last executing test programs: 5m42.707122502s ago: executing program 4 (id=61): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872e"], 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1646, 0x3c00, 0xffffffff, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x49, 0x0, 0x0) (async) io_uring_enter(r7, 0x47f6, 0x0, 0x49, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5m41.572240869s ago: executing program 4 (id=68): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x7, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x3, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x8, 0x169, 0x3, 0x3, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x201, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0x7ad, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x5, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x400005, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x200, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x400, 0x1, 0x0, 0x0, @irqchip={0x2, 0x6512}}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0xaea2, 0x0) 5m40.873568715s ago: executing program 4 (id=71): socket(0x10, 0x803, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m40.630454359s ago: executing program 4 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x89901) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r2) openat$nci(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = syz_io_uring_setup(0x516d, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x0, 0xa4}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000380)='\b', 0x1}], 0x1) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000101800000000000000100000a1409000011000100000a000000000000000000003cf4985c86e8ebe1e44353d86bf92f0c"], 0x28}}, 0x0) 5m39.790512073s ago: executing program 4 (id=76): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x0, 0x1, 0x0, 0x8, 0x8}, 0x20) 5m39.280374487s ago: executing program 4 (id=78): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = open$dir(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1038c1, 0x42) request_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000500)='R\x10rust\x02\x00\x00\x00grVdn\x84\x00\xc3\xca~\xb7\xe1\x16eO\\:Dd\x0f\x9f\x87woB\xcf{A\xc2Y\x10?\xe3\x13\xca\x06D\xa0[\x81\xe5\xd7\xf8\x1d\xff&\xcb+Q%b\x02]IRV\xe1*6g\x0e\xf5\xeeG\xf6l\x97xp\xb7\xfb\xfbpe\xd9I.\x9e2\xce`\x93\x95\xb6$\x13\xcbF\xdd\x9c\xac\t\xc7\x9d\xbfk\xc0\xb9os\xca1A\x92\x01\x05\x03\xfeCe\x1c\"\x0e%Y\x01kF\x7f\x18\xa0-\xfa\xdfz', 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect(0x0, 0x4f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023d0001000000000904", @ANYRES16=r2, @ANYRES32=r2, @ANYRES32=r2], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x44001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) set_mempolicy(0x8006, &(0x7f0000000040)=0x4000000000000fff, 0x5) r5 = io_uring_setup(0x1530, &(0x7f0000000240)={0x0, 0xe739, 0x400, 0x7fffffe, 0x1d4}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x3cca6e84d3fc1202, 0x0) write$nci(r6, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0xc0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='us\x00r.#+\x00'], &(0x7f00000001c0)='\x00', 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r10, 0x500, 0x10000, 0x0, 0x8, 0x28d662, 0x302f4c}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/rcu_stall_count', 0x80000, 0x84) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 5m38.389059962s ago: executing program 32 (id=78): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = open$dir(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1038c1, 0x42) request_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000500)='R\x10rust\x02\x00\x00\x00grVdn\x84\x00\xc3\xca~\xb7\xe1\x16eO\\:Dd\x0f\x9f\x87woB\xcf{A\xc2Y\x10?\xe3\x13\xca\x06D\xa0[\x81\xe5\xd7\xf8\x1d\xff&\xcb+Q%b\x02]IRV\xe1*6g\x0e\xf5\xeeG\xf6l\x97xp\xb7\xfb\xfbpe\xd9I.\x9e2\xce`\x93\x95\xb6$\x13\xcbF\xdd\x9c\xac\t\xc7\x9d\xbfk\xc0\xb9os\xca1A\x92\x01\x05\x03\xfeCe\x1c\"\x0e%Y\x01kF\x7f\x18\xa0-\xfa\xdfz', 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect(0x0, 0x4f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023d0001000000000904", @ANYRES16=r2, @ANYRES32=r2, @ANYRES32=r2], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x44001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) set_mempolicy(0x8006, &(0x7f0000000040)=0x4000000000000fff, 0x5) r5 = io_uring_setup(0x1530, &(0x7f0000000240)={0x0, 0xe739, 0x400, 0x7fffffe, 0x1d4}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xe00, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x3cca6e84d3fc1202, 0x0) write$nci(r6, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0xc0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='us\x00r.#+\x00'], &(0x7f00000001c0)='\x00', 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r10, 0x500, 0x10000, 0x0, 0x8, 0x28d662, 0x302f4c}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/rcu_stall_count', 0x80000, 0x84) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 2m47.144472777s ago: executing program 0 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000080)) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "b7decbb4", {0x1, 0x8, 0x6, 0x7, 0x3}}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010029bd702000000000eecdd900", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d3000000000000024001680200001800c000700070000000400000010000200be0000009b0a0000020000000500110009000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2m44.399945312s ago: executing program 0 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x8, 0x4}]}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={r7, 0x7}, &(0x7f0000000080)=0x8) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) 2m41.272206338s ago: executing program 0 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x4f, {"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", 0x1000}}, 0x1006) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$UHID_CREATE(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x11, &(0x7f0000000600)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x0) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0xae6d, 0x101}}) socket$nl_route(0x10, 0x3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f2"]) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$midi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 2m39.140425543s ago: executing program 0 (id=671): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08804500001c00000000fb02907800000000e000030000009078006400d2"], 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r4, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x86, 0xa, 0x6, 0x1, 0x48f}, &(0x7f0000000140)=0x14) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r8], 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={r8, @in6={{0xa, 0x4e20, 0x7, @local, 0x9}}, 0x7, 0x59c, 0x400, 0xffffffff, 0x42, 0x9}, &(0x7f0000000080)=0x9c) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x1, 0x41, 0x0, 0x42, 0x5c}) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m35.834854329s ago: executing program 0 (id=681): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) r3 = accept(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, r4, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x40}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xf224, @empty, 0x4}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x5c) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, &(0x7f0000000200)={0x1, 0x0, 0xffffffff, 0x4}) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x20004000) r9 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000000)="7ea58a8c3b671fa65a0e077ac83607e4d7dbdf1a69b5a6c33343da5f8e86936336aa7e03b90a5787e6d28ec3", 0x2c, 0x4000001, 0x1, {0x0, r12}}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000680)={{{0x1, 0x1}}, 0x53, 0x0, 0x0}) 2m35.105531832s ago: executing program 0 (id=684): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x5bcd, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x1) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000900)={0x8}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth0_to_hsr\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) 2m34.600739474s ago: executing program 33 (id=684): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x5bcd, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x1) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000900)={0x8}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth0_to_hsr\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) 2m33.162700623s ago: executing program 1 (id=693): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @local, 0x4}, 0x1c) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000)=0x7c, 0x4) (async, rerun: 64) shutdown(r1, 0x1) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) (async) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg(r4, &(0x7f0000000380)={&(0x7f0000000000)=@caif=@dgm={0x25, 0x8, 0x40}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="3e345c4da133142f3c70ccb0bc7b53a2d967f72c2aacf88c8890877268db9ecea81b22f50d23847a1f2717970f2555ce9f5661351c749a2c9d56ebff8f3802b40adbde5f6f9dc87ae92fb044dc33991e335f21aa3858e1e65f102b2595696e85bad7244ea7e452ace7175c9fec7b8e3d2aa636d0923f07134b91002dc915df7bd9079f4d4f1cc55815f5d196d49b3a02af613e4d0014e6cc5b5f2fad795a00276182ef3bf7472327f49f3e42ff867fa548e833fb99081397e99b7896c30a6d75a5e13c65af8bd87dfa4ca9967c4794", 0xcf}, {&(0x7f0000000180)="6e5aa8cfbb327d8b9dfe1c2ec046fb37e334005cae3e1afb308f954390c296b0bf2b2621314de7790f766e009dbe6ab90a01d96fe54d296149ce2c30dfae8130500868b7ab72434909cbd3a39c1293b7e808112e88fa96e6276023849946f2ec1082017823b258cfad22bfbe63c410c232f574e39c90263cf3753e3f", 0x7c}, {&(0x7f0000000240)="88c5dc88d7e54bdfb2c7242167028c0e2bd5011eb452b6b20023998825fccee64b307ac984de1f8587b571b3100c18007483092d5c6221b36d6a9f6a321f3dc6c15bc260551906500ca1ade22b9b2bd1ca489e6dc78eeccaeba4215a5b6f0fb61182172a883496ddbd040b5c4b8c524961bec124a7e0aed1d6cc7c64bd0d0b26efd85c7e94d640c23c912e9b", 0x8c}, {&(0x7f0000000300)="81c6d85b508bed89872e76e9b6222894", 0x10}], 0x4, &(0x7f00000014c0)=[{0x38, 0x0, 0xffffffff, "6a6ce80ec515d97810ccb4e06e38debae8e7ef4385520e5e3c026839971444084ff000ce"}, {0xc8, 0x114, 0x9, "b84efd82b5caee4554c3e693fdbed3a1e41f2c919c264a291a3c64d997191d98df5df8672a78504334fad00593bcb7460793290ef79fe8d5660f9d0621bcab63839f740adcf3055700ae1641db473a738c7427f3a5e909403d9e4efffd469d1ec49608deac6e61a99f7dc88800789e6cf9d76de72918a420cb5f28d0023500517de07b4acf8af27581f64fadedfdf6103a8bc9e12ae7db5f2afb7c341cae3a5df087eb88b7f9803150002cbb2c3fd20496914339"}, {0x1010, 0x108, 0x3, "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"}, {0xe8, 0xff, 0x8, "c8270b0ef22066679e959c0aae4a13c1dd112595c2267570c6ba15246800569a0f6124b8ca2c9e1f232022cba3afb22e75c3c6bb44a001722c9607a1464493084aa9c428806cadb5d1df7db8f8ceb982932501feaa145081d57848a67fae003cc730c44dde10aa609af0713941c24981bc8e584d8d7f810a0bff852918533153dc360a125e4ed421f0a94e33291278013a5e5c69cb1c4ea2f997ce1dcbc23c64b9395848f9f20b758407a0dd9334d0140abc4636faf09b32119b1f9daef662886661cf7195fc268f4bdafc710059d964ffad"}, {0x60, 0x103, 0x8, "63da01668b98356e7af89209f66146ea4a0b0bc8d87ed763adbd1a7b9e2ab486c222f4a0d453361a8f6f8b639dd4ba3104269540dac5911d618c9145bb1d2ee77f23f9029118d0211c"}, {0x108, 0x0, 0x8, "0afc9eccc725f0a7c0d2609b28351466600370b14bccdac6da9c219119f0f40d532005ba72df6c52d58f8f68a970c67d24a857b7d776dd57dd80e52e1581bc353488ad653607b5f321ebadac14ca195fb571cc1653514bc6c67e8929e2a9e81a195fc6efe1e38d3d12967488c5a1ddca1ed40db523d1c7cf42b478d852ddef6f6c29d34e0490004e45d8a7628dbf5d82985176baa4541b1be780b1bb7b133e48590fbbb247e221a3fc746b66cd344820b025c52228a42bc04462edd017e4e83aeaeb77d78e90021b86acb9b364e30225f1daf04203b50629c9845863b44223607010bd4e55be573d2dc45c609d3ff89dfa320415f66be8"}, {0xc0, 0x10c, 0x2, "1064b54b67bcbe1006701e85542a2aa870ede935caf705b2abeadfa04f2cdab83eb429feec5fd93b1ce848119d3fa1a526e92cc580d18cb93c2d2505b41f1090e68568dd6c3804cc4d469f4439eabd8ccf970e8aeed1e191410ecdcfdf6dc911e3e790dc0e96ebc739aa203083ef2dad22a970b40a64f9eac86753067d99ab84a16733b7217cdb20c38af120f85d9d6fa9f00312526f11f8a67298d4c7001fcb190d0412f2e29b9cf28bb040a52c"}, {0x78, 0x10f, 0xffff, "14b4005d5b98b25f237e926f470fe65b849f35b0aa774ea4b130d689f427fb31c153417637f506e5ac8839b0f6c5fb96f48252f119c2f9771e1ec7535364bc0f375c0e4052775f32b1d94269788163a2fa18b2f83928149cfdebb9e2b55119fcd265709e"}, {0x88, 0x0, 0x1, "b51f2e4a159326124ecf5913085f187cce659ebabd0242a16636e600aebee3e15e1dfff84b53ec33420993779e38ff89c0abd0aa15ce3530f5ba2a9b5f337a9692b3f2dc3703e446cecc8195325db7d57088e9cbc3112591424eb2dc1b4f205c39897a3011c4ccfbbe53db583fa99479595b05f29f73dd2e"}], 0x1520}, 0x40010) fchdir(r3) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x4) 2m32.932424426s ago: executing program 1 (id=694): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async, rerun: 32) syz_clone(0x4000800, &(0x7f0000000600)="95f835ff24b6f1abcbdc328f2de0c3397ec8e6175f09277db0480b1df75550aa75e22ceecfa0345bb514a1b2c29889ac4f537641350dc7b18984518fd72c57b909d1930c1571535da3255225bfe7d9fac755cb6ae7fe4ffc2bce346c1851220cf7b5999d4773c7ce8fcccd5944796b1595dd94e797d4b50584a99eba5e247ff03fe056555f4bb911059f7e793b8fb368b38eaa6b910828ec71dba2b4463f87010e72b3acef6d88b6d2b55b6f565ff3ec6451b9c450d1dd6093509b95b7087b", 0xbf, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000540)) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x1000, 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf2500000000", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000200)=0x5) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/83, 0x53}], 0x2}, 0x0) 2m32.667497102s ago: executing program 1 (id=696): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0xa0, 0x30, 0xa2, 0x40, 0x1235, 0x4661, 0xae13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xd6, 0x82, 0x40}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup3(r1, r3, 0x80000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="140100000906010300000000000000000100000140000880100007800900120073797a30000000000c00078006001d4000020000100007800c0018400000000000000200100007800900120073797a3000000000880007800f001a0027285d3a5e2b5c2e2d2e00000a0011001f3bd13f56c600000900130073797a32000000000c001b40000040000000000008000b4000000001060005404e2100001800018014000240ff02000000000000000000000000000108000a40000093340c00184000000000000001b21400170067656e6576653000000000000000000005000100070000003000078008000a404c3f632b1800018014000240000000000000000000000000000000010900120073797a320000000078b5ac3d0a59175b3e3c4035d25e6276d7ae3f33d469595e5e516d04106560ff6566027cdb13e6b34b863995787743030ab11f04d1680e1f76fa686d870c2ff32564f7340fadeed0275963c21f351b3a51af90baeea9d2ded6e2a31b082e435d8eddca530c961a35a31feb2d013c27d0d4f781609f1b5751d752c2547d75e5c34b449f29bde4c75fedb844c62c562ff2f83c0ebf264af820f9d9310df2d8279fe71be9f4"], 0x114}, 0x1, 0x0, 0x0, 0x20008084}, 0x5) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) chdir(0x0) 2m30.509043276s ago: executing program 1 (id=702): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xd, 0x440240) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0}) sendmsg$key(r5, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x9ebc3a9f68981e8c) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) 2m26.214375979s ago: executing program 1 (id=709): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x3, @addr=0x401}, 0x8, 0xff, 0x3}) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000080)={0x80000001, 0xb, 0x4, "4389dda9a3bfde7b39803dc613cc793a4d8ff9fdcc14bbe13f320fabc198201012a644ab1e57bdfde6c35af908297798472d971a5554622c855c8b0d", 0x39, "8010f5745e5d17edb0c4bd6a08f7d806873de95b6957e877bce043765a532f6e44fd84faed208c711f91e7556e1946230a458a335fb211b0ce0812af", 0x50}) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x480001, 0x31) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x80, 0x14001) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/user\x00') ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1004}, {r0, 0x8002}, {r0, 0x400}, {r0, 0xe088}, {r0, 0x312f}, {r0, 0x400}, {r1, 0x4420}, {r2, 0x2004}, {r3, 0x80}, {r0, 0x410}], 0xa, &(0x7f0000000280), &(0x7f00000002c0)={[0x200]}, 0x8) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x214c40, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000340)=0x3) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000380)={0x0, 0x0, {0x3, 0x2, 0x3014, 0x3, 0x6, 0x0, 0x2, 0x4}}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000014c0)={0x156d810e6129d920, @win={{0x37, 0x555, 0x0, 0x392}, 0x7, 0x400, &(0x7f0000000480)={{0x7, 0x1ff, 0x4, 0x8}, &(0x7f0000000440)={{0x5, 0xd, 0x100, 0x47c862b8}, &(0x7f0000000400)={{0x0, 0x8001, 0x56d5, 0x800}}}}, 0x5, &(0x7f00000004c0)="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", 0x5}}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x6, '\x00', 0x0, r4, 0x0, 0x3, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001680)=@generic={&(0x7f00000015c0)='./file0\x00', r5}, 0x18) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x40, 0x0, 0xe3c}, 0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001780)={{0x1, 0x1, 0x18, r2, {0x0, r6}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000017c0)={0x3, 0x800}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001940)={'syztnl2\x00', &(0x7f0000001800)={'tunl0\x00', 0x0, 0x8, 0x7998, 0x2f, 0x9, {{0x39, 0x4, 0x1, 0x2, 0xe4, 0x68, 0x0, 0xc, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x5e, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x4}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x8}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x8a, 0x0, 0x4, [0x7, 0x3a, 0xfffffffd, 0x8f, 0x9]}, @lsrr={0x83, 0xf, 0x3, [@loopback, @broadcast, @local]}, @cipso={0x86, 0x33, 0x0, [{0x2, 0xb, "1b58b5960badd435ae"}, {0x7, 0x3, 'b'}, {0x7, 0x10, "126a845ca1e559b9cc843f20e1cd"}, {0x0, 0x5, '\"\a~'}, {0x5, 0x8, "07a86dbdffdf"}, {0x2, 0x2}]}, @end, @generic={0x94, 0xc, "5dd5551ebe50303d8a00"}, @lsrr={0x83, 0x1f, 0xbd, [@private=0xa010102, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @noop, @timestamp={0x44, 0x10, 0x9c, 0x0, 0x9, [0x0, 0x55, 0x2]}]}}}}}) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000001980)={0x0, 0x0, 0x7f, 0x1, @vifc_lcl_ifindex=r9, @multicast1}, 0x10) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f00000019c0)={0x0, {0x4, 0x9}}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001a00)={0x0, "8799ea192b6535fa4997c7debbb00c94"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002a00)={r10, "e05c632f30144d67cf9849b692d92c44"}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000003a00)) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000003a40)) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000003a80)=[{}, {}], &(0x7f0000003ac0)=0x10) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000003b00), &(0x7f0000003b40)={'U+', 0xb}, 0x16, 0x2) 2m25.754777773s ago: executing program 1 (id=711): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x1}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) chdir(0x0) 2m25.119779266s ago: executing program 34 (id=711): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x1}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) chdir(0x0) 12.235748975s ago: executing program 3 (id=1147): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x4, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x6, 0x80000001, 0xb, 0x1fd, 0x1}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2002004}}, 0x50) syz_usb_connect(0x0, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ddeef7201d0680c1f0fc0102030109023d000100000000000000000000006f0009050200ff03b20403090500024189007f0f0905070208000107000905080300020104010725010107ff0f"], 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000000)=""/192, 0xc0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'vcan0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x1, [0x1]}}) listen(0xffffffffffffffff, 0xfffffffc) 8.72817675s ago: executing program 3 (id=1156): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\r'}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r7, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) 8.545542215s ago: executing program 5 (id=1157): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000300), 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3e, 0x100, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4000c800}, 0x2000c000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(0x0, 0x0, 0x4) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8.524545457s ago: executing program 3 (id=1158): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102060000052406000105240000000d240f0100000000000000000006241a000000090581030000000000090401"], 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) rseq(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r0, 0x7) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB='h\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @broadcast}, 0x287, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000180)={r6, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 8.368653482s ago: executing program 2 (id=1159): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@local}}) (async) unshare(0x20020000) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x8001) (async) futex(0x0, 0x9, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) (async) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) (async) r6 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1, {0x0, r9}}) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000003240)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd_index=0x9, 0x2, &(0x7f0000003180)="dbcafd1d7d10a29e6b29ac4cc90da6151c2f0ff014dec907739b91c1cf66538d274ac2be2993250d7e098da707e85dbae6e118e58424b1ad19095ac04e3ca52932982bb451922e68e75f220590c01f376ba469b80b0b22964f281989e6e7a2432f7c021027be44f143f3b37a6b448963bf9c9e40e3b91757c2d2e3de4fcd83c1f56702d55985c1e420012836769730f2a50c8e6e45e9f85199e44ead3a0ba487257c3096985bd62a90b231c950a7171ea2de97", 0xb3, 0x5, 0x1, {0x0, r9}}) (async, rerun: 64) recvmmsg$unix(r2, &(0x7f0000001d40)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/172, 0xac}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000740)=""/75, 0x4b}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/50, 0x32}, {&(0x7f0000001800)}], 0x5, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000019c0)=""/234, 0xea}, {&(0x7f0000001ac0)=""/146, 0x92}, {&(0x7f0000001b80)=""/83, 0x53}, {&(0x7f0000001c00)=""/61, 0x3d}, {&(0x7f0000001c40)=""/26, 0x1a}], 0x5, &(0x7f0000001d00)}}], 0x4, 0x100, &(0x7f0000000600)={0x77359400}) (rerun: 64) open_tree(r1, &(0x7f0000000080)='\x00', 0x89901) ioctl$VIDIOC_QUERYMENU(r11, 0xc02c5625, &(0x7f0000000580)={0x9, 0x4, @value=0xf7d}) (async, rerun: 64) futex_waitv(&(0x7f0000002c00)=[{0x3, &(0x7f0000001800)=0x8, 0x2}, {0x2, &(0x7f0000001d00)=0x4, 0x82}, {0x2, &(0x7f0000001f00), 0x82}, {0x240f, &(0x7f0000001f40)=0x5, 0x82}, {0xffffffff, &(0x7f0000001f80)=0x10000, 0x82}, {0x10000000, &(0x7f0000001fc0)=0x100, 0x82}, {0x3, &(0x7f0000002000)=0x4, 0x82}, {0xfffffffffffffffc, &(0x7f0000002040)=0x7, 0x82}, {0x3, &(0x7f0000002080), 0x82}, {0x10000, &(0x7f00000020c0)=0x7, 0x82}, {0x3, &(0x7f0000002100)=0xfffffffffffffff7, 0x2}, {0x9, &(0x7f0000002140)=0x3, 0x82}, {0x5, &(0x7f0000002180)=0x4, 0x82}, {0x5, &(0x7f00000021c0)=0x5, 0x82}, {0xfffffffffffffff8, &(0x7f0000002200)=0x6, 0x2}, {0x1000, &(0x7f0000002240)=0x5, 0x2}, {0x6, &(0x7f0000002280)=0x59, 0x82}, {0x6, &(0x7f00000022c0)=0x8, 0x2}, {0x4, &(0x7f0000002300)=0xd98, 0x82}, {0xff, &(0x7f0000002340)=0x4, 0x2}, {0xf3cd, &(0x7f0000002380)=0x6, 0x82}, {0x1, &(0x7f00000023c0)=0x4, 0x2}, {0x0, &(0x7f0000002400)=0x4, 0x82}, {0x5282, &(0x7f0000002440)=0x8, 0x2}, {0x101, &(0x7f0000002480)=0x9, 0x2}, {0x8, &(0x7f00000024c0), 0x2}, {0x0, &(0x7f0000002500)=0xd444, 0x82}, {0x425, &(0x7f0000002540)=0x8, 0x2}, {0xfffffffffffffffb, &(0x7f0000002580)=0x8, 0x82}, {0x3, &(0x7f00000025c0)=0xfffffffffffffffc, 0x2}, {0x7fff, &(0x7f0000002600)=0x5, 0x82}, {0x10001, &(0x7f0000002640)}, {0x4, &(0x7f0000002680)=0x7, 0x2}, {0xb1, &(0x7f00000026c0)=0xfffffffffffffffd, 0x82}, {0x8, &(0x7f0000002700)=0x2, 0x82}, {0xd, &(0x7f0000002740)=0x4, 0x2}, {0x80000000, &(0x7f0000002780)=0x6, 0x2}, {0x8, &(0x7f00000027c0)=0x4, 0x82}, {0xfffffffffffffffe, &(0x7f0000002800)=0x877, 0x2}, {0x100000000, &(0x7f0000002840)=0x277d7fd3, 0x82}, {0x7, &(0x7f0000002880)=0x2, 0x184}, {0x1c, &(0x7f00000028c0)=0x4, 0x2}, {0x10, &(0x7f0000002900)=0x1, 0x2}, {0x8000000000000001, &(0x7f0000002940)=0xe6a, 0x82}, {0x2, &(0x7f0000002980)=0x1ff, 0x82}, {0x0, &(0x7f00000029c0), 0x80}, {0x10, &(0x7f0000002a00)=0x5, 0x82}, {0x4, &(0x7f0000002a40)=0x1}, {0xc69, &(0x7f0000002a80)=0x6, 0x2}, {0xdfe5, &(0x7f0000002ac0)=0x4, 0x82}, {0xd3ac, &(0x7f0000002b00)=0xfffffffffffff5d8, 0x2}, {0x3, &(0x7f0000002b40)=0x3, 0x82}, {0x400, &(0x7f0000002b80)=0xd, 0x2}, {0xfffffffffffffffa, &(0x7f0000002bc0)=0x9, 0x82}], 0x36, 0x0, &(0x7f0000003140), 0x1) (async, rerun: 64) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000300), 0x0) (async, rerun: 32) getsockopt$bt_hci(r10, 0x0, 0x2, &(0x7f0000001e40)=""/178, &(0x7f00000005c0)=0xb2) (rerun: 32) 7.241662863s ago: executing program 2 (id=1161): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 6.816456839s ago: executing program 5 (id=1163): syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3a0800459a0014006701ff00"/42], 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffff7c00, 0x0, 0x4) r6 = syz_open_dev$sndpcmc(0x0, 0x0, 0x100) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x2000008, 0x12, r6, 0x83000000) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8e79f0352167ea94) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, &(0x7f0000000340), 0x0, 0x2011, 0x0, {0x0, r7}}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 6.141245198s ago: executing program 2 (id=1166): r0 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000004, 0x1d4}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r4 = socket$rds(0x15, 0x5, 0x0) fcntl$setlease(r4, 0x400, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x3}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0xfffffffd, 0x0, 0x4}}, 0x0, 0x0}}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0xd57, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0x85, {0x85, 0xd, "13caed7180444a340c117206b8e5acf3da77a99d26ccb80f3059f1f7b005f46200366a4a2c53c6d58b7bba9418044ce229463a20b002c59f641a601273c1873c5a76693138b32304d419639217a6aae2b0574174742648ec44b68af4164078e8d31784ab608870de52ef4799dff5b0aa5f1c317eee9e057803afe0959ad468e049baaf"}}, &(0x7f0000000180)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "1cec5a562b35821d38b7ff30abfae14730f3c4025fb9d50c2da77b3a46a2f3308f161db0baceb44935d3a16ab1f14c7a4403508dd0624c833e42779991420e3891735f393e06a72b46454ada4f23497ea868b6b57d8517d18413cca72002545d25fe2e8c6f5d2f3ff0ea38bcb45438c9cdabacb4a65ea650f091d8c44150a07e5aa959db3b3bb3f696201318d50ffdbe1c57c4537ee76e0ca6ae1403ba9c4f9d928aa90930f09def4dbaf49e87b93407b250bc66890c6bd60a5eda720dd80f166313fa57d1e8b5fedcb40fb78889d912fc7ab86efdd22599ef6ddc9f0fd376dc9cba44"}}, &(0x7f0000000000)={0x0, 0xf, 0x51, {0x5, 0xf, 0x51, 0x3, [@generic={0xc, 0x10, 0x1, "7884e77c8bb2a813f3"}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x3, 0x1e0f, 0x98b, [0xf]}, @generic={0x30, 0x10, 0xa, "aac12c52dedc41ceeef1697fe0a85d35d503f88209ccfe8eec452dd62287522042de1cc1ed7e6fec04b26fdef5"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x9, 0x2, "50b3707c", "4f6ff29b"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x0, 0x3, 0x81, 0x7}}}, &(0x7f0000000980)={0x84, &(0x7f0000000a40)=ANY=[@ANYBLOB="0010d000000032220d6717f9875dbd44de0c2c206174ef269905e50700a1d56fe421497af3a213d71f13c9c9c9268ffcd3bee5236e817053a9c5ff11990b036bc7e3a6368db1f44b164b287a99fc1b0a253471a59303635d320bfefdae41a87dfa4316ac769870c03ade72e33c5abd41ad8c50a01cf991b24cace53eb13a7ce51c5357b41dfa9e0e7dcca6c681c035988e072928aaff6d7e05552148845ccbe0d466f418607543319eb64db332a584a67ee4621a3078b388a25f17d3c11d2a69ce4ce362a2f7a2d9935625b7ab0bb26c312fadd643a63e2ce6c161f98d6fc808165dd7214f808c11a629a7cd69587539bb27f2f4e2471abf88ca588af763d7e59b531a504af011f9641b8737c1fb58b6381f947eb7e0987202e69653bcc9423fff916e91667d7a165e28e54a0b897538c02f0b22059dca933c1a7cbd89cfdddc80f2927cccdfe8ea71fc86ab42533a8bbb29db4469921463cdfc8f8ed67fd10234eb105e1b9c4bfc1cb54182f35cb817b7fbf863643cda0aadae8fd9db32cbfb23f2a3d4cee5da3f76ea5006906375143ca462db81c6493a6599524ea39d0b73aea9b437cd17cc72e8c372bed52ac9f2bbed0f4c1e5ed001c8e723e6c27dd439daf885db8e3251c6702b6277565a2bf0df0a08cdcc9e8d2f12b9"], &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x5, 0x2}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="2600040000ff7f000029"], &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0xb, 0x2, "a8d9"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000800)={0x40, 0x17, 0x6, @random="0f627bf3d4ce"}, &(0x7f0000000840)={0x40, 0x19, 0x2, "a9ea"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x80}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x7}}) 5.8675868s ago: executing program 7 (id=1167): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000af00)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0x0, r3, {0x7, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x78, 0x0, 0x0, {0x1000001000, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ed000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x2, 0x8, 0x20}) 5.291568159s ago: executing program 7 (id=1168): r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004058041a50000000000001090224000100000000090800000003000000092104000001fb0500090581030000060000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000845}, 0x40010) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000001b4900000000000021458ccbb75c64c9b4972316d9f8d8b9b3e1b93a264c1477c0dc6eeec95a81a55ffc7782659ba934f16ee63ca97c6786f0a769b34205874a997fd93821477d42ab6df54d8e791670828003a5c8e459df89155fcf3b6bda7d5855e360cfd7a5022e5fbed0a5ddaf18abb36e0243466aadd9bd4d6da644c4647f5e1b0b6f0000000000000000"], 0x0}, 0x0) r3 = syz_usb_connect$cdc_ecm(0x4, 0x5f, &(0x7f0000000180)={{0x12, 0x1, 0x51, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x5, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x7f, {{0x6, 0x24, 0x6, 0x0, 0x0, 'E'}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0x3, 0xb}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf10f, 0x6, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x56, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xd, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x8, 0x8}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7f, 0x7f, 0x5, 0x10, 0x9}, 0x122, &(0x7f0000000540)={0x5, 0xf, 0x122, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x4, 0x7, 0xe}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x0, 0x88f, 0x6c, [0xff3f00]}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x7fffffc, 0xf, 0x3, [0x3f30]}, @generic={0xd7, 0x10, 0x3, "c6ab9049daa545f357a99696108bf90e05d16423b5411c1c4e9f0409d49729b78404c3a61239215662467efb31facfe57cfb1c947b720080eb9792da8e3e5c8e528574a50b75bb35438c5da2f3be3308c89c56b222cc3cfb150a90bcd19fc92a5fdab3589f354b00742c425f9edb6c442f4cd4ab062ad3bc1ecbe758678737968ad26db8990abe811ca4980fbddd2c8d1db6598e47ee648d65114d0b3b2d8666b5df17e4d6b6e6b12a37f149eb53a5ad5a9b96170e2ca22b645101d4fb363b59e2a325488a33be7340c56b1a316a3d3a0e13d8d7"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad5f0089a4f276085a33b56909cf722e"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x4, 0xc24}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x810}}, {0xae, &(0x7f0000000680)=@string={0xae, 0x3, "d2e4e34576227a55370e40e5f62a2034f773a3e5dc78bace68edc491859df5d70113cf5cbc44be783b673ffa503767a94ef2e1c42ee7200bca3c0c02520e0dcfc6d9d1cab025acb5df25ab6b4719f8200f18d3b3083c15722bb74660c1bbe0acb70cf3d2db1b770084e9e95fa0c76159fd504580e6c146a2231bec7f46412da49fe2b7076e7d10a9004b37d94a02766b414eac27b40a7c13f03fbf3713110d3e006b78f5258c33a6015686a2"}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000840)={0x14, &(0x7f0000000740)={0x20, 0x8, 0xb4, {0xb4, 0x23, "9ff8d5db42cdef27a6e3fd8076961fa9bf7725e8701ff61efc3430509fbf765986efc5b9553bc59e9e3b08b7498633a0419bd618419ac5ac149013c23e0d692fe524118e2bdad5029f3de877e9cc853568c17ba1612ba2facc2ac9afbce5c2448c6d55a8677fc711e937f08e48de3e08c58c10343ee6f788d4f67d5b01f78877d4b9e02f119ba030b7932b291d66dedb9f474e6339e4e8517d803a4f825597cee4030bfbee26d4dbdc33bb61984f9ece6119"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000880)={0x40, 0xe, 0xe1, "73a4f44f6ac0719fa1137e29b9a97373d80e463a09dbff8f797f4d76df6d900bc59076c0423c146b3d3ee5ca5ccb52d15dacc4ca31d4c33e3ca256d44fe766988349a4804f4c015e9c2a0669c1437f5931cd7f3c9022e5d4fd5dcaaeaaae876894131dd3430bb50d2d28d65bb4f1c14a55bd2b1f9cf8610d28d2f97bf70ef14ed2acd9102755729c66e74deece0be607dd44259a321e50dd5dd3f25181b93eb39bd40b6e23625a1cbd6aaab1a8c23d74b8f83f1bf2f272f06460c67130ca2541e08b88f59a91005b90852d1874bf14c9d61ef3c67a4bb8d686b9c8fd0d01ac54fe"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xfe}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r5 = io_uring_setup(0x10ac, &(0x7f0000000200)={0x0, 0x2, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, 0x0, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000000)=['!\t\x00'], 0x3}) 5.068685913s ago: executing program 5 (id=1169): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000540)) r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r1 = syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) write$cgroup_int(r1, &(0x7f0000000080)=0x8001, 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @ioapic={0xeeef0000, 0x204d2ead, 0x2, 0x10, 0x0, [{0x9, 0xff, 0x9e, '\x00', 0x14}, {0x0, 0x5, 0xd, '\x00', 0x1}, {0x40, 0x7, 0x6, '\x00', 0x6}, {0x6, 0xb8, 0x5, '\x00', 0x9d}, {0xfc, 0x9, 0x2, '\x00', 0x9}, {0xf7, 0xe5, 0x5, '\x00', 0x1}, {0x9, 0x6, 0x3, '\x00', 0x9}, {0x7, 0x9, 0x2, '\x00', 0x6}, {0x2, 0xa, 0x9, '\x00', 0x2}, {0x7, 0xff, 0xc, '\x00', 0xb}, {0xb9, 0x0, 0x9, '\x00', 0x8}, {0x2, 0x3, 0x37, '\x00', 0x1}, {0x0, 0x0, 0x38}, {0xfd, 0x5, 0x9, '\x00', 0xc}, {0x15, 0x1, 0x1, '\x00', 0x9}, {0x45, 0x80, 0x2, '\x00', 0x7}, {0x7f, 0x9, 0x8, '\x00', 0x3d}, {0x9, 0x9, 0x0, '\x00', 0x66}, {0x4, 0xfe, 0xb, '\x00', 0x6d}, {0xc, 0x5, 0x9, '\x00', 0xa}, {0x0, 0x8, 0xd1, '\x00', 0x5d}, {0x44, 0xd3, 0xd6, '\x00', 0xb5}, {0x5, 0x1, 0x0, '\x00', 0x2}, {0x7, 0x6, 0x10, '\x00', 0x76}]}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0xa, 0xf3, 0x9, 0x8, 0x0, 0xb, 0x7, 0x2, 0x61, 0x5, 0xc, 0x24, 0xf, 0x7, 0x4, 0x7f}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x7, @pix={0x6, 0x5, 0x3147504d, 0x3, 0x5, 0x1, 0x4, 0x0, 0x1, 0x3, 0x1, 0x4}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) eventfd(0x1) r5 = eventfd(0xf) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000580)=r5) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 4.550184781s ago: executing program 6 (id=1170): r0 = socket$inet6(0xa, 0x800, 0x57) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000240)={0x8, r4}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xe0000000, @multicast1}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "0c36d36cb54053d71b5ec8489414f22d58e02a13bdc96c60", "8304ce8802734a58d233de6e5ce7933f791d3a7dfadd7bb9883d675a41f863ad"}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000c80)={0x48, 0x2, r2}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, r2}) 4.419523502s ago: executing program 3 (id=1171): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1ff, 0x4e02) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x19}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x4000}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x38011, r2, 0x9988000) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {0x3}, 0x9, 0x40, &(0x7f0000000040)={0x2, 0x1b, 0xfff8, 0x7, 0x10}, 0x8, 0x7f, 0xfffffff8, 0x0, 0x5, 0x1, &(0x7f0000000180)="056623e7297a3e4000b2e724380738f2113099ed7b22cea4ca1fa8a785eaca98d83f25673c2e596a290115dcfc7ca6fb1bfddec02275646a5895a2ad7403ce9309f8a3e07eba6253f876d16160146def650be4091a65e8d5006c50526728c99a60bf801331b2d73e23397cc6045956a5c8bde9b370a7306f43d61b4a5ba0a6a56ba974690d45e23348c49d6253b2ef63ba0cdb60"}) 4.242162671s ago: executing program 6 (id=1172): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000000c0)=0x14) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x7101}) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000080ff07000087d10000a5910400", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="db6000e003000065c400"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r8, 0x0, &(0x7f0000000100), 0x1000) (async) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.117571415s ago: executing program 2 (id=1173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r2, 0x0, 0x6b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000240)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x30}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xbf25}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) 4.049668521s ago: executing program 6 (id=1174): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00') r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x100010, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x9, 0x0, 0x8, 0x2, &(0x7f0000000180)="b2c30cb84c04f41e72e2fcd32852f630958319e103c64256a644e0e1d38e9960687ea8795f970275ba64e45252a8f9f7d863ed119d8e4919b6b478ba77debdbf678b897047f77e17f72078c67bc1572add5e2858eb7a68a7df214f691c7e52c616253649660a8abd482f659f7d76a05423e929b52a15ea6c0e014975a283cd", 0x80000001, 0x0, 0x1, {0x2, r5}}) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') r6 = syz_open_procfs(0x0, &(0x7f0000001380)='net/rt_cache\x00') lseek(r2, 0x0, 0x1) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000002c0)=0x7) write$ppp(r1, &(0x7f0000000300)="5af9", 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00') (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x100010, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x9, 0x0, 0x8, 0x2, &(0x7f0000000180)="b2c30cb84c04f41e72e2fcd32852f630958319e103c64256a644e0e1d38e9960687ea8795f970275ba64e45252a8f9f7d863ed119d8e4919b6b478ba77debdbf678b897047f77e17f72078c67bc1572add5e2858eb7a68a7df214f691c7e52c616253649660a8abd482f659f7d76a05423e929b52a15ea6c0e014975a283cd", 0x80000001, 0x0, 0x1, {0x2, r5}}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') (async) syz_open_procfs(0x0, &(0x7f0000001380)='net/rt_cache\x00') (async) lseek(r2, 0x0, 0x1) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000002c0)=0x7) (async) write$ppp(r1, &(0x7f0000000300)="5af9", 0x2) (async) 3.852409801s ago: executing program 6 (id=1175): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (fail_nth: 2) 3.849809013s ago: executing program 2 (id=1176): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000380000000000019078640101b8ac1414aa0b009078032c000045000000ac1414aaa815a23da43974ff"], 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0x4}, 0x38) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/217, 0xdc}, {0x0}], 0x1}, 0x4}], 0x1, 0x600100a2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000c4b000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0x41995000) io_setup(0x8, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001814010000fb"], 0x20}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x154, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x128, 0x3, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x118, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x88, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xfd}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_FLAGS={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d8}}, 0x0) 3.697039017s ago: executing program 5 (id=1177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000200000200000089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000005000000000000000000000000000000000000000300000000000000000000000000000000000000000000004401050000000000000000000000000000000000000000003200000000000000ac090000000000000000000000000000000000000000ff000000000000000000fdfffffffc0200000000000000000000000000000000000032"], 0x1fc}}, 0x0) 3.618277001s ago: executing program 5 (id=1178): syz_open_dev$ttys(0xc, 0x2, 0x1) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000400)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xee0, 0x71, 0x10, 0xaf}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000240)={0xf83, 0x13, 0xe, 0x5, 0x15, '\x00\x00\x00\x00\x00\v\x00'}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="b9972c8ef2fceca87edd6b3335ceb02b5c5d70a3ab5b52d10186a5dcb63b79a055d731f1ec68b711e56cc662b292206ba8743de0829656d904442fd6430d", 0x3e}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000780000000000019078ac1e0001ac1414aa05009078e00000e0470009000000000000000000000000007f000001830300070700ac1e0001443c000364010101000000000000000000000000e000000100000000ac1414bb00000000e000000200000000ac1e00010000008000"/134], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x6, 0x401) shutdown(r3, 0x1) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="f800006181c2e17af1e289ed00", @ANYRES16=r4, @ANYBLOB="00082cbd70000000000017000000e40005800c000280080002000400000054000280080002000200000008000400ff7f000008000200ff03000008000100090000000800020003000000080001001800000008000200ae0500000800020008000000080002000000000008000200050000000800010075647000140002800800010005000000080003000600000007000100696200001400028008000200060000000800020005000000080001006574680007000100696200001c00028008000400feffffff0800030008000000080001001f0000001c000280080004000a00000008000300000000000800040000800000"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x24000004) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x800005}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r6, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fe4a5fca3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x6, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = syz_open_dev$dmmidi(&(0x7f00000001c0), 0x9, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r8, 0x40045730, &(0x7f0000000200)=0xfffffc01) 3.460893415s ago: executing program 3 (id=1179): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) (async) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0x1ff, 0x0, {0x5, 0x0, 0x7, 0x0, 0x9, 0x3, 0x2fbc, 0x0, 0x0, 0xc000, 0x0, r2, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x8, {0x1, 0xfffffffffffffffd, 0x6, 0x80000000004, 0x400000000000, 0x6, 0x6, 0xfffffffd, 0x1, 0x4000, 0x4000000, r2, r3, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000080)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) (async) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000100)=0x3ff) (async) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0xfffffffffffffdb5, 0x5, 0x10000019, 0x0, 0x0, 0x8, 0x10000000020d, 0xa, 0x20000, 0x5}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) accept(r7, 0x0, 0x0) (async) r8 = socket(0x2b, 0x1, 0x1) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 3.312822362s ago: executing program 5 (id=1180): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x1200, &(0x7f0000004300), 0x0, &(0x7f0000004340), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x28, @dev={0xfe, 0x80, '\x00', 0x43}, 0x82}, 0xfffffffffffffe75) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.231922921s ago: executing program 3 (id=1181): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x8040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x4, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x6, 0x80000001, 0xb, 0x1fd, 0x1}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c72876f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140), &(0x7f00000001c0)=0x8) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2002004}}, 0x50) syz_usb_connect(0x0, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ddeef7201d0680c1f0fc01021188712f39e100a7272f9cdce5030109023d00010000000009041e00049efb6f0009050200ff03b20403090500024189007f0f090507020800010700090508"], 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000000)=""/192, 0xc0) listen(0xffffffffffffffff, 0xfffffffc) 2.760075204s ago: executing program 6 (id=1182): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4401, 0x0) recvmmsg$unix(r7, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 2.002957225s ago: executing program 7 (id=1183): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) (async) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.opaque\x00') (async) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) (async) socket$inet6(0xa, 0x200000000003, 0x87) (async) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e86dd6003136c00088700fc010000000000000000000000000000ff020000000000000000000000000001"], 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) (async) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) (async) creat(&(0x7f0000000540)='./file0/file0\x00', 0x8) (async) gettid() (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) 1.545227509s ago: executing program 7 (id=1184): close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 760.133531ms ago: executing program 7 (id=1185): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) (async) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r6 = gettid() syz_open_procfs(r6, &(0x7f0000000040)='net/ip_tables_matches\x00') (async) shmat(0xffffffffffffffff, &(0x7f00009b8000/0x3000)=nil, 0x4000) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 143.441471ms ago: executing program 6 (id=1186): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x10aa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xb}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={r3, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f00000004c0)=0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@allocspi={0x200, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2}, 0x0, 0x5}, [@sa={0xe4, 0x6, {{@in6=@rand_addr=' \x01\x00', @in=@remote}, {@in=@multicast2}, @in=@broadcast}}, @lifetime_val={0x24}]}, 0x200}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x6, 0x1}, 0x90) 106.483417ms ago: executing program 2 (id=1187): syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="10000180"], 0x28}}, 0x0) 0s ago: executing program 7 (id=1188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) open(0x0, 0x1850c2, 0x14c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0xb, 0x2}}}}]}, 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000100)=0x40) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xb8, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x8c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x5f, 0x4, 0x3, 0x4}, {0xa4, 0x1, 0x7, 0x1, 0x7d, 0x9}, 0x100, 0xc8e8, 0x1799}}, @TCA_TBF_BURST={0x8, 0x6, 0x80000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x6, 0xe, 0x6, 0x800}, {0xc, 0x0, 0x937b, 0x6, 0x0, 0x8}, 0x3ff, 0x8, 0xebe}}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): id=9359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.757" name="/newroot/9/file0" dev="tmpfs" ino=64 res=1 errno=0 [ 322.082779][ T9333] fuse: Unknown parameter 'fuse' [ 322.089601][ T9333] fuse: Bad value for 'fd' [ 322.183345][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 322.203200][ T5933] logitech 0003:046D:C294.000A: unbalanced collection at end of report description [ 322.224919][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.234971][ T5933] logitech 0003:046D:C294.000A: parse failed [ 322.241097][ T5933] logitech 0003:046D:C294.000A: probe with driver logitech failed with error -22 [ 322.244225][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.282418][ T9346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 322.296020][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.410032][ T5933] usb 3-1: USB disconnect, device number 45 [ 322.510262][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.586576][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.677103][ T24] usb 4-1: USB disconnect, device number 59 [ 322.729073][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.810576][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.902330][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 323.074575][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 323.088383][ T10] usb 7-1: config 2 has an invalid interface number: 45 but max is 0 [ 323.102543][ T10] usb 7-1: config 2 has no interface number 0 [ 323.120757][ T10] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 323.163978][ T10] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.205379][ T10] usb 7-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 323.230117][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.240811][ T9387] io-wq is not configured for unbound workers [ 323.241533][ T10] usb 7-1: Product: syz [ 323.253422][ T10] usb 7-1: Manufacturer: syz [ 323.258165][ T10] usb 7-1: SerialNumber: syz [ 323.287251][ T10] kobil_sct 7-1:2.45: KOBIL USB smart card terminal converter detected [ 323.357224][ T10] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 323.432693][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 323.475996][ T10] usb 7-1: USB disconnect, device number 5 [ 323.499847][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 323.560553][ T10] kobil_sct 7-1:2.45: device disconnected [ 323.596495][ T9] usb 6-1: config 0 has an invalid interface number: 104 but max is 0 [ 323.648559][ T9] usb 6-1: config 0 has no interface number 0 [ 323.722169][ T9] usb 6-1: config 0 interface 104 has no altsetting 0 [ 323.777990][ T9] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 323.789464][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.802148][ T9] usb 6-1: Product: syz [ 323.808962][ T9] usb 6-1: Manufacturer: syz [ 323.814210][ T9] usb 6-1: SerialNumber: syz [ 323.835032][ T9] usb 6-1: config 0 descriptor?? [ 323.857690][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 324.052982][ T852] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 324.224021][ T852] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 324.256015][ T852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 324.320106][ T852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64 [ 324.360462][ T852] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 324.373760][ T852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.508147][ T9] gspca_vc032x: reg_r err -110 [ 324.521715][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.536824][ T852] usb 3-1: Product: syz [ 324.541049][ T852] usb 3-1: Manufacturer: syz [ 324.565708][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.571057][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.675997][ T852] usb 3-1: SerialNumber: syz [ 324.704336][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.955261][ T852] usb 3-1: config 0 descriptor?? [ 324.969425][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 324.995439][ T9393] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 325.008015][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.023785][ T852] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 325.048457][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.091178][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.104610][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.111932][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.120250][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.120364][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.128722][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.138512][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.142330][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.144351][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.151162][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.168052][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.177156][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.185849][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.193296][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.200697][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.208082][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.215518][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.223038][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.230416][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.237870][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.246992][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.255069][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.262816][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.270637][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.279059][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.286712][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.294130][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.301462][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.309130][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.316529][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.323751][ T5198] usb 3-1: control msg error: -71 [ 325.329419][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.336681][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.343894][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.351112][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.358369][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.365662][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.372960][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.380972][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.392046][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.399419][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.406795][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.414144][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.421493][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.428826][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.436165][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.443601][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.450958][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.452408][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.458317][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.470980][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.478673][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.486657][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.494037][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.501410][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.508786][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.516326][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.524325][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.532069][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.539277][ C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -1 [ 325.546762][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.571059][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.578643][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.586286][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.593644][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.601362][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.608755][ T5198] usb 3-1: control msg error: -71 [ 325.614118][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.621342][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.628645][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.636016][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.643321][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.650630][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.657991][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.665330][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.672613][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.679882][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.687846][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.695083][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.702388][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.709665][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.716945][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.724154][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.731358][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.738641][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.745858][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.753074][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.760259][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.767478][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.774746][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.781978][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.790004][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.797378][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.804830][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 325.807650][ T852] usb 3-1: USB disconnect, device number 46 [ 325.811977][ C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -19 [ 325.867862][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.904367][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.930529][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 325.970220][ T9] gspca_vc032x: Unknown sensor... [ 326.002309][ T9] vc032x 6-1:0.104: probe with driver vc032x failed with error -22 [ 326.279197][ T10] usb 6-1: USB disconnect, device number 56 [ 326.851766][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.773'. [ 327.202094][ T852] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 327.391352][ T852] usb 4-1: Using ep0 maxpacket: 8 [ 327.448635][ T852] usb 4-1: config 0 has no interfaces? [ 327.489388][ T852] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.556178][ T852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.609649][ T852] usb 4-1: config 0 descriptor?? [ 328.842116][ T852] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 328.992175][ T852] usb 7-1: Using ep0 maxpacket: 8 [ 329.000060][ T852] usb 7-1: unable to get BOS descriptor or descriptor too short [ 329.052985][ T852] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 329.102029][ T852] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1023 [ 329.174394][ T852] usb 7-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.369626][ T852] usb 7-1: config 1 interface 0 has no altsetting 0 [ 329.432375][ T852] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.445544][ T24] usb 4-1: USB disconnect, device number 60 [ 329.553832][ T852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.589891][ T852] usb 7-1: Product: syz [ 329.622518][ T852] usb 7-1: Manufacturer: syz [ 329.632117][ T852] usb 7-1: SerialNumber: syz [ 329.755177][ T9459] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 329.807104][ T9459] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 329.972077][ T5903] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 330.065016][ T852] usb 7-1: bad CDC descriptors [ 330.132370][ T852] usb 7-1: USB disconnect, device number 6 [ 330.204503][ T5903] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 330.258776][ T5903] usb 8-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 330.288403][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.327882][ T5903] usb 8-1: config 0 descriptor?? [ 330.832546][ T5903] waltop 0003:172F:0501.000B: hidraw0: USB HID v1.01 Device [HID 172f:0501] on usb-dummy_hcd.7-1/input0 [ 330.868582][ T9494] tipc: Enabling of bearer rejected, failed to enable media [ 333.305264][ T9533] openvswitch: netlink: Message has 16 unknown bytes. [ 333.425024][ T9530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.793'. [ 333.786330][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 333.974711][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 333.988449][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 334.008927][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 1024 [ 334.051096][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 334.072234][ T5937] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 334.112703][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 334.178506][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.238648][ T24] usb 4-1: config 0 descriptor?? [ 334.292485][ T9533] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 334.302481][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 334.324149][ T5937] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 334.357792][ T9522] trusted_key: encrypted_key: master key parameter 'kser:usy~' is invalid [ 334.367021][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.408373][ T5937] usb 6-1: config 0 has no interface number 0 [ 334.450871][ T5933] usb 8-1: USB disconnect, device number 3 [ 334.471204][ T5937] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0xA has an invalid bInterval 38, changing to 9 [ 334.534540][ T24] hdpvr 4-1:0.0: unexpected answer of status request, len 0 [ 334.546339][ T5937] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0xA has invalid maxpacket 49888, setting to 1024 [ 334.588785][ T24] hdpvr 4-1:0.0: device init failed [ 334.614604][ T5937] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.626927][ T24] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 334.673864][ T5937] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.713537][ T5937] usb 6-1: config 0 interface 85 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 334.728113][ T5903] usb 4-1: USB disconnect, device number 61 [ 334.749454][ T5937] usb 6-1: config 0 interface 85 has no altsetting 0 [ 334.824096][ T5937] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 334.851456][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.880306][ T5937] usb 6-1: Product: syz [ 334.890638][ T5937] usb 6-1: Manufacturer: syz [ 334.903389][ T5937] usb 6-1: SerialNumber: syz [ 334.917485][ T5937] usb 6-1: config 0 descriptor?? [ 334.944585][ T9560] openvswitch: netlink: Key 3 has unexpected len 3 expected 4 [ 334.951040][ T5937] appletouch 6-1:0.85: Could not find int-in endpoint [ 334.962749][ T5937] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 334.973062][ T5937] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 334.984577][ T30] audit: type=1326 audit(1754052296.482:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.006877][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.111750][ T30] audit: type=1326 audit(1754052296.512:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.164648][ T30] audit: type=1326 audit(1754052296.512:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.186946][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.194076][ T30] audit: type=1326 audit(1754052296.512:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.217608][ T30] audit: type=1326 audit(1754052296.512:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.239877][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.285775][ T30] audit: type=1326 audit(1754052296.512:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.307982][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.392670][ T30] audit: type=1326 audit(1754052296.522:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.526611][ T30] audit: type=1326 audit(1754052296.522:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.667477][ T30] audit: type=1326 audit(1754052296.532:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.689788][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.898432][ T30] audit: type=1326 audit(1754052296.532:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.6.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 335.920909][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.640017][ T9601] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 337.032106][ T5946] usb 6-1: USB disconnect, device number 57 [ 337.066321][ T9609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.807'. [ 337.151239][ T9612] netlink: 60 bytes leftover after parsing attributes in process `syz.3.807'. [ 337.852313][ T5932] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 338.074101][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 338.095454][ T5932] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 338.115049][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.143617][ T5932] usb 4-1: Product: syz [ 338.163274][ T9639] fuse: Bad value for 'fd' [ 338.168299][ T5932] usb 4-1: Manufacturer: syz [ 338.185410][ T5903] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 338.212118][ T5932] usb 4-1: SerialNumber: syz [ 338.373386][ T5932] usb 4-1: config 0 descriptor?? [ 338.407021][ T5932] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 338.500837][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.642324][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.688469][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.753459][ T5903] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 338.777911][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.807546][ T5903] usb 3-1: config 0 descriptor?? [ 339.048542][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.138633][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.433140][ T5903] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 339.440524][ T5903] dragonrise 0003:0079:0011.000C: unbalanced collection at end of report description [ 339.598776][ T5903] dragonrise 0003:0079:0011.000C: parse failed [ 339.638799][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.689732][ T5903] dragonrise 0003:0079:0011.000C: probe with driver dragonrise failed with error -22 [ 339.721037][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.855018][ T5946] usb 3-1: USB disconnect, device number 47 [ 340.022179][ T9695] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 340.749195][ T9709] vlan2: entered promiscuous mode [ 340.769319][ T9709] syz_tun: entered promiscuous mode [ 340.772170][ T5946] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 340.942700][ T9715] netlink: 16 bytes leftover after parsing attributes in process `syz.7.820'. [ 341.002288][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 341.062314][ T5946] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 341.071526][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.086849][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.820'. [ 341.126110][ T5946] usb 3-1: config 0 descriptor?? [ 341.745951][ T5946] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 341.761453][ T5946] asix 3-1:0.0: probe with driver asix failed with error -61 [ 342.145165][ T5932] gspca_sonixj: Unknown sensor 0000 [ 342.309039][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.819'. [ 342.397940][ T5932] gspca_sonixj: reg_w err -71 [ 342.408029][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.824'. [ 342.416319][ T5932] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 342.458809][ T5932] usb 4-1: USB disconnect, device number 62 [ 343.282238][ T5932] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 343.452415][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 343.476444][ T5932] usb 4-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 343.504311][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.538146][ T5932] usb 4-1: Product: syz [ 343.539509][ T5946] usb 3-1: USB disconnect, device number 48 [ 343.558052][ T5932] usb 4-1: Manufacturer: syz [ 343.577597][ T5932] usb 4-1: SerialNumber: syz [ 343.625213][ T5932] usb 4-1: config 0 descriptor?? [ 343.677035][ T5932] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 343.897838][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.948771][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.004855][ T5946] usb 4-1: USB disconnect, device number 63 [ 344.211802][ T9793] netlink: 40 bytes leftover after parsing attributes in process `syz.6.832'. [ 344.270794][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.830'. [ 346.807465][ T9821] ptrace attach of "./syz-executor exec"[8960] was attempted by "   /sys/kernel/debug/sync/info 8  G\x0b \x09       P \x07 [ 347.967559][ T5937] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 348.354954][ T5932] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 348.419657][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.449461][ T5937] usb 4-1: config 0 has no interfaces? [ 348.471892][ T5937] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 348.520791][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.529764][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 348.555225][ T5932] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 348.583301][ T5937] usb 4-1: config 0 descriptor?? [ 348.588656][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.661091][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 348.724305][ T5932] usb 6-1: Product: syz [ 348.728540][ T5932] usb 6-1: Manufacturer: syz [ 348.772486][ T5932] usb 6-1: SerialNumber: syz [ 348.800861][ T5932] usb 6-1: config 0 descriptor?? [ 348.864175][ T9849] delete_channel: no stack [ 348.870055][ T5903] usb 4-1: USB disconnect, device number 64 [ 348.922323][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 348.955486][ T24] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.982317][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 348.995977][ T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 349.050973][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.133507][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 349.149876][ T5932] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 349.240020][ T24] usb 3-1: config 0 descriptor?? [ 349.296473][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.317254][ T10] usb 7-1: config 0 has no interface number 0 [ 349.347238][ T10] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 349.366959][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.390648][ T10] usb 7-1: Product: syz [ 349.397017][ T10] usb 7-1: Manufacturer: syz [ 349.401685][ T10] usb 7-1: SerialNumber: syz [ 349.444159][ T10] usb 7-1: config 0 descriptor?? [ 349.681843][ T10] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 349.773478][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 349.809165][ T24] corsair 0003:1B1C:1B34.000D: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.2-1/input0 [ 349.827627][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 349.854451][ T10] usb 7-1: media controller created [ 349.888630][ T9863] input: syz1 as /devices/virtual/input/input16 [ 349.953244][ T5932] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 349.971305][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.984947][ T24] usb 3-1: USB disconnect, device number 49 [ 350.011381][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.035441][ T5932] usb 6-1: USB disconnect, device number 58 [ 350.063552][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.122378][ T852] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 350.302490][ T852] usb 4-1: Using ep0 maxpacket: 16 [ 350.392095][ T852] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 350.413766][ T852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.426487][ T9879] fido_id[9879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 350.453042][ T852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.484572][ T852] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.503794][ T852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.557560][ T852] usb 4-1: Product: syz [ 350.590933][ T852] usb 4-1: Manufacturer: syz [ 350.630732][ T852] usb 4-1: SerialNumber: syz [ 350.656744][ T10] usb 7-1: USB disconnect, device number 7 [ 350.996677][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.096000][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.442587][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 351.617877][ T852] usb 4-1: 0:2 : does not exist [ 351.647205][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 351.647225][ T30] audit: type=1326 audit(1754052313.102:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 351.919534][ T30] audit: type=1326 audit(1754052313.102:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 351.919706][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 351.957020][ T30] audit: type=1326 audit(1754052313.142:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 351.979951][ T852] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 352.240079][ T30] audit: type=1326 audit(1754052313.142:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 352.290683][ T10] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 352.334685][ T852] usb 4-1: USB disconnect, device number 65 [ 352.349402][ T9924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.860'. [ 352.382549][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.448366][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.460468][ T30] audit: type=1326 audit(1754052313.142:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 352.482705][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.489124][ T8078] udevd[8078]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.878575][ T30] audit: type=1326 audit(1754052313.142:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 352.900789][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.977981][ T30] audit: type=1326 audit(1754052313.142:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 353.000202][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.151758][ T30] audit: type=1326 audit(1754052313.142:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 353.403974][ T30] audit: type=1326 audit(1754052313.142:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 353.515003][ T30] audit: type=1326 audit(1754052313.172:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.7.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36678eb69 code=0x7ffc0000 [ 353.867981][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.866'. [ 355.052280][ T5932] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 355.212389][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 355.994348][ T24] usb 3-1: USB disconnect, device number 50 [ 356.000078][ T9972] netlink: 164 bytes leftover after parsing attributes in process `syz.5.870'. [ 356.026207][ T9893] delete_channel: no stack [ 358.360920][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 358.399260][ T5932] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 358.484511][ T5932] usb 4-1: can't read configurations, error -71 [ 358.762164][ T24] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 358.916442][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 358.924439][ T24] usb 6-1: can't read configurations, error -61 [ 359.063503][ T24] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 359.122107][ T5937] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 359.240249][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 359.248078][ T24] usb 6-1: can't read configurations, error -61 [ 359.257704][ T24] usb usb6-port1: attempt power cycle [ 359.282098][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 359.299297][ T5937] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 359.327579][ T5937] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 359.337419][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 359.362020][ T5937] usb 7-1: Product: syz [ 359.366253][ T5937] usb 7-1: Manufacturer: syz [ 359.371650][ T5937] usb 7-1: SerialNumber: syz [ 359.393359][ T5937] usb 7-1: config 0 descriptor?? [ 359.399973][T10014] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 359.622301][ T24] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 359.666113][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 359.683622][ T24] usb 6-1: can't read configurations, error -61 [ 359.826880][ T24] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 359.855753][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 359.864174][ T24] usb 6-1: can't read configurations, error -61 [ 359.902243][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 359.911787][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 359.927192][ T24] usb usb6-port1: unable to enumerate USB device [ 360.224511][ T24] usb 7-1: USB disconnect, device number 8 [ 360.371312][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.887'. [ 360.412500][T10029] bridge0: entered allmulticast mode [ 360.418035][T10028] bridge_slave_1: left allmulticast mode [ 360.428848][T10028] bridge_slave_1: left promiscuous mode [ 360.435058][T10028] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.454820][T10028] bridge_slave_0: left allmulticast mode [ 360.462378][T10028] bridge_slave_0: left promiscuous mode [ 360.468226][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.623506][T10028] bridge0 (unregistering): left allmulticast mode [ 360.773881][T10036] @: renamed from syz_tun (while UP) [ 361.194114][T10039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.902286][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 362.062629][ T10] usb 4-1: device descriptor read/64, error -71 [ 362.342301][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 362.505892][ T10] usb 4-1: device descriptor read/64, error -71 [ 362.748833][ T852] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 362.803080][ T10] usb usb4-port1: attempt power cycle [ 362.819943][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.5.898'. [ 363.082234][ T852] usb 7-1: device descriptor read/64, error -71 [ 363.222184][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 363.243061][ T10] usb 4-1: device descriptor read/8, error -71 [ 363.322203][ T852] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 363.482114][ T852] usb 7-1: device descriptor read/64, error -71 [ 363.504941][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 363.542987][ T10] usb 4-1: device descriptor read/8, error -71 [ 363.592587][ T852] usb usb7-port1: attempt power cycle [ 363.652778][ T10] usb usb4-port1: unable to enumerate USB device [ 363.743853][T10077] Invalid option length (0) for dns_resolver key [ 363.935937][ T5932] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 364.002177][ T852] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 364.023235][ T852] usb 7-1: device descriptor read/8, error -71 [ 364.042159][ T10] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 364.072124][ T5932] usb 6-1: device descriptor read/64, error -71 [ 364.194102][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.204823][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.216689][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.225974][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.234072][ T10] usb 3-1: Product: syz [ 364.238268][ T10] usb 3-1: Manufacturer: syz [ 364.243000][ T10] usb 3-1: SerialNumber: syz [ 364.272091][ T852] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 364.292736][ T852] usb 7-1: device descriptor read/8, error -71 [ 364.312249][ T5932] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 364.403268][ T852] usb usb7-port1: unable to enumerate USB device [ 364.446667][ T5932] usb 6-1: device descriptor read/64, error -71 [ 364.456931][T10077] netlink: 36 bytes leftover after parsing attributes in process `syz.2.901'. [ 364.476701][ T10] usb 3-1: 0:2 : does not exist [ 364.488325][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 364.518985][ T10] usb 3-1: USB disconnect, device number 51 [ 364.554385][ T8078] udevd[8078]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.572799][ T5932] usb usb6-port1: attempt power cycle [ 364.912591][ T5932] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 364.932921][ T5932] usb 6-1: device descriptor read/8, error -71 [ 365.082198][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 365.187271][ T5932] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 365.212783][ T5932] usb 6-1: device descriptor read/8, error -71 [ 365.242324][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 365.248903][ T24] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 365.257569][ T24] usb 4-1: config 0 has no interface number 0 [ 365.269265][ T24] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 365.276914][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 365.297261][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.315839][ T24] usb 4-1: Product: syz [ 365.320093][ T24] usb 4-1: Manufacturer: syz [ 365.333154][ T5932] usb usb6-port1: unable to enumerate USB device [ 365.347693][ T24] usb 4-1: SerialNumber: syz [ 365.356586][ T24] usb 4-1: config 0 descriptor?? [ 365.370850][T10084] netlink: 52 bytes leftover after parsing attributes in process `syz.6.904'. [ 365.390039][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 365.390058][ T30] audit: type=1326 audit(1754052326.882:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.6.904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cb4f8eb69 code=0x0 [ 365.422354][ T10] usb 3-1: device descriptor read/64, error -71 [ 365.664711][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 365.684091][ T24] usbserial_generic 4-1:0.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 365.695845][ T24] usbserial_generic 4-1:0.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 365.706928][ T24] usbserial_generic 4-1:0.175: device has no bulk endpoints [ 365.716777][ T24] safe_serial 4-1:0.175: safe_serial converter detected [ 365.725655][ T24] safe_serial 4-1:0.175: probe with driver safe_serial failed with error -22 [ 365.739007][ T24] usb 4-1: USB disconnect, device number 72 [ 365.802260][ T10] usb 3-1: device descriptor read/64, error -71 [ 365.912353][ T10] usb usb3-port1: attempt power cycle [ 366.257141][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 366.299092][ T10] usb 3-1: device descriptor read/8, error -71 [ 366.344034][T10088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 366.552318][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 366.577622][ T10] usb 3-1: device descriptor read/8, error -71 [ 366.702842][ T10] usb usb3-port1: unable to enumerate USB device [ 366.860161][T10105] netlink: 24 bytes leftover after parsing attributes in process `syz.7.910'. [ 366.933799][T10112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.911'. [ 367.040419][T10115] netlink: 132 bytes leftover after parsing attributes in process `syz.5.913'. [ 367.205284][T10118] FAULT_INJECTION: forcing a failure. [ 367.205284][T10118] name failslab, interval 1, probability 0, space 0, times 0 [ 367.220174][T10118] CPU: 1 UID: 0 PID: 10118 Comm: syz.5.915 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 367.220204][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.220225][T10118] Call Trace: [ 367.220234][T10118] [ 367.220241][T10118] dump_stack_lvl+0x189/0x250 [ 367.220262][T10118] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.220286][T10118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.220319][T10118] should_fail_ex+0x414/0x560 [ 367.220354][T10118] should_failslab+0xa8/0x100 [ 367.220385][T10118] __kmalloc_cache_noprof+0x70/0x3d0 [ 367.220410][T10118] ? nft_trans_table_add+0x56/0x430 [ 367.220443][T10118] nft_trans_table_add+0x56/0x430 [ 367.220477][T10118] nf_tables_newtable+0xce3/0x1890 [ 367.220529][T10118] nfnetlink_rcv+0x112f/0x2520 [ 367.220594][T10118] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 367.220642][T10118] ? ref_tracker_free+0x63a/0x7d0 [ 367.220705][T10118] ? __netlink_deliver_tap+0x807/0x850 [ 367.220726][T10118] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.220765][T10118] netlink_unicast+0x82c/0x9e0 [ 367.220805][T10118] ? __pfx_netlink_unicast+0x10/0x10 [ 367.220838][T10118] ? netlink_sendmsg+0x642/0xb30 [ 367.220856][T10118] ? skb_put+0x11b/0x210 [ 367.220884][T10118] netlink_sendmsg+0x805/0xb30 [ 367.220915][T10118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.220949][T10118] ? aa_sock_msg_perm+0x94/0x160 [ 367.220975][T10118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.220994][T10118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.221017][T10118] __sock_sendmsg+0x21c/0x270 [ 367.221050][T10118] ____sys_sendmsg+0x505/0x830 [ 367.221082][T10118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.221117][T10118] ? import_iovec+0x74/0xa0 [ 367.221147][T10118] ___sys_sendmsg+0x21f/0x2a0 [ 367.221174][T10118] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.221238][T10118] ? __fget_files+0x2a/0x420 [ 367.221265][T10118] ? __fget_files+0x3a0/0x420 [ 367.221304][T10118] __x64_sys_sendmsg+0x19b/0x260 [ 367.221333][T10118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.221369][T10118] ? __pfx_ksys_write+0x10/0x10 [ 367.221390][T10118] ? rcu_is_watching+0x15/0xb0 [ 367.221426][T10118] ? do_syscall_64+0xbe/0x3b0 [ 367.221451][T10118] do_syscall_64+0xfa/0x3b0 [ 367.221470][T10118] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.221501][T10118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.221521][T10118] ? clear_bhb_loop+0x60/0xb0 [ 367.221546][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.221566][T10118] RIP: 0033:0x7f33e2f8eb69 [ 367.221584][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.221602][T10118] RSP: 002b:00007f33e3d6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.221625][T10118] RAX: ffffffffffffffda RBX: 00007f33e31b5fa0 RCX: 00007f33e2f8eb69 [ 367.221640][T10118] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 367.221651][T10118] RBP: 00007f33e3d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 367.221662][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.221674][T10118] R13: 0000000000000000 R14: 00007f33e31b5fa0 R15: 00007f33e32dfa28 [ 367.221707][T10118] [ 367.666389][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.916'. [ 367.680882][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.916'. [ 368.129681][T10129] loop2: detected capacity change from 0 to 7 [ 368.154169][ T5856] Dev loop2: unable to read RDB block 7 [ 368.161486][ T5856] loop2: unable to read partition table [ 368.169176][ T5856] loop2: partition table beyond EOD, truncated [ 368.180562][T10129] Dev loop2: unable to read RDB block 7 [ 368.187098][T10129] loop2: unable to read partition table [ 368.200140][T10129] loop2: partition table beyond EOD, truncated [ 368.235141][T10129] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 368.252996][ T5932] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 368.364474][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.378127][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.417133][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 368.441204][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 368.458278][ T5932] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 368.470855][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.484875][ T5932] usb 4-1: Product: syz [ 368.489061][ T5932] usb 4-1: Manufacturer: syz [ 368.495620][ T5932] usb 4-1: SerialNumber: syz [ 368.516746][ T5932] usb 4-1: config 0 descriptor?? [ 368.528889][T10127] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 368.552968][T10127] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 368.592061][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 368.746423][ T10] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 368.755750][T10144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.759829][ T10] usb 6-1: config 0 has no interface number 0 [ 368.779714][ T10] usb 6-1: config 0 interface 93 has no altsetting 0 [ 368.787219][T10127] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 368.798512][T10127] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 368.806304][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 368.816249][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.833721][ T10] usb 6-1: config 0 descriptor?? [ 368.842727][ T10] cp210x 6-1:0.93: cp210x converter detected [ 369.012137][ T5931] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 369.017026][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.032188][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.172078][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 369.186681][ T5931] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 369.196817][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.206378][ T5931] usb 3-1: Product: syz [ 369.210875][ T5931] usb 3-1: Manufacturer: syz [ 369.217435][ T5931] usb 3-1: SerialNumber: syz [ 369.230408][ T5931] usb 3-1: config 0 descriptor?? [ 369.251826][ T10] cp210x 6-1:0.93: failed to get vendor val 0x000e size 3: -32 [ 369.253915][ T5931] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 369.272985][ T5931] usb 3-1: Detected FT-X [ 369.456001][ T5931] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 369.462675][ T10] cp210x 6-1:0.93: GPIO initialisation failed: -19 [ 369.483612][ T5931] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 369.491224][ T5931] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 369.499531][ T10] usb 6-1: cp210x converter now attached to ttyUSB1 [ 369.511097][ T5931] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 369.521532][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.617561][ T5931] usb 3-1: USB disconnect, device number 56 [ 369.617685][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.659422][ T5931] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 369.668512][T10149] FAULT_INJECTION: forcing a failure. [ 369.668512][T10149] name failslab, interval 1, probability 0, space 0, times 0 [ 369.693897][ T5931] ftdi_sio 3-1:0.0: device disconnected [ 369.700126][T10149] CPU: 0 UID: 0 PID: 10149 Comm: syz.6.926 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 369.700155][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.700168][T10149] Call Trace: [ 369.700177][T10149] [ 369.700185][T10149] dump_stack_lvl+0x189/0x250 [ 369.700211][T10149] ? __pfx____ratelimit+0x10/0x10 [ 369.700242][T10149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.700262][T10149] ? __pfx__printk+0x10/0x10 [ 369.700293][T10149] ? __pfx___might_resched+0x10/0x10 [ 369.700327][T10149] should_fail_ex+0x414/0x560 [ 369.700363][T10149] ? nf_tables_newset+0x132b/0x2530 [ 369.700387][T10149] should_failslab+0xa8/0x100 [ 369.700416][T10149] __kvmalloc_node_noprof+0x161/0x5f0 [ 369.700441][T10149] ? nf_tables_newset+0x132b/0x2530 [ 369.700462][T10149] ? nft_table_lookup+0x211/0x230 [ 369.700485][T10149] ? nft_set_lookup+0x128/0x150 [ 369.700512][T10149] ? nft_rbtree_estimate+0x5f/0x170 [ 369.700540][T10149] nf_tables_newset+0x132b/0x2530 [ 369.700579][T10149] ? __pfx_nf_tables_newset+0x10/0x10 [ 369.700627][T10149] ? __nla_parse+0x40/0x60 [ 369.700652][T10149] nfnetlink_rcv+0x112f/0x2520 [ 369.700716][T10149] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 369.700763][T10149] ? ref_tracker_free+0x63a/0x7d0 [ 369.700825][T10149] ? __netlink_deliver_tap+0x807/0x850 [ 369.700845][T10149] ? netlink_deliver_tap+0x2e/0x1b0 [ 369.700886][T10149] netlink_unicast+0x82c/0x9e0 [ 369.700926][T10149] ? __pfx_netlink_unicast+0x10/0x10 [ 369.700959][T10149] ? netlink_sendmsg+0x642/0xb30 [ 369.700977][T10149] ? skb_put+0x11b/0x210 [ 369.701011][T10149] netlink_sendmsg+0x805/0xb30 [ 369.701043][T10149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.701068][T10149] ? aa_sock_msg_perm+0x94/0x160 [ 369.701094][T10149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.701113][T10149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.701135][T10149] __sock_sendmsg+0x21c/0x270 [ 369.701170][T10149] ____sys_sendmsg+0x505/0x830 [ 369.701201][T10149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.701235][T10149] ? import_iovec+0x74/0xa0 [ 369.701264][T10149] ___sys_sendmsg+0x21f/0x2a0 [ 369.701290][T10149] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.701356][T10149] ? __fget_files+0x2a/0x420 [ 369.701383][T10149] ? __fget_files+0x3a0/0x420 [ 369.701421][T10149] __x64_sys_sendmsg+0x19b/0x260 [ 369.701450][T10149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.701485][T10149] ? __pfx_ksys_write+0x10/0x10 [ 369.701504][T10149] ? rcu_is_watching+0x15/0xb0 [ 369.701538][T10149] ? do_syscall_64+0xbe/0x3b0 [ 369.701562][T10149] do_syscall_64+0xfa/0x3b0 [ 369.701580][T10149] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.701609][T10149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.701628][T10149] ? clear_bhb_loop+0x60/0xb0 [ 369.701653][T10149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.701672][T10149] RIP: 0033:0x7f6cb4f8eb69 [ 369.701690][T10149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.701708][T10149] RSP: 002b:00007f6cb5ea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.701730][T10149] RAX: ffffffffffffffda RBX: 00007f6cb51b5fa0 RCX: 00007f6cb4f8eb69 [ 369.701744][T10149] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 369.701756][T10149] RBP: 00007f6cb5ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 369.701768][T10149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.701779][T10149] R13: 0000000000000000 R14: 00007f6cb51b5fa0 R15: 00007f6cb52dfa28 [ 369.701812][T10149] [ 370.049795][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.117467][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.159842][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.251219][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.283267][T10155] netlink: 40 bytes leftover after parsing attributes in process `syz.6.928'. [ 370.309570][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.528285][ T24] usb 6-1: USB disconnect, device number 67 [ 371.537060][ T24] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 371.586364][ T24] cp210x 6-1:0.93: device disconnected [ 371.795403][ T5932] Error reading MAC address [ 371.872685][ T5932] usb 4-1: USB disconnect, device number 73 [ 372.413790][T10181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.663107][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.937'. [ 372.789851][T10186] FAULT_INJECTION: forcing a failure. [ 372.789851][T10186] name failslab, interval 1, probability 0, space 0, times 0 [ 372.879674][T10186] CPU: 0 UID: 0 PID: 10186 Comm: syz.6.938 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 372.879706][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.879719][T10186] Call Trace: [ 372.879727][T10186] [ 372.879736][T10186] dump_stack_lvl+0x189/0x250 [ 372.879765][T10186] ? __pfx____ratelimit+0x10/0x10 [ 372.879798][T10186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.879820][T10186] ? __pfx__printk+0x10/0x10 [ 372.879853][T10186] ? __pfx___might_resched+0x10/0x10 [ 372.879888][T10186] should_fail_ex+0x414/0x560 [ 372.879922][T10186] should_failslab+0xa8/0x100 [ 372.879952][T10186] __kmalloc_noprof+0xcb/0x4f0 [ 372.879974][T10186] ? nf_tables_newset+0x132b/0x2530 [ 372.879998][T10186] ? nla_strdup+0x9d/0x140 [ 372.880015][T10186] ? trace_kmalloc+0x1f/0xd0 [ 372.880041][T10186] nla_strdup+0x9d/0x140 [ 372.880059][T10186] ? nft_rbtree_estimate+0x5f/0x170 [ 372.880087][T10186] nf_tables_newset+0x136a/0x2530 [ 372.880126][T10186] ? __pfx_nf_tables_newset+0x10/0x10 [ 372.880176][T10186] ? __nla_parse+0x40/0x60 [ 372.880200][T10186] nfnetlink_rcv+0x112f/0x2520 [ 372.880264][T10186] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 372.880311][T10186] ? ref_tracker_free+0x63a/0x7d0 [ 372.880379][T10186] ? __netlink_deliver_tap+0x807/0x850 [ 372.880400][T10186] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.880440][T10186] netlink_unicast+0x82c/0x9e0 [ 372.880486][T10186] ? __pfx_netlink_unicast+0x10/0x10 [ 372.880518][T10186] ? netlink_sendmsg+0x642/0xb30 [ 372.880536][T10186] ? skb_put+0x11b/0x210 [ 372.880563][T10186] netlink_sendmsg+0x805/0xb30 [ 372.880594][T10186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.880619][T10186] ? aa_sock_msg_perm+0x94/0x160 [ 372.880645][T10186] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.880664][T10186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.880686][T10186] __sock_sendmsg+0x21c/0x270 [ 372.880719][T10186] ____sys_sendmsg+0x505/0x830 [ 372.880750][T10186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.880785][T10186] ? import_iovec+0x74/0xa0 [ 372.880814][T10186] ___sys_sendmsg+0x21f/0x2a0 [ 372.880841][T10186] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.880904][T10186] ? __fget_files+0x2a/0x420 [ 372.880931][T10186] ? __fget_files+0x3a0/0x420 [ 372.880969][T10186] __x64_sys_sendmsg+0x19b/0x260 [ 372.880997][T10186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.881033][T10186] ? __pfx_ksys_write+0x10/0x10 [ 372.881053][T10186] ? rcu_is_watching+0x15/0xb0 [ 372.881089][T10186] ? do_syscall_64+0xbe/0x3b0 [ 372.881114][T10186] do_syscall_64+0xfa/0x3b0 [ 372.881132][T10186] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.881162][T10186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.881182][T10186] ? clear_bhb_loop+0x60/0xb0 [ 372.881206][T10186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.881226][T10186] RIP: 0033:0x7f6cb4f8eb69 [ 372.881244][T10186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.881261][T10186] RSP: 002b:00007f6cb5ea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.881282][T10186] RAX: ffffffffffffffda RBX: 00007f6cb51b5fa0 RCX: 00007f6cb4f8eb69 [ 372.881296][T10186] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 372.881309][T10186] RBP: 00007f6cb5ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 372.881322][T10186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.881334][T10186] R13: 0000000000000000 R14: 00007f6cb51b5fa0 R15: 00007f6cb52dfa28 [ 372.881365][T10186] [ 373.679053][T10188] binder_alloc: 10187: binder_alloc_buf, no vma [ 374.412146][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.944'. [ 374.421138][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.944'. [ 374.508730][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.944'. [ 374.518850][ T9674] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.536054][ T9674] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.547016][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.944'. [ 374.596695][ T9674] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.750593][ T9674] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.921167][ T30] audit: type=1326 audit(1754052336.412:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.2.949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45e2f8eb69 code=0x0 [ 375.024696][ T5903] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 375.244604][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.335659][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.711412][ T5903] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 375.776700][T10230] FAULT_INJECTION: forcing a failure. [ 375.776700][T10230] name failslab, interval 1, probability 0, space 0, times 0 [ 375.789948][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.889683][ T5903] usb 7-1: config 0 descriptor?? [ 375.912133][T10230] CPU: 1 UID: 0 PID: 10230 Comm: syz.5.951 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 375.912164][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.912176][T10230] Call Trace: [ 375.912184][T10230] [ 375.912198][T10230] dump_stack_lvl+0x189/0x250 [ 375.912225][T10230] ? __pfx____ratelimit+0x10/0x10 [ 375.912256][T10230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.912277][T10230] ? __pfx__printk+0x10/0x10 [ 375.912307][T10230] ? __pfx___might_resched+0x10/0x10 [ 375.912333][T10230] ? fs_reclaim_acquire+0x7d/0x100 [ 375.912365][T10230] should_fail_ex+0x414/0x560 [ 375.912399][T10230] should_failslab+0xa8/0x100 [ 375.912430][T10230] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 375.912572][T10230] ? kasprintf+0xd4/0x120 [ 375.912610][T10230] kvasprintf+0xdc/0x190 [ 375.912635][T10230] ? __kmalloc_noprof+0x27a/0x4f0 [ 375.912658][T10230] ? nla_strdup+0x9d/0x140 [ 375.912674][T10230] ? nf_tables_newset+0x136a/0x2530 [ 375.912699][T10230] ? __pfx_kvasprintf+0x10/0x10 [ 375.912722][T10230] ? ____sys_sendmsg+0x505/0x830 [ 375.912746][T10230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.912778][T10230] kasprintf+0xd4/0x120 [ 375.912810][T10230] ? __pfx_kasprintf+0x10/0x10 [ 375.912848][T10230] nf_tables_set_alloc_name+0x109/0x720 [ 375.912885][T10230] ? rcu_is_watching+0x15/0xb0 [ 375.912918][T10230] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 375.912949][T10230] ? nla_strdup+0xb8/0x140 [ 375.912981][T10230] nf_tables_newset+0x138b/0x2530 [ 375.913024][T10230] ? __pfx_nf_tables_newset+0x10/0x10 [ 375.913076][T10230] ? __nla_parse+0x40/0x60 [ 375.913102][T10230] nfnetlink_rcv+0x112f/0x2520 [ 375.913175][T10230] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 375.913252][T10230] ? ref_tracker_free+0x63a/0x7d0 [ 375.913319][T10230] ? __netlink_deliver_tap+0x807/0x850 [ 375.913342][T10230] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.913382][T10230] netlink_unicast+0x82c/0x9e0 [ 375.913423][T10230] ? __pfx_netlink_unicast+0x10/0x10 [ 375.913457][T10230] ? netlink_sendmsg+0x642/0xb30 [ 375.913475][T10230] ? skb_put+0x11b/0x210 [ 375.913502][T10230] netlink_sendmsg+0x805/0xb30 [ 375.913534][T10230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.913570][T10230] ? aa_sock_msg_perm+0x94/0x160 [ 375.913597][T10230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.913617][T10230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.913640][T10230] __sock_sendmsg+0x21c/0x270 [ 375.913671][T10230] ____sys_sendmsg+0x505/0x830 [ 375.913703][T10230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.913740][T10230] ? import_iovec+0x74/0xa0 [ 375.913771][T10230] ___sys_sendmsg+0x21f/0x2a0 [ 375.913798][T10230] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.913859][T10230] ? __fget_files+0x2a/0x420 [ 375.913887][T10230] ? __fget_files+0x3a0/0x420 [ 375.913927][T10230] __x64_sys_sendmsg+0x19b/0x260 [ 375.913955][T10230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.913991][T10230] ? __pfx_ksys_write+0x10/0x10 [ 375.914013][T10230] ? rcu_is_watching+0x15/0xb0 [ 375.914048][T10230] ? do_syscall_64+0xbe/0x3b0 [ 375.914073][T10230] do_syscall_64+0xfa/0x3b0 [ 375.914091][T10230] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.914121][T10230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.914141][T10230] ? clear_bhb_loop+0x60/0xb0 [ 375.914168][T10230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.914189][T10230] RIP: 0033:0x7f33e2f8eb69 [ 375.914206][T10230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.914224][T10230] RSP: 002b:00007f33e3d6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.914254][T10230] RAX: ffffffffffffffda RBX: 00007f33e31b5fa0 RCX: 00007f33e2f8eb69 [ 375.914270][T10230] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 375.914283][T10230] RBP: 00007f33e3d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 375.914296][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.914309][T10230] R13: 0000000000000000 R14: 00007f33e31b5fa0 R15: 00007f33e32dfa28 [ 375.914341][T10230] [ 376.318706][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.591062][T10210] netlink: 'syz.6.947': attribute type 10 has an invalid length. [ 376.764495][T10235] netlink: 'syz.6.947': attribute type 10 has an invalid length. [ 377.239833][T10210] team0: Port device dummy0 added [ 377.267922][T10235] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 377.353501][T10235] team0: Failed to send options change via netlink (err -105) [ 377.361358][T10235] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 377.445654][T10235] team0: Port device dummy0 removed [ 377.499716][T10235] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 377.799138][ T5903] usbhid 7-1:0.0: can't add hid device: -71 [ 377.831080][ T5903] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 377.912404][ T5903] usb 7-1: USB disconnect, device number 13 [ 377.915518][T10243] netlink: 52 bytes leftover after parsing attributes in process `syz.5.954'. [ 378.192765][T10246] netlink: 52 bytes leftover after parsing attributes in process `syz.5.954'. [ 378.962600][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.969513][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.166639][T10223] delete_channel: no stack [ 379.880152][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.932688][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.112307][ T5903] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 380.364121][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.382121][ T5903] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 380.418283][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.579270][ T5903] usb 4-1: config 0 descriptor?? [ 380.889075][ T5903] magicmouse 0003:05AC:0265.000E: unbalanced collection at end of report description [ 380.910681][ T5903] magicmouse 0003:05AC:0265.000E: magicmouse hid parse failed [ 380.915173][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.961'. [ 380.938670][T10275] futex_wake_op: syz.6.961 tries to shift op by 32; fix this program [ 381.174484][T10280] FAULT_INJECTION: forcing a failure. [ 381.174484][T10280] name failslab, interval 1, probability 0, space 0, times 0 [ 381.204354][T10280] CPU: 1 UID: 0 PID: 10280 Comm: syz.6.963 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 381.204387][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.204399][T10280] Call Trace: [ 381.204408][T10280] [ 381.204417][T10280] dump_stack_lvl+0x189/0x250 [ 381.204445][T10280] ? __pfx____ratelimit+0x10/0x10 [ 381.204477][T10280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.204499][T10280] ? __pfx__printk+0x10/0x10 [ 381.204528][T10280] ? __pfx___might_resched+0x10/0x10 [ 381.204557][T10280] ? fs_reclaim_acquire+0x7d/0x100 [ 381.204590][T10280] should_fail_ex+0x414/0x560 [ 381.204625][T10280] should_failslab+0xa8/0x100 [ 381.204652][T10280] __kmalloc_cache_noprof+0x70/0x3d0 [ 381.204677][T10280] ? __nft_trans_set_add+0x5e/0x710 [ 381.204710][T10280] __nft_trans_set_add+0x5e/0x710 [ 381.204745][T10280] nf_tables_newset+0x1d6f/0x2530 [ 381.204785][T10280] ? __pfx_nf_tables_newset+0x10/0x10 [ 381.204838][T10280] ? __nla_parse+0x40/0x60 [ 381.204864][T10280] nfnetlink_rcv+0x112f/0x2520 [ 381.204928][T10280] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 381.204976][T10280] ? ref_tracker_free+0x63a/0x7d0 [ 381.205043][T10280] ? __netlink_deliver_tap+0x807/0x850 [ 381.205063][T10280] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.205103][T10280] netlink_unicast+0x82c/0x9e0 [ 381.205143][T10280] ? __pfx_netlink_unicast+0x10/0x10 [ 381.205176][T10280] ? netlink_sendmsg+0x642/0xb30 [ 381.205194][T10280] ? skb_put+0x11b/0x210 [ 381.205220][T10280] netlink_sendmsg+0x805/0xb30 [ 381.205251][T10280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.205276][T10280] ? aa_sock_msg_perm+0x94/0x160 [ 381.205301][T10280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.205319][T10280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.205342][T10280] __sock_sendmsg+0x21c/0x270 [ 381.205375][T10280] ____sys_sendmsg+0x505/0x830 [ 381.205405][T10280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.205439][T10280] ? import_iovec+0x74/0xa0 [ 381.205467][T10280] ___sys_sendmsg+0x21f/0x2a0 [ 381.205494][T10280] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.205559][T10280] ? __fget_files+0x2a/0x420 [ 381.205585][T10280] ? __fget_files+0x3a0/0x420 [ 381.205623][T10280] __x64_sys_sendmsg+0x19b/0x260 [ 381.205651][T10280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.205686][T10280] ? __pfx_ksys_write+0x10/0x10 [ 381.205706][T10280] ? rcu_is_watching+0x15/0xb0 [ 381.205743][T10280] ? do_syscall_64+0xbe/0x3b0 [ 381.205775][T10280] do_syscall_64+0xfa/0x3b0 [ 381.205794][T10280] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.205824][T10280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.205844][T10280] ? clear_bhb_loop+0x60/0xb0 [ 381.205869][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.205889][T10280] RIP: 0033:0x7f6cb4f8eb69 [ 381.205906][T10280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.205923][T10280] RSP: 002b:00007f6cb5ea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.205945][T10280] RAX: ffffffffffffffda RBX: 00007f6cb51b5fa0 RCX: 00007f6cb4f8eb69 [ 381.205960][T10280] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 381.205973][T10280] RBP: 00007f6cb5ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 381.205985][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.206003][T10280] R13: 0000000000000000 R14: 00007f6cb51b5fa0 R15: 00007f6cb52dfa28 [ 381.206035][T10280] [ 381.729231][ T5903] magicmouse 0003:05AC:0265.000E: probe with driver magicmouse failed with error -22 [ 381.972698][ T5903] usb 4-1: USB disconnect, device number 74 [ 382.172223][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.966'. [ 382.461619][T10298] tipc: Started in network mode [ 382.467087][T10298] tipc: Node identity 8e0c39e63425, cluster identity 4711 [ 382.494216][T10298] tipc: Enabled bearer , priority 0 [ 382.549573][T10298] tipc: Resetting bearer [ 382.572427][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 382.613073][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'. [ 382.657358][T10294] tipc: Disabling bearer [ 382.734618][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 382.744812][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.762680][ T24] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 382.820313][ T24] usb 7-1: config 1 interface 0 has no altsetting 1 [ 382.826741][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.971'. [ 382.844703][ T5903] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 382.844738][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 382.862468][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.880925][ T24] usb 7-1: Product: syz [ 382.900051][T10305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.909245][ T24] usb 7-1: Manufacturer: syz [ 382.939044][ T24] usb 7-1: SerialNumber: syz [ 382.979789][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 383.056919][ T5903] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 383.101868][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 383.507683][ T24] smsusb:smsusb_probe: Device initialized with return code -19 [ 383.512938][ T5903] usb 4-1: Product: syz [ 383.545411][ T5903] usb 4-1: Manufacturer: syz [ 383.578897][ T5903] usb 4-1: SerialNumber: syz [ 383.713500][ T5903] usb 4-1: config 0 descriptor?? [ 384.073640][ T30] audit: type=1326 audit(1754052345.292:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 384.122069][ T5903] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 384.131299][ T30] audit: type=1326 audit(1754052345.292:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 384.232781][ T24] usb 7-1: USB disconnect, device number 14 [ 384.250018][ T30] audit: type=1326 audit(1754052345.342:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 384.349844][ T30] audit: type=1326 audit(1754052345.342:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 384.694333][ T30] audit: type=1326 audit(1754052345.342:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 384.945465][ T30] audit: type=1326 audit(1754052345.342:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.6.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb4f8eb69 code=0x7ffc0000 [ 385.133451][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.214152][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.832074][ T5946] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 385.951878][ T30] audit: type=1326 audit(1754052347.442:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33e2f2ad69 code=0x7ffc0000 [ 386.006099][ T5946] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.028551][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 386.061277][ T30] audit: type=1326 audit(1754052347.452:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33e2f2ad69 code=0x7ffc0000 [ 386.092395][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 386.110898][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 386.140375][ T5946] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 386.160155][ T5946] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 386.197459][ T5946] usb 7-1: Manufacturer: syz [ 386.236303][ T5946] usb 7-1: config 0 descriptor?? [ 386.278243][ T30] audit: type=1326 audit(1754052347.452:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33e2f2ad69 code=0x7ffc0000 [ 386.329515][ T30] audit: type=1326 audit(1754052347.452:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.5.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33e2f2ad69 code=0x7ffc0000 [ 386.352283][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.587358][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.981'. [ 386.792004][ T5946] rc_core: IR keymap rc-hauppauge not found [ 386.798674][ T5946] Registered IR keymap rc-empty [ 386.804617][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 386.881167][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 386.904396][ T9] usb 4-1: USB disconnect, device number 75 [ 386.916901][ T5946] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 387.043665][ T5946] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 387.185857][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.212583][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 387.252104][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.252133][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 387.310814][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.382378][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.432223][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.481399][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.515556][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.559121][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.652218][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.746573][ T5946] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 387.810285][ T5946] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 387.873476][ T5946] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 387.957361][ T5946] usb 7-1: USB disconnect, device number 15 [ 388.483813][T10376] openvswitch: netlink: IP tunnel TTL not specified. [ 389.066251][T10380] loop6: detected capacity change from 0 to 8388608 [ 389.103439][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.116712][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.136826][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 389.150829][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.171456][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.180160][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.197253][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.205634][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.275876][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.290345][T10380] ldm_validate_partition_table(): Disk read failed. [ 389.338980][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.387566][T10380] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.426630][T10380] Dev loop6: unable to read RDB block 0 [ 389.442473][ T5946] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 389.463783][T10380] loop6: unable to read partition table [ 389.492916][T10380] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 389.622225][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 389.640102][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 389.657819][ T5946] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 389.675034][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.695240][ T5946] usb 3-1: Product: syz [ 389.699503][ T5946] usb 3-1: Manufacturer: syz [ 389.720443][ T5946] usb 3-1: SerialNumber: syz [ 389.792188][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 389.798684][ T5946] usb 3-1: config 0 descriptor?? [ 389.829674][ T5946] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 389.860709][ T5946] usb 3-1: Detected FT232B [ 389.922107][ T30] kauditd_printk_skb: 950 callbacks suppressed [ 389.922127][ T30] audit: type=1326 audit(1754052351.412:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.079052][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 390.095734][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.105036][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.112852][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 390.130752][ T5946] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 390.142294][ T5903] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 390.160322][ T9] usb 4-1: can't read configurations, error -71 [ 390.161817][ T30] audit: type=1326 audit(1754052351.412:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.168210][ T5946] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 390.241119][ T30] audit: type=1326 audit(1754052351.412:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.265733][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.307914][ T5946] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 390.318366][ T5213] ldm_validate_partition_table(): Disk read failed. [ 390.325806][ T5213] Dev loop6: unable to read RDB block 0 [ 390.338979][ T30] audit: type=1326 audit(1754052351.422:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.366711][ T5946] usb 3-1: USB disconnect, device number 57 [ 390.368538][ T5213] loop6: unable to read partition table [ 390.397405][ T5903] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 390.408000][ T5903] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 390.440181][ T5903] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.450288][ T5946] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 390.462563][ T5946] ftdi_sio 3-1:0.0: device disconnected [ 390.468257][ T30] audit: type=1326 audit(1754052351.422:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.498274][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.526018][ T30] audit: type=1326 audit(1754052351.422:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.548618][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.558981][ T30] audit: type=1326 audit(1754052351.422:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.581400][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.594319][ T30] audit: type=1326 audit(1754052351.422:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.619919][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.695818][ T30] audit: type=1326 audit(1754052351.422:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.720400][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.901104][ T30] audit: type=1326 audit(1754052351.422:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f220ed8eb69 code=0x7ffc0000 [ 390.989293][T10413] netlink: 60 bytes leftover after parsing attributes in process `syz.3.996'. [ 391.286307][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.5.998'. [ 391.349996][T10418] netlink: 100 bytes leftover after parsing attributes in process `syz.5.998'. [ 391.400370][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 392.092439][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 392.258462][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 392.270654][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 392.285161][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 392.382353][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 392.401679][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.437348][T10426] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 392.461795][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.571646][T10432] program syz.2.1003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.752056][ T5931] usb 6-1: USB disconnect, device number 68 [ 393.744312][ T5946] usb 7-1: USB disconnect, device number 16 [ 393.822409][T10400] delete_channel: no stack [ 394.737381][T10458] input: syz1 as /devices/virtual/input/input18 [ 394.852157][T10458] input: failed to attach handler leds to device input18, error: -6 [ 394.939428][T10463] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1012'. [ 394.950874][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1012'. [ 395.172622][ T5903] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 395.341695][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 395.354854][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.393300][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.423809][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 395.465227][ T5903] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 395.505123][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.558676][ T5903] usb 6-1: config 0 descriptor?? [ 395.620992][T10476] openvswitch: netlink: Flow key attr not present in new flow. [ 395.892131][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 396.063760][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 396.138810][ T9] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 396.252449][ T9] usb 7-1: config 0 has no interface number 0 [ 396.348843][ T9] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 396.457134][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 396.468638][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.479020][ T9] usb 7-1: Product: syz [ 396.484820][ T9] usb 7-1: Manufacturer: syz [ 396.491277][ T9] usb 7-1: SerialNumber: syz [ 396.516662][ T9] usb 7-1: config 0 descriptor?? [ 396.843446][T10495] openvswitch: netlink: Flow key attr not present in new flow. [ 397.025822][T10498] mac80211_hwsim hwsim16 : renamed from wlan1 [ 397.107735][ T9] usb 7-1: USB disconnect, device number 17 [ 397.194268][ T8078] udevd[8078]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.660536][ T5903] usbhid 6-1:0.0: can't add hid device: -71 [ 397.713936][ T5903] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 397.863174][ T5903] usb 6-1: USB disconnect, device number 69 [ 398.141276][T10504] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1610744868 (51543835776 ns) > initial count (12583040 ns). Using initial count to start timer. [ 398.478488][ T5903] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 398.763003][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 399.388364][ T5903] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 399.439269][T10523] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1026'. [ 399.451983][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 399.483788][ T5903] usb 6-1: Product: syz [ 399.488053][ T5903] usb 6-1: Manufacturer: syz [ 399.496647][ T5903] usb 6-1: SerialNumber: syz [ 399.547390][T10519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1025'. [ 399.555180][ T5903] usb 6-1: config 0 descriptor?? [ 399.619075][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 399.783663][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'. [ 400.850164][T10528] vxlan0: entered promiscuous mode [ 400.900794][ T9674] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.928380][ T9674] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.956987][ T9674] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.074312][ T9674] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.372153][T10540] vlan0: entered promiscuous mode [ 401.532049][ T5932] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 402.011263][ T5932] usb 7-1: device descriptor read/64, error -71 [ 402.011707][ T9] usb 6-1: USB disconnect, device number 70 [ 402.342171][ T5932] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 402.528040][ T5932] usb 7-1: device descriptor read/64, error -71 [ 402.653688][ T5932] usb usb7-port1: attempt power cycle [ 402.831402][T10565] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 402.890454][T10565] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 402.899336][T10565] kvm: requested 20114 ns i8254 timer period limited to 200000 ns [ 402.908673][T10565] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 402.931403][T10565] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 402.976761][T10565] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 403.030775][T10565] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 403.032617][T10570] fuse: Unknown parameter '' [ 403.039451][T10565] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 403.052878][T10565] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 403.060803][T10565] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 403.072116][ T5932] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 403.162787][ T5932] usb 7-1: device descriptor read/8, error -71 [ 403.230296][T10573] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1038'. [ 403.402062][ T5932] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 403.480719][ T5932] usb 7-1: device descriptor read/8, error -71 [ 403.498675][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 403.593882][ T5932] usb usb7-port1: unable to enumerate USB device [ 403.902475][ T5932] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 404.082159][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 404.092455][ T5932] usb 4-1: config 0 has no interfaces? [ 404.100002][ T5932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.128673][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 404.138490][ T5932] usb 4-1: SerialNumber: syz [ 404.149926][ T5932] usb 4-1: config 0 descriptor?? [ 404.383740][ T9665] tipc: Subscription rejected, illegal request [ 404.525480][ T5946] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 404.563091][T10593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.582810][T10593] batadv_slave_0: entered promiscuous mode [ 404.723436][ T5946] usb 6-1: Using ep0 maxpacket: 16 [ 404.982244][ T5946] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 405.073306][T10602] syzkaller0: entered promiscuous mode [ 405.076019][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 405.079446][T10602] syzkaller0: entered allmulticast mode [ 405.150222][ T5946] usb 6-1: Product: syz [ 405.159506][ T5946] usb 6-1: Manufacturer: syz [ 405.221847][ T5946] usb 6-1: SerialNumber: syz [ 405.237569][ T5946] usb 6-1: config 0 descriptor?? [ 405.252200][ T5937] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 405.471289][ T5937] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 405.520321][ T5937] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 405.534769][ T5937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 405.576401][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.830850][T10607] openvswitch: netlink: IP tunnel TTL not specified. [ 407.054793][T10586] kvm: emulating exchange as write [ 407.700834][ T9] usb 4-1: USB disconnect, device number 78 [ 408.035271][ T9] usb 6-1: USB disconnect, device number 71 [ 408.268157][ T5903] usb 3-1: USB disconnect, device number 58 [ 408.284107][T10597] delete_channel: no stack [ 408.345828][T10626] sit1: entered allmulticast mode [ 408.852269][ T5903] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 408.889133][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1055'. [ 408.949785][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 408.949806][ T30] audit: type=1800 audit(1754052370.442:1246): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1054" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 409.131514][T10612] syz.6.1047 (10612): drop_caches: 2 [ 409.297774][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 409.506370][T10643] tipc: Enabling of bearer rejected, failed to enable media [ 409.611538][ T5903] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 409.621121][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 409.762243][ T24] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 409.775327][ T5903] usb 4-1: Product: syz [ 410.232134][ T5903] usb 4-1: Manufacturer: syz [ 410.236905][ T5903] usb 4-1: SerialNumber: syz [ 410.242926][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 410.278474][ T5903] usb 4-1: config 0 descriptor?? [ 410.296783][ T24] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 410.314032][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.337025][ T24] usb 6-1: Product: syz [ 410.341293][ T24] usb 6-1: Manufacturer: syz [ 410.349096][ T24] usb 6-1: SerialNumber: syz [ 410.362609][ T24] usb 6-1: config 0 descriptor?? [ 410.795651][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 410.807400][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 410.820667][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 410.839217][ T24] usb 6-1: media controller created [ 411.127719][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.304036][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 411.314688][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 411.509773][ T5946] usb 6-1: USB disconnect, device number 72 [ 411.522417][ T5903] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 411.763568][ T5903] usb 3-1: device descriptor read/64, error -71 [ 411.864018][ T5946] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 412.062531][ T5903] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 412.090632][ T5937] usb 4-1: USB disconnect, device number 79 [ 412.202607][ T5903] usb 3-1: device descriptor read/64, error -71 [ 412.322475][ T5903] usb usb3-port1: attempt power cycle [ 412.713756][ T5937] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 412.772087][ T24] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 412.793607][ T5903] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 412.841610][ T5903] usb 3-1: device descriptor read/8, error -71 [ 412.892342][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 412.950326][ T24] usb 6-1: config 0 has no interfaces? [ 412.956732][ T5937] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 412.979542][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 413.014605][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 413.042762][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.054108][ T5937] usb 4-1: Product: syz [ 413.071158][ T5937] usb 4-1: Manufacturer: syz [ 413.086392][ T5903] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 413.126922][ T24] usb 6-1: Product: syz [ 413.134349][ T5937] usb 4-1: SerialNumber: syz [ 413.134357][ T5903] usb 3-1: device descriptor read/8, error -71 [ 413.158545][ T24] usb 6-1: Manufacturer: syz [ 413.172570][ T24] usb 6-1: SerialNumber: syz [ 413.200410][ T5937] usb 4-1: config 0 descriptor?? [ 413.210401][ T24] usb 6-1: config 0 descriptor?? [ 413.242504][ T5903] usb usb3-port1: unable to enumerate USB device [ 414.202154][ T24] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 414.381060][ T24] usb 7-1: config 150 has an invalid interface number: 204 but max is 0 [ 414.399220][ T24] usb 7-1: config 150 has an invalid descriptor of length 63, skipping remainder of the config [ 414.420791][ T24] usb 7-1: config 150 has no interface number 0 [ 414.518380][ T24] usb 7-1: config 150 interface 204 has no altsetting 0 [ 414.538415][ T24] usb 7-1: New USB device found, idVendor=04e2, idProduct=fe24, bcdDevice=c7.eb [ 414.552058][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.565485][ T24] usb 7-1: Product: syz [ 414.569875][ T24] usb 7-1: Manufacturer: syz [ 414.577328][ T24] usb 7-1: SerialNumber: syz [ 414.816600][ T24] usb 7-1: USB disconnect, device number 22 [ 415.692046][ T5931] usb 6-1: USB disconnect, device number 73 [ 415.756065][ T9] usb 4-1: USB disconnect, device number 80 [ 415.800835][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1068'. [ 415.814056][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1068'. [ 416.043007][ T5903] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 416.221285][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.256274][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.268122][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.283238][ T5903] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.293223][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.391461][T10708] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1074'. [ 416.423234][ T5903] usb 7-1: config 0 descriptor?? [ 416.945055][ T5903] usbhid 7-1:0.0: can't add hid device: -71 [ 416.963864][ T5903] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 416.981047][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1074'. [ 417.178450][ T5903] usb 7-1: USB disconnect, device number 23 [ 418.182117][ T5903] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 418.370573][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 418.424096][ T5903] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.627605][ T5903] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.727456][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 418.764118][ T5903] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 418.780031][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.877287][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1078'. [ 419.012572][ T5903] usb 3-1: config 0 descriptor?? [ 419.523698][ T5903] kye 0003:0458:4018.000F: unknown main item tag 0x0 [ 419.532639][ T5903] kye 0003:0458:4018.000F: reserved main item tag 0xe [ 419.539481][ T5903] kye 0003:0458:4018.000F: item fetching failed at offset 15/133 [ 419.577138][ T5903] kye 0003:0458:4018.000F: parse failed [ 419.594495][ T5903] kye 0003:0458:4018.000F: probe with driver kye failed with error -22 [ 419.726256][ T5903] usb 3-1: USB disconnect, device number 63 [ 420.462062][ T5903] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 420.602808][ T5903] usb 4-1: device descriptor read/64, error -71 [ 420.630883][T10752] tipc: Enabled bearer , priority 10 [ 420.852088][ T5903] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 420.992834][ T5903] usb 4-1: device descriptor read/64, error -71 [ 421.119052][ T5903] usb usb4-port1: attempt power cycle [ 421.492819][ T5903] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 421.523532][ T5903] usb 4-1: device descriptor read/8, error -71 [ 421.702061][ T5163] Bluetooth: hci3: command 0x0406 tx timeout [ 421.743856][ T24] tipc: Node number set to 3123263974 [ 421.792148][ T5931] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 421.831976][ T5903] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 421.852780][ T5903] usb 4-1: device descriptor read/8, error -71 [ 421.963102][ T5903] usb usb4-port1: unable to enumerate USB device [ 421.982283][ T5931] usb 3-1: device descriptor read/64, error -71 [ 422.085810][T10768] ptrace attach of "./syz-executor exec"[8960] was attempted by "./syz-executor exec"[10768] [ 422.382007][ T5931] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 422.442073][ T5903] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 422.572237][ T5931] usb 3-1: device descriptor read/64, error -71 [ 422.632762][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 422.659571][ T5903] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 422.671493][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.692516][ T5931] usb usb3-port1: attempt power cycle [ 422.753392][ T5903] pvrusb2: Hardware description: Terratec Grabster AV400 [ 423.122828][ T5931] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 423.132692][ T5903] pvrusb2: ********** [ 423.148524][ T5903] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 423.165231][ T5903] pvrusb2: Important functionality might not be entirely working. [ 423.173544][ T5931] usb 3-1: device descriptor read/8, error -71 [ 423.173605][ T5903] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 423.197485][ T5903] pvrusb2: ********** [ 423.404830][ T2346] pvrusb2: Invalid write control endpoint [ 423.422740][ T5931] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 423.526798][ T5931] usb 3-1: device descriptor read/8, error -71 [ 423.663104][ T5932] usb 6-1: USB disconnect, device number 74 [ 423.671149][ T5931] usb usb3-port1: unable to enumerate USB device [ 423.766941][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 423.778183][ T2346] pvrusb2: Invalid write control endpoint [ 423.796183][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 423.838327][T10782] vxlan0: entered promiscuous mode [ 423.844491][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 423.875819][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 423.891835][ T9662] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.914418][ T9662] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.932027][ T2346] pvrusb2: Device being rendered inoperable [ 423.937429][ T9662] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.957385][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 423.977601][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 423.993790][ T9662] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.035162][ T2346] pvrusb2: Attached sub-driver cx25840 [ 424.047809][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 424.060943][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 425.626939][T10812] fuse: Unknown parameter 'user_id00000000000000000000' [ 425.635326][T10812] tipc: Can't bind to reserved service type 0 [ 425.822678][ T5903] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 425.986926][ T5903] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1494, setting to 1024 [ 426.008074][ T5903] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 426.055979][ T5903] usb 4-1: config 1 interface 0 has no altsetting 0 [ 426.077674][ T5903] usb 4-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 426.097572][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.107663][ T5903] usb 4-1: Product: syz [ 426.114966][ T5903] usb 4-1: Manufacturer: syz [ 426.119927][ T5903] usb 4-1: SerialNumber: syz [ 426.141009][T10807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 426.272749][ T5946] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 426.443941][ T5946] usb 7-1: not running at top speed; connect to a high speed hub [ 426.478831][ T5946] usb 7-1: config 108 interface 0 has no altsetting 0 [ 426.504123][ T5946] usb 7-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=b8.27 [ 426.521577][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.530700][ T5946] usb 7-1: Product: syz [ 426.540034][ T5946] usb 7-1: Manufacturer: syz [ 426.562218][ T5946] usb 7-1: SerialNumber: syz [ 426.578957][ T5903] usbhid 4-1:1.0: can't add hid device: -71 [ 426.599307][ T5903] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 426.639927][ T5903] usb 4-1: USB disconnect, device number 85 [ 426.746146][T10832] fuse: Unknown parameter '1Lrootmode0000000000001J00000' [ 426.814489][ T5946] usb 7-1: USB disconnect, device number 24 [ 427.042066][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 427.198212][ T24] usb 3-1: config index 0 descriptor too short (expected 65426, got 146) [ 427.208263][ T24] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 427.235895][ T24] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 427.284527][ T24] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 427.296162][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 427.307553][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 427.342852][ T24] usb 3-1: SerialNumber: syz [ 428.071685][T10848] bridge0: port 3(vlan0) entered blocking state [ 428.081066][T10848] bridge0: port 3(vlan0) entered disabled state [ 428.137445][T10848] vlan0: entered allmulticast mode [ 428.156880][T10848] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 428.204739][T10848] vlan0: entered promiscuous mode [ 428.217368][T10848] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 429.924184][T10862] futex_wake_op: syz.5.1116 tries to shift op by -1; fix this program [ 430.058844][ T24] usb 3-1: USB disconnect, device number 68 [ 430.522141][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 430.725940][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 430.801431][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 430.830956][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.051026][T10878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1121'. [ 431.167010][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 431.219998][ T24] pvrusb2: ********** [ 431.230551][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 431.265989][ T24] pvrusb2: Important functionality might not be entirely working. [ 431.280459][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 431.376727][ T24] pvrusb2: ********** [ 431.428715][ T2346] pvrusb2: Invalid write control endpoint [ 431.969390][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 432.127568][ T2346] pvrusb2: Invalid write control endpoint [ 432.222691][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 432.242329][ T5931] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 432.306310][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 432.356565][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 432.424237][ T2346] pvrusb2: Device being rendered inoperable [ 432.442140][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 432.456931][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 432.538334][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 432.590006][ T2346] pvrusb2: Attached sub-driver cx25840 [ 432.609138][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 432.628707][ T5931] usb 6-1: config 0 has an invalid interface number: 206 but max is 0 [ 432.646634][ T5931] usb 6-1: config 0 has no interface number 0 [ 432.689599][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 432.710454][ T5931] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 432.719845][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.732122][ T5931] usb 6-1: Product: syz [ 432.736432][ T5931] usb 6-1: Manufacturer: syz [ 432.759960][ T5931] usb 6-1: SerialNumber: syz [ 432.858197][ T5931] usb 6-1: config 0 descriptor?? [ 432.887148][ T5931] radioshark2 6-1:0.206: Invalid radioSHARK2 device [ 432.897812][ T5931] radioshark2 6-1:0.206: probe with driver radioshark2 failed with error -22 [ 432.930819][ T5931] usbhid 6-1:0.206: couldn't find an input interrupt endpoint [ 433.551877][ T5931] usb 3-1: USB disconnect, device number 69 [ 433.814379][T10902] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1126'. [ 434.562192][ T5931] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 434.706467][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1129'. [ 434.848240][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 434.862195][ T5931] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 434.912044][ T5931] usb 3-1: config 0 has no interface number 0 [ 434.937419][ T5931] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 24834, setting to 64 [ 434.996375][ T5931] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 435.009138][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.025822][ T5931] usb 3-1: Product: syz [ 435.061783][ T5931] usb 3-1: Manufacturer: syz [ 435.079620][ T5931] usb 3-1: SerialNumber: syz [ 435.104436][ T5931] usb 3-1: config 0 descriptor?? [ 435.126183][ T5931] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 435.292357][ T5937] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 435.329407][ T5946] usb 3-1: USB disconnect, device number 70 [ 435.340616][ T9665] usb 3-1: Failed to submit usb control message: -71 [ 435.355608][ T9665] usb 3-1: unable to send the bmi data to the device: -71 [ 435.363255][ T5931] usb 6-1: USB disconnect, device number 75 [ 435.375983][ T9665] usb 3-1: unable to get target info from device [ 435.397563][ T9665] usb 3-1: could not get target info (-71) [ 435.417925][ T9665] usb 3-1: could not probe fw (-71) [ 435.474459][ T5937] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 435.503304][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.541591][ T5937] usb 4-1: config 0 descriptor?? [ 435.589135][ T5937] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 436.031499][T10931] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 436.382859][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.404229][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.433171][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.470774][T10938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.489341][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.531869][T10937] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 436.608302][ T5937] usb 4-1: USB disconnect, device number 86 [ 437.087009][T10952] netlink: 'syz.6.1140': attribute type 1 has an invalid length. [ 437.395037][ T5932] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 437.562318][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 437.570753][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.583041][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.599210][ T5932] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 437.610879][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.708422][ T5932] usb 6-1: config 0 descriptor?? [ 438.449917][ T5931] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 438.642567][ T5931] usb 7-1: Using ep0 maxpacket: 16 [ 438.671875][ T5931] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 438.692377][ T5931] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.714898][ T5931] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 438.748822][ T5931] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 438.760000][ T5931] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 438.780447][ T5931] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 438.799942][ T5931] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.851579][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 438.948120][ T5932] letsketch 0003:6161:4D15.0010: Device info: ఁ [ 438.961678][ T5931] usb 7-1: SerialNumber: syz [ 439.119627][ T5931] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 439.201800][ T5932] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 439.315298][ T5932] letsketch 0003:6161:4D15.0010: probe with driver letsketch failed with error -71 [ 439.316758][T10977] vivid-007: disconnect [ 439.354769][ T5932] usb 6-1: USB disconnect, device number 76 [ 439.425282][T10976] vivid-007: reconnect [ 440.032098][ T5932] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 440.118054][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.126084][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.233104][ T5903] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 440.432142][ T5903] usb 6-1: device descriptor read/64, error -71 [ 440.477380][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 440.501305][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.515967][ T5932] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.552755][ T5932] usb 4-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 440.562763][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.574420][ T5932] usb 4-1: Product: syz [ 440.584581][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1151'. [ 440.597075][ T5932] usb 4-1: Manufacturer: syz [ 440.629462][ T5932] usb 4-1: SerialNumber: syz [ 440.660012][ T5932] usb 4-1: config 0 descriptor?? [ 440.712718][ T5903] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 440.872172][ T5903] usb 6-1: device descriptor read/64, error -71 [ 440.994181][ T5903] usb usb6-port1: attempt power cycle [ 441.252273][ T5932] usb 7-1: USB disconnect, device number 25 [ 441.522017][ T5903] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 441.552694][ T5903] usb 6-1: device descriptor read/8, error -71 [ 441.702344][ T5932] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 441.802111][ T5903] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 441.832101][ T5932] usb 7-1: device descriptor read/64, error -71 [ 441.836793][ T5903] usb 6-1: device descriptor read/8, error -71 [ 441.952643][ T5903] usb usb6-port1: unable to enumerate USB device [ 442.072098][ T5932] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 442.276313][ T5932] usb 7-1: device descriptor read/64, error -71 [ 442.406387][ T5932] usb usb7-port1: attempt power cycle [ 442.758214][ T9] usb 4-1: USB disconnect, device number 87 [ 442.778206][ T5932] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 442.844039][ T5932] usb 7-1: device descriptor read/8, error -71 [ 443.102264][ T5932] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 443.142917][ T5932] usb 7-1: device descriptor read/8, error -71 [ 443.252751][ T5932] usb usb7-port1: unable to enumerate USB device [ 443.392708][ T5903] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 444.234488][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.283342][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1160'. [ 444.289992][ T5903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.366345][ T5903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.444764][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.464160][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.528995][ T5903] usb 4-1: Product: syz [ 444.536713][ T5903] usb 4-1: Manufacturer: syz [ 444.541376][ T5903] usb 4-1: SerialNumber: syz [ 444.641419][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 444.657579][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1162'. [ 444.675816][ T5903] usb 4-1: bad CDC descriptors [ 445.872871][ T5932] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 446.003118][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 446.034367][ T5932] usb 7-1: config 0 has no interfaces? [ 446.043295][ T5932] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a4, bcdDevice=9c.a3 [ 446.086843][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.118232][ T5932] usb 7-1: Product: syz [ 446.137151][ T5932] usb 7-1: Manufacturer: syz [ 446.149509][ T5932] usb 7-1: SerialNumber: syz [ 446.162580][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 446.163471][ T5932] usb 7-1: config 0 descriptor?? [ 446.187887][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 446.198294][ T9] usb 3-1: config 8 has an invalid interface number: 143 but max is 3 [ 446.219822][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 446.267062][ T9] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 446.300330][ T9] usb 3-1: config 8 has no interface number 0 [ 446.309831][ T9] usb 3-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 446.322639][ T9] usb 3-1: config 8 interface 143 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 446.337591][ T9] usb 3-1: config 8 interface 143 has no altsetting 0 [ 446.350569][ T9] usb 3-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 446.383177][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.403178][ T5903] usb 7-1: USB disconnect, device number 30 [ 446.443773][ T9] usb 3-1: Product: syz [ 446.468935][ T9] usb 3-1: Manufacturer: syz [ 446.481632][ T9] usb 3-1: SerialNumber: syz [ 446.725021][ T9] io_ti 3-1:8.143: required endpoints missing [ 446.933626][ T5932] usb 3-1: USB disconnect, device number 71 [ 447.039049][ T24] usb 4-1: USB disconnect, device number 88 [ 447.222534][T11062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.277693][ T30] audit: type=1326 audit(1754052408.772:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.3.1171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f220ed8eb69 code=0x0 [ 447.299588][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.010131][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1176'. [ 448.138565][T11094] Option ' ' to dns_resolver key: bad/missing value [ 449.538259][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 449.736366][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.789483][T11117] fuse: Unknown parameter 'rotmode' [ 449.839670][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 449.851120][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.871002][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.923796][T11116] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 449.939896][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.062591][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 450.222627][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 450.230966][ T9] usb 4-1: too many configurations: 136, using maximum allowed: 8 [ 450.293889][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 450.301756][ T9] usb 4-1: can't read configurations, error -61 [ 450.376219][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.385508][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.632769][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 450.865157][ T24] usb 7-1: USB disconnect, device number 31 [ 451.103712][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 451.129254][ T9] usb 4-1: too many configurations: 136, using maximum allowed: 8 [ 451.168461][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 451.197377][ T9] usb 4-1: can't read configurations, error -61 [ 451.217029][ T9] usb usb4-port1: attempt power cycle [ 451.592080][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 451.622387][ T31] INFO: task kworker/u8:7:1105 blocked for more than 143 seconds. [ 451.636736][ T31] Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 [ 451.747492][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.787809][ T31] task:kworker/u8:7 state:D stack:21000 pid:1105 tgid:1105 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 451.849275][T11140] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 451.874598][T11140] team0: Port device batadv1 added [ 451.954301][ T31] Workqueue: netns cleanup_net [ 452.012230][ T31] Call Trace: [ 452.182103][ T5903] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 452.230367][ T31] [ 452.308508][ T31] __schedule+0x1798/0x4cc0 [ 452.318382][ T31] ? __pfx___schedule+0x10/0x10 [ 452.344909][ T31] ? schedule+0x91/0x360 [ 452.359911][ T5903] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 452.369302][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.385284][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 452.394528][ T31] schedule+0x165/0x360 [ 452.394580][ T31] afs_cell_purge+0x3d9/0x540 [ 452.394612][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 452.394643][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 452.394670][ T31] ? afs_net+0x45/0x270 [ 452.394694][ T31] ? afs_net+0x45/0x270 [ 452.394724][ T31] afs_net_exit+0x50/0x100 [ 452.394748][ T31] ops_undo_list+0x497/0x990 [ 452.394779][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 452.394813][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 452.394842][ T31] cleanup_net+0x4c5/0x800 [ 452.394869][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 452.394894][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.394924][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 452.500569][ T5903] usb 3-1: config 1 has no interface number 0 [ 452.519277][ T5903] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.532175][ T5903] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.547149][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.572605][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.646320][ T5903] usb 3-1: Product: syz [ 452.699840][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 452.730492][ T5903] usb 3-1: Manufacturer: syz [ 452.747880][ T31] process_scheduled_works+0xae1/0x17b0 [ 452.758550][ T5903] usb 3-1: SerialNumber: syz [ 452.784528][ T5903] cdc_wdm 3-1:1.128: skipping garbage [ 452.804741][ T5903] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 452.815621][ T5903] cdc_wdm 3-1:1.128: Unknown control protocol [ 452.888833][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 452.979921][ T31] worker_thread+0x8a0/0xda0 [ 453.004397][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 453.088421][ T31] ? __kthread_parkme+0x7b/0x200 [ 453.109593][ T31] kthread+0x70e/0x8a0 [ 453.163972][ T31] ? __pfx_worker_thread+0x10/0x10 [ 453.197110][ T31] ? __pfx_kthread+0x10/0x10 [ 453.232562][ T9] usb 4-1: device descriptor read/8, error -71 [ 453.249072][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.265157][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.300343][ T31] ? __pfx_kthread+0x10/0x10 [ 453.328167][ T31] ret_from_fork+0x3f9/0x770 [ 453.341552][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 453.361589][ T31] ? __switch_to_asm+0x39/0x70 [ 453.383617][ T31] ? __switch_to_asm+0x33/0x70 [ 453.399163][ T31] ? __pfx_kthread+0x10/0x10 [ 453.419427][ T31] ret_from_fork_asm+0x1a/0x30 [ 453.430764][ T31] [ 453.440430][T11144] sch_tbf: peakrate 8 is lower than or equals to rate 2048 ! [ 453.452198][ T31] [ 453.452198][ T31] Showing all locks held in the system: [ 453.479037][ T31] 6 locks held by kworker/0:0/9: [ 453.488438][ T31] #0: ffff888020e93548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.552835][ T31] #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.566865][ T31] #2: ffff88802813a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 453.577101][ T31] #3: ffff888028175518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 453.587668][ T31] #4: ffff888027f50368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 453.597901][ T31] #5: ffffffff8eddad10 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 453.609346][ T31] 1 lock held by khungtaskd/31: [ 453.614786][ T31] #0: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 453.629438][ T31] 3 locks held by kworker/u8:7/1105: [ 453.635474][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.646933][ T31] #1: ffffc90003b3fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.658579][ T31] #2: ffffffff8f50f550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 453.670382][ T31] 2 locks held by getty/5606: [ 453.675616][ T31] #0: ffff88814ca7d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 453.686907][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 453.702584][ T31] 2 locks held by kworker/u8:10/9664: [ 453.708356][ T31] 3 locks held by kworker/u8:24/10968: [ 453.716138][ T31] #0: ffff88802fa55948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.729825][ T31] #1: ffffc9000ad67bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.745011][ T31] #2: ffffffff8f51c3c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 453.756552][ T31] 1 lock held by syz.3.1181/11112: [ 453.761866][ T31] #0: ffff88805cf09408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 453.775434][ T31] 2 locks held by syz.6.1186/11132: [ 453.781564][ T31] #0: ffff88803062c408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 453.802294][ T31] #1: ffffffff8e13f8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 453.823324][ T31] 1 lock held by syz.6.1186/11134: [ 453.829105][ T31] 1 lock held by syz.2.1187/11139: [ 453.840563][ T31] #0: ffffffff8f51c3c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 453.864992][ T31] 1 lock held by syz.7.1188/11144: [ 453.870374][ T31] #0: ffffffff8f51c3c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 453.887878][ T31] [ 453.890904][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 453.979121][ T31] ============================================= [ 453.979121][ T31] [ 454.000761][ T31] NMI backtrace for cpu 0 [ 454.000784][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 454.000808][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.000821][ T31] Call Trace: [ 454.000830][ T31] [ 454.000839][ T31] dump_stack_lvl+0x189/0x250 [ 454.000871][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.000894][ T31] ? __pfx__printk+0x10/0x10 [ 454.000934][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 454.000966][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 454.000992][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.001035][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 454.001068][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 454.001099][ T31] watchdog+0xf93/0xfe0 [ 454.001129][ T31] ? watchdog+0x1de/0xfe0 [ 454.001159][ T31] kthread+0x70e/0x8a0 [ 454.001187][ T31] ? __pfx_watchdog+0x10/0x10 [ 454.001210][ T31] ? __pfx_kthread+0x10/0x10 [ 454.001234][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.001261][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.001290][ T31] ? __pfx_kthread+0x10/0x10 [ 454.001314][ T31] ret_from_fork+0x3f9/0x770 [ 454.001349][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 454.001386][ T31] ? __switch_to_asm+0x39/0x70 [ 454.001431][ T31] ? __switch_to_asm+0x33/0x70 [ 454.001454][ T31] ? __pfx_kthread+0x10/0x10 [ 454.001479][ T31] ret_from_fork_asm+0x1a/0x30 [ 454.001520][ T31] [ 454.001530][ T31] Sending NMI from CPU 0 to CPUs 1: [ 454.100508][ T5932] usb 3-1: USB disconnect, device number 72 [ 454.104408][ C1] NMI backtrace for cpu 1 [ 454.104425][ C1] CPU: 1 UID: 0 PID: 5932 Comm: kworker/1:5 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 454.104447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.104459][ C1] Workqueue: usb_hub_wq hub_event [ 454.104486][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 454.104507][ C1] Code: e8 fe d9 72 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f 17 d6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 39 29 06 cc 44 89 f9 80 e1 07 [ 454.104522][ C1] RSP: 0018:ffffc900045dee50 EFLAGS: 00000002 [ 454.104536][ C1] RAX: 1ffffffff33b7c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 454.104548][ C1] RDX: 00000000000003fd RSI: 00000000000097a0 RDI: 00000000000097a1 [ 454.104559][ C1] RBP: ffffffff99dbe6d0 R08: ffff888141fc8237 R09: 1ffff110283f9046 [ 454.104572][ C1] R10: dffffc0000000000 R11: ffffffff854ca950 R12: dffffc0000000000 [ 454.104585][ C1] R13: 0000000000000000 R14: ffffffff99dbe440 R15: 0000000000000000 [ 454.104596][ C1] FS: 0000000000000000(0000) GS:ffff888125d5c000(0000) knlGS:0000000000000000 [ 454.104610][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.104622][ C1] CR2: 000000110c366922 CR3: 000000007ac34000 CR4: 00000000003526f0 [ 454.104637][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 454.104648][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 454.104659][ C1] Call Trace: [ 454.104666][ C1] [ 454.104675][ C1] wait_for_lsr+0x1a1/0x2f0 [ 454.104701][ C1] serial8250_console_write+0x134c/0x1ba0 [ 454.104726][ C1] ? __lock_acquire+0xab9/0xd20 [ 454.104749][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 454.104770][ C1] ? console_flush_all+0x13a/0xc40 [ 454.104788][ C1] ? console_flush_all+0x13a/0xc40 [ 454.104809][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 454.104827][ C1] ? console_flush_all+0x13a/0xc40 [ 454.104843][ C1] ? console_flush_all+0x13a/0xc40 [ 454.104861][ C1] console_flush_all+0x728/0xc40 [ 454.104881][ C1] ? console_flush_all+0x13a/0xc40 [ 454.104902][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 454.104925][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 454.104948][ C1] console_unlock+0xc4/0x270 [ 454.104964][ C1] ? __pfx_console_unlock+0x10/0x10 [ 454.104979][ C1] ? vprintk_emit+0x420/0x7a0 [ 454.104994][ C1] ? vprintk_emit+0x587/0x7a0 [ 454.105008][ C1] ? vprintk_emit+0x444/0x7a0 [ 454.105022][ C1] ? vprintk_emit+0x444/0x7a0 [ 454.105037][ C1] vprintk_emit+0x5b7/0x7a0 [ 454.105051][ C1] ? vprintk_emit+0x444/0x7a0 [ 454.105067][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 454.105084][ C1] ? __pfx_snprintf+0x10/0x10 [ 454.105108][ C1] ? __lock_acquire+0xab9/0xd20 [ 454.105133][ C1] dev_vprintk_emit+0x337/0x3f0 [ 454.105156][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 454.105184][ C1] dev_printk_emit+0xe0/0x130 [ 454.105204][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.105233][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 454.105256][ C1] ? __dev_printk+0x131/0x190 [ 454.105278][ C1] _dev_info+0x10a/0x160 [ 454.105299][ C1] ? __pfx__dev_info+0x10/0x10 [ 454.105318][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 454.105348][ C1] ? kernfs_notify+0x2ee/0x370 [ 454.105369][ C1] usb_disconnect+0xdd/0x950 [ 454.105463][ C1] hub_event+0x1cf5/0x4a20 [ 454.105511][ C1] ? do_raw_spin_lock+0x121/0x290 [ 454.105532][ C1] ? register_lock_class+0x51/0x320 [ 454.105563][ C1] ? __pfx_hub_event+0x10/0x10 [ 454.105584][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 454.105613][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.105638][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 454.105662][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 454.105687][ C1] process_scheduled_works+0xae1/0x17b0 [ 454.105728][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.105761][ C1] worker_thread+0x8a0/0xda0 [ 454.105788][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 454.105819][ C1] ? __kthread_parkme+0x7b/0x200 [ 454.105840][ C1] kthread+0x70e/0x8a0 [ 454.105860][ C1] ? __pfx_worker_thread+0x10/0x10 [ 454.105885][ C1] ? __pfx_kthread+0x10/0x10 [ 454.105905][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.105927][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.105952][ C1] ? __pfx_kthread+0x10/0x10 [ 454.105971][ C1] ret_from_fork+0x3f9/0x770 [ 454.105999][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 454.106028][ C1] ? __switch_to_asm+0x39/0x70 [ 454.106047][ C1] ? __switch_to_asm+0x33/0x70 [ 454.106067][ C1] ? __pfx_kthread+0x10/0x10 [ 454.106086][ C1] ret_from_fork_asm+0x1a/0x30 [ 454.106115][ C1] [ 454.438527][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 454.438558][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 454.438587][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.438603][ T31] Call Trace: [ 454.438613][ T31] [ 454.438625][ T31] dump_stack_lvl+0x99/0x250 [ 454.438656][ T31] ? __asan_memcpy+0x40/0x70 [ 454.438682][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.438707][ T31] ? __pfx__printk+0x10/0x10 [ 454.438753][ T31] vpanic+0x27a/0x730 [ 454.438782][ T31] ? __pfx_vpanic+0x10/0x10 [ 454.438804][ T31] ? preempt_schedule+0xae/0xc0 [ 454.438842][ T31] ? preempt_schedule_common+0x83/0xd0 [ 454.438883][ T31] panic+0xb9/0xc0 [ 454.438908][ T31] ? __pfx_panic+0x10/0x10 [ 454.438933][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 454.438973][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 454.439009][ T31] watchdog+0xfd2/0xfe0 [ 454.439045][ T31] ? watchdog+0x1de/0xfe0 [ 454.439080][ T31] kthread+0x70e/0x8a0 [ 454.439110][ T31] ? __pfx_watchdog+0x10/0x10 [ 454.439138][ T31] ? __pfx_kthread+0x10/0x10 [ 454.439166][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.439199][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.439234][ T31] ? __pfx_kthread+0x10/0x10 [ 454.439261][ T31] ret_from_fork+0x3f9/0x770 [ 454.439299][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 454.439341][ T31] ? __switch_to_asm+0x39/0x70 [ 454.439373][ T31] ? __switch_to_asm+0x33/0x70 [ 454.439399][ T31] ? __pfx_kthread+0x10/0x10 [ 454.439427][ T31] ret_from_fork_asm+0x1a/0x30 [ 454.439472][ T31] [ 454.443084][ T31] Kernel Offset: disabled