last executing test programs: 2m28.950551834s ago: executing program 3 (id=818): r0 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x5f, 0x7ffc0002}]}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x1c, 0x5e, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r10, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r10, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) sendmmsg(r0, 0x0, 0x0, 0x4000000) r11 = socket$inet(0x2, 0x1, 0x100) getsockopt$MRT(r11, 0x0, 0xd0, 0x0, 0x0) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) 2m26.180090052s ago: executing program 3 (id=824): socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 2m25.037174284s ago: executing program 3 (id=828): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='smb3\x00', 0x1) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r2, 0x8b21, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, r6, 0x0, 0x100000000000000}, 0x38) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) close(r4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x100, 0x3d0, 0xfeffffff, 0x228, 0x2f8, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14d) ftruncate(r7, 0x200004) syz_emit_ethernet(0x46, 0x0, 0x0) 2m23.297902476s ago: executing program 3 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x800, 0xfffffffffffff800, 0xfffffe0000000001, 0x10, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0x75}) sendmsg$nl_route(r0, 0x0, 0x24040040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syncfs(r7) syz_usb_connect(0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e0000000109023f0001000000000904880005ffb717000905adda0000020154090501000004007f070905020c200009027e09050f042000410f04090505"], 0x0) r8 = fsopen(&(0x7f0000000400)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setresuid(0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) getgroups(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) unshare(0x2a020400) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r3, 0x0, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x4}]}}}]}, 0x6c}}, 0x0) 2m17.495080336s ago: executing program 3 (id=847): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x6a, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff669789"}, {0x6, 0x1a01, 0x41, &(0x7f0000000040)="9dc9d967aef82987b99baab7c9aa1ca2dd19ea3e7335a5db8c9b2a55c85c2ef42097d97b8450c58276354541c1f7d6cb688b6cc257e647243787436cd578448889"}, {0x7fff, 0x10, 0x2b, &(0x7f0000000140)="cb7fa7b57c4a657d2e86b7c7342cbbe6a1ca5ef62e5b2dbe38f49cfced5da514d56726fd5255c15436e3e4"}], 0x3}) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x80000001, 0x443, 0x8, 0xcb, 0x5, 0x9, 0x6, 0x4, 0x7, 0x0, 0x8000, 0x6, 0x1, 0x8000, 0x7fff, 0x1, 0xfffffff7, 0x9, 0x3, 0x3, 0x28000, 0x3ff, 0x40000000, 0x44f, 0x0, 0x1, 0x1000, 0x6, 0x3, 0x7211, 0xd, 0x2, 0x60dc, 0xd5ff, 0x7, 0x3, 0x5, 0x1, 0x80, 0x7, 0x0, 0xffff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x7d80, 0x1, 0xfffff001, 0x1, 0x8, 0x9, 0x7f, 0x7ff, 0x4, 0x80, 0x7e, 0x425, 0x4a, 0xffff0000, 0x2, 0x1ff, 0x29, 0xedad, 0x0, 0x7, 0x200, 0xfffffffb, 0x0, 0x9, 0x0, 0x100, 0x7, 0x10001, 0x0, 0x0, 0xfbb2, 0x62000000, 0x8, 0x0, 0x8, 0x7f, 0xa, 0x8, 0x3, 0x57d6, 0x7, 0x0, 0x3, 0x6cd, 0x5, 0xfff, 0x8000, 0x9, 0x0, 0x7f, 0xe, 0xa1b4, 0xb, 0x5, 0x3cb2, 0xffffff81, 0x8, 0xbc, 0x58, 0x7, 0x9, 0x8, 0x800, 0xff800000, 0xd3a, 0x7, 0x3ff, 0xffffffff, 0x10000, 0xba22, 0x3, 0x7, 0x6, 0x3, 0xfff, 0x200, 0x0, 0x10, 0x0, 0x76, 0x8, 0x5, 0x3ff, 0x3cc, 0x100, 0x6, 0x833, 0xb, 0x8, 0xb, 0x4, 0x2, 0x86, 0x5, 0x45, 0x7, 0x4, 0x6, 0x1, 0xc, 0x80, 0x1b, 0x3000000, 0x0, 0xfffffffe, 0x2, 0x0, 0x8001, 0xa4, 0x3de0e7f6, 0x80000001, 0xf5e, 0x4, 0x7, 0xc50, 0x3, 0x80000001, 0x1000, 0x6, 0xf7a, 0x9, 0x3, 0x7, 0x80000001, 0x80000001, 0x40, 0xba3, 0x5, 0x9, 0x7, 0xffffffff, 0x0, 0x7, 0x9, 0x2, 0x8be0, 0x3, 0xffff7fff, 0x3, 0x5, 0xe, 0x2f813bed, 0x6, 0x3, 0x8, 0x6c, 0x10000, 0x101, 0x9, 0x7, 0xf, 0x100, 0x6, 0xa, 0x7, 0x0, 0x4, 0x1dee5aac, 0x4, 0x2, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x2, 0x3, 0x4, 0x3033, 0x8, 0x8, 0x2f000, 0xfffffffc, 0x3, 0x8, 0x0, 0x6, 0x8, 0xa, 0x5, 0x2, 0x1, 0x100, 0x65a, 0x6, 0xfffffffe, 0x27, 0x8, 0x8be2, 0xcbe, 0x226ece10, 0xfffffffd, 0xdf, 0x67, 0x8, 0x4, 0x7d4, 0x2615c584, 0x7, 0x55, 0xf74a, 0x2, 0x0, 0x2, 0x0, 0x7, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x3, 0x8, 0x2, 0x80000001}, {0x0, 0x0, 0x3, 0x0, 0x4, 0x40}, 0x8, 0x13, 0x16d5}}]}}]}, 0x45c}}, 0x40010) read$FUSE(0xffffffffffffffff, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x1, &(0x7f0000000100)) ioctl$I2C_SMBUS(r8, 0x720, 0x0) 2m1.74740632s ago: executing program 32 (id=847): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x6a, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff669789"}, {0x6, 0x1a01, 0x41, &(0x7f0000000040)="9dc9d967aef82987b99baab7c9aa1ca2dd19ea3e7335a5db8c9b2a55c85c2ef42097d97b8450c58276354541c1f7d6cb688b6cc257e647243787436cd578448889"}, {0x7fff, 0x10, 0x2b, &(0x7f0000000140)="cb7fa7b57c4a657d2e86b7c7342cbbe6a1ca5ef62e5b2dbe38f49cfced5da514d56726fd5255c15436e3e4"}], 0x3}) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x80000001, 0x443, 0x8, 0xcb, 0x5, 0x9, 0x6, 0x4, 0x7, 0x0, 0x8000, 0x6, 0x1, 0x8000, 0x7fff, 0x1, 0xfffffff7, 0x9, 0x3, 0x3, 0x28000, 0x3ff, 0x40000000, 0x44f, 0x0, 0x1, 0x1000, 0x6, 0x3, 0x7211, 0xd, 0x2, 0x60dc, 0xd5ff, 0x7, 0x3, 0x5, 0x1, 0x80, 0x7, 0x0, 0xffff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x7d80, 0x1, 0xfffff001, 0x1, 0x8, 0x9, 0x7f, 0x7ff, 0x4, 0x80, 0x7e, 0x425, 0x4a, 0xffff0000, 0x2, 0x1ff, 0x29, 0xedad, 0x0, 0x7, 0x200, 0xfffffffb, 0x0, 0x9, 0x0, 0x100, 0x7, 0x10001, 0x0, 0x0, 0xfbb2, 0x62000000, 0x8, 0x0, 0x8, 0x7f, 0xa, 0x8, 0x3, 0x57d6, 0x7, 0x0, 0x3, 0x6cd, 0x5, 0xfff, 0x8000, 0x9, 0x0, 0x7f, 0xe, 0xa1b4, 0xb, 0x5, 0x3cb2, 0xffffff81, 0x8, 0xbc, 0x58, 0x7, 0x9, 0x8, 0x800, 0xff800000, 0xd3a, 0x7, 0x3ff, 0xffffffff, 0x10000, 0xba22, 0x3, 0x7, 0x6, 0x3, 0xfff, 0x200, 0x0, 0x10, 0x0, 0x76, 0x8, 0x5, 0x3ff, 0x3cc, 0x100, 0x6, 0x833, 0xb, 0x8, 0xb, 0x4, 0x2, 0x86, 0x5, 0x45, 0x7, 0x4, 0x6, 0x1, 0xc, 0x80, 0x1b, 0x3000000, 0x0, 0xfffffffe, 0x2, 0x0, 0x8001, 0xa4, 0x3de0e7f6, 0x80000001, 0xf5e, 0x4, 0x7, 0xc50, 0x3, 0x80000001, 0x1000, 0x6, 0xf7a, 0x9, 0x3, 0x7, 0x80000001, 0x80000001, 0x40, 0xba3, 0x5, 0x9, 0x7, 0xffffffff, 0x0, 0x7, 0x9, 0x2, 0x8be0, 0x3, 0xffff7fff, 0x3, 0x5, 0xe, 0x2f813bed, 0x6, 0x3, 0x8, 0x6c, 0x10000, 0x101, 0x9, 0x7, 0xf, 0x100, 0x6, 0xa, 0x7, 0x0, 0x4, 0x1dee5aac, 0x4, 0x2, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x2, 0x3, 0x4, 0x3033, 0x8, 0x8, 0x2f000, 0xfffffffc, 0x3, 0x8, 0x0, 0x6, 0x8, 0xa, 0x5, 0x2, 0x1, 0x100, 0x65a, 0x6, 0xfffffffe, 0x27, 0x8, 0x8be2, 0xcbe, 0x226ece10, 0xfffffffd, 0xdf, 0x67, 0x8, 0x4, 0x7d4, 0x2615c584, 0x7, 0x55, 0xf74a, 0x2, 0x0, 0x2, 0x0, 0x7, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x3, 0x8, 0x2, 0x80000001}, {0x0, 0x0, 0x3, 0x0, 0x4, 0x40}, 0x8, 0x13, 0x16d5}}]}}]}, 0x45c}}, 0x40010) read$FUSE(0xffffffffffffffff, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x1, &(0x7f0000000100)) ioctl$I2C_SMBUS(r8, 0x720, 0x0) 18.932073343s ago: executing program 4 (id=1185): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002020000402505a1a43300010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000206241a00000008241c050006850009058119000200fc000904010000020d00000904010102020d0000090582020002000002090503020002"], 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x2}}, {@can={0xc, {{0x3, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "0c0b8d9a6c5d49d6"}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x2, 0x6, 0xfffa}, 0x31, [0x8000, 0xc95a, 0xe, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x0, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d7, 0x10000008, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x10000000, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x400a, 0x6, 0x80000000, 0x0, 0x5, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x1000000a, 0xf0000000, 0x8000012f, 0xfffffff9, 0x5, 0x6, 0x129432e6, 0xc6, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x2003, 0x0, 0x0, 0x5, 0x7f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x8, 0x7ff, 0x7fff, 0x5a7e, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x800, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x2, 0x9, 0x5, 0x3, 0x8, 0x1, 0x2, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0xa, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x2, 0xa9, 0xfe02, 0x9, 0xac9, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x80009, 0x2, 0x57, 0x7, 0x1, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x0, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x4006, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0xdd, 0x7ff, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01010000000000000000050000000900010073797a3000000c000900030073797ad197b8b20024000000060a0104000000000000d352cf12f09e87a104800900010073f97a300000000014000000110001f6ffffff00000000000000000b"], 0x78}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) pipe2$watch_queue(0x0, 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt(r2, 0x1, 0x3, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x11, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.207488482s ago: executing program 4 (id=1195): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xd228, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x800000, 0x100, 0x32315559, 0x4, 0x4, [{0x0, 0x7}, {0x1}, {0x3, 0x6}, {0x0, 0xffffffff}, {0x81, 0xfffff800}, {0x1, 0xfffeffff}, {0x9, 0xa449}, {0x7, 0x2}], 0x2, 0x3, 0x3, 0x0, 0x4}}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r1, &(0x7f0000004480)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f00000001c0)=""/177, 0xb1}], 0x3}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000480)=""/255, 0xffffffffffffffac}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000740)=""/223, 0xdf}, {&(0x7f0000000840)=""/37, 0x25}, {&(0x7f0000000880)=""/104, 0x68}], 0x8}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/36, 0x24}, {&(0x7f0000000a40)=""/144, 0x90}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000bc0)=""/9, 0x9}], 0x1, &(0x7f0000000c40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/167, 0xa7}, {&(0x7f0000000d40)=""/247, 0xf7}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001000)=""/35, 0x23}, {&(0x7f0000001040)=""/94, 0x5e}], 0x8, &(0x7f0000001140)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001180)=""/151, 0x97}, {&(0x7f0000001240)=""/187, 0xbb}], 0x2}}], 0x6, 0x26022, 0x0) 14.868295612s ago: executing program 4 (id=1196): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) gettid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa300000000000c0703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a000000000000000000000000001c000000000000000001020000000000000002000100000000000400000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x14) 13.305801448s ago: executing program 2 (id=1204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe2b}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1200000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000c01) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = fcntl$getown(r0, 0x9) sendmsg$AUDIT_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x800, 0x70bd25, 0x25dfdbfb, {0x27, 0x0, 0x0, r4, 0x1, 0x740e39ab, 0x1, 0x400, 0x0, 0x8, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0480}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r6, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffb, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x10, 0x34, @random="10df91f6262938cdf1263669"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3141}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x33}, @NL80211_ATTR_PMKID={0x14, 0x55, "ffa8d50839d87a0e2471c96f0e4f4d56"}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000000}, 0x8d5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d40)={'ip_vti0\x00', r2, 0x40, 0x8000, 0x1, 0x2, {{0x7, 0x4, 0x2, 0x3d, 0x1c, 0x66, 0x0, 0x1, 0x2f, 0x0, @empty, @broadcast, {[@generic={0x9, 0x6, "0dd54f00"}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f00000005c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000600)="982185f2d362d51d14fe02019f066015e4aa3bd5c1724ef34b883f34ec854f844ca3cd0a31b597a511337d51de5242cd0dd5114df628423447572a082817cfc7117623fcaa9f09c7a88c3bfef78fc5ad983f167f9c2cc04cda7012d7845b631a60fadeaa941697b7f4f1db1cf40d7705555cb3c2e125a5375b2142b1b07d8a2c22d0360f54aea6e2567afc180d0f34d3558b4463222a2c683fa00e965d1e9234b3eab7cc889c8b4f7f7f3f48001f27fcb99f7c961f895f787539e9f08b6428683d2cd5dd5283a028971d84d0a4da474d6e5523f5c9f7078992b6efc6c36627509a166cc2c9665323f33a4744c15e0770e9c115048c13bffe11e016", 0xfb}, {&(0x7f0000000700)="a4cc48d959e1cfc63941b850e8bd9d158afac877", 0x14}, {&(0x7f0000000740)="5832bef76953d3beb8056854e64bf69864beb4eb74459e8d70f33554d6fb5ea71c2fdcc85df076295dbf840b062d549511855e594f46e18fcc992e5e3123cb1fcd39eaf204b302dec14e459138eb04c3f786230e5d099606be477462ecb83107a4b59090e79cf502719c9da5fe8d2c1a74fd92f91386c328a9fee60150a052049cc9e5480596208333a6e12da7046285a10f8c34a5fb41a4154d34ea422fb807ad19", 0xa2}, {&(0x7f0000000800)="1aea0943a5c3d49f7320bc2c05c45697141d02057507f93352ff152075c65f006948884496416740548c9207a02b", 0x2e}, {&(0x7f0000000840)="35fce869d5720eefc4b9531664c6245b380673398dc5e96aeb0dc6ec3a0c3552df795164f222f922d37b2c8bb66b6b0c8de6f1b1f158d2ba3c2e85a8b3aa8f607a1d53ebb6198c6fdb55151a407320eedaa3365aa23ee879c47d001d46e4070cb163e9a00c041279f85b50639e704e6fc1f4b3c8314fe424f62ef5eb4ee8f50653083ed632f0cc0eac7612ebd1ac4e91f51b5543941730f7e9e79e4ac6c30e387b48453fa972b74c84555ca845e9241bafdbf871105c254c4bf10d64727184048eb048e13e214327a08e46eee9fc467d809c0830ae2ec9edc4ce9e64", 0xdc}, {&(0x7f0000000940)="4a0ef78149fb2088625545616360e59849c59b8c3298d82f42a7adbb02cb415c197658bc18ebccaba377b7be70dfcb45603a538f1c1dc02adb776145a396e4066d5b582e6ff32d428089746c3e6173f526dd44a1b9a11ff8d674561b5522d4ef3cb1672e3f20467cc78333360e3a699a5623e044a485", 0x76}, {&(0x7f00000009c0)="3842a8390e7aba65af38aba6436353ec06d83cfe2f27fa114ec608b5e8e55ef448bf95911cee580b0dd67eae90a88936c74f61b4e2b73cc8c50b0ea72b183cc3a71135c6d746f2ec1e660e8b986a", 0x4e}, {&(0x7f0000000a40)="06167b1323b38462d807ca4ab09f0be195dbbb01953005aa7b7426d0417ff16c182bf757772586e34ffe8e72760d47ea98156afc4705dd843fe47c939ae6fbf468842ef5f57f6c4d7f931eeefaaeb47cc943f45d736c5c716f997233e87882464477a14ad1d77c9caafe9e4593d00e2818c74aa585c786044fa1c30660efe2e2247b363ec5fef0779ffdf14393a0623cb6793194f9881228e2b9a9b2d572", 0x9e}, {&(0x7f0000000b00)="cbe2b5223d38c4f5fd6fa6609b08598ad361450346cf530b4a1a1694bb4a088c580cff33d6f36c2272386c2dce3ef9ccc5770a6579da8aa02afad8e108326f754a4bfd87fbe5f1ff8870066262c6654cf7145e7217b7e619f6c4c0b7871818bc2c753af834cd9055c0b0c980e4d70b9e245d5f1b3065e74c7814ce5d2a986731f9792c4f05f2f95e44a676b566761f62047ae04c", 0x94}, {&(0x7f0000000bc0)="2226317e3f85babefc84e6164bd9fbf9da827894c391d0e293b34bf2032efab493bf3d90a546320ad87189dd818f1c386ae0a9cf5834c37454a8e913ced5662de48b3cc089bb709d6e06b147eb0347230c7f50f1d04db3b181888919b5100ce7f8e8f911cbf5f6a89d19da172d424daeb5155181e21819a4a7979723113cb390810ee83b520313c018fbb32d8a6480", 0x8f}], 0xa, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x68}}, {{&(0x7f0000000e40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000e80)="f90ec66fa68891d2bc5d09ee30b127c8e594731e0e863a97ac90b0eb4e49a1dc9f4c00613955b8b52c72feb3cdd1a509b2d903f84cc98787078912ebd8cb411c35b07d7e98225e8c7b16d7f3bf8071bfec91764e8489b4bc4727483afa655f5d1c49e169fb8dd85e8e1f537c0b602c2b8763a038f41168d0c5a62ec8ca23525627846db5eff618d0498bd5f80611e90d2d98a0207313b439d9d50ca28cc7a411546d808f5c2588a24a8fe408528b8470cdfda135c4c91c46e245d4104b910f4cb3cdf66ec6e9c90777736731e25c67b675bfa7b8fe35", 0xd6}], 0x1, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x48}}], 0x18}}], 0x2, 0x80) r9 = add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000001080)='user\x00', &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000001100)="755a49d3fb5c7b628a09d1d31aeaf768fd5362d6c74d22b82f9bc67f5ccefa576ee19f0b6fdd4bd12c6718c91959c15fc0c324007f98dc53066651c56903e11a2c4cdfb2e5dbdc5df13d38878fa28d99ef4ed148c2610a7f1ed57ca8aed5cf80a281ad93d7f14bb8a77d3af28a4a31756ff7dda0c11e9df1f7a16ebed9b306065db03e61bbbdeacae0dd377cfd9b3238aa8c3b3c34", 0x95, r9) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000001340)=@req3={0x1, 0xe, 0x7, 0x8, 0x9, 0x6, 0xfffffffc}, 0x1c) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x4041) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000014c0), 0x2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f0000001500)=0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x8c, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x29}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x5d, 0x2a, [@preq={0x82, 0x57, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x80, 0x27, 0xffffaaf9, @device_a, 0xffffff80, @value, 0x3ff, 0x9, 0x5, [{{0x1}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @broadcast, 0x100}, {{0x0, 0x0, 0x1}, @device_a, 0x9}]}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x104}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24004804) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000001700), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x2c, r12, 0x800, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000001800)={0x7, 0x8}) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x400000, 0x0) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r13, &(0x7f00000019c0)={&(0x7f0000001880), 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x4c, r14, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r11}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x8800) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000001a80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4958008}, 0xc, &(0x7f0000001a40)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x24008080}, 0x44801) 12.98153201s ago: executing program 2 (id=1205): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) statfs(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = eventfd2(0x7, 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r3], 0xa0}, 0x1, 0x0, 0x0, 0x40805}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000000c0)={0x8000, 0x2, 0x3, 0x1, 0x2, [0xe, 0x0, 0x3a58, 0xc]}) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x3, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="8c", 0x1}, {&(0x7f0000000440)="c66431e373a72fd8b41401f274efe566bad2b53feba4ff6a5dd48c3fd5d5df66aad6d3d0854608e5821a61544d3546b8c1c548af47ace747d7b9baa1bfbeffafe8263e8f2b0cf93faf790786c30362f74855e606428dab74bd3e5cb9e128b1b08e034c21cdef8e058d1241d6127dd87e0e645605faec245926e4f2fa919dc47e5786e963b19892f008b809fa510d6b0671141abf877bb7cedf42b56cc77e147d1f39f774baf6c9f5012c0753229d2432549e2dcd837485d9732d831e07b6089c3ee67e4ea34de8cf92", 0xc9}, {&(0x7f0000000600)='\f', 0x1}, {&(0x7f00000006c0)="5daa", 0x2}, {&(0x7f00000002c0)="8407", 0x2}], 0x5}}, {{&(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000000540)="41aa2029a9a77f81edfda63d84276e10b83055846f8fc68f293cf74c7036303e3384ded868f021cf797d3e71d24523acf84669b93c0c8f85edc8eeab95936fb19b3717fdbae475", 0x47}, {&(0x7f0000000700)="1f08450e40ecf166c6746d59bfda90e3679ad8f9f0635a96073d5675d015f00a9e6c8457c10fb2f01e7a039aec2e9dca7559b933fd866e648a25acf250fddffba6ee325ab46c3fb03138dfe99232af2d8aa55d9741de70b325beb46b3e7e22334c4b1ad103377cf940679f5c19b83daa16408e024d72ea185ccad8e4c59716d15bce556c631535", 0x87}, {&(0x7f00000007c0)="4d5717a1d2f3e39a21ed5b0081ad5cf3bb3ade0a928a8cacb8c99117c107619080f2e0fb6da82e852e6864d1a058856f15303ccdddc42de24ef0739f4ba5c6120567ab67cd7eb596f5214316195bc75accf6a9b3646c2cafd7abdb7d9993aca443f4460e60ef11316eae297845e55c0f7f31d92ef4", 0x75}, {&(0x7f0000000940)="c1deb2983cf380d7b643abd960e5fbc6381dc355ede3dbb65ad3149190cfcf0b994357c4f09a6bdc1cbd1fa7e9c18fe57569dadb71063e54c0bb5cb2764d122241000bb6410f2348255b9b763c6f26b2ab71092d73c573341e402b20dd23eac80116796a902041280ad6392e0c28c15e8df1e38010fa795f3cf85606dc97d0fb328893ea366870e3b43b955e2a06d914d850bd344affa77bdf1cc3fce7a2158ea3701dbf16e3a5a4492e27d9aaf0cfbf977dab66e13238155e0faffabaf423e6540eaa193e67d799ec346a334297baf6d74f1d7bf26d42ea808d06d93451f23a6f684ec6352112cff70add270207b9157e6a9fd99ab9", 0xf6}, {&(0x7f0000000b40)="5e2c13cf127de14c71f5c3bb575b1ca941f06b399f928fc1bb26f4435d1d2a7e36c499d7062280eda72e7b8543674a4520633ece871b4041c9828b49ce72d4cd3e8d99242733622b9816d222dac07a6150404a7a65f8a7b5b0b2a7ee580ddd2d9a8b9dfe5b", 0x65}, {&(0x7f0000000bc0)="ec5efa943a39e18edd1abc0345bec2c2f27ad301975e989edbeb2a38ab9445b54e0196702e757cfa2927f4d152f0892e300f024fc08e1cd604397459d0f50b6e8cbcfde47c388665714e722972487226e54f8e723ca2591087ac4a0df63ce9919ab4275f219ad77277c7eca5d134b2e8a18095329b32af7db2cc80049e6610633b6452165ae39041972fd8cc18eb1428cb68cf749114cd09d5146fb28eb472de108161e1fb4a99a5455999bbfe98ac4ab143951c41c6704de50fce2f6781e180355b7199097022922a9d92178c9d17a131bd47d64c9e3440eed4c7aafb37f3eb1c471b1ff573b5c9134ded883558a11054105bb87ee93fac3a7f35df7b5cba866748ee9a6e30c321d974eb82f922b08985414cde70f194b4a36faa8bd35057061ab66a6d6c747b56bd82d4ebc79109ae902a729caf83363856db9e42e374328a3ae750127308b478717b75e48083a17d78ba30c258b156c791912c96133a4a889f4fe0afb365ad2f4ab5b972ce55c9db751bc522d980d6d0c97ea48475cc673b7c8bb6fda27fe6eb1210f787deb23e60216faf52bed6c2ad0594177be1a78f84458a7fb319365dfc31afbf5f814e4bef8a7763941a11a8a95540138edfe4ecbbf5ca82fcf3dab3a5b7195266ea5e59309db04edfdcf4f0af9903d1e309c70d80f0f8f269e81b963f1e16d6cf6411b65e8bf6e1d538a8d813f6271c000617a5130618ccb2139b93819da5b9d4720a1d76ac5c8b4cb799aef9e5724bf2a57a1058b700c68f46ba37b518e13e32a713912188a6ff39df4141b9e357a6fc1e2abda2c4634c4c5c29e48778a156033b8b29e23ce1d5a91f50364e030f79d15ceb458ddb724f6bfc394033e14d957154d6fd3c037350770d4b03891b74ed6507140b18dc0b8cf398557b00f7bd4ff674fffb974a7eda778cbf55ea258769c77ce920cb1d1e542c8a443b33fb77be89c353cd74d4d4fcbb567247e5a97bbdb69b6bdfe6a4b2d7852ef183207041e5e5c291cd8d3c8afc1e2fa3586572381ef1ccfac19495f0c7a8c26d3688df72cfeace1defd8e8c06c847eb6256b548dc96584d6f0c6e0edd8dd20d14e1e6d8fe31b99b36156579b340d7984e878916bd52056538a52d11ef595bcd92cd997788ad78fbd1b4115ffd7132e7afb2589df8c396a9bffae68a4c5f5ac950a5407d1dfdc54c03b12b3201bcb369cd61f06ad80d15ff612912a2b7b43d9e2720fc2ef9273f30d75cace2751bf5c90eee3a38cd968c1abdd17f26ee0bdeb88a2c10bef60b5f710c29b424ea73b77ce8dd1db9600336aa689357e9b904e804037c7669b6bea4b1e6698854de1acdde10ccdc5280dd2c40ddc6dc4b483b02103a2919a62ee8c0b6446540169d5b00605c24c9e15c65bb12acc4919f3889f9d158e6b7669c0fca40b5ae3044543857e851a3b1cf6edb1915ea23562687485bbdcb2561b13ec4ab3cfc67a3e4382f2efc87aa35f811ec200856f5721d99827e82d2aa091e3d2bf7faf8428031ffdd28aad89c5dc695b949e9c3d0b390869bf2ec4b9193c60aff04a20f98aa54a79fd9e85a9007c23d2e6f4fad3412a7fd22f67c91d73c5c082f3dc7d6cbeedb67732dd88dc58820ee137ed03652dcb94b6977a934606c5e1bf807b53cd65bdf2a7c0ff2d428518b2eb7fdfb4b387fe8f9b04655b55067332993bbf9489c5175345b09eb68f3ad6df6cc7d691ab420bd5b9dee61e15ee1a5a9a62a9c14ae0e1152c90fc248cbd0688c8f5a0167d22608d5d6d068105b90aed0b3a5aadc117c7f46a145ef300b3f2e0313de6c4d677015871cdcabab916b2da7fb1055fd277095e23caf802c15bd2d8ca88b593b66a2d15c9b0e473e9ebe54566e054cd13abe11ef8c7ca40939cd8b0d59fba41441a18cac8c03fc0356837ac5329b28e7526cca68de77554300da705c533c73be7d9787e289aceeda416905f3f6b9956502adc5e8d4cb44f42aedf9ae1d84667cf3edde34c340c096173d00de671f409457b2da2a8e51276b9cfe6511b2a1b7a02350983e8545609824957f88e403f1bc666a71a5bd2a03b7b5cb4f404f931d125b4f092971f9211c6522a685360d54b5c79695d94156fd401b87af3c35c0d86d93c4ec2d318199ee698ad663dc00663b2bf7107c9d43c9353e1500a2076e1e4e240b25842ea5495ba664f5eca7c5b4d5d5cc5e2054fafd6877e3ec0ad44bfe2cd962b8c0e44ce9a945cbec065d5edfce8b7d402c5cfb6a6c08700aba0180b21162c9e69bd95dd59ac090598ac79aa1424495f5b4f474659fb515f255de48855c3d78e402c48c328ab4b21935079038db5251dfa70176248910397ae223ff109ad720474867679deefd492b15a6088cb8fd25edab5d6e195cf3ddc2ba1850e31157e839662d7a9cc8ff6309542664a1505a780838086da0009fe6d29de823a135cf1e57a4ac29bbeae401c36e7e1769d90136b68c575a76f6949600ba040633a78270e20f50ea9b5dbc69a3a743fafdbeb972ff582d2455b24fe4a98e61d74b9ebb04f0d0c2e30919ac614e946df0a6ba9f994f708e1a1e4d09046bc26a00d068f69317ec1eb6dc4c4a2d9d822560509c2aeac581d0a695b589ae487b605ec6a1f4845316fcb51bb60cb750be6fbc5cd38de21097d1b88de0d9ee936d5933e818c25a2d1291901ff6fad2cded663435acccc36b20b244a85837d24eb1c060db9f8e33be7aa558b4c347748fe8f760d04b48e90fc3b51b70d7bc884685014a1cde5a89c269bf59616fe07ea305554138357e125107dd82bd9d937fbf6c909a132ef7d25a81d4e737e169a5dad9578d88b3d385073c7fe11dd6d8ddafd0f2d4846dc6df7b79cd27f08e33956467d944aa8b5a5cab60507846285c218b56490b9b110f51a174ad9dbc7a57bf7d9d925383b2092cbaadfac69abee4eba18e377b12f1f9a8c2c169bf26736faf9991cfbeb697ff9c7c69430c06f7c3f969c3530dcdf4610707f7036a94ff405012147bd699e2a90500e06ab5fa49db0d69681c8dfa80dea3663f4d2b143445cfcb4b330e09cdd5208a721d8f0897dae6dd923964510f1f85945f6d9bfdee1423e89c10902f671cce500b661fc4bd33423e8169a97233153f74d9219aa6316816131e1fb29c5164503ec6de14f91685d2c4814dda9d65be62251584100d625fbcb4c70cc9657570c7796c080970481ae4880ec868186fd42add6e941dd01b2003f345e97f9d8183a48ad8e7e674e46c064f8cb8bc65f27393c2c8dafd31458b5575a1cafa5bf5990799b9e24d9e5c612a5d65c1439942d060d156c7b6b18eb0b85a1f9591541438a0352a1be0b5bb1960699da803564918d19bcd43de59b36177a0adbe40bc8777606f351b692cd4e3e9ee73fbb77544f799e5d3c373dfa6ab19a1c758c3389a2a2e23f4495b682d38b182354c13770050fd1c9938f9db42b57878f2f299f07be9d50775060351779c5c9f58fad73213fb7fe55cc071d5c17494009e4db67d001525d75691bf7b80200b837c41f7cb6ebb8172d066ee1bf3f943c03ab583875a391982d76a3c784544ae6e7527d858f3a92f322eb4bcccc7bcaadd8f6f98b36148d3ee928a04e59ca36689049ff65de80b560e4a22495665531f0b94cde0f1e404d4ab904b889ad4b54ab2163bee1943c7e3997ea12a3f08024bf3a4e35a077cd7d79d4147e58d8a6c60894cf429ff1af3a42a02421c7ee9407dd832e2529eb0a5b441fc3599f6a5e4ecdde9a95961cbe918d50cc2d7e37494618770d78f797e71b247d0aa6e32c4825ca7d9327bb53242ecef9db37fdec7dcd25341e402bb66accd565fa53fe19f3c1f3bcbf0c08e6172f1dc1aef9b0291d7ae710b2f84c9db290c605012cacba0deddfc2d2c38375bb38b651481a5e3c14feb46c67a5bb5a08f3603806f6f85f6dac6e5f99f069296dfdd78e073582a8c692d3a7f05474f75c2093aa83e897a0009eb3c3728e1dbc890cdbd102d30465da2b67498b72c47b2383a1cec5f1b6fdc382790597f6b56a04639fa3fb058faea816a01bedfa1539a1b415f9188116249ec9a4acc0d0bb9eb97b536316f2800bd8e5fb672cc81ab82bf7e7d01e8c700eaef900a90ff48451244688d1cf976df820b6a9e98e3f54f0ad372c2c75a513444aee1c748b460d249df43091f875becf37cdc7c4d7a868ffde278170b8e692ae83846600b453a5bc448489a9a3dfef34316dcbcea1cbd57f5c1e226e7740c7ff68bb6227cc2a4c9b1750ed023c3f26176ca709554e064c26179d78fbe7fe9d32c72c22092d9e16c169dabdf3c7a3aa23b6f53c9e8839f828c7be7427ef3c4dfb6e8f8762556476b3ae5a7660b2a044aeea41a8979fda5e1f0fe78144ecf98b066593622c690828b0343ab1a83ca6b0f592ff85245dcf6b58fc9c901546c289e3f88ffdf399738a50cb95d70145e44e92ef4ca19aa64b06d02bf8647b04644b4b414176446691a79a6d8cdb89f5b3f2c63f9eb34d881e13c59e6f008c8a5844b94dcbd70ca76fd4916fe6cf163e1895936809286ba92cbddaa216c94510514e649540629606769a173920c7a6917fd427b661079425de3faf1788a34c03434a4d83fe4c666438e79311ea6eee9cf578104580326f9fc3c133b63ccef7a91f6b6f3c36259c7c0a5a7054e6975332e4eb1bffec6140495855808e3e40b747c6bd9ee4a9b2fcab90201057e47f2220a0656a76569f3a5ba1012843745f788d5e5b529bc9037b5a23501958c538c95f4a359f051affcad1246231a39473b79e35051ea2005e1f15c7f8d955d32b974bc96b4f76cc37ee480d6ae6715f405ae9dc854e31a20f1429c30890dc07c9674f08c92676a98a01b72b0ccb1e0f5aa17bacb1b648b8a34a433d8817283d12fb911906edd0ede7c407bda8764684dfe798553d345c0cb6e93b65ca7756f57adf37915c274a91a78e5f212fc60f20f1e633018d8220b60a1789a92f64f6a05a72e3713b6a032ce7dba6b82894cb3e16e494b03ac2ff62f5beb5ace85e27e7cdc66d67eea33c03fbfc45e4093898d6565039c4936f9f66ed1694ef159a0417e8e39737fbee0cb07853c780107c2e7a53f663e89fcd25d87d6b64a73d197931779cb7b375c7f9a51e5282a74967b7d0c01fc8fd7cfdcc27242c69e8e6cb0b60883b5b4958bc13df9fe7580eefc097cafa1bd498c5d9defe2f8c52bec01940e8bff2fb2e8b6f90da39afef87e218775e4cb661da0e2fb9d9d5f309e0db4105cfb797482ca243b5cddd0119af9685b4b95259be1bfdff7ccee18037910d740b1d8525cce6e82c80fea75c354235f66fba717e4382dc9e68c0d60e1f06bb9c52eaaae69926c7cd20d30492359c6ecdd3f72ce5ca282a8836da398f4a7b4a977a9a5554fc2a43a2cc27cd9fea73878a75f12cdd18bbcc84e39f9a0273e0fc4358607ce8cf0eec49d0a7fa12f4d39f2d23a864ec26e1857eec5917dc8cae1321679d68f0ecdbf8e54e58481d2f26dbf355472820bb2323b2fe1f429b5ddc189e4e4f24f304b4187cea2e676e85bf68740a4b17d00118e73d65c5db4a78781e47a516ed1bbb39033b2f7d398a2e54e6048da0604d5157802739945693d33fa13adeb028ab009779134ab9a4a7186c117fd6798756cc4d4a444414edf3c81289eb58e0509e22296a74cbb3bc298da1787fd34b786e01513519ce9013d01f3ed312fd3922c0860da95347f2c18d392cd1daacad8b26934bdc0f85c41e47cfbeb4970be5f3befed115fb761e9f414cf3f1911b5a81edaa3a5fa0af82110904b4eadd80ef", 0x1000}, {&(0x7f0000001bc0)="75e216168b2dfa23a2a60b644946b0ea5d900d00dabe84bb243795cd7e1b485d614c89abd334bd95b443de607d81fda0279df7474316fec9178503db230e9688aac660b6fa1b87806714b175a59f5eb89723b7e2d744fb5d9a596d8cf32eae07fc06f4eedd19a2ca88f54dc1f90d50", 0x6f}, {&(0x7f0000000680)="2914ade89d316b", 0x7}, {&(0x7f0000000380)="c7620c65cf7a4a50d8ad973e5f68c9815fc25c117136e9c11b2fc836720d759f2ce3992cfd4bbc07e8f10b6dd28c34e6b2b361813a44941e50fde343bc44e32b8f813d0e5abb3fc7b60432e37ec9cc44bb171f71b85f60dbc92bfee0218f14a6bf9a6d37d5e6dfb6e44ecdf0bedb2d36cdf3aff125194f85262bb5d0e28e7ecfdf", 0x81}, {&(0x7f0000000a40)="3fd92706da5c61ece97e4edaa1062d364603f9bf6631de89115d14812a8ab86e5990455efe7315b2e8b670ab85deea051e41cef778aaa211bfcd94411171c65251be60e201939b71b4efaf606380cd22545ecfe9581ac77749c9b6ec6962c6e5d00fdbabf6b998fac546d8753d58bee9c4dc9c4d6be9a3d6309ffcdc87e62124df8ef41fe89ffbdd299562c91e16b94c34484117deec281787d86bbfc2012eaeb67e9a8d8e2dd896ea5449e884c6ca", 0xaf}, {&(0x7f0000001d40)="dfd324820c5e674cfe96ebce10b368c5642387cfde50a3e163bfa77a53d6caf9a7e07f70cf01a8f87c6215aeb4c86e1534d4a7cb9a0a12bff63e87e7cc60bb6e4c03d5c6b67326831ada8b667b6f201d1161bf28aedf92bce2f80c8cca510d9c6e02bda3285312d12f884b7a11482f78", 0x70}, {&(0x7f0000001dc0)="d82a88eb896d816e63cb7508fe84a8fa4cb1d15e28b2be11a920ad522587b0b9078d210961afef437654068074442338a2c16e62f663ee3ffacc53f012d304b0f4fec5d3dc180e797c7116917dfdc2132656031ceabd06bf4a94cd0ff76bc1eba27f8c7f66505ebb3886671563a929f610cf7ac543061acbe80c9431b03f06f3af39", 0x82}], 0xc, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x2, 0x40088c0) 12.468379029s ago: executing program 4 (id=1207): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x40015}, 0x40) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x8010, r1, 0x0) syz_io_uring_complete(r2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'xfrm0\x00', 0x600}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x148}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000044044) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0040d07, &(0x7f0000000040)=0x121) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 11.463310825s ago: executing program 4 (id=1209): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_MODE={0x6}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x4c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_clone3(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000400)="8d8ade225093be72b52c563e53ad4aa877ed583ff732b59391a11e8fac2ae746502e764ed4531111e2ae3fba95257d0619ad8085f47734ffc3a5863cd3a64d1708b5c4f8720d1116bc152f191a67970bf3217b389341e59f28a39f541f67cb80c231ae1f060935c4cf35b46de28f11c55bfe", 0x72}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044014) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000880)=""/203) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 11.229636837s ago: executing program 2 (id=1212): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_team\x00', 0x10) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x7c2) (async) listen(r3, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004598003c4000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0100000907800001312689c292f0f994d9c52794649ca8b7d4900009148e9b45a77553c423bbc3d56a7d9a9e0387aab77aee3626922d18fc297f30dfb278e7de8c21368dc2107778b6e9bce4a49247ec59547675b7bfa1976dc29b77c2d966af4f038ae5780296a3157f46a927f608b707c7494c351bccb41ee942ed585d6a825dbc99958598592616f18c72726d2962e6303cdb9225054cc131dd5bf4c615fd5c96b29329d99d18a01f7ccf92014970b2ab7015c5e0a257a2ef5084e197b939c0fc738f5e0c83a1ca6db771fb6bc4140b5ed2422258cf7fd59"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) 9.903971394s ago: executing program 2 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x800, 0xfffffffffffff800, 0xfffffe0000000001, 0x10, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0x75}) sendmsg$nl_route(r0, 0x0, 0x24040040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syncfs(0xffffffffffffffff) syz_usb_connect(0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e0000000109023f0001000000000904880005ffb717000905adda0000020154090501000004007f070905020c200009027e09050f042000410f04090505"], 0x0) r7 = fsopen(&(0x7f0000000400)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x1000000000000}) 6.988259439s ago: executing program 5 (id=1223): r0 = gettid() clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffe}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7182ce0ab6d000041a15be2d9d13cd1cb0c238e61cfd6a5d7cd0eaa50e027db032ddbfe85e53b87eb950a45", 0x56}], 0x1, 0x0, 0x0) 6.621070809s ago: executing program 0 (id=1224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="bbfebbbbbbbb000000000000000201907864010101ac1414bbc1910000000000004beb"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x3}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0x7fff, 0x1, 0x8, 0x0, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@can={0x1d, r6}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)="ed984365b010844f80bc3e290747f21ba38ca3b50ed6a14e11497a83eddfbaa5103394e2dd74794a362eeae6e214962fd68702ab543cbe65b01242375e7bd7456939eda19e1b3e116893ef8e858218539dc9cfe741396a3492c5a3ab1dfafa1915e16d56febec7962ef356bdd18dbce1a8d7af790254e7abd3554e3f1407f898037d3b610a89ea775714bc9039d0cf40aecc", 0x92}, {&(0x7f0000000500)="fdbfead9c82e373c1f8e5dd0a104a3355a5acb0d414c76b3c54636305610e949b5cb8e57b44fdfdbb8bab2db578197f108483934b8bd11fffa8bae4179eea5f9fc29ae55d8e192155d831005297b804ddcec6069ed80da7132df4933227ca16c591ba9fd219e2f911f1ae42139bd4ef25b2c2c9be37ec921985974651ae295b201c243c55330dbf7f461bd0427980fe390b5ab30d1a2add9c6e6107333bfc501353c4906c9cd2ee4024abec6b4b12721f565a019db3880558bf2357ccbcf1265dd19c0a3c44c358faf9b09ed6023a32c8340e22ed5074710638fae57b64af964e8bedd1f8b8cc262e8c92038af1195aeb4f6d6e9b00bf22f36ae2490007274f36623e0cbf005619c22d8cdeeade96ceda213138033609783e8c2777a13fb0422a2fc6725e1ab79a65de80b3cc28ec04ec33cd20baca0946bb39bac7517083c66f68678620dc2020a70cc31c1815431075cc65ab235a4d65d17ef861505ce0d6f58872674f2ef669e7971be95ed40ac1ca7413e4e5ba2fa015a037766ae70cc143e02a2fab86332c06214a686b7280c421624183be4b4055df2a3b0af79216fad90fae48d202edd976bb1461c7c6a05618c16916178208fd4089a2b03885fdb059d8e2fd425bfec2ec21edfcdbf318023ea2c997de2ee547c81ca3e969015327aced2512ca859f426ca099fe1eb98286ddd33f50c09716fd6f8189fa83a5a65d26d19a7e92be7696e077c175d7ea2109031788b73ba7f8be4b4767696bd942aa558d7a5d923df7e927e01d758e86afac2ea392b5a7b9f7d07633e90e2eb3b9015366f10285aebb59c634c9f29b07912c5506edd8c1f9efbd2d9b17bfe3ef0d82ec646a022e06de0f6eb75c02819a80368c9239567c069a32be4afa114a6d68a62e83598f39e3b7eb2bc0ddfcfe74561d55d77375bb7ca622c4c115520755c22086bc579f01d76c962e003a9da2af96f4b99f064d20dfba00f76b4e569991ed75e7d3513b300a8b2afefedbc65c0d6523732c9291253eee184873783fab054e382e52ef1edaebde548dd3fcf662ea0f9c22f790222ce5532ba0dda7dd2a1b09a5daa273abeda38567120b6de5359627b5a380d338322ab3df5603cf8e22c9107eda9f21b50c0ef0e3a7fbe63d6ba61c0aee53b057be06aefe2212c588da3e1cee281c758b7e73d0165d083773ff380e9450b0c59c0334d1aeb4a87dd9f9c256d79e83039ce92803b1eaaa69f29e7abde7b41dac6d48378f1c8b862f0d3231dcba565304977133a100013efec64a367254e9ebb41459333a6314d6882f7d723ac585bd6da441db9d5d3f97dd2d774a6647ecfc577af94f4d3e1526618aea83869c7d3bf6557c274991981354ad2aa453b7e9fbb846f56faaa0db267536ad58deb903ad5c3e27586ae43992ebe3a22bd97faa6fd69d5a1b31ad8ec8eee48889d4d8abd14072251abed9e6c54f7fa3da61226743b88b2df690d5f0c4cb966b3356818e967e258420eda0013400ab813adb4f11a4270fd3e146c8f05be54f3ececdb8f803767add4d491baecc10e4426cb4eac1576d461285614f97e702cb19a5952565eb3f684a89dbb226861e45c41acb59ef174a4f34d1e64f094213d5dbd12513752e6b3eab3020a6fca90bbd83d1de0b5de908bc5169042733fa4d2d79f337c5bbdaee39c3048cf097eec923370e9e8fdc63963f9e3198caf84757b11c74cd42ac56fe8581d75eabe56128f3157aba133eb692726c065a07dc92249f1a934a823b438ae23aad4ad661a92363baf3762480871307aadd7b3fa55ef4e339744c502bf20ed874c6a15fbdb96681942f7e9e77a21e7141ef2bb645352bd901914058f5c88ef895a9118fc4cc8b27a3c056c9ae21379354724936138973abb0df730991f0b2f1ebb245d49ced4248293e6ae0b0882593503078f9e956993b0f5c029f9d34f35ae9a7fc835b05cc4851415b38a6391361830e5921c5e604411ed489a5e910dc465e35b58e4aef7f7f7be7ec0377257629455a3e42c9c231d5eb90c00617d3647720318f612f7b6e3c55889788868176f16e94b3419915b8c2e58dd63d12dff08f5791f373656249e63bca6c816058c436cd00e3da32146e6b24f2251066434e03a61d065b46db586ec58cf8346def67d42565006facf9d890d5f5c90be1ee2b64e3483abac7827c6c3d9fcc395c836cf827b1f4b6762f3441052acbebda6e079a989b70c3c999d2467d65493a54be1f74584049fcb63a03288072796a670a5f6efbbf6682c90f6d25d78a4f1d69689e1d1d1d6fc49d8bc1dac20e1706c1f10a5abe0f1a5fcf28c64d15607e79d355c021518a7ded48269c277bb7c2e9df245ea79270ae5a65d691958bfa13ab5a1010b03794feb5da203ebe4e3990d416ed9053669e65dd1edaa67442908b815d7529870c91712748223687d1eabdfd73b5e9b17b3a56d9c7a75b7cedb0e7c5445d2f35513de0fcc5893815c750ede1afdb876f76edb7e0733dc1e23d02fd82f97eff9f7cba344a4583f8d2620d42a41f5c192ae8b255a84e762d0f9f7475956f881db9967c0322f22f4388e10ae268805b18eecf766dea27af1259cbcf3e0aa26ce06390e2935d55fe38fce9c7e7748defa04a11a316bba5d99dbe2bf6a709f17a020a3c76ef0bd1cde296aa23ea7b0f684102d3be7d1d7df40d660a30ac8eb8e0725c49d9c56f94eb01d7de65c97432524e55da730a32b9d35e3ff7d271711b06c7b319dba6c1d3d9824264fef3a59c0d11fc627d699ba32c6867fca92a516c4c80f093ef885f23a815a5c0453018b650d0032ef914dc2d147a97c93d23643697177ccfd46c2ccfdbf87a416766d0e610a37d6b16cc2bec34f8a40db354550715f4dcb9a53071a2a513ad830d0905566df62fc10c1b53b5b3c05e6af995c925864d87cfabf3eebe0739129d75a198756007755b89ff78853c057f535d8c42c14491d5ffa350affe860a474be0df944de0709670a74dda28be5d0e79d1fc4563e5c3c5af2202b3b57e6a73a3e50298e81ceef5526721b69e4e2a2036665d46fe7c6078c4d874f34cb2451280d62c76fcb07b0ae7ba9d8f0967218f3d17a02e2241c69696246fc07cbcfbdeb2714ce87b7a65b372705e7fc140ff59dca41c6d1e3a2a2f19c232071774f73a6603afec4276973f0fae4f4787f9f52b164ebf036e7672219dace66d02c94be64f9c26f288954ea9ed7e3ec1f3516174646512b0e0f6c0db1269dca64c1af346edae876b32a7795b6b2f824f4c5929564e0e8e668a7ff4f2b142236385fc3ba24918f7097f1f47c8c22675cb96198416c3854af5e5a4a558a34c86b4f1cd51dcc0313f2c1e58b408c3a793c3edc078475a3963d9134d8fed40a4e1936e1190cf0bbc860ba18d10ac77f4da5139e27e09f8298a621105d67571559a13e5e1d70b2b18cedd92175b3fef32b29c926f0c00d1bed0cee3dd140bfd7b17f37d32641b47249c2e1dd29be839bcd0059a1a7b27d5698b3e628d74a23a618c203db3e7997dc71f2bd55f4cfddd96efbffb24db017b129258ccc4c2d108c51dd42289d1c380efb2f165acdc4c94a7ef903050f943c8c11d320940485885943002ab75a3d673580abece02f333488c057fc2b472eff017fff3a7c3980d4ae38eb5f7520ee9ab8e1744b75a8313fbd62e5077f09404df6c7d2d90968c07ad2e4345978e83c58e3a5621169922107f7f6862f9fa615f802486464203257dbdf4293678f17dfb44534eca37096d50e96c08a7472e7ffbc89185ab91ff04e0487be3885862f51b7fa9b1ffd2187b220f60de1f5feb512a68b75b902223fd5ae34fe2b122aca657f1a1531ebf547384b33b5530b1da40ddfd4379f013d1983b1a4c709573f49e2f0cd7f2635b4182d7195c282a7e57d41dffdb0e1d9835c801d6428a3c6240375bd797998f1947cfaa9ba644174b54091edb311de5433c43726104685c5d3c3fbbc505b998ac6f03cad8d40401439acf807a9fc518e8e8220cf58a831ce4c9eee8f3a004426a4ef297bb8a3b06bfec8d25386a9175cb298c10c0d2332119c3e6e3a1066f05b2df407985dbf036a70902e82a90eb4717e764347a4c15b47ded415efe179fc8fdcb6e809d4033658fa257cc09d2b9c94a2bfc1ea31cdf8ea372c0b914bfab04cad9c7d706ce377991dc89b890caafa79477712e7e8625cfdca1b8216b97d379e8d63cb1027713c071aae3f091657a665c4f41b42994ceb35242995c9a735f1b7d248e103fe49daa77f20e8648874a136921c6f43ca3700e0c45630f36ceb8a024f365b74488ef2c9b7e41091aa8667d6c2d43bd25a399b159af6f5033775f2bb7ef248d2f4109f276c854051540442c2621114e2c64f441b52b344d4789bb9a7825e60f93e53a7e41cfcb6a0b8608c1073d200b6cc95e6d9081a00e04eb5bf722977620b8a06273821307bfa4ce4868560b37c60dc5de9bac5adf8640355fa94a1b1abcb07fcbd878f0dd3166ee0b478c95c8a9742bf63ac79e9bf34a11277123cd4fe7f4c16d578f3787a02581ed4b9b56d165054a13df0815a207e2f6ebb630b687f09de6f92fca4e014855e1ee257d0e43faa52bad8cc1ef963853d02fb16fc9903b20324c05d1d24e51fe101ee10a8204d69c236cf61d6d0d8e300a872c3be453c6650ab2dff96d7fcbb6825edac4224e58f7273a01c941d642ba6dc715d1dfa206f87ae44b8b9a7d6ca3ad6762fd501a3ec9afd68df704e760ed17a39f6da9082a9a549f72999949341855a743d04037bc522e11acce791b92f195151218d6d7cbb1a0e099b1a9908b4f22d0af236609d72520fcbfafb1ceccc56e56f4d759c6109a11c722367bdb4a16055e38917c281037339ca09267e9c0d17b2075968f3d8423af22b61744b3c45ddb96e2aaafee00ca27f2871b761b28b68497902adbd06730f580bad81b0ddca8de3e03ada4eb023cb39b770d0bacff5fe5badbe0db8ee13ae8813d2f19ab901b1d9969ed6be84347ffc0ef88a28b53119914e9cac2591b94d3ad0ed29725ae48dfb21b93bd02c25c8ada9f81b18edb6399fc47b100d340c01af7bbacbd3267a834d413651393dbabc73e469e24e717d002c8e4978b705a23674a5e7ff59b3ff8272b1cc1349d34ce1a529bb80c987002c0f5dc4746077c45314aad1b1f82363b6802813f6c840d7f4b523a492109d3f29e4e988e57e339282f13738803b6e40d098a8d25e8a7f2859e538c5d7ac922d3d1afc65e878bbc0571b1de606dc1e556ea4c37b2b69a9a5d820cb347b752c8bfb9c2b97a10d0a6b12cab749a2325cff6fefcedab52a1de2d1f912d05b7a14e01f887881ec851ab82089c1467ea4d13ed6b2d4761b984f30d311358dbbb1ce5b1328ebd373d53dd04b55740171052a0e4fed4b0309c375e55b8a2b51474af18953495f2d22bada0b945aaa4ed82f9d4cd41bf794604fb886c7d97b99b42e59637d7e643ecf55ec40de7dd1028dc86d527fee3c376ac520c7d906d57cb8d83cb4a7f435701250af24f80ea5bf937d85f0261abc9fe859f0ea38f4313eef1524ca3f27dd450e1638c886396edd4b68dad715a014be8a886bcd90ead1a786f6493fbb0a8f8262e0332571500fd25a6bee1888b1570169643ddea171e70578bf0b37a7bfc550e8a824c3b4e2bce6ce84291eb8068f62f83f7f5c7bdec4b2668efeb2e4de3c44771733bffe441c7a8e101b7535031290446e898ef1ea93e7c51bb1e8f1de0b3c69f4db8a23fe73a9d8f8f6ac14815296d254e1e05074c62c6324909357c9eff9", 0x1000}, {&(0x7f0000000080)="853e6638ac0225157e6d3383397cd3dea5444bcb7a08a8249ba781da044d4e63670fdbac6d346e2f0a3d141c3afc548a6b3ced765c2a", 0x36}, {&(0x7f00000003c0)="e4cd8ae95dfb7f6d02a9f3ffee12bccaafc9ae71403f7578d2a106c0d88033be90ea95cdad1d65f19ab3aefc12158fa717815d2f7f4cd0f43b6ba2512cbde5da03a4ea8c75902ba24235d2d10139f5ccb26dd6a2cc362d15ca9a0c909ce16b1b27e575cb61e12891f34c4398fe9c23c1b8cfd3bb19287f1879d7864ef66bc35302a18e74e12cd1", 0x87}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000180)="2c159235709410944515f40597c06cd3ee8383d8e5eda6dacd9035abb78ff897b053c3ca3acbc18849196e08c7337b2ec12c4bee4f9913", 0x37}], 0x6, &(0x7f0000002500)=[{0xc8, 0x10e, 0x1, "a9288b2ce8ae5b9f8a16f4cb6452c5fabb27f00d13185aeb8d80162959eb09a088b86b497945c0354b4bfd6663c6bcdaafaa86cf64b08bcc64e883b70100820ea8398b35931f53f17d03db2e52efb699196a388dd6bb0f8d1362b3cbae5c9503b1aad5cdf8b104bc6ae648c9ac1ccdeeece4f1e2a8d6006b05e4d4bb39b74f84a7b0bfea5b08594d9111dd8baf6eac3413aca54b2be89208a1e2ebbfbeb5ca1033da3f3a367c31e6ee23812484950a3e0d5a0394124c"}, {0xf8, 0x88, 0x6, "10e13c86a0ffb19c3af0f3f2f9cf10a8aa9a8170602a23f66a99579629c621f9a32f31b2107db73e2cad9f1c6516ebcd2de23920e400bd455c2e0e1f748fd520d284ce1d79be915c86330eb3ab4109c6ef0e6fd2a8c5b44120aafc6d1dd3fa3e59589321153d2b2bc7b2430af02794f2af1cabea9b71c2689b9418d64084a1f0b929b538c707df33603e20a5d2a897ecd45ccfd102f5805f72191aae1bcf2eb0cb33475b408057f303ccb73d79360ec51c403faf9f000228c508aa20d37a77baf33c0dc22ee1d0e88f8879f3946b70c27513284b0684db0557e5302fca9a583c72fed9bd3eb0"}], 0x1c0}, 0x40041) 6.362652251s ago: executing program 4 (id=1225): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002020000402505a1a43300010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000206241a00000008241c050006850009058119000200fc000904010000020d00000904010102020d0000090582020002000002090503020002"], 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x2}}, {@can={0xc, {{0x3, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "0c0b8d9a6c5d49d6"}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x2, 0x6, 0xfffa}, 0x31, [0x8000, 0xc95a, 0xe, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x0, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d7, 0x10000008, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x10000000, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x400a, 0x6, 0x80000000, 0x0, 0x5, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x1000000a, 0xf0000000, 0x8000012f, 0xfffffff9, 0x5, 0x6, 0x129432e6, 0xc6, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x2003, 0x0, 0x0, 0x5, 0x7f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x8, 0x7ff, 0x7fff, 0x5a7e, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x800, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x2, 0x9, 0x5, 0x3, 0x8, 0x1, 0x2, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0xa, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x2, 0xa9, 0xfe02, 0x9, 0xac9, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x80009, 0x2, 0x57, 0x7, 0x1, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x0, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x4006, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0xdd, 0x7ff, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01010000000000000000050000000900010073797a3000000c000900030073797ad197b8b20024000000060a0104000000000000d352cf12f09e87a104800900010073f97a300000000014000000110001f6ffffff00000000000000000b"], 0x78}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) pipe2$watch_queue(0x0, 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) getsockopt(r2, 0x1, 0x3, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x11, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r6, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.304133381s ago: executing program 0 (id=1226): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002000000000000002800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) syz_usb_connect(0x1, 0x5d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cd0361086d040e0ab55f0102030109024b0001020000000904be000103"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 6.303835474s ago: executing program 5 (id=1227): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f06ffff00000000000109022400010000000005038f368ec0782b20439902643a0904000015030000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x2, "ad9f"}, 0x0}) (async, rerun: 64) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) (async, rerun: 32) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffd4f, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x8342) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)}, 0x0) 5.774570294s ago: executing program 1 (id=1228): r0 = syz_open_dev$video(&(0x7f0000000100), 0x77a3, 0x8000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0xe, @vbi={0x7, 0x7, 0x3a, 0x31364d4e, [0x8, 0x401], [0x0, 0x40], 0x1}}) (fail_nth: 5) 5.325708547s ago: executing program 1 (id=1229): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) gettid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a000000000000000000000000001c000000000000000001020000000000000002000100000000000400000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x14) 5.221951992s ago: executing program 2 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400480000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 4.832198735s ago: executing program 2 (id=1231): syz_usb_connect(0x1, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ce859b08402040b13675010203010902120001090340f20904010800ff4e4205958ef53d32c42520ec9367b4097562ff68d1454a84756368bdec917096d00343c5cfacd87ad19c842752425296f4dab8fb5d181cacfc8deb221db613c069e9c41c418116869f6cad8d62d1a315f91e632dea6a54ef6a746813afd0e1ffc6e699305a53b78a406da9b73a011fd077ce8c36aaede2cd79de0200e9c7287a2dac9c4e8a40874d94331605902221a7ed0c5a23e517dc5622ba76c8f1bf6b516b6568d22a29284b19e1280bf3990b25483706a3a303c3361d23b34846c191838df3b367da56562e5ac59f764f06740efe7131c6571d80"], &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x2000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000000)=0x4c) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142800006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 4.448589883s ago: executing program 5 (id=1232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16, @ANYBLOB="010028bd7000000000000c0000001800018014000200"], 0x150}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007"], 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000240012800b000100627269646765000014000280050019000700000008001a00c3170000"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000007c0)=[@in_dx={0x82, 0x0, {0x6c4f, 0x5}}, @uexit={0x0, 0x0, 0x309}, @out_dx={0xaa, 0x0, {0xbe40, 0x6, 0x80000001}}, @code={0xa, 0x0, {"40af0f2b14fd000000000f20d835080000000f22d867490fc79bc50000008fc978cbec0fc71e66ba610066b8000066efc4e27979c10f01cb3e360fc77300"}}, @wr_crn={0x46, 0x0, {0x2, 0x2}}, @cpuid={0x14, 0x0, {0x0, 0x5}}, @wr_drn={0x6e, 0x0, {0x1, 0x2}}, @code={0xa, 0x0, {"0f01cf66ba6100b04bee0f20c035040000000f22c066baf80cb8ab823c8fef66bafc0cec400f790967f265660f0faddaeceaf4b00fc7770766baf80cb82c49f68cef66bafc0c66b8b43466ef260f173c71c4c185d98f00000000"}}, @out_dx={0xaa, 0x0, {0x2712, 0x6, 0x4}}, @wr_drn={0x6e, 0x0, {0x5, 0xf}}, @cpuid={0x14, 0x0, {0x291, 0x400}}, @wr_drn={0x6e, 0x0, {0x6, 0xb4}}, @in_dx={0x82, 0x0, {0x825e, 0x2}}, @rdmsr={0x32, 0x0, {0xaee}}, @code={0xa, 0x0, {"66baf80cb8535a528fef66bafc0cec440f20c03509000000440f22c0670fc7b6ebec000064470f019a0040000066ba4300ec66b822018ed0c7442400a7000000c744240200000080ff1c24b9800b0000b813cb0000ba000000000f30f3450f0948b806000000000000000f23d80f21f835000000000f23f8"}}, @wr_drn={0x6e, 0x0, {0x7, 0x5dc}}, @wr_crn={0x46, 0x0, {0x3, 0x8}}, @rdmsr={0x32, 0x0, {0x837}}, @in_dx={0x82, 0x0, {0xd5d2, 0x3}}, @wr_crn={0x46, 0x0, {0x8, 0x5}}, @in_dx={0x82, 0x0, {0xfbd5, 0x7}}, @uexit={0x0, 0x0, 0x7b9}, @uexit={0x0, 0x0, 0x200}, @in_dx={0x82, 0x0, {0xb7dc, 0x3}}, @in_dx={0x82, 0x0, {0xe498, 0x2}}], 0x44f}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000140)=0x7) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) preadv2(r3, &(0x7f0000000140), 0x10000000000002dd, 0x10001, 0xa78, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r7, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r7, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r7}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0x1, 0x10, {0xffffffffffffffff}, {}, 0x7}) syz_emit_ethernet(0x8e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700582c0020010000000000000000000000000001ff0200000000000000000000dd11ad7e3a00000000000000020090780000000468cd85b50007840020010000000000000000000000000002fe8000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356df6e15fbb0f0f6bd944c3268cf66b8693b29efdf68b7176e896a5a8bccda075349b8eda9cd91c1dfac337215aeadd94fbfcb2d6831b9faf87079ae9146ea910fad11c1ab0a769e77fce48fb14451e42dfd0b1d194f72f758b413bb8e0211200"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000240)}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, 0x0, 0x0) getsockopt$inet_mptcp_buf(r10, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r3, &(0x7f00000000c0)={r3, r3, 0x4}) 3.982369471s ago: executing program 5 (id=1233): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 3.536188396s ago: executing program 5 (id=1234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000006800010025bd7000feffffff0a00000000000000100008800c0001000000000000000000060007000800000008000500", @ANYRES32=r6, @ANYBLOB="e9a39622c7feb98a3ac9dec7ec7ea62f54b77be241fc0547029ff7179f91617c2481de609f5c9c3dd475d595cdcd91d33f9806174105d72373e6bd3e4a670b08d6c9268d8862e005c12accbcd7f7953eade5a5ae24bca902cdb0ef7eb993c6d5b67ae12aa7062bcdf43023803eff1da45027920f5abb6f62a86b1e67f1bb3bea7e392ec98bc101df19803d352a056b4701dd8eefab3acd6f622044b64de3a6099907907ea3dca80519947641209c691d72cc4467989050b213c1c2abd2886e339559a1b59fe114713441014289699622b5"], 0x38}}, 0x40040d0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r3) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.300472244s ago: executing program 1 (id=1235): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="200000000000000084000000020000000700040001000100ff8c0000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000ac1414010000000018000000000000008400000005000000000000000700000030000000000000008400000001000000008007000702000004000000000000000d0000000900000005000000", @ANYRES32=0x0, @ANYBLOB="12000000000000008400000006"], 0x98, 0x8004084}, 0x4041) 1.972750548s ago: executing program 1 (id=1236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000001100000000bbfe", @ANYRES16], 0x0) 1.807990063s ago: executing program 1 (id=1237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000400)={0x81, 0x5, 0x7f, 0xffffffee, '\x00', '\x00', '\x00', 0x98f, 0x6, 0x9, 0x7, "3994f06af3aa8a684b8d09dcf50fe358"}) close(r3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee61435bbb375"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) io_submit(0x0, 0x3, &(0x7f00000006c0)=[0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x8d1, 0x0, 0x2}, 0x0]) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000240)={0x1, 0x0, {0x2e, 0x1d, 0x15, 0x1f, 0x0, 0x6, 0x2, 0x43, 0xffffffffffffffff}}) r5 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000020180c000000008000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x1009, &(0x7f0000001640)=""/4105, 0x0, 0x8}, 0x94) 1.551284587s ago: executing program 0 (id=1238): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = syz_open_dev$vcsu(0x0, 0x7, 0x200) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000480)={r4, 0x9}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}, 0xffffffff}], 0x1, 0x0, 0x0) 557.467953ms ago: executing program 0 (id=1239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000090900010073797a30000000002c000000030a0101000000000000000e010000000900010073797a30000000000900030073797a30000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000001080002400000000008000640000000020900010073797a30"], 0x110}}, 0x0) 332.373796ms ago: executing program 0 (id=1240): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 0s ago: executing program 1 (id=1241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0xc, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)={0x8, 'vlan1\x00', {'ip6_vti0\x00'}}) write$apparmor_current(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="706572866d70726f66696c64203a273a02"], 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"3c24f54d321bc81157f8000000000000002800200000000000000000000800"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40094}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): a0/0x420 [ 347.358470][ T9232] __x64_sys_sendmsg+0x19b/0x260 [ 347.358483][ T9232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.358501][ T9232] ? __pfx_ksys_write+0x10/0x10 [ 347.358513][ T9232] ? rcu_is_watching+0x15/0xb0 [ 347.358526][ T9232] ? do_syscall_64+0xbe/0x3b0 [ 347.358538][ T9232] do_syscall_64+0xfa/0x3b0 [ 347.358548][ T9232] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.358558][ T9232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.358568][ T9232] ? clear_bhb_loop+0x60/0xb0 [ 347.358579][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.358588][ T9232] RIP: 0033:0x7f7f0e58eec9 [ 347.358598][ T9232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.358606][ T9232] RSP: 002b:00007f7f0f3a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.358617][ T9232] RAX: ffffffffffffffda RBX: 00007f7f0e7e6180 RCX: 00007f7f0e58eec9 [ 347.358625][ T9232] RDX: 0000000000000054 RSI: 0000200000000200 RDI: 0000000000000008 [ 347.358631][ T9232] RBP: 00007f7f0f3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 347.358637][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.358642][ T9232] R13: 00007f7f0e7e6218 R14: 00007f7f0e7e6180 R15: 00007f7f0e90fa28 [ 347.358657][ T9232] [ 347.572776][ T1212] gspca_sunplus: reg_r err -110 [ 347.577697][ T1212] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 347.615834][ T1212] usb 2-1: USB disconnect, device number 52 [ 349.053102][ T30] audit: type=1326 audit(1759165216.590:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 349.115064][ T1212] usb 1-1: USB disconnect, device number 31 [ 349.160317][ T30] audit: type=1326 audit(1759165216.590:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 349.271870][ T30] audit: type=1326 audit(1759165216.590:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 349.309102][ T30] audit: type=1326 audit(1759165216.590:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 349.343240][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 349.471392][ T6020] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 349.511788][ T30] audit: type=1326 audit(1759165216.590:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 349.665934][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.862'. [ 349.691233][ T6020] usb 3-1: Using ep0 maxpacket: 8 [ 349.703503][ T6020] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 349.712792][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.720769][ T6020] usb 3-1: Product: syz [ 349.751144][ T6020] usb 3-1: Manufacturer: syz [ 349.764045][ T30] audit: type=1326 audit(1759165216.590:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 349.766053][ T6020] usb 3-1: SerialNumber: syz [ 349.895904][ T6020] usb 3-1: config 0 descriptor?? [ 349.926653][ T6020] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 349.941162][ T6010] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 349.970864][ T30] audit: type=1326 audit(1759165216.590:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 350.111223][ T6010] usb 1-1: Using ep0 maxpacket: 32 [ 350.120576][ T6010] usb 1-1: config 0 has an invalid interface number: 136 but max is 0 [ 350.129182][ T6010] usb 1-1: config 0 has no interface number 0 [ 350.144322][ T30] audit: type=1326 audit(1759165216.590:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 350.188205][ T6010] usb 1-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 350.209118][ T6010] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 350.232161][ T30] audit: type=1326 audit(1759165216.590:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 350.254618][ T6010] usb 1-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 350.271794][ T6010] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 350.325593][ T30] audit: type=1326 audit(1759165216.590:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6d8938eec9 code=0x7ffc0000 [ 350.368542][ T6010] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.379274][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.863'. [ 350.391445][ T6010] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 350.412893][ T6010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.439398][ T6010] usb 1-1: config 0 descriptor?? [ 350.574682][ T6010] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.935752][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.003316][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.011387][ T7564] udevd[7564]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.310169][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 351.328465][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 352.347397][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.362478][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.528065][ T6020] gspca_sonixj: reg_w1 err -71 [ 352.541416][ T6020] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 352.601971][ T6020] usb 3-1: USB disconnect, device number 48 [ 352.690965][ T6010] usb 1-1: USB disconnect, device number 32 [ 353.805566][ T9289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.870'. [ 353.837212][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'. [ 353.860618][ T9290] FAULT_INJECTION: forcing a failure. [ 353.860618][ T9290] name failslab, interval 1, probability 0, space 0, times 0 [ 353.911753][ T9289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.870'. [ 353.924619][ T9290] CPU: 1 UID: 0 PID: 9290 Comm: syz.1.870 Not tainted syzkaller #0 PREEMPT(full) [ 353.924642][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.924652][ T9290] Call Trace: [ 353.924660][ T9290] [ 353.924668][ T9290] dump_stack_lvl+0x189/0x250 [ 353.924693][ T9290] ? __pfx____ratelimit+0x10/0x10 [ 353.924712][ T9290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.924729][ T9290] ? __pfx__printk+0x10/0x10 [ 353.924758][ T9290] ? __pfx___might_resched+0x10/0x10 [ 353.924779][ T9290] should_fail_ex+0x414/0x560 [ 353.924810][ T9290] should_failslab+0xa8/0x100 [ 353.924835][ T9290] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 353.924859][ T9290] ? __alloc_skb+0x112/0x2d0 [ 353.924882][ T9290] __alloc_skb+0x112/0x2d0 [ 353.924904][ T9290] netlink_sendmsg+0x5c6/0xb30 [ 353.924934][ T9290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.924954][ T9290] ? aa_sock_msg_perm+0xf1/0x1d0 [ 353.924973][ T9290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.924992][ T9290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.925011][ T9290] __sock_sendmsg+0x219/0x270 [ 353.925040][ T9290] ____sys_sendmsg+0x505/0x830 [ 353.925067][ T9290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.925097][ T9290] ? import_iovec+0x74/0xa0 [ 353.925122][ T9290] ___sys_sendmsg+0x21f/0x2a0 [ 353.925146][ T9290] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.925198][ T9290] ? __fget_files+0x2a/0x420 [ 353.925213][ T9290] ? __fget_files+0x3a0/0x420 [ 353.925239][ T9290] __x64_sys_sendmsg+0x19b/0x260 [ 353.925271][ T9290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.925302][ T9290] ? __pfx_ksys_write+0x10/0x10 [ 353.925330][ T9290] ? do_syscall_64+0xbe/0x3b0 [ 353.925352][ T9290] do_syscall_64+0xfa/0x3b0 [ 353.925370][ T9290] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.925387][ T9290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.925404][ T9290] ? clear_bhb_loop+0x60/0xb0 [ 353.925422][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.925437][ T9290] RIP: 0033:0x7f23e138eec9 [ 353.925453][ T9290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.925466][ T9290] RSP: 002b:00007f23e222a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.925484][ T9290] RAX: ffffffffffffffda RBX: 00007f23e15e6180 RCX: 00007f23e138eec9 [ 353.925497][ T9290] RDX: 0000000000000054 RSI: 0000200000000200 RDI: 0000000000000008 [ 353.925508][ T9290] RBP: 00007f23e222a090 R08: 0000000000000000 R09: 0000000000000000 [ 353.925518][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.925528][ T9290] R13: 00007f23e15e6218 R14: 00007f23e15e6180 R15: 00007f23e170fa28 [ 353.925558][ T9290] [ 354.239816][ T9289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.870'. [ 354.493318][ T9297] batadv2: entered allmulticast mode [ 354.530048][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 354.543443][ T9297] bridge0: port 4(batadv2) entered blocking state [ 354.550853][ T9297] bridge0: port 4(batadv2) entered disabled state [ 354.570076][ T9297] batadv2: entered promiscuous mode [ 354.881561][ T1212] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 355.298306][ T1212] usb 3-1: config 4 has an invalid interface number: 39 but max is 0 [ 355.306573][ T1212] usb 3-1: config 4 has no interface number 0 [ 355.314148][ T1212] usb 3-1: config 4 interface 39 has no altsetting 0 [ 355.342857][ T4210] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 355.352136][ T4210] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 355.364387][ T1212] usb 3-1: New USB device found, idVendor=2c42, idProduct=1606, bcdDevice=35.0f [ 355.373644][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.381826][ T1212] usb 3-1: Product: syz [ 355.385990][ T1212] usb 3-1: Manufacturer: syz [ 355.408923][ T1212] usb 3-1: SerialNumber: syz [ 355.464316][ T1212] f81232 3-1:4.39: f81534a converter detected [ 355.757595][ T9322] netlink: 68 bytes leftover after parsing attributes in process `syz.1.878'. [ 355.782045][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 355.805442][ T9324] vxlan0: entered promiscuous mode [ 355.852857][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.861936][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.953964][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.006001][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.321122][ T6010] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 356.522886][ T6010] usb 2-1: config 2 has an invalid interface number: 190 but max is 0 [ 356.531599][ T6010] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 356.857392][ T6010] usb 2-1: config 2 has no interface number 0 [ 356.909151][ T6010] usb 2-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.979318][ T6010] usb 2-1: string descriptor 0 read error: -22 [ 356.986517][ T6010] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 356.996393][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.181412][ T6020] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 357.344235][ T6020] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.354992][ T6020] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 357.422287][ T6020] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.496393][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.551721][ T6010] (null): keene_cmd_main failed (-110) [ 357.590879][ T6020] usb 1-1: SerialNumber: syz [ 357.604912][ T6010] video4linux radio48: keene_cmd_main failed (-32) [ 357.652080][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.678176][ T1212] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 357.680229][ T6010] radio-keene 2-1:2.190: V4L2 device registered as radio48 [ 357.693324][ T6020] cdc_ether 1-1:1.0: skipping garbage [ 357.708740][ T6020] usb 1-1: bad CDC descriptors [ 357.716596][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.727347][ T1212] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 357.743101][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.836474][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.846538][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.849886][ T1212] usb 3-1: USB disconnect, device number 49 [ 357.900841][ T1212] f81232 3-1:4.39: device disconnected [ 357.969115][ T9336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.881'. [ 358.682134][ T9337] chnl_net:caif_netlink_parms(): no params data found [ 359.283693][ T6020] usb 2-1: USB disconnect, device number 53 [ 359.331655][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.350452][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.385487][ T9337] bridge_slave_0: entered allmulticast mode [ 359.428498][ T9337] bridge_slave_0: entered promiscuous mode [ 359.481647][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.500340][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.571907][ T9337] bridge_slave_1: entered allmulticast mode [ 359.602566][ T9337] bridge_slave_1: entered promiscuous mode [ 359.883029][ T9358] netlink: 'syz.1.883': attribute type 1 has an invalid length. [ 359.948560][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 359.962564][ T5184] Bluetooth: hci5: command tx timeout [ 360.003891][ T9357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.088824][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.106205][ T1212] usb 1-1: USB disconnect, device number 33 [ 360.118377][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.349809][ T9337] team0: Port device team_slave_0 added [ 360.392129][ T9337] team0: Port device team_slave_1 added [ 360.558209][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.623628][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.727571][ T9337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.089971][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.167007][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.264279][ T9337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.692480][ T9337] hsr_slave_0: entered promiscuous mode [ 361.751532][ T9337] hsr_slave_1: entered promiscuous mode [ 361.811360][ T9337] debugfs: 'hsr0' already exists in 'hsr' [ 361.901282][ T9337] Cannot create hsr debugfs directory [ 362.033184][ T5184] Bluetooth: hci5: command tx timeout [ 362.412362][ T9381] netlink: 596 bytes leftover after parsing attributes in process `syz.4.890'. [ 362.741652][ T1212] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 362.955361][ T9337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.060212][ T9337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.061156][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 363.115853][ T1212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 363.124916][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 363.128589][ T9337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.149083][ T1212] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 363.182035][ T1212] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 363.203878][ T1212] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 363.213236][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.240699][ T1212] usb 2-1: Product: syz [ 363.297793][ T9337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.301262][ T1212] usb 2-1: Manufacturer: syz [ 363.311571][ T1212] usb 2-1: SerialNumber: syz [ 363.590508][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.896'. [ 363.650776][ T1212] usb 2-1: USB disconnect, device number 54 [ 363.854226][ T5869] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 364.028883][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 364.051488][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.062721][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.111202][ T5184] Bluetooth: hci5: command tx timeout [ 364.127848][ T5869] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 364.150263][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.179531][ T5869] usb 5-1: config 0 descriptor?? [ 364.312730][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.445023][ T9337] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.488552][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.495789][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.532755][ T9429] netlink: 'syz.1.900': attribute type 27 has an invalid length. [ 364.769795][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.776928][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.854777][ T6020] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 364.864362][ T5869] microsoft 0003:045E:009D.0004: unknown main item tag 0x0 [ 364.872865][ T5869] microsoft 0003:045E:009D.0004: unknown main item tag 0x0 [ 364.977979][ T5869] microsoft 0003:045E:009D.0004: unknown main item tag 0x0 [ 365.009188][ T9337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.051499][ T6020] usb 2-1: Using ep0 maxpacket: 32 [ 365.067833][ T6020] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 365.100766][ T5869] microsoft 0003:045E:009D.0004: unknown main item tag 0x0 [ 365.103128][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.122761][ T5869] microsoft 0003:045E:009D.0004: unknown main item tag 0x0 [ 365.149364][ T5869] microsoft 0003:045E:009D.0004: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.4-1/input0 [ 365.245985][ T6020] usb 2-1: config 0 descriptor?? [ 365.263333][ T6020] gspca_main: sunplus-2.14.0 probing 041e:400b [ 365.321163][ T1212] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 365.351812][ T5869] microsoft 0003:045E:009D.0004: no inputs found [ 365.362659][ T9337] veth0_vlan: entered promiscuous mode [ 365.389730][ T5869] microsoft 0003:045E:009D.0004: could not initialize ff, continuing anyway [ 365.425818][ T9337] veth1_vlan: entered promiscuous mode [ 365.492206][ T5869] usb 5-1: USB disconnect, device number 39 [ 365.518771][ T9337] veth0_macvtap: entered promiscuous mode [ 365.548050][ T9337] veth1_macvtap: entered promiscuous mode [ 365.615608][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.630348][ T1212] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 365.660871][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.729965][ T64] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.807327][ T1212] usb 1-1: config 0 has no interface number 0 [ 365.831616][ T1212] usb 1-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=eb.bb [ 365.845473][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.887807][ T1212] usb 1-1: Product: syz [ 365.894674][ T64] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.907050][ T1212] usb 1-1: Manufacturer: syz [ 365.944468][ T64] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.957441][ T1212] usb 1-1: SerialNumber: syz [ 365.983843][ T1212] usb 1-1: config 0 descriptor?? [ 366.000182][ T64] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.141317][ T5869] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 366.168226][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.176530][ T6020] gspca_sunplus: reg_r err -110 [ 366.181807][ T6020] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 366.191730][ T5184] Bluetooth: hci5: command tx timeout [ 366.244927][ T1212] usb 1-1: USB disconnect, device number 34 [ 366.352928][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 366.377174][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.424065][ T5869] usb 5-1: config 211 has an invalid interface number: 98 but max is 0 [ 366.473112][ T4210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.491239][ T5869] usb 5-1: config 211 has no interface number 0 [ 366.498547][ T4210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.511801][ T5869] usb 5-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 366.556913][ T5869] usb 5-1: config 211 interface 98 has no altsetting 0 [ 366.575882][ T5869] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 366.601177][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.621129][ T5869] usb 5-1: Product: syz [ 366.644141][ T5869] usb 5-1: Manufacturer: syz [ 366.655440][ T5869] usb 5-1: SerialNumber: syz [ 366.709304][ T9435] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 366.939909][ T5869] mct_u232 5-1:211.98: MCT U232 converter detected [ 366.990999][ T5869] mct_u232 ttyUSB0: expected endpoint missing [ 367.083740][ T5869] usb 5-1: USB disconnect, device number 40 [ 367.170559][ T5869] mct_u232 5-1:211.98: device disconnected [ 367.334172][ T9447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.905'. [ 367.364265][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.905'. [ 367.405684][ T9448] FAULT_INJECTION: forcing a failure. [ 367.405684][ T9448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.446553][ T6020] usb 2-1: USB disconnect, device number 55 [ 367.486494][ T9447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.905'. [ 367.541100][ T9447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.905'. [ 367.571857][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.2.905 Not tainted syzkaller #0 PREEMPT(full) [ 367.571881][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.571895][ T9448] Call Trace: [ 367.571902][ T9448] [ 367.571910][ T9448] dump_stack_lvl+0x189/0x250 [ 367.571935][ T9448] ? __pfx____ratelimit+0x10/0x10 [ 367.571967][ T9448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.571993][ T9448] ? __pfx__printk+0x10/0x10 [ 367.572016][ T9448] ? __might_fault+0xb0/0x130 [ 367.572051][ T9448] should_fail_ex+0x414/0x560 [ 367.572081][ T9448] _copy_from_iter+0x1de/0x1790 [ 367.572110][ T9448] ? rcu_is_watching+0x15/0xb0 [ 367.572129][ T9448] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 367.572153][ T9448] ? __pfx__copy_from_iter+0x10/0x10 [ 367.572176][ T9448] ? __build_skb_around+0x257/0x3e0 [ 367.572198][ T9448] ? netlink_sendmsg+0x642/0xb30 [ 367.572216][ T9448] ? skb_put+0x11b/0x210 [ 367.572238][ T9448] netlink_sendmsg+0x6b2/0xb30 [ 367.572267][ T9448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.572289][ T9448] ? aa_sock_msg_perm+0xf1/0x1d0 [ 367.572309][ T9448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.572327][ T9448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.572347][ T9448] __sock_sendmsg+0x219/0x270 [ 367.572375][ T9448] ____sys_sendmsg+0x505/0x830 [ 367.572402][ T9448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.572432][ T9448] ? import_iovec+0x74/0xa0 [ 367.572458][ T9448] ___sys_sendmsg+0x21f/0x2a0 [ 367.572481][ T9448] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.572539][ T9448] ? __fget_files+0x2a/0x420 [ 367.572554][ T9448] ? __fget_files+0x3a0/0x420 [ 367.572581][ T9448] __x64_sys_sendmsg+0x19b/0x260 [ 367.572605][ T9448] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.572636][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 367.572663][ T9448] ? do_syscall_64+0xbe/0x3b0 [ 367.572687][ T9448] do_syscall_64+0xfa/0x3b0 [ 367.572705][ T9448] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.572722][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.572739][ T9448] ? clear_bhb_loop+0x60/0xb0 [ 367.572761][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.572781][ T9448] RIP: 0033:0x7f6d8938eec9 [ 367.572797][ T9448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.572813][ T9448] RSP: 002b:00007f6d8a2a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.572831][ T9448] RAX: ffffffffffffffda RBX: 00007f6d895e6180 RCX: 00007f6d8938eec9 [ 367.572845][ T9448] RDX: 0000000000000054 RSI: 0000200000000200 RDI: 0000000000000008 [ 367.572856][ T9448] RBP: 00007f6d8a2a4090 R08: 0000000000000000 R09: 0000000000000000 [ 367.572867][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.572877][ T9448] R13: 00007f6d895e6218 R14: 00007f6d895e6180 R15: 00007f6d8970fa28 [ 367.572907][ T9448] [ 367.642350][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 368.311373][ T5869] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 368.461693][ T9460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.482632][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 368.535723][ T5869] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 368.545754][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.553950][ T5869] usb 1-1: Product: syz [ 368.558145][ T5869] usb 1-1: Manufacturer: syz [ 368.571118][ T5869] usb 1-1: SerialNumber: syz [ 368.586885][ T9466] netlink: 3 bytes leftover after parsing attributes in process `syz.2.909'. [ 368.638589][ T5869] usb 1-1: config 0 descriptor?? [ 368.652056][ T5952] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 368.718096][ T5869] as10x_usb: device has been detected [ 368.731929][ T5869] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 368.783172][ T5869] usb 1-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 368.858724][ T5952] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 368.892441][ T5952] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 368.927093][ T9444] random: crng reseeded on system resumption [ 368.968004][ T5869] as10x_usb: error during firmware upload part1 [ 369.050260][ T5869] Registered device Sky IT Digital Key (green led) [ 369.151677][ T5952] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.244277][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.366513][ T5952] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.493945][ T5952] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 369.506025][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.731316][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 369.893258][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.936929][ T9] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 369.977326][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.016764][ T9] usb 3-1: config 0 descriptor?? [ 370.796398][ T5952] usb 1-1: USB disconnect, device number 35 [ 370.875378][ T5952] Unregistered device Sky IT Digital Key (green led) [ 370.880851][ T5952] as10x_usb: device has been disconnected [ 370.918733][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 371.242859][ T5869] usb 2-1: USB disconnect, device number 56 [ 371.301430][ T5952] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 371.447349][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 371.471241][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 371.479857][ T5952] usb 1-1: unable to get BOS descriptor or descriptor too short [ 371.491936][ T5952] usb 1-1: config 125 has an invalid interface number: 27 but max is 0 [ 371.513921][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'. [ 371.523073][ T5952] usb 1-1: config 125 has an invalid descriptor of length 250, skipping remainder of the config [ 371.612726][ T5952] usb 1-1: config 125 has no interface number 0 [ 371.670847][ T5952] usb 1-1: config 125 interface 27 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.693183][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 371.704430][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 371.719035][ T5952] usb 1-1: config 125 interface 27 has no altsetting 0 [ 371.728077][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 371.738529][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.749049][ T5952] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 371.758202][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.782228][ T9486] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 371.797022][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 371.807567][ T5952] usb 1-1: Product: syz [ 371.819730][ T5952] usb 1-1: Manufacturer: syz [ 371.830770][ T5952] usb 1-1: SerialNumber: syz [ 372.092016][ T5952] hub 1-1:125.27: bad descriptor, ignoring hub [ 372.172681][ T5952] hub 1-1:125.27: probe with driver hub failed with error -5 [ 372.243861][ T9486] fuse: Unknown parameter 'nd' [ 372.309882][ T5952] sierra 1-1:125.27: Sierra USB modem converter detected [ 372.464283][ T9477] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 372.514696][ T6010] usb 6-1: USB disconnect, device number 2 [ 372.641820][ T9] usb 3-1: USB disconnect, device number 50 [ 372.719416][ T9501] loop2: detected capacity change from 0 to 7 [ 372.770127][ T5878] loop2: p1 [ 372.784171][ T5878] loop2: partition table partially beyond EOD, truncated [ 372.802802][ T5952] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 372.807825][ T5878] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 372.897446][ T9501] loop2: p1 [ 372.918444][ T9501] loop2: partition table partially beyond EOD, truncated [ 372.927366][ T5952] usb 1-1: USB disconnect, device number 36 [ 372.944663][ T9501] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 373.059280][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 373.068222][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 373.069507][ T30] audit: type=1326 audit(1759165241.150:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 373.121096][ T5952] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 373.157497][ T8056] udevd[8056]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 373.182333][ T30] audit: type=1326 audit(1759165241.150:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 373.226541][ T8056] udevd[8056]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 373.266224][ T30] audit: type=1326 audit(1759165241.150:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 373.272516][ T5952] sierra 1-1:125.27: device disconnected [ 373.405133][ T30] audit: type=1326 audit(1759165241.150:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 373.456236][ T8056] udevd[8056]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 373.468755][ T30] audit: type=1326 audit(1759165241.150:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 373.495247][ T30] audit: type=1326 audit(1759165241.150:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 373.519883][ T30] audit: type=1326 audit(1759165241.150:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 373.557767][ T30] audit: type=1326 audit(1759165241.150:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 373.585747][ T30] audit: type=1326 audit(1759165241.150:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 373.730017][ T6010] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 373.982334][ T30] audit: type=1326 audit(1759165241.150:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.4.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f0e58eec9 code=0x7ffc0000 [ 374.091175][ T6010] usb 3-1: Using ep0 maxpacket: 16 [ 374.129249][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.231256][ T6010] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 374.270600][ T6010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.495463][ T6010] usb 3-1: config 0 descriptor?? [ 374.919598][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.949012][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.178720][ T6010] usbhid 3-1:0.0: can't add hid device: -71 [ 375.241215][ T6010] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 375.297402][ T6010] usb 3-1: USB disconnect, device number 51 [ 375.490542][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 375.720620][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 375.842641][ T9531] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 375.931472][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 375.985436][ T9534] 8021q: adding VLAN 0 to HW filter on device bond13 [ 376.142927][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.175041][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.192865][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 376.207189][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.231164][ T5869] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 376.272164][ T9] usb 1-1: config 0 descriptor?? [ 376.403199][ T5869] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 376.471248][ T5869] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.633767][ T5869] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.656378][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.697462][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.715286][ T5869] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.741924][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.833285][ T9] usbhid 1-1:0.0: can't add hid device: -32 [ 376.834136][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.875985][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 376.905590][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.947593][ T5869] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 376.960535][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.002382][ T6020] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 377.050319][ T5869] usb 1-1: USB disconnect, device number 37 [ 377.201563][ T5935] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 377.210900][ T6020] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 377.223718][ T6020] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.259597][ T9565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.932'. [ 377.393729][ T5935] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 377.421123][ T6020] usb 2-1: config 0 has no interface number 0 [ 377.447439][ T5935] usb 5-1: can't read configurations, error -22 [ 377.471500][ T6020] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 377.501000][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.549291][ T6020] usb 2-1: Product: syz [ 377.553557][ T6020] usb 2-1: Manufacturer: syz [ 377.558150][ T6020] usb 2-1: SerialNumber: syz [ 377.568677][ T6020] usb 2-1: config 0 descriptor?? [ 377.584772][ T6020] qmi_wwan 2-1:0.207: probe with driver qmi_wwan failed with error -22 [ 377.671249][ T5935] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 377.855359][ T5935] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 377.865644][ T5935] usb 5-1: can't read configurations, error -22 [ 377.905495][ T5935] usb usb5-port1: attempt power cycle [ 378.273727][ T5935] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 378.303983][ T5935] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 378.312539][ T5935] usb 5-1: can't read configurations, error -22 [ 378.452010][ T5935] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 378.488273][ T5935] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 378.500662][ T5935] usb 5-1: can't read configurations, error -22 [ 378.510783][ T5935] usb usb5-port1: unable to enumerate USB device [ 378.843902][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.851509][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.055059][ T5935] usb 3-1: USB disconnect, device number 52 [ 379.378136][ T5935] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 379.521141][ T5935] usb 3-1: device descriptor read/64, error -71 [ 379.615805][ T9] usb 2-1: USB disconnect, device number 57 [ 379.880533][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 379.920465][ T5935] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 380.054166][ T5935] usb 3-1: device descriptor read/64, error -71 [ 380.181437][ T5935] usb usb3-port1: attempt power cycle [ 380.604866][ T5935] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 380.659308][ T5935] usb 3-1: device descriptor read/8, error -71 [ 380.873659][ T9610] 8021q: adding VLAN 0 to HW filter on device bond10 [ 380.911787][ T5935] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 381.086715][ T6010] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 381.141375][ T43] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 381.277131][ T6010] usb 5-1: device descriptor read/64, error -71 [ 381.320005][ T43] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 381.337388][ T43] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.389548][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.402578][ T5935] usb 3-1: device descriptor read/8, error -71 [ 381.415482][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.497042][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.511467][ T5935] usb usb3-port1: unable to enumerate USB device [ 381.531288][ T6010] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 381.671600][ T6010] usb 5-1: device descriptor read/64, error -71 [ 381.731504][ T9623] loop2: detected capacity change from 0 to 7 [ 381.745170][ T9623] loop2: p1 [ 381.750044][ T43] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 381.778885][ T9623] loop2: partition table partially beyond EOD, truncated [ 381.793611][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.822881][ T6010] usb usb5-port1: attempt power cycle [ 381.829580][ T9623] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 381.981652][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 382.191129][ T6010] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 382.451751][ T6010] usb 5-1: device descriptor read/8, error -71 [ 382.656204][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 382.731804][ T6010] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 382.812215][ T6010] usb 5-1: device descriptor read/8, error -71 [ 382.847318][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.863449][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.908118][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.950921][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.959670][ T6010] usb usb5-port1: unable to enumerate USB device [ 383.010405][ T9630] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 383.024764][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.080538][ T9629] netlink: 'syz.2.947': attribute type 10 has an invalid length. [ 383.159731][ T9629] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 383.219608][ T9634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.251742][ T9630] fuse: Unknown parameter 'nd' [ 383.524058][ T6010] usb 6-1: USB disconnect, device number 3 [ 383.861504][ T6010] usb 1-1: USB disconnect, device number 38 [ 384.311158][ T43] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 384.463187][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.487924][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 384.496938][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.667686][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.734996][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 384.777888][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.954'. [ 385.171171][ T43] usb 5-1: SerialNumber: syz [ 385.200148][ T43] cdc_ether 5-1:1.0: skipping garbage [ 385.205792][ T43] usb 5-1: bad CDC descriptors [ 386.112575][ T9675] netlink: 'syz.2.956': attribute type 27 has an invalid length. [ 386.143151][ T9675] bridge1: left promiscuous mode [ 386.196606][ T9675] bridge1: left allmulticast mode [ 386.266784][ T9675] vxlan0: left promiscuous mode [ 386.369126][ T9679] loop2: detected capacity change from 0 to 7 [ 386.388685][ T9679] loop2: p1 [ 386.395789][ T9679] loop2: partition table partially beyond EOD, truncated [ 386.451226][ T5952] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 386.472868][ T1159] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.561448][ T9679] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 386.603309][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 386.677901][ T1159] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.775736][ T1159] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.801606][ T1159] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.895439][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 386.971157][ T5952] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 387.091142][ T5935] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 387.129271][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.168453][ T5952] usb 3-1: config 0 descriptor?? [ 387.199068][ T5952] gspca_main: sunplus-2.14.0 probing 041e:400b [ 387.251180][ T6010] usb 5-1: USB disconnect, device number 50 [ 387.271175][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 387.285188][ T5935] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 387.325085][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.336039][ T9685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 387.361178][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.959'. [ 387.374777][ T5935] usb 1-1: Product: syz [ 387.386069][ T5935] usb 1-1: Manufacturer: syz [ 387.414747][ T5935] usb 1-1: SerialNumber: syz [ 387.423548][ T9685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 387.445668][ T5935] usb 1-1: config 0 descriptor?? [ 387.461494][ T9685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 387.679765][ T9681] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns [ 387.689028][ T5935] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 387.725549][ T5935] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 387.822407][ T5935] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -32 [ 387.860393][ T5935] usb 1-1: USB disconnect, device number 39 [ 388.151553][ T5952] gspca_sunplus: reg_r err -110 [ 388.162756][ T5952] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 388.418490][ T9690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.611161][ T6010] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 388.671400][ T9700] netlink: 52 bytes leftover after parsing attributes in process `syz.1.963'. [ 388.772812][ T6010] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 388.805494][ T9704] ipvlan2: entered promiscuous mode [ 388.811393][ T6010] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.848314][ T6010] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.864510][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.893437][ T6010] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.932844][ T5935] usb 3-1: USB disconnect, device number 57 [ 389.020010][ T9707] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 389.042470][ T6010] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 389.067404][ T5952] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 389.155393][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.267268][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.295533][ T5952] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 389.320468][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.362796][ T5952] usb 1-1: config 0 descriptor?? [ 389.368168][ T9716] loop2: detected capacity change from 0 to 7 [ 389.395469][ T9716] loop2: p1 [ 389.405462][ T9716] loop2: partition table partially beyond EOD, truncated [ 389.449051][ T9716] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 389.624708][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 389.825032][ T5952] uclogic 0003:2179:0053.0005: interface is invalid, ignoring [ 390.633768][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.973'. [ 391.224227][ T5935] usb 6-1: USB disconnect, device number 4 [ 391.885553][ T5935] usb 1-1: USB disconnect, device number 40 [ 392.170354][ T9745] usb usb8: usbfs: process 9745 (syz.0.975) did not claim interface 0 before use [ 392.181235][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 392.181251][ T30] audit: type=1400 audit(1759165260.260:480): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9742 comm="syz.0.975" [ 394.321194][ T5935] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 394.493427][ T5935] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 394.533679][ T5935] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 394.572555][ T5935] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 394.593568][ T5935] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 394.621405][ T6020] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 394.633522][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 394.694100][ T5935] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 394.721159][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.765647][ T5935] usb 2-1: Product: syz [ 394.784568][ T6020] usb 6-1: config 0 has an invalid interface number: 45 but max is 0 [ 394.801439][ T6020] usb 6-1: config 0 has no interface number 0 [ 394.834308][ T5935] usb 2-1: Manufacturer: syz [ 394.865017][ T6020] usb 6-1: config 0 interface 45 altsetting 175 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 394.878014][ T5935] usb 2-1: SerialNumber: syz [ 394.912817][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 394.975588][ T5935] usb 2-1: config 0 descriptor?? [ 395.040177][ T6020] usb 6-1: config 0 interface 45 altsetting 175 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.050872][ T9752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 395.141115][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 395.180530][ T9769] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.984'. [ 395.300622][ T6020] usb 6-1: config 0 interface 45 has no altsetting 0 [ 395.316407][ T5935] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 395.327202][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.351280][ T6020] usb 6-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 395.367322][ T5935] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 395.387025][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.399259][ T6020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.419327][ T5935] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 395.429267][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.443851][ T6020] usb 6-1: config 0 descriptor?? [ 395.448846][ T5935] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 395.474029][ T5935] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 395.485270][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.508445][ T5935] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 395.519733][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.528038][ T5935] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 395.538428][ T43] usb 3-1: config 0 descriptor?? [ 395.556616][ T5935] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 395.568523][ T5935] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 395.588738][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 395.600487][ T5935] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 395.630107][ T5935] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 395.651735][ T5935] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 395.677250][ T5935] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 395.775974][ T9760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.776050][ T5935] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 395.784977][ T9760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.814111][ T5935] usb 2-1: USB disconnect, device number 58 [ 395.825444][ T5935] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 395.838371][ T5935] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 395.854282][ T5935] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 395.867180][ T5935] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 395.981450][ T5935] keyspan 2-1:0.0: device disconnected [ 396.203434][ T9760] program syz.5.982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.223919][ T6020] uclogic 0003:5543:3031.0006: interface is invalid, ignoring [ 396.548695][ T5935] usb 6-1: USB disconnect, device number 5 [ 397.836792][ T9797] syzkaller1: entered promiscuous mode [ 397.842453][ T9797] syzkaller1: entered allmulticast mode [ 398.452307][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 398.475479][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 398.498593][ T43] usb 3-1: USB disconnect, device number 58 [ 398.667387][ T9801] gtp0: entered promiscuous mode [ 398.753096][ T9801] gtp0: entered allmulticast mode [ 399.243219][ T9810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.994'. [ 399.302815][ T43] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 399.704531][ T5952] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 399.902407][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.913098][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 399.944450][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.960034][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 399.989651][ T43] usb 3-1: SerialNumber: syz [ 400.072683][ T5952] usb 2-1: device descriptor read/64, error -71 [ 400.130850][ T43] cdc_ether 3-1:1.0: skipping garbage [ 400.183385][ T43] usb 3-1: bad CDC descriptors [ 400.321188][ T5952] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 400.451221][ T5952] usb 2-1: device descriptor read/64, error -71 [ 400.717510][ T5952] usb usb2-port1: attempt power cycle [ 401.211198][ T5952] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 401.211449][ T9828] loop2: detected capacity change from 0 to 7 [ 401.235449][ T5952] usb 2-1: device descriptor read/8, error -71 [ 401.267187][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 401.281268][ T6017] loop2: p1 [ 401.290046][ T6017] loop2: partition table partially beyond EOD, truncated [ 401.299164][ T9830] fuse: Bad value for 'fd' [ 401.347728][ T6017] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 401.368705][ T9828] loop2: p1 [ 401.368738][ T9828] loop2: partition table partially beyond EOD, truncated [ 401.368922][ T9828] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 401.491139][ T5952] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 401.499986][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 401.515275][ T5952] usb 2-1: device descriptor read/8, error -71 [ 401.574321][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 401.621423][ T5952] usb usb2-port1: unable to enumerate USB device [ 401.721138][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 401.905748][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 401.927363][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.949110][ T9] usb 6-1: Product: syz [ 401.955197][ T9] usb 6-1: Manufacturer: syz [ 401.961282][ T9] usb 6-1: SerialNumber: syz [ 401.973688][ T9] usb 6-1: config 0 descriptor?? [ 402.093865][ T5869] usb 3-1: USB disconnect, device number 59 [ 402.237314][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 402.318605][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 402.377500][ T9] usb 6-1: USB disconnect, device number 6 [ 402.763218][ T9857] netlink: 'syz.2.1006': attribute type 10 has an invalid length. [ 402.771996][ T9857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1006'. [ 402.809808][ T9857] team0: entered promiscuous mode [ 402.815954][ T9857] team0: entered allmulticast mode [ 402.840461][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.850587][ T9857] bridge0: port 1(team0) entered blocking state [ 402.858017][ T9857] bridge0: port 1(team0) entered disabled state [ 403.114420][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 403.634180][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 403.658235][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.750248][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 403.851245][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.975141][ T9] usb 6-1: config 0 descriptor?? [ 404.248944][ T9870] ipvlan2: entered promiscuous mode [ 404.384917][ T9] sony 0003:054C:024B.0007: bogus close delimiter [ 404.391884][ T9] sony 0003:054C:024B.0007: item 0 0 2 10 parsing failed [ 404.436368][ T9] sony 0003:054C:024B.0007: parse failed [ 404.473061][ T9] sony 0003:054C:024B.0007: probe with driver sony failed with error -22 [ 404.598406][ T9] usb 6-1: USB disconnect, device number 7 [ 405.494732][ T5869] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 405.772420][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.788462][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.809799][ T5869] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.827738][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.840495][ T5869] usb 1-1: Product: syz [ 405.848732][ T5869] usb 1-1: Manufacturer: syz [ 405.866199][ T5869] usb 1-1: SerialNumber: syz [ 406.134392][ T5869] usb 1-1: cannot find UAC_HEADER [ 406.360375][ T6020] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 406.482109][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1017'. [ 406.501263][ T6020] usb 3-1: device descriptor read/64, error -71 [ 406.684655][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 406.721487][ T5869] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 406.761274][ T6020] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 406.911491][ T6020] usb 3-1: device descriptor read/64, error -71 [ 407.046312][ T6020] usb usb3-port1: attempt power cycle [ 407.160921][ T5869] usb 1-1: USB disconnect, device number 41 [ 407.300077][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.323619][ T9912] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1021'. [ 407.442214][ T6020] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 407.490627][ T6020] usb 3-1: device descriptor read/8, error -71 [ 407.765406][ T6020] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 407.845767][ T6020] usb 3-1: device descriptor read/8, error -71 [ 407.870607][ T9918] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1022'. [ 407.961170][ T5935] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 408.038209][ T6020] usb usb3-port1: unable to enumerate USB device [ 408.203092][ T5935] usb 1-1: config 2 has an invalid interface number: 190 but max is 0 [ 408.221112][ T5935] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 408.322052][ T9920] ipvlan2: entered promiscuous mode [ 408.370474][ T5935] usb 1-1: config 2 has no interface number 0 [ 408.401174][ T5935] usb 1-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.477391][ T5935] usb 1-1: string descriptor 0 read error: -22 [ 408.485296][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 408.527110][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.273045][ T9935] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1027'. [ 409.321514][ T5935] (null): keene_cmd_main failed (-110) [ 409.394706][ T5935] video4linux radio48: keene_cmd_main failed (-32) [ 409.439053][ T5935] radio-keene 1-1:2.190: V4L2 device registered as radio48 [ 409.830337][ T9938] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 409.892808][ T9938] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 409.949504][ T9941] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 410.030816][ T9943] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1030'. [ 410.087846][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1030'. [ 410.125432][ T9928] random: crng reseeded on system resumption [ 410.164109][ T9943] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1030'. [ 410.216537][ T9943] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1030'. [ 410.491241][ T5935] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 410.636937][ T9955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1034'. [ 410.646169][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 410.664148][ T5935] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 410.673199][ T5935] usb 2-1: config 0 has no interface number 0 [ 410.705198][ T5935] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 410.727566][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.767581][ T5935] usb 2-1: Product: syz [ 410.788792][ T5935] usb 2-1: Manufacturer: syz [ 410.824354][ T5935] usb 2-1: SerialNumber: syz [ 410.843070][ T5935] usb 2-1: config 0 descriptor?? [ 410.856419][ T5935] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 411.057115][ T5935] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 411.075248][ T5935] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 411.266689][ T5935] usb 2-1: USB disconnect, device number 63 [ 411.618409][ T9962] sctp: [Deprecated]: syz.5.1036 (pid 9962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.618409][ T9962] Use struct sctp_sack_info instead [ 411.942937][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 412.141502][ T5869] usb 1-1: USB disconnect, device number 42 [ 412.211722][ T5935] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 412.403097][ T5935] usb 6-1: config 0 has an invalid interface number: 248 but max is 0 [ 412.415010][ T5935] usb 6-1: config 0 has no interface number 0 [ 412.447597][ T5935] usb 6-1: config 0 interface 248 has no altsetting 0 [ 412.476929][ T5935] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=10.98 [ 412.494128][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.527985][ T5935] usb 6-1: Product: syz [ 412.539061][ T5935] usb 6-1: Manufacturer: syz [ 412.564322][ T5935] usb 6-1: SerialNumber: syz [ 412.631148][ T5869] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 412.639991][ T5935] usb 6-1: config 0 descriptor?? [ 412.781799][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 412.791663][ T5869] usb 1-1: config 0 has an invalid interface number: 127 but max is 0 [ 412.827837][ T5869] usb 1-1: config 0 has no interface number 0 [ 412.879225][ T5869] usb 1-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=50.49 [ 412.899656][ T9967] netlink: 'syz.5.1038': attribute type 2 has an invalid length. [ 412.909860][ T9967] netlink: 'syz.5.1038': attribute type 8 has an invalid length. [ 412.927975][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.930258][ T9967] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1038'. [ 412.977769][ T5869] usb 1-1: Product: syz [ 413.013718][ T5869] usb 1-1: Manufacturer: syz [ 413.082564][ T5869] usb 1-1: SerialNumber: syz [ 413.190273][ T5869] usb 1-1: config 0 descriptor?? [ 413.450801][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.461729][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.482813][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 413.505858][ T5869] ums-sddr55 1-1:0.127: USB Mass Storage device detected [ 413.589835][ T5935] usb 6-1: USB disconnect, device number 8 [ 413.669410][ T9994] netlink: 'syz.1.1045': attribute type 27 has an invalid length. [ 413.743521][ T5869] usb 1-1: USB disconnect, device number 43 [ 414.061168][ T978] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 414.521139][ T5869] IPVS: starting estimator thread 0... [ 414.804563][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 414.819535][ T978] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 414.831529][T10007] IPVS: using max 35 ests per chain, 84000 per kthread [ 414.833876][T10010] ipvlan2: entered promiscuous mode [ 414.868659][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.881472][ T30] audit: type=1326 audit(1759165282.960:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.5.1051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee3558eec9 code=0x0 [ 414.891612][ T978] usb 2-1: config 0 descriptor?? [ 414.966334][ T978] gspca_main: sunplus-2.14.0 probing 041e:400b [ 416.181272][ T978] gspca_sunplus: reg_r err -110 [ 416.186223][ T978] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 417.051833][ T5935] usb 2-1: USB disconnect, device number 64 [ 417.108479][T10036] fuse: Bad value for 'fd' [ 418.155817][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'. [ 418.181129][ T5935] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 418.354958][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 418.470938][ T5935] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 418.480111][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.499009][ T5935] usb 6-1: Product: syz [ 418.599763][ T5935] usb 6-1: Manufacturer: syz [ 418.614644][ T5935] usb 6-1: SerialNumber: syz [ 418.648627][ T5935] usb 6-1: config 0 descriptor?? [ 418.749921][ T5935] gspca_main: se401-2.14.0 probing 047d:5003 [ 419.158455][ T5935] gspca_se401: Too many frame sizes [ 420.919285][T10085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1069'. [ 421.121221][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 421.136233][T10085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1069'. [ 421.301171][T10085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1069'. [ 421.511571][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'. [ 421.571528][T10095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1070'. [ 421.586997][ T9] usb 6-1: USB disconnect, device number 9 [ 422.121469][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 422.351191][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 422.362489][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1073'. [ 422.403661][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 422.443751][ T9] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.474205][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 422.525850][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 422.592285][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.629431][T10104] bridge1: port 1(veth0_to_bond) entered blocking state [ 422.639250][T10104] bridge1: port 1(veth0_to_bond) entered disabled state [ 422.651774][T10104] veth0_to_bond: entered allmulticast mode [ 422.675379][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 422.697245][T10104] veth0_to_bond: entered promiscuous mode [ 422.705788][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1074'. [ 422.735377][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.825267][ T9] usb 5-1: Product: syz [ 422.829471][ T9] usb 5-1: Manufacturer: syz [ 422.842800][T10107] vlan2: entered allmulticast mode [ 422.871248][T10107] veth0_to_hsr: entered allmulticast mode [ 422.894903][ T9] usb 5-1: SerialNumber: syz [ 422.919979][T10107] bridge1: port 2(vlan2) entered blocking state [ 422.950770][T10107] bridge1: port 2(vlan2) entered disabled state [ 423.022048][T10115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1076'. [ 423.935608][T10107] vlan2: entered promiscuous mode [ 423.940813][T10107] veth0_to_hsr: entered promiscuous mode [ 423.980714][ T9] usb 5-1: config 0 descriptor?? [ 424.319255][T10115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1076'. [ 424.390848][T10115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1076'. [ 424.549089][ T9] usb 5-1: Can not set alternate setting to 1, error: -71 [ 424.609662][ T9] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71 [ 424.610492][T10115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1076'. [ 424.721360][ T9] usb 5-1: USB disconnect, device number 51 [ 424.874044][T10126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.984800][T10126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.238161][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 425.256161][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'. [ 425.574924][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 425.663557][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.705798][ T9] usb 5-1: Product: syz [ 425.718076][ T9] usb 5-1: Manufacturer: syz [ 425.734344][ T9] usb 5-1: SerialNumber: syz [ 425.785528][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 425.821441][ T5869] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 425.831464][ T5952] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 426.011168][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 426.020833][ T5869] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 426.110937][ T5869] usb 2-1: config 0 has no interface number 0 [ 426.155490][ T5869] usb 2-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 426.171998][ T5869] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 426.191215][ T5869] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 426.205460][ T5869] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 426.247760][ T5869] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.293488][ T5869] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 426.351220][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.380690][ T5869] usb 2-1: config 0 descriptor?? [ 426.396545][ T5869] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.532014][ T1212] usb 5-1: USB disconnect, device number 52 [ 426.645378][T10136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.655614][T10136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.838293][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.911203][ T5952] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 426.918289][ T5952] ath9k_htc: Failed to initialize the device [ 426.986781][ T1212] usb 5-1: ath9k_htc: USB layer deinitialized [ 427.852175][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 427.906854][T10179] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1089'. [ 428.220044][ T5935] usb 2-1: USB disconnect, device number 65 [ 428.509348][ T6020] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 428.627670][T10188] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1093'. [ 428.950603][T10194] netlink: 'syz.1.1094': attribute type 27 has an invalid length. [ 429.140170][T10195] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 429.461217][ T5935] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 429.741230][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 429.749898][ T5935] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 429.759657][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.817343][ T5935] usb 2-1: config 0 descriptor?? [ 429.846446][ T5935] gspca_main: sunplus-2.14.0 probing 041e:400b [ 430.626511][T10200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1095'. [ 430.646868][T10200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1095'. [ 430.714400][T10200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1095'. [ 430.764402][T10200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1095'. [ 430.782358][ T5935] gspca_sunplus: reg_r err -110 [ 430.787407][ T5935] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 431.399400][T10207] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1097'. [ 432.031450][ T6010] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 432.244829][ T6010] usb 5-1: Using ep0 maxpacket: 16 [ 432.274352][ T6010] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 432.292682][T10224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1104'. [ 432.314868][ T5952] usb 2-1: USB disconnect, device number 66 [ 432.317442][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 432.351512][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1104'. [ 432.404419][ T6010] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 432.423222][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.437536][T10224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1104'. [ 432.457990][ T6010] usb 5-1: Product: syz [ 432.459262][T10229] loop2: detected capacity change from 0 to 7 [ 432.471513][T10224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1104'. [ 432.488419][T10229] loop2: p1 [ 432.495161][ T6010] usb 5-1: Manufacturer: syz [ 432.495312][T10229] loop2: partition table partially beyond EOD, truncated [ 432.513385][T10229] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 432.522470][ T6010] usb 5-1: SerialNumber: syz [ 432.599826][ T6010] usb 5-1: config 0 descriptor?? [ 432.628411][ T6010] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 432.651821][ T6010] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 432.721850][ T6020] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 432.769735][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 432.884028][ T6020] usb 3-1: unable to get BOS descriptor or descriptor too short [ 432.893013][ T6020] usb 3-1: not running at top speed; connect to a high speed hub [ 432.958595][T10234] FAULT_INJECTION: forcing a failure. [ 432.958595][T10234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.972101][T10234] CPU: 0 UID: 0 PID: 10234 Comm: syz.1.1107 Not tainted syzkaller #0 PREEMPT(full) [ 432.972125][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.972136][T10234] Call Trace: [ 432.972143][T10234] [ 432.972151][T10234] dump_stack_lvl+0x189/0x250 [ 432.972177][T10234] ? __pfx____ratelimit+0x10/0x10 [ 432.972196][T10234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.972216][T10234] ? __pfx__printk+0x10/0x10 [ 432.972240][T10234] ? __might_fault+0xb0/0x130 [ 432.972274][T10234] should_fail_ex+0x414/0x560 [ 432.972304][T10234] _copy_from_user+0x2d/0xb0 [ 432.972328][T10234] ucma_write+0x158/0x2e0 [ 432.972350][T10234] ? __pfx_ucma_write+0x10/0x10 [ 432.972368][T10234] ? security_file_permission+0x75/0x290 [ 432.972397][T10234] ? rw_verify_area+0x255/0x4d0 [ 432.972417][T10234] ? __lock_acquire+0xab9/0xd20 [ 432.972439][T10234] ? __pfx_ucma_write+0x10/0x10 [ 432.972462][T10234] vfs_write+0x27b/0xb30 [ 432.972496][T10234] ? __pfx_vfs_write+0x10/0x10 [ 432.972521][T10234] ? __fget_files+0x2a/0x420 [ 432.972540][T10234] ? __fget_files+0x2a/0x420 [ 432.972555][T10234] ? __fget_files+0x3a0/0x420 [ 432.972569][T10234] ? __fget_files+0x2a/0x420 [ 432.972593][T10234] ksys_write+0x145/0x250 [ 432.972618][T10234] ? __pfx_ksys_write+0x10/0x10 [ 432.972645][T10234] ? do_syscall_64+0xbe/0x3b0 [ 432.972669][T10234] do_syscall_64+0xfa/0x3b0 [ 432.972686][T10234] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.972704][T10234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.972721][T10234] ? clear_bhb_loop+0x60/0xb0 [ 432.972742][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.972759][T10234] RIP: 0033:0x7f23e138eec9 [ 432.972775][T10234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.972790][T10234] RSP: 002b:00007f23e222a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 432.972808][T10234] RAX: ffffffffffffffda RBX: 00007f23e15e6180 RCX: 00007f23e138eec9 [ 432.972821][T10234] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000006 [ 432.972832][T10234] RBP: 00007f23e222a090 R08: 0000000000000000 R09: 0000000000000000 [ 432.972842][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.972852][T10234] R13: 00007f23e15e6218 R14: 00007f23e15e6180 R15: 00007f23e170fa28 [ 432.972881][T10234] [ 433.051163][ T6010] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 433.383371][ T6020] usb 3-1: config 8 has an invalid interface number: 167 but max is 0 [ 433.422301][ T6020] usb 3-1: config 8 has no interface number 0 [ 433.434475][ T6020] usb 3-1: config 8 interface 167 altsetting 7 endpoint 0xD has an invalid bInterval 66, changing to 4 [ 433.491255][ T6020] usb 3-1: config 8 interface 167 altsetting 7 endpoint 0xD has invalid maxpacket 1096, setting to 1023 [ 433.536988][ T6020] usb 3-1: config 8 interface 167 has no altsetting 0 [ 433.567779][ T6020] usb 3-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice= 8.2d [ 433.598623][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.617738][ T6020] usb 3-1: Product: syz [ 433.630513][ T6010] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 433.637392][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.637412][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.654220][ T6020] usb 3-1: Manufacturer: syz [ 433.658828][ T6020] usb 3-1: SerialNumber: syz [ 433.701543][ T6010] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 433.718837][ T6010] em28xx 5-1:0.0: No AC97 audio processor [ 433.795214][ T6010] usb 5-1: USB disconnect, device number 53 [ 433.985342][ T6020] aiptek 3-1:8.167: interface has no int in endpoints, but must have minimum 1 [ 434.034156][ T6010] em28xx 5-1:0.0: Disconnecting em28xx [ 434.039997][ T6020] usb 3-1: USB disconnect, device number 65 [ 434.143414][ T6010] em28xx 5-1:0.0: Freeing device [ 434.422718][ T5935] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 434.588946][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 434.621286][ T5935] usb 1-1: config 0 has an invalid interface number: 136 but max is 0 [ 434.659908][ T5935] usb 1-1: config 0 has no interface number 0 [ 434.680413][ T5935] usb 1-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 434.721124][ T5935] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 434.744854][T10257] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1112'. [ 434.799058][ T5935] usb 1-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 434.906267][ T5935] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 435.142829][ T5935] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.211690][ T5935] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 435.273775][ T5952] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 435.284199][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.331172][ T6020] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 435.352913][ T5935] usb 1-1: config 0 descriptor?? [ 435.402718][ T5935] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.535267][ T6020] usb 2-1: config 2 has an invalid interface number: 190 but max is 0 [ 435.556003][ T5952] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.588479][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.601769][T10246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.614631][T10246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.622632][ T5952] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 435.641468][ T5952] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.673847][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.700385][T10276] __nla_validate_parse: 1 callbacks suppressed [ 435.700430][T10276] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1117'. [ 435.737404][ T6020] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 435.827651][T10268] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 435.850641][ T5952] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.031400][ T1212] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 436.053454][T10268] fuse: Unknown parameter 'nd' [ 436.195247][ T1212] usb 6-1: Using ep0 maxpacket: 32 [ 436.202824][ T1212] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 436.211198][ T1212] usb 6-1: config 0 has no interface number 0 [ 436.223707][ T6020] usb 2-1: config 2 has no interface number 0 [ 436.238495][ T6020] usb 2-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.294580][ T6020] usb 2-1: string descriptor 0 read error: -22 [ 436.310085][ T6010] usb 3-1: USB disconnect, device number 66 [ 436.361120][ T1212] usb 6-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 436.383502][ T6020] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 436.432975][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.642310][ T1212] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.683127][ T1212] usb 6-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 437.243590][ T6020] (null): keene_cmd_main failed (-110) [ 437.271721][ T6020] video4linux radio48: keene_cmd_main failed (-32) [ 437.278237][ T6020] radio-keene 2-1:2.190: V4L2 device registered as radio48 [ 437.304414][ T5935] usb 1-1: USB disconnect, device number 44 [ 437.340897][ T1212] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 437.930201][ T1212] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.987151][ T1212] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 438.040400][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.102133][ T1212] usb 6-1: config 0 descriptor?? [ 438.264255][ T1212] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.473278][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.521156][ T5935] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 438.545415][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.594440][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.781453][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 438.788061][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 438.831406][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.875694][ T5935] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 438.885564][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.902474][ T5935] usb 5-1: Product: syz [ 438.921184][ T5935] usb 5-1: Manufacturer: syz [ 438.940150][ T5935] usb 5-1: SerialNumber: syz [ 438.963930][ T5935] usb 5-1: config 0 descriptor?? [ 438.986974][ T5935] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 439.006508][ T5935] em28xx 5-1:0.0: Video interface 0 found: [ 439.191146][ T6010] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 439.222179][T10288] fuse: Bad value for 'fd' [ 439.251796][ T5935] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 439.384399][ T6010] usb 3-1: device descriptor read/64, error -71 [ 439.446533][ T5935] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 439.470234][ T5935] em28xx 5-1:0.0: board has no eeprom [ 439.498318][ T978] usb 2-1: USB disconnect, device number 67 [ 439.561293][ T5935] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 439.570133][ T5935] em28xx 5-1:0.0: Currently, V4L2 is not supported on this model [ 439.700243][ T978] em28xx 5-1:0.0: Binding DVB extension [ 439.707333][ T6010] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 439.717043][ T978] em28xx 5-1:0.0: no endpoint for DVB mode and transfer type 0 [ 439.732605][ T5935] usb 5-1: USB disconnect, device number 54 [ 439.740833][ T978] em28xx 5-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 439.754172][ T5935] em28xx 5-1:0.0: Disconnecting em28xx [ 439.765413][ T978] em28xx 5-1:0.0: Registering input extension [ 439.778124][ T5935] em28xx 5-1:0.0: Closing input extension [ 439.840464][ T978] usb 6-1: USB disconnect, device number 10 [ 439.846767][ T6010] usb 3-1: device descriptor read/64, error -71 [ 439.961708][ T6010] usb usb3-port1: attempt power cycle [ 440.042089][ T5935] em28xx 5-1:0.0: Freeing device [ 440.194652][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.203067][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.331555][ T6010] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 440.394997][ T6010] usb 3-1: device descriptor read/8, error -71 [ 440.448545][T10309] batadv_slave_0: entered promiscuous mode [ 440.651149][ T6010] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 440.676296][ T6010] usb 3-1: device descriptor read/8, error -71 [ 440.761139][ T978] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 440.812139][ T6010] usb usb3-port1: unable to enumerate USB device [ 440.922384][ T978] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 440.940998][ T978] usb 1-1: config 0 has no interface number 0 [ 440.964038][ T978] usb 1-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=eb.bb [ 440.973510][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.066705][ T978] usb 1-1: Product: syz [ 441.076809][ T978] usb 1-1: Manufacturer: syz [ 441.088194][ T978] usb 1-1: SerialNumber: syz [ 441.125675][ T978] usb 1-1: config 0 descriptor?? [ 441.348882][T10308] batadv_slave_0: left promiscuous mode [ 441.355116][ T978] usb 1-1: USB disconnect, device number 45 [ 442.072695][ T978] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 442.286173][ T978] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.330462][ T978] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 442.391294][ T978] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 442.403014][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.460914][T10336] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1133'. [ 442.520189][T10324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 442.530579][ T978] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.571145][ T1212] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 442.741960][T10324] fuse: Unknown parameter 'nd' [ 442.755850][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 442.783626][ T1212] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 442.863897][ T1212] usb 2-1: can't read configurations, error -61 [ 442.989959][ T978] usb 6-1: USB disconnect, device number 11 [ 443.088021][T10343] batadv4: entered allmulticast mode [ 443.153423][T10343] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 443.200184][T10343] bridge0: port 2(batadv4) entered blocking state [ 443.201152][ T5952] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 443.281885][ T1212] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 443.302699][T10343] bridge0: port 2(batadv4) entered disabled state [ 443.361389][T10343] batadv4: entered promiscuous mode [ 443.504204][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 443.537245][ T1212] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 443.545253][ T1212] usb 2-1: can't read configurations, error -61 [ 443.572564][ T1212] usb usb2-port1: attempt power cycle [ 443.640182][ T5952] usb 3-1: config 2 has an invalid interface number: 190 but max is 0 [ 443.648476][ T5952] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 443.676952][T10346] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 443.686261][T10346] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 443.711379][ T5952] usb 3-1: config 2 has no interface number 0 [ 443.767884][ T5952] usb 3-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.830212][ T5952] usb 3-1: string descriptor 0 read error: -22 [ 443.836961][ T5952] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 443.846703][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.940950][T10360] netlink: 'syz.4.1142': attribute type 27 has an invalid length. [ 444.012120][ T1212] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 444.074361][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 444.094806][T10360] gtp0: left promiscuous mode [ 444.099522][T10360] gtp0: left allmulticast mode [ 444.124567][ T1212] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 444.310744][ T1212] usb 2-1: can't read configurations, error -61 [ 444.338736][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 444.481245][ T6010] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 444.550041][ T1212] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 444.614286][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 444.620577][ T1212] usb 2-1: Using ep0 maxpacket: 32 [ 444.636224][ T1212] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 444.655005][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 444.670222][ T1212] usb 2-1: can't read configurations, error -61 [ 444.701677][ T1212] usb usb2-port1: unable to enumerate USB device [ 444.708539][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.710195][ T6010] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.771268][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 444.797204][ T10] usb 5-1: config 0 descriptor?? [ 444.811273][ T5952] (null): keene_cmd_main failed (-110) [ 444.820244][ T6010] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.836308][ T5952] video4linux radio48: keene_cmd_main failed (-32) [ 444.852171][ T5952] radio-keene 3-1:2.190: V4L2 device registered as radio48 [ 444.889736][ T6010] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 444.911257][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.933298][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 444.957484][ T6010] usb 1-1: Product: syz [ 444.975128][ T6010] usb 1-1: Manufacturer: syz [ 444.979871][ T6010] usb 1-1: SerialNumber: syz [ 445.233270][ T6010] usb 1-1: config 0 descriptor?? [ 445.244322][ T6010] usb 1-1: ucan: probing device on interface #0 [ 445.344055][ T6010] usb 1-1: ucan: invalid EP count (1) [ 445.349474][ T6010] usb 1-1: ucan: probe failed; try to update the device firmware [ 445.891860][ T10] gspca_sunplus: reg_r err -110 [ 445.897173][ T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 445.941730][ T10] usb 3-1: USB disconnect, device number 71 [ 445.951166][ T5952] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 446.062121][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 446.113215][ T5952] usb 6-1: config 0 has no interfaces? [ 446.120851][ T5952] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 446.130447][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.142962][ T5952] usb 6-1: Product: syz [ 446.149714][ T5952] usb 6-1: Manufacturer: syz [ 446.156272][ T5952] usb 6-1: SerialNumber: syz [ 446.163765][ T5952] usb 6-1: config 0 descriptor?? [ 446.428196][T10374] usb usb8: usbfs: process 10374 (syz.1.1144) did not claim interface 0 before use [ 446.470693][ T30] audit: type=1400 audit(1759165314.510:482): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10368 comm="syz.1.1144" [ 446.604839][T10372] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.788488][T10383] loop2: detected capacity change from 0 to 7 [ 446.826518][T10383] loop2: p1 [ 446.851187][T10383] loop2: partition table partially beyond EOD, truncated [ 446.886343][T10383] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 447.024242][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 447.059992][ T6010] usb 1-1: USB disconnect, device number 46 [ 447.165590][ T978] usb 5-1: USB disconnect, device number 55 [ 447.481487][ T5952] usb 6-1: USB disconnect, device number 12 [ 448.901172][ T6010] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 448.925809][T10419] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1156'. [ 449.002766][T10412] 8021q: adding VLAN 0 to HW filter on device bond9 [ 449.176807][ T6010] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 449.251215][ T978] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 449.373678][ T6010] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 449.505580][T10428] netlink: 'syz.1.1157': attribute type 27 has an invalid length. [ 449.792552][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 449.802107][ T6010] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.811379][ T1212] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 449.830503][ T978] usb 3-1: config 2 has an invalid interface number: 190 but max is 0 [ 449.864415][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.875122][ T978] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 449.875147][ T978] usb 3-1: config 2 has no interface number 0 [ 449.875182][ T978] usb 3-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.901474][ T978] usb 3-1: string descriptor 0 read error: -22 [ 449.901565][ T978] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 449.901578][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.973146][ T1212] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 449.973173][ T1212] usb 6-1: config 0 has no interface number 0 [ 449.973213][ T1212] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 449.973238][ T1212] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 449.973278][ T1212] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 449.973308][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.001174][ T5952] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 450.458241][ T978] (null): keene_cmd_main failed (-110) [ 450.470320][ T1212] usb 6-1: config 0 descriptor?? [ 450.484676][ T978] video4linux radio48: keene_cmd_main failed (-32) [ 450.496167][T10423] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 450.500200][ T978] radio-keene 3-1:2.190: V4L2 device registered as radio48 [ 450.966525][T10439] loop2: detected capacity change from 0 to 7 [ 451.001076][ T1212] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 451.035429][ T1212] usb 6-1: USB disconnect, device number 13 [ 451.102302][ T8056] loop2: p1 [ 451.174035][ T8056] loop2: partition table partially beyond EOD, truncated [ 451.200523][ T8056] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 451.258016][T10439] loop2: p1 [ 451.262330][T10439] loop2: partition table partially beyond EOD, truncated [ 451.331416][T10439] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 451.361136][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 451.416331][ T5952] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 451.480419][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.512330][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 451.601796][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 451.667898][ T5952] usb 2-1: config 0 descriptor?? [ 451.723258][ T5952] gspca_main: sunplus-2.14.0 probing 041e:400b [ 451.793842][ T43] IPVS: starting estimator thread 0... [ 451.891009][T10448] IPVS: using max 51 ests per chain, 122400 per kthread [ 451.911504][ T1212] usb 5-1: USB disconnect, device number 56 [ 452.554751][ T43] usb 3-1: USB disconnect, device number 72 [ 452.691375][ T5952] gspca_sunplus: reg_r err -110 [ 452.697097][ T5952] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 453.472653][ T5952] usb 2-1: USB disconnect, device number 72 [ 453.911089][ T30] audit: type=1326 audit(1759165322.000:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.2.1167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d8938eec9 code=0x0 [ 454.114698][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 456.802185][T10527] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1176'. [ 457.071415][ T978] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 457.321436][ T978] usb 6-1: config 2 has an invalid interface number: 190 but max is 0 [ 457.329820][ T978] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 457.350627][ T978] usb 6-1: config 2 has no interface number 0 [ 457.421274][ T978] usb 6-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.510225][ T978] usb 6-1: string descriptor 0 read error: -22 [ 457.517464][ T978] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 457.527088][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.131331][ T978] (null): keene_cmd_main failed (-110) [ 458.168023][ T978] video4linux radio48: keene_cmd_main failed (-32) [ 458.182240][ T978] radio-keene 6-1:2.190: V4L2 device registered as radio48 [ 459.481142][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 459.531296][ T43] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 459.997790][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.093524][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 460.191483][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.223173][ T43] usb 5-1: Product: syz [ 460.233599][ T43] usb 5-1: Manufacturer: syz [ 460.284983][ T43] usb 5-1: SerialNumber: syz [ 460.693825][T10573] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1187'. [ 461.159740][ T978] usb 6-1: USB disconnect, device number 14 [ 461.233705][T10580] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 461.589277][T10584] gretap1: entered promiscuous mode [ 461.613021][T10584] bond6: (slave gretap1): making interface the new active one [ 461.626128][T10584] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 461.664666][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'. [ 462.041340][T10574] netlink: 'syz.2.1189': attribute type 10 has an invalid length. [ 462.125150][T10574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.306001][T10574] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 462.434867][T10574] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 462.451274][ T1043] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 462.571435][ T4210] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 462.637312][ T43] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 462.674238][ T43] cdc_ncm 5-1:1.0: bind() failure [ 462.681799][ T4210] bond1: (slave macvlan3): link status up again after 0 ms [ 462.705259][ T4210] bond1: (slave macvlan3): failed to get link speed/duplex [ 462.721397][ T43] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 462.748507][ T43] cdc_ncm 5-1:1.1: bind() failure [ 462.841175][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 462.943226][ T43] usb 5-1: USB disconnect, device number 57 [ 463.001361][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 463.232162][ T4210] bond1: (slave macvlan3): failed to get link speed/duplex [ 463.353065][ T4210] bond1: (slave macvlan3): failed to get link speed/duplex [ 463.632300][ T4210] bond1: (slave macvlan3): failed to get link speed/duplex [ 463.851197][ T4210] bond1: (slave macvlan3): failed to get link speed/duplex [ 464.936671][T10636] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1203'. [ 465.311497][ T5869] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 465.493796][ T5869] usb 6-1: config 2 has an invalid interface number: 190 but max is 0 [ 465.519291][ T5869] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 465.557147][ T5869] usb 6-1: config 2 has no interface number 0 [ 465.570945][ T5869] usb 6-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.600151][ T5869] usb 6-1: string descriptor 0 read error: -22 [ 465.616613][ T5869] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 465.627638][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.336065][ T5869] (null): keene_cmd_main failed (-110) [ 466.416829][ T5869] video4linux radio48: keene_cmd_main failed (-32) [ 466.462233][ T5869] radio-keene 6-1:2.190: V4L2 device registered as radio48 [ 467.226562][ T6010] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 467.411295][ T6010] usb 1-1: Using ep0 maxpacket: 8 [ 467.417915][ T6010] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 467.428186][ T6010] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 467.458522][ T6010] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 467.481301][ T1043] net_ratelimit: 22 callbacks suppressed [ 467.481317][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 467.512957][ T6010] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 467.522182][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.547846][ T6010] usb 1-1: Product: syz [ 467.569133][ T6010] usb 1-1: Manufacturer: syz [ 467.580460][ T6010] usb 1-1: SerialNumber: syz [ 467.611715][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 467.671641][ T43] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 467.686333][ T6010] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 467.721190][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 467.831192][ T4210] bond1: (slave macvlan3): failed to get link speed/duplex [ 467.856819][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.893402][ T6010] usb 1-1: USB disconnect, device number 47 [ 467.931182][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 467.961173][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 467.970545][ T43] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 468.011147][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.081366][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 468.110364][ T43] usb 5-1: config 0 descriptor?? [ 468.139465][ T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 468.183869][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 468.191231][T10346] bond1: (slave macvlan3): failed to get link speed/duplex [ 468.216318][ T43] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 468.230889][ T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 468.248517][ T43] usb 5-1: media controller created [ 468.268463][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.280494][ T6010] usb 6-1: USB disconnect, device number 15 [ 468.301513][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 468.346301][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 468.395865][ T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 468.454741][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 468.477763][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 468.632160][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 468.731905][T10680] FAULT_INJECTION: forcing a failure. [ 468.731905][T10680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.761729][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 468.781171][ T5935] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 468.793971][T10680] CPU: 0 UID: 0 PID: 10680 Comm: syz.5.1216 Not tainted syzkaller #0 PREEMPT(full) [ 468.793986][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.793992][T10680] Call Trace: [ 468.793997][T10680] [ 468.794001][T10680] dump_stack_lvl+0x189/0x250 [ 468.794018][T10680] ? __pfx____ratelimit+0x10/0x10 [ 468.794029][T10680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.794040][T10680] ? __pfx__printk+0x10/0x10 [ 468.794053][T10680] ? __might_fault+0xb0/0x130 [ 468.794073][T10680] should_fail_ex+0x414/0x560 [ 468.794091][T10680] _copy_from_user+0x2d/0xb0 [ 468.794104][T10680] video_usercopy+0x354/0x14f0 [ 468.794122][T10680] ? __pfx___video_do_ioctl+0x10/0x10 [ 468.794133][T10680] ? __pfx_video_usercopy+0x10/0x10 [ 468.794149][T10680] ? __fget_files+0x2a/0x420 [ 468.794159][T10680] ? __fget_files+0x2a/0x420 [ 468.794167][T10680] ? __fget_files+0x3a0/0x420 [ 468.794177][T10680] v4l2_ioctl+0x18d/0x1e0 [ 468.794188][T10680] ? __pfx_v4l2_ioctl+0x10/0x10 [ 468.794199][T10680] __se_sys_ioctl+0xfc/0x170 [ 468.794212][T10680] do_syscall_64+0xfa/0x3b0 [ 468.794223][T10680] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.794233][T10680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.794242][T10680] ? clear_bhb_loop+0x60/0xb0 [ 468.794253][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.794263][T10680] RIP: 0033:0x7fee3558eec9 [ 468.794272][T10680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.794281][T10680] RSP: 002b:00007fee364d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.794292][T10680] RAX: ffffffffffffffda RBX: 00007fee357e5fa0 RCX: 00007fee3558eec9 [ 468.794299][T10680] RDX: 0000200000000440 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 468.794305][T10680] RBP: 00007fee364d1090 R08: 0000000000000000 R09: 0000000000000000 [ 468.794311][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.794316][T10680] R13: 00007fee357e6038 R14: 00007fee357e5fa0 R15: 00007fee3590fa28 [ 468.794331][T10680] [ 469.003864][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.024080][ T43] dvb-usb: schedule remote query interval to 150 msecs. [ 469.031166][ T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 469.231155][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 469.233188][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 469.244121][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 469.272276][ T5935] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 469.395934][ T43] dvb-usb: error while querying for an remote control event. [ 469.435443][ T5935] usb 3-1: config 0 has no interface number 0 [ 469.466164][ T5935] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 469.525457][ T5935] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 469.603456][ T5935] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 469.631229][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 469.638187][ T978] dvb-usb: error while querying for an remote control event. [ 469.681945][ T5935] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 469.711119][ T5935] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.730658][ T5935] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 469.753655][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.841445][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 469.850569][ T978] dvb-usb: error while querying for an remote control event. [ 469.914555][T10695] netlink: 'syz.0.1219': attribute type 75 has an invalid length. [ 470.005829][ T5935] usb 3-1: config 0 descriptor?? [ 470.063933][ T5935] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.091528][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 470.097455][ T978] dvb-usb: error while querying for an remote control event. [ 470.192462][ T7564] udevd[7564]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.282845][T10675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.296486][T10675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.323187][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 470.356220][ T5935] dvb-usb: error while querying for an remote control event. [ 470.561123][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 470.566885][ T5935] dvb-usb: error while querying for an remote control event. [ 470.801532][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 470.807482][ T5935] dvb-usb: error while querying for an remote control event. [ 471.021184][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 471.075243][ T5935] dvb-usb: error while querying for an remote control event. [ 471.302036][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 471.316677][ T5935] dvb-usb: error while querying for an remote control event. [ 471.491195][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 471.558847][ T5935] dvb-usb: error while querying for an remote control event. [ 471.657705][ T1212] usb 5-1: USB disconnect, device number 58 [ 471.802411][ T1212] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 471.929288][ T5952] usb 3-1: USB disconnect, device number 73 [ 472.061435][T10719] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1226'. [ 472.111163][ T5869] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 472.225126][ T1212] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 472.262665][ T5869] usb 6-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config [ 472.273658][ T5869] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.358146][T10723] FAULT_INJECTION: forcing a failure. [ 472.358146][T10723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.381664][ T5869] usb 6-1: New USB device found, idVendor=067f, idProduct=ffff, bcdDevice= 0.00 [ 472.399196][ T1212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.471287][ T5952] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 472.491175][T10723] CPU: 1 UID: 0 PID: 10723 Comm: syz.1.1228 Not tainted syzkaller #0 PREEMPT(full) [ 472.491198][T10723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 472.491208][T10723] Call Trace: [ 472.491216][T10723] [ 472.491223][T10723] dump_stack_lvl+0x189/0x250 [ 472.491250][T10723] ? __pfx____ratelimit+0x10/0x10 [ 472.491267][T10723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.491286][T10723] ? __pfx__printk+0x10/0x10 [ 472.491322][T10723] should_fail_ex+0x414/0x560 [ 472.491353][T10723] _copy_to_user+0x31/0xb0 [ 472.491381][T10723] simple_read_from_buffer+0xe1/0x170 [ 472.491411][T10723] proc_fail_nth_read+0x1b3/0x220 [ 472.491433][T10723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.491461][T10723] ? rw_verify_area+0x2a6/0x4d0 [ 472.491482][T10723] ? __lock_acquire+0xab9/0xd20 [ 472.491503][T10723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.491521][T10723] vfs_read+0x200/0xa30 [ 472.491540][T10723] ? fdget_pos+0x247/0x320 [ 472.491558][T10723] ? __pfx___mutex_lock+0x10/0x10 [ 472.491577][T10723] ? __pfx_vfs_read+0x10/0x10 [ 472.491600][T10723] ? __fget_files+0x2a/0x420 [ 472.491621][T10723] ? __fget_files+0x3a0/0x420 [ 472.491636][T10723] ? __fget_files+0x2a/0x420 [ 472.491661][T10723] ksys_read+0x145/0x250 [ 472.491681][T10723] ? __fget_files+0x3a0/0x420 [ 472.491696][T10723] ? __pfx_ksys_read+0x10/0x10 [ 472.491723][T10723] ? do_syscall_64+0xbe/0x3b0 [ 472.491745][T10723] do_syscall_64+0xfa/0x3b0 [ 472.491763][T10723] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.491781][T10723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.491798][T10723] ? clear_bhb_loop+0x60/0xb0 [ 472.491820][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.491837][T10723] RIP: 0033:0x7f23e138d8dc [ 472.491854][T10723] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.491868][T10723] RSP: 002b:00007f23e226c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.491887][T10723] RAX: ffffffffffffffda RBX: 00007f23e15e5fa0 RCX: 00007f23e138d8dc [ 472.491900][T10723] RDX: 000000000000000f RSI: 00007f23e226c0a0 RDI: 0000000000000004 [ 472.491912][T10723] RBP: 00007f23e226c090 R08: 0000000000000000 R09: 0000000000000000 [ 472.491922][T10723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.491932][T10723] R13: 00007f23e15e6038 R14: 00007f23e15e5fa0 R15: 00007f23e170fa28 [ 472.491964][T10723] [ 472.740639][ T36] net_ratelimit: 26 callbacks suppressed [ 472.740705][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 472.762289][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.770485][ T1212] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 472.945916][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.982334][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 472.990463][ T5869] usb 6-1: config 0 descriptor?? [ 473.008379][ T1212] usb 5-1: Product: syz [ 473.041309][ T1212] usb 5-1: Manufacturer: syz [ 473.069217][ T5952] usb 1-1: config 2 has an invalid interface number: 190 but max is 0 [ 473.081209][ T1212] usb 5-1: SerialNumber: syz [ 473.086238][ T5952] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 473.125622][ T5952] usb 1-1: config 2 has no interface number 0 [ 473.132521][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 473.149366][ T5952] usb 1-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.281714][ T1043] bond1: (slave macvlan3): failed to get link speed/duplex [ 473.324484][ T5952] usb 1-1: string descriptor 0 read error: -22 [ 473.340349][ T5952] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 473.405243][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.441520][ T4210] bond1: (slave macvlan3): failed to get link speed/duplex [ 473.561498][ T4210] bond1: (slave macvlan3): failed to get link speed/duplex [ 473.616988][ T978] usb 6-1: USB disconnect, device number 16 [ 473.642024][ T5935] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 473.681547][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 473.791439][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 473.832646][ T5935] usb 3-1: config 9 has an invalid interface number: 1 but max is 0 [ 473.837272][T10743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.912201][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 473.920153][ T5935] usb 3-1: config 9 has no interface number 0 [ 473.923303][T10744] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 473.952588][ T5935] usb 3-1: config 9 interface 1 has no altsetting 0 [ 474.016804][ T5935] usb 3-1: string descriptor 0 read error: -22 [ 474.041219][ T36] bond1: (slave macvlan3): failed to get link speed/duplex [ 474.150751][ T5935] usb 3-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 474.155024][T10747] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1233'. [ 474.170376][ T5952] (null): keene_cmd_main failed (-110) [ 474.192733][ T5952] video4linux radio48: keene_cmd_main failed (-32) [ 474.228811][ T5952] radio-keene 1-1:2.190: V4L2 device registered as radio48 [ 474.252923][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.383753][ T5935] cx231xx 3-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 474.418124][ T5935] cx231xx 3-1:9.1: Not found matching IAD interface [ 474.747793][T10347] syzkaller0: tun_net_xmit 76 [ 474.874589][ T10] syzkaller0: tun_net_xmit 76 [ 474.883018][T10347] syzkaller0: tun_net_xmit 48 [ 474.911501][T10753] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 475.519518][T10759] netlink: 'syz.4.1225': attribute type 11 has an invalid length. [ 475.527467][T10759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1225'. [ 476.427835][ T5935] usb 1-1: USB disconnect, device number 48 [ 478.181915][ T5935] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 478.461574][ T5935] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.469689][ T5935] usb 1-1: config 0 has no interface number 0 [ 478.475970][ T5935] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 478.485551][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.532701][ T5935] usb 1-1: config 0 descriptor?? [ 478.591534][ T1212] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 478.597574][ T1212] cdc_ncm 5-1:1.0: bind() failure [ 478.605559][ T5935] usb 1-1: selecting invalid altsetting 1 [ 478.623399][ T5935] dvb_ttusb_budget: ttusb_init_controller: error [ 478.629748][ T5935] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 478.657991][ T1212] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 478.693938][ T1212] cdc_ncm 5-1:1.1: bind() failure [ 478.740509][T10779] ------------[ cut here ]------------ [ 478.746522][T10779] usb 4-1: BOGUS control dir, pipe 80002e80 doesn't match bRequestType c0 [ 478.755985][T10779] WARNING: CPU: 1 PID: 10779 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 478.765814][T10779] Modules linked in: [ 478.769841][T10779] CPU: 1 UID: 0 PID: 10779 Comm: syz.0.1240 Not tainted syzkaller #0 PREEMPT(full) [ 478.779246][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.789305][T10779] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 478.794967][T10779] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 20 07 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 96 e7 56 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 478.814609][T10779] RSP: 0018:ffffc9001c4cf850 EFLAGS: 00010246 [ 478.820793][T10779] RAX: 9975753bc1f0be00 RBX: ffff888032862c00 RCX: 0000000000080000 [ 478.829015][T10779] RDX: ffffc9000e30e000 RSI: 0000000000005510 RDI: 0000000000005511 [ 478.837429][T10779] RBP: 1ffff1100ea428b8 R08: 0000000000000003 R09: 0000000000000004 [ 478.845770][T10779] R10: dffffc0000000000 R11: fffffbfff1bfa234 R12: dffffc0000000000 [ 478.853985][T10779] R13: ffff8880752145c0 R14: 0000000080002e80 R15: ffff8880330338a0 [ 478.862020][T10779] FS: 00007f04ded466c0(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 478.870931][T10779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.877528][T10779] CR2: 000000110c424a8b CR3: 00000000752aa000 CR4: 00000000003526f0 [ 478.885524][T10779] Call Trace: [ 478.888796][T10779] [ 478.891739][T10779] usb_start_wait_urb+0x114/0x4c0 [ 478.896754][T10779] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 478.902331][T10779] usb_control_msg+0x232/0x3e0 [ 478.907083][T10779] dib0700_i2c_xfer+0xba7/0xf70 [ 478.911957][T10779] __i2c_transfer+0x871/0x2170 [ 478.916702][T10779] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.922062][T10779] ? __pfx___i2c_transfer+0x10/0x10 [ 478.927246][T10779] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 478.932760][T10779] ? i2c_transfer+0x120/0x3a0 [ 478.937422][T10779] i2c_transfer+0x25b/0x3a0 [ 478.941951][T10779] ? __pfx_i2c_transfer+0x10/0x10 [ 478.946979][T10779] ? _copy_from_user+0x94/0xb0 [ 478.951752][T10779] i2cdev_ioctl_rdwr+0x460/0x740 [ 478.956677][T10779] i2cdev_ioctl+0x64b/0x7f0 [ 478.961194][T10779] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 478.966201][T10779] ? __fget_files+0x3a0/0x420 [ 478.970854][T10779] ? __fget_files+0x2a/0x420 [ 478.975459][T10779] ? bpf_lsm_file_ioctl+0x9/0x20 [ 478.980380][T10779] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 478.985497][T10779] __se_sys_ioctl+0xfc/0x170 [ 478.990096][T10779] do_syscall_64+0xfa/0x3b0 [ 478.994651][T10779] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.999831][T10779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.005913][T10779] ? clear_bhb_loop+0x60/0xb0 [ 479.010573][T10779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.016488][T10779] RIP: 0033:0x7f04ddf8eec9 [ 479.020885][T10779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.040673][T10779] RSP: 002b:00007f04ded46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.049227][T10779] RAX: ffffffffffffffda RBX: 00007f04de1e6180 RCX: 00007f04ddf8eec9 [ 479.057228][T10779] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000007 [ 479.065205][T10779] RBP: 00007f04de011f91 R08: 0000000000000000 R09: 0000000000000000 [ 479.073197][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.081181][T10779] R13: 00007f04de1e6218 R14: 00007f04de1e6180 R15: 00007f04de30fa28 [ 479.089156][T10779] [ 479.092204][T10779] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 479.099466][T10779] CPU: 1 UID: 0 PID: 10779 Comm: syz.0.1240 Not tainted syzkaller #0 PREEMPT(full) [ 479.108807][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.118840][T10779] Call Trace: [ 479.122099][T10779] [ 479.125010][T10779] dump_stack_lvl+0x99/0x250 [ 479.129586][T10779] ? __asan_memcpy+0x40/0x70 [ 479.134153][T10779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.139334][T10779] ? __pfx__printk+0x10/0x10 [ 479.143909][T10779] vpanic+0x281/0x750 [ 479.147870][T10779] ? __pfx__printk+0x10/0x10 [ 479.152441][T10779] ? __pfx_vpanic+0x10/0x10 [ 479.156922][T10779] ? is_bpf_text_address+0x292/0x2b0 [ 479.162202][T10779] panic+0xb9/0xc0 [ 479.165902][T10779] ? __pfx_panic+0x10/0x10 [ 479.170302][T10779] __warn+0x31b/0x4b0 [ 479.174257][T10779] ? usb_submit_urb+0x112b/0x1830 [ 479.179263][T10779] ? usb_submit_urb+0x112b/0x1830 [ 479.184263][T10779] report_bug+0x2be/0x4f0 [ 479.188574][T10779] ? usb_submit_urb+0x112b/0x1830 [ 479.193579][T10779] ? usb_submit_urb+0x112b/0x1830 [ 479.198587][T10779] ? usb_submit_urb+0x112d/0x1830 [ 479.203589][T10779] handle_bug+0x84/0x160 [ 479.207813][T10779] exc_invalid_op+0x1a/0x50 [ 479.212296][T10779] asm_exc_invalid_op+0x1a/0x20 [ 479.217122][T10779] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 479.222735][T10779] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 20 07 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 96 e7 56 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 479.242321][T10779] RSP: 0018:ffffc9001c4cf850 EFLAGS: 00010246 [ 479.248370][T10779] RAX: 9975753bc1f0be00 RBX: ffff888032862c00 RCX: 0000000000080000 [ 479.256324][T10779] RDX: ffffc9000e30e000 RSI: 0000000000005510 RDI: 0000000000005511 [ 479.264276][T10779] RBP: 1ffff1100ea428b8 R08: 0000000000000003 R09: 0000000000000004 [ 479.272225][T10779] R10: dffffc0000000000 R11: fffffbfff1bfa234 R12: dffffc0000000000 [ 479.280175][T10779] R13: ffff8880752145c0 R14: 0000000080002e80 R15: ffff8880330338a0 [ 479.288144][T10779] usb_start_wait_urb+0x114/0x4c0 [ 479.293156][T10779] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 479.298692][T10779] usb_control_msg+0x232/0x3e0 [ 479.303464][T10779] dib0700_i2c_xfer+0xba7/0xf70 [ 479.308309][T10779] __i2c_transfer+0x871/0x2170 [ 479.313056][T10779] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.318238][T10779] ? __pfx___i2c_transfer+0x10/0x10 [ 479.323415][T10779] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 479.328766][T10779] ? i2c_transfer+0x120/0x3a0 [ 479.333423][T10779] i2c_transfer+0x25b/0x3a0 [ 479.337909][T10779] ? __pfx_i2c_transfer+0x10/0x10 [ 479.342916][T10779] ? _copy_from_user+0x94/0xb0 [ 479.347664][T10779] i2cdev_ioctl_rdwr+0x460/0x740 [ 479.352586][T10779] i2cdev_ioctl+0x64b/0x7f0 [ 479.357071][T10779] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 479.362076][T10779] ? __fget_files+0x3a0/0x420 [ 479.366729][T10779] ? __fget_files+0x2a/0x420 [ 479.371295][T10779] ? bpf_lsm_file_ioctl+0x9/0x20 [ 479.376213][T10779] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 479.381211][T10779] __se_sys_ioctl+0xfc/0x170 [ 479.385781][T10779] do_syscall_64+0xfa/0x3b0 [ 479.390264][T10779] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.395441][T10779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.401487][T10779] ? clear_bhb_loop+0x60/0xb0 [ 479.406149][T10779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.412023][T10779] RIP: 0033:0x7f04ddf8eec9 [ 479.416424][T10779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.436006][T10779] RSP: 002b:00007f04ded46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.444403][T10779] RAX: ffffffffffffffda RBX: 00007f04de1e6180 RCX: 00007f04ddf8eec9 [ 479.452362][T10779] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000007 [ 479.460317][T10779] RBP: 00007f04de011f91 R08: 0000000000000000 R09: 0000000000000000 [ 479.468276][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.476244][T10779] R13: 00007f04de1e6218 R14: 00007f04de1e6180 R15: 00007f04de30fa28 [ 479.484220][T10779] [ 479.487488][T10779] Kernel Offset: disabled [ 479.491795][T10779] Rebooting in 86400 seconds..