last executing test programs: 15m31.054270179s ago: executing program 3 (id=751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="940900000000000000000000000000000000000088530c7a5fdb6e68919ac599de8a2d97825740531a351a624066404dc707246a72419580a679830bfc9ed036879e86f93cf1a7d2d7b0a47ec6f84c778dd08adf32329fba1e739ed325a33a3cc6feebc0e5c61c25f83f6d6ebd547fc86a7f23e17f0a769057aea06f0a4f79", @ANYRES32, @ANYBLOB="0006000000000000240012800b00010067656e65766500"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffd, 0x100, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) (async) r4 = eventfd(0x8c66) (async) r5 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x3}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r4, 0x11}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r4, 0x1}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x1, r4}) 15m30.78279617s ago: executing program 3 (id=753): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c200000c0800450000250000e0000311907800000000000000000000000000dc6170e1e0318539"], 0x0) read(r0, &(0x7f0000000040)=""/80, 0x50) syz_emit_ethernet(0xe7, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @tipc={{0x2d, 0x4, 0x2, 0x3c, 0xd9, 0x67, 0x0, 0x1, 0x6, 0x0, @remote, @empty, {[@cipso={0x86, 0x32, 0x54be8676ac67b0e, [{0x0, 0x11, "b3e88512659398d400901fbb300ed2"}, {0x1, 0xe, "666cff77e2a0700f40878789"}, {0x7, 0xa, "1d1e799d9020b271"}, {0x0, 0x3, "a0"}]}, @timestamp_prespec={0x44, 0xc, 0x88, 0x3, 0xf, [{@remote, 0x6}]}, @lsrr={0x83, 0x7, 0xfa, [@private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0x1f, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xd}]}, @end, @noop, @cipso={0x86, 0x4a, 0x1, [{0x7, 0x2}, {0x5, 0xd, "ba7142a895b27bed791333"}, {0x3, 0x11, "471c5a612e15ec8fa5be9b6b042236"}, {0x7, 0xc, "9cd3c840e05edff9b943"}, {0x1, 0xa, "8fa13831ac4bcdd3"}, {0x1, 0xe, "eee11444ef701298b047f603"}]}]}}, @payload_direct={{{{0x25, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, 0x2, 0xfff7, 0x0, 0x1, 0x4, 0x5, 0x3, 0x6, 0x9, 0x4, 0x4e23, 0x4e20}, 0x0, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0xfffffdf3, 0x1, {0xa, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0xfb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r8, 0x207a98, 0x0, 0x0, 0x0, 0x0) 15m29.825618259s ago: executing program 3 (id=757): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) add_key$user(0x0, 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b1349", 0x63, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 15m29.733216124s ago: executing program 3 (id=758): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="9302a0"], 0x232) close(r1) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz\xad\xdb\xb67\xb2\x1eF\xdb\xb0\x04\x95\xfa\xe1\xf5,\xc4\xec\xdcpP\x9a\xd5\xf9\xf9\xea\xa4\xa4b\f\xa8\xb5\xfd\x96\x1ej:\x12\xb7\xab\x0e#n\x80}\xf5\x90\xf1\xe5/\x10\xe4\xc4+\x12\aDa\xd6\x87\x02\xf681V\xceI\xb7aU\x04\xae\xa9)\xe0l\xcaYPO\xe6\x82L\xe4\x01\xd7\xe8\xf6\x18\x89X\xc0\xb9\x82p\xadxv\x17\x1b@^\x92\x85=\xac\xf8zL\x83\xe7\xd2v\xd7\xe1\xcd\xc2\x84+\x97\xb9\xe0\xc7\xdd\xd1\"\xe9\xb5:?\"\x19\xc7T\xd9~T@\xfb\xf6q\xe4\x10u\xa9\x14<', 0x20, 0xffd}, 0xbf, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(r2, 0x4030582a, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x5, 0x40, 0x9df8}) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000001240)='./file0\x00', 0x4, 0x400) mount$fuseblk(&(0x7f0000001280), &(0x7f00000012c0)='./file0\x00', 0x0, 0x141040, 0x0) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000001c0)={0x5, {0x8, 0x7, 0x8, 0x1, 0x200, 0xce4}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000000c0)={0x4, 0x0, '\x00', {0x0, @bt={0x10, 0x10, 0x1, 0x0, 0xffffffffffff54c0, 0x0, 0x7, 0x8000, 0x80000000, 0x10000, 0x10001, 0x5, 0x0, 0x0, 0x10, 0x15, {0x1, 0x9}, 0x9, 0x3}}}) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 15m28.359613718s ago: executing program 3 (id=768): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) add_key$user(0x0, 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b1349", 0x63, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 15m28.141504074s ago: executing program 3 (id=771): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, 0x0) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000200), 0x4) 15m27.058701213s ago: executing program 32 (id=771): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, 0x0) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000200), 0x4) 5m54.526681676s ago: executing program 1 (id=3170): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10020, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10}) futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) fstat(0xffffffffffffffff, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 5m52.970822233s ago: executing program 1 (id=3173): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3e, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x1852, 0x10000, 0x0, 0x1bf, 0x0, r2}, &(0x7f0000000040), &(0x7f00000001c0)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) unshare(0x26020480) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f007f0000007b00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800010000000000000000000a024000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00'], 0x38}}, 0x0) 5m52.893767658s ago: executing program 1 (id=3174): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xee, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB="4aa73c40652f5cf02835995f271d5374dd3d733308", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountstats\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r3, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x408}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000018c0)=""/4100, 0x1004}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000000240)=""/53, 0x35}], 0x5}, 0x27}], 0x3, 0x2000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3f}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0x4000000e, @private2, 0xfffffffe}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003f40)='X', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="150b", 0x2}], 0x1}}], 0x3, 0x20040141) (fail_nth: 1) accept(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 5m51.770791577s ago: executing program 1 (id=3180): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x446, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0xec, 0x53, 0xbe, 0x20, 0xe8d, 0x7925, 0xa20d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x434, 0x1, 0x6, 0x7, 0x98, 0xa8, "", [{{0x9, 0x4, 0xc3, 0xfb, 0x10, 0xff, 0xff, 0xff, 0x61, [], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0xa, 0x2, 0x3, [@generic={0x17, 0x7, "b5d2d2bd408e41041cbfa88e94081ef1c88c9b4426"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x4}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x7, 0x1, 0x2, [@generic={0xa, 0x22, "0729092dd38d5057"}, @generic={0xae, 0x30, "ad79f63bb6cdf51ca7e44aaa655290ad45c244c021ed282823a08aa8aaee830555d32b4f1cabc3a95a49d7af34a06f72c28195d24fc467a1cd4c0d4da5707026ff9690b47fc8c94d80fdc0d538a42d47a7c67000fd6b219953c7612a2acfc403b9dc20a228434f48850fff566c2fa35c56b1dadfb2c47c64d0abe65f65a7f859475bb9b3e41004b7c30d073cf3aa060d92567175b7884f5398260dc34277223e4a7d8897c2cf583fef28d19c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x4, 0x5, 0x8, [@generic={0x23, 0x27, "b3d1ee6bef353719755b7083005af3659b739396a812218c5fc77493ca94081e2a"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x2, 0xf, 0x80, [@generic={0xc5, 0xc, "7442a364922d494d1ffb41be2a35e0db1752c539d9d6d37eeb4a44b74c3b25267b5b3a84384f1b0c84bb31404793e3a01c2cfcb48c0f205f1c781c01446ef083a99fc144ce1a689b2fe0fded92e3d8c5cff8605f635aede23e198e37ae8b1fbd666e0cf132f325906d4227a3474e77bf050b5d056c0fddc62c04915115d28fa6d91c9c2e13059b812c91b4c1f368c86b1e024a30291acb4da5db545aef529468b5fff4a509cef76b3836db90793cdbeaa783b5f66ccfd64770f72b01887936f8c74f91"}, @generic={0xec, 0x8, "c03eac76c55a79772f2b8eeffc848d3b2031ec381b232a9cc707a58ac825a4e2eaf363d92030232473681a0e698e7a3acb5fc05b5622e271d95f8d86a43fb8a6ad7eb3a304ceccc05a8d7fdbf7256966c68a33b84288c197fc41ce4a31e31ce067397c434f2fa82ec8d590e75b93948be7b5ec415c9657e3caaaa9b605a9c6dd6f92f2b3b3c76ac1ae6df63d0826d78aec709839abf01f140b220cb537b9ee4e2ea7204ea15338bed159d4c0729ebae897136e4d0d4fba8a26cfba90db86023c357f5d795517d919074fac5963e356bc8385f722a48bc02a8d8072a0da4dfc4783fd4ba8454394b1b921"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x42, 0x3a, 0x2}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0xe, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x2, 0x2, 0xf8}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x40}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x5, 0x0, 0xc1}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x9, 0x6e}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x80, 0xb, 0x38, [@generic={0xda, 0x1, "22b8488943e1434e665ebdf19deb208ee86d54dff4db34f50e1d090eb45085e4ac47ff0ce4783be4d1009289410161d5d5d8eabfe8e0fe01a7973ce5a9056a19209fb84d7547e8d966abe815f59723666253b824f2217a1dba3b62fdb37c40d0a2bce780d5dacf514558ac00c83877957c17fbb3ac28cd3444aa368044e9d12f4b97e6fbdcfcee6242587a2892d76e7b4fa47d6905a5d932fb11c7e242a5c55b081b121319ceefe38b3c3364d089dbe873aa0f54c79de9f4f2224eb049406c4d686ec51176fd1e88bed90376f4b5c65cd3b7ae6ac76a2e20"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xfe, 0x6, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x24, 0xc0, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7f, 0x5, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x32, 0x5, 0x3}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x4, 0x7, 0x9, 0x10, 0x3}, 0x19, &(0x7f00000003c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x82, "5824c88e505b31fe72b90ffc4a5f98fe"}]}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x420}}]}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0x3, 0x6, 0x3, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 5m48.746259936s ago: executing program 1 (id=3192): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) unshare(0x24020400) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sync() socket(0x5, 0x803, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) 5m48.370020507s ago: executing program 1 (id=3196): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5m47.112992835s ago: executing program 33 (id=3196): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.110593906s ago: executing program 0 (id=4780): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000001200), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r1, r6, 0xf8, 0x8, 0x803, 0x6, {0x8, 0x8, 0x0, 0x5, 0x4, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) 7.293837993s ago: executing program 0 (id=4786): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x240400d1}, 0x4040) 6.990479031s ago: executing program 0 (id=4787): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4810) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) socket$inet6(0xa, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x1fb, 0x80, 0x800001, 0x18b}, &(0x7f00000006c0), &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1}}]}}, 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)) read(r10, &(0x7f00000001c0)=""/83, 0x53) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0) 5.854324454s ago: executing program 2 (id=4790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a3a440000102030109025c00020100000009040000ee010d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="66b9a00d00000f32dbd567f0879f00a000000f01c4660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f326635010000000f300f320f304466b8010000000f23d80f21f8d9ec0f23f866350a00000044360f01d1", 0x61}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x24, 0x3, 0x0, 0x3, 0x0, 0x7, 0x6, 0x6, 0x7f}}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d1050120000701020301090212000100001a000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x0, 0x18, 0x5, "9866bc3efd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400ffc, 0x14000000215b9037, 0x40190, 0x1, 0x11, 0x8000000000f2, 0x7, 0x3, 0x20000005, 0x5, 0xc6bd, 0x568, 0x45, 0x5, 0xff], 0x6006, 0x1c0293}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.283806749s ago: executing program 6 (id=4794): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x7eff447ec652563f, 0x1dddc0000, 0x2000, &(0x7f0000fef000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x8000000000000000, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0xbe3, 0x6a], 0xeeee8000, 0x1000d6}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x800, 0x0) 4.085639289s ago: executing program 2 (id=4796): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000001200), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r1, r6, 0xf8, 0x8, 0x803, 0x6, {0x8, 0x8, 0x0, 0x5, 0x4, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) 3.99036516s ago: executing program 4 (id=4798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xee, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB="4aa73c40652f5cf02835995f271d5374dd3d733308", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountstats\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r3, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x408}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000018c0)=""/4100, 0x1004}, {&(0x7f0000000240)=""/53, 0x35}], 0x4}, 0x27}], 0x3, 0x2000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3f}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0x4000000e, @private2, 0xfffffffe}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003f40)='X', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="150b", 0x2}], 0x1}}], 0x3, 0x20040141) accept(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 3.915104819s ago: executing program 5 (id=4799): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0xc, &(0x7f00000001c0)={0x1f, 0x0, 0xd}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000180)) r6 = memfd_create(0x0, 0x3) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r7, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) ioctl$SG_GET_VERSION_NUM(r7, 0x2282, &(0x7f0000000040)) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/188, 0xbc) 3.848798644s ago: executing program 6 (id=4800): unshare(0x2040400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES16, @ANYBLOB='\x00'/19, @ANYRES32], 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4080) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x891e, &(0x7f0000000100)={'bond0\x00', @ifru_addrs=@generic={0x1f, "56756ae107e01b1e33873640e40a"}}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 3.416636067s ago: executing program 6 (id=4801): unshare(0x42000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x452481) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="38000000200001002bbd7000fddbdf2502"], 0x38}}, 0x0) 3.415668893s ago: executing program 2 (id=4802): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@bridge_getneigh={0x44, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x14e, 0x80000001, 0x88a8}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) 2.21289877s ago: executing program 0 (id=4803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000580)='debugfs\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000540)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x40080c4, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @loopback, 0xffffffff}, 0x1c) r3 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a05b573f3aa0000000000000000000a00000a0900010073797a300000000014000000110001000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.212200815s ago: executing program 2 (id=4804): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x400000b6}]}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffffffff92f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xfffffffc, 0x6, 0x40, "b56183088c6b83a5379f95af04b4adfeb7db9812e7bef4bd745589a9eeeaeec2", 0x38415261}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x40) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000040)={0xffffffff, 0xffffffffffffffff, 0xb84, 0x0, 0xce8, 0x4, "c899c7c10bb7714acf90a6b50ba22f7d", 0xca, 0x1, 0x3, 0x0, 0x6, 0x6, 0xbd}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f314000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0) 2.211829799s ago: executing program 0 (id=4805): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, &(0x7f0000000200)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000e00)=""/222, &(0x7f0000000f00)=0xde) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272", 0x22}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5", 0x20}, {&(0x7f0000000d00)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000021000304000200800000000002000004000000000000000008000a00380b0000140011"], 0x38}}, 0x20004080) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000080)={0x28, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa61}) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa0, 0x90, 0x48, "", [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x4, 0xe, 0x1, {0x22, 0x561}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xd, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xd, 0x80, 0x8, 0xff, 0xe}, 0x8, &(0x7f0000000340)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0x4c, &(0x7f0000000500)=@string={0x4c, 0x3, "1f7a3093b4d6de1597d77a16c41e9c70cee59240727b2732922078ef1cbf134c5ea99db65ec11515af8e2d40b4397a31242559bdf69127a585b315310572f1d16558e58b44adccaa7e8c"}}, {0x8d, &(0x7f0000000600)=@string={0x8d, 0x3, "4d66772ef8ae85022ad1fce9029a10dd4a3d1d77baab1d2bfba6a7853bc49096fba9dee3f1b2eb0621fd054a59fed5be2e3cbcdbac2c4a2a95aa5b6238447f37f72bc14c1245ce530da7b270aacf216bc12473f26c4105935804dbc5ab0d0c89faee66b813bd318ea0af830cd47232f91f504dcf86f8137d49c0a55b9048532b46ecb31da2621c3c3eb606"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x45, &(0x7f0000000880)=@string={0x45, 0x3, "ea1035999036f37316195934f42db73a8218588c0bdf1f7053d6c2313c7e58927bbac374411c6dae00c7ba2394c4d553728626a83884f3779fcd5ba6d190d58e5069f0"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x820}}, {0x1b, &(0x7f0000000900)=@string={0x1b, 0x3, "64ce0fc14ac4859b08e220aeab3eb4a4f65a2cec8ad712f305"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000ac0)={0x24, &(0x7f00000009c0)={0x40, 0x22, 0x35, {0x35, 0x3, "555e5d14232cf6de957b7609e48166ebedc0f78398feaffcc9dcd74331d9b723d0126969cf8988dbad00182a3ff769002b42fa"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000a40)={0x0, 0x22, 0x1c, {[@local=@item_012={0x2, 0x2, 0x0, "39a6"}, @global=@item_4={0x3, 0x1, 0xa, "d9d58670"}, @main=@item_4={0x3, 0x0, 0x9, "d9cfccd5"}, @global=@item_4={0x3, 0x1, 0xa, "24fb1b12"}, @main=@item_4={0x3, 0x0, 0xa, "7a00ae4a"}, @main, @main=@item_012={0x2, 0x0, 0xc, "d781"}, @local=@item_012={0x0, 0x2, 0x9}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x9, 0x1, {0x22, 0xafb}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b40)={0x40, 0x11, 0x3, "11d73d"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000bc0)={0x0, 0x8, 0x1}, &(0x7f0000000c00)={0x20, 0x1, 0xc8, "5fd5306d53329469ba74889446abea2e3b6e25aa49f064f772ebfbe3181784a3cfee6faa01f571aaab5b80316e367801afd3d3e78c1954fc849151f8463988d4d18590a643a4e6fb548ec3688d1f1c4aaed50d32262cf0b0035708675733751962390fef839fb9e120f1e99098ddf445d90ea4dd30321e4e28d955c68aa73aebe26d4f5d22a949346beca6f0e201a7f6018117e3e21981403ea3b5dabcc17ec14ef8a6af98083abf4742413a003b1318408bce577d4bdadd5ca11a24588ade4854bcf15da0fe764f"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x35}}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.211506678s ago: executing program 2 (id=4806): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x7, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r9 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r9, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4e, 0x212130, 0xfffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}}, 0x50) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r12}, 0x10, &(0x7f0000000100)={0x0, 0x56}, 0x2, 0x0, 0x0, 0x1}, 0x4040005) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0x140, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000080}, 0x20040800) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) write$cgroup_int(r1, &(0x7f0000000180)=0xfe5f, 0x12) 2.210385828s ago: executing program 2 (id=4807): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0600001004000020ff0f0000070000560c"], 0xa3) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x9, 0x4000, 0xffffff48, 0x0}, {0x6, 0x10, 0x0, 0x0}, {0xfffe, 0x1210, 0x0, 0x0}], 0x3}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) inotify_init() read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x202400, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.177352278s ago: executing program 5 (id=4808): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.17472893s ago: executing program 4 (id=4809): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df25"], 0x24}, 0x1, 0x0, 0x0, 0x240400d1}, 0x4040) 2.174465401s ago: executing program 4 (id=4810): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}, {{&(0x7f0000000080)=@file={0x1, '.\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x2, 0x20004000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e24, @private=0xa010102}, 0x80, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)='macsec0\x00', 0x8, 0x0, 0x50}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) sendmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}, {{&(0x7f0000000080)=@file={0x1, '.\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x2, 0x20004000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e24, @private=0xa010102}, 0x80, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)='macsec0\x00', 0x8, 0x0, 0x50}) (async) 2.174207601s ago: executing program 5 (id=4811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xe000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x8, 0x0, 0x7, 0x8, 0x44, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0x0, [0x80000000, 0x0, 0x1, 0x400001]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.173921951s ago: executing program 5 (id=4812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000300)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000340)=0x2c) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, r6, 0x10, 0x70bd27, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) fchdir(r3) close(r3) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x8f) truncate(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x244002, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000004c0)={{r8, 0x1bb, 0x8, 0x1, 0x401, 0x3, 0xcc4, 0x3, 0xfffffff9, 0xfffffffd, 0x80000000, 0xffff, 0x3, 0x8, 0x1}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001440)={0x0, r8, "eb676f023988040add9effdafcdd17ba36ced2dc495fd30f43d53ca0aacee558e708da3d56d0806097c87d8f63a51ecab0147c01c7c15e6fb5e6f48184ae50c73c359ffa74f76a599b7632a59ced0d28c71365c4022a8a1fe35de821678411318556e4e257e188b73c2ef132e8e7e7ff44cc0955093da7f23f037a057449f3cdf833618e62276a1184d6f48e16e597d3b35b5163f9f1a7cced73b79152cb651f1135a5aae524c9c796d9fc7483dfdbbb1d6e28ec44a18a332fbbac6e624f0edf32661a9eab8a5af7e2168b3077509ff15c0f3ef070264082bd53987a2366fbd1acae3559653e9576d38b398f1986ef9493c50bfc26c855daf3e5d829a176ac46", "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"}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x10000000}, 0x10) 2.173747545s ago: executing program 4 (id=4813): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x60, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) r1 = socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket(0xf, 0x3, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x5, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000ac0)="41592a2d1e", 0x0, 0xffffeff9, 0x0, 0x3, 0x0}) write(r3, &(0x7f0000000380)="02", 0x33fe0) splice(r1, 0x0, r2, 0x0, 0x200006, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf", 0x45}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 2.154452515s ago: executing program 4 (id=4814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="23012abd7000ffdbdf250100000018000180140002006261746164765f736c6176655f300000100002800c000180080001000006"], 0x3c}, 0x1, 0x0, 0x0, 0x842}, 0x4000812) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ef960b40b1134200035101020301090224000100000000090493000217c55a00090502030002"], 0x0) 1.267218981s ago: executing program 5 (id=4815): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@bridge_getneigh={0x44, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x14e, 0x80000001, 0x88a8}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) 1.181030148s ago: executing program 5 (id=4816): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') futimesat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @broadcast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @rc={0x1f, @none, 0x2f}, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0xf, 0x9}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x200, 0x3, 0x198}, &(0x7f0000000200), &(0x7f0000000300)) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c6810010000800461d0020006800000501907864016b75b5a805e504ff14250101ac1414bb4404d0f01000907804010003"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) 822.005778ms ago: executing program 4 (id=4817): openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001740)={{0x2, 0x100, 0x1, 0x6, 0x7, 0x5}, 0x2cf, [0x5, 0xfd1, 0x0, 0xfffffffc, 0x3, 0x2, 0xd, 0x400000, 0x1ff, 0x6, 0xfff, 0x800, 0xa, 0x5, 0x2, 0x8, 0x7ff, 0x200, 0x8, 0x6, 0xbc10, 0x9, 0x3, 0x3, 0x1, 0x8d1, 0x4, 0x3, 0x0, 0xe9d4, 0x4, 0x0, 0x4, 0x63a, 0x2, 0xd, 0x8, 0x8a800, 0x80, 0x8, 0xa, 0x1b0, 0x0, 0x8, 0xfffff9b7, 0xff, 0x7, 0x2, 0xfa, 0x3, 0x5e2, 0xffffffc0, 0x6, 0x2, 0xfffffffc, 0x6ee0, 0xf, 0x5, 0x16c9fc0a, 0x7, 0x27d38e92, 0x5, 0x2, 0x1, 0xf2, 0x4, 0x5, 0x7, 0x9, 0x6, 0xfc1, 0xe8, 0x0, 0x1, 0x2, 0x1, 0x1, 0x9, 0x1, 0xffffc56c, 0x6, 0x63, 0x6, 0x80, 0x3, 0x152, 0x52, 0x2, 0x3, 0xcf0, 0x1, 0x5f7d7f0b, 0x3, 0x4, 0x1, 0x1, 0x3b, 0x5, 0x5, 0x0, 0x5, 0x913, 0x4805d5d9, 0x3, 0x8000000, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x2, 0x2, 0x1, 0x6, 0x5, 0x400, 0x10001, 0x800, 0x200, 0x3, 0xfffffc00, 0x7fff, 0xee, 0x8, 0x9, 0x8, 0x1, 0x9, 0x2, 0xffff0001, 0x80000000, 0x1, 0x0, 0x3, 0x3, 0x7, 0x5, 0x3, 0xb05, 0x9, 0x7, 0x8, 0x2, 0x7fff, 0x2, 0x0, 0x2, 0x5, 0x9, 0xc5e, 0xa8, 0xb, 0x4, 0x2fd4, 0x1, 0x10001, 0x6, 0x0, 0x7fff, 0x1, 0x8001, 0x5, 0x3a, 0x5, 0x2b, 0x4, 0x1, 0x10000, 0xca7a, 0x80000000, 0xb, 0x3, 0x1, 0xcb, 0x2, 0xfb59, 0x8001, 0x7e9, 0x8, 0x0, 0x7ff, 0xabc9, 0xd5, 0x3, 0xffff, 0x0, 0xffffff00, 0x2, 0x7, 0x8, 0x4, 0x432, 0x7, 0x9, 0x5, 0x1, 0xd, 0x2, 0x80000001, 0x6, 0x400, 0x5, 0x1, 0x6, 0xf6d3, 0x2007, 0x4f, 0x2, 0x1, 0x10000, 0x43, 0x3b, 0xb1, 0x0, 0xff, 0x3ff, 0x800, 0x400, 0x0, 0x2, 0x2, 0x896, 0x7d, 0xe, 0x1, 0x80000001, 0x0, 0x1, 0x6, 0xffffffff, 0xc, 0x10000, 0xfffffe28, 0xfffffff5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x546b, 0x7, 0x7, 0x1, 0xcd, 0x7fffffff, 0xffffff80, 0x5, 0x18, 0x0, 0x81, 0x9, 0x1e, 0xfba4, 0x6, 0xd, 0x80000000, 0x9, 0x92, 0x4, 0xf, 0x2, 0xda, 0x1, 0x3, 0x7fff, 0x0, 0x131, 0x0, 0xfffffffa, 0x1, 0x1, 0x7, 0x1, 0x3, 0x6, 0x8, 0xff, 0x7, 0x7, 0x8, 0x1a5, 0x7, 0x80000000, 0xfffffff7, 0x4, 0x8f, 0x10000, 0x100, 0x80, 0x1, 0xb42, 0x795, 0x9, 0x2, 0x5, 0x69b8, 0x3, 0x401, 0x101, 0x7, 0x8, 0x6, 0x5, 0x5f, 0x9, 0x2, 0xd62, 0x1cb800, 0xaf8, 0xc65, 0x100, 0x5, 0x200, 0x3, 0x3, 0x1, 0xffffffff, 0x401, 0x3, 0x10001, 0x8, 0x6, 0x7, 0x2, 0x3, 0x389429be, 0x401, 0x1, 0x6, 0x4, 0x7, 0x4, 0xfff, 0xa, 0xcaaf, 0x5, 0x3, 0x8, 0x0, 0x3, 0x1, 0x8, 0x5, 0x5, 0x80000000, 0x0, 0x5, 0xa7f, 0xe, 0x7, 0x4, 0x82, 0x7, 0x3, 0x3, 0x7, 0x1ad, 0x2, 0x0, 0x5, 0x10, 0x6, 0x10, 0xcca, 0xf6, 0x384, 0x9, 0x5, 0x4, 0x6, 0x10001, 0x0, 0x1ff, 0x1, 0x9, 0x200, 0x80000000, 0x6, 0xfffffff9, 0x5, 0x1, 0xda5, 0x1, 0x2, 0x6, 0xd, 0x4, 0x61de, 0x8, 0x21b, 0x80000000, 0x8, 0x18a7, 0x1ff, 0x7, 0x0, 0x3, 0x400, 0x1, 0x1, 0xaa, 0xa, 0xc, 0x3, 0x5, 0x3ff, 0x6, 0xf, 0x7f, 0x8, 0x4, 0x3, 0x40, 0xfffffffd, 0x8, 0x7c, 0x9, 0x0, 0x8, 0x400, 0xee, 0xffffffff, 0x1, 0x6, 0x6, 0x0, 0x7, 0x8, 0x8, 0x6, 0x80, 0x9, 0x0, 0x2, 0x6, 0xe08, 0xa, 0x96d1, 0x5, 0x6, 0x3, 0xb, 0x3, 0x6, 0x8, 0x5, 0x7f, 0x101, 0x4b, 0xff, 0x0, 0x50f, 0x5b, 0x0, 0x6, 0x1e4, 0x2b7, 0x1, 0x3, 0x13, 0x101, 0xd, 0x8, 0x8, 0x9a, 0x8, 0x401, 0x100, 0x2, 0x9, 0x371f, 0x5, 0x1, 0x7, 0xa90, 0x1, 0x7, 0x8, 0x4, 0x6, 0x7, 0x1, 0x2, 0x3, 0x4, 0x101, 0x10001, 0x10, 0x7f, 0x9, 0x6, 0xd, 0x9, 0xb36, 0xf0, 0x5, 0x5, 0x2, 0x10, 0x8b7, 0x2, 0x9, 0x6, 0x5, 0x9, 0x2, 0x8, 0x4b, 0x4df4cf30, 0x7fffffff, 0x0, 0x60d8e8e0, 0xfffeffff, 0x5, 0x9, 0x591bce37, 0x0, 0x1ff00, 0x3285, 0x6, 0x4000000, 0x80000001, 0xfa7, 0xb8, 0x5f89a940, 0x20, 0xe59f, 0x46, 0x5, 0x1f, 0x1, 0x40, 0x80000000, 0x7, 0x1, 0x8, 0x3, 0x9080, 0x8931, 0x0, 0x9, 0x80000000, 0x1000000, 0x3, 0x0, 0x9, 0x70000, 0x71e1, 0xffff, 0xc9e, 0x7fff, 0xd, 0x5, 0x1, 0x4e5, 0x7c5fdc4c, 0x5, 0x48d, 0x7, 0x5, 0xfffffffc, 0x700, 0x1, 0x4, 0xfffffffc, 0x2, 0x3, 0x9, 0x9, 0x7, 0x5, 0x7ff, 0x0, 0x7f, 0x4, 0x200, 0x4, 0xb, 0x3, 0x1, 0x4ab, 0xfff, 0x1, 0x4, 0x92dd, 0x0, 0x0, 0xffff, 0x0, 0xed60, 0x586, 0x4, 0x3000000, 0x6, 0x6, 0x1, 0x3, 0x3, 0x2e8, 0xab7a, 0x7f, 0x3, 0x8, 0xf, 0x5f, 0x6, 0x4000, 0x1, 0x9, 0x1, 0x9, 0x1, 0x80000000, 0xa, 0x0, 0x101, 0x9, 0x7, 0x400, 0x10, 0xfffffffd, 0x2, 0x8, 0x6, 0x8, 0x1, 0x3, 0x7, 0xffffc000, 0xb56, 0x0, 0x2, 0x4, 0x608, 0x3, 0x8, 0x6, 0x3a, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x3f7d3e9f, 0x5bca, 0x401, 0x10, 0x8, 0x1, 0x6, 0x9, 0x7, 0x2, 0x4e, 0x1000, 0xd419, 0x5, 0xc0, 0x1, 0x9, 0x4, 0x1, 0x7, 0x6, 0x3, 0x7, 0x0, 0x12820a69, 0xff, 0x3, 0x10, 0xffff, 0x8000800, 0x7, 0x3, 0x2, 0x9, 0x9, 0x6, 0x10000, 0x2, 0x1, 0x0, 0xfffffffd, 0x101, 0x0, 0x9, 0x7c, 0x1, 0x7, 0x80000001, 0xffffffff, 0x5bcb810c, 0x5, 0x1d65, 0x3, 0x6, 0x2, 0x2, 0x800, 0x2, 0x8, 0x2384, 0x400, 0x1, 0x6, 0x2ae, 0x7, 0x3, 0xc, 0x4, 0x8, 0xe, 0x80, 0x10000, 0x5, 0x6, 0x5, 0x40, 0x8, 0x5, 0x2, 0x4, 0x2, 0x9, 0x4, 0x4, 0xffffff9d, 0x400, 0x2, 0xffffffff, 0x7, 0x401, 0x7, 0x40, 0x9, 0x9, 0xffffff81, 0xe, 0x9, 0x9, 0x401, 0x99e, 0x3, 0x3, 0x81, 0x101, 0x80000002, 0x0, 0x3, 0xfff, 0x5, 0x8000, 0x0, 0x7, 0x0, 0x7, 0x5, 0x1, 0x0, 0xff, 0x6, 0xd, 0x3, 0x0, 0x6, 0x2, 0x7, 0x0, 0x7, 0xffffffff, 0x7, 0x8, 0x9, 0x8, 0x8000, 0xf, 0xfe2, 0x6, 0x26b1, 0x0, 0x7, 0x4, 0x200, 0xb, 0xc8, 0x4, 0x7fffffff, 0x5, 0x5668, 0x6, 0x8001, 0xfffff466, 0xfffffffa, 0x4000001, 0x0, 0xb, 0x400, 0x200, 0x10001, 0x3a8, 0x8, 0x2, 0x8, 0x3, 0x9, 0x5, 0x3, 0x7ff, 0x654bd1d1, 0x2, 0x80, 0x7, 0x80, 0x6, 0x10, 0x478, 0x8, 0x6, 0x80000000, 0x3, 0x3, 0x0, 0x6, 0x7, 0x881d, 0xf8, 0xebe6, 0x7f, 0x7fff, 0x7ff, 0x4, 0x7, 0x800, 0x17, 0x0, 0x3ff, 0x1ffff, 0x9, 0xfff, 0x10, 0x6, 0x1, 0xffff, 0x5d15f75e, 0x9, 0xfff, 0x4, 0x2, 0xfffffffd, 0x484, 0x400, 0x3, 0x7, 0x4, 0x0, 0x9, 0x3, 0x8, 0x8, 0x2, 0x8, 0x5, 0x1, 0x3, 0x1, 0x7fffffff, 0x6, 0x9000000, 0x200, 0x2, 0x1, 0x46c8, 0x6, 0x8000, 0x1, 0xf1e, 0xb416, 0xb6b, 0x6, 0x1, 0x5, 0x3, 0x8, 0xffff, 0x7, 0x6, 0x3, 0x9ec, 0xc, 0x81, 0xc7e, 0x2, 0x2a4, 0x3, 0x8, 0x8, 0x0, 0x1, 0x9, 0x8dd6, 0x80000001, 0x0, 0xb50, 0x3, 0x200, 0x7, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9, 0x2, 0x9, 0x0, 0x4, 0x8, 0x7, 0x40000008, 0x2, 0x5598, 0xffff, 0xe57, 0xfffff016, 0xfff, 0x6d028a56, 0xff, 0x7, 0x6, 0x4, 0x6, 0x383e, 0x8, 0x1, 0x5, 0x7ff, 0x7f, 0x1, 0xc0cd, 0x8, 0x10001, 0x4, 0x3, 0x7, 0x238, 0xf8f4, 0xd, 0x22, 0x3, 0x6, 0x400, 0x3, 0x7a4, 0x5, 0x3, 0x3, 0x4, 0x4, 0x0, 0x7b, 0x9, 0x5, 0x9, 0xc, 0x1, 0x3, 0xfff, 0x31a4, 0xfff, 0x3, 0x5, 0x800, 0x8, 0xdf, 0x3, 0x9, 0x5, 0x79f, 0x7, 0x4, 0x4, 0xf5, 0x2, 0x3, 0x0, 0x5, 0x0, 0x9, 0x200, 0x2, 0x1fc00, 0x2, 0x10001, 0xfffff800, 0xfffffffc, 0xe, 0x6, 0x101, 0x4, 0x9, 0x5, 0x8, 0x8000, 0x5, 0xc22, 0x31, 0x6, 0x5, 0x1000, 0x80000001, 0x9, 0x279, 0x6, 0x0, 0xfffffffa, 0x3, 0x0, 0x2, 0xa, 0xbab, 0x1, 0x8c16]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) brk(0x200000ffa000) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="400e880000ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x2) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={0x0}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) poll(&(0x7f0000000080)=[{r7, 0x81}], 0x1, 0x2000009d) 361.810712ms ago: executing program 6 (id=4818): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x190, 0x1, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2a30bd8b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5db5}]}, @CTA_NAT_SRC={0xbc, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x8}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_TUPLE_REPLY={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x190}}, 0x20000084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000002440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002400)={&(0x7f0000000600)=@deltfilter={0x1dcc, 0x2d, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc, 0xfff3}, {0x0, 0xb}, {0xe, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xc6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0xfbe}, @filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0x6647c2da69b2bb8e}}, @TCA_BPF_POLICE={0x82c, 0x2, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x88f4, 0x3, 0x2, 0x3, 0x5db, 0x2, 0x0, 0x5, 0x40, 0x2, 0x1ff, 0x8001, 0x0, 0xfb, 0x2, 0x5, 0x6, 0x7, 0x101, 0x5, 0x4, 0x8, 0x5, 0x7fff, 0x7ff, 0x2, 0x3, 0x2, 0x1, 0x40, 0x7, 0x7fff, 0x5, 0x6b54, 0x7, 0x3, 0xc20a, 0xfffffffc, 0x6, 0xff, 0x5, 0xc, 0x9, 0x5322, 0x2, 0x7, 0x6000000, 0x4, 0x16e04423, 0x3, 0x3, 0x4, 0x40, 0xe, 0x5, 0xfc7, 0x3, 0xfffffff7, 0x3, 0x80, 0x8001, 0x84a4b2f9, 0x3, 0x1, 0x900000, 0x86, 0x6, 0x8, 0x4, 0x7, 0x4, 0x1, 0x800, 0x80000000, 0x6, 0x80000000, 0x9, 0x4, 0x0, 0xb844, 0x8000, 0x8, 0xffff8001, 0xd173, 0x7, 0xfff, 0xb, 0x3, 0xb9, 0x674f, 0x1, 0xd2f2, 0x5, 0xc, 0x4, 0x1, 0x8, 0x1, 0x7ff, 0xffff, 0x7, 0x7, 0xd90, 0x0, 0x8, 0x0, 0x570, 0x2, 0x0, 0x2, 0x4, 0x1, 0xc, 0x9, 0x9, 0x1cf4, 0x6153, 0xcc, 0x4, 0xa53c, 0x1, 0x0, 0x7ff, 0x2, 0x5, 0x1ff, 0xb8f1, 0x3, 0x0, 0x400, 0xffffff7f, 0xc58, 0x400, 0x4, 0xf, 0x1, 0x7, 0x7, 0x4, 0x9, 0x10000, 0xfffffff7, 0x8001, 0x5, 0x1, 0x4, 0xff, 0x8, 0xe, 0x1, 0x9, 0x8, 0x8, 0x5, 0x3, 0x37b4, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x8000, 0x8, 0x6, 0x81, 0xb, 0x0, 0x6, 0x4, 0x9, 0x1, 0xb087, 0x1967bb61, 0x1000, 0xcb1, 0x80, 0x2, 0x1, 0x81, 0x0, 0x4, 0x4c6, 0x0, 0x100, 0x100, 0x1, 0x0, 0x800, 0x3, 0x4, 0x8, 0xdc, 0x0, 0x5, 0x2, 0x9, 0x1, 0x7, 0x2, 0x2, 0x401, 0x8, 0x101, 0x81, 0x7f, 0x9, 0x100, 0x3, 0x6, 0x5, 0x7fffffff, 0xffff0001, 0x9, 0x8, 0x5, 0x6, 0xe3a, 0xcd, 0x6, 0x4, 0x10, 0x8, 0x10001, 0x28, 0x5, 0xf7, 0x8, 0x400, 0x0, 0x7ff, 0x400, 0x100, 0x8, 0x9, 0x2, 0x5d, 0xff, 0xadf4, 0x1000, 0x1, 0x1, 0x7, 0xc, 0x4000, 0x6, 0x8d, 0x535f7a5c, 0x3, 0x1ff, 0x2, 0x9, 0x10000, 0xe, 0x0, 0xf]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x5, 0x7, 0x80000001, 0x7fffffff, 0x1, 0x82e2, 0x1ff, 0xd, 0x80000000, 0x6, 0x8001, 0xfffff2cd, 0xb5, 0x1, 0x8, 0xa2c, 0xf612, 0x8001, 0x9, 0xfffffffe, 0x4, 0x4055, 0x1, 0x6f1, 0x10000, 0x5, 0x6, 0x8, 0x0, 0x5, 0x2, 0x80000000, 0x6, 0x9, 0x7, 0x9, 0x5, 0xc1, 0xa05, 0x0, 0x1, 0x8, 0xbaa1, 0xb5c, 0xffff2967, 0xbb2, 0x8, 0x6, 0x5, 0x4, 0x5, 0x1, 0x9, 0x3, 0x2, 0x5, 0x9, 0x80000001, 0x5, 0xcd52, 0x3, 0x0, 0xa, 0x9, 0x40, 0x48e080, 0x40, 0x1, 0x7, 0x7fffffff, 0x0, 0x0, 0x7, 0x5, 0x7, 0x5, 0x0, 0x7, 0x4, 0x6, 0x40, 0x7, 0x7, 0x2, 0x3, 0x3, 0x5c1, 0x9, 0xfffffff8, 0x7, 0xbd, 0x4, 0xffff, 0xfffffff3, 0xc, 0x5704, 0x6, 0x3fe0253e, 0x231, 0x2, 0x5, 0x81a9, 0x6, 0xc11f, 0xfffffff8, 0x6, 0x9, 0x6, 0x401, 0x9, 0x7dd, 0x1, 0x1a, 0x5, 0x9a2d, 0x51, 0x7fffffff, 0xfffffffe, 0xffff9638, 0xc, 0x80000000, 0x1, 0x5, 0x9, 0x6, 0x4, 0x5, 0x6, 0x3ff, 0xa, 0x200, 0xc, 0xffffffcd, 0x4, 0x8, 0x2, 0x9, 0x40, 0x236524be, 0x8, 0x5, 0x5, 0x2, 0xff, 0x0, 0x5, 0x401, 0xa8, 0x1, 0x6, 0x2000, 0x4, 0x0, 0xffdc, 0xffffffff, 0x1, 0x6, 0x1, 0x755, 0x0, 0x80000001, 0x1000, 0xb1, 0x401, 0x7f, 0x8, 0x10, 0x72d, 0x3, 0xffff, 0xa, 0xffff, 0x0, 0x8, 0x0, 0x2, 0x8825, 0x8, 0x3, 0x1, 0xb7, 0x6, 0x80000001, 0x9, 0x9, 0x5, 0x6, 0x9, 0x8, 0x4c8a, 0x3, 0x8, 0x1, 0x800, 0x10c00, 0xff, 0x5, 0x3ff, 0x5, 0x4, 0x0, 0xfffffffc, 0x1c53, 0x8c, 0x3, 0x101, 0x9, 0x356, 0x8001, 0xc, 0x2, 0x8, 0x0, 0x6, 0x1, 0x3, 0x6, 0x5, 0x5, 0x9, 0x8, 0x200000, 0x3, 0x7, 0x10000, 0x6, 0x9, 0xce4, 0x6, 0x30b723ff, 0x100, 0x4, 0x6, 0xe, 0x3, 0x6, 0x5, 0x0, 0xf2, 0x0, 0xffffffff, 0xfffffff7, 0xff, 0x7, 0x1, 0x2, 0x2, 0x7, 0x2, 0x4, 0xfffffff8, 0xfffffffd, 0x8, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x81, 0x9}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x63, 0xca}}, @filter_kind_options=@f_basic={{0xa}, {0x14e8, 0x2, [@TCA_BASIC_ACT={0x1374, 0x3, [@m_gact={0x138, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x834, 0xca9b, 0x0, 0x9, 0x76}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1d25, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2244, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x165a, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x23f6, 0xfffffffffffffffb}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xfffffff8, 0x8, 0x8, 0xf}}]}, {0xab, 0x6, "6ee5ae59e2fdcd172fd806a7b5b27e91094712428f0b570f8666c6c0406c8ec8186337979a0f3cfae4d9f9cfdffd03af3ea3e697cc06f286d8dadc715bead7f04518568f6b1cf0bc467c4471ef6295d1e63cb242a78a85a24a78bd1e7c7455b047bf0926c15f4861dffa961fa20240db06b87e2c0ada6dc8d6437e57d4ad6c4f2f77bb80084f3efd8cd952897cee52be70833a3e22e72497b722d70961ec133adcf4a40267dd2e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ct={0x1060, 0x3, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_ACTION={0x6}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x800}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x1d8, 0x18, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x30c, 0x3ff, 0x6, 0x23b, 0x7}, 0xfffe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xd69d, 0x2, 0x7fffffff, 0x72}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3ff, 0x4, 0xfffffffc, 0x5}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x5, 0x5, 0x0, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1000, 0x6, 0x3, 0x3}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x6, 0x8, 0x7}, 0x42}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x80, 0x0, 0xffff0000, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff96, 0x200, 0xffffffffffffffff, 0x4, 0x51bf72bb}, 0xfffb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x7, 0x20000000, 0x2, 0x8}, 0xfffe}}]}, {0xaa, 0x6, "9bb8ea5b7ea8e96541f9c05b3be84a3051203ae8baffbd6f77b8c0a0c288007066da8a1edf67922e92b37aa43b561931c5b561e3cc38e967169c1f99ac642a9126217a1539ddb679f4bb0d6b1660af9630a2c6d976a0c3109a1e46301b986b27067a87edcd4c807b71fa02fb9b5b92445dd93649c4f1c7473d381813ff9be511d658f283ee974b2d3e7b578f57da5e94e49d142cc36e23b7db64bce2a6e58224bb0cf81c3390"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x170, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x8001}, {0xffffffffffffffff, 0x6, 0x4}}}, @TCF_EM_CONTAINER={0x6c, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x2}, "615038a8637046b884922e2399e331888bfb4ba0bdd1cdfc075117ae36a053e76ca5f507fe0a718c7741a9b0eee9ce46da1bbeb898a705fa4d27a07a932453f1ce2bcc5b36c0b6c3005a201a776967c677df8dc05217de38b9e757919dbf3e25"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x99, 0x8, 0xff0a}, {0x4, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0xbc, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x1000}, "b8b6d2c1bf5d7530ff5c1ebf36e8c3466f149ba49af2829f032119859d786032fb008011d819618841ddf5088e000b318b0af339f3ca122a1a8c9e87843e4278f0dd48ba85a09db5c1e7728e8c7e1f95cdbecfad087fc062625a016a27dcc5d548be509152cf59fb4b3cf7cf2a97cd6f2ebb0d7e83233005bdbc8f266eebb8de9d666058f450f11afc3d68f68d1340adf25a891975dd82a3704925b6910a6cdff2806105b8bd9f583b33e6dbf23f91a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}]}]}}]}, 0x1dcc}, 0x1, 0x0, 0x0, 0x8801}, 0x20040000) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000002580)=0x3a89) pselect6(0x40, &(0x7f00000025c0)={0x1ff, 0x0, 0xb34d, 0x9, 0x0, 0x6, 0x7, 0x6}, &(0x7f0000002600)={0x13c1, 0xf8, 0x181, 0x4, 0x1, 0x4, 0x200, 0xc4e}, &(0x7f0000002640)={0x8000, 0x65, 0x5, 0x34, 0x789, 0xfffffffffffffff7, 0x7, 0x7}, &(0x7f0000002680)={0x0, 0x3938700}, &(0x7f0000002700)={&(0x7f00000026c0)={[0x1000]}, 0x8}) write$P9_RSETATTR(r0, &(0x7f0000002740)={0x7, 0x1b, 0x1}, 0x7) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000027c0), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20800}, 0x40000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) pread64(r4, &(0x7f00000028c0)=""/195, 0xc3, 0x58a6) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002a40)=@o_path={&(0x7f0000002a00)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002a80)=@o_path={&(0x7f00000029c0)='./file1\x00', r5, 0x4000, r0}, 0x18) setsockopt$inet6_int(r0, 0x29, 0x69, &(0x7f0000002ac0)=0x6678, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000002b00)={0x7fff, {0xa, 0x3, 0x10001, 0x7}}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x48, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x40000) bind$vsock_stream(r0, &(0x7f0000002c80)={0x28, 0x0, 0x2710, @local}, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0) r6 = syz_pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r6, &(0x7f0000003140)=[{&(0x7f0000002d00)="6055483744a1386917f75f22b267e824aa69b0b9aca0f7c9667d6c437f9fc37caa5aea1cab183bddaf5ea971f5b52104d4677a97a87375bc88e8352d103a71785d8d7589b519da2f1da95e54446869e80b263f22", 0x54}, {&(0x7f0000002d80)="31de4bd2514a4c77c0ddbd697a8273da9f351040cd79c2f2751bc1d66c049dd97a7e80917beb83015ebd4fa1928b6386c45c6ae982716b74ed9b6ecc8c5fb1a08f5c587b1ff0fec89f1de3b435b4ea79b63db8ab9335faf9e7027305a4402ef220d480743e649b21e93d5065a7264d5eb941b7f1fa0730853a1cb1760b2d3828c6493410dc0c99f0d1ff90c88154afaae339bd500f0e96dc7747802b23ea", 0x9e}, {&(0x7f0000002e40)="ecd35fc834bd9fa743401840ca546070c0b8188322ab1d28f8f3246b319d41ba25a44f37f1bd9c6bf39f2dde7c357e55193f96cb4362686ca78c0e99e264d52110dc54127fe0deee1a01f237d5b881bc242448ac5277dab85df9eda73ec0c23bec5814d628adbab305f4cca2bfb7af89db9b47db669d952ed44c104b120bec4c6f9a27feac725d08263f6c67b4e428eabdc56ca3965d8de8273297c7cee5b753355965946ffb", 0xa6}, {&(0x7f0000002f00)="a0b18ea240d35881761555275cbcc378cf36aaeac0b34262c205439fb4ff8eb04ac71d2a35f5ab0c21b2ccf660438158e4728f5db614c584eae017346a4fcabb6fb2a864159f79f96b25309b546786493dd7426e904ef1e90105ed5882f118ba94b967f13a7caba31be296ace437e30656d492e8ed59918bb3e99a7d9c34ec4341f2017bc6e968cc9329c4da8d292c8b9b9db85f0ea5b69a3317b8ec76b35c2e067f6e3b3eb911217147449a97ed3607d79fc0aedeed79b0fce4749f9ccc3a0da6313248762ad9324b7bc73e11d1651db5ad79", 0xd3}, {&(0x7f0000003000)="150748dfc77a29193f88be69bc634ee89caa190c1db4ce773170a0d714da29a0b1d3f3f37dde07d6eb759cbb4ce1a914d4fc93ada9fdd9e369c713c3ce954172b2a354c860a29f1d9981e149b81dc560e952a3907f0692291a4f86b6cbbb04af732c9d9c9e50f7be00d0fa77fdf3e47a702f6d6d5183a858eb3887fb125904a5", 0x80}, {&(0x7f0000003080)="8b162f63f48469fe738c2ce7478ca995953ae85169f48bc038fa96e35b512b185a4731cdcd75336cfdfadf47a79b487cadf0ca03d7509eba4d1f39a48c329ddc70365ecb5e29bd541df16809f1de74ea42254ec8eefbdd592a6abddbe4a5e580397b02393f30761f1869150e4fae31c880071fbcc5", 0x75}, {&(0x7f0000003100)="1162cf89314f7d81836d84da7dc5044a942aaec10c9a559d13222ae296c0cc97584c20396ff978fe2b8bfe93bd923262d8ad", 0x32}], 0x7, 0x9, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f00000031c0), &(0x7f0000003200)=0x4) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_FILTER={0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x20}}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000003340)=0x8, 0x4) accept(0xffffffffffffffff, &(0x7f0000003380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000003400)=0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f00000034c0)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003480)={0xfffffffffffffffe}}, 0x40) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000003500)=0x100) openat$kvm(0xffffffffffffff9c, &(0x7f0000003540), 0x40300, 0x0) 261.327742ms ago: executing program 6 (id=4819): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 127.063691ms ago: executing program 6 (id=4820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r5, 0x0, 0x8, 0x401, 0x4, 0x8001}, 0x14) r6 = eventfd2(0x0, 0x80800) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x10000015}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x8, 0x4, 0x7fff, 0x6}}]}}, 0x15) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f00000000c0)={0x80, [0x1ff, 0xfe, 0x6dc, 0x1b, 0x9, 0x8, 0xffff, 0x1, 0x2, 0x3, 0x7, 0x10, 0x1000, 0x57, 0x6, 0xa, 0xfff7, 0x3, 0xb53, 0x4, 0x7, 0x0, 0x200, 0x64d, 0xffff, 0x1, 0x5, 0xb, 0xd4, 0x759b, 0x14, 0x2c, 0x9, 0x10, 0xfff, 0x6, 0xf, 0xfc, 0x9, 0x3ff, 0x2, 0x3, 0x1, 0x2, 0x9, 0x8007, 0x6, 0x1491], 0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=4821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xee, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB="4aa73c40652f5cf02835995f271d5374dd3d733308", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountstats\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r3, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x408}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000018c0)=""/4100, 0x1004}, {&(0x7f0000000240)=""/53, 0x35}], 0x4}, 0x27}], 0x3, 0x2000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3f}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0x4000000e, @private2, 0xfffffffe}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003f40)='X', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="150b", 0x2}], 0x1}}], 0x3, 0x20040141) accept(r5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) kernel console output (not intermixed with test programs): 682177][T13409] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.706000][T13409] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.716361][T13409] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1025.735868][T13409] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1025.745177][T13409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.749316][T21854] loop5: detected capacity change from 0 to 7 [ 1025.757151][T13409] usb 6-1: config 0 descriptor?? [ 1025.774957][T21854] loop5: [ 1025.779653][T21854] loop5: partition table partially beyond EOD, truncated [ 1025.825982][T13242] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1025.995969][T13242] usb 5-1: Using ep0 maxpacket: 8 [ 1026.098924][T13242] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1026.116967][T13242] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1026.128965][T13242] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 1026.163228][T13242] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.172725][T13242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.200707][T13242] usb 5-1: Product: syz [ 1026.224464][T13242] usb 5-1: Manufacturer: syz [ 1026.227274][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 1026.235260][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 1026.242645][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 1026.242805][T15685] Bluetooth: hci4: command 0x0406 tx timeout [ 1026.255871][T13242] usb 5-1: SerialNumber: syz [ 1026.407961][T13409] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0033/input/input78 [ 1026.515720][T13409] uclogic 0003:28BD:0042.0033: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 1026.567778][T13409] usb 6-1: USB disconnect, device number 38 [ 1026.618982][T13242] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1026.648060][T13242] usb 5-1: found format II with max.bitrate = 7, frame size=29911 [ 1026.664364][T13242] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1026.766884][T13242] usb 5-1: USB disconnect, device number 78 [ 1026.841532][T16632] udevd[16632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1026.881970][T21869] fido_id[21869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1027.506683][T15685] Bluetooth: hci5: command 0x0406 tx timeout [ 1027.519042][T21885] batman_adv: batadv0: Adding interface: gretap1 [ 1027.525560][T21885] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.616454][T21885] batman_adv: batadv0: Interface activated: gretap1 [ 1027.885920][ T5932] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1027.915559][T21894] loop5: detected capacity change from 0 to 7 [ 1027.936767][T21894] loop5: [ 1027.939743][T21894] loop5: partition table partially beyond EOD, truncated [ 1028.062988][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 1028.074962][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.096164][ T5932] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1028.110151][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.125513][ T5932] usb 5-1: Product: syz [ 1028.135685][ T5932] usb 5-1: Manufacturer: syz [ 1028.146797][ T5932] usb 5-1: SerialNumber: syz [ 1028.156937][ T5932] usb 5-1: config 0 descriptor?? [ 1028.172033][ T5932] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1028.305913][T15685] Bluetooth: hci4: command 0x0406 tx timeout [ 1028.315894][T15685] Bluetooth: hci1: command 0x0406 tx timeout [ 1028.318165][T21865] Bluetooth: hci3: command 0x0c1a tx timeout [ 1028.321956][T15685] Bluetooth: hci0: command 0x0406 tx timeout [ 1028.333948][T13242] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1028.487258][T13242] usb 3-1: Using ep0 maxpacket: 8 [ 1028.495438][T13242] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1028.504011][T13242] usb 3-1: config 0 has no interface number 0 [ 1028.510774][T13242] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1028.523483][T13242] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1028.539426][T13242] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1028.553317][T13242] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1028.570401][T13242] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1028.591345][T13242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.601303][ T5932] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1028.608717][ T5932] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1028.755915][T13409] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1028.778394][T13242] usb 3-1: config 0 descriptor?? [ 1028.813855][T13242] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1028.829851][ T5932] usb 5-1: USB disconnect, device number 79 [ 1028.906094][T13409] usb 6-1: Using ep0 maxpacket: 8 [ 1029.037002][T13409] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1029.048331][T13409] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1029.058535][T13409] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1029.070633][T13409] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1029.090178][T13409] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1029.105940][T13409] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1029.115450][T13409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.155522][ T5983] usb 3-1: USB disconnect, device number 79 [ 1029.161537][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 1029.181653][ T5983] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1029.546809][T21917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4175'. [ 1029.556788][T21917] bridge_slave_0: default FDB implementation only supports local addresses [ 1029.635924][ T5983] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1029.648828][T13409] usb 6-1: GET_CAPABILITIES returned 0 [ 1029.654364][T13409] usbtmc 6-1:16.0: can't read capabilities [ 1029.797910][ T5983] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1029.806878][ T5983] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1029.815638][ T5983] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.831364][ T5983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1029.844332][ T5983] usb 5-1: config 1 has no interface number 0 [ 1029.851444][ T5983] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1029.861247][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.883727][ T5983] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1029.986737][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1030.077848][ T5983] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1030.090006][ T5983] snd_usb_pod 5-1:1.1: invalid control EP [ 1030.101428][ T5983] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1030.115246][ T5983] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1030.129334][ T5983] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1030.285040][ T5983] usb 5-1: USB disconnect, device number 80 [ 1030.386410][T15685] Bluetooth: hci3: command 0x0c1a tx timeout [ 1030.409667][T21923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4178'. [ 1030.485517][T21927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4180'. [ 1030.970973][T21940] tipc: Enabled bearer , priority 0 [ 1031.010742][T21938] syzkaller0: entered promiscuous mode [ 1031.016362][T21938] syzkaller0: entered allmulticast mode [ 1031.089014][T21937] tipc: Resetting bearer [ 1031.150211][T21937] tipc: Disabling bearer [ 1031.337550][T21951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1031.346727][T21951] bridge_slave_0: default FDB implementation only supports local addresses [ 1031.379797][ T5983] usb 6-1: USB disconnect, device number 39 [ 1031.605468][T21961] xt_hashlimit: size too large, truncated to 1048576 [ 1031.651118][T21964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.695676][T21965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4190'. [ 1031.888586][T21968] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4191'. [ 1032.509843][T21973] tipc: Started in network mode [ 1032.514752][T21973] tipc: Node identity 6ecb0f07a99d, cluster identity 4711 [ 1032.546910][ T5923] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1032.556355][T21973] tipc: Enabled bearer , priority 0 [ 1032.595579][T21974] syzkaller0: entered promiscuous mode [ 1032.662130][T21974] syzkaller0: entered allmulticast mode [ 1032.713780][ T5923] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x86 has invalid maxpacket 5632, setting to 1024 [ 1032.725638][T21973] tipc: Resetting bearer [ 1032.735553][ T5923] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1032.793071][ T5923] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1032.818149][ T5923] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1032.829896][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.876600][ T5923] usb 5-1: Product: syz [ 1032.880799][ T5923] usb 5-1: Manufacturer: syz [ 1032.909022][ T5923] usb 5-1: SerialNumber: syz [ 1032.947271][T21972] tipc: Resetting bearer [ 1032.999912][T21972] tipc: Disabling bearer [ 1033.144691][T21971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1033.213613][T21987] binder_alloc: 21986: binder_alloc_buf, no vma [ 1033.255879][T13409] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1033.332504][T21992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4200'. [ 1033.390941][T21994] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4201'. [ 1033.411701][T13409] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.438025][T13409] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1033.451030][T13409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1033.466646][T13409] usb 6-1: Product: syz [ 1033.472056][T13409] usb 6-1: Manufacturer: syz [ 1033.477042][T13409] usb 6-1: SerialNumber: syz [ 1033.508316][T21996] bond1: Removing last arp target with arp_interval on [ 1033.543469][T21996] bond2: Removing last arp target with arp_interval on [ 1033.576273][ T5923] cdc_ncm 5-1:1.0: bind() failure [ 1033.611754][ T5923] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1033.629569][ T5923] cdc_ncm 5-1:1.1: bind() failure [ 1033.655093][ T5923] usb 5-1: USB disconnect, device number 81 [ 1033.691621][T13409] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1033.901212][T21985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.919107][T21985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.377306][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1034.505938][ T24] usb 3-1: device descriptor read/64, error -71 [ 1034.745962][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1034.875918][ T24] usb 3-1: device descriptor read/64, error -71 [ 1034.925978][ T5983] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1034.986896][ T24] usb usb3-port1: attempt power cycle [ 1035.087955][ T5983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1035.097951][ T5983] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1035.107951][ T5983] usb 5-1: string descriptor 0 read error: -22 [ 1035.114200][ T5983] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 1035.123487][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.326134][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1035.338724][T22021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.349345][T22021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.357527][ T24] usb 3-1: device descriptor read/8, error -71 [ 1035.508418][ C0] usblp0: nonzero write bulk status received: -71 [ 1035.520452][T13409] usb 6-1: USB disconnect, device number 40 [ 1035.529357][T13409] usblp0: removed [ 1035.571373][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.581210][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.588344][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.595253][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.602153][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.606135][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1035.609152][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.623644][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.631231][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.638148][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.644929][ T5983] kone 0003:1E7D:2CED.0034: unknown main item tag 0x0 [ 1035.652708][ T24] usb 3-1: device descriptor read/8, error -71 [ 1035.686792][ T5983] kone 0003:1E7D:2CED.0034: hidraw0: USB HID v0.05 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 1035.766515][ T24] usb usb3-port1: unable to enumerate USB device [ 1035.773865][ T5983] kone 0003:1E7D:2CED.0034: couldn't init struct kone_device [ 1035.782750][ T5983] kone 0003:1E7D:2CED.0034: couldn't install mouse [ 1035.791927][ T5983] kone 0003:1E7D:2CED.0034: probe with driver kone failed with error -5 [ 1035.804652][ T5983] usb 5-1: USB disconnect, device number 82 [ 1036.354037][T22034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4212'. [ 1037.241833][T22067] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4222'. [ 1037.451354][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4225'. [ 1038.203783][ T5983] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1038.399946][ T5983] usb 6-1: device descriptor read/64, error -71 [ 1038.521640][T22111] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4235'. [ 1038.665887][ T5983] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1038.674632][T22116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4237'. [ 1038.776018][T22113] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1038.783476][T22113] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1038.820616][ T5983] usb 6-1: device descriptor read/64, error -71 [ 1038.892117][T22125] fuse: Bad value for 'fd' [ 1039.010488][ T5983] usb usb6-port1: attempt power cycle [ 1039.026896][T22124] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4239'. [ 1039.052040][T22127] fuse: Unknown parameter 'J<@e/\(5_'St' [ 1039.062912][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4238'. [ 1039.416706][ T5983] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1039.440370][ T5983] usb 6-1: device descriptor read/8, error -71 [ 1039.624077][ T9] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1039.685938][ T5983] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1039.717178][ T5983] usb 6-1: device descriptor read/8, error -71 [ 1039.755978][ T9] usb 5-1: device descriptor read/64, error -71 [ 1039.808835][T22134] loop5: detected capacity change from 0 to 7 [ 1039.816379][T16632] Dev loop5: unable to read RDB block 7 [ 1039.822062][T16632] loop5: unable to read partition table [ 1039.828588][T16632] loop5: partition table beyond EOD, truncated [ 1039.836735][ T5983] usb usb6-port1: unable to enumerate USB device [ 1039.837279][T22134] Dev loop5: unable to read RDB block 7 [ 1039.856195][T22134] loop5: unable to read partition table [ 1039.870520][T22134] loop5: partition table beyond EOD, truncated [ 1039.877841][T22134] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1039.910020][ T5193] Dev loop5: unable to read RDB block 7 [ 1039.915928][ T5193] loop5: unable to read partition table [ 1039.924838][ T5193] loop5: partition table beyond EOD, truncated [ 1040.006093][ T9] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1040.094292][T22142] input: syz0 as /devices/virtual/input/input79 [ 1040.146510][ T9] usb 5-1: device descriptor read/64, error -71 [ 1040.271512][ T9] usb usb5-port1: attempt power cycle [ 1040.615877][ T9] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1040.646503][ T9] usb 5-1: device descriptor read/8, error -71 [ 1040.886080][ T9] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1040.913474][T22154] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4247'. [ 1040.923784][ T9] usb 5-1: device descriptor read/8, error -71 [ 1040.965229][T22156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4248'. [ 1041.038589][ T9] usb usb5-port1: unable to enumerate USB device [ 1041.823219][T22167] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4250'. [ 1041.863280][T22168] fuse: Unknown parameter 'J<@e/\(5_'St' [ 1041.878826][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1042.416022][T14591] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1042.436042][ T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1042.558693][T22178] loop5: detected capacity change from 0 to 7 [ 1042.574505][T22178] Dev loop5: unable to read RDB block 7 [ 1042.580338][T22178] loop5: unable to read partition table [ 1042.617961][T22178] loop5: partition table beyond EOD, truncated [ 1042.618406][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1042.624837][T22178] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1042.655270][T14591] usb 6-1: Using ep0 maxpacket: 8 [ 1042.672796][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.684152][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.728211][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1042.752920][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1042.764982][ T24] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1042.774930][ T24] usb 3-1: Manufacturer: syz [ 1042.805358][ T24] usb 3-1: config 0 descriptor?? [ 1043.206307][T14591] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1043.235740][T14591] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1043.245204][ T24] hid_parser_main: 4007 callbacks suppressed [ 1043.245220][ T24] appleir 0003:05AC:8243.0035: unknown main item tag 0x0 [ 1043.264045][T14591] usb 6-1: can't read configurations, error -71 [ 1043.313301][ T24] appleir 0003:05AC:8243.0035: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1043.356492][ T5932] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1043.443957][T22193] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4259'. [ 1043.460942][T22196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.585036][T22198] netlink: 'syz.6.4258': attribute type 2 has an invalid length. [ 1043.625625][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 1043.672475][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.740246][ T5932] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1043.755739][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1043.815939][T22200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4253'. [ 1043.829535][ T5932] usb 5-1: Product: syz [ 1043.833724][ T5932] usb 5-1: Manufacturer: syz [ 1043.849719][ T5932] usb 5-1: SerialNumber: syz [ 1043.864256][ T5932] usb 5-1: config 0 descriptor?? [ 1043.896752][ T5932] imon_raw 5-1:0.0: IR endpoint missing [ 1045.137139][T22218] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4262'. [ 1045.417046][T22223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4263'. [ 1045.742427][T14591] usb 3-1: USB disconnect, device number 84 [ 1045.785453][T22238] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4267'. [ 1045.922562][T22244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.953868][T22240] fuse: Unknown parameter 'J<@e/\(5_'St' [ 1045.966416][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4266'. [ 1046.319182][T14591] usb 5-1: USB disconnect, device number 87 [ 1046.490123][T22248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4270'. [ 1046.764174][T22252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4272'. [ 1047.167745][T22257] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4273'. [ 1047.496029][ T5932] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1047.636013][ T5932] usb 5-1: device descriptor read/64, error -71 [ 1047.876388][ T5932] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1048.006107][ T5932] usb 5-1: device descriptor read/64, error -71 [ 1048.146091][ T5932] usb usb5-port1: attempt power cycle [ 1048.237415][T22283] Invalid argument reading file caps for ./file0 [ 1048.383117][T22294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4285'. [ 1048.506416][ T5932] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1048.658072][ T5932] usb 5-1: device descriptor read/8, error -71 [ 1048.820809][T22298] pim6reg: entered allmulticast mode [ 1049.006051][ T5932] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1049.036821][ T5932] usb 5-1: device descriptor read/8, error -71 [ 1049.157593][ T5932] usb usb5-port1: unable to enumerate USB device [ 1050.045863][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1050.110248][T22320] fuse: Unknown parameter 'J<@e/\(5_'St' [ 1050.122308][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1050.206007][ T9] usb 6-1: device descriptor read/64, error -71 [ 1050.447464][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1050.587120][ T9] usb 6-1: device descriptor read/64, error -71 [ 1050.696283][ T9] usb usb6-port1: attempt power cycle [ 1050.966360][ T5932] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1051.076501][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1051.107779][ T9] usb 6-1: device descriptor read/8, error -71 [ 1051.126175][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 1051.133375][ T5932] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1051.152890][ T5932] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1051.175324][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.195283][ T5932] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1051.213378][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1051.253523][ T5932] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1051.272766][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.290106][ T5932] usb 5-1: Product: syz [ 1051.294283][ T5932] usb 5-1: Manufacturer: syz [ 1051.307627][ T5932] usb 5-1: SerialNumber: syz [ 1051.330045][ T5932] usb 5-1: config 0 descriptor?? [ 1051.350725][ T5932] hub 5-1:0.0: bad descriptor, ignoring hub [ 1051.400990][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1051.414344][ T5932] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1051.454470][ T9] usb 6-1: device descriptor read/8, error -71 [ 1051.566114][ T9] usb usb6-port1: unable to enumerate USB device [ 1051.665160][ T30] audit: type=1326 audit(1773495406.798:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.0.4299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f784bf9c799 code=0x0 [ 1052.585867][T22355] fuse: Bad value for 'fd' [ 1053.002437][T22367] loop5: detected capacity change from 0 to 7 [ 1053.009693][ T5193] Dev loop5: unable to read RDB block 7 [ 1053.015588][ T5193] loop5: unable to read partition table [ 1053.021965][ T5193] loop5: partition table beyond EOD, truncated [ 1053.030431][T22367] Dev loop5: unable to read RDB block 7 [ 1053.038490][T22367] loop5: unable to read partition table [ 1053.046608][T22367] loop5: partition table beyond EOD, truncated [ 1053.086339][T22367] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1053.106130][ T5193] Dev loop5: unable to read RDB block 7 [ 1053.111875][ T5193] loop5: unable to read partition table [ 1053.118598][ T5193] loop5: partition table beyond EOD, truncated [ 1053.236668][T22371] fuse: Unknown parameter 'J<@e/\(5_'St' [ 1053.249271][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4305'. [ 1053.890836][T22378] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1053.898285][T22378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1053.904886][T22378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1053.912256][T22378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1053.920917][T22378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1054.156347][ T9] usb 5-1: USB disconnect, device number 92 [ 1054.240343][T22387] pim6reg: entered allmulticast mode [ 1054.390141][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.396692][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.466092][ T24] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 1054.587208][T22393] batman_adv: batadv0: Adding interface: gretap1 [ 1054.593692][T22393] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.619559][T22393] batman_adv: batadv0: Interface activated: gretap1 [ 1054.649853][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1054.660875][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1054.672365][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1054.726002][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 1054.736542][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.864196][ T24] usb 3-1: config 0 descriptor?? [ 1054.876464][T22383] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1055.114156][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.158364][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.190523][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.220040][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.236626][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.264662][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.276811][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.292032][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.301643][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.315905][ T24] logitech-hidpp-device 0003:046D:C081.0036: unknown main item tag 0x0 [ 1055.334092][ T24] logitech-hidpp-device 0003:046D:C081.0036: hidraw0: USB HID v0.08 Device [HID 046d:c081] on usb-dummy_hcd.2-1/input0 [ 1055.445459][T22417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.454482][T22417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.517641][ T5983] usb 3-1: USB disconnect, device number 85 [ 1055.725970][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1055.828139][T15685] Bluetooth: hci5: command 0x0406 tx timeout [ 1055.879355][ T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1055.888553][ T5983] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1055.901232][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.912556][T15685] Bluetooth: hci1: command 0x0406 tx timeout [ 1055.912568][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 1055.928071][T13242] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1055.938658][ T9] usb 6-1: config 0 descriptor?? [ 1055.988835][T15685] Bluetooth: hci3: command 0x0c1a tx timeout [ 1055.988862][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 1056.086116][ T5983] usb 3-1: Using ep0 maxpacket: 8 [ 1056.093866][ T5983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.105000][ T5983] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1056.114125][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.123091][T13242] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1056.133322][T13242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.142142][ T5983] usb 3-1: config 0 descriptor?? [ 1056.149328][T13242] usb 5-1: Product: syz [ 1056.155535][ T5983] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1056.162383][T13242] usb 5-1: Manufacturer: syz [ 1056.167275][T13242] usb 5-1: SerialNumber: syz [ 1056.184726][T13242] usb 5-1: config 0 descriptor?? [ 1056.393990][T13242] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1056.908850][T22448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4326'. [ 1056.936657][T22448] bond3 (unregistering): Released all slaves [ 1057.069547][ T9] usb 6-1: Cannot set autoneg [ 1057.096504][ T9] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1057.122549][ T9] usb 6-1: USB disconnect, device number 51 [ 1057.594743][ T5983] gspca_vc032x: reg_w err -71 [ 1057.604170][ T5983] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1057.632968][ T5983] usb 3-1: USB disconnect, device number 86 [ 1058.257122][T13242] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1058.272875][T13242] usb 5-1: USB disconnect, device number 93 [ 1058.388892][T22471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4330'. [ 1058.398411][T22471] bridge_slave_0: default FDB implementation only supports local addresses [ 1058.412952][T22472] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1059.114839][ T30] audit: type=1326 audit(1773495414.188:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18e79c799 code=0x7ffc0000 [ 1059.156159][ T30] audit: type=1326 audit(1773495414.188:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb18e79c799 code=0x7ffc0000 [ 1059.199816][ T30] audit: type=1326 audit(1773495414.198:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22481 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18e75cfce code=0x7ffc0000 [ 1059.227733][ T30] audit: type=1326 audit(1773495414.198:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18e79c799 code=0x7ffc0000 [ 1059.260724][ T30] audit: type=1326 audit(1773495414.238:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb18e79e007 code=0x7ffc0000 [ 1059.541821][ T30] audit: type=1326 audit(1773495414.238:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18e79c799 code=0x7ffc0000 [ 1059.671802][T22492] fuse: Unknown parameter 'J<@e/\(5_'St' [ 1059.684880][T22492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4337'. [ 1059.859647][ T30] audit: type=1326 audit(1773495414.238:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18e79c799 code=0x7ffc0000 [ 1060.060252][ T30] audit: type=1326 audit(1773495414.238:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb18e79c799 code=0x7ffc0000 [ 1060.227279][ T30] audit: type=1326 audit(1773495414.238:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18e79c799 code=0x7ffc0000 [ 1060.540076][ T30] audit: type=1326 audit(1773495414.238:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.4.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fb18e79c799 code=0x7ffc0000 [ 1060.731716][T22505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4342'. [ 1061.196256][T22517] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.4345'. [ 1062.283106][T22538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4350'. [ 1062.292316][T22538] bridge_slave_0: default FDB implementation only supports local addresses [ 1063.588609][T22561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4355'. [ 1063.847685][T22568] ptrace attach of "./syz-executor exec"[15689] was attempted by " "[22568] [ 1064.006565][T13242] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1064.159190][T13242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.171595][T13242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.194405][T13242] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1064.225191][T13242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.254831][T13242] usb 6-1: config 0 descriptor?? [ 1064.471110][T13242] usbhid 6-1:0.0: can't add hid device: -71 [ 1064.479482][T13242] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1064.504007][T13242] usb 6-1: USB disconnect, device number 52 [ 1064.668608][T22587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4360'. [ 1064.955912][T13242] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1064.966066][ T5983] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1065.158099][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.169085][T13242] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.179411][T13242] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1065.190196][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.208631][T13242] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1065.218575][ T5983] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1065.232317][T13242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.251381][ T5983] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1065.265071][T13242] usb 5-1: config 0 descriptor?? [ 1065.281211][T13242] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1065.291821][T13242] dvb-usb: bulk message failed: -22 (3/0) [ 1065.309138][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.330944][T13242] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1065.349849][ T5983] usb 6-1: config 0 descriptor?? [ 1065.355444][T13242] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1065.382965][T13242] usb 5-1: media controller created [ 1065.409477][T13242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.460444][T13242] dvb-usb: bulk message failed: -22 (6/0) [ 1065.468787][T13242] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1065.494075][T22586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.520992][T22586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.532329][T13242] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input80 [ 1065.567809][T22586] dvb-usb: bulk message failed: -22 (2/0) [ 1065.594518][T13242] dvb-usb: schedule remote query interval to 150 msecs. [ 1065.620160][T13242] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1065.641229][T13242] usb 5-1: USB disconnect, device number 94 [ 1065.752932][T22604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4365'. [ 1065.814546][T13242] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1065.870681][ T5983] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1066.474904][ T5932] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1066.499010][ C1] plantronics 0003:047F:FFFF.0037: hid_field_extract() called with n (132) > 32! (syz.5.4356) [ 1066.636346][ T5932] usb 3-1: device descriptor read/64, error -71 [ 1066.739112][T13242] usb 6-1: USB disconnect, device number 53 [ 1066.812615][T22621] could not allocate digest TFM handle cmac-aes-neon [ 1066.886129][ T5932] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 1067.015927][ T5932] usb 3-1: device descriptor read/64, error -71 [ 1067.136131][ T5932] usb usb3-port1: attempt power cycle [ 1067.181417][T22633] loop5: detected capacity change from 0 to 7 [ 1067.188914][T16632] loop5: [ 1067.191957][T16632] loop5: partition table partially beyond EOD, truncated [ 1067.202057][T22633] loop5: [ 1067.205228][T22633] loop5: partition table partially beyond EOD, truncated [ 1067.337849][T22638] ip6tnl1: entered allmulticast mode [ 1067.485835][ T5932] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 1067.516499][ T5932] usb 3-1: device descriptor read/8, error -71 [ 1067.805205][ T5932] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1067.866567][ T5932] usb 3-1: device descriptor read/8, error -71 [ 1067.996750][ T5932] usb usb3-port1: unable to enumerate USB device [ 1068.198245][T22649] fuse: Bad value for 'fd' [ 1069.586237][ T29] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1069.777450][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.800060][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.821507][ T29] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1069.839452][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.857738][ T29] usb 3-1: config 0 descriptor?? [ 1070.057784][T22668] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1070.073296][T22665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.103900][T22665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.113943][T22668] block device autoloading is deprecated and will be removed. [ 1070.135600][T22671] FAULT_INJECTION: forcing a failure. [ 1070.135600][T22671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.194530][T22671] CPU: 1 UID: 0 PID: 22671 Comm: syz.4.4383 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.194558][T22671] Tainted: [L]=SOFTLOCKUP [ 1070.194564][T22671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1070.194574][T22671] Call Trace: [ 1070.194582][T22671] [ 1070.194590][T22671] dump_stack_lvl+0xe8/0x150 [ 1070.194620][T22671] should_fail_ex+0x412/0x560 [ 1070.194651][T22671] _copy_from_user+0x2d/0xb0 [ 1070.194669][T22671] scsi_ioctl+0x4d1/0x2130 [ 1070.194810][T22671] ? __pfx_scsi_ioctl+0x10/0x10 [ 1070.194854][T22671] ? kasan_quarantine_put+0xbb/0x1f0 [ 1070.194889][T22671] ? scsi_block_when_processing_errors+0x3b6/0x480 [ 1070.194908][T22671] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 1070.194940][T22671] sg_ioctl+0x112f/0x2220 [ 1070.195009][T22671] ? __pfx_sg_ioctl+0x10/0x10 [ 1070.195029][T22671] ? __fget_files+0x2a/0x420 [ 1070.195053][T22671] ? __fget_files+0x2a/0x420 [ 1070.195073][T22671] ? __fget_files+0x3a0/0x420 [ 1070.195093][T22671] ? __fget_files+0x2a/0x420 [ 1070.195115][T22671] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1070.195146][T22671] ? __pfx_sg_ioctl+0x10/0x10 [ 1070.195164][T22671] __se_sys_ioctl+0xfc/0x170 [ 1070.195183][T22671] do_syscall_64+0x14d/0xf80 [ 1070.195200][T22671] ? trace_irq_disable+0x3b/0x150 [ 1070.195219][T22671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.195235][T22671] ? clear_bhb_loop+0x40/0x90 [ 1070.195253][T22671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.195268][T22671] RIP: 0033:0x7fb18e79c799 [ 1070.195284][T22671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.195296][T22671] RSP: 002b:00007fb18f5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1070.195313][T22671] RAX: ffffffffffffffda RBX: 00007fb18ea15fa0 RCX: 00007fb18e79c799 [ 1070.195324][T22671] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 1070.195333][T22671] RBP: 00007fb18f5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.195342][T22671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.195352][T22671] R13: 00007fb18ea16038 R14: 00007fb18ea15fa0 R15: 00007fb18eb3fa48 [ 1070.195376][T22671] [ 1070.444015][ T29] playstation 0003:054C:0DF2.0038: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 1070.457504][T22674] loop5: detected capacity change from 0 to 7 [ 1070.474846][T22674] loop5: [ 1070.479860][T22674] loop5: partition table partially beyond EOD, truncated [ 1070.765928][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1070.765948][ T30] audit: type=1800 audit(1773495425.878:1132): pid=22663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4381" name="bus" dev="ramfs" ino=110829 res=0 errno=0 [ 1071.641070][T13242] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1071.845894][T13242] usb 5-1: Using ep0 maxpacket: 16 [ 1071.852730][T13242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1071.888099][T13242] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1071.925889][T13242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.933919][T13242] usb 5-1: Product: syz [ 1071.957517][T13242] usb 5-1: Manufacturer: syz [ 1071.962148][T13242] usb 5-1: SerialNumber: syz [ 1071.988101][T13242] usb 5-1: config 0 descriptor?? [ 1072.018357][T13242] hub 5-1:0.0: bad descriptor, ignoring hub [ 1072.024299][T13242] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1072.068817][T13242] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1072.212770][T13242] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1072.266768][T13242] usb 5-1: USB disconnect, device number 95 [ 1072.304908][T16632] udevd[16632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.366585][T22712] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1072.399111][ T29] playstation 0003:054C:0DF2.0038: Failed to retrieve feature with reportID 9: -71 [ 1072.435887][ T29] playstation 0003:054C:0DF2.0038: Failed to retrieve DualSense pairing info: -71 [ 1072.483345][ T29] playstation 0003:054C:0DF2.0038: Failed to get MAC address from DualSense [ 1072.512823][ T29] playstation 0003:054C:0DF2.0038: Failed to create dualsense. [ 1072.531744][T22723] loop5: detected capacity change from 0 to 7 [ 1072.551015][T22723] loop5: [ 1072.553971][T22723] loop5: partition table partially beyond EOD, truncated [ 1072.585997][ T29] playstation 0003:054C:0DF2.0038: probe with driver playstation failed with error -71 [ 1072.625195][ T29] usb 3-1: USB disconnect, device number 91 [ 1072.702395][T22730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4398'. [ 1073.084290][T22738] loop5: detected capacity change from 0 to 7 [ 1073.421681][T16613] loop5: [ 1073.433961][T16613] loop5: partition table partially beyond EOD, truncated [ 1073.491043][T22738] loop5: [ 1073.494062][T22738] loop5: partition table partially beyond EOD, truncated [ 1074.757072][ T30] audit: type=1326 audit(1773495429.888:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22764 comm="syz.6.4408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23c099c799 code=0x0 [ 1074.871036][T22743] binder: BINDER_SET_CONTEXT_MGR already set [ 1074.877160][T22743] binder: 22742:22743 ioctl 4018620d 200000004a80 returned -16 [ 1075.286945][T22775] FAULT_INJECTION: forcing a failure. [ 1075.286945][T22775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.316165][T22775] CPU: 1 UID: 0 PID: 22775 Comm: syz.2.4411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.316192][T22775] Tainted: [L]=SOFTLOCKUP [ 1075.316198][T22775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1075.316208][T22775] Call Trace: [ 1075.316215][T22775] [ 1075.316222][T22775] dump_stack_lvl+0xe8/0x150 [ 1075.316248][T22775] should_fail_ex+0x412/0x560 [ 1075.316275][T22775] _copy_to_user+0x31/0xb0 [ 1075.316295][T22775] scsi_ioctl+0x159b/0x2130 [ 1075.316323][T22775] ? __pfx_scsi_ioctl+0x10/0x10 [ 1075.316367][T22775] ? kasan_quarantine_put+0xbb/0x1f0 [ 1075.316401][T22775] ? scsi_block_when_processing_errors+0x3b6/0x480 [ 1075.316420][T22775] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 1075.316450][T22775] sg_ioctl+0x112f/0x2220 [ 1075.316477][T22775] ? __pfx_sg_ioctl+0x10/0x10 [ 1075.316497][T22775] ? __fget_files+0x2a/0x420 [ 1075.316519][T22775] ? __fget_files+0x2a/0x420 [ 1075.316538][T22775] ? __fget_files+0x3a0/0x420 [ 1075.316565][T22775] ? __fget_files+0x2a/0x420 [ 1075.316590][T22775] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1075.316610][T22775] ? __pfx_sg_ioctl+0x10/0x10 [ 1075.316629][T22775] __se_sys_ioctl+0xfc/0x170 [ 1075.316650][T22775] do_syscall_64+0x14d/0xf80 [ 1075.316668][T22775] ? trace_irq_disable+0x3b/0x150 [ 1075.316690][T22775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.316706][T22775] ? clear_bhb_loop+0x40/0x90 [ 1075.316725][T22775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.316741][T22775] RIP: 0033:0x7f7badd9c799 [ 1075.316757][T22775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.316770][T22775] RSP: 002b:00007f7babff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.316788][T22775] RAX: ffffffffffffffda RBX: 00007f7bae015fa0 RCX: 00007f7badd9c799 [ 1075.316800][T22775] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 1075.316811][T22775] RBP: 00007f7babff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.316821][T22775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.316831][T22775] R13: 00007f7bae016038 R14: 00007f7bae015fa0 R15: 00007f7bae13fa48 [ 1075.316857][T22775] [ 1075.626282][T22780] tipc: Enabled bearer , priority 0 [ 1076.088576][T22771] tipc: Disabling bearer [ 1076.131488][T22793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4413'. [ 1076.275888][T13242] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1076.290816][T22795] overlayfs: missing 'lowerdir' [ 1076.537226][T22793] bond0: entered promiscuous mode [ 1076.542452][T22793] bond_slave_0: entered promiscuous mode [ 1076.548495][T22793] bond_slave_1: entered promiscuous mode [ 1076.556382][T22793] gretap0: entered promiscuous mode [ 1076.565956][T22793] hsr1: entered promiscuous mode [ 1076.593936][T13242] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.648238][T22798] netlink: 'syz.5.4416': attribute type 4 has an invalid length. [ 1076.755474][T13242] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1076.909876][T13242] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.81 [ 1076.935911][T13242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.074353][T13242] usb 3-1: Product: syz [ 1077.078657][T13242] usb 3-1: Manufacturer: syz [ 1077.083232][T13242] usb 3-1: SerialNumber: syz [ 1077.295888][ T5886] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1077.322673][ T30] audit: type=1326 audit(1773495432.458:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.379613][ T5983] usb 3-1: USB disconnect, device number 92 [ 1077.441845][ T30] audit: type=1326 audit(1773495432.458:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.467164][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1077.475840][ T5886] usb 6-1: config 0 has no interfaces? [ 1077.485176][ T5886] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1077.496154][ T30] audit: type=1326 audit(1773495432.458:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.508832][ T5886] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1077.518847][ T30] audit: type=1326 audit(1773495432.458:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.549647][ T30] audit: type=1326 audit(1773495432.458:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.577279][ T5886] usb 6-1: Manufacturer: syz [ 1077.601287][ T5886] usb 6-1: config 0 descriptor?? [ 1077.608588][ T30] audit: type=1326 audit(1773495432.458:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.673384][T22804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.680851][ T30] audit: type=1326 audit(1773495432.458:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.710344][T22804] fuseblk: Bad value for 'source' [ 1077.734087][ T30] audit: type=1326 audit(1773495432.458:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.758390][ T30] audit: type=1326 audit(1773495432.458:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.781305][ T30] audit: type=1326 audit(1773495432.458:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22790 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1077.966188][ T5886] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1078.095990][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1078.165989][ T29] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1078.315999][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 1078.322871][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1078.334788][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1078.345005][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1078.345939][ T5886] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1078.354975][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1078.375960][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1078.384986][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.485888][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1078.597515][ T5886] usb usb5-port1: attempt power cycle [ 1078.604579][ T29] usb 3-1: GET_CAPABILITIES returned 0 [ 1078.610259][ T29] usbtmc 3-1:16.0: can't read capabilities [ 1078.910399][T22810] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1078.946470][ T5886] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1078.976373][ T5886] usb 5-1: device descriptor read/8, error -71 [ 1079.224005][ T5983] usb 6-1: USB disconnect, device number 54 [ 1079.230168][ T5886] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1079.260906][ T5886] usb 5-1: device descriptor read/8, error -71 [ 1079.386728][ T5886] usb usb5-port1: unable to enumerate USB device [ 1079.579575][T22821] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4422'. [ 1079.906232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.505216][T22830] FAULT_INJECTION: forcing a failure. [ 1080.505216][T22830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.539300][T22830] CPU: 0 UID: 0 PID: 22830 Comm: syz.6.4425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.539327][T22830] Tainted: [L]=SOFTLOCKUP [ 1080.539333][T22830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1080.539343][T22830] Call Trace: [ 1080.539350][T22830] [ 1080.539357][T22830] dump_stack_lvl+0xe8/0x150 [ 1080.539384][T22830] should_fail_ex+0x412/0x560 [ 1080.539409][T22830] _copy_to_user+0x31/0xb0 [ 1080.539429][T22830] simple_read_from_buffer+0xe1/0x170 [ 1080.539455][T22830] proc_fail_nth_read+0x1bb/0x230 [ 1080.539481][T22830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1080.539505][T22830] ? rw_verify_area+0x2a6/0x4d0 [ 1080.539519][T22830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1080.539540][T22830] vfs_read+0x20c/0xa70 [ 1080.539555][T22830] ? fdget_pos+0x246/0x320 [ 1080.539591][T22830] ? __pfx___mutex_lock+0x10/0x10 [ 1080.539610][T22830] ? __pfx_vfs_read+0x10/0x10 [ 1080.539626][T22830] ? __fget_files+0x2a/0x420 [ 1080.539649][T22830] ? __fget_files+0x3a0/0x420 [ 1080.539669][T22830] ? __fget_files+0x2a/0x420 [ 1080.539696][T22830] ksys_read+0x150/0x270 [ 1080.539714][T22830] ? __pfx_ksys_read+0x10/0x10 [ 1080.539730][T22830] ? __pfx_sg_ioctl+0x10/0x10 [ 1080.539757][T22830] do_syscall_64+0x14d/0xf80 [ 1080.539773][T22830] ? trace_irq_disable+0x3b/0x150 [ 1080.539793][T22830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.539808][T22830] ? clear_bhb_loop+0x40/0x90 [ 1080.539827][T22830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.539843][T22830] RIP: 0033:0x7f23c095cfce [ 1080.539858][T22830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1080.539871][T22830] RSP: 002b:00007f23c183cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1080.539889][T22830] RAX: ffffffffffffffda RBX: 00007f23c183d6c0 RCX: 00007f23c095cfce [ 1080.539901][T22830] RDX: 000000000000000f RSI: 00007f23c183d0a0 RDI: 0000000000000004 [ 1080.539911][T22830] RBP: 00007f23c183d090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.539922][T22830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.539932][T22830] R13: 00007f23c0c16038 R14: 00007f23c0c15fa0 R15: 00007f23c0d3fa48 [ 1080.539956][T22830] [ 1080.785586][T22832] xt_l2tp: v2 doesn't support IP mode [ 1080.791702][T22832] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4426'. [ 1080.943001][ T5983] usb 3-1: USB disconnect, device number 93 [ 1081.071865][T22844] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4432'. [ 1081.220394][T22853] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4434'. [ 1081.293815][ T5833] bt_warn_ratelimited: 55 callbacks suppressed [ 1081.293835][ T5833] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1084.016375][T22901] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4445'. [ 1084.178205][T22903] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4446'. [ 1084.215163][ T5886] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1084.375876][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1084.397291][ T5886] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1084.405310][ T5886] usb 6-1: config 0 has no interface number 0 [ 1084.411736][ T5886] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1084.425550][ T5886] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1084.435057][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1084.443250][T22908] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1084.481294][ T5886] usb 6-1: Product: syz [ 1084.590255][T22908] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1084.602091][T22908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1084.610627][ T5886] usb 6-1: SerialNumber: syz [ 1084.610727][T22908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1084.634882][T22908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1084.675720][ T5886] usb 6-1: config 0 descriptor?? [ 1084.703185][ T5886] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 1084.767326][ T5886] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input82 [ 1084.944533][T22925] tipc: Enabling of bearer rejected, failed to enable media [ 1085.109340][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1085.116670][ C0] cm109_urb_ctl_callback: 5 callbacks suppressed [ 1085.116691][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1085.116906][ T5932] usb 6-1: USB disconnect, device number 55 [ 1085.123124][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1085.316303][ T5932] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1085.843536][T22931] macsec1: entered promiscuous mode [ 1085.870636][T22931] ip6gretap0: entered promiscuous mode [ 1085.890916][T22931] macsec1: entered allmulticast mode [ 1085.896452][T22931] ip6gretap0: entered allmulticast mode [ 1086.015072][T22937] No buffer was provided with the request [ 1086.239394][T22943] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4456'. [ 1086.256390][T22942] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4457'. [ 1086.385847][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 1086.551744][T22953] loop5: detected capacity change from 0 to 7 [ 1086.568707][T22953] Dev loop5: unable to read RDB block 7 [ 1086.574279][T22953] loop5: unable to read partition table [ 1086.667631][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 1086.674097][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 1086.680617][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 1086.702717][T22952] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1086.716179][T21865] Bluetooth: hci3: command 0x0c1a tx timeout [ 1086.728560][T22953] loop5: partition table beyond EOD, truncated [ 1086.816069][T22953] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1086.983884][T22961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4461'. [ 1087.369650][T22970] loop5: detected capacity change from 0 to 7 [ 1087.397619][T22970] loop5: [ 1087.400783][T22970] loop5: partition table partially beyond EOD, truncated [ 1087.653696][T22976] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1087.708994][T22981] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4469'. [ 1088.018238][ T5983] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1088.175977][ T5983] usb 6-1: Using ep0 maxpacket: 32 [ 1088.430745][ T5983] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1088.443693][ T5983] usb 6-1: config 0 has no interface number 0 [ 1088.463093][ T5983] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.476040][T22999] ALSA: seq fatal error: cannot create timer (-22) [ 1088.525848][ T5983] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.539590][ T5983] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1088.549086][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.578946][T23008] loop5: detected capacity change from 0 to 7 [ 1088.591905][ T5983] usb 6-1: config 0 descriptor?? [ 1088.610700][T23008] Dev loop5: unable to read RDB block 7 [ 1088.635522][T23008] loop5: unable to read partition table [ 1088.647701][T23008] loop5: partition table beyond EOD, truncated [ 1088.694842][T23008] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1088.822177][T23018] loop5: detected capacity change from 0 to 7 [ 1088.829378][T23018] loop5: [ 1088.833856][T23018] loop5: partition table partially beyond EOD, truncated [ 1089.035303][ T5983] usbhid 6-1:0.1: can't add hid device: -71 [ 1089.042757][ T5983] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1089.080137][ T5983] usb 6-1: USB disconnect, device number 56 [ 1089.082390][T23026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4481'. [ 1089.547788][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1089.547806][ T30] audit: type=1800 audit(1773495444.688:1155): pid=23038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4484" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1090.228147][T23055] loop5: detected capacity change from 0 to 7 [ 1090.235053][T23055] loop5: [ 1090.238118][T23055] loop5: partition table partially beyond EOD, truncated [ 1092.427697][T14591] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1092.448022][T23099] loop5: detected capacity change from 0 to 7 [ 1092.477350][T16632] loop5: [ 1092.480315][T16632] loop5: partition table partially beyond EOD, truncated [ 1092.502708][T23099] loop5: [ 1092.508250][T23099] loop5: partition table partially beyond EOD, truncated [ 1092.579423][T23082] vivid-000: disconnect [ 1092.606818][T14591] usb 3-1: Using ep0 maxpacket: 32 [ 1092.638752][T14591] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1092.647117][T14591] usb 3-1: config 0 has no interface number 0 [ 1092.660830][T14591] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1092.758508][T14591] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1092.768570][T23104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1092.781041][T14591] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1092.792534][T14591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.820998][T14591] usb 3-1: Product: syz [ 1092.823421][T23073] vivid-000: reconnect [ 1092.835450][T14591] usb 3-1: Manufacturer: syz [ 1092.846070][T14591] usb 3-1: SerialNumber: syz [ 1092.862166][T14591] usb 3-1: config 0 descriptor?? [ 1092.879918][T14591] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1092.899731][T14591] em28xx 3-1:0.89: Video interface 89 found: [ 1093.085612][T23087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.099866][T23087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.631343][T23122] netlink: zone id is out of range [ 1093.667963][T14591] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1093.911805][T23126] sch_fq: defrate 0 ignored. [ 1093.963951][T23128] openvswitch: netlink: Message has 1 unknown bytes. [ 1093.970937][T23128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1094.237839][T14591] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1094.252237][T14591] em28xx 3-1:0.89: board has no eeprom [ 1094.321406][T23144] loop5: detected capacity change from 0 to 7 [ 1094.327699][T14591] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1094.334920][T14591] em28xx 3-1:0.89: analog set to bulk mode. [ 1094.343292][ T29] em28xx 3-1:0.89: Registering V4L2 extension [ 1094.351838][T23144] loop5: [ 1094.354974][T23144] loop5: partition table partially beyond EOD, truncated [ 1094.367566][T14591] usb 3-1: USB disconnect, device number 94 [ 1094.377681][T14591] em28xx 3-1:0.89: Disconnecting em28xx [ 1094.435559][ T29] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1094.446794][T13242] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1094.447045][ T29] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1094.480820][ T29] em28xx 3-1:0.89: No AC97 audio processor [ 1094.501190][ T29] usb 3-1: Decoder not found [ 1094.506167][ T29] em28xx 3-1:0.89: failed to create media graph [ 1094.512911][ T29] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1094.524123][ T29] em28xx 3-1:0.89: Registering snapshot button... [ 1094.532547][ T29] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input84 [ 1094.546529][ T29] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1094.557791][T14591] em28xx 3-1:0.89: Closing input extension [ 1094.563898][T14591] em28xx 3-1:0.89: Deregistering snapshot button [ 1094.581373][T14591] em28xx 3-1:0.89: Freeing device [ 1094.598751][T13242] usb 5-1: Using ep0 maxpacket: 16 [ 1094.691649][T13242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.703347][T13242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.725383][T13242] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1094.725433][T13242] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1094.725454][T13242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.733114][T13242] usb 5-1: config 0 descriptor?? [ 1094.783840][T23152] fuse: Unknown parameter 'goup_i' [ 1095.129630][T23155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4516'. [ 1095.303487][T13242] usbhid 5-1:0.0: can't add hid device: -71 [ 1095.312800][T13242] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1095.363140][T13242] usb 5-1: USB disconnect, device number 100 [ 1095.501185][T23164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1095.564568][T23163] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1096.497132][T13242] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1096.860535][T13242] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 8 [ 1096.882709][T13242] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 1097.686886][T13242] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1098.771280][T23194] loop5: detected capacity change from 0 to 7 [ 1098.789847][T16632] loop5: [ 1098.798578][T16632] loop5: partition table partially beyond EOD, truncated [ 1098.825276][T23194] loop5: [ 1098.856832][T23194] loop5: partition table partially beyond EOD, truncated [ 1099.046879][T23196] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 1099.068532][T13242] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1099.068586][T23200] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4528'. [ 1099.107390][T13242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.140299][T13242] usb 5-1: Product: ᰁ [ 1099.144535][T13242] usb 5-1: Manufacturer: 䩠괷훻ꡚ갥ಓ蚇㎅鶘䆋橘㿀닩祯栿䬭Ϩ컊뙛ￓ嗕嫄쒉䳶俏殈馑徭∁ᯤ貙㟄ᐪ斱ण䜘寜뢋鏋猜ᛛ籜唀Ѧ엎⃭燹툎甶䣠ၤ܇㚗邁쩷ⴢ夺鼗唓Ⴇ豔퇔좝槃憓ᤩ푱 [ 1099.151152][T23204] netlink: 'syz.5.4527': attribute type 9 has an invalid length. [ 1099.290784][T13242] usb 5-1: can't set config #1, error -71 [ 1099.340030][T13242] usb 5-1: USB disconnect, device number 101 [ 1099.471959][T23210] netlink: 'syz.2.4531': attribute type 5 has an invalid length. [ 1099.676868][T23220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4532'. [ 1100.583692][T23237] loop5: detected capacity change from 0 to 7 [ 1100.899462][T16632] loop5: [ 1100.902577][T16632] loop5: partition table partially beyond EOD, truncated [ 1100.911768][T23237] loop5: [ 1100.914867][T23237] loop5: partition table partially beyond EOD, truncated [ 1101.169977][T23242] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4540'. [ 1101.355869][ T5983] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1101.506257][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 1101.513281][ T5983] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1101.522062][ T5983] usb 6-1: config 4 has an invalid interface number: 112 but max is 0 [ 1101.530790][T13242] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1101.538497][ T5983] usb 6-1: config 4 has no interface number 0 [ 1101.544801][ T5983] usb 6-1: config 4 interface 112 has no altsetting 0 [ 1101.554631][ T5983] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 1101.564034][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.572113][ T5983] usb 6-1: Product: syz [ 1101.576451][ T5983] usb 6-1: Manufacturer: syz [ 1101.581114][ T5983] usb 6-1: SerialNumber: syz [ 1101.695881][T13242] usb 3-1: Using ep0 maxpacket: 32 [ 1101.702921][T13242] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.713621][T13242] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1101.726658][T13242] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1101.738202][T13242] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1101.753808][T13242] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1101.762988][T13242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.771309][T13242] usb 3-1: Product: syz [ 1101.775527][T13242] usb 3-1: Manufacturer: syz [ 1101.780310][T13242] usb 3-1: SerialNumber: syz [ 1101.797690][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1101.809628][ T5983] pcwd_usb: The device isn't a Human Interface Device [ 1101.820810][ T5983] usb 6-1: USB disconnect, device number 57 [ 1101.827340][T13242] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input86 [ 1102.005979][T13242] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1102.015410][T13242] (id 0x00) [ 1102.065929][T13242] rc_core: IR keymap rc-imon-pad not found [ 1102.071815][T13242] Registered IR keymap rc-empty [ 1102.076952][T13242] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1102.087473][T13242] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1102.216962][T13242] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1102.241675][T13242] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input87 [ 1102.256243][T13242] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:95> initialized [ 1102.403194][T23248] imon:vfd_write: invalid payload size [ 1102.418242][ T5932] usb 3-1: USB disconnect, device number 95 [ 1102.486006][T14591] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1102.616549][T23261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4547'. [ 1102.656246][T14591] usb 5-1: Using ep0 maxpacket: 32 [ 1102.677789][T14591] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1102.727172][T14591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.890739][T14591] usb 5-1: config 0 descriptor?? [ 1102.901401][T14591] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1103.056695][ T5932] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1103.134814][T23271] loop5: detected capacity change from 0 to 7 [ 1103.141977][T23271] loop5: [ 1103.144968][T23271] loop5: partition table partially beyond EOD, truncated [ 1103.215949][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 1103.274612][ T5932] usb 6-1: config 0 has no interfaces? [ 1103.285126][ T5932] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1103.294326][ T5932] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1103.310754][ T5932] usb 6-1: Manufacturer: syz [ 1103.322014][ T5932] usb 6-1: config 0 descriptor?? [ 1103.462304][T14591] gspca_sq930x: ucbus_write failed -71 [ 1103.468383][T14591] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1103.482237][T14591] usb 5-1: USB disconnect, device number 102 [ 1103.599023][T23281] usb usb9: check_ctrlrecip: process 23281 (syz.6.4551) requesting ep 01 but needs 81 [ 1103.716558][T23281] usb usb9: usbfs: process 23281 (syz.6.4551) did not claim interface 0 before use [ 1104.432945][T23297] bridge0: port 1(hsr0) entered blocking state [ 1104.457085][T23297] bridge0: port 1(hsr0) entered disabled state [ 1104.464105][T23297] hsr0: entered allmulticast mode [ 1104.469635][T23297] hsr_slave_0: entered allmulticast mode [ 1104.480398][T23297] hsr_slave_1: entered allmulticast mode [ 1104.488639][T23297] hsr0: entered promiscuous mode [ 1104.510102][T23297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4553'. [ 1104.519517][T23297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4553'. [ 1104.695986][T23303] [U]  [ 1105.116262][T23314] loop5: detected capacity change from 0 to 7 [ 1105.123068][T23314] loop5: [ 1105.126785][T23314] loop5: partition table partially beyond EOD, truncated [ 1105.506307][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1106.261347][ T5932] usb 6-1: USB disconnect, device number 58 [ 1106.490694][T23331] usb usb9: check_ctrlrecip: process 23331 (syz.0.4563) requesting ep 01 but needs 81 [ 1106.502364][T23331] usb usb9: usbfs: process 23331 (syz.0.4563) did not claim interface 0 before use [ 1107.296483][T23352] fuse: Bad value for 'fd' [ 1108.059887][T23365] xt_hashlimit: max too large, truncated to 1048576 [ 1109.067939][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 1109.078158][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 1109.092457][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 1109.104966][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 1109.114612][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 1109.466581][T23377] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1109.504983][ T5983] IPVS: starting estimator thread 0... [ 1109.607049][T23385] IPVS: using max 56 ests per chain, 134400 per kthread [ 1109.906251][T13242] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1110.127385][T13242] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1110.191020][T13242] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1110.196256][T23393] 8021q: VLANs not supported on caif0 [ 1110.206494][T13242] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1110.206546][T13242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1110.253039][T13242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1110.286081][T13242] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1110.295307][T13242] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1110.315408][T13242] usb 3-1: Product: syz [ 1110.328527][T13242] usb 3-1: Manufacturer: syz [ 1110.400616][T13242] cdc_wdm 3-1:1.0: skipping garbage [ 1110.408155][T13242] cdc_wdm 3-1:1.0: skipping garbage [ 1110.471660][T13242] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1110.500664][T13242] cdc_wdm 3-1:1.0: Unknown control protocol [ 1110.607069][T23388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1110.617642][T23388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1110.688831][ T3472] IPVS: stop unused estimator thread 0... [ 1110.726654][ T5886] usb 3-1: USB disconnect, device number 96 [ 1110.825879][T13242] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1111.079849][T13242] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.102780][T13242] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1111.123114][T13242] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1111.165582][T13242] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.274487][T13242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.347751][T13242] usb 5-1: Product: syz [ 1111.359757][T13242] usb 5-1: Manufacturer: syz [ 1111.371132][T13242] usb 5-1: SerialNumber: syz [ 1111.453659][T13242] cdc_ncm 5-1:1.0: skipping garbage [ 1111.515337][T13242] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1111.554439][T13242] cdc_ncm 5-1:1.0: bind() failure [ 1112.013615][T23395] bond3 (unregistering): Released all slaves [ 1112.058497][T23426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4587'. [ 1112.246670][T23421] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4585'. [ 1112.346108][T13242] usb 5-1: USB disconnect, device number 103 [ 1112.356208][ T5886] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1112.517669][ T5886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1112.527543][ T5886] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1112.538054][ T5886] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.668410][ T5886] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1112.677739][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1112.685947][ T5886] usb 3-1: Product: syz [ 1112.686076][ T24] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1112.690297][ T5886] usb 3-1: Manufacturer: syz [ 1112.713263][ T5886] usb 3-1: SerialNumber: syz [ 1112.856962][ T24] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 1112.873222][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1112.882441][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.921529][ T24] uvcvideo 6-1:250.0: Found UVC 0.00 device (046d:08c1) [ 1112.941030][ T24] uvcvideo 6-1:250.0: No valid video chain found. [ 1112.972757][ T5886] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 97 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1113.213966][T14591] usb 6-1: USB disconnect, device number 59 [ 1113.345862][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1113.513869][T23447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4592'. [ 1113.536138][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1113.545185][ T24] usb 5-1: config 4 has an invalid interface number: 146 but max is 1 [ 1113.556391][ T24] usb 5-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 1113.575544][ T24] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 1113.588114][ T24] usb 5-1: config 4 has no interface number 0 [ 1113.594308][ T24] usb 5-1: config 4 interface 146 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1113.614521][ T24] usb 5-1: config 4 interface 146 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1113.629389][ T24] usb 5-1: config 4 interface 146 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 1113.643602][ T24] usb 5-1: config 4 interface 146 has no altsetting 0 [ 1113.653743][ T24] usb 5-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=80.c2 [ 1113.663447][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.672572][ T24] usb 5-1: Product: 㮛ﾋ臌돁㱾糓䛜渞詵 [ 1113.682465][ T24] usb 5-1: Manufacturer: 䐊 [ 1113.692916][ T24] usb 5-1: SerialNumber: Й [ 1113.930707][ T24] usb 5-1: USB disconnect, device number 104 [ 1114.115861][T13242] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1114.163448][T23459] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4597'. [ 1114.266203][T13242] usb 6-1: Using ep0 maxpacket: 32 [ 1114.277545][T13242] usb 6-1: config index 0 descriptor too short (expected 65535, got 36) [ 1114.414783][T13242] usb 6-1: config 127 has too many interfaces: 255, using maximum allowed: 32 [ 1114.426097][T13242] usb 6-1: config 127 has 1 interface, different from the descriptor's value: 255 [ 1114.440219][T13242] usb 6-1: config 127 has no interface number 0 [ 1114.446710][T13242] usb 6-1: config 127 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1114.462491][T13242] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1114.482080][T13242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.607439][T23466] fuse: Bad value for 'fd' [ 1114.873745][T13242] usb 6-1: string descriptor 0 read error: -71 [ 1114.882061][T13242] hub 6-1:127.2: bad descriptor, ignoring hub [ 1114.892499][T13242] hub 6-1:127.2: probe with driver hub failed with error -5 [ 1115.087330][T13242] usb 6-1: reset high-speed USB device number 60 using dummy_hcd [ 1115.106965][T13242] usb 6-1: device reset changed ep0 maxpacket size! [ 1115.132387][ T24] usb 3-1: USB disconnect, device number 97 [ 1115.136548][T13242] usb 6-1: USB disconnect, device number 60 [ 1115.142774][ T24] usblp0: removed [ 1115.253953][T23475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.291812][T23477] Invalid argument reading file caps for ./file0 [ 1115.299743][T23475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.326646][T23480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.353263][T23480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.454243][T23483] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1115.475880][T13242] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1115.575406][T23488] fuse: Unknown parameter 'fsuuid' [ 1115.625423][ T30] audit: type=1326 audit(1773495470.758:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1115.651275][ T30] audit: type=1326 audit(1773495470.758:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1115.660052][T13242] usb 6-1: config index 0 descriptor too short (expected 65535, got 36) [ 1115.674345][ T30] audit: type=1326 audit(1773495470.788:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1115.706747][T13242] usb 6-1: config 127 has too many interfaces: 255, using maximum allowed: 32 [ 1115.706919][T23491] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1115.716098][T13242] usb 6-1: config 127 has 1 interface, different from the descriptor's value: 255 [ 1115.736702][T13242] usb 6-1: config 127 has no interface number 0 [ 1115.743078][T13242] usb 6-1: config 127 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1115.752245][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.757027][T13242] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 0.40 [ 1115.762013][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.781883][ T30] audit: type=1326 audit(1773495470.788:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1115.804790][ T30] audit: type=1326 audit(1773495470.788:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1115.827991][ T30] audit: type=1326 audit(1773495470.788:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1115.834712][T13242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.851264][ T30] audit: type=1326 audit(1773495470.788:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1115.851307][ T30] audit: type=1326 audit(1773495470.788:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1115.851342][ T30] audit: type=1326 audit(1773495470.848:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1115.851377][ T30] audit: type=1326 audit(1773495470.848:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.2.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badd9c799 code=0x7ffc0000 [ 1116.077406][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4609'. [ 1116.175264][T13242] usb 6-1: string descriptor 0 read error: -71 [ 1116.191728][T13242] ttusbir 6-1:127.2: cannot find expected altsetting [ 1116.206451][T13242] usb 6-1: USB disconnect, device number 61 [ 1116.347915][T23504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1116.728882][T23509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4612'. [ 1116.786002][T23509] tipc: Enabling of bearer rejected, failed to enable media [ 1116.965038][T23515] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4615'. [ 1117.416001][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1117.566130][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1117.580559][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1117.595054][ T24] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 1117.611957][ T24] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1117.632985][ T24] usb 6-1: config 4 has no interface number 0 [ 1117.651671][ T24] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1117.672099][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.682531][ T24] usb 6-1: Product: syz [ 1117.688701][ T24] usb 6-1: Manufacturer: syz [ 1117.693427][ T24] usb 6-1: SerialNumber: syz [ 1117.730080][T21865] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1117.943797][ T24] uvcvideo 6-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1117.966668][ T24] uvcvideo 6-1:4.147: No valid video chain found. [ 1117.976188][ T5932] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1117.988144][ T24] usb 6-1: USB disconnect, device number 62 [ 1118.135127][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4624'. [ 1118.152488][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 1118.201966][ T5932] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1118.214733][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.241245][ T5932] usb 3-1: config 0 descriptor?? [ 1118.451581][ T5932] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1118.474563][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1118.500603][ T5932] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1118.518529][ T5932] usb 3-1: media controller created [ 1118.600085][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1118.641599][T23556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4628'. [ 1119.086712][ T5932] az6027: usb out operation failed. (-71) [ 1119.092473][ T5932] stb0899_attach: Driver disabled by Kconfig [ 1119.105932][ T5932] az6027: no front-end attached [ 1119.105932][ T5932] [ 1119.216696][ T5886] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1119.228799][ T5932] az6027: usb out operation failed. (-71) [ 1119.242241][ T5932] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1119.299567][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input90 [ 1119.345724][ T5932] dvb-usb: schedule remote query interval to 400 msecs. [ 1119.409004][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1119.425195][ T5932] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1119.448542][ T5886] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1119.465840][ T5886] usb 6-1: config 0 has no interface number 0 [ 1119.486831][ T5886] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1119.539407][ T5932] usb 3-1: USB disconnect, device number 98 [ 1119.554481][ T5886] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1119.597809][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1119.632647][ T5886] usb 6-1: Product: syz [ 1119.668068][ T5932] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1119.686276][ T5886] usb 6-1: SerialNumber: syz [ 1119.726152][ T5886] usb 6-1: config 0 descriptor?? [ 1119.741094][ T5886] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 1119.778307][ T5886] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input91 [ 1120.581910][T23579] netlink: 'syz.2.4636': attribute type 4 has an invalid length. [ 1120.619123][T23579] netlink: 'syz.2.4636': attribute type 2 has an invalid length. [ 1120.686206][T23585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1120.698414][T23585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1120.758044][T23585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1120.776913][T23585] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1120.893852][T23587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4639'. [ 1121.186187][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1121.231368][T23597] binder: 23596:23597 ioctl c018620b 0 returned -14 [ 1121.356083][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1121.364117][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1121.380880][ T9] usb 5-1: config 0 has no interface number 0 [ 1121.392090][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1121.401550][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.410675][ T9] usb 5-1: Product: syz [ 1121.414906][ T9] usb 5-1: Manufacturer: syz [ 1121.419974][ T9] usb 5-1: SerialNumber: syz [ 1121.428167][ T9] usb 5-1: config 0 descriptor?? [ 1121.470346][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1121.484102][ T9] usb 5-1: selecting invalid altsetting 1 [ 1121.492502][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1121.510964][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1121.528807][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1121.543730][ T9] usb 5-1: media controller created [ 1121.572471][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1121.766251][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1121.773571][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1121.781797][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1121.887928][ T9] usb 5-1: USB disconnect, device number 105 [ 1122.147315][T23601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4643'. [ 1122.304154][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1122.304687][T14591] usb 6-1: USB disconnect, device number 63 [ 1122.311142][ C0] cm109 6-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 1122.358928][T14591] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1122.466278][ T5932] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1122.524250][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1122.524267][ T30] audit: type=1800 audit(1773495477.658:1187): pid=23613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4646" name="file1" dev="tmpfs" ino=601 res=0 errno=0 [ 1122.655991][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 1122.662848][ T5932] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1122.674401][ T5932] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1122.683645][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.691879][ T5932] usb 5-1: Product: syz [ 1122.696184][ T5932] usb 5-1: Manufacturer: syz [ 1122.700800][ T5932] usb 5-1: SerialNumber: syz [ 1122.707550][ T5932] usb 5-1: config 0 descriptor?? [ 1122.714831][ T5932] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1122.855895][T14591] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1122.926811][ T5932] gspca_zc3xx: reg_w_i err -71 [ 1123.016144][T14591] usb 3-1: Using ep0 maxpacket: 32 [ 1123.024749][T14591] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1123.034027][T14591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.042149][T14591] usb 3-1: Product: syz [ 1123.046633][T14591] usb 3-1: Manufacturer: syz [ 1123.051235][T14591] usb 3-1: SerialNumber: syz [ 1123.059314][T14591] usb 3-1: config 0 descriptor?? [ 1123.066775][T14591] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1123.132472][T23607] binder: BINDER_SET_CONTEXT_MGR already set [ 1123.138617][T23607] binder: 23606:23607 ioctl 4018620d 200000000040 returned -16 [ 1123.149137][T23607] netlink: 15 bytes leftover after parsing attributes in process `syz.4.4644'. [ 1123.280607][ T30] audit: type=1800 audit(1773495478.418:1188): pid=23623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4649" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=116037 res=0 errno=0 [ 1123.467176][ T29] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1123.525897][ T5932] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1123.532241][ T5932] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1123.544750][ T5932] usb 5-1: USB disconnect, device number 106 [ 1123.646101][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 1123.653051][ T29] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1123.661301][ T29] usb 6-1: config 0 has no interface number 0 [ 1123.667784][ T29] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1123.680384][ T29] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1123.690055][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.698159][ T29] usb 6-1: Product: syz [ 1123.702644][ T29] usb 6-1: Manufacturer: syz [ 1123.707541][ T29] usb 6-1: SerialNumber: syz [ 1123.714261][ T29] usb 6-1: config 0 descriptor?? [ 1123.721528][T23622] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1123.931583][T23622] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1124.015887][ T5932] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1124.175941][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 1124.186163][ T5932] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1124.205870][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.226560][ T5932] usb 5-1: Product: syz [ 1124.230777][ T5932] usb 5-1: Manufacturer: syz [ 1124.235405][ T5932] usb 5-1: SerialNumber: syz [ 1124.257947][ T5932] usb 5-1: config 0 descriptor?? [ 1124.270497][ T5932] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1124.494749][T14591] gspca_topro: Sensor soi763a [ 1124.509505][T23626] netlink: 'syz.4.4651': attribute type 8 has an invalid length. [ 1124.526235][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4651'. [ 1124.584526][T23626] gretap0: entered promiscuous mode [ 1124.598305][T23626] gretap0: left promiscuous mode [ 1124.664662][T23641] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4654'. [ 1124.702906][T14591] usb 3-1: USB disconnect, device number 99 [ 1124.735239][ T5932] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 1124.758587][ T5932] visor 5-1:0.0: probe with driver visor failed with error -71 [ 1124.768133][ T30] audit: type=1326 audit(1773495479.908:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23640 comm="syz.6.4654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23c099c799 code=0x0 [ 1124.783784][ T5932] usb 5-1: USB disconnect, device number 107 [ 1124.870362][T23647] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4654'. [ 1125.276827][T23667] loop4: detected capacity change from 0 to 1 [ 1125.289266][T17028] Dev loop4: unable to read RDB block 1 [ 1125.295911][T17028] loop4: unable to read partition table [ 1125.301914][T17028] loop4: partition table beyond EOD, truncated [ 1125.312589][T23667] Dev loop4: unable to read RDB block 1 [ 1125.318574][T23667] loop4: unable to read partition table [ 1125.324691][T23667] loop4: partition table beyond EOD, truncated [ 1125.331331][T23667] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1125.347985][ T29] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1125.370898][ T29] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1125.400365][ T29] usb 6-1: USB disconnect, device number 64 [ 1125.527350][ T5193] Dev loop4: unable to read RDB block 1 [ 1125.532959][ T5193] loop4: unable to read partition table [ 1125.539182][ T5193] loop4: partition table beyond EOD, truncated [ 1125.814005][T23695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4658'. [ 1125.865516][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4658'. [ 1125.931093][T16869] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.955358][T16869] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.991966][T16869] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.006478][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1126.132267][T23720] binder_alloc: binder_alloc_mmap_handler: 23718 200000ffc000-200001000000 already mapped failed -16 [ 1126.165849][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1126.177400][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.190168][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1126.202879][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 1126.213222][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.230259][ T9] usb 3-1: config 0 descriptor?? [ 1126.845335][ T5932] usb 3-1: USB disconnect, device number 100 [ 1127.353211][T23743] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4669'. [ 1127.630830][T23750] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4671'. [ 1127.767913][T23756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.783765][T23756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.925341][T23752] netlink: 'syz.2.4672': attribute type 2 has an invalid length. [ 1128.625606][ T30] audit: type=1800 audit(1773495483.758:1190): pid=23789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4676" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1128.955567][T23796] tipc: Started in network mode [ 1128.960815][T23796] tipc: Node identity ac14140f, cluster identity 4711 [ 1128.968052][T23796] tipc: New replicast peer: 255.255.255.255 [ 1128.974413][T23796] tipc: Enabled bearer , priority 10 [ 1128.982529][T23796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4678'. [ 1128.991997][T23796] tipc: Disabling bearer [ 1129.003731][T23796] cifs: Unknown parameter '@' [ 1129.284350][T23804] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1129.389028][T23806] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4681'. [ 1129.661260][T23817] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4684'. [ 1129.797611][ T5886] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1129.960065][ T5886] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 1129.968930][ T5886] usb 3-1: config 0 has no interface number 0 [ 1129.975073][ T5886] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1129.985348][ T5886] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1129.996194][ T5886] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1130.009283][ T5886] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 1130.019755][ T5886] usb 3-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 1130.028534][ T5886] usb 3-1: Product: syz [ 1130.032943][ T5886] usb 3-1: Manufacturer: syz [ 1130.038014][ T5886] usb 3-1: SerialNumber: syz [ 1130.051130][ T5886] usb 3-1: config 0 descriptor?? [ 1130.071718][ T5886] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1130.165679][T23827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4688'. [ 1130.287614][ T5886] usb 3-1: USB disconnect, device number 101 [ 1130.663071][T23837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4691'. [ 1131.678823][T23854] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4695'. [ 1131.696266][T23854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.703516][T23854] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.710778][T23854] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.717989][T23854] IPv6: NLM_F_CREATE should be set when creating new route [ 1132.514155][T23869] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4699'. [ 1133.865953][T23884] binder: 23883:23884 ioctl c0306201 200000000640 returned -22 [ 1133.901125][T23884] binder: 23883:23884 ioctl b704 200000000340 returned -22 [ 1133.952070][T23893] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1133.969976][T23891] netlink: 'syz.5.4708': attribute type 2 has an invalid length. [ 1134.022156][T23891] !: entered promiscuous mode [ 1134.030187][T23896] netlink: 'syz.5.4708': attribute type 2 has an invalid length. [ 1134.047753][T23896] !: left promiscuous mode [ 1134.121257][ T30] audit: type=1326 audit(1773495489.258:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23890 comm="syz.5.4708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f816e79c799 code=0x0 [ 1134.258248][T23901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4711'. [ 1134.701530][T23904] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4712'. [ 1135.004935][T23911] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4713'. [ 1135.331121][T23915] loop5: detected capacity change from 0 to 7 [ 1135.338416][T23915] loop5: [ 1135.341509][T23915] loop5: partition table partially beyond EOD, truncated [ 1135.665236][T23927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1135.946140][ T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1136.304114][T23931] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1136.315839][ T9] usb 5-1: device descriptor read/64, error -71 [ 1136.453931][T23931] team0: Port device batadv2 added [ 1136.586258][ T9] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1136.639995][T23945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1136.709717][T23947] loop5: detected capacity change from 0 to 7 [ 1136.728713][T23947] Dev loop5: unable to read RDB block 7 [ 1136.740155][T23947] loop5: unable to read partition table [ 1136.784954][T23947] loop5: partition table beyond EOD, truncated [ 1136.821468][T23947] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1136.836844][ T9] usb 5-1: device descriptor read/64, error -71 [ 1136.948966][ T9] usb usb5-port1: attempt power cycle [ 1136.965870][T13242] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1137.029635][T23952] tipc: New replicast peer: 255.255.255.255 [ 1137.079692][T23952] tipc: Enabled bearer , priority 10 [ 1137.126464][T23954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4728'. [ 1137.140270][T23953] loop5: detected capacity change from 0 to 7 [ 1137.162494][T23953] loop5: [ 1137.165452][T23953] loop5: partition table partially beyond EOD, truncated [ 1137.178099][T13242] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1137.187353][T23954] tipc: Disabling bearer [ 1137.196919][T13242] usb 3-1: config 0 has no interface number 0 [ 1137.216951][T13242] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1137.299861][T13242] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1137.317726][ T9] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1137.349466][ T9] usb 5-1: device descriptor read/8, error -71 [ 1137.396363][T13242] usb 3-1: config 0 interface 113 has no altsetting 0 [ 1137.420359][T13242] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1137.431975][T13242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.501712][T13242] usb 3-1: Product: syz [ 1137.556155][T13242] usb 3-1: Manufacturer: syz [ 1137.560880][T13242] usb 3-1: SerialNumber: syz [ 1137.605950][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1137.630536][T13242] usb 3-1: config 0 descriptor?? [ 1137.637462][ T9] usb 5-1: device descriptor read/8, error -71 [ 1137.715341][ C0] usb 3-1: NFC: Urb failure (status -71) [ 1137.724275][T13242] usb 3-1: NFC: Unable to get FW version [ 1137.740380][T13242] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 1137.750833][ T9] usb usb5-port1: unable to enumerate USB device [ 1137.943054][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1138.064764][T23975] loop5: detected capacity change from 0 to 7 [ 1138.074951][T23975] Dev loop5: unable to read RDB block 7 [ 1138.082054][T23975] loop5: unable to read partition table [ 1138.088270][T23975] loop5: partition table beyond EOD, truncated [ 1138.108078][T23975] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1138.117746][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1138.126077][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.137351][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1138.150965][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=ab.34 [ 1138.167312][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.190539][ T9] usb 6-1: Product: syz [ 1138.221293][ T9] usb 6-1: Manufacturer: syz [ 1138.264512][ T9] usb 6-1: SerialNumber: syz [ 1138.321157][ T9] usb 6-1: config 0 descriptor?? [ 1138.380188][T23979] fuse: Unknown parameter '0000000000000000000400000000000000000006' [ 1138.544264][ T9] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 1138.609551][ T9] usb 6-1: USB disconnect, device number 65 [ 1138.740858][T23990] loop5: detected capacity change from 0 to 7 [ 1138.749750][T23990] loop5: [ 1138.752753][T23990] loop5: partition table partially beyond EOD, truncated [ 1138.926770][T23996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4743'. [ 1139.233390][T24010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4748'. [ 1139.495840][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1139.541090][T13242] usb 3-1: USB disconnect, device number 102 [ 1139.547786][T24018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4750'. [ 1139.676216][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1139.682998][ T9] usb 6-1: config 51 has an invalid interface number: 208 but max is 0 [ 1139.700405][ T9] usb 6-1: config 51 has no interface number 0 [ 1139.737485][ T9] usb 6-1: config 51 interface 208 has no altsetting 0 [ 1139.748322][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 1139.772783][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.788822][ T9] usb 6-1: Product: syz [ 1139.798572][ T9] usb 6-1: Manufacturer: syz [ 1139.831987][ T9] usb 6-1: SerialNumber: syz [ 1140.067725][T24010] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1140.104960][ T9] f81534a_ctrl 6-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 1140.122578][ T9] usb 6-1: USB disconnect, device number 66 [ 1141.791753][T24079] fuse: Unknown parameter 'J<@e/\(5_'St' [ 1141.801164][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4767'. [ 1141.821191][T24079] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1142.497504][ T29] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1142.718872][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.739279][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1142.780116][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1142.820390][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1142.860087][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1142.895958][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1142.941399][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1142.952945][ T29] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1142.963775][ T30] audit: type=1326 audit(1773495498.088:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1143.004406][ T29] usb 3-1: Manufacturer: syz [ 1143.021199][ T29] usb 3-1: config 0 descriptor?? [ 1143.060108][ T30] audit: type=1326 audit(1773495498.088:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1143.119775][ T30] audit: type=1326 audit(1773495498.088:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1143.167310][ T30] audit: type=1326 audit(1773495498.088:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1143.256475][ T29] usb 3-1: USB disconnect, device number 103 [ 1143.307082][ T30] audit: type=1326 audit(1773495498.088:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1143.394231][ T30] audit: type=1326 audit(1773495498.088:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1143.465846][ T30] audit: type=1326 audit(1773495498.088:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1143.525961][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1143.569036][ T30] audit: type=1326 audit(1773495498.088:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1143.651545][ T30] audit: type=1326 audit(1773495498.188:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1143.655896][ T9] usb 6-1: device descriptor read/64, error -71 [ 1143.773945][ T30] audit: type=1326 audit(1773495498.188:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24089 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816e79c799 code=0x7ffc0000 [ 1144.045844][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1144.175850][ T9] usb 6-1: device descriptor read/64, error -71 [ 1144.296507][ T9] usb usb6-port1: attempt power cycle [ 1145.056939][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1145.146840][ T9] usb 6-1: device descriptor read/8, error -71 [ 1145.396984][ T9] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1145.444407][ T9] usb 6-1: device descriptor read/8, error -71 [ 1145.594707][ T9] usb usb6-port1: unable to enumerate USB device [ 1145.800517][T24130] fuse: Unknown parameter 'J<@e/\(5_'St' [ 1145.810132][T24130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4782'. [ 1146.865019][T24146] ip6t_rpfilter: unknown options [ 1147.806728][T13242] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1147.976223][ T9] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1148.002423][T13242] usb 5-1: Using ep0 maxpacket: 16 [ 1148.020437][T13242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.037814][T13242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.056297][T13242] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1148.071947][T13242] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1148.087074][T13242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.105315][T24167] tipc: Started in network mode [ 1148.107599][T13242] usb 5-1: config 0 descriptor?? [ 1148.116106][T24167] tipc: Node identity ac14142f, cluster identity 4711 [ 1148.125381][T24167] tipc: New replicast peer: 0.0.0.0 [ 1148.137944][T24167] tipc: Enabled bearer , priority 10 [ 1148.148873][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.159532][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 1148.170866][T24167] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 1148.179598][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1148.193680][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1148.205395][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 1148.268626][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1148.301361][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.325371][ T9] usb 3-1: Product: syz [ 1148.335629][ T9] usb 3-1: Manufacturer: syz [ 1148.346832][ T9] usb 3-1: SerialNumber: syz [ 1148.361385][T24161] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1148.373122][ T9] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1148.386745][ T9] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1148.399701][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1148.635942][ T9] cdc_ncm 3-1:1.1: bind() failure [ 1148.698096][ T9] usbtest 3-1:1.1: couldn't get endpoints, -22 [ 1148.775715][T24175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.788084][T24175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.804172][ T9] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 1148.850088][T13242] usbhid 5-1:0.0: can't add hid device: -71 [ 1148.876237][ T9] usb 3-1: USB disconnect, device number 104 [ 1148.890842][T13242] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1148.946112][T13242] usb 5-1: USB disconnect, device number 112 [ 1149.256274][T13242] tipc: Node number set to 2886997039 [ 1149.757903][T24194] fuse: Unknown parameter 'J<@e/\(5_'St' [ 1149.904565][T24194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4798'. [ 1150.499320][T24211] syzkaller0: entered promiscuous mode [ 1150.504807][T24211] syzkaller0: entered allmulticast mode [ 1150.513729][T24211] tipc: Enabled bearer , priority 0 [ 1150.522841][T24211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1150.626020][T24210] tipc: Resetting bearer [ 1150.662653][T24210] tipc: Disabling bearer [ 1151.022735][T24216] loop5: detected capacity change from 0 to 7 [ 1151.057221][T24216] loop5: [ 1151.060239][T24216] loop5: partition table partially beyond EOD, truncated [ 1151.086609][T13242] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1151.255912][T13242] usb 3-1: Using ep0 maxpacket: 16 [ 1151.264659][T13242] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1151.274078][T13242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.282342][T13242] usb 3-1: Product: syz [ 1151.294798][T13242] usb 3-1: Manufacturer: syz [ 1151.299773][T13242] usb 3-1: SerialNumber: syz [ 1151.307214][T13242] usb 3-1: config 0 descriptor?? [ 1151.350657][T24229] xt_bpf: check failed: parse error [ 1151.645808][T14591] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 1151.717897][T13242] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1151.728094][T13242] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1151.737988][T13242] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1151.746191][T13242] usb 3-1: media controller created [ 1151.758369][T13242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1151.809857][T14591] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1151.818585][T14591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.831158][T14591] usb 5-1: config 0 has no interface number 0 [ 1151.837371][T14591] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1151.848775][T14591] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1151.860081][T14591] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1151.875541][T14591] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 1151.884912][T14591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.892970][T14591] usb 5-1: Product: syz [ 1151.898482][T14591] usb 5-1: Manufacturer: syz [ 1151.903110][T14591] usb 5-1: SerialNumber: syz [ 1151.910581][T14591] usb 5-1: config 0 descriptor?? [ 1151.922352][T24233] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1151.944845][T14591] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1152.140988][ T90] usb 5-1: Failed to submit usb control message: -71 [ 1152.141420][ T5886] usb 5-1: USB disconnect, device number 113 [ 1152.154765][ T90] usb 5-1: unable to send the bmi data to the device: -71 [ 1152.162321][ T90] usb 5-1: unable to get target info from device [ 1152.169166][ T90] usb 5-1: could not get target info (-71) [ 1152.175165][ T90] usb 5-1: could not probe fw (-71) [ 1152.297855][T13242] zl10353_read_register: readreg error (reg=127, ret==0) [ 1152.307448][T13242] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1152.317688][T13242] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1152.625960][T14591] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1152.765839][T14591] usb 6-1: device descriptor read/64, error -71 [ 1153.025832][ T5886] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1153.036187][T14591] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1153.165994][T14591] usb 6-1: device descriptor read/64, error -71 [ 1153.176579][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 1153.193134][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1153.210170][ T5886] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1153.231894][ T5886] usb 5-1: string descriptor 0 read error: -22 [ 1153.243963][ T5886] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1153.265245][ T5886] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1153.286443][T14591] usb usb6-port1: attempt power cycle [ 1153.302664][ T5886] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1153.347854][ T5886] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1153.386061][ T5886] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1153.403752][ T5886] usb 5-1: media controller created [ 1153.469551][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1153.517998][T21865] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1153.538154][T24246] ------------[ cut here ]------------ [ 1153.543663][T24246] usb 3-1: BOGUS control dir, pipe 80006980 doesn't match bRequestType c0 [ 1153.552353][T24246] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.4.4817/24246 [ 1153.562832][T24246] Modules linked in: [ 1153.567219][T24246] CPU: 0 UID: 0 PID: 24246 Comm: syz.4.4817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.578550][T24246] Tainted: [L]=SOFTLOCKUP [ 1153.582881][T24246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1153.593464][T24246] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1153.599319][T24246] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1153.619135][T24246] RSP: 0018:ffffc900046276e8 EFLAGS: 00010246 [ 1153.625213][T24246] RAX: 0000000000000000 RBX: ffff888021f86900 RCX: 0000000080006980 [ 1153.633255][T24246] RDX: ffff888027220580 RSI: ffffffff8c7f11c0 RDI: ffffffff901ed550 [ 1153.641407][T24246] RBP: 1ffff11003f78614 R08: 00000000000000c0 R09: 0000000000000000 [ 1153.649493][T24246] R10: ffffc900046277e0 R11: fffff520008c4f08 R12: ffff88803b8f7100 [ 1153.657563][T24246] R13: ffff88801fbc30a0 R14: 0000000080006980 R15: ffff888027220580 [ 1153.661382][T14591] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1153.665642][T24246] FS: 00007fb18f5a56c0(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 1153.682289][T24246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1153.688968][T24246] CR2: 000000110c3c84e3 CR3: 000000005ebfc000 CR4: 00000000003526f0 [ 1153.697013][T24246] DR0: 0000000000000065 DR1: 0000000000000000 DR2: 0000000000000000 [ 1153.705046][T24246] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1153.713086][T24246] Call Trace: [ 1153.716485][T24246] [ 1153.719417][T24246] ? __init_swait_queue_head+0xa9/0x150 [ 1153.724967][T24246] usb_start_wait_urb+0x12b/0x510 [ 1153.730029][T24246] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1153.735594][T24246] usb_control_msg+0x232/0x3e0 [ 1153.740392][T24246] dtv5100_i2c_msg+0x231/0x2f0 [ 1153.745272][T24246] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1153.750319][T24246] __i2c_transfer+0x79a/0x2020 [ 1153.755128][T24246] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1153.760987][T24246] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1153.766805][T24246] ? i2c_transfer+0xc8/0x2d0 [ 1153.771381][T24246] i2c_transfer+0x1cc/0x2d0 [ 1153.775920][T24246] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1153.781555][T24246] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1153.787736][T24246] ? _copy_from_user+0x94/0xb0 [ 1153.792494][T24246] i2cdev_write+0x113/0x1e0 [ 1153.797134][T24246] vfs_writev+0x4bd/0x990 [ 1153.801461][T24246] ? __pfx_i2cdev_write+0x10/0x10 [ 1153.806512][T24246] ? __pfx_vfs_writev+0x10/0x10 [ 1153.811387][T24246] ? __fget_files+0x2a/0x420 [ 1153.816068][T24246] ? __fget_files+0x3a0/0x420 [ 1153.820754][T24246] ? __fget_files+0x2a/0x420 [ 1153.825345][T24246] do_writev+0x154/0x2e0 [ 1153.829635][T24246] ? __pfx_do_writev+0x10/0x10 [ 1153.834406][T24246] do_syscall_64+0x14d/0xf80 [ 1153.839052][T24246] ? trace_irq_disable+0x3b/0x150 [ 1153.844094][T24246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.850187][T24246] ? clear_bhb_loop+0x40/0x90 [ 1153.854859][T24246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.860836][T24246] RIP: 0033:0x7fb18e79c799 [ 1153.865240][T24246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.885186][T24246] RSP: 002b:00007fb18f5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1153.893673][T24246] RAX: ffffffffffffffda RBX: 00007fb18ea16090 RCX: 00007fb18e79c799 [ 1153.901697][T24246] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 1153.909780][T24246] RBP: 00007fb18e832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1153.917816][T24246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.925813][T24246] R13: 00007fb18ea16128 R14: 00007fb18ea16090 R15: 00007fb18eb3fa48 [ 1153.933814][T24246] [ 1153.936879][T24246] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1153.944152][T24246] CPU: 0 UID: 0 PID: 24246 Comm: syz.4.4817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.955079][T24246] Tainted: [L]=SOFTLOCKUP [ 1153.959385][T24246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1153.969423][T24246] Call Trace: [ 1153.972691][T24246] [ 1153.975609][T24246] vpanic+0x56c/0xa60 [ 1153.979621][T24246] ? __pfx__printk+0x10/0x10 [ 1153.984196][T24246] ? __pfx_vpanic+0x10/0x10 [ 1153.988689][T24246] ? is_bpf_text_address+0x292/0x2b0 [ 1153.993959][T24246] ? is_bpf_text_address+0x26/0x2b0 [ 1153.999142][T24246] panic+0xc5/0xd0 [ 1154.002847][T24246] ? __pfx_panic+0x10/0x10 [ 1154.007277][T24246] __warn+0x315/0x4f0 [ 1154.011243][T24246] ? usb_submit_urb+0x1052/0x18b0 [ 1154.016252][T24246] ? usb_submit_urb+0x1052/0x18b0 [ 1154.021257][T24246] __report_bug+0x29a/0x540 [ 1154.025815][T24246] ? unwind_get_return_address+0x4d/0x90 [ 1154.031453][T24246] ? usb_submit_urb+0x1052/0x18b0 [ 1154.036460][T24246] ? __pfx___report_bug+0x10/0x10 [ 1154.041466][T24246] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1154.047251][T24246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1154.052427][T24246] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1154.058212][T24246] ? stack_depot_save_flags+0x3f3/0x810 [ 1154.063748][T24246] report_bug_entry+0x19a/0x290 [ 1154.068586][T24246] ? usb_submit_urb+0x1114/0x18b0 [ 1154.073591][T24246] ? usb_submit_urb+0x1119/0x18b0 [ 1154.078591][T24246] handle_bug+0xce/0x200 [ 1154.082824][T24246] exc_invalid_op+0x1a/0x50 [ 1154.087309][T24246] asm_exc_invalid_op+0x1a/0x20 [ 1154.092142][T24246] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1154.097769][T24246] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1154.117360][T24246] RSP: 0018:ffffc900046276e8 EFLAGS: 00010246 [ 1154.123410][T24246] RAX: 0000000000000000 RBX: ffff888021f86900 RCX: 0000000080006980 [ 1154.131361][T24246] RDX: ffff888027220580 RSI: ffffffff8c7f11c0 RDI: ffffffff901ed550 [ 1154.139315][T24246] RBP: 1ffff11003f78614 R08: 00000000000000c0 R09: 0000000000000000 [ 1154.147268][T24246] R10: ffffc900046277e0 R11: fffff520008c4f08 R12: ffff88803b8f7100 [ 1154.155237][T24246] R13: ffff88801fbc30a0 R14: 0000000080006980 R15: ffff888027220580 [ 1154.163198][T24246] ? usb_submit_urb+0x10a3/0x18b0 [ 1154.168231][T24246] ? __init_swait_queue_head+0xa9/0x150 [ 1154.173759][T24246] usb_start_wait_urb+0x12b/0x510 [ 1154.178770][T24246] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1154.184304][T24246] usb_control_msg+0x232/0x3e0 [ 1154.189054][T24246] dtv5100_i2c_msg+0x231/0x2f0 [ 1154.193817][T24246] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1154.198655][T24246] __i2c_transfer+0x79a/0x2020 [ 1154.203399][T24246] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1154.209186][T24246] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1154.214975][T24246] ? i2c_transfer+0xc8/0x2d0 [ 1154.219546][T24246] i2c_transfer+0x1cc/0x2d0 [ 1154.224044][T24246] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1154.229659][T24246] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1154.235889][T24246] ? _copy_from_user+0x94/0xb0 [ 1154.240744][T24246] i2cdev_write+0x113/0x1e0 [ 1154.245262][T24246] vfs_writev+0x4bd/0x990 [ 1154.249580][T24246] ? __pfx_i2cdev_write+0x10/0x10 [ 1154.254592][T24246] ? __pfx_vfs_writev+0x10/0x10 [ 1154.259431][T24246] ? __fget_files+0x2a/0x420 [ 1154.264014][T24246] ? __fget_files+0x3a0/0x420 [ 1154.268697][T24246] ? __fget_files+0x2a/0x420 [ 1154.273291][T24246] do_writev+0x154/0x2e0 [ 1154.277605][T24246] ? __pfx_do_writev+0x10/0x10 [ 1154.282358][T24246] do_syscall_64+0x14d/0xf80 [ 1154.286940][T24246] ? trace_irq_disable+0x3b/0x150 [ 1154.291950][T24246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.297997][T24246] ? clear_bhb_loop+0x40/0x90 [ 1154.302662][T24246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.308537][T24246] RIP: 0033:0x7fb18e79c799 [ 1154.312957][T24246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.332544][T24246] RSP: 002b:00007fb18f5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1154.340960][T24246] RAX: ffffffffffffffda RBX: 00007fb18ea16090 RCX: 00007fb18e79c799 [ 1154.348932][T24246] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 1154.356886][T24246] RBP: 00007fb18e832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1154.364841][T24246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.372801][T24246] R13: 00007fb18ea16128 R14: 00007fb18ea16090 R15: 00007fb18eb3fa48 [ 1154.380765][T24246] [ 1154.384072][T24246] Kernel Offset: disabled [ 1154.388383][T24246] Rebooting in 86400 seconds..