last executing test programs: 23m26.133167588s ago: executing program 0 (id=955): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x425241, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x20, 0xe, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x5, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={0x0}) sendmmsg(0xffffffffffffffff, &(0x7f00000029c0), 0x400006d, 0x20000004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) poll(0x0, 0x0, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x800000000, 0x2) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c08, r0) r6 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e90924030000000001"], 0x0) syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="000000400000fe8d7ba5f7c7067a699923a18d0000"]}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x8605dff54cf56be5, 0x17, 0x2, "fb72"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m22.75109347s ago: executing program 0 (id=971): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="cec48d4c37ef574f38d15e0faef69db1b953a8b2b062f82e8f2cdea600dc85c646e0f41bcec1cb1b89e1d6788ab660dccd953ef9ab668ca64ae1a7b1b6b36f5c28f81966875f1b53c0b6980032d9279e71fd4901e1b0433ea1d254fb41", 0x5d}], 0x1, 0x0, 0x0, 0x40000}, 0x1) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000fc0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x59ea, 0x0, 0x0, 0x0, 0x1f, 0x9, "fee8a2ab78fc979fd1e00d96072000001ea89de296fb0000e60080b88e5d96000100", "2809e8dbe108590948221d876697bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90bef903057465406c7f306003d8080000000000000000c200", [0x8000000005, 0x5]}}) ioctl$SIOCSIFHWADDR(r1, 0x89f4, &(0x7f00000000c0)={'macsec0\x00', @multicast}) 23m22.720646045s ago: executing program 0 (id=972): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async, rerun: 64) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (rerun: 64) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) 23m22.471082429s ago: executing program 0 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="200006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 23m19.3471322s ago: executing program 0 (id=995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) fchdir(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 23m19.01204547s ago: executing program 0 (id=998): socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x5}, 0x8) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0xc, 0xb21, 0x1ff, 0x80080}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) (async) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) accept$alg(r2, 0x0, 0x0) (async) accept$alg(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) r5 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x84008, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB='\x00'/10, @ANYRESDEC=0xee00, @ANYBLOB=',blksize=0x0000000000000400,max_read=0x000000000000e6f9,blksize=0x0000000000000e00,max_read=0x0000000000000006,max_read=0x0000000000000008,dont_measure,dont_appraise,appraise_type=imasig,subj_user=*#(,rootcontext=sysadm_u,mask=MAY_EXEC,fsmagic=0x0000000000000002,smackfshat=\x00,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=\x00,\x00'], 0x1, 0x0, &(0x7f0000000580)="0903c87329ad4d3d3cad91621a8de377ccb3a739e80f22fedb60ad6033bfecf765e23f306615354dbe033011b8388f6ffd79c8ea2b159cd306d1ac2db026b5b194ef9dc4a1fe0117883c50f779e999c4945b1cc942c90d9218bf579fd8c2c67d20d00bcb59a3c2ff6cac321b1c1982f187e943a41498bf8fd870e0cb049708fb4e4165688494955c6ab462bf6a42e59a000cc91fbc3e03d387ef88cb3400305686f88acc20361c7b7853ad8b4ba6f610669d1b99949009fceda8bf8fad0366010e2532871108f1968dfa9bf66e08ee507c7dbaa64962d7b5e059f68cf8e4f9f8ab1b6d8479b4") mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x4) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x8, 0x7, 0x1}}) 23m18.367440513s ago: executing program 32 (id=998): socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x5}, 0x8) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0xc, 0xb21, 0x1ff, 0x80080}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) (async) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) accept$alg(r2, 0x0, 0x0) (async) accept$alg(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) r5 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x84008, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB='\x00'/10, @ANYRESDEC=0xee00, @ANYBLOB=',blksize=0x0000000000000400,max_read=0x000000000000e6f9,blksize=0x0000000000000e00,max_read=0x0000000000000006,max_read=0x0000000000000008,dont_measure,dont_appraise,appraise_type=imasig,subj_user=*#(,rootcontext=sysadm_u,mask=MAY_EXEC,fsmagic=0x0000000000000002,smackfshat=\x00,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=\x00,\x00'], 0x1, 0x0, &(0x7f0000000580)="0903c87329ad4d3d3cad91621a8de377ccb3a739e80f22fedb60ad6033bfecf765e23f306615354dbe033011b8388f6ffd79c8ea2b159cd306d1ac2db026b5b194ef9dc4a1fe0117883c50f779e999c4945b1cc942c90d9218bf579fd8c2c67d20d00bcb59a3c2ff6cac321b1c1982f187e943a41498bf8fd870e0cb049708fb4e4165688494955c6ab462bf6a42e59a000cc91fbc3e03d387ef88cb3400305686f88acc20361c7b7853ad8b4ba6f610669d1b99949009fceda8bf8fad0366010e2532871108f1968dfa9bf66e08ee507c7dbaa64962d7b5e059f68cf8e4f9f8ab1b6d8479b4") mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x4) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x8, 0x7, 0x1}}) 8m14.850991383s ago: executing program 1 (id=4031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="020300020a000000000700000000000003000600b8000000020000030000000000000000000000000200010000000000000003020000000003f25b58fc9d7e9aa7782d5facfa3da10005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r3 = socket(0x15, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000180)="9f336d70bf0008000000000000e388fb2c4f7ede37e7de1f2a1cfb06b88038c6ffbf07e70873b0384d86a1ceb4", 0x2d}], 0x2}}], 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x61) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x31, &(0x7f0000000040)={&(0x7f0000000c80)=@newlink={0x48, 0x10, 0x439, 0x70bd2d, 0x4000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6vti={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x0, 0x4, @remote}, @IFLA_VTI_LOCAL={0x0, 0x4, @private1}, @vti_common_policy=[@IFLA_VTI_IKEY, @IFLA_VTI_IKEY={0x0, 0x2, 0x1}, @IFLA_VTI_LINK, @IFLA_VTI_IKEY={0x0, 0x2, 0x4}], @IFLA_VTI_REMOTE={0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_VTI_LOCAL={0x0, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @IFLA_PROMISCUITY={0x0, 0x1e, 0xd3dc}]}, 0x48}}, 0x0) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 8m13.191119214s ago: executing program 1 (id=4035): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x14}}], 0x18}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x1}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x1}, {}, @result}], 0x1c) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0xfffffffffffffff5, 0x6400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) poll(&(0x7f0000000000), 0x0, 0x2) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000200)="a38d", 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 8m12.262511216s ago: executing program 1 (id=4038): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0xfffffffffffffd16) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) move_pages(r2, 0x5, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000140)=[0x80000001, 0xbe, 0xb920], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, &(0x7f0000001440)={{0x1, 0x0, 0x80, {0xfffffffff7f7ffff, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029570a2940466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff5d418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b7fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9db69049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4462e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b315000000002000", "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"}) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1}, 0x0) 8m12.138301494s ago: executing program 1 (id=4039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb41300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$vcsa(0x0, 0x4, 0x8001) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',{roup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x54}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000080)=0xc, 0x4) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd115c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b20424b57f530d0000cbc11c4562d22db88d0edc5daee171cc04d96d9e424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024af63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc80015ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254299f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8e0c00db010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989019901fed6d4be2bfcfe656c9c46bffbe9dd039708f3000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 8m11.243950983s ago: executing program 1 (id=4042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) r2 = dup2(r1, r0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000340)={0x2, 0xb4, "1d23079746d5f7a021f03fa9c25f29577ebf04e299dba69d91f55b02a4855a46740323aedee99196bf4037eaf72fd007a27703f4395fd87941ad80eaab578b7ca3eecff0227f879f10e23da4ee9403e4365d1b88f545284314708f2e54bca3e70c4dc5489ce0bfc9393f1c9234b2414be1afe4de9452e0ddab9dbc6013592f5f9f68f43c6af66ce9552d8fce6737c99a9c5c24881529c38879524b76448475b94653444b7a2740ee84b80470519838b29682ae3a"}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="93", 0x1}], 0x1) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r5, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) 8m11.025783183s ago: executing program 1 (id=4043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x7, 0x5, 0x82, 0x8, 0xfa, 0x40, 0xce, 0x5, [0x6, 0x0, 0x4b, 0x5f15, 0x0, 0x188, 0xffffffff, 0x2], [0xe2]}}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000000001010300000000000000000700fffcb0000e800c00028005000100060000002c00018014000300200100000000000000000000000000011400040000000000000000000000ffff000000002c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa06000340000200000c000280050001002100000006000340000000002c00018014000300fc000000000000000000000000000000140004000000000000000000000000000000000008000c400000000408000c40000000000600124000020000200004801c00038008000240000004ff0500010008000000080002400000000c4ad28e7fdce538db6d0a4f892e4317d08be31c46b8a8e0a7ac9082912d2e16ce7c84333ad96963e346e86a9de958ea0fe8eaef1f64a3a0222d70681904e3756d667c45096a79c0f06527f2fe0cba79ebbba0c7bb7d147172bc619b0561387eefd9779f36c35e088effa7107bbbe14dafed5838fa5675dd443d535ca79bf05fca6bb194c80412f0a658d46847dff417383f7ec170e665f80e68d22ffc1e8b89cc1624f82a69e871485bc7d27b9e56e5453cc9b17da4ae40623b32f7554340b970555f4ae2342c295d20957539d610dd4e50daa618dd61a3519a9ce3fc"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x3fe, 0x101800) io_setup(0x6, &(0x7f0000001380)) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)) socket$inet6(0xa, 0x1, 0x3) sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x44084) recvfrom(r4, &(0x7f00000013c0)=""/4096, 0x1000, 0x20, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x5, @loopback, 0xfff, 0x3}, 0x80) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 8m10.7857405s ago: executing program 33 (id=4043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x7, 0x5, 0x82, 0x8, 0xfa, 0x40, 0xce, 0x5, [0x6, 0x0, 0x4b, 0x5f15, 0x0, 0x188, 0xffffffff, 0x2], [0xe2]}}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x3fe, 0x101800) io_setup(0x6, &(0x7f0000001380)) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)) socket$inet6(0xa, 0x1, 0x3) sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x44084) recvfrom(r4, &(0x7f00000013c0)=""/4096, 0x1000, 0x20, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x5, @loopback, 0xfff, 0x3}, 0x80) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 7m5.433974347s ago: executing program 3 (id=4266): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {}, [@IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 7m5.302554378s ago: executing program 3 (id=4267): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x0, {0x1}, 0xfe}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r5, 0x0}]) dup3(r0, r1, 0x6700000000000000) r7 = socket(0x26, 0x6, 0x24) bind$inet(r7, 0x0, 0x0) 7m4.796966134s ago: executing program 3 (id=4271): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a000d935a2d163eccf23874b5660e1a34a1ee68dcf4a42a932ef534b04a544380f4251c96995c5385656f8060d90a715d5b7d26bf9e59f5de32531b1c29f3281fa926bcd0233a6fc6e368afd9aea4b9928aa41c916c4fbc15d2da55644527c2b8a08a9f0c9c08194a540520ef1df61dfd191aca52e12b0f", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket(0x25, 0x803, 0x2) (async) r5 = socket(0x25, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000c0000000000000000950000000000009059a89f17cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0, 0x7c}}, 0x40000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0, 0x7c}}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c8, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000004c0)=@req={0x28, &(0x7f0000000480)={'veth0_to_team\x00', @ifru_settings={0x980, 0x5, @te1=&(0x7f0000000440)={0x4, 0x3, 0xc3, 0xffffffd4}}}}) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x14, r13, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x10) (async) sendmsg$TIPC_NL_MON_GET(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x14, r13, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x10) 7m4.019974471s ago: executing program 3 (id=4274): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000007010040"]) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x122, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 7m3.687179205s ago: executing program 3 (id=4276): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {}, [@IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 7m3.654576233s ago: executing program 3 (id=4277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x497c, 0x0, &(0x7f0000000240)={0x2, 0x10, 0xfffc, 0x360}, 0x8, 0x7, 0x180, 0x0, 0x1, 0x101, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x78bc, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x17, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x2}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000038005080080003000bac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 6m48.510732401s ago: executing program 34 (id=4277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x497c, 0x0, &(0x7f0000000240)={0x2, 0x10, 0xfffc, 0x360}, 0x8, 0x7, 0x180, 0x0, 0x1, 0x101, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x78bc, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x17, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x2}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000038005080080003000bac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 15.183015936s ago: executing program 5 (id=5472): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029001600"], 0x30}}], 0x2, 0x0) (async) unshare(0x22020600) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r4 = syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r4, 0x48ce, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000180)={0x18, 0x0, {0x4, @remote, 'batadv_slave_1\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r8, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_to_hsr\x00'}}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0xa1, 0x3) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f00000005c0)={0x0, 0x9, 0x201d}) r10 = fsmount(r0, 0x0, 0x0) (async) write$apparmor_current(r2, &(0x7f00000001c0)=@profile={'stack ', '/dev/snd/controlC#\x00'}, 0x19) (async) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknodat(r10, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) r11 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3', 0x6) fallocate(r11, 0x3, 0x0, 0x2) 14.839367925s ago: executing program 5 (id=5473): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000380)=@ready={0x0, 0x0, 0x8, "3086a67e", {0x1, 0x4, 0x3, 0xff, 0x7}}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x0, 0x7fff}, 0xc) r3 = fsopen(&(0x7f0000000340)='romfs\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8, 0x0, 0x7, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x8000}]}}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x1000800, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x4f, 0x8, "f4f5a3e39637de7acb9d394f18c82796a875b6d980c612942ca943b3df5357f46e71092f90632b0712212d3d5863c0bf2096a23d1bc40c6cbbd4136e4ddcb48f24ad29d276881b9af4cd30"}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 11.494815247s ago: executing program 5 (id=5484): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) getpeername(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x0, 0x3, 0xfffffff9}, 0xc) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x27, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2) mmap$snddsp_control(&(0x7f0000b1f000/0x3000)=nil, 0x1000, 0x4, 0x80010, r2, 0x83000000) getpeername$qrtr(r3, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendto$inet6(r1, &(0x7f00000002c0)="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", 0x1000, 0x0, &(0x7f00000012c0)={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000001300)={@multicast2, @loopback}, &(0x7f0000001340)=0x8) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x6) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000001380)={0x2, "08bb723a7472ac602ff6b7e91c1227daad5b63ac1921d03dc111e8092cb7e07898e8478c61d8f69a23afbfbe2fe9327b8080e04e26be44a6a038f3f81305258c", {0x100, 0xcc15}}) syz_usb_connect(0x0, 0x9b4, &(0x7f0000001440)={{0x12, 0x1, 0x300, 0x56, 0xb0, 0x94, 0x20, 0x1413, 0x5400, 0xc57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a2, 0x3, 0x9, 0xfb, 0x80, 0xb, [{{0x9, 0x4, 0x8d, 0x6, 0xd, 0x1d, 0xf2, 0xe2, 0x2, [@hid_hid={0x9, 0x21, 0x8, 0xfa, 0x1, {0x22, 0xbe9}}, @hid_hid={0x9, 0x21, 0x199, 0x0, 0x1, {0x22, 0x9e}}], [{{0x9, 0x5, 0x5, 0xc, 0x400, 0x0, 0x5, 0x9}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x7, 0xe, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x0, 0x2, 0xb1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2f, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x7ff}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x3, 0x5, 0x7, [@generic={0x90, 0xe, "8432791f22b305c1d13664e7c7f5eed3981130ddd9674d414cfa44be115a2926d5c8c52bf3073b86cba87dfa29da38d257a48eeb49c4c3e07f6e78f5f77f2a3d518dff85f9b205d5c23980e6ad2534638721c56c7e8009e65a2b7bd8857a0286cc8bdd8ccab7754360478afe3bf5a71e85f48a552fcd025e63cbf72641a241a2e7f065c62d021a1ffd85a4f75070"}, @generic={0x45, 0x6, "5ec38e6aa897a8aaae42decda984145ee16223a5d86d862c98625a2bf00e6aeb2625a41cbeacd6aaac032d23e0b03ddd8de2444788ee9e222419eeb157e3a87d7cbd69"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x1c, 0x1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f}, @generic={0x38, 0x6, "947be074049b94ccf41102f375c5ba8028c9dac83a9e802827b82143af978f2159ffb195db1aeaed0d1f8e2cda14c8927938abfef7dd"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x6, 0xa, 0x80}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x81}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x7, 0x40, 0xcb, [@generic={0x24, 0x4, "0f30715db0d82f7a6ef7fabb9117db39f93b60b10aec66c7e3420020bef0c0020bb7"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x6, 0x5, 0x2, [@generic={0x2c, 0x1, "5a636272b47498ac44338b72e81a99195ba79758ae9d731d3e0fa7b07a02e5517d779683cc7e90722d43"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x4}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x8, 0x4, 0xf7}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x7, 0x0, 0x8}}, {{0x9, 0x5, 0x2, 0x1, 0x7e7, 0x6b, 0xa6, 0x1}}]}}, {{0x9, 0x4, 0x5a, 0x2, 0x10, 0x41, 0x5b, 0x41, 0x8, [], [{{0x9, 0x5, 0x2, 0x10, 0x400, 0x2, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x8, 0x5, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x80, 0x8, 0xe9, [@generic={0x82, 0x9, "b77ea54f16775ebccacbed635e654cba6f3d806fa2886c0c3b7e458c9fb8459b275c55a929a583a2ae4e63bc4901e88886806cbe46395efc4cd320cce062866dfd1d0cea4cfd74082bb17214b0532f693f13e8514b7f2e5192fea1fdab13ae97734d63b865e775bbb6c8f00c6bfdf4b2e828cc0221087389abcfc81e2e936c40"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x9}]}}, {{0x9, 0x5, 0x2, 0x3, 0x76099b70d1453aca, 0x9, 0xe, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x4}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x8, 0x7, 0x9, [@generic={0x7a, 0x0, "d468b39e2c7a82562b742cd58b71d7ae6eaf6d1f68bd0b77bb4d6701142a9f0bb3a3da91cda71ed1b034e43b35b13fc7f12da739d2a142beb404479cc2c1b155ffdebe2f5266ff1c04393cd6ac8c4054c28c9a813338ac5084bd00ab846d8972db6c94ce8d852b7a0e5d2de47a3beaed5da5b65a7de55d1d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x15, 0x200, 0x0, 0x8, 0x4, [@generic={0x1c, 0x30, "74176b49e71590e07cc05c31e97b93ee9159409a4f7475199e49"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0xe, 0x7ad}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0xf, 0x2, 0x81}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x9, 0x30, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x9a, 0xfe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xf978}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x4, 0x0, 0x8, [@generic={0xee, 0x11, "fcde71734559b67eb5f704e2eb6a1893a4ad0b8a17597d07d0db240e6c5b7daa4ab096e37872a98ec515ace82cabbffa0876845d92dff23684f3ce890eb4ace65dc1948e890039acf138812ff50b54429d344593fcb21147ea9a68f791db47d17d437002cc5ae1e77c0000a3f53f9f4f3f9891e49d88701b173f80b4bca3c9db1bcf9b6dce29458fe0fbfa4dc2605ea902ab0ffb5c3dc9d0f8cb6dadb58923acd70c56d48962729f079c4889065aed1ab0cb9f88a7ce72e1ceec1b4c317dab5d2036309d3963f6b70ffdd8b8c61e30edeaf1b0768714f7d22dc631ca332d038da372403b8e2509d3017549e5"}, @generic={0xf9, 0xd, "466296253fa7002da130b41f28b2c47cd80a466b9ff3e4cc7d9189344afa50e4a07702015eab8471c3287ac210188472942dd7440a5080bb17e24aff1bfb570bc237eaae522bc505c2a157f2e2ebf045f306f9d4ab9c5e177124458d631e1ec5770593283d4a781c7e6a816ee1e770d5b754b174d4cbca6a5d0cd170773d74a25d3290a18e2fbecc0fe31f2b6d4a8846bb979fcf218968c804e138df4138282a05291f4a0ae2c2467e5426214e947f3c9c3c8280bffcafcca0c6a2ff73423d847f7b441897b4abdb31c683165747d65d77c725bae3157154254d4d8b314b41ce8f9cd7db29cb343742076d3dd06bca9715e3dfeeb569a4"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x2, 0x9, 0x1c}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x4, 0xb}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x3, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xe}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x3, 0x7, 0x7, [@generic={0x30, 0x21, "261bec71872f355b8150f8d937c5dbb61b200d20ec1506c056b63b18ea77cedd27a1f2a71a25adcd24c2ef13777d"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x7ef, 0xa1, 0x10, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x3b7, 0xb, 0x1, 0xb7}}]}}, {{0x9, 0x4, 0x21, 0x40, 0x8, 0xff, 0xff, 0xff, 0x8, [@generic={0x50, 0xf, "f20ba3c9285b889e2e5bd41b342625ca34922ecae7aec3e1ccb342e1a45a4fcfcc2e79a73c42d2095ccf0c96b8b867d28ab553d5dd104f887f017e30175266eb92277c8b5738e25ea12ab0885434"}], [{{0x9, 0x5, 0x8, 0x1, 0x200, 0x7, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa7, 0x8001}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x81, 0x3, 0x4, [@generic={0xeb, 0x23, "4178abc669dfcfa0225837e591514d79580f5db786a23c6e03f1f1d76467843afc840e362fe70b85b804c6622cce0f30cf69a183f7be39161f369a9a6a974bbec2ff04671c0363585f72d469efb72138a251b139560ef4d37e1681ec2c1ba97622fa10ffb800655316b730a67a4b17821e6015297c527ea38f6cadd89291d63a6b4a1307dae7ed3cbdc1005dc4e70322a5cf8fcc3c426844a58791f3ea8574aa84388b4e98cb51ee72bb61edeb5856e1c1da610b66b3c9ba42db6775306079cffd0fecbe03906b4413b67e930166b6bf6b292139fa56b0e4a983e6ac20b78486fab08f2eb8ad6f6dac"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x200}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0xf9, 0x40, 0x1, [@generic={0x9d, 0xd, "a39ba8fdc5ba2c0ac1dc3661629e76b6515495d9a97af3d9d9a97fd7c6703f683522fe0e27a2c2ac52bc6ae28218932ce30cb1e8c57a99c7aa979eba58e534f643346f569597aed88d48ecc03ad0e33c739ee8478f0f1cfad4723b3feb792dce397327aa5b6790c5cf293287aa542a7a2eafc7a01477e417b85a8ae191a1a11d45caa8e711e6d87bd6dd911773ac9314ecc6272509a6e287b720eb"}, @generic={0x68, 0x1, "0b9ce636b745fc8ef3773a51bec8605f77dbcc6ee5668c1b0994483a70c179572f14c0d54d97b2de011151e9728c59d71ff5011ec8eabcad74dae2f72eb65627e32305a36f1db5e24a724066b879ffdb9a1cfa2c0a7aee2e802d39fcc32203a08e90f5440501"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x58, 0x9, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x0, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf8, 0x752f}, @generic={0xab, 0x9, "2713e8e1d3ceda922c3242dbf82b3a9d26fe92d205968053b31283ab4b14511a3ddd3a4c5cd2cfa20ae4c1d105766bd7f77749bfc8491c37f93d8b412ba6b59c1d38db2933cd69aec1d8241576b229befdb6a6b4c0d30c5c62399da0813dde484adb57ee0921409e6e4f3bee5ee17f1169bf8b7bd3cf9684df595eff6a48e544ef509a8e2e7031ad9aaa4e72f71ad2e74a1177a164bc86bc61b866daa9e4d135474867acba0afdec2b"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0xc, 0x3, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x0, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x9d, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}]}}]}}]}}, &(0x7f0000002100)={0xa, &(0x7f0000001e00)={0xa, 0x6, 0x1, 0x1, 0x5, 0x72, 0x20, 0x8}, 0x32, &(0x7f0000001e40)={0x5, 0xf, 0x32, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0x2, 0x8800, 0x5, [0xc000, 0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0x40, 0x80, 0xe686, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x3, 0x7, 0x9, 0xf29b, 0xa4}]}, 0x4, [{0xa6, &(0x7f0000001e80)=@string={0xa6, 0x3, "b81c81371e7d03e5f7275f036caada6f2b910bae8302e494699876f0c0bc1f847e823e736d95de801063b693b80cf1173654ba18c6de62a2e18c3d1ab075cc16a90ce9dfd647683f02f60fbe8cdd0757c7875bd6c47e66c595fbe6f24d5e684d1466f95b715d2f6fb8a2bfa7984574fdc16b542316454b06cd81377051d71626c202fb48692406ca7d758daf9f4d78eccd27b0380421975ffcde704af2b99a618e0f37fc"}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x1409}}, {0xd5, &(0x7f0000001f80)=@string={0xd5, 0x3, "4b063a2c0a036a3c38e7f55c1eed7469c560ef4956a42b91e70a09d0f664b715cf6ec2a8ff56ad480fe21b4184a6425bd37c16e318ae0931d04c4ed77e5b0f8122d346d6ee79131c3a3c4d4a5cae23e7b7f442d5e4709ef5dab9242f093545c1db93a012b57faaffb5ce9ac9b3ba34a7447c466eab01b37cb1361648025c2d500a96e5bb5da00926113ebdcf17e13c4d7f9b2c14d903c3780cefdbc15ee9be845b9abc9df458755d9a9d0a059fb00881e9a62f8dcbb231d41759b2edc87fa5a9a8b18fa8549ccc6fff5346c44b45fc6a440d8e"}}, {0x5c, &(0x7f0000002080)=@string={0x5c, 0x3, "9df68a5fdd9a5d9c603e9b62d7d9b2afb31a73b84e80fdd7750678447902ab7eb71cbc5f64047ff4dc4473cd6b6d1042138ca8aba008f01d3cffa712940ebf5b67814e25f396a5e630d34a78ee4b06ea7bf9e5d887ea702bdd81"}}]}) syz_open_dev$sndmidi(&(0x7f0000002180), 0x4, 0x1c400) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x70, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x400}, @NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4040980) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000002300)={0x0, 0x80, [0x0, 0x2, 0x1000, 0xff, 0x3, 0x4]}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000002380)={&(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x10}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000023c0)={0x2e, 0xe, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @pad1, @generic={0x6, 0x63, "5df90532758107eb26566b614890820bceb52bce7f37915f667986fdc93c7d9f91638fa23f69d832a29a9f47bf1e35430ef26c5c01505242337aa8e267c273dd65ba436a3fb95c1eb67ebe2bd94eebd5d62516c1800c5f30d3038753b64a2108fb64f6"}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x80) r4 = syz_mount_image$fuse(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', 0x40000, &(0x7f00000024c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}}, 0x1, 0x0, &(0x7f0000002600)="afc9e34dad71fbce8b2c023acb81cac7a0ca2e516c157e97eb926a0b389dd3417a97954050c1fb6dc53536a423f8bcb449965ad4670d0b4395a66c94c305ebdba9d51575acd9637249ab772d86a34213cac64c0f76e81229f939ed47d473f321329ed22c9bdc900aa1364d28349a23e9c53a55c41b74e13ce54b4d563cbe2d60816952339fbbe6f6c1509380b6aba77c5cf44bbb12f16ea7b012c9f118d069dc6f3be78f7e5d70995bf028eb52c396f57dd7a07330ee7c48c252bdf1") linkat(r4, &(0x7f00000026c0)='./file0\x00', r2, &(0x7f0000002700)='./file0\x00', 0x400) keyctl$join(0x1, &(0x7f0000002740)={'syz', 0x0}) sendto$inet(r3, &(0x7f0000002780)="734a15371158f5baaeab6e62790dd703a717bb0795", 0x15, 0x8000, 0x0, 0x0) mbind(&(0x7f0000f2f000/0x2000)=nil, 0x2000, 0x2, &(0x7f00000027c0)=0x4, 0xad8, 0x5) syz_open_dev$media(&(0x7f0000002800), 0x4c12bb84, 0x100) eventfd2(0x0, 0x80001) read$FUSE(r3, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r5, &(0x7f0000004880)={0x38, 0x5, 0x24, 0x4, 0x8001, 0x3, 0xb760, 0x3ff, 0x3, 0x4a}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000048c0)={0x0, 0x989680}, &(0x7f0000004900)) 9.289874411s ago: executing program 6 (id=5492): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0xd00, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f07917100074100000000000000"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0xc4}], 0x1, &(0x7f0000000200)}, 0x401}, {{&(0x7f0000000240)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000380)=""/148, 0x94}], 0x3, &(0x7f00000006c0)=""/21, 0x15}, 0x7ff}], 0x2, 0x20002042, &(0x7f0000000780)={0x0, 0x989680}) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) accept$packet(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 8.646682484s ago: executing program 6 (id=5494): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0xa, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usbip_server_init(0x3) inotify_init() r2 = syz_io_uring_setup(0x12c2, &(0x7f0000000140)={0x0, 0x5eda, 0x10100, 0x1, 0x12a, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x1, 0x0, r0, &(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x800, 0x2000, 0x1, {0x0, r6}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 8.496485245s ago: executing program 5 (id=5495): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x2e, 0x6, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, '\x00', "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "e900"}, 0x28) recvfrom$inet6(r4, &(0x7f00000000c0)=""/104, 0x68, 0x10002, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x1000000, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x2c, 0xffffffff, 0x2}) write$snddsp(r6, &(0x7f0000000000)="091296d9434665bb83000000005f4302ee1b45fdaaac", 0x16) 7.644479939s ago: executing program 6 (id=5497): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) truncate(0x0, 0x80000) (async) r2 = socket(0x200000000000011, 0x2, 0x1) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c2000000080007000000006800000d0690780a010100ac1414bb0044045d030000000000000000000000000000000000000300004e2100004e210085a0010000000100000001000000"], 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x149182, 0x10) ioctl$TCSETA(r3, 0x5406, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES32=r4], 0x5c}}, 0x0) socket(0xf, 0x2, 0x6) (async) r8 = socket$kcm(0x10, 0x400000002, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0x3c}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) (async) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000001600), 0x42fffffe) (async) bind$packet(r2, &(0x7f0000000180)={0x11, 0x19, 0x0, 0x1, 0x1}, 0x14) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x3}, 0x4) (async) syz_emit_ethernet(0xfdef, 0x0, 0x0) 7.40492265s ago: executing program 6 (id=5500): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000200)={"1b00", 0x839, 0x5, 0x2, 0x207fe, 0x0, "0400b7e7a2aac9779bf500", '\x00', "0300", "e8cc1384", ["8b02000000e45cfe00000d00", "abd28640b6c65cbe45e65670", '\x00', "00ee360500"]}) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000040)={0x1, 0x2, 0x0, [{0x59408a11, 0x8, 0x3, 0x0, 0x3, 0x72, 0x5, '\x00', 0x4}, {0x2e12, 0x6, 0x6c16, 0xf, 0x9, 0x0, 0x80, '\x00', 0x8001}]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 7.324065675s ago: executing program 7 (id=5501): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x60, {0x763039aa, 0x114}, 0x10, 0x5}) 7.076738081s ago: executing program 7 (id=5505): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000200)={0x7, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000200)={0x7, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @local}}}, 0x108) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x26, 0x2000}, 0x20) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) 6.99096643s ago: executing program 5 (id=5506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001380), 0x214002, 0x0) sendmsg$can_j1939(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000013c0)="aadf6539bb5d2fbd722e2aaa4488f9646939002dabb5f1d798e8ba051ef3ec8227c67e39a6017a9b85188753f7ede2a44168d0186335b0fbd0e0acbf7e950a19b2e6ed115b4fa1653db00a9d57c8214148ff58e22fd5cbf499c71544b557c4d7b861f94eef88cec94d04f022724a4fc4d20c9f7c3c3c62f7b5e32bb63d5f1a292624f3e3227b5633d13e5c18fb020b5acd57dcb17ac6610c5849b2a6cb112c5b6b", 0xa1}, 0x1, 0x0, 0x0, 0x44050}, 0x40) unshare(0x22020400) fallocate(r1, 0x28, 0x10001, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x0, 0x400000, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x24, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001540)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = socket(0x18, 0x800, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0xe7, {0x400e802, 0x4, 0x7, 0x3f}}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000014c0)=[{0x9, 0x0, 0x0, 0xfffff036}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x36, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x240480d0}, 0x0) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) ioctl$NS_GET_USERNS(r9, 0x8008b705, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000380)={{r7}, 0x0, 0x4, @unused=[0x2, 0x0, 0x7, 0x1], @subvolid=0xb}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.966598632s ago: executing program 7 (id=5508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @local}, "0801c4a7a5d8801f"}}}}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x250, 0x24, 0x3fe3aa0262d8c783, 0x3, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x220, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0xfffffffa}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x267}}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "ffb14159aebc3785ebc5f65c42b63bc3"}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000080000007e0000000000000027000000000000009500240300000000000000dfc593749c4903d71d0d172c2310ffbf4fde7ff84884ed2e234c4e1060b98733693b4a9d05c0d5d2c5e6e3c83f720322095928d417bbb3f14761f2fed9df3063b83a7de4797ad092c0d6d1045fac2c209c4bacc4a1b68917c6016d8f63b5ac91f69b051deb7d1a12fd55c497bf4414a5e608d1a17ae672"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8d, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 6.798833461s ago: executing program 7 (id=5509): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000a00)=[@in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) listen(r0, 0xfffffffc) r2 = fsopen(&(0x7f0000000200)='binfmt_misc\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa0100ff}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x16}, 0x58) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) 6.099684237s ago: executing program 4 (id=5510): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x200004, 0x804, 0x4, 0xf, 0x120000, 0x83, 0xfffffffffffffffc, 0x8, 0xa000000000000001, 0x2, 0x0, 0x101, 0x6, 0x10000000000001], 0xffff1000, 0x141210}) timer_create(0x5, &(0x7f0000000180)={0x0, 0x34, 0x0, @thr={&(0x7f0000000480), 0x0}}, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0800480007000000000014000000456f006c00660000401190780a010102ac1401000000000000009078040000000200000008"], 0x3a) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000040)=@x86={0x7, 0x72, 0x81, 0x0, 0xd8, 0x7, 0x8, 0xff, 0x78, 0xd4, 0x21, 0x5, 0x0, 0x200004, 0x8, 0x4, 0x1, 0x3, 0x0, '\x00', 0x79, 0xe}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES8=0x0, @ANYRESDEC=r5], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="d2880100373004ba9d327880080001006873720014000280f5ff0100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="6af5ef64e4d619b82234593a1cdae111402480c07fdf22102a0aef727569f0d66f5518d15c698cf8440b09a96c50da1e64125a68a139834eb563e94ea3c5d7cf5e2ef79f26e9f6950d62ff99bda975715edf8b8a47f3b58386ae010e7c70da8b3a91f10122765fe5634231a33f19abaef239f06a39fa4b1490e4168c9f6b4ed99ed9c7602a51803fbd4ad5f1634c0f3128ac62d39626de187f709a75a68c8480a1"], 0x40}}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.869923384s ago: executing program 6 (id=5511): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x400000042, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000005900), 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 5.764926577s ago: executing program 4 (id=5512): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x43) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffcfa, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x2, &(0x7f0000000680)=0x0) io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x40000000000000, 0x0, 0x1}]) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000580)={0x83, 0x8, 0x48, 0x6, 0x15, "61a02de7564fd008"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x8, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000640)={0x1, 0x5, &(0x7f0000000500)=[0x0, r11, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x335, 0x1ff, 0xd9d0, 0xfff, 0x8], &(0x7f0000000580), &(0x7f00000005c0)=[0xa, 0x9, 0x9, 0xffffffffffff0001, 0x5, 0x201, 0x8000, 0x8, 0x5], 0x0, 0x4a07}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={r10}) r12 = socket(0x0, 0x80000, 0x1001) setsockopt$inet6_IPV6_RTHDR(r12, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="0002020100000000ff020000499a1115b05a61000000000000000000000001"], 0x18) 4.698597786s ago: executing program 4 (id=5515): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_vif\x00') lseek(r2, 0x10000000005, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500220b11342001658010203010902240001fd0ac0050904ca00027a8bb50409050510200001b70409050f101000067b08"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000440)={'custom0\x00'}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x9}, {0x0, 0xffea}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_BASE_RATE64={0x0, 0x2, 0x7}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}, @TCA_EGRESS_BLOCK={0x6, 0xe, 0x3ff}]}, 0x5c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500"], 0x1c}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0xfe, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r11 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r11) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) 3.951011915s ago: executing program 2 (id=5520): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) (async) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x40, 0x0, 0xffffffff, 0x906, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=""/207, 0xcf) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) close(r3) listen(0xffffffffffffffff, 0x400005) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) (async) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$proc_mixer(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='?HO'], 0x4f) (async) write$proc_mixer(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='?HO'], 0x4f) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="3080", 0x2, r5) syz_io_uring_setup(0x10e, &(0x7f0000001380)={0x0, 0x0, 0x1000, 0x4, 0x222}, &(0x7f0000000240), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20000010) 3.685341601s ago: executing program 5 (id=5521): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f00000013c0)=0xfce7) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x20040044}}], 0x1, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[], 0x78) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfb, 0x0, 0xb4b, 0x7, 0x80, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r9, &(0x7f0000000340)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x50002, 0x0) mkdir(&(0x7f0000000240)='./control\x00', 0x87) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0x74000860) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 3.631954682s ago: executing program 7 (id=5522): r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES64], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$swradio(&(0x7f0000000a40), 0x0, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f0000000300)={0x20, r7, 0x0}) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x8000003, 0x2}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_FBUF(r9, 0x8030560a, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r10, 0x8946, &(0x7f0000001200)={'tunl0\x00', @ifru_mtu=0x7fff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'tunl0\x00', @remote}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="10007d80", @ANYRES32=r3, @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r13, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r12, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x8000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r12, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2.763184692s ago: executing program 6 (id=5523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x5437, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffc}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}}, &(0x7f0000000040)=0x84) syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYBLOB="01e882f64330c73601a4023c6155f965f37bd4ada4485e262450f8ffb94e5b695449374c4042b2f2ca1ebc4a48986dae75d2701774e5e76e93c70cd28841a268910dd0d5bd7fa7ca1ae9a562e0e0c57aa933f996265234bd4bf655b741aa233e74de6b932a0a5802203deb8cb0933135152ae8772c944d79799d7c600847877b98765b3944b97aae37f6c5f9b62457d6f313718ae3cb5fa8cd0f7fa27f34faaf9fa5f4e6ab2018a94fb38934a4d2c57c2d0fde7f351bc0c21512273408457b0cea2f2999756426ce5ce8", @ANYRESHEX=0x0, @ANYRES32=r0, @ANYRES8=r2, @ANYRES16=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="5de98497c31541a308c03ec16439f11f5210b1befaeff94c272508332daf51b21ddef963d02d1384410596188e41d219e95029298ed9d68a85ba1201272d585c83bc766a511ea38e9b1b53c793340c399b7b8da541ddad645cf87b07a21817ae65415d1a5b4c66ab630d4fd64a2aa8187b113c87156dabfd6bb20f14fee7d5383217f7664043aa31db681a576682122ed5edc32e82b9f2804a3e9a10a1d13b48584efd52a58b2e0db6274d882a455bf97e3a1dd70028aeb1032181b8ceb1a7a015c7a2c5897ce6bd6e47cc5bda6150618d1808a37dafd7ca48d8a49adb4766af0c4c4c8e130007cc0ab8"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000380)="2781f1b2d0fc8d64f7", 0x9) pread64(r4, &(0x7f0000000080)=""/110, 0x88, 0x400) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) shutdown(r5, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="711ca51cd506f0dd4d9830f2124ab559436cdf5e54937c398edd55eb80c3699c5f7f4ad88541e2d65c56a1d906af02718b01e09dc37334eafd0425ebcdd21c28f8f12674acb6c511a15defde06c2d90d5e2d766960b7cb93a33e9c01da6fbef0d4ac118d8955d585e5233246ae9f140979b81bcc1f0cb801d292ac0b3c2b2e2ae93a78a3a175509092720bf1bc"], 0x0) 2.489017297s ago: executing program 2 (id=5524): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r0, 0x2c, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r0, 0x2c, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) gettid() (async) r1 = gettid() read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) kcmp(r1, r2, 0x6, 0xffffffffffffffff, r0) r3 = add_key$user(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x0}, &(0x7f0000002240), 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, &(0x7f0000002300)="df9470c944eac2f28f3a89329ef4b75dc05d29185359bb6e98737545126d064d7a0c05624d9089abfbf17371fd535fc84d1e6df345136041352db8cc2d2d5a35c2df3370e75f19f5912c393da9e6b94dc020f6b11eb498e57032d5da", 0x5c, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000002380)={r3, r4}, &(0x7f00000023c0)=""/171, 0xab, &(0x7f00000025c0)={&(0x7f0000002480)={'xcbc(aes)\x00'}, &(0x7f00000024c0)="d6a29a8eb11bd84562fb4c7678f0e7be8d1606e30c450d450cfa557936789f779488c061680cc4eedcc72e13b5c117fdf439a252c2aad8779ffefaecaea496e23b665d394fee4594a5cd62272adb8bcab0876c2939885df879dc3756a999b489d0864ba28dde57cd87bb4345f01841c6e3df2890287bac13bab9d8c04dd017867863cba5e18cb98c8b80ef0312f5a70293dfe3bfb5335833870047914c722fa5fafed1a06ae0fe40356c9d3c9e2d0e4c94565ea7ae9a95a80d2d9380eaee997dce7cf7640ff5b120a7a0b261c494f8b8d3bd1728a6d45fde5a9b52ed85159b80368a15deccc598", 0xe7}) timer_create(0x1, &(0x7f0000002740)={0x0, 0x23, 0x4, @thr={&(0x7f0000002600)="9f7c9c109866c241490942b99b8890743ad7e50b95a257c68d5bf2e5686a097e352d3be5c3fb06f4401b75c9dbf077d5fd0bb4e826731aab88e45101b8165e8c2cbd0ed5", &(0x7f0000002680)="976b1dcee98dbaad9979a326517ba0c6c50f8218a8a8c89a5833fdaf87816fcdb39cf4c92486ecc8bc3c671a585c1c819c1aeaef0fb14642c5ddfeef30f69137a1472e215bf38e61860f6dea2841841b3505c1c8ccea405830ebc87cbacfcedd02177d00f0ec8e2fe048ef7df8fd2f8043c04d54ff43bcfb3948c0f51d624a48424dcf03f980fa"}}, &(0x7f0000002780)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000027c0), 0x80281, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000027c0), 0x80281, 0x0) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x54, 0xd, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = add_key$user(&(0x7f0000002940), &(0x7f0000002980)={'syz', 0x2}, &(0x7f00000029c0)="5a90de6409a3333b483143d4cb6c551a154a814f45c1e02dbc9e0a717e641f21b98217c113b66a8eb4daf9a9ee1e9dbd656733d0f0dab9c529468af6b11e2367085ac2d2379283b83c0f18e72d1b48a232f7684bd34861917260caaa8f2af3141be3fa9c50e9e308573afa", 0x6b, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000002a40)={r6, r3, r3}, &(0x7f0000002a80)=""/159, 0x9f, &(0x7f0000002c40)={&(0x7f0000002b40)={'sha512_mb\x00'}, &(0x7f0000002b80)="dbbacdcb825ba154917e9a99b215d475d91061f778310081d3f886a7606ecc296ad6a9b6ac6699ccf0cbab549d6a231c9d98f267ddf9df953cedf497cc6ace71a84b27b711be868d70547f56660156dd02b7df71b676ffc41c3b0b9fc5145599953f857396b6eefded006bd654d2ed8b05609a965a768217a787078df639f2036dc799aff90c7a74", 0x88}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002cc0)={'veth0_to_team\x00', &(0x7f0000002c80)=@ethtool_sset_info={0x37, 0x5, 0x5, [0x100, 0xfffffff4]}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002cc0)={'veth0_to_team\x00', &(0x7f0000002c80)=@ethtool_sset_info={0x37, 0x5, 0x5, [0x100, 0xfffffff4]}}) syz_open_dev$swradio(&(0x7f0000002d00), 0x0, 0x2) (async) r7 = syz_open_dev$swradio(&(0x7f0000002d00), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000002d40)={0x8, 0x2, 0x4, 0xe, 0x577, 0x6, 0x7}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f0000002d40)={0x8, 0x2, 0x4, 0xe, 0x577, 0x6, 0x7}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x2c, r8, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x74}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1d50b30e4f5def3f) syz_io_uring_setup(0x71df, &(0x7f0000002f00)={0x0, 0x4c2f, 0x8000, 0x1, 0x229, 0x0, r5}, &(0x7f0000002f80), &(0x7f0000002fc0)) mknod$loop(&(0x7f0000003000)='./file0\x00', 0x6000, 0x0) (async) mknod$loop(&(0x7f0000003000)='./file0\x00', 0x6000, 0x0) keyctl$revoke(0x3, r4) (async) keyctl$revoke(0x3, r4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003040), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003080)={'wlan0\x00'}) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f00000030c0), 0x200002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x13, r10, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003140), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x28, r11, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x845}, 0x2004884) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x28, r11, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x845}, 0x2004884) r12 = add_key$fscrypt_provisioning(&(0x7f0000003240), &(0x7f0000003280)={'syz', 0x1}, &(0x7f00000032c0)={0x4, 0x0, @d}, 0x18, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f0000003300)='.request_key_auth\x00', &(0x7f0000003340)=@secondary) 2.296525557s ago: executing program 2 (id=5525): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000001540)=@ll={0x11, 0x10, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x80, 0x0}, 0x8010) write$sequencer(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x8) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4, @ANYBLOB="8a23210a6c8b798e32d6183f516cdc4c00577f7e9328c1a1337822712d9bf8f15c40e2988f8ae33d1c7f1a4282c8cc5d1cf8e81648c8ff1ca863102fa668c4e1f187f64c5d2262e9ebd875ae04f1e480c2c2b34dccd60b8a81687a7972989c69c4a22b58908a34aa6fc7fb64400a3d1bfd40de375a94b39d225159"], 0x78}, 0x1, 0x0, 0x0, 0x4004025}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) socket(0x1d, 0x4, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x11ff, 0x100, 0x5, 0x3ff, 0x14}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="850b010000000000140003006d6163736563300000000000000000000a000100aaaa"], 0x40}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port0\x00', 0x4200, 0x118ec, 0x7, 0x8000008, 0x7, 0x4, 0x0, 0x0, 0x7cce8c743ee810df}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0xc804) 1.503188088s ago: executing program 2 (id=5526): r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000000)={0x8001, "c82762d91a660a604b755d4a6022302ee87edcb508ab0977f8db2a0145d04067", 0x3}) (async) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.502896438s ago: executing program 4 (id=5527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x8000) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000040)={0xfffffff7, 0x1, 0x4, 0x4000, 0x9, {}, {0x2, 0x0, 0x6, 0x2e, 0x24, 0x1, "cac9dd50"}, 0x2, 0x4, {}, 0x6}) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.233336767s ago: executing program 2 (id=5528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x44, 0x0, 0x214}) close(r1) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200000) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', '', [{}, {0x20, 'cpuacct.usage_percpu_user\x00'}, {}, {0x20, 'cbc(cast5)\x00'}]}, 0x2d) (async) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', '', [{}, {0x20, 'cpuacct.usage_percpu_user\x00'}, {}, {0x20, 'cbc(cast5)\x00'}]}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) rseq(0x0, 0x0, 0x0, 0x0) (async) rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f000085b000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f000085b000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000), 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x9, 0x0, 0x0, 0x0, 0x2b, 0x6]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$autofs(0xffffffffffffff9c, 0x0, 0x11d40be0548075bb, 0x0) (async) openat$autofs(0xffffffffffffff9c, 0x0, 0x11d40be0548075bb, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r8 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 913.430261ms ago: executing program 2 (id=5529): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x50d020, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x100) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x24, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x24, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_connect(0x5, 0x15a, &(0x7f0000000000)=ANY=[@ANYBLOB="12014003d429ad10dd040680e88d"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) socket$kcm(0x21, 0x2, 0x2) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0x150, r6, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000, 0xffffffffffffffff}, 0x10) (async, rerun: 32) socketpair(0x18, 0x0, 0x2, &(0x7f0000000040)) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x12b303, 0x0) (async) syz_open_dev$video4linux(&(0x7f00000001c0), 0xe3, 0x400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r6 = syz_io_uring_setup(0x7e76, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)) ioprio_set$pid(0x2, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r6, 0x2dbe, 0x0, 0x0, 0x0, 0xffffffffffffff1e) 541.391847ms ago: executing program 7 (id=5531): madvise(&(0x7f00005ba000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r0 = syz_clone(0x4100a80, &(0x7f0000000000)="23413fef5f34488394b2b648aec56be6648884919df4a99bfbac538e87404d765e130918600dc62fc8eb40f7c8a793cc3f59cf5ba98490dc44bde3f21f0b5b6fb3d34280c268bc3a3883dc5054b0f9c32d7266400bee9ba78662c00cf838594dcaa7295c9dd47fd0d9ae12aea6b6de509ccc0527271f9ebad451db75ad2030ed5f9391d8b3775e7753493f67c3ee64a514f2916f0446e355f64e359dc6515e7ebb204928a4e17d502d3516527f28515c627225876c7b94055af04af369272e17d0ce38019e0b3031", 0xc8, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000300)="233ab79e119be78b4cb86191f1504f8e16a65f2cf0602ffc8964dbcdab504c1ec9f90ed785a10b4c7f9b49ad7b71f93f9efada353a8794f5c690b335d6f42d36d324c53dfee7aa904598bb01cafc5e271a3224a19969725b5b5858738458baacda7d7bb8b680e3dbd5b0f284bf5743dcebfd248b50013129cdfbf51b16d19c88e8e0b340") syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r0], 0x2}, 0x58) r1 = io_uring_setup(0x3eae, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000040)={0x8, r4}) ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000400)={0x8, r4}) r5 = eventfd(0x401) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) dup(r5) 0s ago: executing program 4 (id=5532): syz_emit_ethernet(0x3a, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x18, 0x0, @wg=@data={0x4, 0xa, 0x9}}}}}}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4b7e, 0x420002) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x44802}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc8b6}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @multicast1}, {0x306, @random="67c3401f2634"}, 0x58, {0x2, 0x4e20, @multicast2}, 'batadv0\x00'}) r4 = accept$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) connect$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) kernel console output (not intermixed with test programs): usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1563.999298][T26810] nlmon0: entered allmulticast mode [ 1564.013310][T26810] caif0: entered allmulticast mode [ 1564.018926][T26810] batadv0: entered allmulticast mode [ 1564.027738][T26810] vxcan0: entered allmulticast mode [ 1564.033951][T26810] vxcan1: entered allmulticast mode [ 1564.039972][T26810] veth0: entered allmulticast mode [ 1564.049619][T26810] veth1: entered allmulticast mode [ 1564.055438][T26810] wg0: entered allmulticast mode [ 1564.060746][T26810] wg1: entered allmulticast mode [ 1564.076078][T26810] wg2: entered allmulticast mode [ 1564.081352][T26810] veth0_to_bridge: entered allmulticast mode [ 1564.089667][T26810] bridge_slave_0: entered allmulticast mode [ 1564.096121][T26810] veth1_to_bridge: entered allmulticast mode [ 1564.130823][T26810] bridge_slave_1: entered allmulticast mode [ 1564.137288][T26810] veth0_to_bond: entered allmulticast mode [ 1564.143392][T26810] bond_slave_0: entered allmulticast mode [ 1564.151333][T26810] veth1_to_bond: entered allmulticast mode [ 1564.157705][T26810] bond_slave_1: entered allmulticast mode [ 1564.163699][T26810] veth0_to_team: entered allmulticast mode [ 1564.165086][ T5965] usb 6-1: device descriptor read/64, error -71 [ 1564.174392][T26810] team_slave_0: entered allmulticast mode [ 1564.191688][T26810] veth1_to_team: entered allmulticast mode [ 1564.197964][T26810] team_slave_1: entered allmulticast mode [ 1564.203983][T26810] veth0_to_batadv: entered allmulticast mode [ 1564.211140][T26810] batadv_slave_0: entered allmulticast mode [ 1564.218931][T26810] veth1_to_batadv: entered allmulticast mode [ 1564.227893][T26810] batadv_slave_1: entered allmulticast mode [ 1564.234035][T26810] xfrm0: entered allmulticast mode [ 1564.241429][T26810] veth0_to_hsr: entered allmulticast mode [ 1564.248258][T26810] hsr_slave_0: entered allmulticast mode [ 1564.254212][T26810] veth1_to_hsr: entered allmulticast mode [ 1564.264030][T26810] hsr_slave_1: entered allmulticast mode [ 1564.270283][T26810] hsr0: entered allmulticast mode [ 1564.277717][T26810] veth0_macvtap: entered allmulticast mode [ 1564.283818][T26810] macvtap0: entered allmulticast mode [ 1564.304969][T26810] macsec0: left promiscuous mode [ 1564.310874][T26810] geneve0: entered allmulticast mode [ 1564.319135][T26810] geneve1: entered allmulticast mode [ 1564.325354][T26810] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1564.333216][T26810] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1564.343459][T26810] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1564.352619][T26810] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1564.360549][T26810] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 1564.381906][T26810] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 1564.405336][T26810] sit1: entered allmulticast mode [ 1564.410667][T26810] macsec1: entered allmulticast mode [ 1564.417287][T26810] bridge1: entered allmulticast mode [ 1564.428505][T26810] geneve2: left promiscuous mode [ 1564.433457][T26810] geneve2: entered allmulticast mode [ 1564.439240][T26810] bridge2: left promiscuous mode [ 1564.444179][T26810] bridge2: entered allmulticast mode [ 1564.444990][ T5965] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1564.452921][T26810] syztnl1: entered allmulticast mode [ 1564.473131][T26810] mac80211_hwsim hwsim44 wlan2: entered allmulticast mode [ 1564.484986][T26810] syztnl0: entered allmulticast mode [ 1564.490534][T26810] bridge3: entered allmulticast mode [ 1564.500771][T26810] bridge4: entered allmulticast mode [ 1564.507147][T26810] vxlan0: entered allmulticast mode [ 1564.513032][T26810] gtp0: left promiscuous mode [ 1564.520850][T26810] syztnl2: entered allmulticast mode [ 1564.528041][T26810] bridge5: left promiscuous mode [ 1564.537659][T26810] bridge5: entered allmulticast mode [ 1564.627860][ T5965] usb 6-1: device descriptor read/64, error -71 [ 1564.753970][ T5965] usb usb6-port1: attempt power cycle [ 1565.157978][ T5965] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1565.198525][ T5965] usb 6-1: device descriptor read/8, error -71 [ 1565.226972][ T976] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1565.405781][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 1565.412299][ T976] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1565.420436][ T976] usb 5-1: config 0 has no interface number 0 [ 1565.430262][ T976] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1565.439712][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.448526][ T5965] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1565.456193][ T976] usb 5-1: Product: syz [ 1565.460388][ T976] usb 5-1: Manufacturer: syz [ 1565.465407][ T976] usb 5-1: SerialNumber: syz [ 1565.472105][ T976] usb 5-1: config 0 descriptor?? [ 1565.482564][ T976] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1565.491581][ T976] usb 5-1: selecting invalid altsetting 1 [ 1565.498253][ T976] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1565.498497][ T5965] usb 6-1: device descriptor read/8, error -71 [ 1565.514305][ T976] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1565.525161][ T976] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1565.533437][ T976] usb 5-1: media controller created [ 1565.538994][T22167] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1565.561332][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1565.615865][ T5965] usb usb6-port1: unable to enumerate USB device [ 1565.675026][T22167] usb 7-1: device descriptor read/64, error -71 [ 1565.683342][T26826] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1565.699661][ T976] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1565.711279][ T976] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1565.719198][ T976] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1565.753561][ T976] usb 5-1: USB disconnect, device number 56 [ 1565.925685][T22167] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1566.064899][T22167] usb 7-1: device descriptor read/64, error -71 [ 1566.175406][T22167] usb usb7-port1: attempt power cycle [ 1566.514852][T22167] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1566.536073][T22167] usb 7-1: device descriptor read/8, error -71 [ 1566.554691][ T5941] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1566.708699][ T5941] usb 5-1: config 0 has no interfaces? [ 1566.716789][ T5941] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1566.726056][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1566.734244][ T5941] usb 5-1: Product: syz [ 1566.738801][ T5941] usb 5-1: Manufacturer: syz [ 1566.743393][ T5941] usb 5-1: SerialNumber: syz [ 1566.751882][ T5941] usb 5-1: config 0 descriptor?? [ 1566.784872][T22167] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1566.805657][T22167] usb 7-1: device descriptor read/8, error -71 [ 1566.925033][T22167] usb usb7-port1: unable to enumerate USB device [ 1566.971889][T26833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1566.981242][T26833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1566.991887][T26833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1567.031659][T26837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1567.040816][T26837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1567.044784][ T5827] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1567.059266][T26837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1567.078564][T26833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1567.095186][T26833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1567.110189][T26833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1567.130878][T26837] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1567.215275][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 1567.231489][ T5827] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1567.243402][ T5827] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1567.253979][ T5827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1567.266240][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1567.278517][ T5941] usb 5-1: USB disconnect, device number 57 [ 1567.290622][ T5827] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1567.301889][ T5827] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1567.315223][ T5827] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1567.324289][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.337191][ T5827] usb 6-1: config 0 descriptor?? [ 1567.663842][ T5827] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1568.316707][T19861] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 1569.727494][ T5835] usb 6-1: USB disconnect, device number 23 [ 1569.766230][ T5835] usblp0: removed [ 1570.345331][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1570.345349][ T30] audit: type=1326 audit(1751449656.404:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26876 comm="syz.7.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e2f8e929 code=0x7ffc0000 [ 1570.377996][ T30] audit: type=1326 audit(1751449656.404:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26876 comm="syz.7.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e2f8e929 code=0x7ffc0000 [ 1570.403439][ T976] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1570.411483][ T30] audit: type=1326 audit(1751449656.404:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26876 comm="syz.7.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f64e2f8e929 code=0x7ffc0000 [ 1570.436513][ T30] audit: type=1326 audit(1751449656.404:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26876 comm="syz.7.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e2f8e929 code=0x7ffc0000 [ 1570.491337][ T30] audit: type=1326 audit(1751449656.404:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26876 comm="syz.7.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f64e2f8e929 code=0x7ffc0000 [ 1570.549849][ T30] audit: type=1326 audit(1751449656.534:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26876 comm="syz.7.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e2f8e929 code=0x7ffc0000 [ 1570.572285][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.604679][ T30] audit: type=1326 audit(1751449656.534:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26876 comm="syz.7.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e2f8e929 code=0x7ffc0000 [ 1570.629646][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.646266][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.657176][ T976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1570.670985][ T976] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1570.680148][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.691637][ T976] usb 6-1: config 0 descriptor?? [ 1570.895122][ T5835] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1571.055200][ T5835] usb 7-1: Using ep0 maxpacket: 8 [ 1571.063399][ T5835] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 1571.080517][ T5835] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1571.092154][ T5835] usb 7-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1571.104887][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.136844][ T5835] usb 7-1: Product: syz [ 1571.141049][ T5835] usb 7-1: Manufacturer: syz [ 1571.146013][ T976] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1571.153439][ T976] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1571.158303][ T5835] usb 7-1: SerialNumber: syz [ 1571.171299][ T976] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1571.182842][ T976] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1571.192533][ T976] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1571.201893][ T976] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1571.236629][ T976] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1571.389009][T26879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.404151][T26879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.446053][ T5941] usb 6-1: USB disconnect, device number 24 [ 1571.661989][T26910] netlink: 'syz.2.5178': attribute type 21 has an invalid length. [ 1571.680121][T26910] netlink: 'syz.2.5178': attribute type 21 has an invalid length. [ 1572.204867][ T976] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1572.281031][T26919] __nla_validate_parse: 13 callbacks suppressed [ 1572.281052][T26919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5181'. [ 1572.297687][T22167] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1572.306108][T26919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5181'. [ 1572.385246][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 1572.392487][ T976] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1572.402089][ T976] usb 5-1: config 0 has no interface number 0 [ 1572.420593][ T976] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1572.429768][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.438234][ T976] usb 5-1: Product: syz [ 1572.442439][ T976] usb 5-1: Manufacturer: syz [ 1572.447813][ T976] usb 5-1: SerialNumber: syz [ 1572.457134][ T976] usb 5-1: config 0 descriptor?? [ 1572.469611][T22167] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1572.479663][T22167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.490649][ T976] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1572.500903][T22167] usb 6-1: Product: syz [ 1572.505597][T22167] usb 6-1: Manufacturer: syz [ 1572.510532][T22167] usb 6-1: SerialNumber: syz [ 1572.520865][T22167] usb 6-1: config 0 descriptor?? [ 1572.531669][T22167] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1572.712266][ T976] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1572.732662][ T976] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1572.736203][ T5941] usb 6-1: USB disconnect, device number 25 [ 1572.970875][T26925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.981742][T26925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.096284][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1573.101404][ T5941] usb 5-1: USB disconnect, device number 58 [ 1573.128203][ T5941] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1573.191292][ T5941] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1573.225681][ T5941] quatech2 5-1:0.51: device disconnected [ 1573.615303][T26930] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1573.688395][ T5835] usbhid 7-1:1.0: can't add hid device: -71 [ 1573.698608][ T5835] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1573.731855][ T5835] usb 7-1: USB disconnect, device number 104 [ 1574.245930][T26952] fuse: Unknown parameter 'fowner' [ 1574.517241][ T976] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1574.721699][ T976] usb 6-1: device descriptor read/64, error -71 [ 1574.980238][ T976] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1575.097602][T26989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5195'. [ 1575.137675][ T976] usb 6-1: device descriptor read/64, error -71 [ 1575.255210][ T976] usb usb6-port1: attempt power cycle [ 1575.625194][ T976] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1575.656513][ T976] usb 6-1: device descriptor read/8, error -71 [ 1575.914904][ T976] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1575.955631][ T976] usb 6-1: device descriptor read/8, error -71 [ 1576.067102][ T976] usb usb6-port1: unable to enumerate USB device [ 1576.241080][ T30] audit: type=1326 audit(1751449662.264:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ca112ab19 code=0x7ffc0000 [ 1576.331316][ T30] audit: type=1326 audit(1751449662.264:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca118e929 code=0x7ffc0000 [ 1576.406034][ T30] audit: type=1326 audit(1751449662.264:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca118e929 code=0x7ffc0000 [ 1576.463575][ T30] audit: type=1326 audit(1751449662.264:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca118e929 code=0x7ffc0000 [ 1576.536854][ T30] audit: type=1326 audit(1751449662.264:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ca112ab19 code=0x7ffc0000 [ 1576.591108][ T30] audit: type=1326 audit(1751449662.264:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca118e929 code=0x7ffc0000 [ 1576.662200][ T30] audit: type=1326 audit(1751449662.264:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ca112ab19 code=0x7ffc0000 [ 1576.710317][ T30] audit: type=1326 audit(1751449662.264:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ca112ab19 code=0x7ffc0000 [ 1576.745048][ T5835] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1576.784432][ T30] audit: type=1326 audit(1751449662.264:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca118e929 code=0x7ffc0000 [ 1576.840634][ T30] audit: type=1326 audit(1751449662.264:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27004 comm="syz.4.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ca112ab19 code=0x7ffc0000 [ 1576.921278][ T5835] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1576.932725][ T5835] usb 7-1: config 81 has an invalid interface number: 13 but max is 0 [ 1576.957997][ T5835] usb 7-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.985402][ T5835] usb 7-1: config 81 has no interface number 0 [ 1577.002008][ T5835] usb 7-1: config 81 interface 13 has no altsetting 0 [ 1577.026998][ T5835] usb 7-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 1577.044832][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.053212][ T5835] usb 7-1: Product: syz [ 1577.065622][ T5835] usb 7-1: Manufacturer: syz [ 1577.070317][ T5835] usb 7-1: SerialNumber: syz [ 1577.293781][T27010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.330993][T27010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.387481][ T5835] qmi_wwan 7-1:81.13: bogus CDC Union: master=0, slave=1 [ 1577.408960][ T5835] qmi_wwan 7-1:81.13: probe with driver qmi_wwan failed with error -22 [ 1577.441392][ T5835] usb 7-1: USB disconnect, device number 105 [ 1577.583949][T27034] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 1577.973824][T27054] gretap0: entered promiscuous mode [ 1577.994448][T27054] gretap0: left promiscuous mode [ 1579.025051][ T5827] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1579.223040][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.264413][ T5827] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1579.304416][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.341338][ T5827] usb 6-1: config 0 descriptor?? [ 1579.793259][ T5827] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor [ 1579.823689][ T5827] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.004E/input/input163 [ 1580.245528][T27086] bridge1: entered promiscuous mode [ 1580.278429][ T5827] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1581.026245][T27097] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5221'. [ 1581.104340][T18600] usb 6-1: USB disconnect, device number 30 [ 1581.161253][T27095] fido_id[27095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1581.802045][T27107] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5223'. [ 1581.877335][T27110] fuse: Bad value for 'rootmode' [ 1582.384965][T18600] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1582.535254][T18600] usb 6-1: device descriptor read/64, error -71 [ 1582.964693][T18600] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1583.105119][T18600] usb 6-1: device descriptor read/64, error -71 [ 1583.269870][T18600] usb usb6-port1: attempt power cycle [ 1583.635158][T18600] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1583.663434][T18600] usb 6-1: device descriptor read/8, error -71 [ 1583.904792][T18600] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1583.933755][T27152] gretap0: entered promiscuous mode [ 1583.943856][T27152] gretap0: left promiscuous mode [ 1583.987480][T18600] usb 6-1: device descriptor read/8, error -71 [ 1584.114449][T18600] usb usb6-port1: unable to enumerate USB device [ 1585.700429][T27170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5239'. [ 1586.133935][T27177] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1586.147823][T27177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5240'. [ 1587.050627][T27198] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:0 [ 1587.078606][T27192] syz.4.5246: vmalloc error: size 85983232, failed to allocated page array size 167936, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1587.130248][T27192] CPU: 0 UID: 0 PID: 27192 Comm: syz.4.5246 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1587.130278][T27192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1587.130291][T27192] Call Trace: [ 1587.130299][T27192] [ 1587.130309][T27192] dump_stack_lvl+0x189/0x250 [ 1587.130345][T27192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1587.130375][T27192] ? __pfx__printk+0x10/0x10 [ 1587.130396][T27192] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1587.130417][T27192] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1587.130440][T27192] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1587.130463][T27192] warn_alloc+0x214/0x310 [ 1587.130491][T27192] ? __pfx_warn_alloc+0x10/0x10 [ 1587.130526][T27192] ? __get_vm_area_node+0x28f/0x300 [ 1587.130547][T27192] ? drm_property_create_blob+0x65/0x300 [ 1587.130571][T27192] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1587.130591][T27192] ? __kasan_slab_free+0x62/0x70 [ 1587.130635][T27192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1587.130661][T27192] ? rcu_is_watching+0x15/0xb0 [ 1587.130691][T27192] ? drm_property_create_blob+0x65/0x300 [ 1587.130709][T27192] ? drm_property_create_blob+0x65/0x300 [ 1587.130726][T27192] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 1587.130746][T27192] ? drm_property_create_blob+0x65/0x300 [ 1587.130766][T27192] ? drm_dev_enter+0x49/0x150 [ 1587.130795][T27192] ? vga16fb_check_var+0x175e/0x19a0 [ 1587.130822][T27192] drm_property_create_blob+0x65/0x300 [ 1587.130847][T27192] drm_mode_createblob_ioctl+0xbf/0x400 [ 1587.130873][T27192] drm_ioctl_kernel+0x2cc/0x390 [ 1587.130897][T27192] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 1587.130918][T27192] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1587.130951][T27192] drm_ioctl+0x67f/0xb10 [ 1587.130977][T27192] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 1587.131003][T27192] ? __pfx_drm_ioctl+0x10/0x10 [ 1587.131039][T27192] ? __fget_files+0x2a/0x420 [ 1587.131063][T27192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1587.131090][T27192] ? __pfx_drm_ioctl+0x10/0x10 [ 1587.131113][T27192] __se_sys_ioctl+0xf9/0x170 [ 1587.131152][T27192] do_syscall_64+0xfa/0x3b0 [ 1587.131177][T27192] ? lockdep_hardirqs_on+0x9c/0x150 [ 1587.131202][T27192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.131219][T27192] ? clear_bhb_loop+0x60/0xb0 [ 1587.131241][T27192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.131258][T27192] RIP: 0033:0x7f3ca118e929 [ 1587.131274][T27192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1587.131290][T27192] RSP: 002b:00007f3ca201c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1587.131310][T27192] RAX: ffffffffffffffda RBX: 00007f3ca13b5fa0 RCX: 00007f3ca118e929 [ 1587.131323][T27192] RDX: 00002000000000c0 RSI: 00000000c01064bd RDI: 0000000000000003 [ 1587.131335][T27192] RBP: 00007f3ca1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1587.131346][T27192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1587.131357][T27192] R13: 0000000000000000 R14: 00007f3ca13b5fa0 R15: 00007f3ca14dfa28 [ 1587.131384][T27192] [ 1587.131465][T27192] Mem-Info: [ 1587.450270][T27192] active_anon:14059 inactive_anon:0 isolated_anon:0 [ 1587.450270][T27192] active_file:17795 inactive_file:4009 isolated_file:0 [ 1587.450270][T27192] unevictable:768 dirty:115 writeback:0 [ 1587.450270][T27192] slab_reclaimable:6165 slab_unreclaimable:122967 [ 1587.450270][T27192] mapped:31833 shmem:5305 pagetables:1880 [ 1587.450270][T27192] sec_pagetables:0 bounce:0 [ 1587.450270][T27192] kernel_misc_reclaimable:0 [ 1587.450270][T27192] free:1300337 free_pcp:12239 free_cma:0 [ 1587.495543][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.503254][T27192] Node 0 active_anon:56336kB inactive_anon:0kB active_file:71132kB inactive_file:15900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127284kB dirty:460kB writeback:0kB shmem:19684kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13252kB pagetables:7364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1587.536854][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.544640][ T976] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1587.560264][T27192] Node 1 active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1587.591858][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.645602][T27192] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.674415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.719393][T27192] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1587.725369][ T976] usb 6-1: Using ep0 maxpacket: 16 [ 1587.735241][T27192] Node 0 DMA32 free:1260136kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49552kB inactive_anon:0kB active_file:70988kB inactive_file:14408kB unevictable:1576kB writepending:460kB present:3129332kB managed:2560992kB mlocked:44kB bounce:0kB free_pcp:58940kB local_pcp:38928kB free_cma:0kB [ 1587.767511][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.786256][ T976] usb 6-1: config 194 has an invalid interface number: 102 but max is 2 [ 1587.804622][ T976] usb 6-1: config 194 has 2 interfaces, different from the descriptor's value: 3 [ 1587.813873][ T976] usb 6-1: config 194 has no interface number 1 [ 1587.832069][ T976] usb 6-1: config 194 interface 0 has no altsetting 1 [ 1587.839410][T27192] lowmem_reserve[]: 0 0 1 1 1 [ 1587.844180][T27192] Node 0 Normal free:48kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:180kB inactive_anon:0kB active_file:144kB inactive_file:1492kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:8kB free_cma:0kB [ 1587.873546][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.894959][T27192] lowmem_reserve[]: 0 0 0 0 0 [ 1587.899956][T27192] Node 1 Normal free:3924488kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.930558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.940587][T27192] lowmem_reserve[]: 0 0 0 0 0 [ 1587.946745][ T976] usb 6-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 1587.956796][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.965067][T27192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1587.982821][ T976] usb 6-1: Product: syz [ 1587.989569][ T976] usb 6-1: Manufacturer: syz [ 1587.994245][ T976] usb 6-1: SerialNumber: syz [ 1588.003824][T27192] Node 0 DMA32: 231*4kB (UME) 559*8kB (UME) 1026*16kB (UME) 698*32kB (UME) 909*64kB (UME) 417*128kB (UME) 170*256kB (UME) 95*512kB (UME) 71*1024kB (UME) 8*2048kB (UM) 226*4096kB (UM) = 1262644kB [ 1588.029259][T27192] Node 0 Normal: 2*4kB (M) 4*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40kB [ 1588.043777][T27192] Node 1 Normal: 182*4kB (UME) 60*8kB (UME) 49*16kB (UME) 208*32kB (UME) 83*64kB (UE) 31*128kB (UME) 10*256kB (UME) 7*512kB (UM) 3*1024kB (UME) 3*2048kB (ME) 950*4096kB (UM) = 3924488kB [ 1588.065733][T27192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.081517][T27192] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1588.093392][T27192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1588.109181][T27192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1588.144893][T27192] 24241 total pagecache pages [ 1588.150038][T27192] 1 pages in swap cache [ 1588.156939][T27192] Free swap = 124992kB [ 1588.161146][T27192] Total swap = 124996kB [ 1588.165560][T27192] 2097051 pages RAM [ 1588.169503][T27192] 0 pages HighMem/MovableOnly [ 1588.174289][T27192] 424697 pages reserved [ 1588.181536][T27192] 0 pages cma reserved [ 1588.239698][ T976] qmi_wwan 6-1:194.0: probe with driver qmi_wwan failed with error -22 [ 1588.248882][ T976] usb 6-1: unknown number of interfaces: 2 [ 1588.329452][ T976] usb 6-1: USB disconnect, device number 35 [ 1588.596509][ T5965] usb 7-1: new low-speed USB device number 106 using dummy_hcd [ 1588.745800][ T5965] usb 7-1: device descriptor read/64, error -71 [ 1589.084741][ T5965] usb 7-1: new low-speed USB device number 107 using dummy_hcd [ 1589.165596][T27220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.174356][T27220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.235223][ T5965] usb 7-1: device descriptor read/64, error -71 [ 1589.312372][T27227] gretap0: entered promiscuous mode [ 1589.320976][T27227] gretap0: left promiscuous mode [ 1589.423147][ T5965] usb usb7-port1: attempt power cycle [ 1589.711759][T22167] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1589.766564][T27234] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5256'. [ 1589.803110][T27235] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5257'. [ 1589.822968][T27235] tc_dump_action: action bad kind [ 1589.843903][T27235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5257'. [ 1589.904698][T22167] usb 5-1: Using ep0 maxpacket: 16 [ 1589.913129][T22167] usb 5-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 1589.924657][ T5965] usb 7-1: new low-speed USB device number 108 using dummy_hcd [ 1590.008990][T22167] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1590.019620][ T5965] usb 7-1: device descriptor read/8, error -71 [ 1590.034049][T22167] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1590.043987][T22167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.224805][T22167] usb 5-1: Product: syz [ 1590.240269][T22167] usb 5-1: Manufacturer: syz [ 1590.264694][ T5965] usb 7-1: new low-speed USB device number 109 using dummy_hcd [ 1590.288943][T22167] usb 5-1: SerialNumber: syz [ 1590.305376][ T5965] usb 7-1: device descriptor read/8, error -71 [ 1590.585294][ T5965] usb usb7-port1: unable to enumerate USB device [ 1590.592448][T22167] usb 5-1: 0:2 : does not exist [ 1590.605687][T22167] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1590.994014][T22167] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1591.032340][T22167] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1591.049160][T22167] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1591.167107][T22167] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1591.251898][T22167] usb 5-1: USB disconnect, device number 59 [ 1591.618601][T27249] sctp: [Deprecated]: syz.6.5262 (pid 27249) Use of int in maxseg socket option. [ 1591.618601][T27249] Use struct sctp_assoc_value instead [ 1592.058481][T27261] netlink: 'syz.5.5263': attribute type 29 has an invalid length. [ 1592.310403][T27264] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5263'. [ 1592.399375][T27261] netlink: 'syz.5.5263': attribute type 29 has an invalid length. [ 1592.939621][T27278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5269'. [ 1593.802531][T27288] netlink: 'syz.4.5270': attribute type 20 has an invalid length. [ 1594.374988][ T5835] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1594.548217][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.558587][ T5835] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1594.583581][T27310] gretap0: entered promiscuous mode [ 1594.591743][T27310] gretap0: left promiscuous mode [ 1594.605069][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.725409][ T5835] usb 5-1: config 0 descriptor?? [ 1594.740984][T27318] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5280'. [ 1594.753376][ T5835] pwc: Askey VC010 type 2 USB webcam detected. [ 1594.771730][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5278'. [ 1594.922220][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5280'. [ 1595.022276][T27318] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1595.050858][T27318] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1595.084980][T22167] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1595.145244][ T5835] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1595.152573][ T5835] pwc: recv_control_msg error -32 req 02 val 2700 [ 1595.160694][ T5835] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1595.175736][ T5835] pwc: recv_control_msg error -32 req 04 val 1000 [ 1595.193669][ T5835] pwc: recv_control_msg error -32 req 04 val 1300 [ 1595.201505][ T5835] pwc: recv_control_msg error -32 req 04 val 1400 [ 1595.208643][ T5835] pwc: recv_control_msg error -32 req 02 val 2000 [ 1595.216260][T27297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.225769][ T5835] pwc: recv_control_msg error -32 req 02 val 2100 [ 1595.233051][T27297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.261681][T27297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.281996][T27297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.301686][ T5835] pwc: recv_control_msg error -32 req 04 val 1500 [ 1595.324992][ T5835] pwc: recv_control_msg error -32 req 02 val 2500 [ 1595.343477][T22167] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.363623][ T5835] pwc: recv_control_msg error -32 req 02 val 2400 [ 1595.372882][ T5835] pwc: recv_control_msg error -32 req 02 val 2600 [ 1595.379959][ T5835] pwc: recv_control_msg error -32 req 02 val 2900 [ 1595.459410][T22167] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1595.537892][T22167] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1595.584620][T22167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1595.592309][ T5835] pwc: recv_control_msg error -71 req 04 val 1100 [ 1595.603992][ T5835] pwc: recv_control_msg error -71 req 04 val 1200 [ 1595.616644][T22167] usb 6-1: SerialNumber: syz [ 1595.640824][ T5835] pwc: Registered as video103. [ 1595.666492][ T5835] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input164 [ 1595.721571][ T5835] usb 5-1: USB disconnect, device number 60 [ 1595.739807][T22167] usb 6-1: 0:2 : does not exist [ 1596.653483][T27355] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5288'. [ 1596.684093][T27344] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1596.990181][T16992] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1597.137673][T16992] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1597.168297][T16992] usb 3-1: USB disconnect, device number 73 [ 1597.544787][T16992] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1597.755345][T16992] usb 3-1: Using ep0 maxpacket: 8 [ 1597.762677][T16992] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1007 [ 1597.783783][T16992] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1597.805150][T16992] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1597.827313][T16992] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1597.839956][T16992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.864675][T16992] usb 3-1: Product: ц [ 1597.875390][T16992] usb 3-1: Manufacturer: ࠔ [ 1597.887285][T16992] usb 3-1: SerialNumber: syz [ 1597.944087][T27356] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1597.968190][T27356] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1597.978306][T22167] usb 6-1: USB disconnect, device number 36 [ 1598.051961][T20622] udevd[20622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1598.260319][T27344] syzkaller1: entered promiscuous mode [ 1598.266054][T27344] syzkaller1: entered allmulticast mode [ 1598.364826][ T10] usb 7-1: new low-speed USB device number 110 using dummy_hcd [ 1598.465880][T11238] Bluetooth: hci5: command 0x0405 tx timeout [ 1598.524814][ T10] usb 7-1: Invalid ep0 maxpacket: 32 [ 1598.564694][T22167] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1598.664746][ T10] usb 7-1: new low-speed USB device number 111 using dummy_hcd [ 1598.700552][T27376] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5293'. [ 1598.727971][T22167] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1598.738388][T22167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.751442][T22167] usb 5-1: config 0 descriptor?? [ 1598.825331][ T10] usb 7-1: Invalid ep0 maxpacket: 32 [ 1598.833210][ T10] usb usb7-port1: attempt power cycle [ 1599.194859][ T10] usb 7-1: new low-speed USB device number 112 using dummy_hcd [ 1599.266112][ T10] usb 7-1: Invalid ep0 maxpacket: 32 [ 1599.405259][ T10] usb 7-1: new low-speed USB device number 113 using dummy_hcd [ 1599.448353][T16992] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1599.463609][ T10] usb 7-1: Invalid ep0 maxpacket: 32 [ 1599.542772][ T10] usb usb7-port1: unable to enumerate USB device [ 1599.565133][T27392] UHID_CREATE from different security context by process 1775 (syz.2.5296), this is not allowed. [ 1599.595649][T16992] usb 3-1: USB disconnect, device number 74 [ 1599.702207][T27396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5297'. [ 1599.729242][T27396] vlan2: entered allmulticast mode [ 1600.015898][T16992] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1600.331120][T16992] usb 3-1: device descriptor read/64, error -71 [ 1600.704760][T16992] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1600.954650][T16992] usb 3-1: device descriptor read/64, error -71 [ 1601.007198][T27407] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5299'. [ 1601.075611][T16992] usb usb3-port1: attempt power cycle [ 1601.375246][T22167] usbhid 5-1:0.0: can't add hid device: -71 [ 1601.381366][T22167] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1601.464835][T22167] usb 5-1: USB disconnect, device number 61 [ 1601.474958][T16992] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1601.505608][T16992] usb 3-1: device descriptor read/8, error -71 [ 1601.654063][T27416] block device autoloading is deprecated and will be removed. [ 1601.755019][T27416] syz.4.5301: attempt to access beyond end of device [ 1601.755019][T27416] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1601.774904][ T5902] usb 7-1: new low-speed USB device number 114 using dummy_hcd [ 1601.783162][T16992] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1601.878127][T16992] usb 3-1: device descriptor read/8, error -71 [ 1601.903050][T27416] IPVS: length: 272 != 23992286040 [ 1601.985104][ T5902] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1601.991769][ T5902] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1602.016235][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.051627][T16992] usb usb3-port1: unable to enumerate USB device [ 1602.077445][ T5902] usb 7-1: config 0 descriptor?? [ 1602.272718][T27433] fuse: Bad value for 'fd' [ 1602.524414][ T5902] usbhid 7-1:0.0: can't add hid device: -71 [ 1602.594119][ T5902] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1602.719563][ T5902] usb 7-1: USB disconnect, device number 114 [ 1603.720481][T27442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1603.774394][T27442] fuse: Bad value for 'user_id' [ 1603.779394][T27442] fuse: Bad value for 'user_id' [ 1604.268176][T27451] usb usb8: usbfs: process 27451 (syz.5.5310) did not claim interface 0 before use [ 1604.345090][ T5827] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1604.624963][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 1604.701578][ T5827] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1604.741095][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.824924][ T5835] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1604.834245][ T5827] usb 5-1: config 0 descriptor?? [ 1604.899074][ T5827] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1605.066858][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 1605.091436][ T5835] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1605.147728][T27447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.164602][ T5835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.261230][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1605.302269][T27447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.373397][ T5835] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1605.401409][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.412366][T27447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.421506][ T5835] usb 3-1: Product: syz [ 1605.421528][ T5835] usb 3-1: Manufacturer: syz [ 1605.483831][T27463] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5312'. [ 1605.531267][ T5835] usb 3-1: SerialNumber: syz [ 1605.536693][ T5827] gspca_vc032x: reg_r err -110 [ 1605.541507][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1605.554980][T27447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.563376][T27464] netlink: 'syz.5.5313': attribute type 1 has an invalid length. [ 1605.578339][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1605.583686][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1605.641283][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1605.657986][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1605.685268][T27464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1606.226330][ T5835] usb 3-1: 0:2 : does not exist [ 1606.276271][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.361123][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.366841][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.372192][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.378244][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.383579][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.655895][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.661257][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.670516][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.676371][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.681779][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.687665][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.693081][ T5827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1606.717668][ T5827] gspca_vc032x: Unknown sensor... [ 1606.788033][ T5827] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1606.984654][T16992] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1607.056886][ T5835] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1607.137259][T16992] usb 6-1: config index 0 descriptor too short (expected 4114, got 18) [ 1607.148458][T16992] usb 6-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 1607.160947][T16992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.179554][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.185998][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.204954][T16992] usb 6-1: Product: syz [ 1607.209157][T16992] usb 6-1: Manufacturer: syz [ 1607.213909][T16992] usb 6-1: SerialNumber: syz [ 1607.227813][T16992] usb 6-1: config 0 descriptor?? [ 1607.286044][ T5835] usb 3-1: USB disconnect, device number 79 [ 1607.488076][T20622] udevd[20622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1607.642840][T16992] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1607.958714][ T5934] usb 5-1: USB disconnect, device number 62 [ 1608.004681][ T5835] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1608.156283][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.175762][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.195244][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1608.214192][ T5835] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1608.260405][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.287353][ T5835] usb 3-1: config 0 descriptor?? [ 1608.445072][T22167] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1608.625073][T22167] usb 7-1: Using ep0 maxpacket: 16 [ 1608.642186][T22167] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1608.658875][T22167] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.671681][T22167] usb 7-1: Product: syz [ 1608.679684][T22167] usb 7-1: Manufacturer: syz [ 1608.684517][T22167] usb 7-1: SerialNumber: syz [ 1608.692784][T22167] usb 7-1: config 0 descriptor?? [ 1608.701691][T22167] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1608.710080][ T5835] usbhid 3-1:0.0: can't add hid device: -71 [ 1608.711294][T22167] usb 7-1: Detected FT-X [ 1608.730833][ T5835] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1608.759551][ T5835] usb 3-1: USB disconnect, device number 80 [ 1608.903917][T22167] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1609.113741][T27493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1609.122868][T27493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1609.336084][T22167] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 1609.349854][T27502] binfmt_misc: register: failed to install interpreter file ./file0 [ 1609.354885][T22167] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1609.394390][T22167] usb 7-1: USB disconnect, device number 115 [ 1609.427782][T22167] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1609.467317][T22167] ftdi_sio 7-1:0.0: device disconnected [ 1609.737005][T27512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5325'. [ 1609.809156][T16992] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1610.032503][T16992] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1610.166979][T16992] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1610.216576][T16992] usb 6-1: USB disconnect, device number 37 [ 1610.340440][T27518] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5327'. [ 1610.390360][T27518] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5327'. [ 1611.016349][T22167] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1611.180660][T22167] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1611.192628][T22167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.201486][T22167] usb 3-1: Product: syz [ 1611.206019][T22167] usb 3-1: Manufacturer: syz [ 1611.210641][T22167] usb 3-1: SerialNumber: syz [ 1611.222550][T22167] usb 3-1: config 0 descriptor?? [ 1611.244355][T22167] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1611.274937][T16992] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1611.426423][T16992] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1611.439146][T16992] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1611.450040][T16992] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1611.463262][T16992] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1611.475038][T16992] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1611.475047][ T5934] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1611.497181][T16992] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1611.506608][T16992] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1611.515385][T16992] usb 5-1: Product: syz [ 1611.519814][T16992] usb 5-1: Manufacturer: syz [ 1611.526788][T22167] gspca_sunplus: reg_r err -71 [ 1611.536416][T22167] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1611.540138][T16992] cdc_wdm 5-1:1.0: skipping garbage [ 1611.560164][T22167] usb 3-1: USB disconnect, device number 81 [ 1611.571498][T16992] cdc_wdm 5-1:1.0: skipping garbage [ 1611.580209][T16992] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1611.586772][T16992] cdc_wdm 5-1:1.0: Unknown control protocol [ 1611.605025][ T5934] usb 6-1: device descriptor read/64, error -71 [ 1611.809927][T27530] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5331'. [ 1611.819671][T27530] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5331'. [ 1611.838857][T27532] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5331'. [ 1611.848875][ T5934] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1611.856792][T27532] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5331'. [ 1611.915231][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1611.922094][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1611.930822][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1611.937446][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1611.945930][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1611.952556][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1611.959315][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1611.965932][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1611.972218][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1611.978829][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1611.985336][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1611.991961][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1611.998239][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1612.001481][ T5934] usb 6-1: device descriptor read/64, error -71 [ 1612.004834][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1612.004959][T22167] usb 5-1: USB disconnect, device number 63 [ 1612.137393][ T5934] usb usb6-port1: attempt power cycle [ 1612.484799][ T5934] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1612.505163][ T5934] usb 6-1: device descriptor read/8, error -71 [ 1612.744697][ T5934] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1612.785433][ T5934] usb 6-1: device descriptor read/8, error -71 [ 1612.894975][ T5934] usb usb6-port1: unable to enumerate USB device [ 1614.236318][T27560] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5338'. [ 1614.724635][ T5934] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1615.084718][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 1615.101578][ T5934] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1615.128124][ T5934] usb 3-1: config 0 has no interface number 0 [ 1615.189508][ T5934] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1615.255164][ T5934] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1615.284716][ T5934] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1615.307354][ T5934] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1615.330937][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.419648][ T5934] usb 3-1: Product: syz [ 1615.429373][ T5934] usb 3-1: Manufacturer: syz [ 1615.454606][ T5934] usb 3-1: SerialNumber: syz [ 1615.500584][ T5934] usb 3-1: config 0 descriptor?? [ 1615.672729][T27566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1615.683350][T27566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1615.826366][T27584] netlink: 'syz.6.5343': attribute type 6 has an invalid length. [ 1615.900845][T27566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1615.928690][T27566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1616.364241][ T5934] Error reading MAC address [ 1616.399547][T27566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1616.415148][T27566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1616.714803][ T5827] usb 7-1: new low-speed USB device number 116 using dummy_hcd [ 1616.834810][ T5835] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1616.888539][ T5827] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 1616.900465][ T5827] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 1616.914664][ T5827] usb 7-1: config 0 has no interface number 0 [ 1616.920817][ T5827] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1616.931920][ T5827] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1616.942406][ T5827] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1616.951751][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.963509][ T5827] usb 7-1: config 0 descriptor?? [ 1617.015539][ T5835] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1617.034826][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1617.060474][ T5835] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1617.074076][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.082920][ T5835] usb 6-1: Product: syz [ 1617.087620][ T5835] usb 6-1: Manufacturer: syz [ 1617.092256][ T5835] usb 6-1: SerialNumber: syz [ 1617.120584][ T5835] usb 6-1: config 0 descriptor?? [ 1617.131964][ T5934] sr9700 3-1:0.41 eth13: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, f6:1a:20:94:ca:cc [ 1617.150159][ T5835] usb 6-1: selecting invalid altsetting 0 [ 1617.167115][ T5934] usb 3-1: USB disconnect, device number 82 [ 1617.190269][ T5934] sr9700 3-1:0.41 eth13: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 1617.372941][ T5835] usb 6-1: USB disconnect, device number 42 [ 1617.392272][ T5827] usb 7-1: USB disconnect, device number 116 [ 1617.962680][T27593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1618.074649][T27605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.203256][T27605] bridge_slave_1 (unregistering): left allmulticast mode [ 1618.217027][T27612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1618.249836][T27605] bridge_slave_1 (unregistering): left promiscuous mode [ 1618.269074][T27605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.472120][T27617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5353'. [ 1618.935747][T16992] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1619.116255][T16992] usb 6-1: Using ep0 maxpacket: 16 [ 1619.129298][T16992] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1619.149094][T16992] usb 6-1: config 1 has an invalid interface number: 31 but max is 0 [ 1619.163990][T16992] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1619.183192][T16992] usb 6-1: config 1 has no interface number 0 [ 1619.198590][T16992] usb 6-1: too many endpoints for config 1 interface 31 altsetting 246: 114, using maximum allowed: 30 [ 1619.213977][T16992] usb 6-1: config 1 interface 31 altsetting 246 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 1619.258181][T16992] usb 6-1: config 1 interface 31 has no altsetting 0 [ 1619.270218][T16992] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1619.286274][T16992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.308152][T16992] usb 6-1: Product: syz [ 1619.312347][T16992] usb 6-1: Manufacturer: syz [ 1619.328783][T16992] usb 6-1: SerialNumber: syz [ 1619.494855][ T5835] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1619.692862][ T5835] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1619.695890][T16992] usb 6-1: USB disconnect, device number 43 [ 1619.719916][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.744768][ T5835] usb 3-1: Product: syz [ 1619.749099][ T5835] usb 3-1: Manufacturer: syz [ 1619.754055][ T5835] usb 3-1: SerialNumber: syz [ 1619.775821][ T5835] usb 3-1: config 0 descriptor?? [ 1619.994971][ T5902] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1620.029206][T27632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.049335][T27632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.114661][T16992] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1620.157044][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.168244][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.198720][ T5902] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1620.207936][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.221306][ T5902] usb 5-1: config 0 descriptor?? [ 1620.233986][T27646] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1620.254854][T16992] usb 6-1: device descriptor read/64, error -71 [ 1620.494813][T16992] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1620.583923][T27632] delete_channel: no stack [ 1620.685451][ T5835] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 1620.696707][ T5835] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1620.706464][T16992] usb 6-1: device descriptor read/64, error -71 [ 1620.734619][ T5835] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 1620.815422][T16992] usb usb6-port1: attempt power cycle [ 1620.821417][ T5835] usb 3-1: USB disconnect, device number 83 [ 1620.928601][T27642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.955133][T27642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.169795][T16992] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1621.183372][ T5902] uclogic 0003:256C:006D.004F: failed retrieving Huion firmware version: -71 [ 1621.195835][ T5902] uclogic 0003:256C:006D.004F: failed probing parameters: -71 [ 1621.208950][T16992] usb 6-1: device descriptor read/8, error -71 [ 1621.223123][ T5902] uclogic 0003:256C:006D.004F: probe with driver uclogic failed with error -71 [ 1621.299256][ T5835] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1621.306238][ T5902] usb 5-1: USB disconnect, device number 64 [ 1621.528208][T16992] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1621.559406][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.580166][T16992] usb 6-1: device descriptor read/8, error -71 [ 1621.582272][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.784004][ T5835] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1621.789979][T16992] usb usb6-port1: unable to enumerate USB device [ 1621.810763][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.831768][ T5835] usb 7-1: config 0 descriptor?? [ 1622.162329][T27677] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1622.174338][T27678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5367'. [ 1622.188090][T27677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5366'. [ 1622.197560][T27678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5367'. [ 1622.301752][ T5835] hid-thrustmaster 0003:044F:B65D.0050: unknown main item tag 0x0 [ 1622.341577][ T5835] hid-thrustmaster 0003:044F:B65D.0050: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 1622.360128][ T5835] hid-thrustmaster 0003:044F:B65D.0050: Wrong number of endpoints? [ 1622.516567][T27664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.534524][T27664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.579705][T27664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.590041][T27664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.663992][ C1] hid-thrustmaster 0003:044F:B65D.0050: URB to get model id failed with error -71 [ 1622.664396][T16992] usb 7-1: USB disconnect, device number 117 [ 1623.371531][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5375'. [ 1623.396660][T16992] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1623.554682][T16992] usb 3-1: Using ep0 maxpacket: 32 [ 1623.565820][T16992] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1623.574208][T16992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.595966][T16992] usb 3-1: config 0 has no interface number 0 [ 1623.607968][T16992] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1623.629951][T16992] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1623.641903][T16992] usb 3-1: New USB device strings: Mfr=235, Product=1, SerialNumber=3 [ 1623.654348][T16992] usb 3-1: Product: syz [ 1623.659283][T16992] usb 3-1: Manufacturer: syz [ 1623.676049][T16992] usb 3-1: SerialNumber: syz [ 1623.716973][T16992] usb 3-1: config 0 descriptor?? [ 1623.742709][T16992] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1623.815161][ T5835] usb 7-1: new full-speed USB device number 118 using dummy_hcd [ 1623.948038][T16992] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 1623.979955][ T5835] usb 7-1: device descriptor read/64, error -71 [ 1624.005032][T16992] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 1624.028571][T27715] loop6: detected capacity change from 0 to 7 [ 1624.055498][T27715] Dev loop6: unable to read RDB block 7 [ 1624.061416][T27715] loop6: AHDI p1 p2 [ 1624.079743][T27715] loop6: partition table partially beyond EOD, truncated [ 1624.093560][T27715] loop6: p1 start 926365495 is beyond EOD, truncated [ 1624.165209][ T5941] usb 3-1: USB disconnect, device number 84 [ 1624.202254][T20622] udevd[20622]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1624.234927][ T5835] usb 7-1: new full-speed USB device number 119 using dummy_hcd [ 1624.454761][ T5835] usb 7-1: device descriptor read/64, error -71 [ 1624.585149][ T5835] usb usb7-port1: attempt power cycle [ 1624.695371][T27726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5381'. [ 1624.960905][ T5835] usb 7-1: new full-speed USB device number 120 using dummy_hcd [ 1625.075007][ T5835] usb 7-1: device descriptor read/8, error -71 [ 1625.364625][ T5835] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 1625.416948][ T5835] usb 7-1: device descriptor read/8, error -71 [ 1625.538456][ T5835] usb usb7-port1: unable to enumerate USB device [ 1625.549262][T27746] netlink: 'syz.7.5385': attribute type 29 has an invalid length. [ 1625.560994][T27746] netlink: 'syz.7.5385': attribute type 29 has an invalid length. [ 1625.572616][T27746] netlink: 500 bytes leftover after parsing attributes in process `syz.7.5385'. [ 1625.764721][T16992] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1625.835255][ T5902] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1625.916303][T16992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.974865][T16992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.003677][T16992] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1626.024401][T16992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.045855][T16992] usb 3-1: config 0 descriptor?? [ 1626.062132][ T5902] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1626.073761][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.082610][ T5902] usb 5-1: Product: syz [ 1626.089326][ T5902] usb 5-1: Manufacturer: syz [ 1626.094513][ T5902] usb 5-1: SerialNumber: syz [ 1626.106844][ T5902] usb 5-1: config 0 descriptor?? [ 1626.117667][ T5902] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1626.214862][ T5835] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1626.258002][T16992] cm6533_jd 0003:0D8C:0022.0051: unknown main item tag 0x0 [ 1626.280833][T16992] cm6533_jd 0003:0D8C:0022.0051: unknown main item tag 0x0 [ 1626.307187][T16992] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0051/input/input166 [ 1626.354430][T27748] input: syz1 as /devices/virtual/input/input167 [ 1626.366925][T16992] cm6533_jd 0003:0D8C:0022.0051: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1626.385976][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 1626.402916][ T5835] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1626.421129][ T5835] usb 6-1: config 0 has no interface number 0 [ 1626.427903][ T5835] usb 6-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.439144][ T5835] usb 6-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.453868][ T5835] usb 6-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1626.468048][ T5835] usb 6-1: config 0 interface 2 has no altsetting 0 [ 1626.475336][ T5835] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1626.476699][ T5827] usb 3-1: USB disconnect, device number 85 [ 1626.496879][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.552373][ T5835] usb 6-1: config 0 descriptor?? [ 1626.598857][T27757] fido_id[27757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1626.616528][ T5902] sonixb 5-1:0.0: Error writing register 01: -71 [ 1626.632280][ T5902] sonixb 5-1:0.0: probe with driver sonixb failed with error -71 [ 1626.658188][ T5902] usb 5-1: USB disconnect, device number 65 [ 1626.734411][T27760] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5392'. [ 1626.978855][ T5835] uclogic 0003:5543:0781.0052: unknown main item tag 0x0 [ 1627.001807][ T5835] uclogic 0003:5543:0781.0052: unknown main item tag 0x0 [ 1627.031056][ T5835] uclogic 0003:5543:0781.0052: unknown main item tag 0x0 [ 1627.045379][ T5835] uclogic 0003:5543:0781.0052: unknown main item tag 0x0 [ 1627.052460][ T5835] uclogic 0003:5543:0781.0052: unknown main item tag 0x0 [ 1627.083517][ T5835] uclogic 0003:5543:0781.0052: unknown main item tag 0x0 [ 1627.095421][ T5835] uclogic 0003:5543:0781.0052: unknown main item tag 0x0 [ 1627.110482][ T5835] uclogic 0003:5543:0781.0052: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.5-1/input2 [ 1627.191289][T27752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1627.236014][T27752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1627.300188][ T5835] usb 6-1: USB disconnect, device number 48 [ 1627.624851][ T5934] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1627.799094][ T5934] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 1627.808228][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.839739][ T5934] usb 5-1: config 0 has no interface number 0 [ 1627.858045][ T5934] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1627.886883][ T5934] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.925168][ T5934] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 1627.944292][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.971247][ T5934] usb 5-1: Product: syz [ 1627.983979][ T5934] usb 5-1: Manufacturer: syz [ 1627.989065][ T5934] usb 5-1: SerialNumber: syz [ 1627.999979][ T5934] usb 5-1: config 0 descriptor?? [ 1628.015518][T27778] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1628.027534][ T5934] hdpvr 5-1:0.33: Could not find bulk-in endpoint [ 1628.034227][ T5934] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12 [ 1628.316986][ T5902] usb 5-1: USB disconnect, device number 66 [ 1628.403135][T27796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5399'. [ 1628.442952][T27800] tmpfs: Unknown parameter 'fd' [ 1629.014697][ T5934] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1629.015090][T27812] loop2: detected capacity change from 0 to 7 [ 1629.047234][T27812] Dev loop2: unable to read RDB block 7 [ 1629.066968][T27812] loop2: AHDI p2 [ 1629.070680][T27812] loop2: partition table partially beyond EOD, truncated [ 1629.144701][ T5934] usb 5-1: device descriptor read/64, error -71 [ 1629.377245][T27820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5408'. [ 1629.400269][ T5934] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1629.504969][ T5835] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1629.545537][ T5934] usb 5-1: device descriptor read/64, error -71 [ 1629.655860][ T5835] usb 6-1: device descriptor read/64, error -71 [ 1629.665023][ T5934] usb usb5-port1: attempt power cycle [ 1629.824727][ T5941] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1629.904701][ T5835] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1630.017410][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1630.025294][ T5934] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1630.033724][ T5941] usb 3-1: can't read configurations, error -61 [ 1630.044822][ T5835] usb 6-1: device descriptor read/64, error -71 [ 1630.055271][ T5934] usb 5-1: device descriptor read/8, error -71 [ 1630.155290][ T5835] usb usb6-port1: attempt power cycle [ 1630.164808][ T5941] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1630.295097][ T5934] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1630.315479][ T5934] usb 5-1: device descriptor read/8, error -71 [ 1630.323525][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1630.331498][ T5941] usb 3-1: can't read configurations, error -61 [ 1630.338652][ T5941] usb usb3-port1: attempt power cycle [ 1630.425103][ T5934] usb usb5-port1: unable to enumerate USB device [ 1630.514918][ T5835] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1630.545402][ T5835] usb 6-1: device descriptor read/8, error -71 [ 1630.694757][ T5941] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1630.739489][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1630.747364][ T5941] usb 3-1: can't read configurations, error -61 [ 1630.794656][ T5835] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1630.817814][ T5835] usb 6-1: device descriptor read/8, error -71 [ 1630.935358][ T5941] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1630.943371][ T5835] usb usb6-port1: unable to enumerate USB device [ 1630.967697][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1630.975428][ T5941] usb 3-1: can't read configurations, error -61 [ 1630.982098][ T5941] usb usb3-port1: unable to enumerate USB device [ 1631.210000][T27838] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5414'. [ 1631.715210][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1631.715226][ T30] audit: type=1326 audit(1751449717.774:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27806 comm="syz.4.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca118e929 code=0x7fc00000 [ 1632.698182][ T5941] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1632.867902][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 1632.893950][ T5941] usb 6-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 1632.904314][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1632.915879][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 18482, setting to 1024 [ 1632.927123][ T5941] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1632.937213][ T5941] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1632.951609][ T5941] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1632.960983][ T5941] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1632.969044][ T5941] usb 6-1: Manufacturer: syz [ 1632.981544][ T5941] usb 6-1: config 0 descriptor?? [ 1633.284640][ T5941] rc_core: IR keymap rc-hauppauge not found [ 1633.290751][ T5941] Registered IR keymap rc-empty [ 1633.311238][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1633.349406][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1633.386095][ T5941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1633.412268][ T5941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input168 [ 1633.465994][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1633.484941][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1633.537437][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1633.576565][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1633.616489][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1633.679695][T27863] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5418'. [ 1633.738332][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1634.167960][ T5835] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1634.213363][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1634.364627][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1634.405289][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1634.425214][ T5941] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1634.434777][ T5835] usb 7-1: Using ep0 maxpacket: 16 [ 1634.461063][ T5941] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1634.499177][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1634.515213][ T5941] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1634.523744][ T5835] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1634.546992][ T5835] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1634.557051][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.558245][ T5941] usb 6-1: USB disconnect, device number 53 [ 1634.577991][ T5835] usb 7-1: Product: syz [ 1634.582321][ T5835] usb 7-1: Manufacturer: syz [ 1634.593112][T27874] netlink: 'syz.7.5422': attribute type 29 has an invalid length. [ 1634.601067][ T5835] usb 7-1: SerialNumber: syz [ 1634.608848][ T5835] usb 7-1: config 0 descriptor?? [ 1634.624214][T27874] netlink: 'syz.7.5422': attribute type 29 has an invalid length. [ 1634.697944][T27865] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1634.710431][ T5835] hub 7-1:0.0: bad descriptor, ignoring hub [ 1634.728151][T27874] netlink: 576 bytes leftover after parsing attributes in process `syz.7.5422'. [ 1634.816443][ T5835] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1634.950023][ T5835] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input169 [ 1634.983068][T27865] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5419'. [ 1635.056233][T27879] netlink: 'syz.4.5424': attribute type 29 has an invalid length. [ 1635.068416][T27879] netlink: 'syz.4.5424': attribute type 29 has an invalid length. [ 1635.077465][T27879] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5424'. [ 1635.136974][T27865] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5419'. [ 1636.685216][T23153] usb 7-1: USB disconnect, device number 122 [ 1668.619027][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.625910][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1710.407999][T27912] syz_tun: entered allmulticast mode [ 1710.424434][T27907] syz_tun: left allmulticast mode [ 1710.546901][T27924] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5430'. [ 1710.584669][ T5941] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1710.624818][ T5902] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1710.664347][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5432'. [ 1710.677499][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5432'. [ 1710.724904][ T5941] usb 5-1: device descriptor read/64, error -71 [ 1710.807401][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1710.824572][ T5902] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1710.839350][ T5902] usb 3-1: config 1 has no interface number 1 [ 1710.857615][ T5902] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1710.971064][ T5902] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1710.990941][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.999704][T27945] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1711.017911][ T5902] usb 3-1: Product: syz [ 1711.022124][ T5902] usb 3-1: Manufacturer: syz [ 1711.032396][ T5902] usb 3-1: SerialNumber: syz [ 1711.045019][T27948] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5435'. [ 1711.054078][ T5941] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1711.286343][T27946] : renamed from xfrm0 (while UP) [ 1711.387760][ T5941] usb 5-1: device descriptor read/64, error -71 [ 1711.487542][ T5902] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 1711.496264][ T5941] usb usb5-port1: attempt power cycle [ 1711.708260][ T5902] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 1711.711329][T27957] netlink: 'syz.5.5436': attribute type 29 has an invalid length. [ 1711.731772][ T5902] usb 3-1: failed to enable PITCH for EP 0x82 [ 1711.760628][T27957] netlink: 'syz.5.5436': attribute type 29 has an invalid length. [ 1711.785642][ T5902] usb 3-1: USB disconnect, device number 90 [ 1711.799772][T27957] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5436'. [ 1711.854750][ T5941] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1711.897366][ T5941] usb 5-1: device descriptor read/8, error -71 [ 1711.911384][T27959] udevd[27959]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1712.188392][ T5941] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1712.285816][ T5941] usb 5-1: device descriptor read/8, error -71 [ 1712.366571][T27968] fuse: Bad value for 'group_id' [ 1712.371839][T27968] fuse: Bad value for 'group_id' [ 1712.424663][ T5941] usb usb5-port1: unable to enumerate USB device [ 1712.891748][T27975] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1713.750291][T15368] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1713.765768][T27999] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5449'. [ 1713.853096][T28005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1713.865135][T28006] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1713.879704][T28005] netlink: 'syz.5.5451': attribute type 9 has an invalid length. [ 1713.888665][T28005] netlink: 200108 bytes leftover after parsing attributes in process `syz.5.5451'. [ 1713.899514][T28006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5448'. [ 1713.908747][T28005] openvswitch: netlink: Message has 5 unknown bytes. [ 1713.934589][ T5941] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1714.009966][T28010] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5452'. [ 1714.043100][T28010] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5452'. [ 1714.155109][ T5902] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1714.164661][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 1714.171562][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.189204][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1714.211022][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1714.224573][ T5941] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1714.234388][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1714.270695][ T5941] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1714.279908][ T5941] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1714.294720][ T5941] usb 5-1: Manufacturer: syz [ 1714.301519][ T5941] usb 5-1: config 0 descriptor?? [ 1714.305331][T16992] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1714.319633][ T5902] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 1714.332025][ T5902] usb 3-1: config 0 has no interface number 0 [ 1714.342467][ T5902] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 7432, setting to 64 [ 1714.354129][ T5902] usb 3-1: config 0 interface 235 has no altsetting 0 [ 1714.368302][ T5902] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1714.386576][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.397422][ T5902] usb 3-1: Product: syz [ 1714.401737][ T5902] usb 3-1: Manufacturer: syz [ 1714.409293][ T5902] usb 3-1: SerialNumber: syz [ 1714.419631][ T5902] usb 3-1: config 0 descriptor?? [ 1714.431915][T28007] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1714.444205][ T5902] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 1714.460864][ T5902] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 1714.471702][ T5902] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 1714.480063][T16992] usb 6-1: Using ep0 maxpacket: 32 [ 1714.497199][T16992] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1714.506678][ T5902] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 1714.515619][T16992] usb 6-1: config 0 has no interface number 0 [ 1714.523005][T16992] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1714.530149][ T5902] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 1714.538713][ T5902] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 1714.549828][T16992] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1714.559273][T16992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.569539][ T5902] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1714.584644][T16992] usb 6-1: Product: syz [ 1714.588833][T16992] usb 6-1: Manufacturer: syz [ 1714.597511][T16992] usb 6-1: SerialNumber: syz [ 1714.633875][T16992] usb 6-1: config 0 descriptor?? [ 1714.659949][T16992] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1714.673629][T16992] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1714.729146][ T5941] rc_core: IR keymap rc-hauppauge not found [ 1714.737853][ T5941] Registered IR keymap rc-empty [ 1714.742974][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1714.765777][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1714.788915][ T5941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1714.815915][ T5941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input170 [ 1714.833313][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1714.854708][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1714.885158][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1714.914701][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1714.915025][T16992] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1714.945606][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1714.964775][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1714.985727][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1714.993981][T16992] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1715.003094][T16992] em28xx 6-1:0.89: board has no eeprom [ 1715.015435][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1715.034865][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1715.054803][ T5941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1715.067060][T16992] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1715.074611][T16992] em28xx 6-1:0.89: analog set to bulk mode. [ 1715.074688][ T5827] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1715.080576][ T10] em28xx 6-1:0.89: Registering V4L2 extension [ 1715.091469][ T5941] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1715.109827][T16992] usb 6-1: USB disconnect, device number 54 [ 1715.110755][ T5941] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1715.134967][T16992] em28xx 6-1:0.89: Disconnecting em28xx [ 1715.163933][ T5941] usb 5-1: USB disconnect, device number 75 [ 1715.193212][ T10] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1715.200597][ T10] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1715.220105][ T10] em28xx 6-1:0.89: No AC97 audio processor [ 1715.233418][ T10] usb 6-1: Decoder not found [ 1715.240959][ T10] em28xx 6-1:0.89: failed to create media graph [ 1715.247631][ T10] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1715.258370][ T10] em28xx 6-1:0.89: Registering snapshot button... [ 1715.267295][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input171 [ 1715.285425][ T5827] usb 7-1: Using ep0 maxpacket: 8 [ 1715.286133][ T10] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1715.293743][ T5827] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1715.304087][T16992] em28xx 6-1:0.89: Closing input extension [ 1715.309695][ T5827] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1715.312753][T16992] em28xx 6-1:0.89: Deregistering snapshot button [ 1715.324453][ T5827] usb 7-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 1715.343150][ T5827] usb 7-1: config 1 interface 0 altsetting 13 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1715.354386][ T5827] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1715.364683][ T5827] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1715.374078][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.382886][ T5827] usb 7-1: Product: syz [ 1715.387545][ T5827] usb 7-1: Manufacturer: syz [ 1715.389167][T16992] em28xx 6-1:0.89: Freeing device [ 1715.392209][ T5827] usb 7-1: SerialNumber: syz [ 1715.408038][T28013] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1715.417169][T28013] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1715.674851][ T5827] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1715.761735][ T5827] usb 7-1: USB disconnect, device number 123 [ 1715.971831][T28041] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 1715.972160][T28042] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 1715.981146][T28041] PKCS7: Only support pkcs7_signedData type [ 1715.992116][T28042] PKCS7: Only support pkcs7_signedData type [ 1716.244997][ T5941] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1716.294642][ T5902] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1716.349962][T28052] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1716.368030][T28052] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5463'. [ 1716.397642][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 1716.405595][ T5941] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 1716.413927][ T5941] usb 5-1: config 0 has no interface number 0 [ 1716.424154][ T5941] usb 5-1: config 0 interface 53 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 1716.434479][ T5941] usb 5-1: config 0 interface 53 has no altsetting 0 [ 1716.446895][ T5941] usb 5-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice=dd.2e [ 1716.460145][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.468734][ T5941] usb 5-1: Product: syz [ 1716.470121][ T5902] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1716.473061][ T5941] usb 5-1: Manufacturer: syz [ 1716.486798][ T5941] usb 5-1: SerialNumber: syz [ 1716.494354][ T5941] usb 5-1: config 0 descriptor?? [ 1716.505951][T28044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1716.520099][ T5941] iowarrior 5-1:0.53: no interrupt-in endpoint found [ 1716.699493][ T5902] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1716.720304][ T5941] usb 5-1: USB disconnect, device number 76 [ 1716.724584][ T5902] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1716.896341][ T5835] usb 3-1: USB disconnect, device number 91 [ 1716.932114][ T5835] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1716.957754][ T5835] keyspan 3-1:0.235: device disconnected [ 1717.042584][ T5902] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1717.055836][ T5902] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1717.069873][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1717.097877][ T5902] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1717.107256][ T5902] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1717.115915][ T5902] usb 6-1: Product: syz [ 1717.138532][ T5902] usb 6-1: Manufacturer: syz [ 1717.143173][ T5902] usb 6-1: SerialNumber: syz [ 1717.167814][ T5902] usb 6-1: config 0 descriptor?? [ 1717.185218][T28048] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1717.222082][ T5902] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1717.277183][ T5902] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1717.286171][T28062] netlink: 'syz.2.5467': attribute type 1 has an invalid length. [ 1717.337862][T28062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1717.367990][T28062] bond3: (slave gretap1): making interface the new active one [ 1717.376914][T28062] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1717.429877][ T5934] usb 6-1: USB disconnect, device number 55 [ 1717.466381][ T5934] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1717.494609][ T5827] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1717.644621][ T5827] usb 7-1: Using ep0 maxpacket: 16 [ 1717.651419][ T5827] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.666031][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1717.677059][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1717.689292][ T5827] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1717.698990][ T5827] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1717.713544][ T5827] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1717.722682][ T5827] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1717.731184][ T5835] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1717.738889][ T5827] usb 7-1: Manufacturer: syz [ 1717.754263][ T5827] usb 7-1: config 0 descriptor?? [ 1717.904855][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 1717.918589][ T5835] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1717.928448][ T5835] usb 3-1: config 0 has no interface number 0 [ 1717.946175][ T5835] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1717.980766][ T5835] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1718.004695][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.023173][ T5835] usb 3-1: Product: syz [ 1718.051722][ T5835] usb 3-1: Manufacturer: syz [ 1718.112482][ T5835] usb 3-1: SerialNumber: syz [ 1718.128146][ T5835] usb 3-1: config 0 descriptor?? [ 1718.159260][ T5835] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1718.198415][ T5835] em28xx 3-1:0.132: Video interface 132 found: [ 1718.575593][ T5835] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1718.795074][ T5934] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1718.971837][ T5934] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1718.984968][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.993252][ T5835] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1719.006609][ T5934] usb 6-1: Product: syz [ 1719.012317][ T5934] usb 6-1: Manufacturer: syz [ 1719.019571][ T5835] em28xx 3-1:0.132: board has no eeprom [ 1719.025901][ T5934] usb 6-1: SerialNumber: syz [ 1719.043543][ T5934] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1719.067248][T18600] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1719.114812][ T5835] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1719.122767][ T5835] em28xx 3-1:0.132: analog set to bulk mode. [ 1719.132662][ T5934] em28xx 3-1:0.132: Registering V4L2 extension [ 1719.477139][T28088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.492600][T28088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.299576][T18600] usb 6-1: Service connection timeout for: 256 [ 1720.307647][ T5934] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1720.352398][T18600] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1720.381430][ T5934] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1720.473221][ T5934] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1720.554598][ T5827] rc_core: IR keymap rc-hauppauge not found [ 1720.567929][T18600] ath9k_htc: Failed to initialize the device [ 1720.581206][T28105] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5476'. [ 1720.586499][T28106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.604048][ T5827] Registered IR keymap rc-empty [ 1720.611993][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 1720.619403][ T5934] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1720.628949][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1720.669096][ T5835] usb 3-1: USB disconnect, device number 92 [ 1720.688033][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1720.700174][ T5835] em28xx 3-1:0.132: Disconnecting em28xx [ 1720.733457][T18600] usb 6-1: ath9k_htc: USB layer deinitialized [ 1720.755702][ T5827] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1720.797208][ T5827] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input172 [ 1720.886482][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1720.956672][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1721.008540][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1721.042208][ T5934] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1721.074476][ T5934] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1721.091867][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1721.121181][ T5934] em28xx 3-1:0.132: No AC97 audio processor [ 1721.128393][T28126] hsr0: entered promiscuous mode [ 1721.148764][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1721.171224][ T5934] usb 3-1: Decoder not found [ 1721.201531][ T5934] em28xx 3-1:0.132: failed to create media graph [ 1721.218851][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1721.262170][ T5934] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1721.295715][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1721.317208][ T5934] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1721.364852][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1721.383182][ T5835] em28xx 3-1:0.132: Closing input extension [ 1721.425710][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1721.450376][ T5835] em28xx 3-1:0.132: Freeing device [ 1721.474818][ T5827] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1721.563357][ T5827] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1721.623317][ T5827] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1721.640984][T18600] usb 6-1: USB disconnect, device number 56 [ 1721.688120][ T5827] usb 7-1: USB disconnect, device number 124 [ 1722.074630][ T5827] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1722.105021][T18600] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1722.241380][ T5827] usb 7-1: Using ep0 maxpacket: 32 [ 1722.273475][ T5827] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1722.282596][T18600] usb 6-1: Using ep0 maxpacket: 32 [ 1722.304930][T18600] usb 6-1: config 9 has an invalid interface number: 141 but max is 2 [ 1722.322147][ T5827] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1722.347429][T18600] usb 6-1: config 9 has an invalid interface number: 15 but max is 2 [ 1722.365528][ T5827] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1722.374683][T18600] usb 6-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1722.390561][T18600] usb 6-1: config 9 has an invalid interface number: 90 but max is 2 [ 1722.401489][ T5827] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1722.421046][T18600] usb 6-1: config 9 has an invalid interface number: 33 but max is 2 [ 1722.429389][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.444975][ T5827] usb 7-1: Product: ф [ 1722.449220][T18600] usb 6-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1722.458852][ T5827] usb 7-1: Manufacturer: 唍螭鸲ﵬ⨁렅メ౺㧉銍㱘龜绉໬Υ⻠杗쥵ꭵ䓝ᘸ뿅ḩ罴ꅥ빎尟ꝕ﷢렫ﵡ嬍ꚷ用赌젙㆘삚 [ 1722.494134][T18600] usb 6-1: config 9 has 4 interfaces, different from the descriptor's value: 3 [ 1722.507460][T18600] usb 6-1: config 9 has no interface number 0 [ 1722.513612][ T5827] usb 7-1: SerialNumber: А [ 1722.518863][T18600] usb 6-1: config 9 has no interface number 1 [ 1722.529017][T18600] usb 6-1: config 9 has no interface number 2 [ 1722.538252][T18600] usb 6-1: config 9 has no interface number 3 [ 1722.548207][T18600] usb 6-1: config 9 interface 141 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1722.559492][T18600] usb 6-1: config 9 interface 141 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1722.570767][T18600] usb 6-1: config 9 interface 141 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1722.581994][T18600] usb 6-1: config 9 interface 141 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1722.594467][T18600] usb 6-1: config 9 interface 141 altsetting 6 bulk endpoint 0xB has invalid maxpacket 8 [ 1722.606571][T18600] usb 6-1: config 9 interface 141 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1722.618115][T18600] usb 6-1: config 9 interface 141 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 32 [ 1722.628589][T18600] usb 6-1: config 9 interface 141 altsetting 6 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 1722.642239][T18600] usb 6-1: too many endpoints for config 9 interface 15 altsetting 48: 113, using maximum allowed: 30 [ 1722.654224][T18600] usb 6-1: config 9 interface 15 altsetting 48 has a duplicate endpoint with address 0xF, skipping [ 1722.673930][T18600] usb 6-1: config 9 interface 15 altsetting 48 has a duplicate endpoint with address 0x8, skipping [ 1722.689869][T18600] usb 6-1: config 9 interface 15 altsetting 48 has a duplicate endpoint with address 0x2, skipping [ 1722.703979][T18600] usb 6-1: config 9 interface 15 altsetting 48 has 4 endpoint descriptors, different from the interface descriptor's value: 113 [ 1722.718589][T18600] usb 6-1: config 9 interface 90 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1722.731392][T18600] usb 6-1: config 9 interface 90 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1722.749057][T18600] usb 6-1: config 9 interface 90 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1722.760766][T18600] usb 6-1: config 9 interface 90 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1722.773709][T18600] usb 6-1: config 9 interface 90 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1722.798770][T18600] usb 6-1: config 9 interface 90 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1722.811415][T18600] usb 6-1: config 9 interface 90 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1722.822494][T18600] usb 6-1: config 9 interface 90 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1722.825330][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1722.834330][T18600] usb 6-1: config 9 interface 90 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1722.854213][T18600] usb 6-1: config 9 interface 90 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1722.866059][T18600] usb 6-1: config 9 interface 90 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1722.883361][T18600] usb 6-1: config 9 interface 90 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1722.899639][T18600] usb 6-1: config 9 interface 90 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 1722.911594][T18600] usb 6-1: config 9 interface 90 altsetting 2 endpoint 0x9 has invalid maxpacket 951, setting to 64 [ 1722.923618][T18600] usb 6-1: config 9 interface 33 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 1722.935119][T18600] usb 6-1: config 9 interface 33 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 1722.949751][T18600] usb 6-1: config 9 interface 33 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 1722.961908][ T5827] usb 7-1: 0:2 : does not exist [ 1722.964745][ T5902] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1722.977875][ T5827] usb 7-1: USB disconnect, device number 125 [ 1723.016188][T18600] usb 6-1: config 9 interface 33 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 1723.049070][T18600] usb 6-1: config 9 interface 33 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 1723.065212][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1723.079914][T27914] udevd[27914]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1723.097046][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1723.118788][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1723.144729][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 1723.151608][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1723.164959][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.183459][ T10] usb 5-1: Product: syz [ 1723.183945][T18600] usb 6-1: config 9 interface 33 altsetting 64 bulk endpoint 0x7 has invalid maxpacket 64 [ 1723.192421][ T10] usb 5-1: Manufacturer: syz [ 1723.206826][ T10] usb 5-1: SerialNumber: syz [ 1723.221719][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1723.229717][T18600] usb 6-1: config 9 interface 33 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 1723.244053][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1723.244082][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1723.267241][T18600] usb 6-1: config 9 interface 33 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 1723.271868][ T10] usb 5-1: config 0 descriptor?? [ 1723.278304][T18600] usb 6-1: config 9 interface 141 has no altsetting 0 [ 1723.292614][T18600] usb 6-1: config 9 interface 15 has no altsetting 0 [ 1723.299523][T18600] usb 6-1: config 9 interface 90 has no altsetting 0 [ 1723.302857][ T5902] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1723.307068][T18600] usb 6-1: config 9 interface 33 has no altsetting 0 [ 1723.319131][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1723.337737][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1723.346436][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.346599][T18600] usb 6-1: Dual-Role OTG device on HNP port [ 1723.368218][ T5902] usb 3-1: config 0 descriptor?? [ 1723.381294][T28152] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1723.389292][T18600] usb 6-1: New USB device found, idVendor=1413, idProduct=5400, bcdDevice= c.57 [ 1723.412413][ T5902] hub 3-1:0.0: USB hub found [ 1723.423185][T18600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.431562][T18600] usb 6-1: Product: ًⰺ̊㱪峵楴情䧯ꑖ鄫૧퀉擶ᖷ滏ꣂ囿䢭䄛Ꚅ孂糓긘ㄉ䳐흎孾脏팢홆秮ᰓ㰺䩍깜핂烤맚⼤㔉셅鏛አ羵ﾪ캵즚몳Ꜵ籄湆ƫ粳㚱䠖専倭阊믥ꁝ☉㸑쾽䴼魿ᐬϙ磃쇛蒾驛鶼壴嵵鶚Ԋ낟脈ꛩ贯닋퐱夗翈ꦥ놨ꢏ鱔濌叿쑆䕋櫼ൄ [ 1723.497836][T18600] usb 6-1: Manufacturer: ᐉ [ 1723.502615][T18600] usb 6-1: SerialNumber: 徊髝鱝㹠抛꾲᪳롳聎퟽ٵ䑸ɹ纫Ჷ徼Ѥ䓜쵳浫䈐谓ꮨࢠᷰ＼ኧດ宿腧╎雳팰硊䯮糧⭰臝 [ 1723.552697][T28136] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1723.569190][T28136] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1723.655404][ T5902] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1723.667897][T28136] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1723.950624][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1724.029781][T18600] usb 6-1: USB disconnect, device number 57 [ 1724.359672][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1724.375357][ T10] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1724.396824][ T10] em28xx 5-1:0.0: No AC97 audio processor [ 1724.433019][ T10] usb 5-1: USB disconnect, device number 77 [ 1724.445481][T28175] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5492'. [ 1724.454874][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 1724.462096][T28167] xt_CT: No such helper "snmp" [ 1724.478107][ T10] em28xx 5-1:0.0: Freeing device [ 1724.506563][T28174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.523740][T28174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.599700][T28178] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1724.606277][T28178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1724.619091][T28178] vhci_hcd vhci_hcd.0: Device attached [ 1724.629480][T28178] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11) [ 1724.636199][T28178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1724.646563][T28178] vhci_hcd vhci_hcd.0: Device attached [ 1724.658758][T28178] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(13) [ 1724.665390][T28178] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1724.677531][T28178] vhci_hcd vhci_hcd.0: Device attached [ 1724.690078][T28178] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1724.712832][T28178] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(17) [ 1724.719496][T28178] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1724.728627][T28178] vhci_hcd vhci_hcd.0: Device attached [ 1724.739256][T28178] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(19) [ 1724.745888][T28178] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1724.765064][T28178] vhci_hcd vhci_hcd.0: Device attached [ 1724.781369][T28178] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1724.803461][T28178] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(25) [ 1724.810105][T28178] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1724.819108][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1724.838679][T28178] vhci_hcd vhci_hcd.0: Device attached [ 1724.848162][T28195] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1724.856661][ T5934] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1724.879578][T28178] vhci_hcd vhci_hcd.0: port 0 already used [ 1724.912805][T28187] vhci_hcd: connection closed [ 1724.916430][T19161] vhci_hcd: stop threads [ 1724.921863][T28185] vhci_hcd: connection closed [ 1724.929861][T28181] vhci_hcd: connection closed [ 1724.929915][T28183] vhci_hcd: connection closed [ 1724.936474][T28179] vhci_hcd: connection reset by peer [ 1724.951973][T19161] vhci_hcd: release socket [ 1724.961085][T19161] vhci_hcd: disconnect device [ 1724.970551][T28191] vhci_hcd: connection closed [ 1724.971504][T19161] vhci_hcd: stop threads [ 1724.982220][T19161] vhci_hcd: release socket [ 1724.986965][T19161] vhci_hcd: disconnect device [ 1724.993511][T19161] vhci_hcd: stop threads [ 1724.999315][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1725.007749][T19161] vhci_hcd: release socket [ 1725.012780][T19161] vhci_hcd: disconnect device [ 1725.025220][ T10] usb 5-1: config 7 has an invalid interface number: 60 but max is 3 [ 1725.039494][ T10] usb 5-1: config 7 has an invalid interface number: 222 but max is 3 [ 1725.049077][T19161] vhci_hcd: stop threads [ 1725.053406][T19161] vhci_hcd: release socket [ 1725.058098][ T10] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.068532][T19161] vhci_hcd: disconnect device [ 1725.073552][ T10] usb 5-1: config 7 has 2 interfaces, different from the descriptor's value: 4 [ 1725.083178][T19161] vhci_hcd: stop threads [ 1725.088091][T19161] vhci_hcd: release socket [ 1725.092664][T19161] vhci_hcd: disconnect device [ 1725.097562][ T10] usb 5-1: config 7 has no interface number 0 [ 1725.103828][ T10] usb 5-1: config 7 has no interface number 1 [ 1725.110815][T19161] vhci_hcd: stop threads [ 1725.115244][T19161] vhci_hcd: release socket [ 1725.119851][T19161] vhci_hcd: disconnect device [ 1725.129263][ T10] usb 5-1: config 7 interface 222 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1725.143599][ T10] usb 5-1: config 7 interface 222 has no altsetting 0 [ 1725.156532][ T10] usb 5-1: New USB device found, idVendor=1a72, idProduct=1002, bcdDevice=ac.4c [ 1725.168529][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.178396][ T10] usb 5-1: Product: syz [ 1725.182678][ T10] usb 5-1: Manufacturer: ܠ䎵졼츟்篯풖楫뷱꣹⭉附哘摛Ŀ豣㰸襘㪳㢿嫱勁䢯퓗谐ꭾ㉼䥢꬙䨍Ŀం㌫汷ꇤꎼ漝婇䛽芷烵윻␞坸╖徣쵊఺财뷕袬ヰ튒堄郢좤ꀔ⓲괴赥޺ﭬፕ㣳䇧ှ׼䞗䠆 [ 1725.209411][ T10] usb 5-1: SerialNumber: syz [ 1725.429314][ T10] ftdi_sio 5-1:7.60: FTDI USB Serial Device converter detected [ 1725.448402][ T10] ftdi_sio ttyUSB0: unknown device type: 0xac4c [ 1725.482459][ T10] ftdi_sio 5-1:7.222: FTDI USB Serial Device converter detected [ 1725.492897][ T10] ftdi_sio ttyUSB1: unknown device type: 0xac4c [ 1725.504273][ T10] usb 5-1: USB disconnect, device number 78 [ 1725.573982][ T10] ftdi_sio 5-1:7.60: device disconnected [ 1725.603828][T28201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5496'. [ 1725.617990][ T10] ftdi_sio 5-1:7.222: device disconnected [ 1725.643919][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 1725.673082][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1725.768357][ T5902] usb 3-1: USB disconnect, device number 93 [ 1726.154657][T28112] usb 7-1: new full-speed USB device number 126 using dummy_hcd [ 1726.298948][T28241] netlink: 280 bytes leftover after parsing attributes in process `syz.7.5508'. [ 1726.335885][T28112] usb 7-1: not running at top speed; connect to a high speed hub [ 1726.355727][T28112] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 1726.363858][T28112] usb 7-1: config 95 has no interface number 0 [ 1726.392440][T28112] usb 7-1: config 95 interface 1 has no altsetting 0 [ 1726.407698][T28112] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1726.416871][T18600] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1726.434856][T28112] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.442882][T28112] usb 7-1: Product: syz [ 1726.457108][T28112] usb 7-1: Manufacturer: syz [ 1726.464694][T28112] usb 7-1: SerialNumber: syz [ 1726.544733][ T5835] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1726.607448][T18600] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.615013][ T5902] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1726.638247][T18600] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1726.647685][T18600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.668477][T18600] usb 5-1: Product: syz [ 1726.672752][T18600] usb 5-1: Manufacturer: syz [ 1726.688197][T18600] usb 5-1: SerialNumber: syz [ 1726.715643][T18600] usb 5-1: config 0 descriptor?? [ 1726.720775][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 1726.736988][T18600] ljca 5-1:0.0: bulk endpoints not found [ 1726.765713][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1726.789239][ T5835] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1726.804762][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1726.818355][ T5835] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1726.829679][T28112] usb 7-1: USB disconnect, device number 126 [ 1726.846117][ T5902] usb 6-1: config 0 has no interfaces? [ 1726.864225][ T5835] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1726.874751][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.883249][ T5835] usb 3-1: Product: syz [ 1726.892328][ T5835] usb 3-1: Manufacturer: syz [ 1726.894166][ T5902] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1726.914815][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.922927][ T5902] usb 6-1: Product: syz [ 1726.924774][ T5835] usb 3-1: SerialNumber: syz [ 1726.934704][ T5902] usb 6-1: Manufacturer: syz [ 1726.939479][ T5902] usb 6-1: SerialNumber: syz [ 1726.959779][ T5902] usb 6-1: config 0 descriptor?? [ 1726.975160][T26607] usb 5-1: USB disconnect, device number 79 [ 1726.986428][ T5835] usb 3-1: config 0 descriptor?? [ 1727.012031][T28240] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1727.039682][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 1727.047360][ T5835] port100 3-1:0.0: NFC: Could not get supported command types [ 1727.072493][T27914] udevd[27914]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1727.189915][T28251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5510'. [ 1727.200127][T28251] syzkaller0: entered promiscuous mode [ 1727.206046][T28251] syzkaller0: entered allmulticast mode [ 1727.249381][T28240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.258690][T28240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.350949][T28112] usb 3-1: USB disconnect, device number 94 [ 1727.403237][T28254] bond4: entered promiscuous mode [ 1727.411386][T28254] bond4: entered allmulticast mode [ 1727.420704][T28254] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1727.664646][ T5902] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1727.804607][ T5902] usb 7-1: device descriptor read/64, error -71 [ 1728.104845][ T5902] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1728.344742][ T5902] usb 7-1: device descriptor read/64, error -71 [ 1728.456435][ T5902] usb usb7-port1: attempt power cycle [ 1728.797446][ T5902] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1728.815370][T16992] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1728.825458][ T5902] usb 7-1: device descriptor read/8, error -71 [ 1728.958869][T16992] usb 5-1: device descriptor read/64, error -71 [ 1729.066687][ T5902] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1729.100655][ T5902] usb 7-1: device descriptor read/8, error -71 [ 1729.205307][T16992] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1729.224765][ T5902] usb usb7-port1: unable to enumerate USB device [ 1729.344680][T16992] usb 5-1: device descriptor read/64, error -71 [ 1729.465346][T16992] usb usb5-port1: attempt power cycle [ 1729.473106][T23153] usb 6-1: USB disconnect, device number 58 [ 1729.859429][T16992] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1729.894406][T16992] usb 5-1: device descriptor read/8, error -71 [ 1730.068886][T28310] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1730.080958][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.090372][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.098106][ T5934] vhci_hcd: vhci_device speed not set [ 1730.204616][T16992] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1730.225874][T16992] usb 5-1: device descriptor read/8, error -71 [ 1730.334966][T16992] usb usb5-port1: unable to enumerate USB device [ 1730.774735][T16992] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1730.934873][T16992] usb 7-1: device descriptor read/64, error -71 [ 1731.025705][T28319] macsec0: entered promiscuous mode [ 1731.034671][T28319] macsec0: entered allmulticast mode [ 1731.040818][T28319] veth1_macvtap: entered allmulticast mode [ 1731.178741][T16992] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1731.314592][T16992] usb 7-1: device descriptor read/64, error -71 [ 1731.425393][T16992] usb usb7-port1: attempt power cycle [ 1731.465717][ T5827] usb usb46-port1: attempt power cycle [ 1731.764620][T16992] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1731.774276][T28324] usb usb8: usbfs: process 28324 (syz.2.5526) did not claim interface 0 before use [ 1731.785639][T16992] usb 7-1: device descriptor read/8, error -71 [ 1731.975234][T11238] Bluetooth: hci5: command 0x0405 tx timeout [ 1732.026390][ T5827] usb usb46-port1: unable to enumerate USB device [ 1732.104998][T16992] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1732.137068][T16992] usb 7-1: device descriptor read/8, error -71 [ 1732.244988][T16992] usb usb7-port1: unable to enumerate USB device [ 1732.356272][T28335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.379461][T28335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.584590][ T5827] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1732.754655][ T5827] usb 3-1: Using ep0 maxpacket: 8 [ 1732.766543][ T5827] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.803163][ T5827] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1732.822114][ T5827] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1732.848687][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.883182][ T5827] usb 3-1: config 0 descriptor?? [ 1733.114457][T28336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.131332][T28336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.157070][ T5827] betop 0003:11C0:5506.0053: item fetching failed at offset 7/8 [ 1733.185638][ T5827] betop 0003:11C0:5506.0053: parse failed [ 1733.205874][ T5827] betop 0003:11C0:5506.0053: probe with driver betop failed with error -22 [ 1733.262481][T28343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1733.340593][T28348] [ 1733.342974][T28348] ===================================================== [ 1733.349901][T28348] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1733.357371][T28348] 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 Not tainted [ 1733.364466][T28348] ----------------------------------------------------- [ 1733.371399][T28348] syz.4.5532/28348 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1733.379123][T28348] ffff888031f087f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1733.387829][T28348] [ 1733.387829][T28348] and this task is already holding: [ 1733.395254][T28348] ffff888044edc028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1733.405000][T28348] which would create a new lock dependency: [ 1733.410879][T28348] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1733.419056][T28348] [ 1733.419056][T28348] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1733.428495][T28348] (&client->buffer_lock){..-.}-{3:3} [ 1733.428516][T28348] [ 1733.428516][T28348] ... which became SOFTIRQ-irq-safe at: [ 1733.441602][T28348] lock_acquire+0x120/0x360 [ 1733.446218][T28348] _raw_spin_lock+0x2e/0x40 [ 1733.450831][T28348] evdev_pass_values+0xb9/0xbd0 [ 1733.455854][T28348] evdev_events+0x1e6/0x340 [ 1733.460444][T28348] input_pass_values+0x288/0x890 [ 1733.465455][T28348] input_event_dispose+0x3e5/0x6b0 [ 1733.470644][T28348] input_inject_event+0x1fe/0x320 [ 1733.475749][T28348] kd_sound_helper+0x19f/0x210 [ 1733.480615][T28348] input_handler_for_each_handle+0x101/0x1c0 [ 1733.486677][T28348] call_timer_fn+0x17e/0x5f0 [ 1733.491358][T28348] __run_timer_base+0x61a/0x860 [ 1733.496294][T28348] run_timer_softirq+0xb7/0x180 [ 1733.501229][T28348] handle_softirqs+0x286/0x870 [ 1733.506077][T28348] __irq_exit_rcu+0xca/0x1f0 [ 1733.510751][T28348] irq_exit_rcu+0x9/0x30 [ 1733.515077][T28348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1733.520791][T28348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1733.526856][T28348] lock_acquire+0x175/0x360 [ 1733.531447][T28348] unwind_next_frame+0xc2/0x2390 [ 1733.536479][T28348] arch_stack_walk+0x11c/0x150 [ 1733.541327][T28348] stack_trace_save+0x9c/0xe0 [ 1733.546084][T28348] kasan_save_track+0x3e/0x80 [ 1733.550844][T28348] kasan_save_free_info+0x46/0x50 [ 1733.555948][T28348] __kasan_slab_free+0x62/0x70 [ 1733.560791][T28348] kmem_cache_free+0x18f/0x400 [ 1733.565631][T28348] __mt_destroy+0x1c2/0x280 [ 1733.570213][T28348] do_vmi_align_munmap+0x358/0x420 [ 1733.575405][T28348] do_vmi_munmap+0x253/0x2e0 [ 1733.580075][T28348] __vm_munmap+0x23b/0x3d0 [ 1733.584581][T28348] __x64_sys_munmap+0x60/0x70 [ 1733.589347][T28348] do_syscall_64+0xfa/0x3b0 [ 1733.593963][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.600019][T28348] [ 1733.600019][T28348] to a SOFTIRQ-irq-unsafe lock: [ 1733.607029][T28348] (tasklist_lock){.+.+}-{3:3} [ 1733.607055][T28348] [ 1733.607055][T28348] ... which became SOFTIRQ-irq-unsafe at: [ 1733.619670][T28348] ... [ 1733.619677][T28348] lock_acquire+0x120/0x360 [ 1733.626876][T28348] _raw_read_lock+0x36/0x50 [ 1733.631463][T28348] __do_wait+0xde/0x740 [ 1733.635699][T28348] do_wait+0x1f8/0x520 [ 1733.639850][T28348] kernel_wait+0xab/0x170 [ 1733.644257][T28348] call_usermodehelper_exec_work+0xbe/0x230 [ 1733.650228][T28348] process_scheduled_works+0xade/0x17b0 [ 1733.655876][T28348] worker_thread+0x8a0/0xda0 [ 1733.660563][T28348] kthread+0x70e/0x8a0 [ 1733.664707][T28348] ret_from_fork+0x3fc/0x770 [ 1733.669472][T28348] ret_from_fork_asm+0x1a/0x30 [ 1733.674318][T28348] [ 1733.674318][T28348] other info that might help us debug this: [ 1733.674318][T28348] [ 1733.684540][T28348] Chain exists of: [ 1733.684540][T28348] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1733.684540][T28348] [ 1733.697696][T28348] Possible interrupt unsafe locking scenario: [ 1733.697696][T28348] [ 1733.706010][T28348] CPU0 CPU1 [ 1733.711365][T28348] ---- ---- [ 1733.716721][T28348] lock(tasklist_lock); [ 1733.720965][T28348] local_irq_disable(); [ 1733.727803][T28348] lock(&client->buffer_lock); [ 1733.735168][T28348] lock(&new->fa_lock); [ 1733.741922][T28348] [ 1733.745381][T28348] lock(&client->buffer_lock); [ 1733.750397][T28348] [ 1733.750397][T28348] *** DEADLOCK *** [ 1733.750397][T28348] [ 1733.758653][T28348] 7 locks held by syz.4.5532/28348: [ 1733.763843][T28348] #0: ffff888029e3e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1733.772981][T28348] #1: ffff88801e7be230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1733.783075][T28348] #2: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1733.792733][T28348] #3: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1733.802307][T28348] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1733.811435][T28348] #5: ffff888044edc028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1733.821610][T28348] #6: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1733.830672][T28348] [ 1733.830672][T28348] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1733.841085][T28348] -> (&client->buffer_lock){..-.}-{3:3} { [ 1733.846822][T28348] IN-SOFTIRQ-W at: [ 1733.850800][T28348] lock_acquire+0x120/0x360 [ 1733.856957][T28348] _raw_spin_lock+0x2e/0x40 [ 1733.863111][T28348] evdev_pass_values+0xb9/0xbd0 [ 1733.869599][T28348] evdev_events+0x1e6/0x340 [ 1733.875761][T28348] input_pass_values+0x288/0x890 [ 1733.882343][T28348] input_event_dispose+0x3e5/0x6b0 [ 1733.889101][T28348] input_inject_event+0x1fe/0x320 [ 1733.895778][T28348] kd_sound_helper+0x19f/0x210 [ 1733.902211][T28348] input_handler_for_each_handle+0x101/0x1c0 [ 1733.909844][T28348] call_timer_fn+0x17e/0x5f0 [ 1733.916089][T28348] __run_timer_base+0x61a/0x860 [ 1733.922632][T28348] run_timer_softirq+0xb7/0x180 [ 1733.929130][T28348] handle_softirqs+0x286/0x870 [ 1733.935581][T28348] __irq_exit_rcu+0xca/0x1f0 [ 1733.941821][T28348] irq_exit_rcu+0x9/0x30 [ 1733.947710][T28348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1733.955075][T28348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1733.962698][T28348] lock_acquire+0x175/0x360 [ 1733.968846][T28348] unwind_next_frame+0xc2/0x2390 [ 1733.975428][T28348] arch_stack_walk+0x11c/0x150 [ 1733.981827][T28348] stack_trace_save+0x9c/0xe0 [ 1733.988147][T28348] kasan_save_track+0x3e/0x80 [ 1733.994472][T28348] kasan_save_free_info+0x46/0x50 [ 1734.001153][T28348] __kasan_slab_free+0x62/0x70 [ 1734.007555][T28348] kmem_cache_free+0x18f/0x400 [ 1734.013992][T28348] __mt_destroy+0x1c2/0x280 [ 1734.020142][T28348] do_vmi_align_munmap+0x358/0x420 [ 1734.026904][T28348] do_vmi_munmap+0x253/0x2e0 [ 1734.033143][T28348] __vm_munmap+0x23b/0x3d0 [ 1734.039247][T28348] __x64_sys_munmap+0x60/0x70 [ 1734.045583][T28348] do_syscall_64+0xfa/0x3b0 [ 1734.051741][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.059284][T28348] INITIAL USE at: [ 1734.063177][T28348] lock_acquire+0x120/0x360 [ 1734.069238][T28348] _raw_spin_lock+0x2e/0x40 [ 1734.075306][T28348] evdev_pass_values+0xb9/0xbd0 [ 1734.081730][T28348] evdev_events+0x1e6/0x340 [ 1734.087789][T28348] input_pass_values+0x288/0x890 [ 1734.094282][T28348] input_event_dispose+0x330/0x6b0 [ 1734.100950][T28348] input_inject_event+0x1fe/0x320 [ 1734.107532][T28348] evdev_write+0x2fc/0x480 [ 1734.113500][T28348] vfs_write+0x27e/0xa90 [ 1734.119311][T28348] ksys_write+0x145/0x250 [ 1734.125192][T28348] do_syscall_64+0xfa/0x3b0 [ 1734.131257][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.138706][T28348] } [ 1734.141196][T28348] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1734.149375][T28348] [ 1734.149375][T28348] the dependencies between the lock to be acquired [ 1734.149384][T28348] and SOFTIRQ-irq-unsafe lock: [ 1734.162874][T28348] -> (tasklist_lock){.+.+}-{3:3} { [ 1734.168190][T28348] HARDIRQ-ON-R at: [ 1734.172336][T28348] lock_acquire+0x120/0x360 [ 1734.178834][T28348] _raw_read_lock+0x36/0x50 [ 1734.185332][T28348] __do_wait+0xde/0x740 [ 1734.191478][T28348] do_wait+0x1f8/0x520 [ 1734.197539][T28348] kernel_wait+0xab/0x170 [ 1734.203860][T28348] call_usermodehelper_exec_work+0xbe/0x230 [ 1734.211746][T28348] process_scheduled_works+0xade/0x17b0 [ 1734.219284][T28348] worker_thread+0x8a0/0xda0 [ 1734.225878][T28348] kthread+0x70e/0x8a0 [ 1734.231935][T28348] ret_from_fork+0x3fc/0x770 [ 1734.238522][T28348] ret_from_fork_asm+0x1a/0x30 [ 1734.245277][T28348] SOFTIRQ-ON-R at: [ 1734.249425][T28348] lock_acquire+0x120/0x360 [ 1734.255942][T28348] _raw_read_lock+0x36/0x50 [ 1734.262438][T28348] __do_wait+0xde/0x740 [ 1734.268588][T28348] do_wait+0x1f8/0x520 [ 1734.274660][T28348] kernel_wait+0xab/0x170 [ 1734.281003][T28348] call_usermodehelper_exec_work+0xbe/0x230 [ 1734.288898][T28348] process_scheduled_works+0xade/0x17b0 [ 1734.296445][T28348] worker_thread+0x8a0/0xda0 [ 1734.303086][T28348] kthread+0x70e/0x8a0 [ 1734.309145][T28348] ret_from_fork+0x3fc/0x770 [ 1734.315726][T28348] ret_from_fork_asm+0x1a/0x30 [ 1734.322477][T28348] INITIAL USE at: [ 1734.326546][T28348] lock_acquire+0x120/0x360 [ 1734.332963][T28348] _raw_write_lock_irq+0xa2/0xf0 [ 1734.339980][T28348] copy_process+0x224f/0x3c00 [ 1734.346560][T28348] kernel_clone+0x21e/0x870 [ 1734.352972][T28348] user_mode_thread+0xdd/0x140 [ 1734.359645][T28348] rest_init+0x23/0x300 [ 1734.365749][T28348] start_kernel+0x47d/0x500 [ 1734.372160][T28348] x86_64_start_reservations+0x24/0x30 [ 1734.379523][T28348] x86_64_start_kernel+0x143/0x1c0 [ 1734.386547][T28348] common_startup_64+0x13e/0x147 [ 1734.393393][T28348] INITIAL READ USE at: [ 1734.397887][T28348] lock_acquire+0x120/0x360 [ 1734.404728][T28348] _raw_read_lock+0x36/0x50 [ 1734.411570][T28348] __do_wait+0xde/0x740 [ 1734.418062][T28348] do_wait+0x1f8/0x520 [ 1734.424467][T28348] kernel_wait+0xab/0x170 [ 1734.431139][T28348] call_usermodehelper_exec_work+0xbe/0x230 [ 1734.439375][T28348] process_scheduled_works+0xade/0x17b0 [ 1734.447270][T28348] worker_thread+0x8a0/0xda0 [ 1734.454208][T28348] kthread+0x70e/0x8a0 [ 1734.460629][T28348] ret_from_fork+0x3fc/0x770 [ 1734.467570][T28348] ret_from_fork_asm+0x1a/0x30 [ 1734.474669][T28348] } [ 1734.477345][T28348] ... key at: [] tasklist_lock+0x18/0x40 [ 1734.485249][T28348] ... acquired at: [ 1734.489236][T28348] lock_acquire+0x120/0x360 [ 1734.493910][T28348] _raw_read_lock+0x36/0x50 [ 1734.498582][T28348] send_sigurg+0x12b/0x420 [ 1734.503164][T28348] sk_send_sigurg+0x6c/0x2e0 [ 1734.507944][T28348] queue_oob+0x490/0x5a0 [ 1734.512351][T28348] unix_stream_sendmsg+0xaf9/0xc90 [ 1734.517630][T28348] __sock_sendmsg+0x219/0x270 [ 1734.522485][T28348] ____sys_sendmsg+0x52d/0x830 [ 1734.527422][T28348] ___sys_sendmsg+0x21f/0x2a0 [ 1734.532263][T28348] __sys_sendmmsg+0x227/0x430 [ 1734.537118][T28348] __x64_sys_sendmmsg+0xa0/0xc0 [ 1734.542189][T28348] do_syscall_64+0xfa/0x3b0 [ 1734.546869][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.552931][T28348] [ 1734.555243][T28348] -> (&f_owner->lock){....}-{3:3} { [ 1734.560536][T28348] INITIAL USE at: [ 1734.564514][T28348] lock_acquire+0x120/0x360 [ 1734.570755][T28348] _raw_write_lock_irq+0xa2/0xf0 [ 1734.577425][T28348] __f_setown+0x67/0x370 [ 1734.583418][T28348] f_setown+0x23a/0x300 [ 1734.589305][T28348] do_fcntl+0x11d/0x1910 [ 1734.595315][T28348] __se_sys_fcntl+0xc8/0x150 [ 1734.601647][T28348] do_syscall_64+0xfa/0x3b0 [ 1734.607882][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.615506][T28348] INITIAL READ USE at: [ 1734.619911][T28348] lock_acquire+0x120/0x360 [ 1734.626584][T28348] _raw_read_lock_irqsave+0xaf/0x100 [ 1734.634043][T28348] send_sigio+0x38/0x370 [ 1734.640473][T28348] kill_fasync+0x24d/0x4d0 [ 1734.647060][T28348] sock_wake_async+0x137/0x160 [ 1734.654003][T28348] sk_wake_async+0x184/0x280 [ 1734.660757][T28348] unix_release_sock+0x768/0xd30 [ 1734.667896][T28348] unix_release+0x92/0xd0 [ 1734.674386][T28348] sock_close+0xc0/0x240 [ 1734.680813][T28348] __fput+0x449/0xa70 [ 1734.686969][T28348] task_work_run+0x1d1/0x260 [ 1734.693731][T28348] get_signal+0x11ed/0x1340 [ 1734.700402][T28348] arch_do_signal_or_restart+0x9a/0x750 [ 1734.708112][T28348] exit_to_user_mode_loop+0x75/0x110 [ 1734.715561][T28348] do_syscall_64+0x2bd/0x3b0 [ 1734.722316][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.730368][T28348] } [ 1734.732941][T28348] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1734.741866][T28348] ... acquired at: [ 1734.745743][T28348] lock_acquire+0x120/0x360 [ 1734.750412][T28348] _raw_read_lock_irqsave+0xaf/0x100 [ 1734.755900][T28348] send_sigio+0x38/0x370 [ 1734.760310][T28348] kill_fasync+0x24d/0x4d0 [ 1734.764892][T28348] sock_wake_async+0x137/0x160 [ 1734.769822][T28348] sk_wake_async+0x184/0x280 [ 1734.774574][T28348] unix_release_sock+0x768/0xd30 [ 1734.779675][T28348] unix_release+0x92/0xd0 [ 1734.784165][T28348] sock_close+0xc0/0x240 [ 1734.788577][T28348] __fput+0x449/0xa70 [ 1734.792727][T28348] task_work_run+0x1d1/0x260 [ 1734.797488][T28348] get_signal+0x11ed/0x1340 [ 1734.802160][T28348] arch_do_signal_or_restart+0x9a/0x750 [ 1734.807871][T28348] exit_to_user_mode_loop+0x75/0x110 [ 1734.813322][T28348] do_syscall_64+0x2bd/0x3b0 [ 1734.818080][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.824149][T28348] [ 1734.826467][T28348] -> (&new->fa_lock){....}-{3:3} { [ 1734.831594][T28348] INITIAL USE at: [ 1734.835480][T28348] lock_acquire+0x120/0x360 [ 1734.841542][T28348] _raw_write_lock_irq+0xa2/0xf0 [ 1734.848039][T28348] fasync_remove_entry+0xf1/0x1c0 [ 1734.854631][T28348] __fput+0x8a2/0xa70 [ 1734.860166][T28348] task_work_run+0x1d1/0x260 [ 1734.866320][T28348] exit_to_user_mode_loop+0xec/0x110 [ 1734.873166][T28348] do_syscall_64+0x2bd/0x3b0 [ 1734.879315][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.886764][T28348] INITIAL READ USE at: [ 1734.891087][T28348] lock_acquire+0x120/0x360 [ 1734.897581][T28348] _raw_read_lock_irqsave+0xaf/0x100 [ 1734.904862][T28348] kill_fasync+0x199/0x4d0 [ 1734.911269][T28348] sock_wake_async+0x137/0x160 [ 1734.918023][T28348] sk_wake_async+0x184/0x280 [ 1734.924612][T28348] unix_release_sock+0x768/0xd30 [ 1734.931567][T28348] unix_release+0x92/0xd0 [ 1734.937886][T28348] sock_close+0xc0/0x240 [ 1734.944118][T28348] __fput+0x449/0xa70 [ 1734.950101][T28348] task_work_run+0x1d1/0x260 [ 1734.956685][T28348] get_signal+0x11ed/0x1340 [ 1734.963186][T28348] arch_do_signal_or_restart+0x9a/0x750 [ 1734.970720][T28348] exit_to_user_mode_loop+0x75/0x110 [ 1734.977995][T28348] do_syscall_64+0x2bd/0x3b0 [ 1734.984622][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.992508][T28348] } [ 1734.994996][T28348] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1735.003664][T28348] ... acquired at: [ 1735.007473][T28348] lock_acquire+0x120/0x360 [ 1735.012162][T28348] _raw_read_lock_irqsave+0xaf/0x100 [ 1735.017633][T28348] kill_fasync+0x199/0x4d0 [ 1735.022242][T28348] evdev_pass_values+0x627/0xbd0 [ 1735.027368][T28348] evdev_events+0x1e6/0x340 [ 1735.032070][T28348] input_pass_values+0x288/0x890 [ 1735.037183][T28348] input_event_dispose+0x330/0x6b0 [ 1735.042473][T28348] input_inject_event+0x1fe/0x320 [ 1735.047673][T28348] evdev_write+0x2fc/0x480 [ 1735.052286][T28348] vfs_write+0x27e/0xa90 [ 1735.056708][T28348] ksys_write+0x145/0x250 [ 1735.061213][T28348] do_syscall_64+0xfa/0x3b0 [ 1735.065905][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.071975][T28348] [ 1735.074289][T28348] [ 1735.074289][T28348] stack backtrace: [ 1735.080178][T28348] CPU: 0 UID: 0 PID: 28348 Comm: syz.4.5532 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1735.080195][T28348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1735.080204][T28348] Call Trace: [ 1735.080211][T28348] [ 1735.080218][T28348] dump_stack_lvl+0x189/0x250 [ 1735.080241][T28348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1735.080260][T28348] ? __pfx__printk+0x10/0x10 [ 1735.080277][T28348] validate_chain+0x1f05/0x2140 [ 1735.080297][T28348] __lock_acquire+0xab9/0xd20 [ 1735.080317][T28348] ? kill_fasync+0x199/0x4d0 [ 1735.080335][T28348] lock_acquire+0x120/0x360 [ 1735.080351][T28348] ? kill_fasync+0x199/0x4d0 [ 1735.080372][T28348] _raw_read_lock_irqsave+0xaf/0x100 [ 1735.080390][T28348] ? kill_fasync+0x199/0x4d0 [ 1735.080406][T28348] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1735.080422][T28348] ? do_raw_spin_lock+0x121/0x290 [ 1735.080439][T28348] kill_fasync+0x199/0x4d0 [ 1735.080456][T28348] ? kill_fasync+0x53/0x4d0 [ 1735.080473][T28348] evdev_pass_values+0x627/0xbd0 [ 1735.080489][T28348] ? evdev_pass_values+0x641/0xbd0 [ 1735.080504][T28348] evdev_events+0x1e6/0x340 [ 1735.080516][T28348] ? evdev_events+0x79/0x340 [ 1735.080529][T28348] ? input_pass_values+0x8d/0x890 [ 1735.080541][T28348] input_pass_values+0x288/0x890 [ 1735.080564][T28348] ? input_handle_event+0x70c/0xf30 [ 1735.080587][T28348] input_event_dispose+0x330/0x6b0 [ 1735.080607][T28348] input_inject_event+0x1fe/0x320 [ 1735.080625][T28348] ? input_inject_event+0xbc/0x320 [ 1735.080644][T28348] evdev_write+0x2fc/0x480 [ 1735.080659][T28348] ? __pfx_evdev_write+0x10/0x10 [ 1735.080673][T28348] ? bpf_lsm_file_permission+0x9/0x20 [ 1735.080691][T28348] ? security_file_permission+0x75/0x290 [ 1735.080705][T28348] ? rw_verify_area+0x258/0x650 [ 1735.080724][T28348] ? __pfx_evdev_write+0x10/0x10 [ 1735.080738][T28348] vfs_write+0x27e/0xa90 [ 1735.080760][T28348] ? __pfx_vfs_write+0x10/0x10 [ 1735.080780][T28348] ? __fget_files+0x2a/0x420 [ 1735.080795][T28348] ? __fget_files+0x2a/0x420 [ 1735.080808][T28348] ? __fget_files+0x3a0/0x420 [ 1735.080821][T28348] ? __fget_files+0x2a/0x420 [ 1735.080837][T28348] ksys_write+0x145/0x250 [ 1735.080849][T28348] ? __pfx_ksys_write+0x10/0x10 [ 1735.080861][T28348] ? do_syscall_64+0xbe/0x3b0 [ 1735.080882][T28348] do_syscall_64+0xfa/0x3b0 [ 1735.080901][T28348] ? lockdep_hardirqs_on+0x9c/0x150 [ 1735.080919][T28348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.080931][T28348] ? clear_bhb_loop+0x60/0xb0 [ 1735.080946][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.080959][T28348] RIP: 0033:0x7f3ca118e929 [ 1735.080971][T28348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1735.080982][T28348] RSP: 002b:00007f3ca1ffb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1735.080996][T28348] RAX: ffffffffffffffda RBX: 00007f3ca13b6080 RCX: 00007f3ca118e929 [ 1735.081006][T28348] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000005 [ 1735.081015][T28348] RBP: 00007f3ca1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1735.081023][T28348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1735.081031][T28348] R13: 0000000000000000 R14: 00007f3ca13b6080 R15: 00007f3ca14dfa28 [ 1735.081044][T28348] [ 1735.398755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1735.502647][ T5827] usb 3-1: USB disconnect, device number 95