last executing test programs: 4m4.593283437s ago: executing program 3 (id=851): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)='\\', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) write$cgroup_type(r5, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="5615327e665932fd5f7065726dd77f97c27a964e6000"], 0xfe, 0x0, 0x0) read$FUSE(r4, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002200)={0x50, 0x0, r9, {0x7, 0x8, 0x2000800, 0x238d117e660ceb5b, 0x401, 0x6, 0x7f, 0x2bf, 0x0, 0x0, 0x100, 0x27}}, 0x50) 4m4.106924962s ago: executing program 3 (id=852): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000240)}, {&(0x7f0000000440)=""/138, 0x8a}], 0x7, 0x3, 0x75) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="30000000010101030000000000000000000000000c001980"], 0x30}}, 0x0) 4m3.099035783s ago: executing program 3 (id=858): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m2.906098324s ago: executing program 3 (id=860): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x6ee, r0, 0x0, 0x0, 0x2}]) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) r3 = memfd_secret(0x80000) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0xe, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, &(0x7f0000000580)=0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="3878887ef1b9"}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x58}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = gettid() rt_sigqueueinfo(r8, 0x1d, &(0x7f00000003c0)={0x5, 0x6, 0x6}) connect$unix(r4, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000902000000775b"], 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, &(0x7f0000000040)={0x20, 0x10, 0x1e, {0x1e, 0x1, "7399bdfc36fdcf7de3b836c13d9eac45660e77b098f5557d3fc8253a"}}, &(0x7f00000001c0)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x1, 0x6e, "8a77939f", "ac6beb27"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0x8, 0x8, 0x1, 0x6, 0xc}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000300)={0x20, 0xf, 0x1f, "da56aa7bdb469dd7c852864440033d54a6a378a96ff2f4bb8a284336bd4f25"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc3}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x80, 0x10, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0xb, 0x2, "9c51"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x6e3d}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x17, 0x6, @local}, &(0x7f0000000840)={0x40, 0x19, 0x2, "4d98"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$uac1(r2, &(0x7f0000000d00)={0x14, &(0x7f0000000c00)={0x20, 0x10, 0xe3, {0xe3, 0x31, "7fd76576767c4deea83cdc1b4fbc5ebde4e059888a07dc57d4bf261d6343864cb168f1639dd1843003524cd7dc6204079b0901a52e1900e4c4ee8f203d9b7070499fe9e2972074ec90802c5c8102b7da1f3e617c7eaa5c256e4845f0e78647fb34507dd7d9814cb8396ce54a64df89c39d9aedfd5db6b38812c44ae1af1ca3401b28d5d033c0a80ebe844c21065ea722d51fb9d8f371909d1b43b138f76a47f832019c4a0a637cc0d202e6d69ef2d38bad7584a6ccefc658f7c026bbb5bf08d01d03d607a2b78cb10381031147d138abcc07a85bc68a5bb700256ac43489954ef6"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f0000000fc0)={0x44, &(0x7f0000000d40)={0x20, 0xe, 0x89, "e60fdb610239c885383411597b9ffc2485a50b70d832985a6e13f253a85d83d0619d59857ccc6fc53706e225973741394adab8ae0cf4e2ca157bd1aa801e969b75f47044153c58f11a5a4d92159d07ef794bf4578e3fc9d6bd1464c2f78edfed20ecc718643aef1f513c8de01e55fbb0a1e25ed30471ddcc4469f77aa1297a80a5c514c14c85726c5b"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000e80)={0x20, 0x81, 0x1, "96"}, &(0x7f0000000ec0)={0x20, 0x82, 0x1, "df"}, &(0x7f0000000f00)={0x20, 0x83, 0x2, "8374"}, &(0x7f0000000f40)={0x20, 0x84, 0x3, "3fd45a"}, &(0x7f0000000f80)={0x20, 0x85, 0x3, "3ed79f"}}) 4m2.0230327s ago: executing program 2 (id=869): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r0) (async) r1 = dup(r0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x26, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x26, 0x0, 0x0) r2 = accept4$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0), 0x0) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000240), &(0x7f0000000280)=0x10) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r3) (async) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) read$char_usb(r5, 0x0, 0x0) r6 = syz_io_uring_complete(0x0) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000000000)=""/226) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r7, 0x0, 0x0) (async) write$6lowpan_control(r7, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 4m0.729688936s ago: executing program 4 (id=875): r0 = socket$inet6(0xa, 0x0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000200900010073797a30"], 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast2, 0x80, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000100)=0xa, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x7, 0x2df7, 0x35e, 0x1, 0x1, 0x7ff}) 4m0.454402193s ago: executing program 4 (id=877): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10000, 0x1, 0x1f9, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x48, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x4f, 0xa, 0x2, "3258c54db700f4ff40000000000000010000000002000000000100", 0x48524742}) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) 3m59.472373654s ago: executing program 4 (id=879): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="3000000012000916", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffc}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9a5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x8c0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000100)='-', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000040)=0x14, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m59.447361278s ago: executing program 3 (id=881): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000280)='e', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639"}) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000240)={0x0, r4, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) close(r4) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@private}, {@dev}, {@loopback}, {@dev}, {@dev}]}]}}}}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a50000000060a01040000000000000000020000002400048020000180070001006374000014000280080002400000001408000140000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000081004a0000047e42b23f815f305c7015f66e1ca7ec9c5cfc50941fbe3442005f173b7a122f674f6be4a6d81f65d0f314b0485fd1451a79f266b6a201d2bb14469aa034593fdf70b58f67"], &(0x7f0000000080)={0x0, 0x3, [0x7c, 0x78e, 0x640, 0x70c]}) 3m57.845241279s ago: executing program 2 (id=883): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async, rerun: 32) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) (rerun: 32) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) (async, rerun: 64) syz_usb_disconnect(r1) (async, rerun: 64) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) close(r0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 3m57.770358112s ago: executing program 4 (id=885): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0x5cd, 0x4) sendmmsg$inet(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000001440)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="cc4eccf052af29c7826e343b86301ccada305d4c21e8b85aeac4568bd97cb7091d0e7c93ab268f4fe678062a940e4e1b1ded8e5e1973b855c82b19b197563f62bf3b2b1c284c9ffa60b2abf260fdd8b90fd430952ae3314f9e3c413ccf338dfd434e2c541041dcc7f55541d8e202ce79fccf46f1a7", 0x75}], 0x2, &(0x7f0000001480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}}, {{&(0x7f00000014c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010101}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x6, 0x0, 0x8, [0x1, 0x8, 0x3, 0xd6]}, @generic={0x82, 0xf, "e409b965021820b8868a39590d"}]}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xb8}}], 0x3, 0x4000800) 3m57.731489378s ago: executing program 1 (id=886): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) (async) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x20000023893) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r0) (async) close(r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) syz_open_dev$sg(0x0, 0x0, 0x401) 3m57.606968014s ago: executing program 2 (id=887): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@arp={0x8906, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @private0, @local, @private2}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0xeeee5000, 0xf0, &(0x7f0000000940)=""/240}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) unshare(0x64000600) 3m57.39544769s ago: executing program 3 (id=888): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000100737900300000000044000000090a010400000000000000000100000008000a4000529cbb19ef01f5b23c742fda7a0000000900020073797a3200000000090050b88d73d8fe88fc1e4ebf010073797a300000000008e7cf74ee00001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003f547"], 0xd8}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x0, 0x22, 0xea, {0xea, 0xb, "d657cae9a9ff0f60849371a64b2078d266fe40f1d5404f1c0c2ff4d5ed4b6960ed0792bd89bc336b82c9e7ec94ffecba1bc7b03249c65bba8426d288c5cad6df91077ddc20126ba7124c927f48e4e5e53d68a05bfeb67ef6489ac1808ffeb4a31fbb9fe1af1197cc85db79a95843928bb53014169af0f7f265944914a4581e2fb2e048a18ca919d37ed71953dea548b4fd40acb19b58366f4a0020047983063d4471b63e49a584cf756f86d9da24195df75acbc3db3af587b1a5455008f100b2c54ceecb5531df66397f5535b1a23eaf6936bf392be9e277e2ac4f72a3d187572d605a0a050d3624"}}, &(0x7f0000000480)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "5991990b06057cc50b40138df57e711bf3a05bf84570d55c195b189b3b1b474f1ae05b2ec16f780ea0daf287abc0895b7077672086239f372f48ec922fad9a52278ed660458330f683f74c1bed34539731ab621ecda42a9dde80d8fd1fa94d7a74446f0565bb8957c38be74204302bc198b120e18fa0778b4c74e98e4d3bb13ce1ec3c4f4f03562f95c7811b30e303afcaf4e9bf15af88931900abd91b"}}, &(0x7f0000000040)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x6, "ac28bab9"}, @main=@item_4={0x3, 0x0, 0xb, "7c00d886"}, @local=@item_012={0x1, 0x2, 0xa, 'k'}, @global=@item_012={0x2, 0x1, 0xb, "afc6"}, @local=@item_012={0x2, 0x2, 0x8, 'UC'}, @main=@item_4={0x3, 0x0, 0xa, "dba3b2c8"}, @global=@item_4={0x3, 0x1, 0x8, "cb509a36"}, @global=@item_4={0x3, 0x1, 0x3, "f33289d3"}, @global=@item_4={0x3, 0x1, 0x5d3fb7bbc0960219, "e1215750"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x100}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x40, 0x3, 0x3, "dedbba"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x1, 0x16, "552cc9b03ad6605bae4cf31ac7cf4e648867240f7bb3"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x81}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3m56.891620533s ago: executing program 4 (id=889): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create(0x3ff) epoll_create1(0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) close(r2) getsockname$packet(r1, 0x0, &(0x7f0000001480)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x0, @mcast1}]}, &(0x7f0000000180)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r7, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}]}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)={0x24, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x55}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m55.657972703s ago: executing program 1 (id=890): shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) epoll_create1(0x0) socket(0x1, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x60}}, 0x40000) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000500000000000900020073797a3200000000050004000000000005000100070000000d0003006c6973743a73657400000000c4fe705f161bb05b491914cbfb949b5d06a4d9c7ceb43fc3b8da459b78d1c10195a1ba227e187c76317726cd9c3556d4c39b100e058784001e3d83375de04628f01a681ff90263108625c2bd7e5c4ddb7a36d01d76c516d62fffcb53a4515d997c5b5dd72607aafccfb0b99c149b869e0f14782dd6e0"], 0x48}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000780)={{@host, 0x4}, {@local, 0x80000001}, 0x400, "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"}, 0x418, 0x800}) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x38, 0xa, 0x6, 0x5, 0xd000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x38}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x289e0cb5, 0x0) lseek(r5, 0xf, 0x3) 3m55.506981106s ago: executing program 1 (id=892): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0xb, 0x32165b32, {}, 0x3, 0x107fffffff, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x401, 0x70bd2a}, 0x20}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x80) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m55.350364089s ago: executing program 1 (id=893): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x2, 0x2, 0x76a, 0xe36, 0xe7a2, 0xeb9e}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000000000000000000007"}}) 3m55.098848129s ago: executing program 2 (id=894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa000032a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000240)=0xc) ptrace(0x420f, r3) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3m54.841218338s ago: executing program 1 (id=895): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xd1, "0ad09e6e905e55da61cd1bd603106b7cecc6cde0209585bbfdabcd9e6b8cb61f19c892ceb2fca92e4c9d169952fac0af67dd786bf1afa27576bd3bd270693f841b5b8b40d2c9fdeb6315a688563e1e1ca75552a2a88112136adaeed6d5590e31fb68c55ebecfb25c2a1c255a1a6d1f71983ac6ad0e70e6bda694b20c27800aa20c51b14af6543cdb3cfa98e93373153709163307733859e89591815ff65230a95d6e3463e44a95a612b1c1825a8901d1660dc881e79425a80a46f852542fa9793e846a387b416eaa3754bfa6c508f19547"}, &(0x7f0000000080)=0xd9) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@private2, 0x0}, &(0x7f0000000380)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r3, 0x8fee493263eac30f, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x73}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xd1, "0ad09e6e905e55da61cd1bd603106b7cecc6cde0209585bbfdabcd9e6b8cb61f19c892ceb2fca92e4c9d169952fac0af67dd786bf1afa27576bd3bd270693f841b5b8b40d2c9fdeb6315a688563e1e1ca75552a2a88112136adaeed6d5590e31fb68c55ebecfb25c2a1c255a1a6d1f71983ac6ad0e70e6bda694b20c27800aa20c51b14af6543cdb3cfa98e93373153709163307733859e89591815ff65230a95d6e3463e44a95a612b1c1825a8901d1660dc881e79425a80a46f852542fa9793e846a387b416eaa3754bfa6c508f19547"}, &(0x7f0000000080)=0xd9) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@private2}, &(0x7f0000000380)=0x14) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r3, 0x8fee493263eac30f, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x73}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) 3m54.683959206s ago: executing program 1 (id=896): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xffdd) 3m54.573434892s ago: executing program 4 (id=897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[], 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$netlink(0x10, 0x3, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000001140)=0x10000000) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000001c0)=0xff, 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r6 = getpid() openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 3m54.523596877s ago: executing program 2 (id=899): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0x5cd, 0x4) sendmmsg$inet(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000001440)=[{&(0x7f00000003c0)="f4b15e75a22cdac53a6432030ced1c829e440efd182886105b8f8aa885824d4ff6fc2099f8661fb8890aed69a99d5877f753a750e3f44533c71d78a34c840b6d8f4fda708c157e02546ef545d5db477bd7d322801249ab9e9f3a6dddeefde3862a4d7a29022ec58468c61cbe8ee1bc25fbca853d1d514c045aa8115779a0f8f826a5f9794bcf7b727169ea448a9ab4c46ebba673656bb3b55e547cf893a8809ebba4c75210491d6ba3b1f9bb79704f0050d092e19ac58f6b4f4a1bd375ff9762a094997eb8170316b7631f8783b31f10b496a46b08ba0644a01ac24c13a50c6b4daeede952062a546ee1895e26b8ee991868aae3670bbb09dfefc31e9f41dfb5e863725ee54dda44e64453d04a1b5aa77f62b2aa43f2d03b2397994480d8133919da1bcff54483c287dc3263f1724f43b9299496640bc06ba3bb2855d8bb5bbe1094523331ddcc6899d56dca9edf139729dcdee7c6c1f1c7c7973b1d0505b0acda79bc9c89b1acd4510d082dd01adea0ddc6b123147f1af26dbec71d1135e1571722b51355203eeada45f94ccb6e8f83b897b8eb0e9dadc562a0283571f65db5f8910226da053ad5e17766fb8a59b1d4b4e1615fbfb490ace4fb0e9c5d2f711d7bc878d945687551397b2bb41016a80a6035b56da5a5f9a3a737b686b07a597c21ceefdcde87309fdaf7aca1716748e256e5eb9bfe53f88278ae7bb4a51241a501cb6768f61cc5b0ff63f0e7e5286acbc0ec5de13492a09e446934fba3cccdd032ddf4c44eae9e0f78ba4bfbc9e453f46cb5507c663ff48911bfcabfd8e615c847e5393022f90bee745dab6d790b863b2b03a7fd1e29037876695fb306cd13074988518014a1872c2cfa9a470a22874ef1e877d5c50fc20763dcb68eb01d69d59cfd5fa98a3438a4fd5b2870bb6aacd8aabf7299079a54060853e845d1d6dc1ed2920744018da0023457e5fe11b87235881b11157086a4d90f4e5455f96de0dc212f0a638d8439f87200b99d7d1a556de70106962b926ccff94bd3a555080eceb05aae013c20186a0d917b4020653fc838c7425547913d8ff356f0404af10604861d37fbe41cbf9c33716af424f512927594ad012d858714fb1b3765e77c8b0a5f5a6a16f838a9580263f0b7aec2dd8166d748fd7f54f33e2a3b065ea0d650a0a2599ea3839094636a9b1df078c6802d30f1c8a03bde02eadd387c4baf59c16e9e9e628c4bf96de9bdca3aaace60759369fb329573e5dcaac4c63e1b201e5ca1280cb86c1949d249e49540a801ff6122fe3094c4b54a9fdb5f25b1002c1728bd6dfdf3a476d403eedc751d8724e46e05fbb07acd06f354679a6f74eb03c1654dae45b79ac71c5af6e7187c246fd70ebda2d2521fe3a877a7b7391ecbd25e716d8f9d145bb76a7d4715f2979f13e48cc6656946bd9feae67a0a36c6ec377e1a37593aed1c5b82671e0659527b9afbc5bbe6e77cf6b075c8a397420dc82495128d5bee6ef269a3d6c19027d0477b8f87ec3f15c70fbcf1db5090b8eaa132083ffe5055b42685b0f3cd36d7dd78c6e9b8a6858ef59df67c130c12e54fc303b96c81f99859bfbc018f024ece2061731924815afc7f961feb98b152f1c6de779b31a8705ec0804411f455650fc108ff7313c85779891eac0ed2e408af54188e16c8a8083860b6bdc03914390a932a0bb25254c014fa12cd794d7a583b28235538ebb88e4c318f6f8e1f806235b77f0d8b105636261a7daa8924bdd39ea72c42d9adaaba027cdc531b4c7402dfaada357e371c2c02361cf60b70859afd386876ef025e596dae484a3fed1ad2ef34d7a5aab3a3526b505ea3005c766d5baf4be97ad7e7eaf04b0a7bea6d3ba451df8ae27903fa8e61849985d672d00c64cc2550895e3746ee16032fd45ce9e20bf90b0671d177c692abfcb8c23fe6242617276acdee3fc4bd89dab9b618477e7cda73b8164be216a799874444168a1e853307ddfe2484dcc51278cfc9449a1543a875a0541d977fb95b3fd5374f1f916b6e61de5014b622f51d0caf40713d7f269fccdf0e44f999d0d99c95c0aa164cb5554383cc21f1f222a1450b3b630a4593e5f684cacb55b4c0e2a4744c39e446a150d89e692d3963ee9234c67cd208531346a82ba4fcabda4ec63127f3f7ab9ab4dfd7f15d3ba4191fa6adf1faf94cfab8855d4ce4f5fd0fd33bb43b9ea7878a47da38990bf762e90a06177afef6438fe9801f23f7377aba3d102eb2f2912475c31cb2e954e69297a3bd3b03021d87c3a403df09dc50c3a18dabb6ee164f671fa8f8308921a92bb2b4af067e20e1454076a2b1223088d42740b33a4f815ab0898b44fe09cba4a6d1849a022a1b05a7b1eecdaf9665ea6499a3d4cf6aaa1ad453ffe5db7de0526ded33e0e0efc90585f66ee3354b97f7994417931489c24d8423cee9a3864c903e91f390969d24c3f8e46c16c95da74e7bed72b9c131a4edb5fb0b715c91b5733bb3744126b669a29ef307a9504cb13284b3ec0d3e439960dbb7a72cd4bff34d04e43b0584f2600730b62edeeb8943b1fcb9133274273e75528822dbda95389d834a4163aa435b1f09bc42c7e8c4aa622d890487b0a09ebccae23616c3f8d0a1f27c3619644aff6694041f9d513021701395cebfb4467487b885fb0c79cf0c3ba9304fd5f6f5db30215753809eda3dc5fc9602125206da964ea0f0c28b2cfa1773c5734b2f24bcbdfe02691627780cc53308551e1fd99cec120b7e131d39f49d3153b0a704a3c693fcdf4c0aeb4d4f5719ff983099a22eb029ac0e954d023ad6bb56cef14ccaa10acb00fd41a2b9d12fa6e52a7ad5dab3aee17e1873f4c7812c2b4000ea888b753e02f9a48012b1ae4df2f40eb3175e0588330a616987a06068547ad0f9bd7fb4d6e00157740ce204ece7d5bdd79a449c7754e60b7162b8ab35a41e5b593db08a48bae56e1860a5608e51442de6d7f77c3f65aa0d1a6552f1e4c51c1b384e2d73a70fdd28df4267f57c7c414268415742ab0148e3f78faf6cc68a333b7cb0ae40c081700a58595ec50a4a7d6b0411949c62bb69328b1aa9d2a0ae079c198c50fd1e2638210fe5836374d1b0d6a2fe21b6e132c11e1b007c5e9e5dd6c5902121f624afb60f5e1dfa89b83ebfff66961af22eb3a5d87c940df67a09cdae9eaeb98474f1a04ebfb87e8b0efefc0a0840ce2452945745fc4a6d5d78002b7f2da4f0e05a60cf4bc80a59b2e6c5cf15cf5433a5499202de7ffef2031b3a26d5eea3e0648a7fa1ed96b51e98f9ac6b0de48280cc39f9aeebfafa5873427eda655474bf08955cc1fcd5ce0a07262216d81c8ae19d4044c556cbaa15189c41c585549c40991a326d535d6617847698b22a5a7be78e4e5eb70afc9e36b4f960b846c65aa25f72612f27cf80d260687f9e65b0a3ef249249a44ce5ee92fc48548ce016476cb3a61ffd301a4fc50bff29b28f4dba2b0cc7005c4fe408b52556f008ca3aecfd884ae6515f704c22ec72332b9679d796a8afaaabc3892d293533e98d95f55c714b148506267657d1d2f3100cdf01a58950d315e162daecb295fed47148392dfd8b2354fd6d6d745633908056499e0641ddf266dee36801fef6e43976761a731bc7a228de0dcacc4d491c1bd3566e91d2908d368d363b99eff553507a5d5aaf248a9739f7ef8db4cc881a27a8543a2e286ee9137535f19c50363267230160a8ff209f39e946687c59620b9150799cb2a1c9cd2494d7dbfec67fd8f068ace7da30be6e50b62b16dfa2239ccf1e8fe10bf719b4596da18a872b080587dbf7a3602d38de77b7bdac8a4e204d8d8172b80ec3ab19502c18966c41a9d11c45eadd7b2dd21ca5283b914cfd32a19733700c922ea88993ca48ee1fb9e877a56fa7462818562a20b5041de7f23380b05591a68af8d4067db7924020297281faad256b52a2a7760c36f0485d502667aeaa13465be3dfbde473196ee9d3f5906746e76bc0fd668da9753d00628bb634a339dd0d3466497a47015ba1d7c3c753e9ca7205271646812e854deeb924fef4505b839d28d4761eef7ff43afb11458845a7d6f92b0f83cfb95e3d3f4a4f36fc017df355934d48b2a21769445a80759d31663f1d7d172c486e122a8cfa96c02c44fe4d2e67a669b81c3bb0266f53e5a176357204a0138d767555426f958e522b1b5ff88284fe6d7da4ce8367c2a3eb621312d60ff8a8dedd86a4897eadf0b74183469f66c5097c30d3af25dac701f79259def9cbaef2a10ab9bb99c9c1802168150b204b364caa9fcf6d9af2afe43b880c916bd8133d9ef304aed2e2062b299b3389fbdf975f6aa8d25b1bf9fd83a6176f79e40044e32ec50f44e46690d64629bcfdc0be0169ad10386cfe6a2998bf9fc2392e397e807acf816d78b373aab6d85fc9cb178e77e95c62905f39a14f22d2669895b19bb4f7cb1b5cec68912ea2c6df8e46dd3a0802e9ae9dc73f3d41337073789767715bf07191afe13691a49d907088d4d1ef0da463d6a54ec37cf0e911a6a158fd53f13ea3af0cc965f3f76d0d4acb70a12d0ffda0ebaa46dfc0cbc1ba4e1cbfa081a59ea766ea36ffc025ae7cb38daf88b1c27502725e8087452dc9a8aa2f2d79978478cce7ffc5057dea9dc7b1e9c004c3c8a6fa775a4621f5c985a8430cae81796e2b22578c1a2541d031c80a7f497a9cbe57ef201c443e23affc45e01e67770d697b0fd10eec67f630243e4ae085772fed6dc28f5832041f784deb986444e8d75894cdc53d8ae65d5d1870f454e0b9325286f88613ae98dce62bb18685351dba36eef59253d8bd89c8b6d17c79def0947a71dc3f35cbd53c87bf0a0cc6f906daa096ab5feb9d2acbf376d7aa5085cccdbbd53873ed51b9fa59f8875ae28dfbe7368fd2e8239408e77ae43a6d2a3f81d1ca0f2d23a347c4773980b2b420c49bb0b0deb6ff28e9912ef7c7c237427253eeca5840bed02e917f35c2dfe2f3aa2c9fdd0ae4159dea7a1d06590da6f85e9420013c950897263458628b13fc23ee6118503e1b50b9cadbb048f4a1083b8e337fe6ebcff0daf4dcc82c3245dbe08f42227a9cde93a99af22fdbf1808c80852c80899a4ebef7e8b468eec27e1d44ac3469d1f7277e2922f48441e062f7b9af7a3582f7633a603039ca98e52401602df3f6d1468aa658f6b4c406815f3a8265cc7c24dfc050ad4cd64030e0254a617a23d4c3408120239c5bab82b07b07cc84fb6f87b1ce185d55c7c28a923811d98a044c478a56a6eba0c564b131575026fa1c73d192f263485d35570a4c4ad202dbda35c8962b8a0f0cd9f319ff5f40fbfdfea4b29a8c53c66726d262673b3bcfa9e4afde3beaefa006c0361dc63368b6c49a3a4440e0896461676b071700aefff5b2865fa4eca2d1fd1a2bc66fd6df6cc41b7015f129c697988aa6710343bdc8dc10d81d8d51b927dab40276a8e6d28a694004977d0e3c1431e01ff9839bafbafa1cb0f956814d83fc659f05b57468dd496ffc10cc6e81c44a17bd0aea246ea53a28e860a44fef5486720afc61efa44bdac9b14ec066a6ea971a64c04b627da1f97235f833b0cf3d154306656f2a06cfd8a9104285d0d95327bbd4f86e49df4cb55c530355770ca244b324dafa878cf192bd56d33f116a54847cab8f62b8dd8543b45361c625453b06e7fe0edbc9c4b1f37055a7a4d56055e54960b2240c253a01d89f3a5ef977f1f0321a493a128cc09b769f8416afd74159001a2ea42015f6b2acd0c91729041e6c49e14f41842bed80c67c958cc790e9967453ab7824f6", 0x1000}, {&(0x7f00000013c0)="cc4eccf052af29c7826e343b86301ccada305d4c21e8b85aeac4568bd97cb7091d0e7c93ab268f4fe678062a940e4e1b1ded8e5e1973b855c82b19b197563f62bf3b2b1c284c9ffa60b2abf260fdd8b90fd430952ae3314f9e3c413ccf338dfd434e2c541041dcc7f55541d8e202ce79fccf46f1a7", 0x75}], 0x2, &(0x7f0000001480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}}, {{&(0x7f00000014c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x3, 0x4000800) 3m54.382310224s ago: executing program 2 (id=900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000ac0)={0x2020}, 0x2020) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7, 0x0, 0x9, 0xf8, r4, 0x7, '\x00', 0x0, r4, 0x2, 0x0, 0x1, 0xc, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x0) 2m53.211134848s ago: executing program 32 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x60, 0x0, 0xfffffffc, 0xfffffffffffffffa, 0x404, 0x8000000000000001, 0x4, 0x4000}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) syz_open_dev$video4linux(0x0, 0x7fffffff, 0x100) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth1\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x480, 0x0, 0x0) getxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000002a00000095"], &(0x7f0000000300)='GPL\x00', 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1}}], 0x1, 0x34000, 0x0) 2m52.564385993s ago: executing program 33 (id=896): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xffdd) 2m52.412480742s ago: executing program 34 (id=900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000ac0)={0x2020}, 0x2020) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7, 0x0, 0x9, 0xf8, r4, 0x7, '\x00', 0x0, r4, 0x2, 0x0, 0x1, 0xc, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x0) 2m52.108763754s ago: executing program 35 (id=888): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000100737900300000000044000000090a010400000000000000000100000008000a4000529cbb19ef01f5b23c742fda7a0000000900020073797a3200000000090050b88d73d8fe88fc1e4ebf010073797a300000000008e7cf74ee00001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003f547"], 0xd8}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x0, 0x22, 0xea, {0xea, 0xb, "d657cae9a9ff0f60849371a64b2078d266fe40f1d5404f1c0c2ff4d5ed4b6960ed0792bd89bc336b82c9e7ec94ffecba1bc7b03249c65bba8426d288c5cad6df91077ddc20126ba7124c927f48e4e5e53d68a05bfeb67ef6489ac1808ffeb4a31fbb9fe1af1197cc85db79a95843928bb53014169af0f7f265944914a4581e2fb2e048a18ca919d37ed71953dea548b4fd40acb19b58366f4a0020047983063d4471b63e49a584cf756f86d9da24195df75acbc3db3af587b1a5455008f100b2c54ceecb5531df66397f5535b1a23eaf6936bf392be9e277e2ac4f72a3d187572d605a0a050d3624"}}, &(0x7f0000000480)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "5991990b06057cc50b40138df57e711bf3a05bf84570d55c195b189b3b1b474f1ae05b2ec16f780ea0daf287abc0895b7077672086239f372f48ec922fad9a52278ed660458330f683f74c1bed34539731ab621ecda42a9dde80d8fd1fa94d7a74446f0565bb8957c38be74204302bc198b120e18fa0778b4c74e98e4d3bb13ce1ec3c4f4f03562f95c7811b30e303afcaf4e9bf15af88931900abd91b"}}, &(0x7f0000000040)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x6, "ac28bab9"}, @main=@item_4={0x3, 0x0, 0xb, "7c00d886"}, @local=@item_012={0x1, 0x2, 0xa, 'k'}, @global=@item_012={0x2, 0x1, 0xb, "afc6"}, @local=@item_012={0x2, 0x2, 0x8, 'UC'}, @main=@item_4={0x3, 0x0, 0xa, "dba3b2c8"}, @global=@item_4={0x3, 0x1, 0x8, "cb509a36"}, @global=@item_4={0x3, 0x1, 0x3, "f33289d3"}, @global=@item_4={0x3, 0x1, 0x5d3fb7bbc0960219, "e1215750"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x100}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x40, 0x3, 0x3, "dedbba"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x1, 0x16, "552cc9b03ad6605bae4cf31ac7cf4e648867240f7bb3"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x81}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2m51.790511167s ago: executing program 36 (id=897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[], 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$netlink(0x10, 0x3, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000001140)=0x10000000) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000001c0)=0xff, 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r6 = getpid() openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m15.198327693s ago: executing program 5 (id=972): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0490c0000000000001090224000100000008090400ff030300000009210000000122050009058103"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020800402505a1a440000000010109023b000101000000090400001202060000052406"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB=' \ad'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m13.097609562s ago: executing program 5 (id=981): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019"], 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000020100c0"]) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1009000036a500910000e7ffff0f000000ce4f64", @ANYRES64=r2, @ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f00000001c0)={0x4, 0x92, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f0000000100)="17d72030", 0x4) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) close(0x3) getpgrp(0xffffffffffffffff) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r11, 0xc048aeca, &(0x7f0000000080)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/tracing', 0xc0c00, 0x0) (async) fsopen(&(0x7f0000000700)='affs\x00', 0x1) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6038380000303afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe8000000000000000000000000000000201703b744dc5c6"], 0x0) 2m12.457799196s ago: executing program 5 (id=985): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x2172, 0xffffffffffffffff, 0x3000) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0x2a3288, 0x6257a}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x5, 0x3abc51, 0x2c8240}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x9, 0x2a7345, 0x13e1e1, 0x7a822c0000000000}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC], 0x0) 2m9.011014387s ago: executing program 5 (id=995): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') pwritev2(r0, &(0x7f0000000380), 0x0, 0x0, 0xffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd0800000000142f00fc00170b0a1ab3319199a0000000000000000000000000000000ff02000000000000000000000800000086dd88a888be00000000100000000100000000000000080022eb00000000200000000200ff0100000000000000000800655800000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfff0, 0x0, 0x103a3, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000480)={0xb, {0xc, 0x4, 0x6, 0x1dd4}}) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'wlan0\x00'}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x84, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x1, 0x1, 0x0, {0x5, 0x1ffc, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x7, 0x5}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x5, 0xf, 0xf}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x78, r9, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_b, @from_mac, {0x5}, @value=@ver_80211n={0x0, 0x6, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x5, @default, 0x4cd0, @void, @val, @void, @val={0x4, 0x6, {0x6, 0x6, 0x8}}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0x2, 0x40, 0x0, 0x3e, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x8, 0xf}}, @val={0x72, 0x6}, @void, @void}}]]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) r10 = getpid() syz_open_procfs(r10, &(0x7f0000000440)='net/raw\x00') syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 2m7.874319504s ago: executing program 5 (id=1001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x24245fae19a5c0da}) (async) r2 = creat(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x120) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) read$eventfd(r2, &(0x7f0000000200), 0x8) ioctl$TIOCGPTLCK(r3, 0x80045439, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) (async) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x6f1, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2], 0x5000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x1}, {0x2, 0x5}]}]}]}]}, 0x34}}, 0x4000) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 2m7.478710988s ago: executing program 5 (id=1004): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xe1, 0xd, 0xe8, 0x10, 0xc45, 0x6040, 0x2ac4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x80, 0x0, 0x0, 0xf8, 0x31, 0xee}}]}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xd, 0x11, r2, 0x1e67000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x6) sendmmsg$inet6(r2, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="c318964561a174f22bf25e7fad576dc7c6eb1f772f14320b5fe141ac216b1ca158cdf1d36addd6", 0x27}, {&(0x7f0000002380)="544e534c616d4ecf83405a75798141323fa1cc444f4a2e1584cb6ea0610ed6ba80785f09658e86c499a437a0a11b181336aeb6a33e1fa71f19a8f8eb590d8b61ef2e6375477a24bdf5b4babbd6bd4c1e8db97fc6594f50c160ab9eb248c7ecb7372ba7e279fe58f118bf590321c2a9345f14da15616228ad802b328389932f36c2fe03c42371d883d9b7f1df1c56d60105f81acc71ee3907fa6d4437890af455b7de82a911b8913edfdbb370ab6139b81de7d6df864af03994650197454dffb089929c52dc352feba8a5584ff14c20365c2cee143e448637ff49f5ddb5b529ef47c914a413c0685cce2228e6818a71675c669dfde9729c70e10d1250fb7675b5977869fbcde781531f6f8c5045a295f305777cd6cff0930905d4482333ccb0b9d53af8baac0db4b67ac140d7e8407acee2b53a7a4a89ecb2b4b5fbf1f749ebc88a038f568cdbef8cc8217f1ad3c1be318f0a0b6c7d0051afbd70ffba95b27d48c98ae894fb48486f98adbe80d386adcd05ede71d82127fb22752d93472123583092d1e05e15ca8d1af40610e27121d887ade2656a2b0f7ea24cf2555575123fe3ba6aa9ddfdb92430574d487201d2436c24005c099e7f71d46674bb3704ff607bbbd8cd30d7979c1e4b9e023f0b9e079f30494dc4cabee529d66381b040c92077dff1f324777e10707042d630960f088e095cc29eb7743f90aa1c4f584c3440886901ef8a03238c497057d158fe2f8d208126e8096f4a616fa44cc293f04df5e6fa09f3fef6635f4ab79c77315924c5e114202bfa5cb84e3cbadcda0b92aed9c39fe5793473b5c57908baf5f00c81752988d0b677f9dd19108f9422cfdcade137fe2566dd9ccd0d4ef17e5783bd7e4bdea96ce38de295ecc3b064d208ea9402d4664f64cac09d718565ef37a508b266b31bfd05d24887cc27aa72cbb1bb2740db7de546dd0c66ded9fdf8afc13a46fb0b7bb6d04ec309cf3eea3261c4f0dd55c6269227fbef2d810dda06b6d751984561b96d2ed363526f9ec163d69b620efa377f7c8b74e242ec70a8f465471db0e97ff98cc9021817fdc754b3cb76dfeb6a767623fdee17db522d4bd126f57be7c61f05c70a443906bcd2a999dc3628e938165a4654bb5c5e04fbb5394bd75603b3c8b5eb5dd84759e353ea0577d283e82942825e7157f0d275206f3934f2b2a924902d7fc4005e4ac3e64a3dcaad6757dafcb0189d94f00f0f000944a87cf92bde38afbb8265e6cd5d5a9373b1845ec91b9f7e3517a4593e0d88e7bde3661097823e381df40d698bb8bcd5250ebc43c53b06ec0155c38131544e3f9c2ff7dd9e40317c34bd26e22752b5d9e9920ae91ed393ba04f694d34a034a0ad23faa3fcdbdb494987a4913ea40063b7d5dd80aa9d8e833a9bb34ade07d6394e24647cd4a86a819e4e6b68460f53972fe49ea695d9493eaa35ab6bb3c5845049d35dd5923579e86d23d9c5d99bfc89207082bf4dc5381e7c307d1ebc5250870bbc8d7c42088786f981b2f6a3187db6f46e98ca0768b93baa90fd55667da5396c0361de18c7622af44fd38dc20732f4cae818126f3218da20d09c723da84443e2b86b8dce4885c139821fcdf616eb35cdbd898caef02d84293ba78d9361804e70ab50ab914ba2fcf9a2f646ca77ab865c1c97604ea5b2223a14277c33ef4c177db251b3db8fec3d7a2895fa0aa41d3e2626bfc95bec63e66e30249e3ef765434216d5f7934ed7cf0ad82e93ab01db3aeeceb2a4e42a21403f9633ad6956fb5f57312568a616cf4e5397c03cc7a0817d650a3f17f1e16049d60b1f31d633ae32212cf84215469104abaf21db07a7b4287766236aabee98e20aece2cb9eea789cf48ee69c44a4e1cef16a66b344b53f66c47473ad6ce67f7e4eb0cfd6256b220cfc49e074d99f6851073ab17fd442f2f17523715f94c02fc469d2315042e4dcf0073a40d78fd123754ac5142cde0bd3dde0a51afa2150ad2a278537e5ad45d23fc98b33eac8ea7c8b3907c01d2bc9a021a5edd38f2d2573c8e30f21046e1c7d9e1aab48c1f398a78a1e7a190b297154eff32889c7318a5aeec7537795eafba5b188aef552873f775f9e958e917414a09d7e5b5cc2884d45bb21841ec17384905718252fbc1c080da21f806ccb69f4244eaf42f561bc56859063afcfd3510b847a40658719fbf5f92394a87a41a701914dcb42da892f4e82315414fc567b3c47614c710920468637e169af7d20709e4e2f71d20e913ad2271b6aa5b544ba1bee8d8b28f14756d6681dcdba1815e6780252f19aef764d22dd1286b3a6654458923cc5d2f803950ea89ce842970beb3f6dfd6189fa8d9cc7f09fa5c8e3d07f2e92de9a6e225d02a8d6a6abd97bdbfe2bfbc7ae62563b528126261b375c269bd1020c2507ccec578f4f6817b79ce30ca011488732beb7f40b72c85bbbed57b46eb536a85eb5570fb74c9470e6216dacd630736f123aa443b4c3a19b462222f3f4631148cf06ee0e2b4a3f5d17cae8391f0aec73af857e61ce2a47b646fda0bbb60ca10100f6d1f1a994ffb8f9a9da786f49aaa0002ee2065fdb6854b946b9380c45d464a1396ed7071e8c0a82a7a85857773630ff15ee4a67c677779c5de6776cfda561973bb4a709207ab22be17ce53c995497cb40e329b6203e29ecebee4995aa247ee9dd04bcdf2789c1a88fae0cf8800aa2e83ca3f12df0b388ca0d35f564dc628b47263e327e95e10a0c7c2885be9556530d1b8e44822725577aafa1462138f8108ed72fdabad22e61ccb630688ec3772f966661ac8754b93a4807dfc8e9901882c7094d891781bd8e6fe8cb62874b96dcc359d6a8bce17319a7ccceb37f15fafea3fd028ebf3ffda85b644deb931609ff1b5f341482f32e4f7e1c3805b6be2498bb717816095949c1cf5127120fa6ffc98ac7285c4b975b532f8f94d51e20d2589652b6217ebe7afde34bbacdd9a9c42fc064c2bb1dc23f1029431b2ce9ae905b5fbb32f6570ae6f8e468c7db9bbbace857f9f80a2c99842a82ff338769b7d9b91fe53bd822dab4e6a42d93f0dae2766659730c533e107b9ebeff0bea545acd7bac098329290f5a6206ea7ed443944d3599d8601159990087bf503643744c207f45557265ac9ff4df6f90961948732a93ff052452b8cd59e20731fa89fbca8949279afc6f55243cfbd253f31f36e6f1a27c55a6147ab72786713f67faf566e604ff205b7f7e638d4c9582cbfaaf46c35d54de4f84b5e65a350581ff1feda03b10cb07b6c463ea0ae5eb6228d917ff45575673668489d1b404ae270695c7464e5e7fe2d7dfa8e00842749d3c6b069290e4923a966ae5205ac01f053eaf31eaf29336ae72ed055d1f57db117d3b37d62240e1de1c00209ec02cf685237de73dbcaddf29eaa29f2c517ed45d78a2d11358d9e801eb9ab48b2f6d2c5d66a035ae46189fc74a1471ca1bfe46665862618a8acc919b53eaf0a086f7c0ed61ead1e9f5e5714e806a32d44c2b683b3573dcc8e3ecc0287e2985eac9e0cb5ed92bc46cf2147103c1047a418f0271b53ef30a056d7186cb8b2a6008ad0709084957fb987239c9ba8724aa5bc133029ac5258f4cb9f3208d64dea6a4ba08fc37c9ec33a857523484b80a56e44727eb36ea8de365cfd2772cb43e191d2453eccb2a116a2f810d61a3fd7e06475f23ed7a898de15e2311b7568a94c11bf9b00f4351bb81009034e195c956a9e3c9b5256df1d2c53ae90df26bc2f4e033ac9e73141734f95c6edeb15af526596a60907e1d973323e707467507853639fa7f810d693296c3a36bee2c9e236a592e8812b8e72b3f4af9de077c628368d6b0db444261934111f2e5ea87c391aaf4d6986b5f87c9fda57ed24ddf6958ac04b7ffcf2a9cc29e2ab68102d1fb00a1033ad16e0e5e4fb40e3bd24b877e570014f6df4d027ca0924dd7801a7b09f5b539ba6ab3f187dc8deb49ce0c122acce1beaae2818439de3971b0cbfe4893f3117d9b832a989251115f5d3c565759d670d8b0c64f59e6bfe5586caff76c739b09625618f7a7dfea60f85bd1fe6307b877352eced16354747ff4c763223213d508f74f688f33da3d0102455ee51231197e3c0418ce37248ddf72014ab515a92f26deeb1998019ced2e333fb3c55218df7ef80e6f0fb784b25f79724586294ce72d16413df31f49d538285488fe28c208098ab3efa718f7965c2a3c8d15b5ef4f88c5f608b756bf9cca173332c7c8a4c4b249b5038ef08304b13b612cb176ca0bf8d85635d42ca23e94b2838f6a04bd96b42c32a7fecb74ff846354537212d192c8cb30f426b45adf021dd8a312b5cef4e555c0b12aa15371ae76e02e3f5a9294feb50bd64bbcbaadba01559c8b27c7bc79fc477c4f8972be157e5171ad5a195d50b267b3380597d9caeac5dd35c2f89efc120f5d21fff037e5f96a959bb9ea2c62d3f762d06c287a03cbadba84b097f17cacb25764c6fcc671a959979269cb3c7063832c040421b2704542d4c2e2cae74843033f05632cae575eb44d14684f96e5c658315c8a411293be9d84fdddb3e0a94910f14c3671055639b9886a93f219b2ed5469141509ca5c97144a7f8078e32fbc71947bcb6df396268611e321beca1e1caa4681ab88b6289842a8a1b8fb0045f258d8423d5e3902381d71bc082828f0e3b44560e5f7b4497e415bd0d495396879a7743688479cf0f403c22bd54679e9bcee2b11b26a51172c482e0da9b33e98b5b4da01e87f58d77183586d872869c0b3cdb58aaed827cc51509cf92bb11a724692b5b5b5a52a27a16be0593fb7add7b67cc24fa8dc7d222ec876a7c585cbeb0db679e60a4a61ebb397ac0317a3a96f1730ddf0f7180d26cee5b0efeb403b142129d285eac4070adcf43941367ed4499e5cfbe6e54e8da6b330b3b01c21c7cc14942a95b1fec1065a21bfb711b3bbd8f8b2a025267472089b979f9a9cad7155b70622a138a2e93d5ee2c95f29b09fc21bd5099617b99c26d5d94b63fc003dc32c8cbafe065ee8309adec9d1eea02917872f4bf78c12976256c11b9a7f1131b2a4d25c5d577c54de850b5711bf241eff5f815ecbf52411b42326ca8bcf99f9c39fbf7d1c94b61b8c7958faa4d8b5ab17eeea8907a426130b5b00ed5c2b1edc95f35bcb81ffad5d8a21a4c3afcbbe79e6a23bb8691094a847ff457e9527339c039868a763a21a8af4035d08d039598381f6e30135a0b70563415023d4cbd31ca5b7937f6762b52d8b7740930a094991ed7bd462d71dc48ef2d0ba2afb39d47ae658fc7dfad71c33861149cb6c9b49839ac4766596bd2b028db415a56f4f022f688a4f166721ece61b61332a0966d81ed4d9e30a27c3ea122e7f32a4ab2910f8e2c65adb6dc2c511fadb22eeb4b392e6031b5ee8444018f1a6cd1fdca684cf497327797b82699169d11cde2baf8c98c41f060de6726722d8ebf2cf8bd78aa353db70f4fd2a38e8bb383a350aeb499ab8156ee54129a54adfb3ce21fab2a0d8fb9d6fc72dc666de294c28ccbdf585530fc04a38bbb179b3f6dccc7d7598450527f38e177140b0ad859d4ac27053dca01d58f1c47a5acef432b73d316bb28378f23936d1e5eab5f98f76e699beabfc3494d0736d1e2d3f89827edc1439bfbc24bbd87f308a177d47eb305eb01369b3e7ac31631b4b26d7553e624f88f090f1673491503d5d6fe01f16b6246119bd13f872479968400e7f2e12", 0xfd5}], 0x2}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m7.297733902s ago: executing program 37 (id=1004): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xe1, 0xd, 0xe8, 0x10, 0xc45, 0x6040, 0x2ac4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x80, 0x0, 0x0, 0xf8, 0x31, 0xee}}]}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xd, 0x11, r2, 0x1e67000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x6) sendmmsg$inet6(r2, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="c318964561a174f22bf25e7fad576dc7c6eb1f772f14320b5fe141ac216b1ca158cdf1d36addd6", 0x27}, {&(0x7f0000002380)="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", 0xfd5}], 0x2}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 9.939040949s ago: executing program 7 (id=1387): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xf, 0xa, 0x80001) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008001}, 0x4000000) r2 = socket(0xa, 0x3, 0xffffffff) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x211000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r8) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="290a00000000ebdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="2400030000"], 0x40}}, 0x8040) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r11, @ANYBLOB="600a66344408f39cf2a38f7a6d0d9ef98252b6b1a2e65bea83b1259ed47c46ed92a5235ae8d00ab422000422d97ee7ffe577ecb669810aa051411dfc8b10bf11e1be1e217aa20691abe1016e4becde6939494bef89e282243209cff3353afae362a487c7b2f3b6fcced0f2eb968f54bc"], 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0xc, 0x0) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$getregset(0x4205, r13, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r14) 9.441068881s ago: executing program 7 (id=1390): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400d8000206"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400d8000206"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x800000, 0x10000}, 0xc) (async) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x800000, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) (async) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) socket$netlink(0x10, 0x3, 0x2) (async) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) (async) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) (async) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) socket$netlink(0x10, 0x3, 0x4) (async) r12 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) (async) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) 9.102339653s ago: executing program 8 (id=1392): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xffffffff, 0x9, 0x1, &(0x7f0000000340), &(0x7f0000048000)=0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {0x10000, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x0, @in=@empty, 0x3505, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x60) syz_usb_connect$uac1(0x0, 0xc1, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @as_header={0x7}, @as_header={0x7}, @as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "839253"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "8a72012f619991247e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "", "0100"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x1, 0x71, {0x7, 0x25, 0x1, 0x102, 0xe, 0x8}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x0, 0x4}, 0xae, &(0x7f00000006c0)=ANY=[@ANYBLOB="05f16ece0fae000203100ba61000c68f076287737e3601cd9076313000b57a84d31489e6c731549f3b8451ab6bd92bedddb73216ba827d25965448f106245f5fdc59659a58a65dc1022fa78d764611f5a059d74f48c694147fed9c2e18d0130c1df7740e453ea7d74b392e7f35e7dfd7d159e9ed48348dd1a7dc45b82c65543fd4d12192bbbff5b61ca60b37050bedc1c528d2efc351da341ada6f0e901a46bc65852b1cbda419bfbc49f6e1e0a9566870"], 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x420}}, {0x2, &(0x7f0000000280)=@string={0x2}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x6d, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d03f5e0c2ea3bfb4a90eef6005e4dd437b85aa63cee0450baa685175139621b8a8cd5ebd2063147734d5efd8c145d5d4681472942ca1d8c1c01c744c91d4cc7acea104a3f17a1cb6fdd594df12b083e4f83af0cb515a4b680f69cd100f72ffb978ba266b6c71f6ff25b00e0ea67f752f4f654cfaa6ab8"]}, {0xa4, &(0x7f0000000600)=@string={0xa4, 0x3, "008dcfd4fb50eae4cd12a129f1dafaf35956f605065ec7e914b9c5328969fb65076fef84ac32e36d06408485ee7e4f70c80a8760becced8e1db27a34c8dba0528b85eb0aada3553a2f599fef4c39caab8515bea97f640cdbbf1aa9189660c3f58a6b81e7cfcd718bf18b9a03fdd5cc81cee0e9122aa3df9df4a2b5c441aea7a1de318c781f8d45c8fb9fc19840ac8fa9690ee330222ca12ea4c56600bc636bd77b58"}}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[], 0x0) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1, 0xe}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4000084) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{0x4, 0x40, 0x1, 0x8001}, {0x9, 0x0, 0xd, 0x5}, {0xfff, 0x9, 0x3, 0x1}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.919540231s ago: executing program 7 (id=1393): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0xff, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}, "26e4f0e806000000"}}}}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r6, 0x1) r7 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x3, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x82, &(0x7f0000000200), 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x2a, 0x2, 0x55a) 7.8319039s ago: executing program 6 (id=1396): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000), 0x0) 7.031143453s ago: executing program 7 (id=1398): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x2, 0x0, @empty}, r1}}, 0x48) syz_emit_ethernet(0x206, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021001d03a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d00001100fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000032000000000000050200000103000000009da17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3266f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa37105020000008c65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef1ea0579c8c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e00328b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b3790720000000000600"/518], 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newae={0x64, 0x1e, 0x101, 0x70bd2a, 0x25dfdbfe, {{@in=@local, 0x4d4, 0x2, 0x33}, @in=@loopback, 0x8, 0x3502}, [@lifetime_val={0x24, 0x9, {0x800000005, 0x7fff, 0x7, 0xffff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24044810}, 0x14) (async) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x12, 0xc3, 0x5b, 0x40, 0x403, 0x6010, 0xc698, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0x75, 0xf6}}]}}]}}, 0x0) syz_usb_disconnect(r3) 6.349273642s ago: executing program 9 (id=1400): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x890, &(0x7f0000000380)={0x0, 0x5f93, 0x800, 0x1, 0x266}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r5 = epoll_create1(0x80000) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x90000015}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, 0x0, 0x97ff, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x208140, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5, 0x5}) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f00000016c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd52a44fec4f6f1a6f65158bb6911c295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2971f29d9364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e807df4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfdb0c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681a03007e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22f3bb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7c5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cf8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46070039116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c949ca930e7a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4bc700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x42, &(0x7f0000000080)=0x1000, 0x4) setsockopt$inet6_int(r11, 0x29, 0x2, &(0x7f0000000c40)=0x200, 0x4) (async) getsockopt$inet6_buf(r11, 0x29, 0x6, &(0x7f00000000c0)=""/19, &(0x7f0000000040)=0x13) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000300)={0x48, 0x6, r8, 0x0, r9}) 6.150749092s ago: executing program 9 (id=1401): get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0xd8a982b17b1ba894, 0xb3d641165cf4b2ba, 0x1ef) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200f, 0xfffffffffffffffe}, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0) (async) r4 = request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r4) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) (async) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) (async) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) (async) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a09050000000000000000020000003c000480300001800e000100696d090000000000000000001c000280100002800c00028008000180fffffffb080001400000000073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000000"], 0x88}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mremap(&(0x7f0000502000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'bridge_slave_0\x00', {0x9}}}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0xff000000, 'geneve0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x449924134447b7a7, 0x2, 0x48}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "a763", 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.998528402s ago: executing program 6 (id=1402): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xa04ce000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000400)=@multiplanar_userptr={0x9, 0x3, 0x4, 0x1000, 0x9, {}, {0x4, 0x8, 0x4, 0x0, 0xf7, 0x0, "98ac99a7"}, 0x7fff, 0x2, {0x0}, 0x8}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 5.447136326s ago: executing program 8 (id=1403): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6c00}, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) socket$netlink(0x10, 0x3, 0x2) 5.194880772s ago: executing program 6 (id=1404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xfffffffe, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfff, 0x1e1002) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) 4.938875366s ago: executing program 6 (id=1405): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x410081, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x7, [@enum64={0x6, 0x3, 0x0, 0x13, 0x0, 0x2, [{0xe, 0x0, 0x6}, {0x7, 0x2, 0x5}, {0xd, 0x6, 0x3}]}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @fwd={0xd}, @const={0xa}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0x3, 0x3}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x3}, {0xa, 0x2}]}]}, {0x0, [0x5f, 0x30, 0x61, 0x0, 0x2e]}}, &(0x7f0000000200)=""/86, 0xc3, 0x56, 0x0, 0x7, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', r2, r3, 0x2, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000340)={'team_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) clock_gettime(0x0, &(0x7f0000001e80)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/208, 0xd0}], 0x5, &(0x7f0000000740)=""/215, 0xd7}, 0x3ff0000}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000840)=""/194, 0xc2}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/217, 0xd9}], 0x3, &(0x7f0000001a80)=""/225, 0xe1}, 0x4}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c00)=""/2, 0x2}, {&(0x7f0000001c40)=""/242, 0xf2}], 0x2, &(0x7f0000001d80)=""/56, 0x38}, 0xd5}], 0x3, 0x100, &(0x7f0000001ec0)={r6, r7+10000000}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000001f00)={0x9b004, 0x2000, 0x8, 0x0, 0x1}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001f80), r4) getsockname$packet(0xffffffffffffffff, &(0x7f0000001fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002000)=0x14) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x50, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x17) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffbed8, 0xfffffffeffffffff, &(0x7f0000002140)=0x1) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r10, 0xc040565f, &(0x7f00000021c0)={0x8, 0x0, 0x5, {0xc71, 0x1, 0x3ff, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$BLKFRASET(r11, 0x1264, &(0x7f0000002240)=0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x2, &(0x7f0000002280)) ioctl$UI_SET_SWBIT(r11, 0x4004556d, 0x2) write(r0, &(0x7f00000022c0)="9f9448e5f19c206c53968a4db35842bcf57e0167d3f1588ea73847d49328834798cef4db01a585b9e88c98eda29e21846e8ce09557156ea3aab98ff4f93e6fc3ac8d5a979def68630a8f92fe8a32f91f858612a1473fb769d2b090652258dbbb0a69e4e9f75f74fec5424c5c3cec8ba6d63e55", 0x73) connect$inet(r11, &(0x7f0000002340)={0x2, 0x4e22, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000002380)={0x0, 0x1}, &(0x7f00000023c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000002400)={r12, 0xf2, "aaa28488b4cae961a9e8c01babc85f874b2b881b85a15b052166e7e0de1628a2e4c18693f48f620c24dd5ad8f1dffd7e1b59011c42572ea388a801d8d721f742f364102dd8ff75658b30a227065a87c32f1c20d4dd40a2fc799159f442dc707556500527dbe776a344442d22a2f8df9360cda92fba87bcf50ed0a5fff37d50bafb130dcc41069b416c92afb9de3a7f1ec88c7e0565d18b677769c8babcfe6b74d146644bf96ebe58d7101a9daf4297a7ddd3fa0c44775578ecdd58c9c8b1d02fd4f332a47a0f47c1e18aeda81e6681cff7fcf20f7a4ad19f9fd0f02cb2c431c182860b52daeb5de91c7eb56e25b4eaf20391"}, &(0x7f0000002500)=0xfa) ioctl$sock_SIOCDELRT(r11, 0x890c, &(0x7f0000002540)={0x0, @l2={0x1f, 0xf5b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffff, 0x1}, @ax25={0x3, @null, 0x6}, @rc={0x1f, @any, 0x9}, 0x7678, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdeb2, 0xaa, 0x6}) sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000002740)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002700)={&(0x7f0000002640)={0x8c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x13c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2b262519}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4414}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 4.915200001s ago: executing program 8 (id=1406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000400)=""/73, 0x49, 0x4100, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000a40)=""/87) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r6, 0x3b8d, &(0x7f0000000c40)={0x20, r10, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) keyctl$session_to_parent(0x12) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 4.739224641s ago: executing program 9 (id=1407): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x14) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x9, 0x10001, 0x2, 0xfffffffffffffffb, 0x8}, {0x7c134d62, 0x3c000000, 0xfff, 0x9f, 0x5, 0x9}], ['\x00', '\x00']}) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 4.226775431s ago: executing program 0 (id=1410): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x8000, 0xfffffffc, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000200)={0x5, 0x0, 0x3}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r5, @ANYBLOB="2c67726f759b4c5a3ca0f1705f69643d", @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000200,default_permissions,default_permissions,rootcontext=user_u,\x00']) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000580), 0x400002, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.051008117s ago: executing program 0 (id=1411): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0xfdff}, {{&(0x7f0000001800)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x2, 0x4000800) 3.964090638s ago: executing program 6 (id=1412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000), 0x0) 3.952686118s ago: executing program 7 (id=1413): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x801ff, 0x1, 0x8b89330beeada23b, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x7b143208}) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000280)={0xffff1000, 0x1000}) (async) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @mss={0x2, 0x4}, @timestamp, @window, @sack_perm, @timestamp, @timestamp], 0x8) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) sendto$inet(r6, &(0x7f0000000140), 0xffffffe8, 0x0, 0x0, 0x0) (async) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.936450272s ago: executing program 9 (id=1414): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120091", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x38}}, 0x80) 3.84712268s ago: executing program 0 (id=1415): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000000055aa00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.833399281s ago: executing program 8 (id=1416): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x1000, 0x1}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000180)={0x8000, r2}, 0x0) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)='@\x00', 0x2, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7, 0x2}]}}}}}}}}, 0x0) 3.55899168s ago: executing program 0 (id=1417): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df", 0x17, 0xfffffffffffffffe) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f0000000040)=[{0xd0, 0x4200, 0x0, 0x0}], 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000000000", @ANYRES32, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x86400, 0x0) ioctl$TIOCCONS(r8, 0x541d) (async) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.515115312s ago: executing program 9 (id=1418): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "110100005c000000463300", 0x49433553}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000c40)='./file1\x00', 0xffffffffffffffff, 0x1000, 0x0, {0x0, r7}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.356115814s ago: executing program 8 (id=1419): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00010000020100000001a0ad8def71f59a869200000700000000f6"], 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x4) syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbdba, 0x800, 0x1, 0x34e}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x2, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="5b8d7acda0b2", 0x0, 0x1, 0x1, 0x0, 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r6 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r6, 0x0, 0x0) 2.350684811s ago: executing program 7 (id=1420): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3}, 0x0) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040) socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x40000008) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x6}, 0x1, 0x0, 0x0, 0x1}, 0x488c0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2501006f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r8, 0x0, 0xffffffdb) 1.927174387s ago: executing program 8 (id=1421): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210000000122f8040905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x6, 0x0, 0x0) (async) r3 = io_uring_setup(0x2a61, &(0x7f0000000080)={0x0, 0x1c5f, 0x1000, 0x0, 0x2a5}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000000)) 1.837181632s ago: executing program 6 (id=1422): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @multicast2, @multicast1, {[@noop, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1}, {@empty}, {@remote}, {@loopback}, {@dev}, {}]}]}}}}}}}, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) r0 = syz_io_uring_setup(0x1001f87, &(0x7f0000000080)={0x0, 0xa55, 0x40, 0x4, 0x161}, &(0x7f00000007c0)=0x0, &(0x7f0000000280)=0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000540)={0x40, 0x0, 0x1, "a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0xd4, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x100000000}, @NFTA_SET_USERDATA={0x72, 0xd, 0x1, 0x0, "171d9458762023b92b4fe4f0dfc12990467a6dbfdf02704c1c7bc3aeca35525bd44c52355d1a2a662624ba05771e196e2848e4663772991bf6993ba5fbcced5d0c3d3abb0054308707a5187b148c29b0d93c4bdf15513916124a14a5f9bcd826d78a1d3862adc602977fcaae0f85"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x100}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x164}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd=r4, 0x3, &(0x7f0000000740)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/7, 0x7}, {&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/91, 0x5b}, {&(0x7f00000006c0)=""/128, 0x80}], 0x8, 0x1, 0x0, {0x0, r5}}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xa8800, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330088a8"], 0x10da) write$sequencer(r6, &(0x7f0000000180)=[@s={0x5, @generic=0x8, 0x19, 0x4}, @v={0x93, 0x2, 0x0, 0x1e, @generic=0x8, 0x1}], 0xc) io_uring_enter(r0, 0x15f1, 0xff98, 0x69, 0x0, 0x0) 1.188519201s ago: executing program 0 (id=1423): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 930.937174ms ago: executing program 0 (id=1424): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xa, 0x3, 0x3a) pipe(&(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100000ff010000000300014275423900", @ANYRES32=0x0, @ANYBLOB="00900000000000001c0012800b00010065727370616e00000c0002800500160082000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000100)='\x00\x00\x00@', 0x4}, {&(0x7f0000000280)="d336bd75243cb9a6", 0x8}], 0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x1b, &(0x7f0000003900)=[{0x0, 0x700, 0x0, 0x0, 0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="1900000002000000000000005044000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r4], 0x48) 0s ago: executing program 9 (id=1425): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0xff97}, {{&(0x7f0000001800)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x2, 0x4000800) kernel console output (not intermixed with test programs): [ T9747] sch_fq: defrate 0 ignored. [ 436.546466][ T5895] usb 7-1: device descriptor read/64, error -71 [ 436.620956][ T9756] xt_hashlimit: size too large, truncated to 1048576 [ 436.645771][ T9759] bond0: entered promiscuous mode [ 436.650864][ T9759] bond_slave_0: entered promiscuous mode [ 436.657699][ T9279] bond0: (slave bond_slave_0): interface is now down [ 436.664593][ T9279] bond0: (slave bond_slave_1): interface is now down [ 436.685666][ T5851] Bluetooth: hci6: command 0x0c1a tx timeout [ 436.730145][ T9759] bond_slave_1: entered promiscuous mode [ 436.770199][ T5851] Bluetooth: hci7: command 0x0c1a tx timeout [ 436.788857][ T52] bond0: (slave bond_slave_0): interface is now down [ 436.807230][ T9763] loop6: detected capacity change from 0 to 7 [ 436.835218][ T52] bond0: (slave bond_slave_1): interface is now down [ 436.842278][ T9759] bond0: entered allmulticast mode [ 436.845731][ T5895] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 436.857375][ T5851] Bluetooth: hci8: command 0x0c1a tx timeout [ 436.867691][ T52] bond0: (slave bond_slave_0): interface is now down [ 436.874402][ T52] bond0: (slave bond_slave_1): interface is now down [ 436.896295][ T9759] bond_slave_0: entered allmulticast mode [ 436.903865][ T9763] Dev loop6: unable to read RDB block 7 [ 436.925247][ T5851] Bluetooth: hci9: command 0x0c1a tx timeout [ 436.955539][ T9759] bond_slave_1: entered allmulticast mode [ 436.964029][ T9763] loop6: unable to read partition table [ 436.970421][ T9763] loop6: partition table beyond EOD, truncated [ 436.977597][ T12] bond0: (slave bond_slave_0): interface is now down [ 436.977636][ T12] bond0: (slave bond_slave_1): interface is now down [ 436.993438][ T9763] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 437.006861][ T3566] bond0: (slave bond_slave_0): interface is now down [ 437.049420][ T3566] bond0: (slave bond_slave_1): interface is now down [ 437.056748][ T5895] usb 7-1: device descriptor read/64, error -71 [ 437.145991][ T52] bond0: (slave bond_slave_0): interface is now down [ 437.182971][ T9773] loop2: detected capacity change from 0 to 1 [ 437.197626][ T52] bond0: (slave bond_slave_1): interface is now down [ 437.220568][ T5895] usb usb7-port1: attempt power cycle [ 437.266680][ T52] bond0: (slave bond_slave_0): interface is now down [ 437.279241][ T9773] Dev loop2: unable to read RDB block 1 [ 437.285691][ T9773] loop2: unable to read partition table [ 437.292180][ T9773] loop2: partition table beyond EOD, truncated [ 437.298527][ T9773] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 437.367808][ T52] bond0: (slave bond_slave_1): interface is now down [ 437.404716][ T12] bond0: (slave bond_slave_0): interface is now down [ 437.411538][ T12] bond0: (slave bond_slave_1): interface is now down [ 437.442412][ T52] bond0: (slave bond_slave_0): interface is now down [ 437.504058][ T52] bond0: (slave bond_slave_1): interface is now down [ 437.526192][ T3566] bond0: (slave bond_slave_0): interface is now down [ 437.532954][ T3566] bond0: (slave bond_slave_1): interface is now down [ 437.560539][ T52] bond0: (slave bond_slave_0): interface is now down [ 437.584774][ T52] bond0: (slave bond_slave_1): interface is now down [ 437.618364][ T52] bond0: (slave bond_slave_0): interface is now down [ 437.625236][ T52] bond0: (slave bond_slave_1): interface is now down [ 437.648533][ T52] bond0: (slave bond_slave_0): interface is now down [ 437.665626][ T52] bond0: (slave bond_slave_1): interface is now down [ 437.685666][ T3465] bond0: (slave bond_slave_0): interface is now down [ 437.686006][ T5895] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 437.692377][ T3465] bond0: (slave bond_slave_1): interface is now down [ 437.705213][ T3566] bond0: (slave bond_slave_0): interface is now down [ 437.714575][ T3566] bond0: (slave bond_slave_1): interface is now down [ 437.765233][ T3566] bond0: (slave bond_slave_0): interface is now down [ 437.772363][ T3566] bond0: (slave bond_slave_1): interface is now down [ 437.776321][ T5895] usb 7-1: device descriptor read/8, error -71 [ 437.800286][ T52] bond0: (slave bond_slave_0): interface is now down [ 437.835475][ T52] bond0: (slave bond_slave_1): interface is now down [ 437.892585][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.903435][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.906031][ T3566] bond0: (slave bond_slave_0): interface is now down [ 437.944649][ T3566] bond0: (slave bond_slave_1): interface is now down [ 437.966075][ T9279] bond0: (slave bond_slave_0): interface is now down [ 437.972825][ T9279] bond0: (slave bond_slave_1): interface is now down [ 438.011836][ T9279] bond0: now running without any active interface! [ 438.080520][ T5895] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 438.464544][ T3566] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.567369][ T9797] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1005'. [ 438.609567][ T5895] usb 7-1: device not accepting address 8, error -71 [ 438.658680][ T5895] usb usb7-port1: unable to enumerate USB device [ 438.710107][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 438.729721][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 438.741220][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 438.764563][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 438.772399][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.780076][ T5838] Bluetooth: hci6: command 0x0c1a tx timeout [ 438.844574][ T5838] Bluetooth: hci7: command 0x0c1a tx timeout [ 438.861097][ T9810] loop2: detected capacity change from 0 to 1 [ 438.869058][ T9810] Dev loop2: unable to read RDB block 1 [ 438.874716][ T9810] loop2: unable to read partition table [ 438.883057][ T9810] loop2: partition table beyond EOD, truncated [ 438.889398][ T9810] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 438.915796][ T5838] Bluetooth: hci8: command 0x0c1a tx timeout [ 439.005509][ T5838] Bluetooth: hci9: command 0x0c1a tx timeout [ 439.141357][ T9821] netlink: 'syz.8.1008': attribute type 4 has an invalid length. [ 439.197603][ T9821] netlink: 'syz.8.1008': attribute type 2 has an invalid length. [ 439.209166][ T3566] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.410537][ T3566] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.495130][ T9261] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 439.660673][ T9261] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 439.673741][ T9261] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 439.683105][ T9261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.691220][ T9261] usb 8-1: Product: syz [ 439.695487][ T9261] usb 8-1: Manufacturer: syz [ 439.700113][ T9261] usb 8-1: SerialNumber: syz [ 439.714183][ T9261] usb 8-1: config 0 descriptor?? [ 439.737104][ T9261] em28xx 8-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 439.748843][ T9261] em28xx 8-1:0.0: Device initialization failed. [ 439.755227][ T9261] em28xx 8-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 440.322250][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.328773][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.394380][ T9261] usb 8-1: USB disconnect, device number 6 [ 440.410733][ T5895] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 440.463520][ T3566] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.605216][ T5895] usb 10-1: Using ep0 maxpacket: 8 [ 440.655688][ T5895] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 440.693808][ T5895] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 440.734850][ T5895] usb 10-1: config 1 has no interface number 1 [ 440.759644][ T5895] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 440.816805][ T9261] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 440.846380][ T5838] Bluetooth: hci0: command tx timeout [ 440.853145][ T5851] Bluetooth: hci6: command 0x0c1a tx timeout [ 440.882073][ T5895] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.914185][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.922834][ T5838] Bluetooth: hci7: command 0x0c1a tx timeout [ 440.989264][ T9261] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 440.999185][ T9261] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 441.005771][ T5838] Bluetooth: hci8: command 0x0c1a tx timeout [ 441.054113][ T9261] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 441.063415][ T9261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.071509][ T9261] usb 8-1: Product: syz [ 441.077500][ T9261] usb 8-1: Manufacturer: syz [ 441.082139][ T9261] usb 8-1: SerialNumber: syz [ 441.086903][ T5838] Bluetooth: hci9: command 0x0c1a tx timeout [ 441.090172][ T9261] usb 8-1: config 0 descriptor?? [ 441.111367][ T3566] bridge_slave_1: left allmulticast mode [ 441.160566][ T3566] bridge_slave_1: left promiscuous mode [ 441.188578][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.227422][ T3566] bridge_slave_0: left allmulticast mode [ 441.249904][ T3566] bridge_slave_0: left promiscuous mode [ 441.258389][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.358791][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.430249][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.452646][ T9883] loop6: detected capacity change from 0 to 7 [ 442.549085][ T9883] Dev loop6: unable to read RDB block 7 [ 442.562181][ T9883] loop6: unable to read partition table [ 442.570571][ T9883] loop6: partition table beyond EOD, truncated [ 442.580637][ T9883] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 442.925617][ T5838] Bluetooth: hci0: command tx timeout [ 443.027088][ T3566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.043388][ T3566] bond_slave_0: left promiscuous mode [ 443.049451][ T3566] bond_slave_0: left allmulticast mode [ 443.066585][ T3566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.085438][ T3566] bond_slave_1: left promiscuous mode [ 443.095370][ T3566] bond_slave_1: left allmulticast mode [ 443.106213][ T3566] bond0 (unregistering): Released all slaves [ 443.143945][ T3566] bond1 (unregistering): Released all slaves [ 443.254113][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 443.703841][ T5895] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 443.771405][ T9261] usb 8-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 443.810339][ T5895] usb 10-1: USB disconnect, device number 6 [ 443.850373][ T9899] input: syz0 as /devices/virtual/input/input29 [ 443.938441][ T9261] usb 8-1: USB disconnect, device number 7 [ 444.139822][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 444.165538][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 444.211042][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.232051][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.247078][ T9813] bridge_slave_0: entered allmulticast mode [ 444.281249][ T9813] bridge_slave_0: entered promiscuous mode [ 444.302826][ T3566] hsr_slave_0: left promiscuous mode [ 444.325798][ T24] usb 7-1: device descriptor read/64, error -71 [ 444.334863][ T3566] hsr_slave_1: left promiscuous mode [ 444.355895][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.373688][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.405155][ T9261] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 444.416203][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.423649][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.508925][ T3566] veth1_macvtap: left promiscuous mode [ 444.517981][ T3566] veth0_macvtap: left promiscuous mode [ 444.536168][ T3566] veth1_vlan: left promiscuous mode [ 444.549730][ T3566] veth0_vlan: left promiscuous mode [ 444.585251][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 444.608224][ T9261] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.625914][ T9261] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.655273][ T9261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.691528][ T9261] usb 8-1: config 0 descriptor?? [ 444.719485][ T9261] pwc: Askey VC010 type 2 USB webcam detected. [ 444.745199][ T24] usb 7-1: device descriptor read/64, error -71 [ 444.856443][ T24] usb usb7-port1: attempt power cycle [ 445.025227][ T5838] Bluetooth: hci0: command tx timeout [ 445.147244][ T9261] pwc: recv_control_msg error -32 req 02 val 2b00 [ 445.156851][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.159723][ T9261] pwc: recv_control_msg error -32 req 02 val 2700 [ 445.205638][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.220079][ T9261] pwc: recv_control_msg error -32 req 02 val 2c00 [ 445.228031][ T9261] pwc: recv_control_msg error -32 req 04 val 1000 [ 445.235198][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 445.243605][ T9261] pwc: recv_control_msg error -32 req 04 val 1300 [ 445.251821][ T9261] pwc: recv_control_msg error -32 req 04 val 1400 [ 445.259487][ T9261] pwc: recv_control_msg error -32 req 02 val 2000 [ 445.266993][ T24] usb 7-1: device descriptor read/8, error -71 [ 445.275968][ T9261] pwc: recv_control_msg error -32 req 02 val 2100 [ 445.283794][ T9261] pwc: recv_control_msg error -32 req 04 val 1500 [ 445.515182][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 445.536299][ T24] usb 7-1: device descriptor read/8, error -71 [ 445.649110][ T24] usb usb7-port1: unable to enumerate USB device [ 446.227313][ T3566] team0 (unregistering): Port device team_slave_1 removed [ 446.384733][ T3566] team0 (unregistering): Port device team_slave_0 removed [ 447.075491][ T5838] Bluetooth: hci0: command tx timeout [ 447.364478][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.374048][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.389594][ T9813] bridge_slave_1: entered allmulticast mode [ 447.408145][ T9813] bridge_slave_1: entered promiscuous mode [ 447.454464][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.462326][ T9887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.504703][ T9261] pwc: recv_control_msg error -71 req 02 val 2400 [ 447.537352][ T9261] pwc: recv_control_msg error -71 req 02 val 2600 [ 447.548957][ T9261] pwc: recv_control_msg error -71 req 02 val 2900 [ 447.573628][ T9261] pwc: recv_control_msg error -71 req 02 val 2800 [ 447.595151][ T9261] pwc: recv_control_msg error -71 req 04 val 1100 [ 447.616628][ T9261] pwc: recv_control_msg error -71 req 04 val 1200 [ 447.673053][ T9261] pwc: Registered as video103. [ 447.693614][ T9261] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input30 [ 447.758070][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.758819][ T9261] usb 8-1: USB disconnect, device number 8 [ 447.832419][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.039251][ T9813] team0: Port device team_slave_0 added [ 448.048461][ T9813] team0: Port device team_slave_1 added [ 448.208985][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.227857][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.285853][ T9261] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 448.302555][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.356863][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.363857][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.395445][ T5894] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 448.476736][ T9261] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.483546][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.499643][ T9261] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.585121][ T5894] usb 10-1: Using ep0 maxpacket: 8 [ 448.630703][ T5894] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 448.633859][ T9261] usb 8-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 448.640836][ T5894] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 448.666524][ T9261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.696643][ T9261] usb 8-1: config 0 descriptor?? [ 448.710116][ T5894] usb 10-1: config 1 has no interface number 1 [ 448.791802][ T5894] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 448.842844][ T5894] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.898821][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.914856][ T9813] hsr_slave_0: entered promiscuous mode [ 448.935691][ T9813] hsr_slave_1: entered promiscuous mode [ 449.131980][ T9261] usbhid 8-1:0.0: can't add hid device: -71 [ 449.166367][ T9261] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 449.216965][ T9261] usb 8-1: USB disconnect, device number 9 [ 450.728890][ T5842] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 450.745301][ T9261] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 450.853204][ T9813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 450.926073][ T9813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 450.936528][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 450.950210][ T5842] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 450.971720][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.991686][ T9813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 451.053397][ T5842] usb 7-1: config 0 descriptor?? [ 451.073605][ T9813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 451.296215][ T5842] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 451.346125][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 451.386650][ T5842] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 451.393883][ T5842] usb 7-1: media controller created [ 451.617760][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.777223][T10003] nvme_fabrics: missing parameter 'transport=%s' [ 451.784282][T10003] nvme_fabrics: missing parameter 'nqn=%s' [ 451.970123][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.985985][ T5894] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 452.067395][ T5842] az6027: usb out operation failed. (-71) [ 452.073203][ T5842] stb0899_attach: Driver disabled by Kconfig [ 452.121215][ T5842] az6027: no front-end attached [ 452.121215][ T5842] [ 452.141223][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.146382][ T5894] usb 10-1: USB disconnect, device number 7 [ 452.181293][ T5842] az6027: usb out operation failed. (-71) [ 452.222251][ T5842] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 452.264128][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.271423][ T9279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.297143][ T5842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31 [ 452.338826][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.346099][ T9279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.381207][ T5842] dvb-usb: schedule remote query interval to 400 msecs. [ 452.409959][ T5842] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 452.498204][ T5842] usb 7-1: USB disconnect, device number 13 [ 452.633443][ T9813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 452.718868][ T9813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.914957][ T5842] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 452.945951][T10025] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1046'. [ 453.019795][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.305741][ T9813] veth0_vlan: entered promiscuous mode [ 453.365629][ T9813] veth1_vlan: entered promiscuous mode [ 453.542556][ T9813] veth0_macvtap: entered promiscuous mode [ 453.646733][ T9813] veth1_macvtap: entered promiscuous mode [ 453.718065][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.762366][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.793962][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.855141][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.908228][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.952405][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.058434][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.069601][ T5842] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 454.139735][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.156094][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.175690][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.224964][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.288117][ T5842] usb 8-1: Using ep0 maxpacket: 16 [ 454.321451][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.355692][ T5842] usb 8-1: unable to get BOS descriptor or descriptor too short [ 454.370220][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.384080][ T5842] usb 8-1: config 1 interface 0 has no altsetting 0 [ 454.403005][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.426501][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.437064][ T5842] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 454.447675][T10046] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1051'. [ 454.451262][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.478839][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.493897][ T5842] usb 8-1: Product: syz [ 454.500589][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.518541][ T5842] usb 8-1: Manufacturer: syz [ 454.523349][ T5842] usb 8-1: SerialNumber: syz [ 454.532481][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.560987][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.609405][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.623854][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.661620][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.723084][T10047] gre1: entered promiscuous mode [ 454.788837][ T9813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.801547][ T9813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.819919][ T9813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.830867][ T9813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.207962][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.293073][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.705196][ T54] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 455.762408][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.784756][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.875760][ T54] usb 10-1: Using ep0 maxpacket: 8 [ 455.902920][ T54] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 455.942707][ T5898] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 456.000517][ T54] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 456.077550][ T54] usb 10-1: config 1 has no interface number 1 [ 456.083788][ T54] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 456.104780][ T54] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 456.121755][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.149344][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.190473][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 456.218671][ T5898] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 456.248075][T10070] loop6: detected capacity change from 0 to 7 [ 456.283304][T10070] Dev loop6: unable to read RDB block 7 [ 456.304588][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.345621][T10070] loop6: unable to read partition table [ 456.369715][ T5898] usb 7-1: config 0 descriptor?? [ 456.393503][T10070] loop6: partition table beyond EOD, truncated [ 456.451896][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 456.483978][T10070] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 456.532801][ T5898] dvb-usb: bulk message failed: -22 (3/0) [ 456.587144][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 456.647979][T10063] dvb-usb: bulk message failed: -22 (2/0) [ 457.145714][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 457.209749][ T5898] usb 7-1: media controller created [ 457.277370][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.423131][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 457.475517][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 457.540406][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 457.615898][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1056'. [ 457.846583][ T5898] dvb-usb: schedule remote query interval to 150 msecs. [ 457.866327][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 458.027066][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 458.034374][ T5898] dvb-usb: error while querying for an remote control event. [ 458.302149][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 458.325153][ T5898] dvb-usb: error while querying for an remote control event. [ 458.495725][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 458.501559][ T5898] dvb-usb: error while querying for an remote control event. [ 458.555110][ T5897] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 458.705093][ T5897] usb 1-1: device descriptor read/64, error -71 [ 458.756476][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 458.791192][ T5898] dvb-usb: error while querying for an remote control event. [ 458.975241][ T5897] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 458.996233][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 459.002015][ T5898] dvb-usb: error while querying for an remote control event. [ 459.041538][ T5894] usb 7-1: USB disconnect, device number 14 [ 459.197046][ T5842] usbhid 8-1:1.0: can't add hid device: -71 [ 459.239722][ T5842] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 459.268091][ T5897] usb 1-1: device descriptor read/64, error -71 [ 459.401652][ T5842] usb 8-1: USB disconnect, device number 11 [ 459.451767][ T5897] usb usb1-port1: attempt power cycle [ 459.471379][ T5894] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 459.744772][ T54] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 459.858091][ T5897] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 459.911630][ T54] usb 10-1: USB disconnect, device number 8 [ 459.961297][T10105] binder: BINDER_SET_CONTEXT_MGR already set [ 459.975178][T10105] binder: 10104:10105 ioctl 4018620d 200000000040 returned -16 [ 459.975303][ T5897] usb 1-1: device descriptor read/8, error -71 [ 460.655275][ T5897] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 460.781636][T10113] netlink: 'syz.6.1059': attribute type 13 has an invalid length. [ 460.876469][ T5894] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 460.935174][ T5897] usb 1-1: device not accepting address 55, error -71 [ 460.953466][ T5897] usb usb1-port1: unable to enumerate USB device [ 461.071780][ T5894] usb 10-1: unable to get BOS descriptor or descriptor too short [ 461.092068][ T5894] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 461.109223][ T5894] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 461.123894][ T5894] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.137362][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.150887][ T5894] usb 10-1: Product: syz [ 461.163299][ T5894] usb 10-1: Manufacturer: syz [ 461.173217][ T5894] usb 10-1: SerialNumber: syz [ 461.190750][ T5894] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 461.199108][ T5894] cdc_ncm 10-1:1.0: bind() failure [ 461.214041][ T5894] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 461.226891][ T5894] cdc_ncm 10-1:1.1: bind() failure [ 461.238327][T10132] loop6: detected capacity change from 0 to 7 [ 461.257724][T10132] Dev loop6: unable to read RDB block 7 [ 461.272308][T10132] loop6: unable to read partition table [ 461.342089][T10113] net_ratelimit: 10 callbacks suppressed [ 461.342105][T10113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.349824][T10132] loop6: partition table beyond EOD, [ 461.445165][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1062'. [ 461.460499][T10115] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 461.468826][T10115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.493307][T10132] truncated [ 461.555695][T10132] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 462.315525][ T54] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 462.476239][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 462.497896][ T54] usb 8-1: config 0 interface 0 has no altsetting 0 [ 462.511887][ T54] usb 8-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 462.526471][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.534854][ T54] usb 8-1: Product: syz [ 462.542674][ T54] usb 8-1: Manufacturer: syz [ 462.558222][ T54] usb 8-1: SerialNumber: syz [ 462.567519][ T54] usb 8-1: config 0 descriptor?? [ 462.787898][ T54] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 463.125333][ T5898] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 463.245547][ T5842] usb 10-1: USB disconnect, device number 9 [ 463.535071][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 463.566557][ T5837] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 463.572407][ T5898] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 463.583101][ T5898] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 463.598491][ T5898] usb 1-1: config 1 has no interface number 1 [ 463.646772][ T5898] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 463.685168][ T5898] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.699269][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.777461][ T5837] usb 7-1: Using ep0 maxpacket: 8 [ 463.854515][ T5837] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 463.873721][ T54] gspca_sunplus: reg_w_riv err -71 [ 463.880641][ T54] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 463.974125][ T54] usb 8-1: USB disconnect, device number 12 [ 463.991326][ T5837] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 464.005281][ T5842] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 464.121810][ T5837] usb 7-1: config 1 has no interface number 1 [ 464.166701][ T5837] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 464.239716][ T5837] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.265196][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.287149][ T5842] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 464.362115][ T5842] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.424783][ T5842] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0501, bcdDevice= 0.40 [ 464.458349][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.506314][ T5842] usb 10-1: Product: syz [ 464.577604][ T5842] usb 10-1: Manufacturer: syz [ 464.638117][ T5842] usb 10-1: SerialNumber: syz [ 465.021982][T10203] loop6: detected capacity change from 0 to 7 [ 465.097589][T10203] Dev loop6: unable to read RDB block 7 [ 465.151876][T10203] loop6: unable to read partition table [ 465.188992][T10203] loop6: partition table beyond EOD, truncated [ 465.274427][T10203] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 466.298440][ T5898] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 466.338795][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1082'. [ 466.406631][ T5898] usb 1-1: USB disconnect, device number 56 [ 467.024661][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1085'. [ 467.099452][ T5837] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 467.183395][ T5842] usb 10-1: cannot find UAC_HEADER [ 467.208555][ T5837] usb 7-1: USB disconnect, device number 15 [ 467.386806][ T5842] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 467.490245][ T5842] usb 10-1: USB disconnect, device number 10 [ 467.741360][ T8449] udevd[8449]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 467.770825][T10246] netlink: 'syz.6.1089': attribute type 7 has an invalid length. [ 467.803448][T10246] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1089'. [ 468.442219][T10250] vlan2: entered allmulticast mode [ 468.448275][T10250] bond0: entered allmulticast mode [ 468.460101][T10250] bond_slave_1: entered allmulticast mode [ 469.380329][T10280] fuse: Bad value for 'rootmode' [ 469.762927][ T54] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 470.465127][ T54] usb 10-1: Using ep0 maxpacket: 8 [ 470.495546][ T54] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 470.659910][ T54] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 470.742401][ T54] usb 10-1: config 1 has no interface number 1 [ 470.754466][ T54] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 470.880890][ T5897] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 470.929884][ T54] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.965653][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.067703][ T5897] usb 8-1: unable to get BOS descriptor or descriptor too short [ 471.084152][ T5897] usb 8-1: not running at top speed; connect to a high speed hub [ 471.136989][ T5897] usb 8-1: config 17 has an invalid interface number: 8 but max is 1 [ 471.225497][ T5897] usb 8-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 471.309308][ T5897] usb 8-1: config 17 has no interface number 0 [ 471.384320][ T5897] usb 8-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 471.410212][ T5897] usb 8-1: config 17 interface 8 has no altsetting 0 [ 471.538972][ T5897] usb 8-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 471.548558][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.622579][ T5897] usb 8-1: Product: syz [ 471.675660][ T5894] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 471.692921][ T5897] usb 8-1: Manufacturer: syz [ 471.699699][ T5897] usb 8-1: SerialNumber: syz [ 471.855396][ T5894] usb 1-1: device descriptor read/64, error -71 [ 472.125448][ T5894] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 472.295170][ T5894] usb 1-1: device descriptor read/64, error -71 [ 472.405494][ T5894] usb usb1-port1: attempt power cycle [ 472.798919][ T5894] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 472.855826][ T5894] usb 1-1: device descriptor read/8, error -71 [ 473.058783][ T54] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 473.108388][ T5894] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 473.157291][ T5894] usb 1-1: device descriptor read/8, error -71 [ 473.192937][ T54] usb 10-1: USB disconnect, device number 11 [ 473.194182][ T5897] usb 8-1: selecting invalid altsetting 0 [ 473.230982][ T5897] usb 8-1: 8:6 : no UAC_FORMAT_TYPE desc [ 473.257437][ T5897] usb 8-1: selecting invalid altsetting 0 [ 473.275681][ T5894] usb usb1-port1: unable to enumerate USB device [ 473.376347][ T5897] usb 8-1: USB disconnect, device number 13 [ 473.416571][ T5898] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 473.543454][T10336] block device autoloading is deprecated and will be removed. [ 473.556844][ T8449] udevd[8449]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.8/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 473.584711][T10336] syz.9.1105: attempt to access beyond end of device [ 473.584711][T10336] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 473.615289][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 473.635686][ T5898] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 473.688261][ T5898] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 473.751004][ T5898] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 473.771142][ T5898] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.782605][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 473.794781][ T5898] usb 7-1: SerialNumber: syz [ 473.832797][T10334] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 473.865281][ T5897] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 474.019600][ T5897] usb 8-1: device descriptor read/64, error -71 [ 474.167967][ T5898] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 474.212320][ T5898] usb 7-1: USB disconnect, device number 16 [ 474.282152][ T5897] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 474.446597][ T5897] usb 8-1: device descriptor read/64, error -71 [ 474.583720][ T5897] usb usb8-port1: attempt power cycle [ 474.927496][ T5897] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 474.991812][ T5897] usb 8-1: device descriptor read/8, error -71 [ 475.159334][T10375] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 475.219782][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 475.219800][ T30] audit: type=1326 audit(1747100468.980:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6998e969 code=0x7ffc0000 [ 475.255463][ T30] audit: type=1326 audit(1747100468.980:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.6.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3b6998e969 code=0x7ffc0000 [ 475.260213][ T5897] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 475.287695][ T30] audit: type=1326 audit(1747100468.980:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.6.1114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b6998e969 code=0x0 [ 475.355738][ T5897] usb 8-1: device descriptor read/8, error -71 [ 475.427549][ T30] audit: type=1326 audit(1747100469.020:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.6.1114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b6998e969 code=0x0 [ 475.480921][ T5897] usb usb8-port1: unable to enumerate USB device [ 475.559958][ T30] audit: type=1326 audit(1747100469.050:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.6.1114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b6998e969 code=0x0 [ 475.702709][ T5895] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 475.927638][ T5895] usb 10-1: Using ep0 maxpacket: 8 [ 475.944330][ T5895] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 475.973972][ T5895] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 476.047022][ T5895] usb 10-1: config 1 has no interface number 1 [ 476.062212][ T5895] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 476.079369][T10394] fuse: Bad value for 'fd' [ 476.138325][ T5895] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.148150][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.545310][ T5898] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 476.669183][T10410] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1121'. [ 476.753103][ T5898] usb 7-1: too many configurations: 28, using maximum allowed: 8 [ 476.772162][ T5898] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 476.788955][ T5898] usb 7-1: can't read configurations, error -61 [ 476.874510][T10415] FAULT_INJECTION: forcing a failure. [ 476.874510][T10415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.953073][T10415] CPU: 1 UID: 0 PID: 10415 Comm: syz.8.1122 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 476.953116][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.953135][T10415] Call Trace: [ 476.953144][T10415] [ 476.953153][T10415] dump_stack_lvl+0x189/0x250 [ 476.953193][T10415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.953222][T10415] ? __pfx__printk+0x10/0x10 [ 476.953256][T10415] should_fail_ex+0x414/0x560 [ 476.953284][T10415] _copy_to_user+0x31/0xb0 [ 476.953314][T10415] simple_read_from_buffer+0xe1/0x170 [ 476.953344][T10415] proc_fail_nth_read+0x1df/0x250 [ 476.953375][T10415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.953407][T10415] ? rw_verify_area+0x258/0x650 [ 476.953428][T10415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.953458][T10415] vfs_read+0x1fd/0x980 [ 476.953486][T10415] ? __pfx___mutex_lock+0x10/0x10 [ 476.953513][T10415] ? __pfx_vfs_read+0x10/0x10 [ 476.953536][T10415] ? __fget_files+0x2a/0x420 [ 476.953567][T10415] ? __fget_files+0x3a0/0x420 [ 476.953592][T10415] ? __fget_files+0x2a/0x420 [ 476.953627][T10415] ksys_read+0x145/0x250 [ 476.953652][T10415] ? __pfx_ksys_read+0x10/0x10 [ 476.953679][T10415] ? do_syscall_64+0xba/0x210 [ 476.953709][T10415] do_syscall_64+0xf6/0x210 [ 476.953735][T10415] ? clear_bhb_loop+0x45/0xa0 [ 476.953761][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.953781][T10415] RIP: 0033:0x7f1bea98d37c [ 476.953799][T10415] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 476.953818][T10415] RSP: 002b:00007f1beb80a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.953840][T10415] RAX: ffffffffffffffda RBX: 00007f1beabb6080 RCX: 00007f1bea98d37c [ 476.953860][T10415] RDX: 000000000000000f RSI: 00007f1beb80a0a0 RDI: 0000000000000004 [ 476.953874][T10415] RBP: 00007f1beb80a090 R08: 0000000000000000 R09: 0000000000000000 [ 476.953893][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.953905][T10415] R13: 0000000000000001 R14: 00007f1beabb6080 R15: 00007f1beacdfa28 [ 476.953938][T10415] [ 477.205495][ T5898] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 477.378614][ T5898] usb 7-1: too many configurations: 28, using maximum allowed: 8 [ 477.388332][ T5898] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 477.396373][ T5898] usb 7-1: can't read configurations, error -61 [ 477.403061][ T5898] usb usb7-port1: attempt power cycle [ 477.531428][T10424] netlink: 'syz.8.1124': attribute type 1 has an invalid length. [ 477.653594][T10427] netlink: '+}[@': attribute type 4 has an invalid length. [ 477.746375][ T5898] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 477.795346][ T5898] usb 7-1: too many configurations: 28, using maximum allowed: 8 [ 477.911875][ T5898] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 477.974901][ T5898] usb 7-1: can't read configurations, error -61 [ 478.195625][ T5898] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 478.303472][ T5898] usb 7-1: too many configurations: 28, using maximum allowed: 8 [ 478.371988][ T5898] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 478.385190][ T5898] usb 7-1: can't read configurations, error -61 [ 478.401424][ T5898] usb usb7-port1: unable to enumerate USB device [ 478.502664][T10441] loop2: detected capacity change from 0 to 1 [ 478.525083][ T9297] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 478.535183][T10441] Dev loop2: unable to read RDB block 1 [ 478.540816][T10441] loop2: unable to read partition table [ 478.570876][T10441] loop2: partition table beyond EOD, truncated [ 478.613636][T10441] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 478.739477][ T9297] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 478.770409][ T9297] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 478.815101][ T9297] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 478.851821][ T9297] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 478.888141][ T9297] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.902375][ T9297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.910844][ T9297] usb 1-1: SerialNumber: syz [ 478.934562][T10437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.975214][T10437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 479.003320][ T9297] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 479.145847][ T5895] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 479.208739][ T5895] usb 10-1: USB disconnect, device number 12 [ 479.245582][ T9297] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 479.257908][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.309894][ T9297] usb 1-1: USB disconnect, device number 61 [ 479.445503][ T5894] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 479.596484][ T5895] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 479.625105][ T5894] usb 8-1: Using ep0 maxpacket: 8 [ 479.680483][ T5894] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 479.712952][ T5894] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 479.737400][ T5894] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.776501][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.804354][ T5895] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.827471][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 479.891663][ T5895] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 479.923756][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 479.973352][ T5895] usb 10-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 479.999874][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.040155][ T5895] usb 10-1: Product: syz [ 480.052565][ T5895] usb 10-1: Manufacturer: syz [ 480.083528][ T5895] usb 10-1: SerialNumber: syz [ 480.129340][ T5895] usb 10-1: config 0 descriptor?? [ 480.152751][ T5895] usb 10-1: ucan: probing device on interface #0 [ 480.171582][ T5895] usb 10-1: ucan: invalid endpoint configuration [ 480.184044][ T5895] usb 10-1: ucan: probe failed; try to update the device firmware [ 480.419299][ T5895] usb 10-1: USB disconnect, device number 13 [ 480.925899][ T5895] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 481.118885][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.151036][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.196248][ T5895] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 481.246516][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.319277][ T5895] usb 7-1: config 0 descriptor?? [ 481.575671][ T5897] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 481.737223][ T5895] elan 0003:04F3:0755.000F: item fetching failed at offset 3/5 [ 481.752555][ T5895] elan 0003:04F3:0755.000F: Hid Parse failed [ 481.762016][ T5895] elan 0003:04F3:0755.000F: probe with driver elan failed with error -22 [ 481.779392][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 481.804900][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 481.836112][ T5897] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 481.855165][ T5897] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 481.869761][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.885218][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 481.893385][ T5897] usb 1-1: SerialNumber: syz [ 481.902535][T10519] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 481.967942][T10499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.983438][T10499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.129935][ T5897] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 482.229476][ T5898] usb 7-1: USB disconnect, device number 21 [ 482.246567][ T5897] usb 1-1: USB disconnect, device number 62 [ 482.322095][ T9] usb 8-1: USB disconnect, device number 18 [ 484.325235][ T5897] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 484.406509][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1151'. [ 484.475833][ T5897] usb 10-1: device descriptor read/64, error -71 [ 484.483085][T10560] loop2: detected capacity change from 0 to 1 [ 484.496215][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 484.523098][T10560] Dev loop2: unable to read RDB block 1 [ 484.532486][T10560] loop2: unable to read partition table [ 484.540146][T10560] loop2: partition table beyond EOD, truncated [ 484.552162][T10560] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 484.665302][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 484.679387][ T9] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 484.691551][ T9] usb 7-1: config 0 has no interface number 0 [ 484.702256][ T9] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 484.717488][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.725819][ T5897] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 484.738388][ T9] usb 7-1: Product: syz [ 484.742633][ T9] usb 7-1: Manufacturer: syz [ 484.759310][ T5894] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 484.779532][ T9] usb 7-1: SerialNumber: syz [ 484.834242][ T9] usb 7-1: config 0 descriptor?? [ 484.935846][ T5897] usb 10-1: device descriptor read/64, error -71 [ 484.950216][ T5894] usb 8-1: Using ep0 maxpacket: 32 [ 484.980361][ T5894] usb 8-1: unable to get BOS descriptor or descriptor too short [ 485.033102][ T5894] usb 8-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=bc.45 [ 485.074675][ T5897] usb usb10-port1: attempt power cycle [ 485.136445][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.210328][ T5894] usb 8-1: Product: syz [ 485.221677][ T5894] usb 8-1: Manufacturer: syz [ 485.348580][ T9] peak_usb 7-1:0.83 can0: unable to request usb[type=0 value=0] err=-71 [ 485.365089][ T54] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 485.474682][ T9] peak_usb 7-1:0.83: unable to read PCAN-USB Pro bootloader info (err -71) [ 485.498527][ T5894] usb 8-1: SerialNumber: syz [ 485.526143][ T5897] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 485.622873][ T5897] usb 10-1: device descriptor read/8, error -71 [ 485.718541][ T54] usb 1-1: config 0 has no interfaces? [ 485.720705][ T9] peak_usb 7-1:0.83: probe with driver peak_usb failed with error -71 [ 485.742068][ T54] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 485.753355][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.847149][ T9] usb 7-1: USB disconnect, device number 22 [ 485.870813][ T54] usb 1-1: Product: syz [ 485.897965][ T54] usb 1-1: Manufacturer: syz [ 485.923343][ T5897] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 485.941165][ T54] usb 1-1: SerialNumber: syz [ 485.989873][ T54] usb 1-1: config 0 descriptor?? [ 486.104374][ T5897] usb 10-1: device descriptor read/8, error -71 [ 486.271125][ T5894] pwc: Philips PCA645VC USB webcam detected. [ 486.315189][ T5897] usb usb10-port1: unable to enumerate USB device [ 486.382835][ T5894] pwc: send_video_command error -71 [ 486.392386][ T5894] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 486.412942][ T5894] Philips webcam 8-1:7.0: probe with driver Philips webcam failed with error -71 [ 486.505478][ T5894] usb 8-1: USB disconnect, device number 19 [ 487.157102][T10591] netlink: 'syz.8.1155': attribute type 12 has an invalid length. [ 487.580927][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1156'. [ 488.469565][ T5842] usb 1-1: USB disconnect, device number 63 [ 488.908658][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 489.079971][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 489.175286][T10620] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1158'. [ 489.199169][ T30] audit: type=1800 audit(1747100482.950:254): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1160" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 489.719029][T10644] vivid-000: disconnect [ 490.347841][T10663] netlink: 'syz.7.1168': attribute type 1 has an invalid length. [ 490.449647][T10635] vivid-000: reconnect [ 490.800745][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.821909][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.015262][ T5842] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 491.015286][ T5897] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 491.155673][ T5842] usb 1-1: device descriptor read/64, error -71 [ 491.225124][ T5897] usb 10-1: Using ep0 maxpacket: 16 [ 491.232787][ T5897] usb 10-1: unable to get BOS descriptor or descriptor too short [ 491.242118][ T5897] usb 10-1: config 255 has an invalid interface number: 190 but max is 1 [ 491.355425][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 491.391531][ T5897] usb 10-1: config 255 has an invalid interface number: 137 but max is 1 [ 491.405673][ T5897] usb 10-1: config 255 has no interface number 0 [ 491.427327][ T5897] usb 10-1: config 255 has no interface number 1 [ 491.443981][ T5897] usb 10-1: config 255 interface 190 has no altsetting 0 [ 491.474636][ T5897] usb 10-1: config 255 interface 137 has no altsetting 0 [ 491.506163][ T5897] usb 10-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 491.520052][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.528582][ T5842] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 491.565072][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 491.581566][ T5897] usb 10-1: Product: syz [ 491.588178][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 491.609226][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.627951][ T5897] usb 10-1: Manufacturer: syz [ 491.641947][ T9] usb 8-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.655575][ T5897] usb 10-1: SerialNumber: syz [ 491.665177][ T5842] usb 1-1: device descriptor read/64, error -71 [ 491.776905][ T5842] usb usb1-port1: attempt power cycle [ 491.796325][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 491.818757][ T9] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 491.828208][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.836620][ T9] usb 8-1: Product: syz [ 491.840860][ T9] usb 8-1: Manufacturer: syz [ 491.841843][ T9297] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 491.846040][ T9] usb 8-1: SerialNumber: syz [ 492.027514][ T9297] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 492.047171][ T9297] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 492.066606][ T9297] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 492.078966][ T5897] usb 10-1: USB disconnect, device number 18 [ 492.093607][ T9297] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 492.117448][ T9297] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 492.134732][ T9297] usb 7-1: config 0 interface 0 has no altsetting 0 [ 492.177988][ T9297] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 492.215183][ T5842] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 492.286773][ T9297] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 492.301026][ T9297] usb 7-1: Product: syz [ 492.329695][ T5842] usb 1-1: device descriptor read/8, error -71 [ 492.337094][ T9297] usb 7-1: Manufacturer: syz [ 492.355730][ T9297] usb 7-1: SerialNumber: syz [ 492.387451][ T9297] usb 7-1: config 0 descriptor?? [ 492.412070][T10697] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 492.440424][ T9297] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 492.553672][ T9297] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 492.605085][ T5842] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 492.691886][ T5842] usb 1-1: device descriptor read/8, error -71 [ 492.842066][ T5842] usb usb1-port1: unable to enumerate USB device [ 494.487300][ T5842] usb 7-1: USB disconnect, device number 23 [ 494.603858][ T5842] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 494.659333][T10718] sctp: [Deprecated]: syz.6.1178 (pid 10718) Use of int in max_burst socket option deprecated. [ 494.659333][T10718] Use struct sctp_assoc_value instead [ 495.071417][ T9] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 495.095120][ T5842] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 495.121010][ T9] usb 8-1: USB disconnect, device number 20 [ 495.315157][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 495.572077][ T5842] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 495.605183][ T5842] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 495.625040][ T5842] usb 7-1: config 0 has no interface number 0 [ 495.631446][ T5842] usb 7-1: config 0 interface 244 has no altsetting 0 [ 495.640260][ T5842] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 495.649607][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.662768][ T5842] usb 7-1: config 0 descriptor?? [ 495.689073][ T5842] usbhid 7-1:0.244: couldn't find an input interrupt endpoint [ 495.725818][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 495.930273][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 496.047504][ T9] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 496.123418][ T9] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 496.279484][ T9] usb 8-1: config 1 has no interface number 1 [ 496.285842][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 496.302159][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.311372][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.114450][ T5842] usb 7-1: USB disconnect, device number 24 [ 498.936361][T10764] loop2: detected capacity change from 0 to 1 [ 499.126324][T10764] Dev loop2: unable to read RDB block 1 [ 499.185561][T10764] loop2: unable to read partition table [ 499.225465][T10764] loop2: partition table beyond EOD, truncated [ 499.248425][ T9] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 499.281524][T10764] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 499.313877][ T9] usb 8-1: USB disconnect, device number 21 [ 499.370210][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.455541][T10772] netlink: 'syz.9.1184': attribute type 4 has an invalid length. [ 499.463331][T10772] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1184'. [ 499.608309][T10772] : renamed from bond0 (while UP) [ 499.890635][T10781] netlink: 'syz.7.1187': attribute type 4 has an invalid length. [ 499.910438][T10781] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1187'. [ 499.990368][T10781] : renamed from bond0 (while UP) [ 500.829211][T10798] af_packet: tpacket_rcv: packet too big, clamped from 290 to 4294967272. macoff=96 [ 501.265794][T10803] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1193'. [ 501.410984][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.417371][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.583154][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1191'. [ 501.677675][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1191'. [ 501.705124][T10793] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 502.067168][ T30] audit: type=1326 audit(1747100495.790:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 502.148834][ T30] audit: type=1326 audit(1747100495.800:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 502.244254][T10815] loop2: detected capacity change from 0 to 1 [ 502.276569][T10815] Dev loop2: unable to read RDB block 1 [ 502.282160][T10815] loop2: unable to read partition table [ 502.345508][T10815] loop2: partition table beyond EOD, truncated [ 502.388614][ T30] audit: type=1326 audit(1747100495.800:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 502.393512][T10815] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 502.545087][ T30] audit: type=1326 audit(1747100495.800:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 502.567369][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.664666][ T30] audit: type=1326 audit(1747100495.800:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 502.768667][ T5897] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 502.794681][ T30] audit: type=1326 audit(1747100495.800:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 502.817074][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.905096][ T5897] usb 8-1: device descriptor read/64, error -71 [ 503.395193][ T5897] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 503.615393][ T30] audit: type=1326 audit(1747100495.810:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 503.773749][ T5897] usb 8-1: device descriptor read/64, error -71 [ 504.104230][ T5897] usb usb8-port1: attempt power cycle [ 504.417509][ T30] audit: type=1326 audit(1747100495.810:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 504.562869][ T30] audit: type=1326 audit(1747100495.810:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 504.585221][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.685242][ T30] audit: type=1326 audit(1747100495.810:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.7.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3daeb8e969 code=0x7ffc0000 [ 504.795303][ T5897] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 504.827512][ T5897] usb 8-1: device descriptor read/8, error -71 [ 505.125291][ T5897] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 505.168855][ T5897] usb 8-1: device descriptor read/8, error -71 [ 505.295814][ T5897] usb usb8-port1: unable to enumerate USB device [ 505.455312][ T5897] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 505.656270][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.683093][ T5897] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 505.735347][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.782886][ T5897] usb 1-1: config 0 descriptor?? [ 506.021625][T10863] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1206'. [ 506.254535][ T5897] sony 0003:1345:3008.0010: item fetching failed at offset 4/5 [ 506.299311][ T5897] sony 0003:1345:3008.0010: parse failed [ 506.322809][ T5897] sony 0003:1345:3008.0010: probe with driver sony failed with error -22 [ 506.339327][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1209'. [ 506.488935][ T5897] usb 1-1: USB disconnect, device number 68 [ 506.568494][T10878] loop2: detected capacity change from 0 to 1 [ 506.614628][T10878] Dev loop2: unable to read RDB block 1 [ 506.637378][T10878] loop2: unable to read partition table [ 506.662420][T10878] loop2: partition table beyond EOD, truncated [ 506.703105][T10878] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 507.206532][T10895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.330674][T10897] sch_fq: defrate 2147483648 ignored. [ 507.415127][ T5842] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 507.763343][ T5842] usb 8-1: no configurations [ 507.774143][ T5842] usb 8-1: can't read configurations, error -22 [ 508.035120][ T5842] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 508.248613][ T5842] usb 8-1: no configurations [ 508.253279][ T5842] usb 8-1: can't read configurations, error -22 [ 508.263233][ T5842] usb usb8-port1: attempt power cycle [ 508.456093][T10912] batadv_slave_1: entered promiscuous mode [ 508.612895][T10911] batadv_slave_1: left promiscuous mode [ 508.666521][ T5842] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 508.711187][T10916] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1217'. [ 508.740987][ T5842] usb 8-1: no configurations [ 508.745730][ T5842] usb 8-1: can't read configurations, error -22 [ 508.775777][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1217'. [ 508.895176][ T5842] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 508.944516][ T5842] usb 8-1: no configurations [ 508.949351][ T5842] usb 8-1: can't read configurations, error -22 [ 508.994362][ T5842] usb usb8-port1: unable to enumerate USB device [ 509.028787][T10922] xt_hashlimit: size too large, truncated to 1048576 [ 509.228616][T10932] loop2: detected capacity change from 0 to 1 [ 509.258066][T10932] Dev loop2: unable to read RDB block 1 [ 509.273651][T10932] loop2: unable to read partition table [ 509.289986][T10932] loop2: partition table beyond EOD, truncated [ 509.340392][T10932] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 510.975629][ T5842] hid-generic 000A:71DC:0008.0011: item fetching failed at offset 2/29 [ 510.984522][ T5842] hid-generic 000A:71DC:0008.0011: probe with driver hid-generic failed with error -22 [ 511.166169][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1226'. [ 511.197172][T10938] syz.0.1223 (10938): drop_caches: 2 [ 511.242356][T10963] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1227'. [ 512.254528][T10986] loop2: detected capacity change from 0 to 1 [ 512.278886][T10978] netlink: 'syz.9.1231': attribute type 12 has an invalid length. [ 512.301640][T10986] Dev loop2: unable to read RDB block 1 [ 512.307721][T10986] loop2: unable to read partition table [ 512.315703][T10986] loop2: partition table beyond EOD, truncated [ 512.332149][T10986] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 512.763157][T10995] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1236'. [ 512.882570][T10998] netlink: 'syz.0.1235': attribute type 4 has an invalid length. [ 512.907040][T10998] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1235'. [ 513.065343][T10998] : renamed from bond0 (while UP) [ 513.075114][ T5842] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 513.285175][ T5842] usb 8-1: Using ep0 maxpacket: 32 [ 513.332207][ T5842] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.365960][ T5842] usb 8-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 513.444203][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.482349][ T5842] usb 8-1: Product: syz [ 513.488014][ T5842] usb 8-1: Manufacturer: syz [ 513.494244][ T5842] usb 8-1: SerialNumber: syz [ 513.598210][ T5842] usb 8-1: config 0 descriptor?? [ 514.030897][ T5842] mos7840 8-1:0.0: required endpoints missing [ 514.059103][ T9297] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 514.124410][ T5842] usb 8-1: USB disconnect, device number 30 [ 514.480566][ T9297] usb 7-1: no configurations [ 514.486056][ T9297] usb 7-1: can't read configurations, error -22 [ 514.625238][ T9297] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 514.810487][ T9297] usb 7-1: no configurations [ 514.824106][ T9297] usb 7-1: can't read configurations, error -22 [ 514.846457][ T9297] usb usb7-port1: attempt power cycle [ 514.871907][T11020] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1240'. [ 515.216666][ T9297] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 515.259344][ T9297] usb 7-1: no configurations [ 515.264060][ T9297] usb 7-1: can't read configurations, error -22 [ 515.395373][ T9297] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 515.423022][ T9297] usb 7-1: no configurations [ 515.442741][ T9297] usb 7-1: can't read configurations, error -22 [ 515.471825][ T9297] usb usb7-port1: unable to enumerate USB device [ 516.428168][T11042] loop2: detected capacity change from 0 to 1 [ 516.466521][T11042] Dev loop2: unable to read RDB block 1 [ 516.556082][T11042] loop2: unable to read partition table [ 516.572659][T11042] loop2: partition table beyond EOD, truncated [ 516.610418][T11042] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 516.715138][ T54] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 516.915284][ T54] usb 10-1: Using ep0 maxpacket: 8 [ 516.945203][ T54] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 516.985785][ T5897] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 516.995994][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.056627][ T54] usb 10-1: Product: syz [ 517.061267][ T54] usb 10-1: Manufacturer: syz [ 517.101558][ T54] usb 10-1: SerialNumber: syz [ 517.145461][ T54] usb 10-1: config 0 descriptor?? [ 517.187417][ T5897] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 517.243032][T11055] netlink: 'syz.8.1250': attribute type 27 has an invalid length. [ 517.251191][ T5897] usb 8-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 517.251234][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.251256][ T5897] usb 8-1: Product: syz [ 517.251273][ T5897] usb 8-1: Manufacturer: syz [ 517.251289][ T5897] usb 8-1: SerialNumber: syz [ 517.372027][ T54] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 517.471708][ T5897] usb 8-1: selecting invalid altsetting 1 [ 517.538093][ T9261] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 517.674139][ T5897] LME2510(C): Firmware Status: 06 03 47 00 00 00 [ 517.674197][ T5897] usb 8-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 517.696204][ T9261] usb 1-1: Using ep0 maxpacket: 8 [ 517.737187][ T5897] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 517.767890][ T9261] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 517.784523][ T9261] usb 1-1: config 0 has no interface number 0 [ 517.792113][ T54] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 517.823041][ T9261] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.841990][ T9261] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 517.893240][ T9261] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 517.950177][ T9261] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.952559][ T5897] usb 8-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 517.974894][ T9261] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 518.025448][ T5897] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 518.058195][ T5897] usb 8-1: media controller created [ 518.071465][ T9261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.076827][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.410325][ T9261] usb 1-1: config 0 descriptor?? [ 518.625376][ T9261] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 518.809578][ T9261] usb 1-1: USB disconnect, device number 69 [ 518.821232][ T5894] usb 10-1: USB disconnect, device number 19 [ 518.911450][ T9261] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 519.077992][ T5897] DVB: Unable to find symbol m88rs2000_attach() [ 519.113400][ T5897] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 519.113435][ T5897] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 519.177402][ T5897] usb 8-1: USB disconnect, device number 31 [ 519.576059][ T5894] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 519.911970][ T5894] usb 7-1: Invalid ep0 maxpacket: 32 [ 520.105079][ T5894] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 520.349695][ T5894] usb 7-1: Invalid ep0 maxpacket: 32 [ 520.371904][ T5894] usb usb7-port1: attempt power cycle [ 520.755113][ T5894] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 520.779702][ T5894] usb 7-1: Invalid ep0 maxpacket: 32 [ 520.796588][T11145] syzkaller1: entered promiscuous mode [ 520.815108][T11145] syzkaller1: entered allmulticast mode [ 520.945227][ T5894] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 520.976374][ T5894] usb 7-1: Invalid ep0 maxpacket: 32 [ 521.001386][ T5894] usb usb7-port1: unable to enumerate USB device [ 522.345091][ T54] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 522.422222][T11193] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 522.536204][T11194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.691433][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 522.758771][ T54] usb 1-1: unable to get BOS descriptor or descriptor too short [ 522.774878][ T54] usb 1-1: config 1 interface 0 has no altsetting 0 [ 522.928335][ T54] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 522.949458][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.973040][ T54] usb 1-1: Product: syz [ 522.980316][ T54] usb 1-1: Manufacturer: syz [ 522.987665][ T54] usb 1-1: SerialNumber: syz [ 525.746450][ T54] usbhid 1-1:1.0: can't add hid device: -71 [ 525.815571][ T54] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 525.879903][ T54] usb 1-1: USB disconnect, device number 70 [ 527.052121][T11262] loop2: detected capacity change from 0 to 7 [ 527.090662][T11262] Dev loop2: unable to read RDB block 7 [ 527.116569][T11262] loop2: unable to read partition table [ 527.141959][T11262] loop2: partition table beyond EOD, truncated [ 527.183007][T11262] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 527.255403][T11247] : renamed from bond_slave_0 (while UP) [ 527.945140][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 528.107418][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 528.147962][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 528.157909][ T9] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 528.177409][ T9] usb 1-1: config 7 has no interface number 0 [ 528.233211][ T9] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 528.338014][T11297] input: syz1 as /devices/virtual/input/input35 [ 528.346803][ T9] usb 1-1: config 7 interface 187 has no altsetting 0 [ 528.376742][ T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 528.392579][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.455962][ T9] usb 1-1: Product: syz [ 528.470140][ T9] usb 1-1: Manufacturer: syz [ 528.525029][ T9] usb 1-1: SerialNumber: syz [ 528.566087][T11282] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 528.645071][ T54] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 528.850928][ T9] usb 1-1: Limiting number of CPorts to U8_MAX [ 528.867140][ T9] usb 1-1: Unknown endpoint type found, address 0x07 [ 528.915310][ T54] usb 8-1: Using ep0 maxpacket: 32 [ 528.916301][ T9] usb 1-1: Not enough endpoints found in device, aborting! [ 528.941549][ T54] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 528.989165][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.048447][ T54] usb 8-1: config 0 descriptor?? [ 529.063163][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.105359][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.191037][ T9] usb 1-1: USB disconnect, device number 71 [ 529.270237][ T54] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 529.333984][ T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 529.362669][ T54] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 529.405119][ T54] usb 8-1: media controller created [ 529.521381][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.914144][T11317] mmap: syz.0.1291 (11317): VmData 37593088 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 529.983341][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 529.983361][ T30] audit: type=1326 audit(1747100523.690:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 530.077922][ T30] audit: type=1326 audit(1747100523.690:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 530.134225][ T30] audit: type=1326 audit(1747100523.690:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 530.242624][ T30] audit: type=1326 audit(1747100523.690:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 530.350102][ T30] audit: type=1326 audit(1747100523.690:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 530.350158][ T30] audit: type=1326 audit(1747100523.690:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 530.350203][ T30] audit: type=1326 audit(1747100523.690:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 530.351201][T11328] loop2: detected capacity change from 0 to 1 [ 530.352613][T11328] Dev loop2: unable to read RDB block 1 [ 530.352655][T11328] loop2: unable to read partition table [ 530.352851][T11328] loop2: partition table beyond EOD, truncated [ 530.352872][T11328] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 530.380290][ T30] audit: type=1326 audit(1747100523.690:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 530.380343][ T30] audit: type=1326 audit(1747100523.690:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 530.380397][ T30] audit: type=1326 audit(1747100523.690:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.9.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb88b8e969 code=0x7ffc0000 [ 531.585124][ T9297] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 531.725825][ T9297] usb 1-1: device descriptor read/64, error -71 [ 531.973875][ T9297] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 532.025570][T11360] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 11360 comm: syz.6.1300) [ 532.122917][ T9297] usb 1-1: device descriptor read/64, error -71 [ 532.226575][ T9297] usb usb1-port1: attempt power cycle [ 532.287150][ T54] az6027: usb out operation failed. (-110) [ 532.287167][ T54] stb0899_attach: Driver disabled by Kconfig [ 532.287176][ T54] az6027: no front-end attached [ 532.287176][ T54] [ 532.288660][ T54] az6027: usb out operation failed. (-32) [ 532.288679][ T54] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 532.291062][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input36 [ 532.293269][ T54] dvb-usb: schedule remote query interval to 400 msecs. [ 532.293283][ T54] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 532.575219][ T9297] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 532.606075][ T9297] usb 1-1: device descriptor read/8, error -71 [ 532.828881][ T54] usb 8-1: USB disconnect, device number 32 [ 532.872662][ T9297] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 532.967848][ T9297] usb 1-1: device descriptor read/8, error -71 [ 533.051594][ T54] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 533.106329][ T9297] usb usb1-port1: unable to enumerate USB device [ 533.425331][ T54] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 533.523775][T11407] loop2: detected capacity change from 0 to 1 [ 533.542077][ T8449] Dev loop2: unable to read RDB block 1 [ 533.549307][ T8449] loop2: unable to read partition table [ 533.555841][ T8449] loop2: partition table beyond EOD, truncated [ 533.569789][T11407] Dev loop2: unable to read RDB block 1 [ 533.577131][T11407] loop2: unable to read partition table [ 533.583287][T11407] loop2: partition table beyond EOD, truncated [ 533.591449][T11407] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 533.604319][ T54] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.624077][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.669427][ T54] usb 8-1: config 0 descriptor?? [ 533.686785][ T54] cp210x 8-1:0.0: cp210x converter detected [ 534.088187][ T54] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 534.118182][ T54] usb 8-1: cp210x converter now attached to ttyUSB0 [ 534.308708][ T5842] usb 8-1: USB disconnect, device number 33 [ 534.328260][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 534.351510][ T5842] cp210x 8-1:0.0: device disconnected [ 534.455183][ T5895] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 534.629307][ T5895] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 534.651778][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.663545][ T5895] usb 10-1: Product: syz [ 534.669422][ T5895] usb 10-1: Manufacturer: syz [ 534.674148][ T5895] usb 10-1: SerialNumber: syz [ 534.682138][ T5895] usb 10-1: config 0 descriptor?? [ 534.995214][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 535.097268][ T5895] usb 10-1: Firmware: major: 0, minor: 0, hardware type: RZUSB (3) [ 535.106938][ T5895] usb 10-1: Firmware version (0.0) predates our first public release. [ 535.119070][ T5895] usb 10-1: Please update to version 0.2 or newer [ 535.159843][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 535.184445][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.202953][ T9] usb 1-1: Product: syz [ 535.211622][ T9] usb 1-1: Manufacturer: syz [ 535.221753][ T9] usb 1-1: SerialNumber: syz [ 535.239242][ T9] usb 1-1: config 0 descriptor?? [ 535.371558][ T5895] usb 10-1: USB disconnect, device number 20 [ 535.461061][ T9] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 535.485868][ T9] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 535.504346][ T9] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 535.567634][ T9] usb 1-1: USB disconnect, device number 76 [ 535.913204][T11459] loop2: detected capacity change from 0 to 1 [ 535.922763][T11459] Dev loop2: unable to read RDB block 1 [ 535.928901][T11459] loop2: unable to read partition table [ 535.935383][T11459] loop2: partition table beyond EOD, truncated [ 535.941987][T11459] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 536.348370][T11469] syz.0.1318 (11469): drop_caches: 2 [ 536.375260][ T54] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 536.545049][ T54] usb 10-1: Using ep0 maxpacket: 16 [ 536.551910][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.625117][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.655775][ T5895] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 536.657492][ T54] usb 10-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 536.765191][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.891838][ T54] usb 10-1: config 0 descriptor?? [ 536.907243][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 536.921866][ T5895] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 536.984777][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.021378][ T5895] usb 7-1: config 0 descriptor?? [ 537.134385][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 537.163403][T11483] ipvlan0: entered promiscuous mode [ 537.171821][T11483] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 537.181301][T11483] team0: Device ipvlan0 is already an upper device of the team interface [ 537.405053][ T54] aquacomputer_d5next 0003:0C70:F00A.0012: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.9-1/input0 [ 537.455403][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 537.455423][ T30] audit: type=1800 audit(1747100531.210:323): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1321" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 537.482067][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.678044][T11473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.705903][T11473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.915255][ T54] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 538.031641][ T5895] usbhid 7-1:0.0: can't add hid device: -71 [ 538.044790][ T5895] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 538.082679][ T5895] usb 7-1: USB disconnect, device number 33 [ 538.095270][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 538.116934][ T54] usb 8-1: config 237 has an invalid interface number: 48 but max is 2 [ 538.135728][ T54] usb 8-1: config 237 contains an unexpected descriptor of type 0x2, skipping [ 538.190258][ T54] usb 8-1: config 237 has an invalid interface number: 83 but max is 2 [ 538.238983][ T54] usb 8-1: config 237 has an invalid interface number: 105 but max is 2 [ 538.284926][ T54] usb 8-1: config 237 has no interface number 0 [ 538.326245][ T54] usb 8-1: config 237 has no interface number 1 [ 538.353467][ T54] usb 8-1: config 237 has no interface number 2 [ 538.380365][ T54] usb 8-1: config 237 interface 48 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 538.414724][ T54] usb 8-1: config 237 interface 48 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 538.447508][ T54] usb 8-1: config 237 interface 48 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 538.477872][ T54] usb 8-1: config 237 interface 48 altsetting 5 endpoint 0xF has invalid maxpacket 1088, setting to 1024 [ 538.529207][ T54] usb 8-1: config 237 interface 48 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 538.582326][ T54] usb 8-1: config 237 interface 48 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 538.677510][ T5842] usb 10-1: reset high-speed USB device number 21 using dummy_hcd [ 538.686365][ T54] usb 8-1: config 237 interface 48 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 538.713881][ T54] usb 8-1: config 237 interface 48 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 538.734684][ T54] usb 8-1: config 237 interface 48 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 538.747530][ T54] usb 8-1: config 237 interface 105 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 538.803458][ T54] usb 8-1: config 237 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 538.821584][ T54] usb 8-1: config 237 interface 105 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 538.844501][T11518] loop2: detected capacity change from 0 to 1 [ 538.851044][ T54] usb 8-1: config 237 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 538.878448][T11518] Dev loop2: unable to read RDB block 1 [ 538.884564][ T54] usb 8-1: config 237 interface 105 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 538.897733][T11518] loop2: unable to read partition table [ 538.904499][T11518] loop2: partition table beyond EOD, truncated [ 538.914418][ T54] usb 8-1: config 237 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 538.926341][T11518] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 538.942039][ T54] usb 8-1: config 237 interface 48 has no altsetting 0 [ 538.950368][ T54] usb 8-1: config 237 interface 83 has no altsetting 0 [ 538.988943][ T54] usb 8-1: config 237 interface 105 has no altsetting 0 [ 539.009593][ T54] usb 8-1: New USB device found, idVendor=0cf3, idProduct=0036, bcdDevice=89.87 [ 539.020206][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.041010][ T54] usb 8-1: Product: ࠝ [ 539.054373][ T54] usb 8-1: Manufacturer: Ⰱ [ 539.075704][ T54] usb 8-1: SerialNumber: ᰉ [ 539.108044][T11491] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 539.127926][T11491] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 539.449252][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1331'. [ 539.560351][ T54] usb 8-1: USB disconnect, device number 34 [ 539.852613][ T5842] usb 10-1: device descriptor read/64, error -71 [ 540.255927][ T5842] usb 10-1: reset high-speed USB device number 21 using dummy_hcd [ 541.217491][ T5842] usb 10-1: device firmware changed [ 541.242466][ T9297] usb 10-1: USB disconnect, device number 21 [ 541.349944][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1337'. [ 541.375255][ T5895] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 541.579293][ T5895] usb 7-1: config 0 has no interfaces? [ 541.598411][ T5895] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 541.618000][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.636322][ T9297] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 541.638155][ T5895] usb 7-1: Product: syz [ 541.668872][ T5895] usb 7-1: Manufacturer: syz [ 541.674047][ T5895] usb 7-1: SerialNumber: syz [ 541.688571][ T5895] usb 7-1: config 0 descriptor?? [ 541.695148][ T5897] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 541.856096][ T9297] usb 10-1: Using ep0 maxpacket: 16 [ 541.869785][ T9297] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.883447][ T9297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.898793][ T9297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 541.908897][ T9297] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 541.925097][ T5842] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 541.953020][ T5897] usb 8-1: config 0 has no interfaces? [ 541.973718][ T5897] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 541.986476][ T9297] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.004298][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.023664][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.034246][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.062716][ T5897] usb 8-1: Product: syz [ 542.072951][ T5897] usb 8-1: Manufacturer: syz [ 542.075214][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 542.083910][ T5897] usb 8-1: SerialNumber: syz [ 542.089806][ T5842] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 542.100448][ T5897] usb 8-1: config 0 descriptor?? [ 542.107526][ T9297] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 542.212519][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.267719][ T9297] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 542.299140][ T5842] usb 1-1: Product: syz [ 542.361102][T11558] netlink: 'syz.7.1336': attribute type 21 has an invalid length. [ 542.382197][ T9297] usb 10-1: Manufacturer: syz [ 542.389425][ T5842] usb 1-1: Manufacturer: syz [ 542.399686][ T5842] usb 1-1: SerialNumber: syz [ 542.406585][ T9297] usb 10-1: config 0 descriptor?? [ 542.417079][ T9297] usb 10-1: can't set config #0, error -71 [ 542.455422][ T9297] usb 10-1: USB disconnect, device number 22 [ 542.475506][ T5842] r8152-cfgselector 1-1: Unknown version 0x0000 [ 542.570700][ T5842] r8152-cfgselector 1-1: config 0 descriptor?? [ 542.749885][T11573] netlink: 'syz.9.1339': attribute type 1 has an invalid length. [ 542.794120][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.818338][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.861302][ T5842] r8152-cfgselector 1-1: Unknown version 0x0000 [ 542.880361][ T5842] r8152-cfgselector 1-1: bad CDC descriptors [ 542.908599][ T5842] r8152-cfgselector 1-1: USB disconnect, device number 77 [ 543.095388][ T9297] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 543.307174][ T5895] usb 7-1: USB disconnect, device number 34 [ 543.427696][ T9297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.443526][ T9297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.471832][ T9297] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 543.517868][ T9297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.564614][ T9297] usb 10-1: config 0 descriptor?? [ 543.755141][ T5842] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 543.792723][T11573] fuse: Unknown parameter 'n' [ 543.934520][ T5930] usb 8-1: USB disconnect, device number 35 [ 543.962783][ T5842] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 543.985099][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.007626][ T9297] hid-steam 0003:28DE:1142.0013: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 544.035871][ T9261] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 544.043622][ T5842] usb 1-1: Product: syz [ 544.053750][ T5842] usb 1-1: Manufacturer: syz [ 544.062558][ T5842] usb 1-1: SerialNumber: syz [ 544.098955][ T5842] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 544.123896][ T54] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 544.133201][ T9297] hid-steam 0003:28DE:1142.0013: Steam wireless receiver connected [ 544.177383][ T9297] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 544.227718][ T9261] usb 7-1: config 0 has no interfaces? [ 544.251686][ T9261] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 544.271682][ T9261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.303364][ T9261] usb 7-1: Product: syz [ 544.308492][ T9261] usb 7-1: Manufacturer: syz [ 544.313171][ T9261] usb 7-1: SerialNumber: syz [ 544.339395][ T9261] usb 7-1: config 0 descriptor?? [ 544.416270][ T5930] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 544.565368][ T5930] usb 8-1: device descriptor read/64, error -71 [ 544.583906][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1339'. [ 544.609576][ T10] usb 7-1: USB disconnect, device number 35 [ 544.644074][ T5894] usb 10-1: USB disconnect, device number 23 [ 544.673266][ T5894] hid-steam 0003:28DE:1142.0013: Steam wireless receiver disconnected [ 544.837080][ T5930] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 545.008055][ T5930] usb 8-1: device descriptor read/64, error -71 [ 545.068229][ T24] usb 1-1: USB disconnect, device number 78 [ 545.162742][ T5930] usb usb8-port1: attempt power cycle [ 545.235128][ T54] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 545.255666][ T54] ath9k_htc: Failed to initialize the device [ 545.283425][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 545.517816][ T5930] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 545.566411][ T5930] usb 8-1: device descriptor read/8, error -71 [ 545.835107][ T5930] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 545.868272][ T5930] usb 8-1: device descriptor read/8, error -71 [ 545.878834][T11647] netlink: 'syz.0.1347': attribute type 4 has an invalid length. [ 545.898612][T11647] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1347'. [ 546.005604][ T5930] usb usb8-port1: unable to enumerate USB device [ 546.445190][ T5930] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 546.632700][ T5930] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 546.650806][ T5930] usb 7-1: config 0 has no interface number 0 [ 546.665062][ T5930] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 546.687462][ T5930] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 546.725181][ T5930] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 546.748787][ T5930] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 546.777715][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.795159][ T5930] usb 7-1: Product: syz [ 546.799365][ T5930] usb 7-1: Manufacturer: syz [ 546.815083][ T5930] usb 7-1: SerialNumber: syz [ 546.846436][ T5930] usb 7-1: config 0 descriptor?? [ 546.853457][T11656] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 546.886714][T11656] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 546.909960][ T5930] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 546.950754][ T5930] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 547.116031][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.124874][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.137726][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1348'. [ 547.235704][ T5894] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 547.406305][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 547.420923][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 547.455719][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 547.485051][ T5894] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 547.494761][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 547.527792][ T5894] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 547.575610][ T5894] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 547.604698][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.644312][ T5894] usb 1-1: config 0 descriptor?? [ 547.666403][T11681] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 547.750719][ T5894] usb 7-1: USB disconnect, device number 36 [ 547.836503][ T5894] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 547.872657][ T5894] cyberjack 7-1:0.69: device disconnected [ 547.895516][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.902540][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.911694][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.918597][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.925512][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.932350][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.939254][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.946162][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.952996][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.960627][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.968702][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.975787][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.982652][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.990263][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 547.997146][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.003992][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.010872][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.018057][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.024913][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.031819][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.038742][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.045637][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.052492][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.060763][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.067697][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.074536][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.081425][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.088321][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.095210][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 548.412934][ T5894] usb 1-1: USB disconnect, device number 79 [ 548.427980][ T5838] Bluetooth: hci1: Opcode 0x0c03 failed: -19 [ 548.997771][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.965818][ T5897] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 550.002162][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 550.145313][ T10] usb 10-1: device descriptor read/64, error -71 [ 550.177795][ T5897] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.218135][ T5897] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.239412][ T5897] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.344482][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.425169][ T10] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 550.575086][ T10] usb 10-1: device descriptor read/64, error -71 [ 550.750822][T11751] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 550.786754][ T5897] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 550.878916][ T10] usb usb10-port1: attempt power cycle [ 550.950765][T11776] hsr0: entered promiscuous mode [ 551.005958][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 551.072101][T11776] hsr_slave_0: left promiscuous mode [ 551.185938][T11776] hsr_slave_1: left promiscuous mode [ 551.297360][T11776] hsr0 (unregistering): left promiscuous mode [ 551.317752][ T9] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 551.505058][ T10] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 551.536707][ T10] usb 10-1: device descriptor read/8, error -71 [ 551.597476][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 551.643507][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 551.691771][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.752920][ T9] usb 7-1: Product: syz [ 551.768360][ T9] usb 7-1: Manufacturer: syz [ 551.773235][ T9] usb 7-1: SerialNumber: syz [ 551.803510][ T9] usb 7-1: config 0 descriptor?? [ 551.825183][ T10] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 551.857647][ T10] usb 10-1: device descriptor read/8, error -71 [ 552.042366][ T10] usb usb10-port1: unable to enumerate USB device [ 552.934196][ T9] usb 7-1: USB disconnect, device number 37 [ 553.146244][ T6178] udevd[6178]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 553.372583][ T9] usb 8-1: USB disconnect, device number 40 [ 553.791086][ T30] audit: type=1326 audit(1747100547.540:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11823 comm="syz.9.1380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb88b8e969 code=0x0 [ 554.255172][ T5930] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 554.407952][ T5930] usb 7-1: config 0 has no interfaces? [ 554.425442][ T5930] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 554.451330][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.576598][ T5930] usb 7-1: Product: syz [ 554.580839][ T5930] usb 7-1: Manufacturer: syz [ 554.608321][ T5930] usb 7-1: SerialNumber: syz [ 554.636038][ T5930] usb 7-1: config 0 descriptor?? [ 554.705453][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 554.859698][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1383'. [ 554.868962][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 554.882908][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 554.912857][ T9] usb 1-1: config 0 has no interface number 0 [ 554.925048][ T5894] usb 7-1: USB disconnect, device number 38 [ 554.953386][ T9] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 554.983937][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 555.012880][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 555.031609][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.056570][ T9] usb 1-1: Product: syz [ 555.071347][ T9] usb 1-1: Manufacturer: syz [ 555.078437][ T9] usb 1-1: SerialNumber: syz [ 555.104446][ T9] usb 1-1: config 0 descriptor?? [ 555.113759][T11855] netlink: 'syz.7.1384': attribute type 4 has an invalid length. [ 555.125027][T11855] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.1384'. [ 555.342162][ T9] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 555.404079][ T9] cx231xx 1-1:0.1: Failed to read PCB config [ 555.441637][ T9] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 555.472012][ T9] usb 1-1: USB disconnect, device number 80 [ 555.680242][T11866] IPv6: addrconf: prefix option has invalid lifetime [ 555.985151][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 556.136414][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 556.144179][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 556.162737][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.192705][ T9] usb 1-1: config 0 has no interface number 0 [ 556.205163][ T9] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 556.231533][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 556.236572][T11880] loop2: detected capacity change from 0 to 7 [ 556.242625][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 556.261584][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.271604][T11880] Dev loop2: unable to read RDB block 7 [ 556.285351][ T9] usb 1-1: Product: syz [ 556.289693][ T9] usb 1-1: Manufacturer: syz [ 556.295262][T11880] loop2: unable to read partition table [ 556.301150][T11880] loop2: partition table beyond EOD, truncated [ 556.301683][ T9] usb 1-1: SerialNumber: syz [ 556.315090][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 556.325084][T11880] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 556.342581][ T9] usb 1-1: config 0 descriptor?? [ 556.353635][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.365168][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 556.402897][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 556.427390][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 556.433314][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.492871][ T10] usb 7-1: New USB device found, idVendor=0eef, idProduct=7302, bcdDevice= 0.40 [ 556.511987][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.531850][ T10] usb 7-1: Product: syz [ 556.538745][ T10] usb 7-1: Manufacturer: syz [ 556.543513][ T10] usb 7-1: SerialNumber: syz [ 556.565121][ T5894] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 556.573402][T11871] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 556.615470][ T9] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 556.626876][ T9] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 556.750599][ T9] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 556.792300][ T9] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 556.802242][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.830502][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.889800][ T10] usbhid 7-1:1.0: can't add hid device: -71 [ 556.919741][ T10] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 556.962198][ T9] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 557.058997][ T9] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 557.067621][ T10] usb 7-1: USB disconnect, device number 39 [ 557.098056][ T9] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 557.117939][ T9] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 557.318745][ T9] i2c i2c-2: Added multiplexed i2c bus 4 [ 557.330796][T11901] 8021q: adding VLAN 0 to HW filter on device  [ 557.393302][ T9] i2c i2c-2: Added multiplexed i2c bus 5 [ 557.448264][T11901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.490758][ T9] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 557.519175][ T9] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 557.606243][ T9] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 557.855063][ T9] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 558.050486][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.062704][ T5837] usb 1-1: USB disconnect, device number 81 [ 558.072863][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.158885][ T9] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 558.215064][ T5894] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 558.229665][T11924] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1397'. [ 558.285539][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.356051][ T9] usb 10-1: config 0 descriptor?? [ 558.448342][ T5894] usb 7-1: config 0 has no interfaces? [ 558.465059][ T5894] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 558.539527][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.574933][T11918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.591728][T11918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.605641][ T5894] usb 7-1: Product: syz [ 558.612107][ T5894] usb 7-1: Manufacturer: syz [ 558.659222][ T5894] usb 7-1: SerialNumber: syz [ 558.723405][ T5894] usb 7-1: config 0 descriptor?? [ 558.741969][ T9] usb 10-1: USB disconnect, device number 28 [ 558.785354][ T5842] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 558.955152][ T5842] usb 8-1: Invalid ep0 maxpacket: 64 [ 558.985649][ T24] usb 7-1: USB disconnect, device number 40 [ 559.098032][ T5842] usb 8-1: new low-speed USB device number 43 using dummy_hcd [ 559.285162][ T5842] usb 8-1: Invalid ep0 maxpacket: 64 [ 559.359877][ T5842] usb usb8-port1: attempt power cycle [ 559.715377][ T5842] usb 8-1: new low-speed USB device number 44 using dummy_hcd [ 559.737708][ T5842] usb 8-1: Invalid ep0 maxpacket: 64 [ 559.902118][ T5842] usb 8-1: new low-speed USB device number 45 using dummy_hcd [ 559.979161][ T5842] usb 8-1: Invalid ep0 maxpacket: 64 [ 560.007931][ T5842] usb usb8-port1: unable to enumerate USB device [ 560.088227][T11956] team0: Failed to send options change via netlink (err -105) [ 560.144434][T11956] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 560.182083][T11956] team0: Port device team_slave_1 removed [ 560.253013][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1403'. [ 560.316632][T11964] netlink: 'syz.8.1403': attribute type 33 has an invalid length. [ 560.345599][T11964] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1403'. [ 560.482013][T11964] loop2: detected capacity change from 0 to 7 [ 560.492064][T11964] Dev loop2: unable to read RDB block 7 [ 560.498111][T11964] loop2: unable to read partition table [ 560.504484][T11964] loop2: partition table beyond EOD, truncated [ 560.523313][T11964] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 561.120423][T11992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.875989][T12020] loop6: detected capacity change from 0 to 7 [ 561.900064][T12020] Dev loop6: unable to read RDB block 7 [ 561.920310][T12020] loop6: unable to read partition table [ 561.920550][T12020] loop6: partition table beyond EOD, truncated [ 561.920575][T12020] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 562.037357][ T5837] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 562.253318][ T5837] usb 7-1: config 0 has no interfaces? [ 562.302270][ T5837] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 562.860934][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.875074][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.892401][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.920197][ T5837] usb 7-1: Product: syz [ 562.930557][ T5837] usb 7-1: Manufacturer: syz [ 562.935581][ T5837] usb 7-1: SerialNumber: syz [ 562.942967][ T5837] usb 7-1: config 0 descriptor?? [ 563.045138][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 563.119870][T12040] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 563.156192][ T5837] usb 7-1: USB disconnect, device number 41 [ 563.235291][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 563.244651][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 563.265027][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.284574][ T10] usb 1-1: config 0 descriptor?? [ 563.499929][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 563.533813][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 563.611424][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 563.649793][ T10] usb 1-1: media controller created [ 563.813852][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.928151][ T10] az6027: usb out operation failed. (-71) [ 563.947761][ T10] az6027: usb out operation failed. (-71) [ 563.964461][ T10] stb0899_attach: Driver disabled by Kconfig [ 563.987901][ T10] az6027: no front-end attached [ 563.987901][ T10] [ 564.041641][ T10] az6027: usb out operation failed. (-71) [ 564.075605][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 564.182489][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 564.205072][ T5894] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 564.213152][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 564.315355][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 564.382765][ T10] usb 1-1: USB disconnect, device number 82 [ 564.435264][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 564.442183][ T5894] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 564.451502][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.461409][ T5894] usb 7-1: config 0 descriptor?? [ 564.562905][T12078] binder: 12077:12078 ioctl c0306201 0 returned -14 [ 564.676015][ T5894] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 564.791498][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 564.925427][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 565.235416][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 565.417352][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 565.458475][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 565.488584][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65, setting to 64 [ 565.511755][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 565.521274][ T10] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 565.545087][ T10] usb 1-1: Manufacturer: syz [ 565.588502][ T10] usb 1-1: config 0 descriptor?? [ 565.609300][ T10] smsusb:smsusb_probe: board id=9, interface number 0 [ 565.650542][ T10] smsusb:siano_media_device_register: media controller created [ 565.713397][ T10] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 565.747416][ T10] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 565.769027][ T10] ------------[ cut here ]------------ [ 565.774582][ T10] WARNING: CPU: 0 PID: 10 at mm/slub.c:4752 free_large_kmalloc+0x165/0x200 [ 565.784312][ T10] Modules linked in: [ 565.789402][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 565.801327][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 565.812176][ T10] Workqueue: usb_hub_wq hub_event [ 565.818218][ T10] RIP: 0010:free_large_kmalloc+0x165/0x200 [ 565.824067][ T10] Code: 75 08 48 89 df e8 eb e9 e2 ff 65 48 8b 05 23 33 5e 10 48 3b 44 24 08 75 53 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 00 33 5e 10 48 3b 44 24 08 75 30 48 89 df 48 [ 565.844494][ T10] RSP: 0018:ffffc900000f6ba8 EFLAGS: 00010206 [ 565.851560][ T10] RAX: 00000000ff000000 RBX: ffffea0001b37880 RCX: ffffea0000000000 [ 565.860357][ T10] RDX: ffffc9001984b000 RSI: ffff88806cde2000 RDI: ffffea0001b37880 [ 565.869153][ T10] RBP: 0000000000000100 R08: ffff888027c40403 R09: 1ffff11004f88080 [ 565.877570][ T10] R10: dffffc0000000000 R11: ffffed1004f88081 R12: 1ffff11004153e82 [ 565.885638][ T10] R13: 0000000000000000 R14: ffff888027c40460 R15: dffffc0000000000 [ 565.893668][ T10] FS: 0000000000000000(0000) GS:ffff8881260c9000(0000) knlGS:0000000000000000 [ 565.902720][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.909537][ T10] CR2: 00007f3f20e9fd4b CR3: 0000000067ee6000 CR4: 00000000003526f0 [ 565.917705][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 565.925814][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.933830][ T10] Call Trace: [ 565.937306][ T10] [ 565.940305][ T10] usb_free_urb+0xd0/0x120 [ 565.944798][ T10] smsusb_term_device+0x1d6/0x3b0 [ 565.949943][ T10] smsusb_probe+0x1a04/0x2060 [ 565.954721][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 565.960648][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 565.966319][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 565.972265][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 565.978709][ T10] ? __pm_runtime_set_status+0x785/0xa50 [ 565.984420][ T10] usb_probe_interface+0x641/0xbc0 [ 565.989661][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 565.995384][ T10] really_probe+0x26a/0x9a0 [ 565.999968][ T10] __driver_probe_device+0x18c/0x2f0 [ 566.005777][ T10] driver_probe_device+0x4f/0x430 [ 566.010874][ T10] __device_attach_driver+0x2ce/0x530 [ 566.016342][ T10] bus_for_each_drv+0x24e/0x2e0 [ 566.021260][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 566.027320][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 566.032771][ T10] __device_attach+0x2b8/0x400 [ 566.039905][ T10] ? __pfx___device_attach+0x10/0x10 [ 566.045316][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 566.050582][ T10] bus_probe_device+0x185/0x260 [ 566.055546][ T10] device_add+0x7b6/0xb50 [ 566.059967][ T10] usb_set_configuration+0x1a87/0x20e0 [ 566.065576][ T10] usb_generic_driver_probe+0x8d/0x150 [ 566.071112][ T10] usb_probe_device+0x1c1/0x390 [ 566.076255][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 566.081701][ T10] really_probe+0x26a/0x9a0 [ 566.086308][ T10] __driver_probe_device+0x18c/0x2f0 [ 566.091661][ T10] driver_probe_device+0x4f/0x430 [ 566.096797][ T10] __device_attach_driver+0x2ce/0x530 [ 566.102243][ T10] bus_for_each_drv+0x24e/0x2e0 [ 566.107252][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 566.113214][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 566.118810][ T10] __device_attach+0x2b8/0x400 [ 566.123660][ T10] ? __pfx___device_attach+0x10/0x10 [ 566.129059][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 566.134332][ T10] bus_probe_device+0x185/0x260 [ 566.139305][ T10] device_add+0x7b6/0xb50 [ 566.143706][ T10] usb_new_device+0xa39/0x16c0 [ 566.148602][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 566.153871][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.159189][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.164471][ T10] hub_event+0x2941/0x4a00 [ 566.169111][ T10] ? __pfx_hub_event+0x10/0x10 [ 566.173949][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 566.179748][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.185035][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 566.190802][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 566.196637][ T10] process_scheduled_works+0xadb/0x17a0 [ 566.202263][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.208375][ T10] worker_thread+0x8a0/0xda0 [ 566.213050][ T10] kthread+0x70e/0x8a0 [ 566.217229][ T10] ? __pfx_worker_thread+0x10/0x10 [ 566.222410][ T10] ? __pfx_kthread+0x10/0x10 [ 566.227123][ T10] ? __pfx_kthread+0x10/0x10 [ 566.231779][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.237103][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.242383][ T10] ? __pfx_kthread+0x10/0x10 [ 566.247097][ T10] ret_from_fork+0x4b/0x80 [ 566.251572][ T10] ? __pfx_kthread+0x10/0x10 [ 566.256684][ T10] ret_from_fork_asm+0x1a/0x30 [ 566.261521][ T10] [ 566.264606][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 566.271948][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 566.282137][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.292213][ T10] Workqueue: usb_hub_wq hub_event [ 566.297284][ T10] Call Trace: [ 566.300589][ T10] [ 566.303542][ T10] dump_stack_lvl+0x99/0x250 [ 566.308170][ T10] ? __asan_memcpy+0x40/0x70 [ 566.312795][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.318039][ T10] ? __pfx__printk+0x10/0x10 [ 566.322675][ T10] panic+0x2db/0x790 [ 566.326609][ T10] ? __pfx_panic+0x10/0x10 [ 566.331146][ T10] ? show_trace_log_lvl+0x4fb/0x550 [ 566.336394][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 566.341367][ T10] __warn+0x31b/0x4b0 [ 566.345355][ T10] ? free_large_kmalloc+0x165/0x200 [ 566.350558][ T10] ? free_large_kmalloc+0x165/0x200 [ 566.355759][ T10] report_bug+0x2be/0x4f0 [ 566.360107][ T10] ? free_large_kmalloc+0x165/0x200 [ 566.365343][ T10] ? free_large_kmalloc+0x165/0x200 [ 566.370600][ T10] ? free_large_kmalloc+0x167/0x200 [ 566.375830][ T10] handle_bug+0x84/0x160 [ 566.380116][ T10] exc_invalid_op+0x1a/0x50 [ 566.384634][ T10] asm_exc_invalid_op+0x1a/0x20 [ 566.389498][ T10] RIP: 0010:free_large_kmalloc+0x165/0x200 [ 566.395320][ T10] Code: 75 08 48 89 df e8 eb e9 e2 ff 65 48 8b 05 23 33 5e 10 48 3b 44 24 08 75 53 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 65 48 8b 05 00 33 5e 10 48 3b 44 24 08 75 30 48 89 df 48 [ 566.414928][ T10] RSP: 0018:ffffc900000f6ba8 EFLAGS: 00010206 [ 566.421009][ T10] RAX: 00000000ff000000 RBX: ffffea0001b37880 RCX: ffffea0000000000 [ 566.428989][ T10] RDX: ffffc9001984b000 RSI: ffff88806cde2000 RDI: ffffea0001b37880 [ 566.436961][ T10] RBP: 0000000000000100 R08: ffff888027c40403 R09: 1ffff11004f88080 [ 566.444932][ T10] R10: dffffc0000000000 R11: ffffed1004f88081 R12: 1ffff11004153e82 [ 566.452911][ T10] R13: 0000000000000000 R14: ffff888027c40460 R15: dffffc0000000000 [ 566.460910][ T10] usb_free_urb+0xd0/0x120 [ 566.465344][ T10] smsusb_term_device+0x1d6/0x3b0 [ 566.470405][ T10] smsusb_probe+0x1a04/0x2060 [ 566.475105][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 566.480142][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 566.485703][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 566.491606][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 566.497947][ T10] ? __pm_runtime_set_status+0x785/0xa50 [ 566.503593][ T10] usb_probe_interface+0x641/0xbc0 [ 566.508732][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 566.514368][ T10] really_probe+0x26a/0x9a0 [ 566.518885][ T10] __driver_probe_device+0x18c/0x2f0 [ 566.524180][ T10] driver_probe_device+0x4f/0x430 [ 566.529210][ T10] __device_attach_driver+0x2ce/0x530 [ 566.534610][ T10] bus_for_each_drv+0x24e/0x2e0 [ 566.539468][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 566.545370][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 566.550755][ T10] __device_attach+0x2b8/0x400 [ 566.555524][ T10] ? __pfx___device_attach+0x10/0x10 [ 566.560812][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 566.566027][ T10] bus_probe_device+0x185/0x260 [ 566.570888][ T10] device_add+0x7b6/0xb50 [ 566.575224][ T10] usb_set_configuration+0x1a87/0x20e0 [ 566.580717][ T10] usb_generic_driver_probe+0x8d/0x150 [ 566.586190][ T10] usb_probe_device+0x1c1/0x390 [ 566.591057][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 566.596436][ T10] really_probe+0x26a/0x9a0 [ 566.600951][ T10] __driver_probe_device+0x18c/0x2f0 [ 566.606246][ T10] driver_probe_device+0x4f/0x430 [ 566.611283][ T10] __device_attach_driver+0x2ce/0x530 [ 566.616682][ T10] bus_for_each_drv+0x24e/0x2e0 [ 566.621547][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 566.627448][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 566.632830][ T10] __device_attach+0x2b8/0x400 [ 566.637622][ T10] ? __pfx___device_attach+0x10/0x10 [ 566.642940][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 566.648168][ T10] bus_probe_device+0x185/0x260 [ 566.653048][ T10] device_add+0x7b6/0xb50 [ 566.657410][ T10] usb_new_device+0xa39/0x16c0 [ 566.662206][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 566.667428][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.672642][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.677878][ T10] hub_event+0x2941/0x4a00 [ 566.682353][ T10] ? __pfx_hub_event+0x10/0x10 [ 566.687129][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 566.692870][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.698079][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 566.703814][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 566.709553][ T10] process_scheduled_works+0xadb/0x17a0 [ 566.715149][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.721163][ T10] worker_thread+0x8a0/0xda0 [ 566.725825][ T10] kthread+0x70e/0x8a0 [ 566.729923][ T10] ? __pfx_worker_thread+0x10/0x10 [ 566.735050][ T10] ? __pfx_kthread+0x10/0x10 [ 566.739659][ T10] ? __pfx_kthread+0x10/0x10 [ 566.744277][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.749509][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.754730][ T10] ? __pfx_kthread+0x10/0x10 [ 566.759333][ T10] ret_from_fork+0x4b/0x80 [ 566.763758][ T10] ? __pfx_kthread+0x10/0x10 [ 566.768355][ T10] ret_from_fork_asm+0x1a/0x30 [ 566.773138][ T10] [ 566.776571][ T10] Kernel Offset: disabled [ 566.780905][ T10] Rebooting in 86400 seconds..