5f7fcc1e69a84aba1d8fe7bcdcdf92eede6d77a2eae364cbdb650ad8a85b48d0462d5a8e1fc5444364dc3eedc3d753122d7ab057302e8bef8f88c6c4733c1fb9253294f16722e00"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x8}}) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x1d8, 0x24, 0x5820a61ca228651, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0xffff, 0x6}, {0x5, 0xfff2}, {0x0, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1a8, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x6, 0xaef, 0xf, 0x6, 0xffff, 0x7, 0x2b, 0x80000001, 0x101, 0x1, 0x7, 0x12, 0xb, 0x4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0x6, 0x1, 0x4}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x7d74, 0x7ff, 0xc, 0x4, 0x5fe60f37, 0xfffffffb, 0x0, 0x6, 0x2, 0x400, 0x20, 0x16, 0x15, 0x92, 0x2, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xfff}, @TCA_GRED_DPS={0x10, 0x3, {0xf, 0x6, 0x1, 0x3}}]}}]}, 0x1d8}}, 0x8014) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.928820973s ago: executing program 0 (id=4675): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x10, 0x0, 0x7fff0000}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x10, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xff, 0x80000001, 0x100, 0x5, 0xa}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.765925304s ago: executing program 0 (id=4676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x4000) r4 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6, 0x393}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 1.76080713s ago: executing program 1 (id=4677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x5, @loopback, 0xfffff000}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090900010073797a300000000074000000160a030000000000000000000200000a4000038008000140000000002c00038014000100776c616e3000000000000000000000001400010070696d3672656731000000000000000008000240000000020900020073797a31000000000900010073797a300000000008000740000000e8"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r1, 0x2) 1.649836213s ago: executing program 1 (id=4678): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000001000000000000000800000018230000", @ANYRES32=r2, @ANYBLOB="00000000041dfdff0900000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff5, &(0x7f00000013c0)=""/4085}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r0, 0x0, 0x100000001) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000180)={r4, r5/1000+10000}, 0x10) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.083673272s ago: executing program 1 (id=4679): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d2, 0x2, 0x45, 0x227}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x4, 0xa}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x94}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.055608668s ago: executing program 6 (id=4680): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r0, 0x9) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000007c0), 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000780)='./file0\x00', 0x800, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) syz_clone(0x1100000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) (async) syz_clone(0x1100000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) close(r1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x4}}}}}]}}]}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xacae, 0x100, 0x1}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r5, 0x20, 0x1, 0xd, 0x0, 0x18) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000073013a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="f2fa154752a8"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c1) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) (async) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x5, 0x1, &(0x7f0000000080)='x') syz_usb_control_io$hid(r4, &(0x7f0000000480)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="200dae000000ae2319c57b849576fc44945ef26ba34b87c4aab193c9c05edd1b9b8dea1bcefecaaaaa0697ff7676f8a9a6c89defe1581d40e269b863d32fd6f5ff6f13565a31da7c3b17abd5bec81ce0624efe2ef411042032775576bb754f22d3c8da75337ef64db15a784a05d381e24d069d5d9e85cb593fcd8fb1174798bf47a1243cc42ff14c53bce83d51bd5da8bf2c51846658b50160238f1da74f8ee26b9a426502b2ff2c32d26bdd6eac8e616d6ae1b9"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000400)=ANY=[@ANYBLOB="00220b00000457a9de7ddf834bbb398174"], &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x5c7}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x40, 0x10, 0xc7, "743f496c165f610b10cfb491c91ebd260f76b7d4a202c8449ee937d060f38485fac6e3918cab34740bbfdb5270d76139dd9b1e7313cc5b945461584a20ca2c1bce4d20aad4f5c9e6420616ba43a9a6704cfad8b1484cf384002d909d5012fd4e2853efb335d86d836e95394bedad80a059acccc7c4bb0acceee185fd13460668e58f4f914bc0153979c5b0c499ffddcae023206ffce8b544c52d358742f86f7c4984c80a0ee3f9537c14892ff33d6d904bb33ef4ae47d843abb1c94f34d0fec4d98b96f947bf28"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x1, 0x15, "b8c67e65f28ee888c73d651950b809f9b000fa4ff8"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xe6}}) (async) syz_usb_control_io$hid(r4, &(0x7f0000000480)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="200dae000000ae2319c57b849576fc44945ef26ba34b87c4aab193c9c05edd1b9b8dea1bcefecaaaaa0697ff7676f8a9a6c89defe1581d40e269b863d32fd6f5ff6f13565a31da7c3b17abd5bec81ce0624efe2ef411042032775576bb754f22d3c8da75337ef64db15a784a05d381e24d069d5d9e85cb593fcd8fb1174798bf47a1243cc42ff14c53bce83d51bd5da8bf2c51846658b50160238f1da74f8ee26b9a426502b2ff2c32d26bdd6eac8e616d6ae1b9"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000400)=ANY=[@ANYBLOB="00220b00000457a9de7ddf834bbb398174"], &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x5c7}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x40, 0x10, 0xc7, "743f496c165f610b10cfb491c91ebd260f76b7d4a202c8449ee937d060f38485fac6e3918cab34740bbfdb5270d76139dd9b1e7313cc5b945461584a20ca2c1bce4d20aad4f5c9e6420616ba43a9a6704cfad8b1484cf384002d909d5012fd4e2853efb335d86d836e95394bedad80a059acccc7c4bb0acceee185fd13460668e58f4f914bc0153979c5b0c499ffddcae023206ffce8b544c52d358742f86f7c4984c80a0ee3f9537c14892ff33d6d904bb33ef4ae47d843abb1c94f34d0fec4d98b96f947bf28"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x1, 0x15, "b8c67e65f28ee888c73d651950b809f9b000fa4ff8"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xe6}}) 394.041545ms ago: executing program 0 (id=4681): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) close(r0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000001000010405d600000200000000000000", @ANYRES32=0x0, @ANYBLOB="211a0000000000006c00128008000100687372006000028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="0500030003000000050006"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 344.458255ms ago: executing program 1 (id=4682): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r1, @ANYRESHEX=r5], 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="19c46c87537737a0dc91", 0xa}], 0x1}}], 0x1, 0x3404c8d4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x2}, 0x8) 299.29836ms ago: executing program 0 (id=4683): r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000001580)={0x0, [], [{0x48a8, 0x5}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x101}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0xfffffffc}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f00000000c0)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) read(r4, &(0x7f0000000000)=""/70, 0xfffffe1b) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000400)={0x8, [[0xc, 0xea4ad12, 0x9, 0x10001, 0x1, 0x1, 0x4], [0x7, 0xfc1a, 0x2, 0x6, 0x8, 0x9, 0x0, 0x6], [0x0, 0x9, 0x4, 0xea81, 0xe, 0x3, 0x3, 0xffff]], '\x00', [{0x0, 0x1, 0x1, 0x1, 0x1}, {0x8001, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x7f41, 0x1}, {0x0, 0x200, 0x1}, {0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x7, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x558, 0x8, 0x0, 0x1, 0x0, 0x1}, {0xaf8, 0x39, 0x0, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x25, 0x0, 0x7ffc, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) splice(r5, 0x0, r6, 0x0, 0x8, 0xc) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port1\x00', 0x89, 0x14, 0x4, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0xe8, 0xe5, 0x10, 0x13b1, 0x42, 0xdcc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x44, 0x0, 0x1, 0x2e, 0xaf, 0xb2, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x400, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408d5}, 0x800) 0s ago: executing program 2 (id=4684): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x244000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x0, r3, 0x0, 0x7ffffff5, 0xa, 0x1ff, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x1, r3, 0x6, 0x8, 0xa64, 0xb9, 0xaf, 0x4a23f963, 0x5}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') read$FUSE(r4, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000040)={r10}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06464ce, &(0x7f0000000700)={r10, 0xdf, 0x7, 0x6, 0x1, [], [0x7, 0x7, 0x8001, 0x5], [0x1, 0x4, 0x3, 0x6], [0x7, 0xf, 0x3, 0x2]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000300)={0x0, 0x8, 0x6, 0x2, 0x2, [0x0, 0x0], [0x3, 0x3, 0xf, 0x3], [0x80a5, 0x9, 0x19, 0xb5], [0x4, 0x74ece97e, 0x7fffffffffffffff, 0x1]}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)='./file0\x00') ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={0x0, 0x9, 0x4, 0x4, 0x1, [0x0, 0x0], [0x7fffffff, 0x7, 0x5, 0x5], [0x3d1, 0x0, 0xfff, 0x88e], [0xff, 0x6, 0xfffffffffffffff9, 0x8000000000000000]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000400)={r10, 0x3ff, 0x1, 0x401, 0x1, [r11, r12, r13], [0x2, 0xe, 0x7, 0xc0000], [0x5, 0x7fff, 0x7, 0x4], [0x9, 0x10000, 0x6fb6, 0x4]}) getsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000001100)=""/4096, &(0x7f00000010c0)=0x1000) kernel console output (not intermixed with test programs): use=failed comm="syz.3.4282" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1275.636455][ T5900] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 1275.803849][ T5900] usb 1-1: Invalid ep0 maxpacket: 64 [ 1275.810210][ T5900] usb usb1-port1: attempt power cycle [ 1276.172639][ T5900] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 1276.202882][ T5900] usb 1-1: Invalid ep0 maxpacket: 64 [ 1276.332231][ T5900] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 1276.352976][ T5900] usb 1-1: Invalid ep0 maxpacket: 64 [ 1276.358644][ T5900] usb usb1-port1: unable to enumerate USB device [ 1276.365331][T15817] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1276.472164][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1276.522291][T15817] usb 2-1: Using ep0 maxpacket: 32 [ 1276.543217][T15817] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1276.552520][T15817] usb 2-1: config 0 has no interface number 0 [ 1276.558660][T15817] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1276.572526][T15817] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1276.583930][T15817] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1276.600194][T15817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.608592][T15817] usb 2-1: Product: syz [ 1276.612879][T15817] usb 2-1: Manufacturer: syz [ 1276.617491][T15817] usb 2-1: SerialNumber: syz [ 1276.625860][T15817] usb 2-1: config 0 descriptor?? [ 1276.632490][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1276.640837][ T24] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1276.650178][ T24] usb 4-1: config 0 has no interface number 0 [ 1276.656657][ T24] usb 4-1: too many endpoints for config 0 interface 12 altsetting 2: 235, using maximum allowed: 30 [ 1276.667867][ T24] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1276.677893][ T24] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1276.687836][ T24] usb 4-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 235 [ 1276.701238][ T24] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1276.710709][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1276.719997][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.728507][ T24] usb 4-1: Product: syz [ 1276.732917][ T24] usb 4-1: Manufacturer: syz [ 1276.737561][ T24] usb 4-1: SerialNumber: syz [ 1276.747374][ T24] usb 4-1: config 0 descriptor?? [ 1276.755954][ T24] f81534 4-1:0.12: unsupported endpoint max packet size [ 1277.057973][ T5900] usb 4-1: USB disconnect, device number 60 [ 1277.110498][T15817] appletouch 2-1:0.85: Geyser mode initialized. [ 1277.123580][T15817] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input128 [ 1277.407467][ T5900] usb 2-1: USB disconnect, device number 50 [ 1277.482797][ T5900] appletouch 2-1:0.85: input: appletouch disconnected [ 1277.491053][T24374] binder: 24373:24374 ioctl c0306201 200000000080 returned -14 [ 1277.516245][T24374] binder: 24373:24374 ioctl 4008ae8a 200000000140 returned -22 [ 1277.591110][T24379] fuse: Unknown parameter '0x0000000000000003' [ 1277.877182][T24387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4296'. [ 1277.904727][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4296'. [ 1277.915558][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4296'. [ 1277.926186][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4296'. [ 1278.053053][ C0] blk_print_req_error: 98 callbacks suppressed [ 1278.053074][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.068533][ C0] buffer_io_error: 98 callbacks suppressed [ 1278.068553][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1278.088341][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.097638][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 1278.105625][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.114854][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 1278.127739][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.137043][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1278.147569][T24390] netlink: 'syz.1.4298': attribute type 10 has an invalid length. [ 1278.161289][T24390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4298'. [ 1278.170524][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.170564][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 1278.170677][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.170709][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 1278.208906][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.218157][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1278.226659][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.235877][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 1278.243830][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.253045][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 1278.262678][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.271981][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1278.284682][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1278.293103][ T5200] Dev loop7: unable to read RDB block 0 [ 1278.297241][T24390] fuse: Bad value for 'user_id' [ 1278.301311][ T5200] loop7: unable to read partition table [ 1278.304426][T24390] fuse: Bad value for 'user_id' [ 1278.309919][ T5200] loop7: partition table beyond EOD, truncated [ 1278.400961][T24402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.412594][T15817] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1278.586032][T15817] usb 6-1: not running at top speed; connect to a high speed hub [ 1278.597405][T15817] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1278.609182][T15817] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1278.640715][T15817] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1278.656969][T15817] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1278.667093][T15817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1278.676894][T15817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.691361][T15817] usb 6-1: Product: syz [ 1278.696266][T15817] usb 6-1: Manufacturer: syz [ 1278.701021][T15817] usb 6-1: SerialNumber: syz [ 1278.721190][T24396] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1278.731164][T24396] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1278.740912][T24396] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1279.043389][T15817] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1279.101663][T15817] usb 6-1: USB disconnect, device number 65 [ 1279.172680][ T10] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1279.346045][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1279.416278][ T10] usb 2-1: config 0 has no interface number 0 [ 1279.446222][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1279.468178][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.494086][ T10] usb 2-1: Product: syz [ 1279.501549][ T10] usb 2-1: Manufacturer: syz [ 1279.518797][ T10] usb 2-1: SerialNumber: syz [ 1279.531531][ T10] usb 2-1: config 0 descriptor?? [ 1279.571203][ T10] hub 2-1:0.132: bad descriptor, ignoring hub [ 1279.612847][ T10] hub 2-1:0.132: probe with driver hub failed with error -5 [ 1279.672842][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input129 [ 1279.700526][T24437] fuse: Unknown parameter '0x0000000000000003' [ 1280.662466][ T10] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1280.812222][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1280.817506][T15817] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1280.827913][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.838970][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1280.848212][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.858827][ T10] usb 6-1: config 0 descriptor?? [ 1280.972382][T15817] usb 4-1: Using ep0 maxpacket: 16 [ 1280.984157][T15817] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1280.993474][T15817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.001580][T15817] usb 4-1: Product: syz [ 1281.005915][T15817] usb 4-1: Manufacturer: syz [ 1281.010669][T15817] usb 4-1: SerialNumber: syz [ 1281.019249][T15817] usb 4-1: config 0 descriptor?? [ 1281.027856][T15817] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1281.286976][ T10] mcp2221 0003:04D8:00DD.0057: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1281.454646][T24468] binder: 24467:24468 ioctl c0306201 200000000b80 returned -14 [ 1281.500230][T15817] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 1281.536335][T24474] delete_channel: no stack [ 1281.544485][T15817] visor 4-1:0.0: probe with driver visor failed with error -71 [ 1281.547798][T24474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.556664][T15817] usb 4-1: USB disconnect, device number 61 [ 1281.567552][T24474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.582702][ T24] usb 6-1: USB disconnect, device number 66 [ 1281.963353][T15817] usb 2-1: USB disconnect, device number 51 [ 1282.582180][T15817] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1282.716019][T24488] xt_limit: Overflow, try lower: 167772/2147483648 [ 1282.732366][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1282.762546][T15817] usb 4-1: Using ep0 maxpacket: 32 [ 1282.773909][T15817] usb 4-1: config 0 has an invalid interface number: 250 but max is 2 [ 1282.783441][T15817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.811447][T15817] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1282.842374][T15817] usb 4-1: config 0 has no interface number 0 [ 1282.851803][T15817] usb 4-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1282.871717][T15817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.892510][T15817] usb 4-1: Product: syz [ 1282.899662][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1282.901704][T15817] usb 4-1: Manufacturer: syz [ 1282.914808][T15817] usb 4-1: SerialNumber: syz [ 1282.925573][T15817] usb 4-1: config 0 descriptor?? [ 1282.938320][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1282.943565][T15817] uvcvideo 4-1:0.250: probe with driver uvcvideo failed with error -22 [ 1282.948146][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.975588][ T24] usb 1-1: Product: syz [ 1282.983877][ T24] usb 1-1: Manufacturer: syz [ 1282.997353][ T24] usb 1-1: SerialNumber: syz [ 1283.014631][ T24] usb 1-1: config 0 descriptor?? [ 1283.144509][T24480] x_tables: duplicate underflow at hook 1 [ 1283.153333][ T8003] usb 4-1: USB disconnect, device number 62 [ 1283.432215][T15817] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1283.582364][T15817] usb 2-1: Using ep0 maxpacket: 32 [ 1283.589721][T15817] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1283.598617][T15817] usb 2-1: config 0 has no interface number 0 [ 1283.606286][T15817] usb 2-1: config 0 interface 132 has no altsetting 0 [ 1283.617956][T15817] usb 2-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 1283.638199][T15817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.656953][T15817] usb 2-1: Product: syz [ 1283.668371][T15817] usb 2-1: Manufacturer: syz [ 1283.674083][T15817] usb 2-1: SerialNumber: syz [ 1283.683296][T15817] usb 2-1: config 0 descriptor?? [ 1283.891949][T15817] cdc_subset 2-1:0.132: probe with driver cdc_subset failed with error -71 [ 1283.907046][T15817] usb 2-1: USB disconnect, device number 52 [ 1283.982243][ T8003] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1284.120058][T24501] fuse: Unknown parameter 'fd0x0000000000000003' [ 1284.132297][ T8003] usb 4-1: Using ep0 maxpacket: 32 [ 1284.139533][ T8003] usb 4-1: config 0 has an invalid interface number: 38 but max is 0 [ 1284.148347][ T8003] usb 4-1: config 0 has no interface number 0 [ 1284.155256][ T8003] usb 4-1: config 0 interface 38 has no altsetting 0 [ 1284.165306][ T8003] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 1284.174601][ T8003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.183018][ T8003] usb 4-1: Product: syz [ 1284.187307][ T8003] usb 4-1: Manufacturer: syz [ 1284.191918][ T8003] usb 4-1: SerialNumber: syz [ 1284.199246][ T8003] usb 4-1: config 0 descriptor?? [ 1284.210408][ T8003] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1284.666213][T24499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.713929][T24499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.733195][ T8003] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1284.740744][ T8003] gspca_pac7302 4-1:0.38: probe with driver gspca_pac7302 failed with error -110 [ 1284.867746][ T8003] usb 4-1: USB disconnect, device number 63 [ 1285.070498][T24518] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1285.213052][T15817] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1285.266387][T24527] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4342'. [ 1285.343414][ T8003] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1285.372497][T15817] usb 2-1: Using ep0 maxpacket: 32 [ 1285.387876][T15817] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a5, bcdDevice=eb.4c [ 1285.397412][T15817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.421611][T15817] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1285.458285][ T24] usb 1-1: USB disconnect, device number 34 [ 1285.494319][T15817] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1285.500736][T15817] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1285.507720][ T8003] usb 4-1: device descriptor read/64, error -71 [ 1285.575938][T24534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1285.576914][T24535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4344'. [ 1285.643920][T15817] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1285.650350][T15817] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1285.732298][T15817] usb 2-1: dvb_usb_v2: found a 'Terratec H7 Rev.4' in warm state [ 1285.754527][T15817] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1285.765012][ T8003] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1285.775479][T15817] dvbdev: DVB: registering new adapter (Terratec H7 Rev.4) [ 1285.784017][T15817] usb 2-1: media controller created [ 1285.789828][T15817] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1285.799173][T15817] usb 2-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 1285.826736][T15817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1285.902236][ T8003] usb 4-1: device descriptor read/64, error -71 [ 1285.922323][ T24] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1285.941057][T15817] usb 2-1: USB disconnect, device number 53 [ 1285.952282][ T10] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1286.013135][ T8003] usb usb4-port1: attempt power cycle [ 1286.087928][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.098021][ T24] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1286.104610][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.107160][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.127348][ T10] usb 6-1: config 0 has no interfaces? [ 1286.131156][ T24] usb 1-1: config 0 descriptor?? [ 1286.134269][ T10] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1286.147582][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.159175][ T10] usb 6-1: config 0 descriptor?? [ 1286.352383][ T8003] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1286.404161][ T8003] usb 4-1: device descriptor read/8, error -71 [ 1286.441951][T24539] x_tables: duplicate underflow at hook 1 [ 1286.520651][ T10] usb 6-1: USB disconnect, device number 67 [ 1286.573982][ T24] hid-led 0003:1294:1320.0058: unknown main item tag 0x0 [ 1286.583568][ T24] hid-led 0003:1294:1320.0058: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 1286.605814][ T24] hid-led 0003:1294:1320.0058: Riso Kagaku Webmail Notifier initialized [ 1286.655402][ T8003] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1286.683819][ T8003] usb 4-1: device descriptor read/8, error -71 [ 1286.777380][ T10] usb 1-1: USB disconnect, device number 35 [ 1286.794123][ T8003] usb usb4-port1: unable to enumerate USB device [ 1286.804786][ T3490] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1286.814897][T11018] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1286.828787][T11018] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1287.168282][T24555] fuse: Unknown parameter 'fd0x0000000000000003' [ 1287.977330][T24568] program syz.2.4353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1288.169105][T24573] syzkaller0: tun_net_xmit 18 [ 1288.392247][ T10] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1288.628803][ T10] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1288.637522][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.694590][ T10] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1288.721453][ T10] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1288.741614][ T10] usb 6-1: Manufacturer: syz [ 1288.800334][ T10] usb 6-1: config 0 descriptor?? [ 1289.122537][ T10] rc_core: IR keymap rc-hauppauge not found [ 1289.129699][ T10] Registered IR keymap rc-empty [ 1289.139520][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1289.153462][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input130 [ 1289.167966][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1289.411103][ T10] usb 6-1: USB disconnect, device number 68 [ 1290.030030][T24598] No such timeout policy "syz0" [ 1290.343643][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1290.459828][T24610] fuse: Unknown parameter 'fd0x0000000000000003' [ 1290.522883][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1290.530403][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1290.540484][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.551805][ T10] usb 4-1: config 0 descriptor?? [ 1290.785713][T15825] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1290.877102][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4366'. [ 1290.960307][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1290.973247][T15825] usb 1-1: Using ep0 maxpacket: 16 [ 1291.127071][T15825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.149985][T15825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.166575][T15825] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1291.177568][T15825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.279244][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1291.287742][ T10] dib0700: firmware download failed at 7 with -22 [ 1291.299363][ T10] usb 4-1: USB disconnect, device number 68 [ 1291.410912][T15825] usb 1-1: config 0 descriptor?? [ 1291.416403][ T5833] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1291.803622][ T5833] usb 6-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1291.814404][ T5833] usb 6-1: config 48 interface 0 altsetting 98 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1291.830666][ T5833] usb 6-1: config 48 interface 0 has no altsetting 0 [ 1291.841823][ T5833] usb 6-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 1291.871135][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.893420][ T5833] usb 6-1: Product: syz [ 1291.897660][ T5833] usb 6-1: Manufacturer: syz [ 1291.912400][ T5833] usb 6-1: SerialNumber: syz [ 1291.919896][T24612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.930116][T24612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.025776][T24620] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1292.034665][T24620] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1292.069824][T15825] zeroplus 0003:0C12:0030.0059: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.0-1/input0 [ 1292.095934][T15825] zeroplus 0003:0C12:0030.0059: no inputs found [ 1292.144134][T15825] usb 1-1: USB disconnect, device number 36 [ 1292.229337][T24636] sctp: [Deprecated]: syz.3.4369 (pid 24636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1292.229337][T24636] Use struct sctp_sack_info instead [ 1292.345750][T24637] fido_id[24637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1292.514053][T24642] ALSA: mixer_oss: invalid OSS volume 'u' [ 1292.520033][T24642] ALSA: mixer_oss: invalid OSS volume 'KÙðÎçøE(ÒE…–½Ö¤Yºë¯a³]f¨ ' [ 1292.532369][T24642] ALSA: mixer_oss: invalid OSS volume 'ŠøI' ÄYÙÙôx¾†Ý\8' [ 1292.550887][T24642] ALSA: mixer_oss: invalid OSS volume '“KA•w…Õˆ«ÿiIñ¹LÒrJÿ4¬EÇmͽ' [ 1292.580495][T24642] ALSA: mixer_oss: invalid OSS volume '¹X*ÎyÄ“þÒˆš¬ |)¶ÂSv'ºÖMô3' [ 1292.589939][T24642] ALSA: mixer_oss: invalid OSS volume '&οer5ë¸ü<Ô-{kUqvW~¤7ó¢–|' [ 1292.602296][T24642] ALSA: mixer_oss: invalid OSS volume '/Ó‘Å+¯¾eøè!5ý86| CÉ‚²óçË' [ 1292.620678][T24642] ALSA: mixer_oss: invalid OSS volume 'óÈÇaøQÞ4̳È–ñ~ç›A$nVnÝrÛ' [ 1292.729998][T24642] ALSA: mixer_oss: invalid OSS volume 'ËÊÉ•›¬§ïB\Ì,ÐPs9 HoŸFŽ²‡r˜' [ 1292.747065][T24642] ALSA: mixer_oss: invalid OSS volume ')™KŒ4¸7`ìá.Ùí|=*‰Íò:þ}±¿4*' [ 1292.816640][T24642] ALSA: mixer_oss: invalid OSS volume 'Ï!ò|' [ 1292.825760][T24642] ALSA: mixer_oss: invalid OSS volume 'ÊJ' [ 1292.831872][T24642] ALSA: mixer_oss: invalid OSS volume 'òUeIg’=c•­Â¸Ö‹‹Í“ÝõhXyÛC„ì9' [ 1292.849700][T24642] ALSA: mixer_oss: invalid OSS volume 'øC<žŠ—_ÝE=¦b£?©ðõúý²´ƒûH7' [ 1292.878629][T15825] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1292.898049][T24642] ALSA: mixer_oss: invalid OSS volume '–rFà·cß‹;Ç’JlvıøÛú;1.h´ëg¾' [ 1292.915194][T24642] ALSA: mixer_oss: invalid OSS volume '®' [ 1292.921378][T24642] ALSA: mixer_oss: invalid OSS volume 'yBqþL¼aêú'M‡ÐmÐŒ_ŠdÔn÷µD&¼' [ 1292.931098][T24642] ALSA: mixer_oss: invalid OSS volume '|÷økªÀ¾GþhÎòó¿¿oºQÞæˆ6' [ 1292.941606][T24642] ALSA: mixer_oss: invalid OSS volume 'îVåüsí1Àâ’Jå Éy[ïÜÛó¬'&[w´ô›­àŽÚn)¼Y3ïEFÛI' [ 1293.110249][T15825] usb 2-1: Manufacturer: syz [ 1293.111418][T24642] ALSA: mixer_oss: invalid OSS volume '³ö_¸ˆLÿ>™úµú‹Ÿ rËDÛM' [ 1293.123834][T24642] ALSA: mixer_oss: invalid OSS volume 'HÙìùs7dâÄ' [ 1293.130596][T15825] usb 2-1: SerialNumber: syz [ 1293.133442][T24642] ALSA: mixer_oss: invalid OSS volume '­‚ÆJˆË/ÙÝšO5æ§ô·@gô¾?©Raö±' [ 1293.144780][T24642] ALSA: mixer_oss: invalid OSS volume 'Ùæ ÒÄO¢#|I«øXÉw7ý!йT'g¾Óóš' [ 1293.153531][T24642] ALSA: mixer_oss: invalid OSS volume 'UÖU’I@W;dÛÔ*( ÝÄ4ù0?Û½Ç-±IL' [ 1293.171495][T24642] ALSA: mixer_oss: invalid OSS volume '‹r,4fAçÄrïJpX:' [ 1293.224977][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 1293.233892][ T5920] usb 4-1: config index 0 descriptor too short (expected 3620, got 36) [ 1293.242734][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.254614][ T5920] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1293.264324][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.284854][ T5920] usb 4-1: config 0 descriptor?? [ 1293.656797][ T5833] usb 6-1: USB disconnect, device number 69 [ 1293.814096][T15825] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1293.844004][T15825] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1293.868673][T15825] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1293.881175][T15825] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1293.892005][T15825] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1293.911180][T15825] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1293.929401][T15825] usb 2-1: USB disconnect, device number 54 [ 1293.982477][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1294.162230][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1294.169485][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.181986][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.193735][ T10] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1294.203861][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.216457][ T10] usb 1-1: config 0 descriptor?? [ 1294.623586][T24666] fuse: Bad value for 'user_id' [ 1294.628727][T24666] fuse: Bad value for 'user_id' [ 1294.641417][ T10] saitek 0003:06A3:0621.005A: item fetching failed at offset 1/5 [ 1294.665635][ T10] saitek 0003:06A3:0621.005A: parse failed [ 1294.683641][ T10] saitek 0003:06A3:0621.005A: probe with driver saitek failed with error -22 [ 1294.837762][T24654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.847817][T24654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.875442][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 1295.895974][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1295.934602][ T5920] usb 4-1: USB disconnect, device number 69 [ 1296.197901][ T30] audit: type=1326 audit(1762205090.464:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1296.266278][ T30] audit: type=1326 audit(1762205090.464:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1296.345818][ T30] audit: type=1326 audit(1762205090.504:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1296.374691][ T30] audit: type=1326 audit(1762205090.504:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1296.400908][ T30] audit: type=1326 audit(1762205090.504:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1296.575044][ T30] audit: type=1326 audit(1762205090.504:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1296.719177][ T30] audit: type=1326 audit(1762205090.504:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1296.802353][ T30] audit: type=1326 audit(1762205090.504:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1296.967535][ T30] audit: type=1326 audit(1762205090.504:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1297.084205][ T10] usb 1-1: USB disconnect, device number 37 [ 1297.150371][ T30] audit: type=1326 audit(1762205090.504:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24690 comm="syz.3.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8798efc9 code=0x7ffc0000 [ 1297.261772][T24702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4389'. [ 1297.630012][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4391'. [ 1297.902264][ T8003] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1298.055964][ T8003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.068083][ T8003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.078909][ T8003] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1298.095401][ T8003] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1298.105877][ T8003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.112612][T24719] sctp: [Deprecated]: syz.2.4394 (pid 24719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1298.112612][T24719] Use struct sctp_sack_info instead [ 1298.123496][ T8003] usb 2-1: config 0 descriptor?? [ 1298.250666][T24717] vlan0 (unregistering): left allmulticast mode [ 1298.259987][T24717] veth0_vlan (unregistering): left allmulticast mode [ 1298.269828][T24717] vlan0 (unregistering): left promiscuous mode [ 1298.551199][ T8003] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1298.573806][ T8003] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1298.655313][T15825] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1298.751824][ T5900] usb 2-1: USB disconnect, device number 55 [ 1298.768887][T24731] loop6: detected capacity change from 0 to 7 [ 1298.779413][T24731] Dev loop6: unable to read RDB block 7 [ 1298.785451][T24731] loop6: unable to read partition table [ 1298.791612][T24731] loop6: partition table beyond EOD, truncated [ 1298.798252][T24731] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1298.847354][T15825] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1298.857058][T15825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.873178][T15825] usb 1-1: config 0 descriptor?? [ 1298.884677][T15825] pwc: Creative Labs Webcam Pro Ex detected. [ 1298.922410][ T8003] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1298.945053][T24734] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1298.953928][T24734] PKCS7: Only support pkcs7_signedData type [ 1299.062423][ T8003] usb 4-1: device descriptor read/64, error -71 [ 1299.095971][T15825] pwc: Failed to set LED on/off time (-71) [ 1299.113674][T15825] pwc: send_video_command error -71 [ 1299.124979][T15825] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1299.133767][T15825] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1299.150452][T15825] usb 1-1: USB disconnect, device number 38 [ 1299.196101][T24742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1299.302312][ T8003] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1299.364264][T24745] kvm: pic: non byte read [ 1299.369074][T24745] kvm: pic: level sensitive irq not supported [ 1299.369140][T24745] kvm: pic: non byte read [ 1299.381730][T24745] kvm: pic: level sensitive irq not supported [ 1299.381785][T24745] kvm: pic: non byte read [ 1299.393694][T24745] kvm: pic: level sensitive irq not supported [ 1299.393748][T24745] kvm: pic: non byte read [ 1299.454732][ T8003] usb 4-1: device descriptor read/64, error -71 [ 1299.582341][ T8003] usb usb4-port1: attempt power cycle [ 1299.583976][T15825] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1299.667627][T24756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.678868][T24756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.689431][T24756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.699685][T24756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.742276][T15825] usb 2-1: Using ep0 maxpacket: 32 [ 1299.749352][T15825] usb 2-1: config 0 has an invalid interface number: 250 but max is 2 [ 1299.759973][T15825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.770484][T15825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1299.779592][T15825] usb 2-1: config 0 has no interface number 0 [ 1299.788018][T15825] usb 2-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1299.797360][T15825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.805511][T15825] usb 2-1: Product: syz [ 1299.809688][T15825] usb 2-1: Manufacturer: syz [ 1299.814375][T15825] usb 2-1: SerialNumber: syz [ 1299.821595][T15825] usb 2-1: config 0 descriptor?? [ 1299.830113][T15825] uvcvideo 2-1:0.250: probe with driver uvcvideo failed with error -22 [ 1299.838492][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056521400: rx timeout, send abort [ 1299.903199][ T5900] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1299.922564][ T8003] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1299.942798][ T8003] usb 4-1: device descriptor read/8, error -71 [ 1300.030925][T24747] x_tables: duplicate underflow at hook 1 [ 1300.039471][ T10] usb 2-1: USB disconnect, device number 56 [ 1300.047457][ T5900] usb 1-1: device descriptor read/64, error -71 [ 1300.182284][ T8003] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1300.202864][ T8003] usb 4-1: device descriptor read/8, error -71 [ 1300.292188][ T5900] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1300.312701][ T8003] usb usb4-port1: unable to enumerate USB device [ 1300.332808][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056522400: rx timeout, send abort [ 1300.341825][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056521400: abort rx timeout. Force session deactivation [ 1300.422446][ T5900] usb 1-1: device descriptor read/64, error -71 [ 1300.543395][ T5900] usb usb1-port1: attempt power cycle [ 1300.841813][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056522400: abort rx timeout. Force session deactivation [ 1300.882179][ T5900] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1300.913033][ T5900] usb 1-1: device descriptor read/8, error -71 [ 1300.942236][T15825] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1301.106461][T15825] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1301.145183][T15825] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1301.156720][T15825] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1301.167708][T15825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.177068][ T5900] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1301.232978][ T5900] usb 1-1: device descriptor read/8, error -71 [ 1301.352730][ T5900] usb usb1-port1: unable to enumerate USB device [ 1301.401072][T15825] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1301.412444][T15825] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input131 [ 1301.425906][T15825] input: failed to attach handler kbd to device input131, error: -5 [ 1301.477575][T15825] usb 2-1: USB disconnect, device number 57 [ 1301.602228][ T5833] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1301.742349][ T5833] usb 6-1: device descriptor read/64, error -71 [ 1301.876641][T24786] xt_hashlimit: max too large, truncated to 1048576 [ 1301.982299][ T5833] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1302.132318][ T5833] usb 6-1: device descriptor read/64, error -71 [ 1302.242784][ T5833] usb usb6-port1: attempt power cycle [ 1302.322327][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1302.472141][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1302.480537][ T10] usb 2-1: config 0 has an invalid interface number: 250 but max is 2 [ 1302.489436][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.500566][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1302.509658][ T10] usb 2-1: config 0 has no interface number 0 [ 1302.518171][ T10] usb 2-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1302.527468][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.535729][ T10] usb 2-1: Product: syz [ 1302.539947][ T10] usb 2-1: Manufacturer: syz [ 1302.544858][ T10] usb 2-1: SerialNumber: syz [ 1302.551942][ T10] usb 2-1: config 0 descriptor?? [ 1302.560573][ T10] uvcvideo 2-1:0.250: probe with driver uvcvideo failed with error -22 [ 1302.592306][ T5833] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1302.614677][ T5833] usb 6-1: device descriptor read/8, error -71 [ 1302.764811][T24793] x_tables: duplicate underflow at hook 1 [ 1302.791179][ T5920] usb 2-1: USB disconnect, device number 58 [ 1302.862309][ T5833] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1302.893753][ T5833] usb 6-1: device descriptor read/8, error -71 [ 1302.954528][T24807] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 1303.002656][ T5833] usb usb6-port1: unable to enumerate USB device [ 1303.202225][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1303.377023][ T24] usb 1-1: config 10 has an invalid interface number: 234 but max is 0 [ 1303.386100][ T24] usb 1-1: config 10 has no interface number 0 [ 1303.393794][ T24] usb 1-1: config 10 interface 234 has no altsetting 0 [ 1303.403210][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=25.db [ 1303.412423][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.420435][ T24] usb 1-1: Product: syz [ 1303.425131][ T24] usb 1-1: Manufacturer: syz [ 1303.429758][ T24] usb 1-1: SerialNumber: syz [ 1303.532279][ T5833] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1303.692203][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 1303.699499][ T5833] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1303.712879][ T5833] usb 4-1: config 0 has no interface number 0 [ 1303.723145][ T5833] usb 4-1: too many endpoints for config 0 interface 2 altsetting 66: 155, using maximum allowed: 30 [ 1303.734419][ T5833] usb 4-1: config 0 interface 2 altsetting 66 has an endpoint descriptor with address 0x6B, changing to 0xB [ 1303.753648][ T5833] usb 4-1: config 0 interface 2 altsetting 66 endpoint 0xB has invalid maxpacket 27255, setting to 64 [ 1303.773046][ T5833] usb 4-1: config 0 interface 2 altsetting 66 has 1 endpoint descriptor, different from the interface descriptor's value: 155 [ 1303.788942][ T5833] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1303.796638][ T5833] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1303.806447][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.866743][ T5833] usb 4-1: config 0 descriptor?? [ 1305.537505][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.544092][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.754366][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1305.754387][ T30] audit: type=1326 audit(1762205100.004:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1305.900639][ T30] audit: type=1326 audit(1762205100.004:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1305.984816][ T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251 [ 1306.015972][ T24] gspca_sn9c20x: Write register 1000 failed -71 [ 1306.029025][ T24] gspca_sn9c20x: Device initialization failed [ 1306.040629][ T24] gspca_sn9c20x 1-1:10.234: probe with driver gspca_sn9c20x failed with error -71 [ 1306.059436][ T24] usb 1-1: USB disconnect, device number 43 [ 1306.302711][ T5920] usb 4-1: USB disconnect, device number 74 [ 1306.340025][ T5200] Dev loop6: unable to read RDB block 7 [ 1306.408437][ T5200] loop6: unable to read partition table [ 1306.415666][ T30] audit: type=1326 audit(1762205100.004:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1306.487395][ T5200] loop6: partition table beyond EOD, truncated [ 1306.530700][ T30] audit: type=1326 audit(1762205100.004:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1306.567787][ T30] audit: type=1326 audit(1762205100.004:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1306.590791][ T30] audit: type=1326 audit(1762205100.004:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1306.631250][ T30] audit: type=1326 audit(1762205100.004:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1306.652306][ T8003] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1306.698301][ T30] audit: type=1326 audit(1762205100.014:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1306.758073][ T30] audit: type=1326 audit(1762205100.014:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1306.818101][ T30] audit: type=1326 audit(1762205100.014:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24836 comm="syz.2.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f902058efc9 code=0x7ffc0000 [ 1306.842171][ T8003] usb 1-1: Using ep0 maxpacket: 32 [ 1306.873938][ T8003] usb 1-1: config 0 has an invalid interface number: 250 but max is 2 [ 1306.882810][ T8003] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.923852][ T8003] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1306.962547][ T8003] usb 1-1: config 0 has no interface number 0 [ 1306.984018][ T8003] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1307.002136][ T8003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.045393][ T8003] usb 1-1: Product: syz [ 1307.074613][ T8003] usb 1-1: Manufacturer: syz [ 1307.091907][ T8003] usb 1-1: SerialNumber: syz [ 1307.243356][ T8003] usb 1-1: config 0 descriptor?? [ 1307.245726][T24861] netlink: 'syz.2.4441': attribute type 2 has an invalid length. [ 1307.258069][ T8003] uvcvideo 1-1:0.250: probe with driver uvcvideo failed with error -22 [ 1307.454353][T24853] x_tables: duplicate underflow at hook 1 [ 1307.480100][ T8003] usb 1-1: USB disconnect, device number 44 [ 1307.732293][ T5920] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1307.788294][T24882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4448'. [ 1307.894466][ T5920] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1307.903113][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.914633][ T5920] usb 2-1: config 0 has no interface number 0 [ 1307.920952][ T5920] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1307.933561][ T5920] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1307.951472][ T5920] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1307.962237][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.970386][ T5920] usb 2-1: Product: syz [ 1307.975104][ T5920] usb 2-1: Manufacturer: syz [ 1307.979847][ T5920] usb 2-1: SerialNumber: syz [ 1308.000867][ T5920] usb 2-1: config 0 descriptor?? [ 1308.234596][T24867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.258889][T24867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.275787][ T5920] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1308.300716][ T5920] usb 2-1: USB disconnect, device number 59 [ 1308.938818][T24906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.989094][T24906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.034307][T24908] binder: 24907:24908 ioctl c0306201 200000000b80 returned -14 [ 1309.053563][T24909] binder: BINDER_SET_CONTEXT_MGR already set [ 1309.124526][T24909] binder: 24907:24909 ioctl 4018620d 200000000100 returned -16 [ 1309.162784][ T10] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1309.265079][T24918] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4460'. [ 1309.302191][ T10] usb 2-1: device descriptor read/64, error -71 [ 1309.460470][T24927] syzkaller0: tun_net_xmit 18 [ 1309.552288][ T10] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1309.694132][ T10] usb 2-1: device descriptor read/64, error -71 [ 1309.732295][ T5900] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1309.803428][ T10] usb usb2-port1: attempt power cycle [ 1309.872176][ T5920] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1309.878375][T24939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4467'. [ 1309.901273][ T5900] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1309.912017][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.929414][ T5900] usb 6-1: config 0 descriptor?? [ 1309.941262][ T5900] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1310.072151][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 1310.080028][ T5920] usb 4-1: config 36 has an invalid interface number: 44 but max is 0 [ 1310.110823][ T5920] usb 4-1: config 36 has no interface number 0 [ 1310.136393][ T5920] usb 4-1: config 36 interface 44 has no altsetting 0 [ 1310.183707][T15817] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1310.185951][ T5920] usb 4-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=ad.ea [ 1310.191526][ T10] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1310.219202][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.223118][ T10] usb 2-1: device descriptor read/8, error -71 [ 1310.232158][ T5920] usb 4-1: Product: syz [ 1310.239004][ T5920] usb 4-1: Manufacturer: syz [ 1310.250223][ T5920] usb 4-1: SerialNumber: syz [ 1310.318937][T24941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.352294][T15817] usb 1-1: Using ep0 maxpacket: 32 [ 1310.367236][T15817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.380187][T15817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1310.395025][T15817] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1310.405247][T15817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.414529][T15817] usb 1-1: Product: syz [ 1310.423726][T15817] usb 1-1: Manufacturer: syz [ 1310.437464][T15817] usb 1-1: SerialNumber: syz [ 1310.458786][T15817] usb 1-1: config 0 descriptor?? [ 1310.475411][ T10] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1310.500142][ T5920] sisusb 4-1:36.44: Invalid USB2VGA device [ 1310.503424][ T10] usb 2-1: device descriptor read/8, error -71 [ 1310.536590][T15817] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 1310.547708][ T5920] sisusb 4-1:36.44: probe with driver sisusb failed with error -22 [ 1310.613522][ T5920] usb 4-1: USB disconnect, device number 75 [ 1310.633080][ T10] usb usb2-port1: unable to enumerate USB device [ 1311.474029][ T10] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1311.634440][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1311.652297][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.715738][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1311.764384][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.836137][ T10] usb 4-1: config 0 descriptor?? [ 1312.309900][ T10] savu 0003:1E7D:2D5A.005C: unknown global tag 0xc [ 1312.327361][ T10] savu 0003:1E7D:2D5A.005C: item 0 0 1 12 parsing failed [ 1312.387669][ T10] savu 0003:1E7D:2D5A.005C: parse failed [ 1312.429421][ T10] savu 0003:1E7D:2D5A.005C: probe with driver savu failed with error -22 [ 1312.521811][T24949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.532739][T24949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.547937][ T10] usb 4-1: USB disconnect, device number 76 [ 1312.557181][T24956] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1312.575520][T24956] tipc: Enabled bearer , priority 10 [ 1312.609299][ T5900] gspca_stv06xx: I2C: Read error writing address: -71 [ 1312.630509][ T5900] usb 6-1: USB disconnect, device number 74 [ 1313.102411][T24968] loop2: detected capacity change from 0 to 7 [ 1313.111762][T24968] loop2: [ 1313.115113][T24968] loop2: partition table partially beyond EOD, truncated [ 1313.152394][ T5833] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1313.324808][ T5833] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1313.333345][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.345020][ T5833] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1313.354159][ T5833] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1313.362534][ T5833] usb 6-1: Manufacturer: syz [ 1313.370461][ T5833] usb 6-1: config 0 descriptor?? [ 1313.445310][ T5833] rc_core: IR keymap rc-hauppauge not found [ 1313.451425][ T5833] Registered IR keymap rc-empty [ 1313.452207][ T5900] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 1313.458072][ T5833] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1313.476894][ T5833] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input133 [ 1313.618306][ T10] usb 1-1: USB disconnect, device number 45 [ 1313.642599][ T5900] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1313.654701][ T5900] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1313.666041][T24973] rc rc0: two consecutive events of type space [ 1313.676035][ T5900] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1313.693879][ T5900] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1313.705651][ T5900] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1313.735379][ T5900] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1313.743365][ T5900] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1313.768721][ T5900] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1313.781118][ T5900] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1313.796588][ T5900] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1313.816269][ T5900] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1313.825067][ T5900] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1313.825997][T24978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4481'. [ 1313.836893][ T5900] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1313.858120][ T5900] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1313.869869][ T5900] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1313.888249][ T5833] usb 6-1: USB disconnect, device number 75 [ 1313.906159][ T5900] usb 4-1: string descriptor 0 read error: -22 [ 1313.928799][ T5900] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1313.948122][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.973387][ T5900] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1314.048931][T24982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4483'. [ 1314.065445][T24982] dummy0: entered promiscuous mode [ 1314.071838][T24982] dummy0: left promiscuous mode [ 1314.172576][T15817] usb 4-1: USB disconnect, device number 77 [ 1314.222737][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1314.382503][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1314.390874][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1314.400995][ T10] usb 1-1: config 0 has no interface number 0 [ 1314.412671][ T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1314.422397][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.430578][ T10] usb 1-1: Product: syz [ 1314.435584][ T10] usb 1-1: Manufacturer: syz [ 1314.440315][ T10] usb 1-1: SerialNumber: syz [ 1314.451944][ T10] usb 1-1: config 0 descriptor?? [ 1314.462502][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1314.469000][T24988] netlink: 'syz.5.4485': attribute type 1 has an invalid length. [ 1314.505408][T24988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1314.518959][T24988] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1314.530546][T24988] bond5: entered allmulticast mode [ 1314.548648][T24988] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1314.685271][ T10] gspca_spca1528: reg_w err -71 [ 1314.817245][ T10] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 1314.830559][ T10] usb 1-1: USB disconnect, device number 46 [ 1315.221880][ T5833] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1315.402117][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 1315.410792][ T5833] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1315.435339][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 1315.516627][ T5833] usb 4-1: SerialNumber: syz [ 1315.531394][ T5833] usb 4-1: config 0 descriptor?? [ 1315.587955][ T5833] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1315.600352][ T5833] usb 4-1: Detected FT232A [ 1315.634942][ T5920] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1315.649986][ T5833] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1315.773647][ T5920] usb 1-1: device descriptor read/64, error -71 [ 1315.832274][T15825] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1315.901688][ T5833] usb 4-1: USB disconnect, device number 78 [ 1315.963860][ T5833] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1315.989285][T25018] tipc: Enabled bearer , priority 10 [ 1316.002542][T15825] usb 2-1: Using ep0 maxpacket: 8 [ 1316.015678][T15825] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1316.025507][ T5833] ftdi_sio 4-1:0.0: device disconnected [ 1316.039981][T15825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.048559][ T5920] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1316.052866][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4492'. [ 1316.105400][T15825] usb 2-1: Product: syz [ 1316.120406][T15825] usb 2-1: Manufacturer: syz [ 1316.125146][T25020] netlink: 'syz.2.4492': attribute type 15 has an invalid length. [ 1316.125171][T25020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4492'. [ 1316.190670][T15825] usb 2-1: SerialNumber: syz [ 1316.217049][T15825] usb 2-1: config 0 descriptor?? [ 1316.226568][ T5920] usb 1-1: device descriptor read/64, error -71 [ 1316.240177][T15825] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1316.362638][ T5920] usb usb1-port1: attempt power cycle [ 1316.742215][ T5920] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1316.762988][ T5920] usb 1-1: device descriptor read/8, error -71 [ 1316.874804][T15825] gspca_sonixj: reg_w1 err -71 [ 1316.887223][T15825] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1316.904774][T15825] usb 2-1: USB disconnect, device number 64 [ 1317.013814][ T5920] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1317.162484][ T10] tipc: Node number set to 3263484639 [ 1317.173188][ T5920] usb 1-1: device descriptor read/8, error -71 [ 1317.307380][ T5920] usb usb1-port1: unable to enumerate USB device [ 1319.029622][T25068] vlan1: entered promiscuous mode [ 1319.035103][T25068] macvlan1: entered promiscuous mode [ 1319.042260][T15825] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1319.224603][T15825] usb 2-1: Using ep0 maxpacket: 32 [ 1319.235536][T15825] usb 2-1: config 0 has an invalid interface number: 250 but max is 2 [ 1319.246467][T15825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.266951][T15825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1319.288380][T15825] usb 2-1: config 0 has no interface number 0 [ 1319.314829][T15825] usb 2-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1319.324394][T15825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.342188][T15825] usb 2-1: Product: syz [ 1319.347583][T15825] usb 2-1: Manufacturer: syz [ 1319.357770][T15825] usb 2-1: SerialNumber: syz [ 1319.397598][T15825] usb 2-1: config 0 descriptor?? [ 1319.417981][T15825] uvcvideo 2-1:0.250: probe with driver uvcvideo failed with error -22 [ 1319.477453][ C1] blk_print_req_error: 45 callbacks suppressed [ 1319.477476][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.492910][ C1] buffer_io_error: 44 callbacks suppressed [ 1319.492925][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1319.512091][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.512175][ T5900] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 1319.521290][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 1319.521417][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.546114][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 1319.576217][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.585584][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1319.593542][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.602773][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 1319.610705][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.619949][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 1319.631493][T25066] x_tables: duplicate underflow at hook 1 [ 1319.634042][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.646464][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1319.654500][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.663734][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 1319.671664][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.680891][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 1319.690745][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1319.699954][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1319.711141][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1319.719390][ T5200] Dev loop7: unable to read RDB block 0 [ 1319.732345][ T5200] loop7: unable to read partition table [ 1319.738254][ T5200] loop7: partition table beyond EOD, truncated [ 1319.773382][T15817] usb 2-1: USB disconnect, device number 65 [ 1319.927315][ T5900] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.939194][ T5900] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1319.975213][ T5900] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1319.994382][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.023764][ T5900] usb 6-1: Product: syz [ 1320.049706][ T5900] usb 6-1: Manufacturer: syz [ 1320.059405][ T5900] usb 6-1: SerialNumber: syz [ 1320.143370][T22509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.288464][ T5900] usb 6-1: 0:2 : does not exist [ 1320.302350][ T5900] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1320.316748][T22509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.413365][ T5900] usb 6-1: USB disconnect, device number 76 [ 1320.465792][T22509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.481170][T14624] udevd[14624]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.952287][ T5920] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1321.010677][T22509] bridge_slave_1: left allmulticast mode [ 1321.030738][T22509] bridge_slave_1: left promiscuous mode [ 1321.042443][T22509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.069041][T22509] : left allmulticast mode [ 1321.082295][T22509] : left promiscuous mode [ 1321.087808][T22509] bridge0: port 1() entered disabled state [ 1321.142713][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 1321.160565][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.192410][ T5920] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1321.207190][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.226141][ T5920] usb 2-1: Product: syz [ 1321.230565][ T5920] usb 2-1: Manufacturer: syz [ 1321.235808][ T5920] usb 2-1: SerialNumber: syz [ 1321.259016][ T5920] usb 2-1: config 0 descriptor?? [ 1321.268718][ T5920] usb 2-1: bad CDC descriptors [ 1321.294569][ T5920] usb 2-1: unsupported MDLM descriptors [ 1321.331951][T25093] loop5: detected capacity change from 0 to 7 [ 1321.364159][T14624] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1321.369698][T14624] loop5: partition table partially beyond EOD, truncated [ 1321.382557][T14624] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 1321.437213][T15610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1321.449348][T15610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1321.464965][T25093] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1321.479453][T25093] loop5: partition table partially beyond EOD, truncated [ 1321.487355][T25093] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 1321.497084][T15610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1321.538418][T15610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1321.555614][T15610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1321.637528][T14624] udevd[14624]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1321.688944][T14624] udevd[14624]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1321.767817][T22509] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1321.913188][T15825] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1321.945761][T22509] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1322.064433][T15825] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1322.073764][T15825] usb 1-1: config 0 has no interface number 0 [ 1322.079882][T15825] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1322.091376][T15825] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1322.105022][T15825] usb 1-1: config 0 interface 255 has no altsetting 0 [ 1322.111859][T15825] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1322.121064][T15825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.133524][T15825] usb 1-1: config 0 descriptor?? [ 1322.146763][T15825] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 1322.415616][T22509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.426895][T22509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.438063][T22509] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1322.449364][T22509] bond0 (unregistering): Released all slaves [ 1322.480501][T15825] usb 1-1: USB disconnect, device number 51 [ 1322.619587][T22509] bond1 (unregistering): Released all slaves [ 1322.769003][T22509] bond2 (unregistering): Released all slaves [ 1322.784452][T22509] bond3 (unregistering): Released all slaves [ 1322.799548][T22509] bond4 (unregistering): (slave vcan1): Releasing backup interface [ 1322.807724][T22509] vcan1: left allmulticast mode [ 1322.814274][T22509] bond4 (unregistering): Released all slaves [ 1322.962637][T22509] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1322.974325][T22509] bond5 (unregistering): Released all slaves [ 1322.990296][ T5833] usb 2-1: USB disconnect, device number 66 [ 1323.211706][T25106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.236999][T22509] : left promiscuous mode [ 1323.296472][T25110] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1323.456630][T22509] tipc: Disabling bearer [ 1323.478675][T22509] tipc: Left network mode [ 1323.608596][ T5838] Bluetooth: hci3: command tx timeout [ 1324.202231][T15817] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1324.215836][T25127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4524'. [ 1324.237880][T25130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4524'. [ 1324.370116][T25125] batadv_slave_1: entered promiscuous mode [ 1324.378181][T15817] usb 2-1: Using ep0 maxpacket: 16 [ 1324.385669][T15817] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1324.402172][T15817] usb 2-1: config 0 has no interface number 0 [ 1324.411563][T15817] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1324.434774][T15817] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1324.444230][T15817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.452398][T15817] usb 2-1: Product: syz [ 1324.456810][T15817] usb 2-1: Manufacturer: syz [ 1324.461447][T15817] usb 2-1: SerialNumber: syz [ 1324.469807][T25095] chnl_net:caif_netlink_parms(): no params data found [ 1324.498393][T15817] usb 2-1: config 0 descriptor?? [ 1324.604492][T25125] batadv_slave_1: left promiscuous mode [ 1325.099565][T25140] netlink: 'syz.2.4526': attribute type 23 has an invalid length. [ 1325.124646][T15817] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input135 [ 1325.272727][T25095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.301562][T25095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.309524][T25148] binder: 25147:25148 ioctl c0046209 200000000000000 returned -22 [ 1325.315043][ T5833] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1325.318030][T25095] bridge_slave_0: entered allmulticast mode [ 1325.350729][T25122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.360643][T25122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.373128][T25095] bridge_slave_0: entered promiscuous mode [ 1325.389928][T25095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.401920][T25095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.412020][T25095] bridge_slave_1: entered allmulticast mode [ 1325.421439][T25095] bridge_slave_1: entered promiscuous mode [ 1325.488143][T22509] hsr_slave_0: left promiscuous mode [ 1325.499515][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1325.521404][T22509] hsr_slave_1: left promiscuous mode [ 1325.526887][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1325.572649][ T5833] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1325.589101][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.618848][ T5833] usb 1-1: config 0 descriptor?? [ 1325.682896][ T5838] Bluetooth: hci3: command tx timeout [ 1325.755255][T25155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.767322][T25155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.271663][ T5833] usbhid 1-1:0.0: can't add hid device: -71 [ 1326.278455][ T5833] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1326.310013][ T5833] usb 1-1: USB disconnect, device number 52 [ 1326.659729][T22509] team0 (unregistering): Port device team_slave_1 removed [ 1326.748195][T22509] team0 (unregistering): Port device team_slave_0 removed [ 1326.959391][ T5900] usb 2-1: USB disconnect, device number 67 [ 1327.132616][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1327.322195][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1327.329454][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.340955][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.360593][ T10] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1327.370084][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.383258][ T10] usb 1-1: config 0 descriptor?? [ 1327.420846][ T5900] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1327.505149][ T5833] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1327.598322][ T5900] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1327.606685][ T5900] usb 2-1: config 0 has no interface number 0 [ 1327.613325][ T5900] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1327.623824][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.637021][ T5900] usb 2-1: config 0 descriptor?? [ 1327.671269][ T5900] usb 2-1: selecting invalid altsetting 1 [ 1327.678032][ T5900] dvb_ttusb_budget: ttusb_init_controller: error [ 1327.685336][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 1327.694325][ T5833] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1327.701619][ T5900] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1327.712473][ T5833] usb 6-1: config 0 has no interface number 0 [ 1327.732525][ T5833] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1327.770209][ T5838] Bluetooth: hci3: command tx timeout [ 1327.787163][T25095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.802907][ T5833] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1327.819025][ T10] hid (null): unknown global tag 0xc [ 1327.831092][ T5900] DVB: Unable to find symbol cx22700_attach() [ 1327.840143][ T10] nzxt-kraken2 0003:1E71:170E.005D: unknown global tag 0xc [ 1327.859701][ T5833] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1327.862585][ T10] nzxt-kraken2 0003:1E71:170E.005D: item 0 1 1 12 parsing failed [ 1327.896664][T25165] Invalid logical block size (2) [ 1327.904048][ T5833] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1327.906751][ T10] nzxt-kraken2 0003:1E71:170E.005D: hid parse failed with -22 [ 1327.916189][T25095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.925939][ T10] nzxt-kraken2 0003:1E71:170E.005D: probe with driver nzxt-kraken2 failed with error -22 [ 1327.948631][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.988729][ T5833] usb 6-1: Product: syz [ 1328.000321][ T5833] usb 6-1: Manufacturer: syz [ 1328.017604][ T5833] usb 6-1: SerialNumber: syz [ 1328.056434][ T5900] DVB: Unable to find symbol tda10046_attach() [ 1328.057506][ T5833] usb 6-1: config 0 descriptor?? [ 1328.096142][ T5900] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1328.102605][T25168] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1328.124727][T25168] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1328.160672][T25095] team0: Port device team_slave_0 added [ 1328.163192][ T10] usb 1-1: USB disconnect, device number 53 [ 1328.203426][T25095] team0: Port device team_slave_1 added [ 1328.875609][T25167] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1329.040833][T25167] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1329.195507][T25095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.237673][T25095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.265353][T25095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.279497][T25095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.287709][T25095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.343639][T25095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.442968][ T5920] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 1329.477921][T22509] IPVS: stop unused estimator thread 0... [ 1329.494180][T25095] hsr_slave_0: entered promiscuous mode [ 1329.505318][T25095] hsr_slave_1: entered promiscuous mode [ 1329.592532][ T5920] usb 1-1: device descriptor read/64, error -71 [ 1329.627108][ T5833] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1329.726943][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1329.843035][ T5838] Bluetooth: hci3: command tx timeout [ 1329.852224][ T5920] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 1329.983278][ T5920] usb 1-1: device descriptor read/64, error -71 [ 1330.075381][ T5833] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1330.104281][ T5920] usb usb1-port1: attempt power cycle [ 1330.129880][ T8003] usb 2-1: USB disconnect, device number 68 [ 1330.132110][ T5833] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1330.172597][ T5833] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1330.208151][ T5833] usb 6-1: USB disconnect, device number 77 [ 1330.217089][T25095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1330.262596][T25095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1330.292890][T25095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1330.325294][T25203] ip6tnl0: Caught tx_queue_len zero misconfig [ 1330.382811][T25095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1330.464592][ T5920] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 1330.492731][ T5920] usb 1-1: device descriptor read/8, error -71 [ 1330.626596][T25095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.699029][T25095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.728079][T23985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.735355][T23985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.752228][ T5920] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 1330.756357][T23985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.766914][T23985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.812982][ T5920] usb 1-1: device descriptor read/8, error -71 [ 1330.878075][T25224] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4542'. [ 1330.898090][T25095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.934379][ T5920] usb usb1-port1: unable to enumerate USB device [ 1331.001262][T25095] veth0_vlan: entered promiscuous mode [ 1331.016369][T25095] veth1_vlan: entered promiscuous mode [ 1331.063440][T25095] veth0_macvtap: entered promiscuous mode [ 1331.075647][T25095] veth1_macvtap: entered promiscuous mode [ 1331.100382][T25095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.130664][T25095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.160138][ T3490] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.169832][ T8003] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1331.181829][ T3490] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.199157][ T3490] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.212657][ T3490] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.310314][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.326050][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.346359][ T8003] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.358585][ T8003] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1331.380192][ T8003] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1331.398533][T23997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.407105][ T8003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1331.415342][T23997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.423523][ T8003] usb 6-1: SerialNumber: syz [ 1332.438071][T25261] xt_hashlimit: size too large, truncated to 1048576 [ 1333.596274][T25277] sctp: [Deprecated]: syz.2.4549 (pid 25277) Use of int in max_burst socket option. [ 1333.596274][T25277] Use struct sctp_assoc_value instead [ 1333.823000][ T8003] usb 6-1: 0:2 : does not exist [ 1333.870656][ T8003] usb 6-1: USB disconnect, device number 78 [ 1333.920352][T14624] udevd[14624]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1333.973814][T25288] netlink: 'syz.5.4552': attribute type 1 has an invalid length. [ 1334.049195][T25288] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1334.056868][T25293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4552'. [ 1334.077234][T25288] netlink: 'syz.5.4552': attribute type 10 has an invalid length. [ 1334.086828][T25288] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4552'. [ 1334.142406][T15825] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1334.314061][T15825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1334.328103][T15825] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 1334.341386][T15825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.356025][T15825] usb 2-1: config 0 descriptor?? [ 1334.581027][T25298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.613839][T25285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.624088][T25298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.687563][T25285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.698289][T25290] warn_alloc: 2 callbacks suppressed [ 1334.698309][T25290] syz.6.4553: vmalloc error: size 538968064, failed to allocated page array size 1052672, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1334.735480][T25290] CPU: 0 UID: 0 PID: 25290 Comm: syz.6.4553 Not tainted syzkaller #0 PREEMPT(full) [ 1334.735510][T25290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1334.735524][T25290] Call Trace: [ 1334.735533][T25290] [ 1334.735543][T25290] dump_stack_lvl+0x189/0x250 [ 1334.735579][T25290] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1334.735614][T25290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1334.735645][T25290] ? __pfx__printk+0x10/0x10 [ 1334.735668][T25290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1334.735699][T25290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1334.735736][T25290] warn_alloc+0x214/0x310 [ 1334.735775][T25290] ? __pfx_warn_alloc+0x10/0x10 [ 1334.735817][T25290] ? __get_vm_area_node+0x28f/0x300 [ 1334.735849][T25290] ? hash_netnet_create+0x741/0x1440 [ 1334.735886][T25290] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1334.735917][T25290] ? do_syscall_64+0xfa/0xfa0 [ 1334.735977][T25290] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1334.736008][T25290] ? hash_netnet_create+0x741/0x1440 [ 1334.736044][T25290] ? rcu_is_watching+0x15/0xb0 [ 1334.736069][T25290] ? hash_netnet_create+0x741/0x1440 [ 1334.736103][T25290] __kvmalloc_node_noprof+0x674/0x910 [ 1334.736136][T25290] ? hash_netnet_create+0x741/0x1440 [ 1334.736166][T25290] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1334.736197][T25290] ? hash_netnet_create+0x6d5/0x1440 [ 1334.736236][T25290] hash_netnet_create+0x741/0x1440 [ 1334.736287][T25290] ? __lock_acquire+0xab9/0xd20 [ 1334.736324][T25290] ? __pfx_hash_netnet_create+0x10/0x10 [ 1334.736360][T25290] ? __nla_parse+0x40/0x60 [ 1334.736383][T25290] ? __pfx_hash_netnet_create+0x10/0x10 [ 1334.736417][T25290] ip_set_create+0xa97/0x1940 [ 1334.736447][T25290] ? ip_set_create+0x4a2/0x1940 [ 1334.736492][T25290] ? __pfx_ip_set_create+0x10/0x10 [ 1334.736561][T25290] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1334.736594][T25290] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1334.736644][T25290] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1334.736671][T25290] ? kasan_save_track+0x4f/0x80 [ 1334.736755][T25290] netlink_rcv_skb+0x208/0x470 [ 1334.736788][T25290] ? lockdep_hardirqs_on+0x9c/0x150 [ 1334.736818][T25290] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1334.736850][T25290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1334.736894][T25290] ? bpf_lsm_capable+0x9/0x20 [ 1334.736921][T25290] ? security_capable+0x7e/0x2e0 [ 1334.736959][T25290] nfnetlink_rcv+0x282/0x2590 [ 1334.736992][T25290] ? __dev_queue_xmit+0x27b/0x3b50 [ 1334.737018][T25290] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1334.737042][T25290] ? kasan_save_track+0x3e/0x80 [ 1334.737070][T25290] ? __kasan_slab_alloc+0x6c/0x80 [ 1334.737111][T25290] ? __dev_queue_xmit+0x27b/0x3b50 [ 1334.737149][T25290] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1334.737179][T25290] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1334.737218][T25290] ? ref_tracker_free+0x63a/0x7d0 [ 1334.737241][T25290] ? __asan_memcpy+0x40/0x70 [ 1334.737267][T25290] ? __pfx_ref_tracker_free+0x10/0x10 [ 1334.737311][T25290] ? skb_clone+0x246/0x3a0 [ 1334.737338][T25290] ? __netlink_deliver_tap+0x807/0x850 [ 1334.737358][T25290] ? netlink_deliver_tap+0x2e/0x1b0 [ 1334.737387][T25290] ? netlink_deliver_tap+0x2e/0x1b0 [ 1334.737415][T25290] netlink_unicast+0x82f/0x9e0 [ 1334.737456][T25290] ? __pfx_netlink_unicast+0x10/0x10 [ 1334.737489][T25290] ? netlink_sendmsg+0x642/0xb30 [ 1334.737508][T25290] ? skb_put+0x11b/0x210 [ 1334.737533][T25290] netlink_sendmsg+0x805/0xb30 [ 1334.737565][T25290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.737590][T25290] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1334.737623][T25290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1334.737644][T25290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.737667][T25290] __sock_sendmsg+0x21c/0x270 [ 1334.737699][T25290] ____sys_sendmsg+0x505/0x830 [ 1334.737729][T25290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1334.737762][T25290] ? import_iovec+0x74/0xa0 [ 1334.737794][T25290] ___sys_sendmsg+0x21f/0x2a0 [ 1334.737819][T25290] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.737883][T25290] ? __fget_files+0x2a/0x420 [ 1334.737903][T25290] ? __fget_files+0x3a0/0x420 [ 1334.737936][T25290] __x64_sys_sendmsg+0x19b/0x260 [ 1334.737962][T25290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1334.738004][T25290] ? do_syscall_64+0xbe/0xfa0 [ 1334.738038][T25290] do_syscall_64+0xfa/0xfa0 [ 1334.738065][T25290] ? lockdep_hardirqs_on+0x9c/0x150 [ 1334.738093][T25290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.738114][T25290] ? clear_bhb_loop+0x60/0xb0 [ 1334.738141][T25290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.738162][T25290] RIP: 0033:0x7f21f538efc9 [ 1334.738182][T25290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1334.738201][T25290] RSP: 002b:00007f21f6237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.738223][T25290] RAX: ffffffffffffffda RBX: 00007f21f55e5fa0 RCX: 00007f21f538efc9 [ 1334.738239][T25290] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1334.738253][T25290] RBP: 00007f21f5411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1334.738266][T25290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1334.738288][T25290] R13: 00007f21f55e6038 R14: 00007f21f55e5fa0 R15: 00007f21f570fa28 [ 1334.738324][T25290] [ 1334.738416][T25290] Mem-Info: [ 1335.291576][T15825] acrux 0003:1A34:F705.005E: unknown main item tag 0x0 [ 1335.298826][T15825] acrux 0003:1A34:F705.005E: unknown main item tag 0x0 [ 1335.310675][T15825] acrux 0003:1A34:F705.005E: unknown main item tag 0x0 [ 1335.320515][T25290] active_anon:7193 inactive_anon:0 isolated_anon:0 [ 1335.320515][T25290] active_file:12269 inactive_file:4503 isolated_file:0 [ 1335.320515][T25290] unevictable:768 dirty:109 writeback:0 [ 1335.320515][T25290] slab_reclaimable:8305 slab_unreclaimable:111635 [ 1335.320515][T25290] mapped:30957 shmem:1963 pagetables:1531 [ 1335.320515][T25290] sec_pagetables:6 bounce:0 [ 1335.320515][T25290] kernel_misc_reclaimable:0 [ 1335.320515][T25290] free:1315073 free_pcp:12279 free_cma:0 [ 1335.365766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.396515][T15825] acrux 0003:1A34:F705.005E: unknown main item tag 0x0 [ 1335.412220][T15825] acrux 0003:1A34:F705.005E: unknown main item tag 0x0 [ 1335.448308][T15825] acrux 0003:1A34:F705.005E: unknown main item tag 0x0 [ 1335.451051][T25290] Node 0 active_anon:26272kB inactive_anon:0kB active_file:48776kB inactive_file:17880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123516kB dirty:416kB writeback:0kB shmem:4016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13860kB pagetables:5968kB sec_pagetables:24kB all_unreclaimable? no Balloon:0kB [ 1335.455916][T15825] acrux 0003:1A34:F705.005E: unknown main item tag 0x0 [ 1335.487594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.512128][T25290] Node 1 active_anon:0kB inactive_anon:0kB active_file:300kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1335.595746][T15825] acrux 0003:1A34:F705.005E: hidraw0: USB HID v0.00 Device [HID 1a34:f705] on usb-dummy_hcd.1-1/input0 [ 1335.607493][T25290] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.637423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.656291][T15825] acrux 0003:1A34:F705.005E: no inputs found [ 1335.662732][T15825] acrux 0003:1A34:F705.005E: Failed to enable force feedback support, error: -19 [ 1335.684480][T25290] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 1335.690318][T25290] Node 0 DMA32 free:1334912kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26972kB inactive_anon:0kB active_file:48776kB inactive_file:17880kB unevictable:1536kB writepending:416kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:42308kB local_pcp:15472kB free_cma:0kB [ 1335.723737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.737283][T25290] lowmem_reserve[]: 0 0 0 0 0 [ 1335.747490][T25290] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.783812][T25290] lowmem_reserve[]: 0 0 0 0 0 [ 1335.788821][T25290] Node 1 Normal free:3907596kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:300kB inactive_file:132kB unevictable:1536kB writepending:20kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8340kB local_pcp:0kB free_cma:0kB [ 1335.829877][T25290] lowmem_reserve[]: 0 0 0 0 0 [ 1335.835184][T25290] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1335.838124][T15825] usb 2-1: USB disconnect, device number 69 [ 1335.850039][T25290] Node 0 DMA32: 34*4kB (UME) 713*8kB (UME) 961*16kB (UME) 944*32kB (ME) 743*64kB (ME) 451*128kB (UME) 218*256kB (ME) 88*512kB (ME) 34*1024kB (M) 7*2048kB (UM) 251*4096kB (UM) = 1334816kB [ 1335.898682][T25290] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1335.912818][T25290] Node 1 Normal: 69*4kB (UE) 65*8kB (UE) 35*16kB (UE) 204*32kB (UE) 93*64kB (UE) 32*128kB (UE) 8*256kB (UE) 3*512kB (UE) 3*1024kB (UM) 4*2048kB (ME) 946*4096kB (M) = 3907596kB [ 1335.938742][T25290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1335.948762][T25290] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1335.959860][T25290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1335.970683][T25290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1335.981231][T25290] 18156 total pagecache pages [ 1335.994729][ T8000] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1336.006143][T25290] 0 pages in swap cache [ 1336.013680][T25290] Free swap = 124996kB [ 1336.017914][T25290] Total swap = 124996kB [ 1336.022362][T25290] 2097051 pages RAM [ 1336.026422][T25290] 0 pages HighMem/MovableOnly [ 1336.031303][T25290] 424117 pages reserved [ 1336.035563][T25290] 0 pages cma reserved [ 1336.166461][ T8000] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 1336.177357][ T8000] usb 1-1: config 0 has no interface number 0 [ 1336.192221][ T8000] usb 1-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1336.216325][ T8000] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1336.225838][ T8000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.267992][ T8000] usb 1-1: Product: syz [ 1336.272460][ T8000] usb 1-1: Manufacturer: syz [ 1336.277107][ T8000] usb 1-1: SerialNumber: syz [ 1336.293905][ T8000] usb 1-1: config 0 descriptor?? [ 1336.369759][ T8000] mvusb_mdio 1-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 1336.531930][ T8000] usb 1-1: USB disconnect, device number 58 [ 1336.875237][T15825] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1337.358407][T15825] usb 2-1: Using ep0 maxpacket: 32 [ 1337.425549][T15825] usb 2-1: config 3 has an invalid interface number: 171 but max is 29 [ 1337.440330][T15825] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 1337.459971][T15825] usb 2-1: config 3 has no interface number 0 [ 1337.473828][T15825] usb 2-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1337.489183][T15825] usb 2-1: config 3 interface 171 has no altsetting 0 [ 1337.513206][T15825] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 1337.528321][T15825] usb 2-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 1337.540591][T15825] usb 2-1: Product: syz [ 1337.545179][T15825] usb 2-1: Manufacturer: syz [ 1337.550678][T15825] usb 2-1: SerialNumber: syz [ 1338.124832][T15825] as10x_usb: device has been detected [ 1338.155943][T15825] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1338.426335][T15825] usb 2-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 1338.626807][T15825] as10x_usb: error during firmware upload part1 [ 1338.664211][T15825] Registered device Sky IT Digital Key (green led) [ 1338.689040][T15825] usb 2-1: USB disconnect, device number 70 [ 1338.777391][T25340] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1339.138675][T15825] Unregistered device Sky IT Digital Key (green led) [ 1339.207235][T15825] as10x_usb: device has been disconnected [ 1339.257287][T25345] openvswitch: netlink: Key type 217 is out of range max 32 [ 1340.148436][T25360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4570'. [ 1340.157586][T25360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4570'. [ 1340.167908][T25360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4570'. [ 1340.180326][T25360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4570'. [ 1340.322963][T15825] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1340.432213][ T8003] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1340.472227][T15825] usb 7-1: Using ep0 maxpacket: 16 [ 1340.483710][T15825] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1340.497759][T25366] tc_dump_action: action bad kind [ 1340.509767][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1340.509786][ T30] audit: type=1326 audit(1762205134.784:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25363 comm="syz.5.4572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ddb98efc9 code=0x0 [ 1340.544153][T15825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1340.579581][T15825] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1340.595330][T15825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.608059][T15825] usb 7-1: Product: syz [ 1340.612626][T15825] usb 7-1: Manufacturer: syz [ 1340.618213][T15825] usb 7-1: SerialNumber: syz [ 1340.642262][ T8003] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1340.667797][ T8003] usb 2-1: can't read configurations, error -61 [ 1340.705901][T15825] usb 7-1: config 0 descriptor?? [ 1340.764613][T15825] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1340.788778][T15825] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1340.832459][ T8003] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1341.009526][ T8003] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1341.018568][ T8003] usb 2-1: can't read configurations, error -61 [ 1341.045693][ T8003] usb usb2-port1: attempt power cycle [ 1341.392294][T15825] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1341.402198][ T8003] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1341.409914][T15825] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1341.449724][ T8003] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1341.522335][ T8003] usb 2-1: can't read configurations, error -61 [ 1341.702436][ T8003] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1341.823527][ T8003] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1341.841460][ T8003] usb 2-1: can't read configurations, error -61 [ 1341.876418][ T8003] usb usb2-port1: unable to enumerate USB device [ 1342.079359][T15825] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1342.092587][T15825] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1342.150214][T15825] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1342.528993][T25387] syzkaller1: entered promiscuous mode [ 1342.551577][T25387] syzkaller1: entered allmulticast mode [ 1343.283866][T15825] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1343.303491][T15825] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1343.339811][T15825] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1343.412619][T25418] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4585'. [ 1343.704122][ T10] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1343.878035][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1343.910727][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1343.959757][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1343.985271][T25424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1344.005266][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1344.032566][T25424] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1344.051951][T25424] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1344.323771][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1344.384190][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.447359][ T10] usb 6-1: config 0 descriptor?? [ 1344.700941][ T24] usb 7-1: USB disconnect, device number 2 [ 1344.793622][T25447] fuse: Bad value for 'group_id' [ 1344.799643][T25447] fuse: Bad value for 'group_id' [ 1344.832166][T25447] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1345.059485][ T10] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1345.382130][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1345.588695][ T24] usb 7-1: config 0 has no interfaces? [ 1345.604515][T25416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.683490][T25416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.699382][T25416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.737201][ T24] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1345.754289][T25416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.768727][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.784533][ T24] usb 7-1: Product: syz [ 1345.802079][ T24] usb 7-1: Manufacturer: syz [ 1345.811243][ T24] usb 7-1: SerialNumber: syz [ 1345.825647][ T24] usb 7-1: config 0 descriptor?? [ 1345.852881][T15610] Bluetooth: hci3: command 0x0405 tx timeout [ 1345.893477][T25416] fuse: Unknown parameter 'f' [ 1345.916139][ T24] usb 6-1: USB disconnect, device number 79 [ 1346.212179][T25450] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.299631][ T24] usb 7-1: USB disconnect, device number 3 [ 1347.072899][T25480] loop4: detected capacity change from 0 to 2560 [ 1347.117561][T14624] buffer_io_error: 44 callbacks suppressed [ 1347.117582][T14624] Buffer I/O error on dev loop4, logical block 0, async page read [ 1347.170215][T14624] Buffer I/O error on dev loop4, logical block 0, async page read [ 1347.189371][T14624] Buffer I/O error on dev loop4, logical block 0, async page read [ 1347.210196][T14624] Buffer I/O error on dev loop4, logical block 0, async page read [ 1347.236682][T14624] Buffer I/O error on dev loop4, logical block 0, async page read [ 1347.272699][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1347.499827][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1347.535126][ T8000] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1347.548828][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.575290][ T10] usb 2-1: Product: syz [ 1347.579527][ T10] usb 2-1: Manufacturer: syz [ 1347.602926][ T10] usb 2-1: SerialNumber: syz [ 1347.627085][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1347.676295][T21737] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1347.714348][ T8000] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 1347.745172][ T8000] usb 1-1: config 0 has no interface number 1 [ 1347.769572][ T8000] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1347.805394][ T8000] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1347.846969][ T8000] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 1347.888184][ T8000] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1347.921829][ T8000] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1347.934282][T15610] Bluetooth: hci3: command 0x0405 tx timeout [ 1347.943313][ T8000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1347.959728][ T8000] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1347.972187][ T8000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.980425][ T8000] usb 1-1: Product: syz [ 1347.985256][ T8000] usb 1-1: Manufacturer: syz [ 1347.989997][ T8000] usb 1-1: SerialNumber: syz [ 1348.007995][ T8000] usb 1-1: config 0 descriptor?? [ 1348.014638][T25490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1348.030549][ T8000] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1348.045566][ T8000] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1348.087699][ T8000] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1348.254075][T25490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.267629][T25490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.284847][ T10] usb 1-1: USB disconnect, device number 59 [ 1348.304302][ T8003] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1348.475305][ T8003] usb 7-1: Using ep0 maxpacket: 32 [ 1348.491302][ T8003] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1348.522483][ T8003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.530636][ T8003] usb 7-1: Product: syz [ 1348.572857][ T5900] usb 2-1: USB disconnect, device number 75 [ 1348.587902][ T8003] usb 7-1: Manufacturer: syz [ 1348.603624][ T8003] usb 7-1: SerialNumber: syz [ 1348.611435][ T8003] usb 7-1: config 0 descriptor?? [ 1348.629798][ T8003] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1348.963673][T21737] usb 2-1: Service connection timeout for: 256 [ 1349.002315][T21737] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1349.010943][T21737] ath9k_htc: Failed to initialize the device [ 1349.062953][ T5900] usb 2-1: ath9k_htc: USB layer deinitialized [ 1349.232487][T15817] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1349.532196][T21737] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1349.725656][T21737] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1349.739637][T21737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.813794][T21737] usb 2-1: config 0 descriptor?? [ 1350.013092][T15610] Bluetooth: hci3: command 0x0405 tx timeout [ 1350.057424][T25547] netlink: 'syz.0.4606': attribute type 28 has an invalid length. [ 1350.096983][T25547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4606'. [ 1350.251642][T21737] corsair 0003:1B1C:1B09.0060: hidraw0: USB HID v10.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.1-1/input0 [ 1350.448605][T21737] usb 2-1: USB disconnect, device number 76 [ 1350.473667][ T8003] gspca_stk1135: reg_w 0xd err -110 [ 1350.480433][ T8003] gspca_stk1135: serial bus timeout: status=0x00 [ 1350.503350][ T8003] gspca_stk1135: Sensor write failed [ 1350.514929][ T8003] gspca_stk1135: serial bus timeout: status=0x00 [ 1350.523196][ T8003] gspca_stk1135: Sensor write failed [ 1350.528704][ T8003] gspca_stk1135: serial bus timeout: status=0x00 [ 1350.536560][ T8003] gspca_stk1135: Sensor read failed [ 1350.541844][ T8003] gspca_stk1135: serial bus timeout: status=0x00 [ 1350.549337][ T8003] gspca_stk1135: Sensor read failed [ 1350.556581][ T8003] gspca_stk1135: Detected sensor type unknown (0x0) [ 1350.566528][ T8003] gspca_stk1135: serial bus timeout: status=0x00 [ 1350.574706][ T8003] gspca_stk1135: Sensor read failed [ 1350.581188][ T8003] gspca_stk1135: serial bus timeout: status=0x00 [ 1350.589241][ T8003] gspca_stk1135: Sensor read failed [ 1350.596860][ T8003] gspca_stk1135: serial bus timeout: status=0x00 [ 1350.604016][ T8003] gspca_stk1135: Sensor write failed [ 1350.613984][ T8003] gspca_stk1135: serial bus timeout: status=0x00 [ 1350.621869][ T8003] gspca_stk1135: Sensor write failed [ 1350.629622][ T8003] stk1135 7-1:0.0: probe with driver stk1135 failed with error -110 [ 1350.683476][T15817] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1350.856829][T15817] usb 1-1: config 2 has an invalid interface number: 101 but max is 0 [ 1350.884496][T15817] usb 1-1: config 2 has an invalid descriptor of length 142, skipping remainder of the config [ 1350.909986][T15817] usb 1-1: config 2 has no interface number 0 [ 1350.924812][T15817] usb 1-1: config 2 interface 101 altsetting 179 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1350.991807][T15817] usb 1-1: config 2 interface 101 has no altsetting 0 [ 1351.007477][T15817] usb 1-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8 [ 1351.025937][T15817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.035742][T15817] usb 1-1: Product: syz [ 1351.040236][T15817] usb 1-1: Manufacturer: syz [ 1351.049586][T15817] usb 1-1: SerialNumber: syz [ 1351.267139][T25551] netlink: 'syz.0.4606': attribute type 28 has an invalid length. [ 1351.341439][T15817] usb 1-1: Could not find all expected endpoints [ 1351.409033][ T8003] usb 7-1: USB disconnect, device number 4 [ 1351.457198][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1351.585791][T15817] usb 1-1: USB disconnect, device number 61 [ 1351.692323][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1351.716174][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1351.733153][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1351.754089][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.788904][ T24] usb 2-1: Product: syz [ 1351.812588][ T24] usb 2-1: Manufacturer: syz [ 1351.817256][ T24] usb 2-1: SerialNumber: syz [ 1351.854276][ T24] usb 2-1: config 0 descriptor?? [ 1352.376737][ T24] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1352.649944][T25609] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1352.657659][T25609] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1352.695635][T25609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1352.772223][ T8000] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1352.900477][T25597] veth0_to_bond: entered promiscuous mode [ 1352.954251][ T8000] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1352.964552][ T8000] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1352.976510][ T8000] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1352.985816][ T8000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.994054][ T8000] usb 7-1: Product: syz [ 1352.998586][ T8000] usb 7-1: Manufacturer: syz [ 1353.003373][ T8000] usb 7-1: SerialNumber: syz [ 1353.011341][ T8000] usb 7-1: config 0 descriptor?? [ 1353.021014][ T8000] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1353.090820][ T24] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1353.104832][ T24] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1353.119708][ T24] usb 2-1: USB disconnect, device number 77 [ 1353.626773][T25602] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1353.653876][T25602] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1353.757652][ T8000] gspca_sunplus: reg_r err -71 [ 1353.787935][ T8000] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1353.886835][ T8000] usb 7-1: USB disconnect, device number 5 [ 1355.009570][T25646] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4628'. [ 1355.972173][T21737] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1356.048853][T25667] random: crng reseeded on system resumption [ 1356.172459][T21737] usb 6-1: device descriptor read/64, error -71 [ 1356.455115][T21737] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1356.592486][T21737] usb 6-1: device descriptor read/64, error -71 [ 1356.642339][T25681] futex_wake_op: syz.6.4640 tries to shift op by 32; fix this program [ 1356.705870][T21737] usb usb6-port1: attempt power cycle [ 1356.757211][T25684] futex_wake_op: syz.6.4640 tries to shift op by 32; fix this program [ 1357.064413][T21737] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1357.124278][T21737] usb 6-1: device descriptor read/8, error -71 [ 1357.312179][ T8000] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1357.362375][T21737] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1357.382770][T21737] usb 6-1: device descriptor read/8, error -71 [ 1357.482282][ T8000] usb 1-1: Using ep0 maxpacket: 32 [ 1357.499986][T21737] usb usb6-port1: unable to enumerate USB device [ 1357.500390][ T8000] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1357.541544][ T8000] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1357.562267][ T8003] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1357.580441][ T8000] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1357.620135][ T8000] usb 1-1: Product: syz [ 1357.630519][ T8000] usb 1-1: Manufacturer: syz [ 1357.635343][ T8000] usb 1-1: SerialNumber: syz [ 1357.646042][ T8000] usb 1-1: config 0 descriptor?? [ 1357.651665][T25691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1357.669192][ T8000] hub 1-1:0.0: bad descriptor, ignoring hub [ 1357.678578][ T8000] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1357.713089][ T8003] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 1357.756981][T25704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4646'. [ 1357.766236][ T8003] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1357.766271][ T8003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.766294][ T8003] usb 7-1: Product: syz [ 1357.766310][ T8003] usb 7-1: Manufacturer: syz [ 1357.766327][ T8003] usb 7-1: SerialNumber: syz [ 1357.799619][ T8003] usb 7-1: config 0 descriptor?? [ 1357.827999][ T8003] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1357.862488][ T8003] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1357.881905][ T8003] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1357.900816][ T8003] usb 7-1: media controller created [ 1357.961819][ T8003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1358.036846][ T8000] usb 1-1: USB disconnect, device number 62 [ 1358.044531][ T8003] DVB: Unable to find symbol mt352_attach() [ 1358.152888][ T8003] DVB: Unable to find symbol nxt6000_attach() [ 1358.159027][ T8003] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1358.207190][ T8003] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input139 [ 1358.410536][ T8003] dvb-usb: schedule remote query interval to 1000 msecs. [ 1358.448185][ T8003] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1358.472142][ T8003] dvb-usb: bulk message failed: -22 (7/0) [ 1358.491438][ T8003] dvb-usb: bulk message failed: -22 (7/0) [ 1359.072982][T25731] openvswitch: netlink: Flow key attr not present in new flow. [ 1359.540222][ T8003] dvb-usb: bulk message failed: -22 (7/0) [ 1359.555350][ T8003] dvb-usb: error while querying for an remote control event. [ 1359.922776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1360.002141][ T5899] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1360.609636][T15825] usb 7-1: USB disconnect, device number 6 [ 1360.646062][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 1360.696052][ T5899] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1360.721661][ T5899] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65403, setting to 1024 [ 1360.745537][T15825] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1360.835056][ T5899] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1360.930062][ T5899] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1360.990771][ T5899] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1361.107470][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.234312][ T8003] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1361.246520][ T5899] usb 6-1: Product: syz [ 1361.389272][ T5899] usb 6-1: Manufacturer: syz [ 1361.394210][ T8003] usb 1-1: Using ep0 maxpacket: 16 [ 1361.404619][ T8003] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 1361.444430][ T5899] usb 6-1: SerialNumber: syz [ 1361.511637][ T8003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.561242][T25735] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1361.569426][T25735] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1361.584076][ T8003] usb 1-1: config 0 descriptor?? [ 1361.746975][ T8003] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input140 [ 1361.960960][ T5899] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1362.016259][ T5899] usbtest 6-1:1.0: Linux user mode ISO test driver [ 1362.069139][ T5899] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1362.187826][ T5899] usb 6-1: USB disconnect, device number 84 [ 1362.214772][T15817] usb 1-1: USB disconnect, device number 63 [ 1362.224425][ T5185] bcm5974 1-1:0.0: could not read from device [ 1362.247481][T15861] bcm5974 1-1:0.0: could not read from device [ 1362.992967][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1363.124381][ T24] usb 2-1: device descriptor read/64, error -71 [ 1363.204212][T15817] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1363.362331][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1363.525429][ T24] usb 2-1: device descriptor read/64, error -71 [ 1363.542168][T15817] usb 1-1: Using ep0 maxpacket: 16 [ 1363.573778][T15817] usb 1-1: config index 0 descriptor too short (expected 42, got 18) [ 1363.599185][T15817] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 1363.672297][T15817] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 1363.672477][ T24] usb usb2-port1: attempt power cycle [ 1363.806825][T15817] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 1363.817559][T15817] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1363.866491][T15817] usb 1-1: Product: syz [ 1363.914953][T15817] usb 1-1: SerialNumber: syz [ 1363.941964][T15817] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1363.960421][T15817] r8152-cfgselector 1-1: config 0 descriptor?? [ 1363.969571][T15817] hub 1-1:0.0: bad descriptor, ignoring hub [ 1363.987095][T15817] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1364.142235][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1364.282415][T15817] r8152-cfgselector 1-1: USB disconnect, device number 64 [ 1364.316636][ T24] usb 2-1: device descriptor read/8, error -71 [ 1364.822111][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1364.868967][ T24] usb 2-1: device descriptor read/8, error -71 [ 1364.902150][ T8000] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1365.002507][ T24] usb usb2-port1: unable to enumerate USB device [ 1365.052376][ T8000] usb 1-1: device descriptor read/64, error -71 [ 1365.312350][ T8000] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1365.472282][ T8000] usb 1-1: device descriptor read/64, error -71 [ 1365.602582][ T8000] usb usb1-port1: attempt power cycle [ 1365.613594][T25809] input: syz1 as /devices/virtual/input/input141 [ 1365.680802][T25815] FAULT_INJECTION: forcing a failure. [ 1365.680802][T25815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.700684][T25815] CPU: 0 UID: 0 PID: 25815 Comm: syz.1.4673 Not tainted syzkaller #0 PREEMPT(full) [ 1365.700715][T25815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1365.700730][T25815] Call Trace: [ 1365.700738][T25815] [ 1365.700747][T25815] dump_stack_lvl+0x189/0x250 [ 1365.700781][T25815] ? __pfx____ratelimit+0x10/0x10 [ 1365.700808][T25815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1365.700836][T25815] ? __pfx__printk+0x10/0x10 [ 1365.700866][T25815] ? __might_fault+0xb0/0x130 [ 1365.700907][T25815] should_fail_ex+0x414/0x560 [ 1365.700946][T25815] _copy_from_user+0x2d/0xb0 [ 1365.700974][T25815] do_sys_poll+0x242/0x1070 [ 1365.701022][T25815] ? __pfx_do_sys_poll+0x10/0x10 [ 1365.701130][T25815] ? rcu_read_lock_any_held+0xb3/0x120 [ 1365.701158][T25815] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1365.701188][T25815] ? vfs_write+0x956/0xb30 [ 1365.701245][T25815] ? set_user_sigmask+0xc7/0x1b0 [ 1365.701269][T25815] ? __pfx_set_user_sigmask+0x10/0x10 [ 1365.701295][T25815] ? do_sys_openat2+0x154/0x1c0 [ 1365.701326][T25815] __se_sys_ppoll+0x1ff/0x260 [ 1365.701360][T25815] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1365.701392][T25815] ? __pfx_ksys_write+0x10/0x10 [ 1365.701425][T25815] ? do_syscall_64+0xbe/0xfa0 [ 1365.701452][T25815] ? __x64_sys_ppoll+0x20/0xc0 [ 1365.701485][T25815] do_syscall_64+0xfa/0xfa0 [ 1365.701512][T25815] ? lockdep_hardirqs_on+0x9c/0x150 [ 1365.701540][T25815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.701562][T25815] ? clear_bhb_loop+0x60/0xb0 [ 1365.701587][T25815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.701608][T25815] RIP: 0033:0x7f401418efc9 [ 1365.701627][T25815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.701644][T25815] RSP: 002b:00007f4015106038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1365.701666][T25815] RAX: ffffffffffffffda RBX: 00007f40143e5fa0 RCX: 00007f401418efc9 [ 1365.701682][T25815] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1365.701697][T25815] RBP: 00007f4015106090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.701710][T25815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.701723][T25815] R13: 00007f40143e6038 R14: 00007f40143e5fa0 R15: 00007f401450fa28 [ 1365.701757][T25815] [ 1365.928478][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.002168][ T8000] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1366.212146][ T8000] usb 1-1: device not accepting address 67, error -71 [ 1366.251401][ T5899] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1366.890144][T25829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4679'. [ 1366.906046][T25829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.913614][ T5899] usb 6-1: device descriptor read/64, error -71 [ 1366.982618][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.989632][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.009749][T25829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.152175][ T5899] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1367.283079][ T5899] usb 6-1: device descriptor read/64, error -71 [ 1367.382169][ T8003] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1367.392910][ T5899] usb usb6-port1: attempt power cycle [ 1367.501724][T25839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4681'. [ 1367.511131][T25839] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4681'. [ 1367.528926][T25839] batadv0: entered promiscuous mode [ 1367.536519][T25839] hsr1: entered allmulticast mode [ 1367.541620][T25839] batadv0: entered allmulticast mode [ 1367.550026][ T8003] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1367.575910][ T8003] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1367.617462][ T8003] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1367.642603][ T8003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.678867][ T8003] usb 7-1: config 0 descriptor?? [ 1367.752200][ T5899] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1367.778491][T25846] overlayfs: missing 'lowerdir' [ 1367.802913][ T5899] usb 6-1: device descriptor read/8, error -71 [ 1367.915310][T25848] fuse: Bad value for 'fd' [ 1367.975542][ T8000] [ 1367.977930][ T8000] ============================================ [ 1367.984101][ T8000] WARNING: possible recursive locking detected [ 1367.990274][ T8000] syzkaller #0 Not tainted [ 1367.994700][ T8000] -------------------------------------------- [ 1368.000852][ T8000] kworker/1:11/8000 is trying to acquire lock: [ 1368.007008][ T8000] ffff888057832f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1368.016082][ T8000] [ 1368.016082][ T8000] but task is already holding lock: [ 1368.023461][ T8000] ffff88807b2c2f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1368.032551][ T8000] [ 1368.032551][ T8000] other info that might help us debug this: [ 1368.040633][ T8000] Possible unsafe locking scenario: [ 1368.040633][ T8000] [ 1368.048109][ T8000] CPU0 [ 1368.051399][ T8000] ---- [ 1368.054701][ T8000] lock(&hsr->seqnr_lock); [ 1368.059223][ T8000] lock(&hsr->seqnr_lock); [ 1368.063742][ T8000] [ 1368.063742][ T8000] *** DEADLOCK *** [ 1368.063742][ T8000] [ 1368.071895][ T8000] May be due to missing lock nesting notation [ 1368.071895][ T8000] [ 1368.080218][ T8000] 12 locks held by kworker/1:11/8000: [ 1368.085594][ T8000] #0: ffff88802eec5948 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1368.096328][ T8000] #1: ffffc9000b857ba0 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1368.109485][ T8000] #2: ffff888031ba1538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60 [ 1368.118735][ T8000] #3: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1e7/0xe60 [ 1368.127994][ T8000] #4: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1368.137070][ T8000] #5: ffffffff8df3d680 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 1368.147005][ T8000] #6: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1368.156153][ T8000] #7: ffff88807b2c2f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1368.165685][ T8000] #8: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 1368.175207][ T8000] #9: ffffffff8df3d680 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 1368.185196][ T8000] #10: ffffffff8df3d680 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 1368.195225][ T8000] #11: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1368.204510][ T8000] [ 1368.204510][ T8000] stack backtrace: [ 1368.210408][ T8000] CPU: 1 UID: 0 PID: 8000 Comm: kworker/1:11 Not tainted syzkaller #0 PREEMPT(full) [ 1368.210428][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1368.210441][ T8000] Workqueue: mld mld_ifc_work [ 1368.210466][ T8000] Call Trace: [ 1368.210476][ T8000] [ 1368.210484][ T8000] dump_stack_lvl+0x189/0x250 [ 1368.210509][ T8000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1368.210532][ T8000] ? __pfx__printk+0x10/0x10 [ 1368.210553][ T8000] print_deadlock_bug+0x28b/0x2a0 [ 1368.210575][ T8000] validate_chain+0x1a3f/0x2140 [ 1368.210597][ T8000] ? skb_network_protocol+0x508/0x760 [ 1368.210623][ T8000] ? __pfx_skb_network_protocol+0x10/0x10 [ 1368.210644][ T8000] __lock_acquire+0xab9/0xd20 [ 1368.210663][ T8000] ? hsr_dev_xmit+0x237/0x360 [ 1368.210679][ T8000] lock_acquire+0x120/0x360 [ 1368.210698][ T8000] ? hsr_dev_xmit+0x237/0x360 [ 1368.210719][ T8000] ? hsr_dev_xmit+0x237/0x360 [ 1368.210736][ T8000] _raw_spin_lock_bh+0x36/0x50 [ 1368.210756][ T8000] ? hsr_dev_xmit+0x237/0x360 [ 1368.210772][ T8000] hsr_dev_xmit+0x237/0x360 [ 1368.210788][ T8000] ? hsr_dev_xmit+0x2d/0x360 [ 1368.210805][ T8000] dev_hard_start_xmit+0x2d7/0x830 [ 1368.210829][ T8000] __dev_queue_xmit+0x1b8d/0x3b50 [ 1368.210853][ T8000] ? __dev_queue_xmit+0x27b/0x3b50 [ 1368.210876][ T8000] ? unwind_next_frame+0xa5/0x2390 [ 1368.210895][ T8000] ? unwind_next_frame+0x19ae/0x2390 [ 1368.210915][ T8000] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1368.210934][ T8000] ? unwind_next_frame+0xa5/0x2390 [ 1368.210954][ T8000] ? skb_network_protocol+0x508/0x760 [ 1368.210973][ T8000] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1368.210997][ T8000] ? __pfx_skb_network_protocol+0x10/0x10 [ 1368.211021][ T8000] ? validate_xmit_xfrm+0xbf/0x1160 [ 1368.211045][ T8000] ? stack_depot_save_flags+0x40/0x860 [ 1368.211074][ T8000] macvlan_start_xmit+0x46d/0x6e0 [ 1368.211097][ T8000] ? kasan_save_track+0x3e/0x80 [ 1368.211122][ T8000] ? __pfx_macvlan_start_xmit+0x10/0x10 [ 1368.211148][ T8000] dev_hard_start_xmit+0x2d7/0x830 [ 1368.211172][ T8000] __dev_queue_xmit+0x1b8d/0x3b50 [ 1368.211195][ T8000] ? __dev_queue_xmit+0x27b/0x3b50 [ 1368.211216][ T8000] ? rcu_is_watching+0x15/0xb0 [ 1368.211234][ T8000] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1368.211256][ T8000] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 1368.211283][ T8000] ? kmalloc_reserve+0xbd/0x290 [ 1368.211299][ T8000] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1368.211318][ T8000] ? __copy_skb_header+0xa7/0x550 [ 1368.211335][ T8000] ? __asan_memcpy+0x40/0x70 [ 1368.211357][ T8000] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 1368.211378][ T8000] ? __asan_memcpy+0x40/0x70 [ 1368.211399][ T8000] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 1368.211423][ T8000] ? hsr_addr_subst_dest+0x307/0xac0 [ 1368.211443][ T8000] hsr_forward_skb+0x158b/0x2860 [ 1368.211469][ T8000] ? hsr_forward_skb+0x9e/0x2860 [ 1368.211489][ T8000] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1368.211509][ T8000] ? do_raw_spin_lock+0x121/0x290 [ 1368.211532][ T8000] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1368.211557][ T8000] ? hsr_dev_xmit+0x237/0x360 [ 1368.211574][ T8000] hsr_dev_xmit+0x242/0x360 [ 1368.211590][ T8000] ? hsr_dev_xmit+0x2d/0x360 [ 1368.211613][ T8000] dev_hard_start_xmit+0x2d7/0x830 [ 1368.211637][ T8000] __dev_queue_xmit+0x1b8d/0x3b50 [ 1368.211661][ T8000] ? __dev_queue_xmit+0x27b/0x3b50 [ 1368.211685][ T8000] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1368.211705][ T8000] ? read_seqbegin+0x122/0x250 [ 1368.211727][ T8000] ? neigh_connected_output+0x1ea/0x460 [ 1368.211751][ T8000] ? lockdep_hardirqs_on+0x9c/0x150 [ 1368.211773][ T8000] ? read_seqbegin+0x1ac/0x250 [ 1368.211796][ T8000] ? __pfx_read_seqbegin+0x10/0x10 [ 1368.211818][ T8000] ? eth_header+0x11b/0x200 [ 1368.211836][ T8000] ? __asan_memcpy+0x40/0x70 [ 1368.211866][ T8000] ip6_finish_output2+0xfb3/0x1480 [ 1368.211896][ T8000] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1368.211921][ T8000] ? ip6_mtu+0x7d/0x490 [ 1368.211942][ T8000] ? ip6_mtu+0x38c/0x490 [ 1368.211964][ T8000] ? ip6_finish_output+0x2ef/0x4e0 [ 1368.211986][ T8000] ? ip6_output+0x126/0x550 [ 1368.212007][ T8000] ip6_output+0x340/0x550 [ 1368.212035][ T8000] NF_HOOK+0x9e/0x380 [ 1368.212062][ T8000] ? NF_HOOK+0x101/0x380 [ 1368.212085][ T8000] ? __pfx_NF_HOOK+0x10/0x10 [ 1368.212109][ T8000] ? __pfx_dst_output+0x10/0x10 [ 1368.212133][ T8000] ? icmp6_dst_alloc+0x3a5/0x420 [ 1368.212155][ T8000] ? icmp6_dst_alloc+0x3a5/0x420 [ 1368.212179][ T8000] mld_sendpack+0x8d4/0xe60 [ 1368.212208][ T8000] ? mld_sendpack+0x1e7/0xe60 [ 1368.212232][ T8000] ? __pfx_mld_sendpack+0x10/0x10 [ 1368.212263][ T8000] mld_ifc_work+0x83e/0xd60 [ 1368.212288][ T8000] ? _raw_spin_unlock_irq+0x23/0x50 [ 1368.212308][ T8000] ? process_scheduled_works+0x9ef/0x17b0 [ 1368.212326][ T8000] process_scheduled_works+0xae1/0x17b0 [ 1368.212354][ T8000] ? __pfx_process_scheduled_works+0x10/0x10 [ 1368.212379][ T8000] worker_thread+0x8a0/0xda0 [ 1368.212407][ T8000] kthread+0x711/0x8a0 [ 1368.212430][ T8000] ? __pfx_worker_thread+0x10/0x10 [ 1368.212448][ T8000] ? __pfx_kthread+0x10/0x10 [ 1368.212470][ T8000] ? _raw_spin_unlock_irq+0x23/0x50 [ 1368.212490][ T8000] ? lockdep_hardirqs_on+0x9c/0x150 [ 1368.212510][ T8000] ? __pfx_kthread+0x10/0x10 [ 1368.212532][ T8000] ret_from_fork+0x4bc/0x870 [ 1368.212550][ T8000] ? __pfx_ret_from_fork+0x10/0x10 [ 1368.212569][ T8000] ? __switch_to_asm+0x39/0x70 [ 1368.212583][ T8000] ? __switch_to_asm+0x33/0x70 [ 1368.212596][ T8000] ? __pfx_kthread+0x10/0x10 [ 1368.212623][ T8000] ret_from_fork_asm+0x1a/0x30 [ 1368.212643][ T8000] [ 1368.805696][T25832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.872144][ T5899] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1368.895448][T25832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.032956][T15817] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1369.111756][ T5899] usb 6-1: device not accepting address 88, error -71 [ 1369.182639][ T5899] usb usb6-port1: unable to enumerate USB device [ 1369.213283][T15817] usb 1-1: Using ep0 maxpacket: 16 [ 1369.220278][T15817] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 1369.233546][T15817] usb 1-1: config 0 has no interface number 0 [ 1369.252944][T15817] usb 1-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1369.268110][ T8003] corsair-psu 0003:1B1C:1C03.0061: unknown main item tag 0x0 [ 1369.276198][ T8003] corsair-psu 0003:1B1C:1C03.0061: unknown main item tag 0x0 [ 1369.285960][ T8003] corsair-psu 0003:1B1C:1C03.0061: unknown main item tag 0x0 [ 1369.293891][T15817] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1369.303916][ T8003] corsair-psu 0003:1B1C:1C03.0061: unknown main item tag 0x0 [ 1369.311432][ T8003] corsair-psu 0003:1B1C:1C03.0061: unknown main item tag 0x0 [ 1369.319120][T15817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.327446][T15817] usb 1-1: Product: syz [ 1369.331643][T15817] usb 1-1: Manufacturer: syz [ 1369.337587][T15817] usb 1-1: SerialNumber: syz [ 1369.342605][ T8003] corsair-psu 0003:1B1C:1C03.0061: hidraw0: USB HID v4.06 Device [HID 1b1c:1c03] on usb-dummy_hcd.6-1/input0 [ 1369.356231][T15817] usb 1-1: config 0 descriptor?? [ 1369.365713][T25847] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1369.378964][T15817] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1369.432691][ T8003] corsair-psu 0003:1B1C:1C03.0061: unable to initialize device (-38) [ 1369.443569][ T8003] corsair-psu 0003:1B1C:1C03.0061: probe with driver corsair-psu failed with error -38 [ 1369.534129][ T8003] usb 7-1: USB disconnect, device number 7 [ 1369.634355][T22509] usb 1-1: Failed to submit usb control message: -71 [ 1369.634576][T15817] usb 1-1: USB disconnect, device number 69 [ 1369.641440][T22509] usb 1-1: unable to send the bmi data to the device: -71 [ 1369.655710][T22509] usb 1-1: unable to get target info from device [ 1369.662255][T22509] usb 1-1: could not get target info (-71) [ 1369.668287][T22509] usb 1-1: could not probe fw (-71)