last executing test programs: 2m18.113535238s ago: executing program 0 (id=279): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008001e"], 0x44}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001c0001"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143b03, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) syz_usb_control_io(r4, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000b80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setattr(r6, &(0x7f0000000000)={0x38, 0x6, 0x20, 0x7f, 0x2, 0x7, 0x65, 0x7ff, 0x1, 0x4}, 0x0) 2m13.115019319s ago: executing program 0 (id=291): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_io_uring_setup(0x65e4, &(0x7f00000000c0)={0x0, 0xce20, 0x2, 0x0, 0x1e5}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x6f4d, 0xb29d, 0x43, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 2m12.145398481s ago: executing program 0 (id=294): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0094000000000000140012800400010076657468000000040400028808000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m11.673371133s ago: executing program 0 (id=295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800003000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1010040, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0) 2m10.63934961s ago: executing program 0 (id=298): unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0x4358, &(0x7f0000000640)={0x0, 0x79a6, 0x2000, 0x1, 0x25f}, 0x0, 0x0) (async) syz_io_uring_setup(0x4358, &(0x7f0000000640)={0x0, 0x79a6, 0x2000, 0x1, 0x25f}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000003400)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000082, 0xfffffff7, 0x0, 0xb49, 0x9, 0x200a, 0xfffffffe, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') read$FUSE(r5, 0x0, 0x0) (async) read$FUSE(r5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf25000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf25000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="09000000d7fc5c9ad6", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf250a00000008000200060000000800040001040000080004008433567908000400cc000000050005000800000008000300010000000800020002000000340001800500020005000000050002002000000008000300ac1e000108000300ac1e010105000200010000000800060006000000"], 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="09000000d7fc5c9ad6", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf250a00000008000200060000000800040001040000080004008433567908000400cc000000050005000800000008000300010000000800020002000000340001800500020005000000050002002000000008000300ac1e000108000300ac1e010105000200010000000800060006000000"], 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000164000/0x4000)=nil) (async) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000164000/0x4000)=nil) futimesat(r5, &(0x7f0000002400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x2710}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000002380)={0x0, 0x4, 0x2, 0x1, 0x1f9}, 0x0, 0x0) 2m9.827100006s ago: executing program 0 (id=301): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a", 0x27}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x50, 0xf) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r5, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4044000}, 0x40080) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtaction={0x104, 0x30, 0x800, 0x70bd2b, 0xbc, {}, [{0xf0, 0x1, [@m_ipt={0xec, 0x2, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x65, 0x6, {0x3, 'nat\x00', 0xd, 0x4, "6913ace14a6ed89a10126bdccf8bb0e47081056269c6b4936fa4dd86021e400713aaa74a4ed7ed21409e3670e5c1e0b6978f1ea244af83d36c88ea"}}]}, {0x2d, 0x6, "d4404c4a8824b84368d09ccdb5597b825dbbd7aef99c354d3ef3d520abe9d4cb7dce90320fdae5b234"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x104}}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6000, 0x200, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0xc0800, &(0x7f00000005c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions}], [{@fowner_eq={'fowner', 0x3d, r11}}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000680)="d3e7103cfac4de43e2eb4bff2d035af5e421c447fd8456e237ef6413054830ec5e26996529e0fee20f2e7e33f365c209674e3c5dcae9d8513e824e8d2535443277be4bf326b2f34629a96f88dafe0d74e4b90acc15797f4fb3a756e6dbb6e3a9e2a783f4f2") r12 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007b, 0x0) pread64(r12, &(0x7f0000001600)=""/4081, 0x7, 0x12) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x3, &(0x7f0000000080)={0x1b, "d09bf4f30d7969a0420805782a879867f27c442e2f000cdec22f1ce8a9f7b91865"}}) 1m54.330356977s ago: executing program 32 (id=301): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a", 0x27}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0x50, 0xf) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r5, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4044000}, 0x40080) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtaction={0x104, 0x30, 0x800, 0x70bd2b, 0xbc, {}, [{0xf0, 0x1, [@m_ipt={0xec, 0x2, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x65, 0x6, {0x3, 'nat\x00', 0xd, 0x4, "6913ace14a6ed89a10126bdccf8bb0e47081056269c6b4936fa4dd86021e400713aaa74a4ed7ed21409e3670e5c1e0b6978f1ea244af83d36c88ea"}}]}, {0x2d, 0x6, "d4404c4a8824b84368d09ccdb5597b825dbbd7aef99c354d3ef3d520abe9d4cb7dce90320fdae5b234"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x104}}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6000, 0x200, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0xc0800, &(0x7f00000005c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions}], [{@fowner_eq={'fowner', 0x3d, r11}}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000680)="d3e7103cfac4de43e2eb4bff2d035af5e421c447fd8456e237ef6413054830ec5e26996529e0fee20f2e7e33f365c209674e3c5dcae9d8513e824e8d2535443277be4bf326b2f34629a96f88dafe0d74e4b90acc15797f4fb3a756e6dbb6e3a9e2a783f4f2") r12 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007b, 0x0) pread64(r12, &(0x7f0000001600)=""/4081, 0x7, 0x12) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x3, &(0x7f0000000080)={0x1b, "d09bf4f30d7969a0420805782a879867f27c442e2f000cdec22f1ce8a9f7b91865"}}) 1m17.947495229s ago: executing program 4 (id=474): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x208, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x200000000000008d, &(0x7f0000000480)}) r6 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) r7 = syz_io_uring_setup(0x234, &(0x7f0000000100)={0x0, 0xe5, 0x10100, 0x0, 0x376}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r7, 0x207a98, 0x0, 0x0, 0x0, 0x0) 1m6.670993237s ago: executing program 4 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x18000000, 0x90}, 0x4000c00) 1m5.532710284s ago: executing program 2 (id=486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000002c0)=0x6d, 0x4) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000300)={r7, 0xb}, 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x1, 0x10}, {0x7}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40004) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) 1m4.572512915s ago: executing program 4 (id=487): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff000002", 0x11, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000400)={0x4, "2c4ea28f86be46d28721509a7ae4941f50a928cb849eebf1bbf7e2171420b05474b14c0ffca58448cf66cbd891e6d3505c774a9625f428e1d7c91eb0827e1c4f", {0x0, 0x7e}}) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m3.439597312s ago: executing program 4 (id=488): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000054) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905", @ANYBLOB="29f6"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000002000010029bd7000000000000a0020640000000700000000050016004f00000014000200fc000000000000000000000000000001754d6cbf560bb7c608d3182b677c6666be7d7c66bbf73f5a11237b728b199b66886281287963939a73c746e9de7dad6ba7648a2fd1075e41f46248d6b182b7a7f9dbd9335eaa05e20a1635f1e94aee6c4f176244999fb63ef5dc6c7ca6756aa5d9097b0d0df7a0054d153f497ad47e099cc4de6da2e099fe8ada3dd1b5cf136ed308ab94646b17fc8622e35eb9900c10edc24a8dc9bf3c74b12bd69b5f1f830e8573cdb466c28bbe7894b86fa911879f62bc13f59a38c46157b6325da754bc9c77ae69fb72ebd56512a0cdb68efa6153abbbae27ecc369481f2c19198890f2c956213e1ae8ab4e45d0d077db373c291ab86902620fa3"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x88a8, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000811}, 0x80) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xc) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000580)={0x0, 0x2, 0x0, [0x7, 0x7fffffffffffffff, 0xd445, 0x8, 0x920], [0x5, 0x1, 0x7f, 0x9, 0x4, 0x8, 0x2, 0x0, 0x1, 0x4c5, 0xffffffff, 0x4, 0x3, 0x7fffffffffffffff, 0x5, 0x3, 0x6, 0x2, 0x7, 0xeecb, 0x9, 0xfffffffffffffff8, 0x8fad, 0x5, 0x7, 0xfff, 0x80000001, 0x6, 0x4, 0xffffffffffff9703, 0x2, 0x2, 0xbbe3, 0x7, 0x3, 0x0, 0x100000000, 0x6, 0x7, 0x8, 0x401, 0x7, 0x3, 0x7f, 0x401, 0x6, 0x6, 0x7fff, 0x6, 0x5, 0x1ff, 0x3ff, 0x3, 0x10000, 0x4, 0x2, 0xff, 0xffffffffffff0000, 0x6, 0xfffffffffffffff7, 0xfffffffffffffff9, 0x700000000000000, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x8, 0x0, 0x3, 0x4, 0xe1, 0x3, 0x8, 0x2, 0x9, 0x4, 0xa75, 0x2, 0x9, 0xfffffffffffffffb, 0x10, 0xe, 0xfffffffffffffffe, 0x3, 0x7, 0xff, 0xfff, 0x8000, 0x8, 0x80000000, 0x6, 0x4, 0x9, 0x725c, 0x6, 0xde6, 0xda, 0x7318, 0x6, 0x2, 0x8, 0x3, 0x71ce, 0x0, 0x9, 0x7fffffffffffffff, 0x7, 0x9d84, 0x8, 0x6, 0x8, 0x6, 0x3, 0x55, 0x80000001, 0x1, 0x3, 0x4, 0x62, 0xe1, 0xffffffffffffff00]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000dc0)={r5, 0x7fffffffffffffff, 0x0, [0x9, 0x7fffffffffffffff, 0xde, 0x1000, 0x258000000000000], [0x10001, 0x4427, 0x64ec, 0x40, 0x6, 0x3, 0x100, 0x3, 0x7ff, 0x80000001, 0x100, 0x3aaf, 0x800, 0x8, 0x4, 0x3, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x2, 0x2, 0x8, 0x0, 0x6, 0x2, 0x5, 0x5, 0x401, 0x9, 0xffff, 0x4, 0x7fffffffffffffff, 0xfff, 0x9, 0x3, 0x8, 0x1, 0x7f, 0xa, 0xffffffffffff0000, 0xffffffffffffffa8, 0xe, 0x1, 0x7fffffff, 0x2, 0x7fff, 0x5, 0x8000000000000000, 0x80, 0x2, 0xec5, 0xed, 0xfffffffffffffffa, 0x0, 0x6, 0x3, 0x3, 0x3, 0xed, 0xfff, 0x10001, 0x8000000000000001, 0x6, 0x7, 0x81, 0x7, 0x1, 0x40, 0xaa, 0x7, 0x5, 0x4, 0x3, 0x7, 0x67, 0x4, 0x97, 0x6, 0x8, 0x1, 0x3ff, 0x8, 0x2, 0xd, 0x6, 0xe00000, 0x401, 0x7, 0xffffffffffffff26, 0x3, 0x7ff, 0x88d, 0x7, 0x5, 0x7, 0x6, 0x1000000000000000, 0x10000, 0x8, 0x4, 0x8, 0xfe42, 0x81, 0x100, 0xfffffffffffffffc, 0x131, 0x5, 0x8c, 0x1d4d, 0x4, 0x8, 0x2, 0x7fffffff, 0x2, 0x3e5e, 0x9, 0x3, 0x101, 0x5]}) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=r6], 0x0) 1m2.801041912s ago: executing program 2 (id=490): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 1m0.079504667s ago: executing program 4 (id=493): syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x2a440) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0xffffffff, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000490001002dbd7000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0800020006000000140001"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x8000000000000002, 0x10002f0000002}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r8, @ANYBLOB="05"], 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 54.775414203s ago: executing program 5 (id=495): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="60feff000000"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000a, 0x4008032, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x80, 0x1, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x395180, 0x149) linkat(r6, &(0x7f0000000480)='./file0\x00', r6, 0x0, 0x1000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x717, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 52.665322976s ago: executing program 3 (id=497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x100000000000000, 0x90}, 0x4000c00) 52.325385109s ago: executing program 3 (id=498): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="dcd1c9721e129bf8b83f70554b8998e8de9a4f1425443c324ff194957bf78330f751904ac8af4c6536e4bcce7d699339b91c58fdba850699f48a", 0x3a}, {&(0x7f0000000a80)="014e2da8a031c76d8b17a85ca1686b0a724b6a0f0665f9ab9361b9f40af10f8b3a92425151a3e9965ab7d9f209b41538fee798e858a3c4771d4ce359b6a9f2182c90ea4de93f4ca62e1ca9d704cef67c1c7cfbf0dade8635901a4e31628316a77eda2f8f5c6c03a7cb2c3dc62276266c3c057243575fd487f9b500a35cda8d472f500da4ec76b162edc5ac410bc024f83d0f8a10923b1eafe37eba368aee7e74e83d709b87b34da6cf9ad9e650da45196471f27794fc416755f033ec1369365136ed23a1ae626a5e2030b1b323ad63372649f466c4bb4c9bb9b2d937fe5907416a13682ba1d9091324d65f6e4a5025c4874d", 0xf2}, {&(0x7f00000009c0)="68e9c74d0ca62c19d8a915a3855db8b2986b8cf1affda525a845fd84c800563057acd865b3c32bbc2036e7ceb25b94dbfa57fb38a44edde08718c6edc9f398c6e052c425deed80700c412cf08c613e2dd229cb59aa19", 0x56}], 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x40000}}, {{&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000010c0)="4d086fa83274208d1ab641366dc3d9ce60c8c86add7c537c6307484b471409b3aa3024b7c95f51369df143d339f351521bad650fb99c727f2695e7c276a01b05e7890378ec1eb0b7f3136e714745bdfc649cf41694fd950fdb53b089328c0cebbb956b1cf524a969854ea03223e8b41f46ce50a17c1f3bbf8f83649d7f4a5014988341f2472d0f957b30efd4f84137a20abf491eece343211655f19eaeea552d84c2f469de1a57cbc338a7d30e1b1fa1437764957dcef9e3d6f1c53720", 0xbd}, {&(0x7f0000001180)="677786d97839eebafcad5d3be59c0782f7e726de7dc049c76eb338109678d4e233095784feab0a8e23d5330685e8daecbe97f5456975e6a43d78408a5a88457b3a63a7d59fe94b38e2f1c421c9eb49eef87b276092d7f006e303d60d42e7c22a78e1f028b9ec1c4e236bb79d873be04fecaf9b527169bbbce59722ef9dfcd3a354c1b5b8a7cca651ef04f7e48b618a38e1caebfbf26d2274d3e3b7a4a8b9376e3d19206b2ea8fa34676db365808f89f971f06c001fcbf157beee", 0xba}, {&(0x7f0000001280)="a4f6a9f719b1734368979bbeb335a20c4b5fbc8f20b0a8bb04c0597c2837f5be296254128a0ab7562cbaa231b83de9602900e49d4a30bbbb15ab109ea1f3d499495540a0d3fe81229e237e72cc08f0d8fbb6c08f8729681bb1d077ff28e9d7386df66f59a0564309f29eb8c7180e17502523ee75ba9cbd27f446ec864a5614b0e5fab1a42d4342d2e8aca90c41178f173482e6361bcc903d4c5179f60ed4870a173dcd983d0b0bc06aeedc0eb5dcea0a62ff782007c25dd82c224d7b59dc40b22c", 0xc1}, {&(0x7f0000001380)="37ee4bd62f2afa0129c4a076bcf9299c53d88f64aa5ea23867298bc8bb1ed84151721d6f13fb3d2b14192568828797360683fde781245e3bafb9fb7a8a42332995a8356071018f4901c24f1613f711565c286b10b6e7be31a575ac422751474592989dc76bbcb36dea9a7e3a7c25c7f007a19eb4ec3b", 0x76}, {&(0x7f0000001400)="4170766c14bc79096726e0647e315e3ed416bc4e699c0ef0757aa05e5db202d669883a29104e44d07970962a464ca8eefde2187010012fa3be43274c13b50eb9b6bc01a552a8b16a247bd87ec00a242d1d642fd0873d2809c2c110cccc829bd2783891d3eeea5dbcf545ca2b074e275449b924119a35b5bf1c88cc0a325d9046c67363df443381788bc009e2ba4522af6062288d19d6b46b7d57c1bcd3687242b31f29bc37338c43287878b0e24094fd89f37712aa165369b105f46019df4001225b0c2aac0079262e3dea03cf47caf24d41365ada2fe3c5e8199e1b2de6266cf060", 0xe2}, {&(0x7f00000015c0)}, {&(0x7f0000001680)="aab2c44dbede2b746fcaf72bc1dbe3bb9e25e12b32079241a03109f1ad0f5e1e383141b62a2ed70f01aa77e427afbc1a83fbbe04fa5a0806430fb5ec9d802ebe0517221e1887a12b43bde64d14b82cfd7a4496d84feaf7bb3b3de74cf574f243f3381cb097954f2a728f20d0b42d5b60bbeb2e7f2312990f", 0x78}, {&(0x7f0000001700)="f36eaedef2e0cf6066c8c6b9be1c0cef01b321c2629f4295002a449e9e92cd19512d9822a9a5a5eb950270e8417ca241cd6e5a90500c023f254593fc8ee9245273fa01085b8c87262bbce329d27a1c328871c30a362453789f97", 0x5a}, {&(0x7f0000001780)="295dd7ee3dc9df2b646742f90a358a445eb7e5", 0x13}], 0x9, &(0x7f0000001940)=ANY=[@ANYBLOB='4\x00'/16, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x80}}, {{&(0x7f0000001980)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001a00)="3b519690229522c79cfe1ebe224d7a8e6f72bc19ea82", 0x16}, {&(0x7f0000001a40)="e1f9d8004d", 0x5}, {&(0x7f0000001a80)="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", 0xfe}, {&(0x7f0000001b80)="bfff4c7a9ebf0570d9ed3a068bb82377c19d364937b609f1b04f5b689b286748cd25798b150c5f0ac19e1bb1ad6b8bf768", 0x31}, {&(0x7f0000001bc0)="86d7c101ac6a8346fc3dd972c83e224ad67c694f353a48ac70863a2f6aa49a0f0ff92f7fefd7d9b45ff7d274ed3a400c0ff27e0a90d32182ca05549c0f83e1d72f56f13009f3cc1050e4c82e2c13055adf3fdd8b772738add490cab1f31fde320ef1dc2950762fe2b0fdd5a62fa078", 0x6f}], 0x5, 0x0, 0x0, 0x60000}}, {{&(0x7f0000003280)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000a98e93193d487a61a2a6e3bdfe30efb6f743c71f5a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c00000000000016436d01ea3d411a043353d574f4000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x42}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003d80)="f34b9e6dd8df5a42b25c65c4302f862e5d0683f9c455ab05646b42b9981299ff7a583d952ab129988c2288c21535d6aa10868e6f81dd14e26a70c496ead82407abc8cd4c7a947c89335a4f8b9a1d132634cfe04812fb2c4996f0f2d65b3827d126ea17629d85510aaa40efef89ae66f11a4e509283aed17d11b84f036a25942986db649913381502e906543fe82f868afc8b805b13a607d21bb0a5ddf7147de6a48272f9bdf0bd1ef93cb61ed139c6bfe442983ae81c4427b5571336ff50ca4edd70632c4994d165f4c33fcc2603938b4819a946af9596a531901d2cfcc17925fccd7dd3e97dd115fadcc2f3b400cb5ce7891b87", 0xf4}, {&(0x7f0000003e80)="cfa4805d03049869a1e0ee17dc35a43e68b230f3fee97f7627a13fb0733e47936c5d0d8989f76c9b0699689edc94c69573385f44c33564879d26d034448ac418b32edbe02913c19c3a3a75c31f5e7bdc7deefe98ad36d6efcbf56aac224ba4985bf8", 0x62}, {&(0x7f0000003f00)="f3a2e19d6f252aef46c26c7c3c6562c2b4c00cf07af8a476d0601103428ca25a372c9609960dcdc016d24e8eae44a264a4673a754dc1b8a00e879b7bdb8909e37510bb088ffe7c15c7a9785cad2677bb3102926a58978988ce473cb7be2853a9554cdfc92f645fb30935fdf1fbd1c64bd2d755f661f24ec1f1b1dcbc049cee540703b2787d5728dd81ccd3", 0x8b}, {&(0x7f0000003fc0)="7045fb7ce7df9a334bb7993ee0665f79de486ed31da6140c2a4596bad671b11970a920864abc33e90f033b1dfe5fb812d96f7a13f2d160688c4761b80ce142f20e966cd6c00afe9ca9fe12317a7d9b6f7e9dc90539abcec17a484f88adea1d20a5c218e6af1fd36b9773c1c13ac08dafa52f79b7cbe21794d78501a5e64bb75e4786ba79d03fa4f21fee45f1c8d0e77e1efbd44dc08649b78ecf27f9f99e25cb4eb88f0ed7a790247c4e9e2bb5b9ff73da8c3cc96fe5", 0xb6}, {&(0x7f0000004080)="32348b10cfd62b14a3018936efd7", 0xe}], 0x5, &(0x7f0000004140), 0x0, 0x1}}], 0x5, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r6 = gettid() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r7, 0x4}, 0x38) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x4000) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 51.716350305s ago: executing program 4 (id=499): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x40000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x8010, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff050004000000000010000300686173683a69702c6d616300050005000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 49.191499095s ago: executing program 2 (id=500): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_io_uring_setup(0x1ecd, &(0x7f0000001280)={0x0, 0xdc45, 0x400, 0x1, 0x5a}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r4) r6 = syz_open_dev$video4linux(&(0x7f0000001380), 0x101, 0x2501) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x7, 0x100e, 0x4, 0x9, 0x4, 0x2, 0x5}}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4}}}}, 0x30}}, 0x2c040090) close(0x3) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8280) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[@ANYBLOB="74010000170001000000000000000000fc000038000000000000000000001877000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000000200100000000000000000000005816059300"/105, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000000000044001c00fc020000000000000000000000000000000000000000000000000000e000000200"/204], 0x174}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000ac0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x1, [], [], [0x0, 0xd0c], [0x0, 0x100000000]}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r11, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) r12 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r12, 0x0, 0x0) syz_usb_control_io(r12, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x17, 0x5, "a2b8e2fdf5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r14 = fsopen(&(0x7f0000000240)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r14, 0x1, &(0x7f0000000140)='gi\xe1\x99\x19\x8b', &(0x7f0000000000)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x11, r11, 0x0, 0x0, 0x0, 0x120, 0x0, {0x3, r13}}) r15 = socket(0x8000000010, 0x2, 0x0) write(r15, &(0x7f00000002c0)="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", 0xfc) 49.17860948s ago: executing program 5 (id=501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x13f}}, 0x20) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x42032, r2, 0x100000000) (async) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000020000103000000008000000002000004000000000200000008000b000e000000f19ad5856aaae9f2811bb9e04c237144d336c79215c68e7107d791eef7ab3ffc4d034f3e795f40a728e0be31eb2274089eb6e2995422d731f43146a75ea50873d1f8a76b809253b74c21770cb32ec14385e636f5338c3d1ec9eaef6e014e37e0f9c5552591815f7c593e5351331c0971f4d6d38cbdb5ea3d97cb6c6d7111c534850324d67070a86739160a3c0f4b169b74736424a465d1000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x20040046) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = timerfd_create(0x3, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac060000050000009ab67e1db9c9a431078d40f722e600"}) timerfd_settime(r5, 0x2, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) (async) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) (async) r7 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x1) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xc008aec1, &(0x7f0000000000)) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x29, 0x1, @thr={&(0x7f0000000440)="54a010fb3b059dc68c600f706098a7cd2a11087ddf70956006c8c736d2c12ee853956922430029d913dbdee84fa6540200e63fe20f6ee62bde149624e7454d2bbc73f52f798e1674af0f7d0d64cf", &(0x7f0000002680)="5455d9c8ee73fbb5f623b79bad58a7f0c42b1d0187dae6280bd5a75fefe1ec527fa59e8aaf58dd92a3a5f6677a8c7e2fea53b3bb9f96123068c0d49d59e07fb83cfe672ebd84b9333bf9b13186456655dba42159c087d1b9cb9a5b8989872ade775f6b1f9da81bf4fb8a1876935387b0dba7bb4e460d76e19be4434c59d7fadab1700aeda91acb88d6874fd6c14c0c8a612f1e4c779a054c1d7b45dfee11a803ecc6492f7c6ba9cf13b816b298fb6396bd31a74fe1100266dee9030f21681f621b1b94fd02a9ada5e7d76b2b39633b4044e6034ef5b8208e86b1dd1b318958d311f955d7d0d0e945d26700"}}, &(0x7f0000000400)=0x0) timer_settime(r10, 0x0, &(0x7f00000003c0), &(0x7f0000000240)) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000021000100", @ANYRESHEX=r5], 0x28}}, 0x0) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x729740, 0x0) ioctl$RNDADDENTROPY(r11, 0x5207, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x100000001, 0x4) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x30) 47.624382752s ago: executing program 5 (id=503): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x2c) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r1, 0x5420, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x6}) fcntl$lock(r2, 0x24, &(0x7f0000007c00)={0x0, 0x2, 0x4, 0x8}) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f00000000c0)=0xfc, 0x4) 39.032957462s ago: executing program 2 (id=504): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES16=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) (async) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000100)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r3], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r3], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) (async) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r9, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) (async) io_submit(r10, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r9, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r6, r7, 0x0, 0x20000023896) (async) sendfile(r6, r7, 0x0, 0x20000023896) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 38.961196526s ago: executing program 1 (id=505): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x34, 0x80000) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x401, 0x5]) (async) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x401, 0x5]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000240), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x20000) r5 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="e9720be8b244ff40640000020800460000240000e000001190780000000000000000018903022f5341caf96405a4faf9530f000000"], 0x0) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) (async) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000280)=']){%%)^&!+)\x00', &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400030000000000000000000001"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)="a8d13838221bafd3bc6634c108395e362549235cf7c24d2cb9f0b44accc146c4901199baccb1ab60d7f85f2bbebd689927d79ae91d372bb98807efb8318feb691e75cddd72a815f3618419b50be59b6e2be9deae8ede875fdf51a418461e390123c10257728db23d3f2eff27b8ef80b53c7dd45260f43479030b474c0e6a19d6a8d6422a050662b4a4e4", 0x8a}, {&(0x7f00000004c0)="c9b7bb9c064989b6070aa59d1f9a88c0b9d8ac7a312bbd8918f59656bab4e654dd157cb1956359262051dffa7cb0f292b519d0d6db61274d00111add9301c8f312377a", 0x43}], 0x2, &(0x7f0000000580)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0xb9, [@multicast2, @broadcast, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x1c}]}, @generic={0x83, 0xd, "818989fefe514c7f5ce81d"}, @lsrr={0x83, 0x1f, 0x7b, [@remote, @remote, @private=0xa010100, @multicast1, @broadcast, @private=0xa010102, @local]}, @timestamp={0x44, 0x14, 0xac, 0x0, 0x8, [0x3, 0x4, 0xf90d, 0x8]}, @rr={0x7, 0x7, 0xf5, [@broadcast]}, @ssrr={0x89, 0x27, 0x72, [@remote, @broadcast, @remote, @multicast2, @local, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="346678980e3c58b3528d2c2eda6db0116071d5445f9613be4c466af04b31baf80fbe8efcaae475a99bf78d5bf20cabed96f8591dd95d2b4bef9ccbfabba4f73fa0a1b94f318ed0e04bea9926a27e", 0x4e}, {&(0x7f0000000780)="eb201a883ad71177d285209293358b5258347ebf2c97b09c973358380f304ecf5ad45da6e26822d52bcb8cd42443f3135f606880e65bd572ec9e41dfe1e220418ba0c78dc95779994b90398b00872e83", 0x50}, {&(0x7f0000000800)="e3e80e404cd767b1bb0167e7780037b18426f6f69b0cfd093c7663db178eed9bf88e2dcdf1399dc03c4dedb24f614b294a6e9f726b09868127f0257e6bef111aff02a0aa0f139dac401ed49cac25e18bf17eb14c20e2b5c85814a1f085ea68e460b33ba91313a6020c3e812f5fce214449ba9c30acb2b9eaeb4207d7e8fa5af27b8b4f9bc53cff9b7f369ad86ddc9c01a4", 0x91}, {&(0x7f00000008c0)="2eb5ac98418e7ad6d675a6e7fc60bc0b9c93b41118f5a61a00a3f92bdde4cb0f0e4a1251152333036d253e800ebcb4da1dbe1e938aac69dd6295823a8421e03c9583fb7721f0cbcc5418e38a64b18706416fb38b46add1be253e1de981757cb18f27d3f31ff55e94b6a5e4c6e7dea952f54a3e23efa5d05d09e51e9f92f403ebd44d9f5bc4f27c1f8d6c3041346de1f257bab2c4afd8dee2eee593482f7ea11923856e53fe74021010c739d06769cf1700d99c2203b17a237dbd3c9177e71f24d0c7f22462434c1f081f24d08f6d92c29e0ace4c4e19de", 0xd7}, {&(0x7f0000000400)}], 0x5, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}}], 0x3, 0x0) 38.775127886s ago: executing program 5 (id=506): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r1, &(0x7f0000000880)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffdf, 0xc4, 0x10}, @mpls={[], @ipv6=@dccp_packet={0x0, 0x6, "a057a2", 0xb0, 0x21, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x9, 0x0, "99e0a2", 0x6, "62aa26"}, "a2c19499501ce6ec38ffc380b39e7ec54e2de359b35febd551123ddf4aaf823259d065564684b1431e4d9745323b06ddc496405007bb0d00043ae2e832815bec7e2a25981882e27fc4a957b405c23c8292f23f2db0b77edd6dd1720a1b60408c8c909c55f74279472bd512ad730eeb8ac8e008f73e32c4bbf970702bf500545592a8cfff8d00caa0b29ec85f1f14ffa41357df006206cfd9fd8ca9ad47691a11"}}}}}, 0xe6) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x210, 0x4) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x3f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendto$inet(r6, &(0x7f00000003c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff00000000008c", 0x1a, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r6, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x3, 0xa9616, 0x15bdc9}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0x80000000, 0x0, 0x6, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002e00020046b6"], 0x38}}, 0x0) 38.311260462s ago: executing program 3 (id=507): socket$packet(0x11, 0xa, 0x300) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40001102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140)=0xff, r1, &(0x7f00000001c0)=0x4, 0x8, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000"], 0xa0}}, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) dup(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="04005a8024005a80200000800535a554ec000800000000000000000931a1b4e7f1cdeb37000200dc6503a07f3c036dc9e1c4d645a7cc"], 0x44}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket(0x10, 0x80002, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, 0x0) socket$inet6(0xa, 0x0, 0x7f1) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000100)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) fsopen(&(0x7f0000000200)='vxfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000001840)='environ\x00') 37.083314311s ago: executing program 1 (id=508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x200000000000000, 0x90}, 0x4000c00) 35.612235604s ago: executing program 33 (id=499): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x40000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x8010, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff050004000000000010000300686173683a69702c6d616300050005000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 31.933659662s ago: executing program 1 (id=510): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ptrace(0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000001480)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(r2, 0x0, &(0x7f0000000000), 0x80000) 31.671315964s ago: executing program 3 (id=511): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x8000001, r1, 0x0) (async) write(r2, &(0x7f0000000140)='f', 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) syz_emit_ethernet(0x64, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0xe, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x89, 0x3, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}, @lsrr={0x83, 0x3}, @cipso={0x86, 0x18, 0x1, [{0x1, 0x2}, {0x6, 0x7, "2189ea43a2"}, {0x0, 0x9, "02a20948fd7406"}]}]}}, "a815"}}}}}, 0x0) tee(r1, r0, 0x3, 0x0) 30.747242213s ago: executing program 5 (id=512): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) mmap(&(0x7f00001ab000/0x4000)=nil, 0x4000, 0x0, 0x858cb0e9afead038, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) sendmmsg(r2, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)="27cbb1504134af7a94b21155b9d18c7fe6bf", 0x12}], 0x1}}], 0x1, 0x40088c0) (async) read$alg(r2, &(0x7f0000002300)=""/4128, 0x1020) (async) sendmmsg$alg(r2, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="4a895703cd17bcedc1666306831c5c5864ffa418ac198f0265d77afca35e38f139b2cf0be1badc10d8cec9dd66449d939643effb514ece9c54c3a48cb71e9dacb4d9daf0705c904f94c08f6c446468930f4ca4313b2d50287be8b9ca790b1161d1131312cb2be667de8247d6f019f3f303c5d97f7e581a1bc5c1c5e16dba7bb3857c21d6de441f58c8548c1657cbab43f1d0535cdc45b1a4024dae285e8a9cc4548a40eaf9679353bf28382bd9a5c5e78ef8920da23b70977b487a0fcd11d9478dfd4d79be5eed791f01fa456cc8c08dbb35a090622d8369f5004bb9197ebc47ad0cb54d5c542242510f9d882928786a87b08daf2acb81b17ab509ec15c585d2006b36c21f6e81046ae16898ef797e0544581fcec801e889686f1b80fbd12a373099966e76f03d9b9e097806d23f8f7102282ad4f721ded9bfdbf406ffb3e6a6467dd909b66112e29d073a37fb6e077ad638cb8f28bfe888fe6c009ad37d368ad0c4a34a70c1a795110e63c41bdca93473f3b74127e35634cc05d5bdd55c5f5f658617d5dc911ef5d5b117d6dec9849636850ff9bf25ffd0fe09b81c653be1ce231c96dfd5514e7967c5ac79fedc4dae746bdb11725be5650a825c178356db68d31e155b20114105a3e902555f329448ca577a1a3be792d396e10c84fcc52c43f25efd40730b23db6f4cca8ab196b5a201184f4b7b4cec7ef64a325ff3fbcbc51dc46466209b4781ecbc943e33a20a9b2a290434279b09ee3911e2ce54ffbb634db216096f9b6d7cd1b093d05d0f03f7df64e2670c9336c7bf27d0da73d81498bf0572661225ab62f0f4b2bce327927c1d4b923cc3db422354e389c81749dd51042d3c98a7e5acaaef627283b630d59a8a75dc506400c40d6c8c0a062254cde2e643fe99fb03f42f0396e23b0273f0f5a354826824ab2d72b8793dcff47c75387011767f554f7594918d76fc80cecef01ac74dd10d257ac962209026850f3e1ec2877ea63c59c3c4e751594c31774ade2eac9e94b33b2d06c668cb700fdbe61ac4ec2d595f5a3f5b2722f7644fa8081d1445bada8624b025291d7528144d5a092d410249b20f9faba62f760c05b9e25abdafd107a29033c3ca67cb62500ce9979878a2c293151528ef33574e96148c7798ee427936f205627c1d6aad4e1956b10495b23ebb2fd687d75cb0f9faec439c494cb59c3293d62617f9e0c88168f993e8540db1ab44dfad05bd7c7841954f21a923fc049a8f6e141a0ae26e55e167063421e35340a19c6316e593dc46b2c5d00b1118f5badadcb30af89ce2efe81937727c5d38c9368ecb79f3b1393dfbf74b713ca09f3e3ed774019227497ab6599fb4be12be93b4ba8cd7c5e5ab022e43b11179c9a58a938e8fc9bd0f2ea990d6af6545827b25d23002b8de3faa3994711d9fd4e5ec7e5f2b3e64df3e5d9f31762c39aa25902bd49e17ebd597730461fbcf75095375a49775a92e0246f963e021b678d30bf218e495d6acccbc2b94e555b4ef1392dea925e9ab0afcb85314c3577fd5962fb6845ace74af46a71b4304bc58c953e02e8aa7adccd209bca4f5c6b16161aeb3d5377a15c3e2ac38136b8b0424bdec89354cb53319bee78cd078fcf99dd3c02d6b9f070c40c5adda3f7d58d8476b1688f0e776695b8ae6b807b55a4a84d67d772a1b663ccca7bdb47f098265378205b921140c5ae3ae03bbc8821a4cfb79add44884ebe9c7d67415de7a4f51e315910f77be57c12718e1cc0700d0112af51013c4a87ec39226abf811a19a857a04e7ada6265345e87bf5ad3327afcde22e16543b3cf4f4bdccdbdcbf2b6e2291f4877b32b5a69e00387bfb1c824380bd57f3af90cf685b5cfb874f7870adbf50621768bf2d45eb5c3f783dcc067b001aa01c6cf239e98010cd016108fb1de06cc59070b5db347ff892246fbb699e0ee999cc9c923e2a5354fb4816c15dd8206f1033b556666b3ddf2aae0e892055239d9c5faf1c4b61de224d153623e40574918b1639635ea46a895d2f5a2958d409dddc1e55441fbdfe40b83ae0b3f3f8f694d18b19a9bef18c54c6888636e803154d8c8fb66566f4ba5fa02a7bfd5ed23cf61f75b26fd7f3ff03d1b9e26ac0e2568604f9e550185abad80dacbe12bac5a01c3b0d06cd9f8532ce8ac28ee8fabbd1f8f6622077dcb41ebedc2c2eeb2e1efa3f1ecfb5937a1368f54ff4255676840dd65006460ee6703275c51d27fe4bc6f5923720983a235df824190ab6f908475d2496e5928e915d48a33a7e2277617898a0ee8609eb526528e5f00c5f003972491a16ea209c8a794b6acd2997731d656d83f2ec41412ab3d48256424279a27f8e99431c25ce3afb42eaace7daa26e760912b02f3e5842340ce81f05694ae63c854928bacdbdbe2d1919d0044b9e2d142cd330bc4cdfeccd89d14974ded579a559584384615123d3b56f00ff9bf1c2ec28d23a15c5031a990d79462cfbf4fa576f10b74ce05276e433c4b1acf95fc29929c29c8de9ccc781b644bec6b3736c054a7699b3372133dc52da8b3e42976a5ff354fdb08335843698cdc198f5b1067b1a73ecf317397e64db3f6965d29fa6c76822685f7e0566a8984b57912527ce5df0eaa24ae441b9e7f01ed0121c58938dc1620c448bb9e1d746c499e8b249262e5bc7b642c245e04623f4c0cccc8a6e5c043da2921cd642287984e6c94619b79d23c576a27d10a9850fcf09a6bab32761cff1b0abdb521426588162e9b4e11e6e90aa2e1d227842c245daea800e6567c6a94ada996fa8f23d25ab3d3fbfb53d3bfec69fcd4f8a0a3f21851960363bad9a156a8bf8dac7bc61b3df1e0f88bc46e589c432e9321165f8bc5a8e7c4fdff96ee9fa27f1b03ff6e16d90f40bd55234cc7606e0f2d10889c5c26e7f9e79a76c63991b02b35df613c030186211742a9b80ad7fe4b415e9293f9638f83d95548442723ae89f62ef2c7e68acf94ccf9281fc4d6d1b4db097602080a5f715a3dfec6f792cf7a81884c6ebb57ae05ffa16146586b8c42dbc686e009522f0c8d4e168206d79966bd53d59483c73e8e522420f7c325444e8a10346749e3fa20dc892e0ac305ae50fdca06ea1aa29dac09fc2fa848565d643396db05cca93008560155ab60e7f31380974dd6aa735e7498148d7b1e1bf35fa35fa213da8f3d4d4b3dc1aabbff1b2e00e793ddec178c85cd9d8ba3b335887b0c715c3fe4b5fc7f8b2f63250f73af47142744572e1db60f8c7361c7fb811b5f4af6e6c10fb3d9440aa0367609fa6c32dd1bdd613970be35d74f34cc5bbdc9f630480c9c82f3118fe033617c353e795a9b7308336b8dc65f3328fabf4532a87c9f1d9d35f431959f2ab922cabbfeafa051a771916653f6bab8910e437e613e02fca4c6019c640b822f6657607b983694862409f06ce57bae67ada5d83945a6caea554a13488a6d8bb85c80a779e9bb4c2ed07abdec0f6d0c83497efd096d3a5ca5095885ebf7b3cf7183350bce692aa62fc1b45f620647bb2cf8744b57dc5c1f47de9bb005e6802b3d3efa4dcee835252d178239bc28fbd1bee6a7a3d70359330f1b7ff4daecb1f820f00398a2ce4046202db3c1b80ae497bd9d065c2fb265716e984378b4ccb5b6f5d2ffcc5c992aa259ca1ac92bb387c53f5e73e65263e7312b7dbfdf799b06c1999218d613046d57a2bc1e27ca84d41a0bb4a1ba08786d0c8ba1c293f914659b5d32cfd95ef7a1b3709e8ba41f037242e44df5fa2b1a0dccb0ea43ddb85e5dde552f5747e52e8c73d25dd0c903229522c4d91e523879d377f318b7f353ec6954f3aff1dd0bd7cface9dd2d209e181f2a74e07c557e4bae9645a4d282c84b70c74a8210669fd8e7cbe4e17813dd8a0da360d2c99d675abbf66ca6a1cdb18112c509338a7b22e14309732d732f873474e25f5e36bd730336cf35517ecc2da649c85adce16aa98554470d16058aa77898bbe450a85bff003273ed0b23806af8034aa91348774412d5f608bc7efdec13414dcb735e0de85ff8de01fbedf5585900d2f301092fd57d91f828cf5babf70610d45f1545dc0bab7f69c90efbf2edc6f46f397ed9a13da7cf7123d008f0a1af23f20ebefabb5a7a46ecaa675f8b57e8478cf31ac40fe4874cdae89e4b8d4e7684252d89fbb2f5bf24bcbbeefa53cc24a2856636454390a1d47efafb4c23712a4b9c8dfe6f370fa4446eba7703215233a749e3a7ab28542dfbf03db73648e6bf06395858d59ec7dddbe460aae30487e91c2d19c8334525adef322a66a70ea32d2f8a72bf1bb3b0d9bc2d6ebd40bba9e4c02d3ee005a0a72e5f65afb01f6adb8ab2cd11d9c9fad7e3e1f950659bf1826b380a4f296c76c529a65235a15a9596a2a330431d5e905390321dc4a47c84e47c3e8e8cc5b11cf62d7515e584359a1e442abfc9aab4d0233eb0911398c43688a8fe41d462bde8aa4be1af978cc0b40dc25ea20c3fdb0953a3293e197748cdcd576619c4fe8b5754851c90b6b5207b3eefbd86eb67012663dbc87858a86dc51855381dc746501eb76316d778da06c4d8a03ebe3a07f05dcbfdbe6020bd8f4547e6b598cf4dc7be2ea167c4fd362b2224d4869b97d991c64251faacea7184ee97349d5b68af90bacd5441ae423173f6271d1be106381a7bcf0925d25ae26a0afb1c82232a648c178b8076a5fa8bedeec3c90f450dbb3573fc45c2d7b65c420d4f323069d3cfafc6dac879698b801ea8dd18b6d3c171200308e76f0c16a977bc73cd88818196a9b54b47c3f3c9595e8ddcb38334202cecba7764505340680c858cab156e658785bda719237baf1164e2927ccebcf8dccfcebacb0d3bac011cf7c544b71f1c399931ea886524d10e95319d12fc63b74d532e9c94aa78d43fc2b097e496e69405d3e147a45454cb292987330d126bba36dcefe664cce49bcd0f782d03a93e059b7ee23039ae30e47be8c457ca092238659e022c5cc1830a6c6179a65be9865d9f2ce34b25fed3551b69bae554528679e2110d9d4c85302ad99272174b8bbb2da37810cda715eb2536a91011999b9bbbdfff212d0dbd40126b12f2ecb8d389a1e845f25c30cb2986cc85aa5614c10837afa40061cddcf14297bd2861106dec71a0b34a79afe612394633ea6b8f71495b3db408728bf37de889768d6dd2642a627f928c6a86df2bedf3352e5f56a5ed424770d613331aa5d6e71bb40bfef383d69f3ef570156093ee4f31500513e50abf5e576dd6571d59910f8d21f75e2fe2913c6348a2c23ec8bcfeef8c5b4cb4ca254496e78a0beadcfdb96afdf9f0f5ccb7abe6746cb718dab6ea7f0ba8080d0ce12ec9985978f76b885a85adc2e3115db7450644c75cd80062c7f34cd0b7824d621607759ba8eb17289d3920f1356319e980c989d794016dd05987cc8a17a947a8dc0398de5cec6dd1eadf685de957ca4d1394fc67482fd22498f6aacc8e7f25ebac952073e12f526e1427ee49e6df9e5c895df631e5b4041e6e88b3508b8c3ce597830e2ce3aad12ecb696e5ef7970cd9c1e3be94506ac746f7ce8438a356507027149d0ebd6e95783ff084609fc079ace20e5bae9cac9625f58ff8ccb2c2b50506a237ecdf21774d560ba51d9d956691590392a5aa5ad6a2ff9d69d58a82401f7de6daacf3257f20c9847c3760ab1a41ab024df0ad8789fe629c0d7ab8adeea9777a914f79e2b4dbc3e234505f1729467a60b410ceadc87a2d8c12c0cf46c8ab0a7392e971d5ac3035788b2177ae165336074f29effda63042146c2e13a12d50b67", 0xffc}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c28", 0x10}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) r4 = socket(0x10, 0x2, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r4, r5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000140)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) 30.346251202s ago: executing program 2 (id=513): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x15) unshare(0x22020600) flock(0xffffffffffffffff, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 30.227016981s ago: executing program 3 (id=514): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x40002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20004) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b4000040"]) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000003780)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x130, 0x0, 0xffffffffffffffd0, {0x6, 0x7, 0x0, '\x00', {0x107fd, 0x7, 0x3, 0x3, 0x0, 0x0, 0x71cf12f7b87d90dc, '\x00', 0x7, 0x1000ff, 0x9, 0x4, {0x7fff, 0x1000}, {0xfffffffffffff28c, 0xfffffffe}, {0x83, 0x9}, {0x3ff, 0x923}, 0x4, 0xfff, 0x6, 0x8d}}}}) 29.728738068s ago: executing program 5 (id=515): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x20}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = msgget$private(0x0, 0x60) msgctl$MSG_STAT(r5, 0xb, &(0x7f00000000c0)=""/131) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0xfffe, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560af37f0200ff00000000000000005800124824ca945f6400940000000000008000f0fffeffedcbe68b90afb6813510000100080c100094c7ffffcdd37ac036056639067d4bf40173", 0x58}], 0x1) r7 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r7], 0x0) 28.719378132s ago: executing program 2 (id=516): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x64040, 0xc3) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x19) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) open_by_handle_at(r6, &(0x7f00000000c0)=@reiserfs_5={0x14, 0x5, {0x5a2, 0x8, 0x2, 0x8, 0x6}}, 0x185080) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff00000028001a00ffffffff0000000000000000000000aed0000a0101020000000000000000000000000a00eea49620d95fcc12595c0a440a21e91c65195cbac9a8c246b3fc0f750dc94ec8852d6b0a68c7ac9d80334c8404b1a6dca6ee6a97c5693839e68198a77a0de32da621274db5b8ca1687aebcfedad7d161761bfcd6c6f6fdd0ac4f214aeefb1ef52bd105620576746491a152085bc6aab2ac62a4c445c10a5b5a11785bc281107c587191979536312d7e71267fe7d7cdf60c41f60f87653281151c2a7ffdf0dc24c22c8cbfac3e8bf42a9c2fb01a42f8ec3e830aa4d4c9b633f9dc7b44e49e14a90a03dec6cdc347d358e007b7bb3cbea33a001feac87a91035275165af57556190a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) r8 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f00000002c0)=0x10) 28.57354726s ago: executing program 3 (id=517): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = syz_open_dev$evdev(0x0, 0x2, 0x20180) ioctl$EVIOCGABS20(r2, 0x80184560, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x80, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000391d1079f6ea04d7c"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, ',/]&!,\\.'}], 0xa, "19925ae42d4ef370e5cf2dacc271f3a2e7575d2b8d3adec75b9343c2b00b2c87e3e54e54f8482925a7d6083e979524cab66fcec9a8fa871b46610dd5d7ee0bd2a98a0d17ae31ccd1dcd6767a"}, 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, 0x0, 0x6) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x28000) mprotect(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x19, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723", 0xd5}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x7, &(0x7f0000000180)=[{0x29, 0x7f, 0x2, 0x6}, {0x2, 0x7, 0x7f, 0x3ff}, {0xfff7, 0x6, 0x9, 0x2}, {0x8000, 0x80, 0xc, 0x8}, {0xd6b1, 0x4, 0x9, 0x3}, {0x0, 0x4, 0xb, 0x7}, {0x9, 0x5, 0x9, 0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vbi(0x0, 0x1, 0x2) 26.744358613s ago: executing program 1 (id=518): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async, rerun: 64) r0 = syz_io_uring_setup(0x110, &(0x7f00000008c0)={0x0, 0xfad8, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000940)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x133d, 0x0, 0x8, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0xfe, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) (async) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRESOCT=r3, @ANYRES32=r3, @ANYRES8=r3], 0x0) syz_usb_control_io(r4, 0x0, 0x0) 24.905391729s ago: executing program 1 (id=519): openat(0xffffffffffffff9c, 0x0, 0x143143, 0x40) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) (rerun: 32) 24.471094244s ago: executing program 1 (id=520): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='X', 0x1}], 0x1}, 0x40c4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4) r4 = creat(0x0, 0x8) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x1, 0x7}}, 0x28) getresgid(&(0x7f0000000fc0)=0x0, &(0x7f0000001000), &(0x7f0000001040)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001780)="66b8d45bdc26daa594a12fa6ba85daa1d5b0156c104853f0c3d926c91dc71078e196ac6993eff9f2cc348ec5ac0a61870cc49e1641b1f182d6553a5d32ba29accc1eb3cdd941696627f271a1312a41e79555ce53beb3dcfc8ab2bd77b048d9cedf8e7e30393d7e2c55754b3498409172eb90d543279982fa630a3710eff12438d5238ec52f74a41c9be1e1d7da9e1a792c460b34c76e65e999e02d63590d13bff7105349763dde44b6f73475ba531190da8f705db060ba3e4c94bba4d42bebf9d1ffcd050fe8ecffe61d1401c9fec0828688048dee1f1c5c8ed271bc3be86437e2462db5b4715c8f17cb9c14b0d4a57017e702b2288a73b9b47634ac1ff13855a8d70429edc1840fd2aba31d8bc60bf45a0c7e98a298a3b2951c8b8c0a58b339db03b86eb2a2c6f23eecae14934487efc3e4fda971a6a82e40ee1da9a36d153bf10ce5c2ed8744d61876f964e0b4f6245408fdd97044ebbb78d9989da68d863b9fc19cd16428c74414dbab9bc98cad46c38f62239da83cfbac440013225c1238f391992ef73375dd9f3d38c24db039e8b12750cddb6c2bffe8f339a7b6130678c76c88b4de55b35e9ac4578237edbcb0326feb6890ac7503d9aaa4ca0f504ca24a9cb4f9369703b12c3e73595e4eb890e3e927f42155bfd5aadf10591c7ee34051a9b7e348f1a667548f71e46eb6c9f68a34570487e98878b849cf11b2043e4a1046f47d828d836b4f045a7fb2949ab6a260f9d4878f91aacad897cff8989dd86d7ab338d5b68ce9d2db3b3bacb546728a1a96dac7665201ccc32cabec53af2e07dd1d1e0357bce3e48b846429b8570972df0811d5880b9ff77241fe09efaa5ddd2863d9ff4bea805ca8805323802f5bebb42ead1ab7188a1e3aa5c962da048fdd70f9f612979b092f3a0aac1e84e41efd91a8dbdfe8b54c33d99b6a7c765d050764f4290e44d252f25a956bd2f7fa9bce95c04768ba513e10573c07ca11bb9c3fb19f25a50fd8cb7825df3c0aa0c3383320e0dc92b89166bb644e624b82878eb371ae5669c6715ab78cb6eaf736f80f865cde7e51addb3f4882f3caf28275c107de7dce42662d3e6fecbf8964c39519d981a3a4dd3ccbcf000ba82fab9e8e6cb6706609bd748f77c8deda61ceb91a24617208a258f2121abc4398772411ec29b8b8d04a4b23f56acd69d8dc7f91c3c7150a8f46a9761171591838a455620d00e07709f5d25a98de4a9b8fccc415e405695bc00572a3fd7f9ce8348babd6b90a5fa423e04fe1aa5677cd4f380de9c9c774db1a6a9cbac5dbf84de3ae1a34bfd52be254956224bfcec22d3e7b1e739bb10d053d656efaff4b2c8bf83bf859329a5d6b67246f2fff661abcf2059378587f2ba2d43dcee20b8510783902981dd9b6c9cc4fd80f089630a4f3269b13846b38b5033f89c294c65a4ef0346cfefdafbf7b0f11bcd3050b75049f042ab8ae33a830f3460e7ab76907e813b7cedab166dfb58e7bd93be0eef80e7364077d642e7155dd65875e7c4a3957d837f6dfb1f96bce18555094fe5967a92d27072ded08775d10bd5733d39baeb49c7a8ae1bedbd40d0a8712d32ce26175b498eb38f018b060d94b9185640462b7e26a876462ed517f1d9396bcfe8dcf5bd824e140f2494424f57eea47a2e3761aa3783b8bbd18d1a591f91dc2599ea9677cb10d66723d31b533f4291e6ec4b740042b486ac9d179da71df3db0587a5cf3acdf1bbb27b41e4e8c1981dc87ba1da0bf8555e0980735f02498e6d469eb3abf1a2558867d3cd64871a72fc1c554c90a3f5da312708a739caa2d4dce95e7b8b4e35c0764f8997e553c56797725431bcc40a6cf3c744a7359cf18ec1d5383e12dc84fc16f9de99900966a0e92cc46a95c5cd5b08a04f3e2e30333ce4ed0d701c60dc32e2cd8c080c8ad96a7fd703ea1ea9df8198aa2ae0f55dadeffbe60110b9b7326df4e76d7b555b1ae654e9efce26c1ee4438ac75cce20c7e3090514dccd41914338417f874fc387bfec88ce184a13f34f48f32c1b01fcf440ca0e3d0db0dff280f8cc4f852edc35d8a393d4caf8c2a021076f74721ea9be28c684b64d0f53d0d0f05d4ece3ad49a7751e1aed7174528388af2743114c2726c696386de31eaeff7933faa607c110a8f35a19945e488a3c9408d455267b99c070a54809417f649ba7c16ae229878da0f9b48cde01344ac1f54609692f7eabd61c6a9768b5dd7bf463a4794f375152d0ce6ce29d8935a66cae8df4954b366506e7a1628fdea9d82f8e934f63da9e5228df663142a25f2fa7ac12cdb973c90d96969ad08e54241efc8b1c7be4ade029ce959b72767fa1f52420090b4568c44d08aea453d960a55d12662a8b838b1ac854f4186504d33a5788723e93aeb556719d754eae235c2783afb7c36fba37912b94c749da9ebc14c5a7c61b6a82393386447abd0763540ac5a8b5af78824d3f8f550ad2b891904f1bd5835534b9f4d586831334f6e7e33ef690a787d3bb9560a415cb40b46fdf8d4622a8350577b050e0b27528e3f42ac6139b130b2cb77089badc625791838d51b22912445e827fc095717c0f4c32ad3c023c8da7c15b4e183033f3d4e63932b1d5d1526d24fcae49aae14e150ba6498ae80bf50661c1f9c250e7f2f406af20729fa250a5abe69d95313705b8c4acddf094e02debac659ed79e752e18ff024b283e8be04251231a4ae1b8806ac3a0894c26f14b19e7a4e5723afde1db78ce6f2672b82b0669b9a1bb5df539d115d51144068a7b3fbaabbb303fec0d5c4298420607054851fe40bf954f1b80ad4afb587357239cbd88d5e7944e6c99649cc59a25f919e15215457449adbfe56c107565a9535f699b4da9a63d51854b90168b991273eb2fda5993db54b4a0b6af118f6ddeb545bf7d3d685583be6aebb265937044d824020a425e920c7c3744adcc6278ba5eb12ef731322fc9780a8f96fccdb6ffcf8aeba4fae297753f06ca2c32c947d1b15f054d033cbdbee2ae3b67a959eec3c77c04c95b883d9382c18d3b0d582e950e4773cb97c57e1b363afb8296c5e118c28a362744cbd43abdaadfc571a4efc72c9220599198846d1bb02573085cd63fb8c58f4faf22eb5a79129f545b47783755f14b6a6a344803d43d6b7b13c83440fbb2ad48f93e74b8c6c686dddaa6cc50f28211c446ac30d953d4b70313caad4da7773ca7f2e1aa249cfd00fd3e0d7af7485f346ce5a0603caea1c84a60f3bfbd31c59dfd39f30027cad6c3f9c372b31cc22bbe8f849124f6f98bea914ddd9423768b611a0f769bdbc83917e325c9ae45fd9dc38a8c9f9e1151771a0d3f5cb1949fd20653a12617a64c8b4f868edffcad906712bf5080433b8b0a478e8c12568e0469841ac4c39d9e6157c72f5bd42ff25eda773170dc11e87ff5291ebe8aa9d0be208bc24e0796039cb24a37c54401e3554021f77292e4147ea17fb5feb456b5987eff55563fd22f5e69c5212941d7ce3bbddbe101a8f53c326c16a6038bca17e9b6a6e750f7d9894ae9e62017f1c8c931199e49be9816033df4df75e015defadcd2c472e750e72291e44f7aa3ad16d43ee291244ce853d5128ec879cbad33fdaf63559e16975bbe31d872ee2f8237c647bd0558a8f5233013c82316820578ba221a8dacc0342674128a39359ca640fb571338e9ffe70aea4861adb4b8bfef975fdeffd8dff0d94bc146d32a72a50604f3f96d540d5763792b882b660217f26098b0317c432be507dc31b9590de9e11bd3b3e6c1732a474bf95d1a3cc2dc28f82660e4c99002d88e2fc492e57137450891ed17bcf47dd10e1e2c4936f57c43c17e30e52cda0a08232b48cdb28f369618149dcbf28213fec4dd89c17e8b1805af3a407727694f4c880dbf9713fe2210c85f5d823ebccf130fb4366c8cf5f91a9b437730e31592c2c3ae0dba511acfed0b8d0d3c560b6bce02d2b75747d789ecdf99be3240473842ccf7b1d323c143e499eefacdcfd26eab3feb9d5396b653d33378e505fe872dadfa069aa60dcd5e667b3c43eec459011d8a58c98d4d0039e3e86293bb3bdb9a1ba7e7596eebc233a727f6943bd579303d87ed9991442e225237da81f6a7470d7f2e4fff81fed8b534b49c574fc60d7822de83c6d2f736a21d679744dde6381f060f8511403ff661221685e9fb71592e2439f539c1d23222cbd4ea9840c8e30c241d996da2d816f219d43890f045bd2d45932d62c749c4d5c49a7198a880c61fa2501c94b92d42ab1a6489b171f8038b37bc7d26de55aea7f2cef8eb2fd04642d2bfb20e7e31c0f7ec6fdb757ea375f9a741652dc3b9057185757a8c628295ed9b1c6ca7e88089bf48188d75af33f94c6475390e57d6af8b6bde5085e22ec7abe7e619d1cd6b888f1d044d073eb486ad30dbfed61086239c49434df0b6d6153023bf6e984430fa170e22db03b808242f7f2e36afd32a98f621568b5c32527cd4fe6f505077b0c665e8a9f4efdaaf9c7a4d82e6730613f4516f56df1a04100a33fc3558bcfc6f9d779d747ad02ecddd42f94e7122c5f8efd60881f585c2cb722269e580d86444774837cfde57ec4e1046755fa5b4c3a4e00962b2946a0d4361923521d4e6cbd523b5f1a85e586a2bbb0d6babbd36d17c097ba330d56e7b020aec095771100c5f8cf3a084bc00a8144e1750f0dc0b4573ae04c96aa0c09248bd8e2cd28a32d042ef9b999a13468ef49684a268a63e1663989f5e8259049d187335c46234c02255f8c053cb3bd2c4aefdeabbac2c865eb364a31a608b7dea44475970eee9b9373b560097d6508a56c231e332f676c5e01bcad6f6a7e11d440f3066fc66d009d3947e7d901051591c04b12814ea0cb3f73e049999619efade61cd4a64442d9c70c3626acc9baabdee5d1117be44fee609fca981600008260bfa57e8fae0a7d01e883c970dff16316b4c0bafaa477f121c8276d9701241c4ff335b9f74c54f27a39c5a14cdff09d4301abb8470b8e8a7ee0277412d88ed2c4ea23ab11ce0bcfd66c7dd3b82392ac0dfc4302f15fe9142e24e8258d89b2cfcd98b207234ea5e7ed35c65c7d8f20b91064f75f3115a45417ca528b4360b32cbc7451448e4cf0d5f6b691ea2f3d833db0c9093baf241890325c0fdfb9f4ca65bb31ae1d09a7daa9ab81fbb5102e5d5fa21604dfeaad60cbd624cacdb861262c30cecafdcffafae5f4679cb02ff841d80413d4ba4dc257537e0831fda5be0a64377d3b0a90e3ebbca1f8fbd21add668cdbf651efe26532a3e12946fbbbe1a9c5184038d34d71cdd33170413b7b44b03c03e3029c71721907b0aa78e5dfd894b4883d820fa1f0aa7f6d2e2e86f7374f22c649bad99126b38553ba7fdc97b9d091de43a4ea7c9d975e5178b7a14b598591bea1be533ff8e1382e656ade5bd87befd9c41f6aa14a6c6f5875986ba18a6e3193ae9d195c1da9f1223c365c87a7d6c18d477e1ab14e6310116a06b2a5c8463acf772428ff491f5dedb64d4b1e3d946aeed077c9d0273518552b2c4ae804b5d4e7ff13232c17678e00e661484cba3b67842defe6ad12508ecf041d84675a958e1b7a371524595edb4c2df1929955888ba98c473100700f5978de943739597b36ae275be7c452ac51a8d8422c7822954531206ce8fdd000c516968a507920e94f323c5e6c03b4dd2cd4ed1eb1a5f955857cf6e97163de73b640f79251e6e4ed2575d44f035d41bce9f24d77c71c1026fd09e21e601dd4ff7b928ae12ca55165af76b0541fcfcb8bf7fe1b10cea24cdce65164204d014976e220b22edabd4c3b91a3997f1a0f193b8e3880e3306dc6a6be24c8679466b110242be8de823b784519c239ffc52640d9e1f039de188a349a0a24f22336f60a18f5c96a89066fb0e9a16731d36928ba3b633d3d50b9d39ad3826d99073671d2fe55c4c642dfd86c744bcc7b8c21fc51676859229061e41b8652036dbfc561142f5491de1821d01c923955b2c7f655190141b687bd4d2b04be36685c44658e9ffc57d3a38e535bd682375c350056965e9bd6e9e16442b19f4c1a1efd392e67fe99d194719e4da9e7d25a9951b13734ba31f1be72f53710f04825a3b1dfe0e749fe5de2ed2092a5839d01f35ad200c64f77e0a4d9859c0e4f177defaf84a2919c9fbd6740568c125388e0c9530191c01a51268c99970db25101c4cf26a8200bb998a9bc6606da67bce86c08dfa2f9bb193664dfabc4763c0c0a245c67247c62bd9e2a59a8db2a7210c559ace246632ed842475a3348e4deeaa0c366869b74b4952994d9d5a9f24342cc67310bb363541bc32191fa23ca87ae2d01924a963e705f6279d25fd435292b5555ca2895be0e80721c0adf2a365e64878009cd7c981d8a32576ce2d2a651e1d8a5367b80707cf62dfc3e35ebda0d963e06644c1cad69e6ec6bdb0765cc9c472e689555125e87c5d9e6ff850337a232737ce6e083b2a84413aad052aa2e908c27f64cff98a333939ba736241a99b53ac8ce216042cfd1c7158e762f29febdf79e49b94d1c88566fc974aa85f1fc8668d805d6b3c5647033d1921e1feb7ef2a07776991e2a0661c7a38af7342e23eb8db9f24f2640bfcdba95c9eec0d76ac7a1bb80d4b187f347eeb59d456a777e774ff716bdcd3048ada4bb63f9890e06311a7c445ce5a0aa8df0246215bc0516b8e900f13098a019156540ef0a707d5e43ccc8f03a9210bc7e494153b3b1785f69c4367948ed5e8cc927763b8794e599e74706eeb2dd37a55259ee6f94bd9ba5412564463f3eb2f2427b4cf2c38015c44782e20b82f06d18fed14f458e6b684ae7239931d5551a7373b7196bc418a6d454356cc82faed7d9cba986c9318d9fd6324fc39053906427422feb6e4ac47776703771250421b7d92d6d9eff6fdb71db9e0a12bc47f37b8386f0415de549d39be458c2715788eafa1fa2258f041356fb6f3ac61a2778ff11506025857817c7d4a6898fad4d2126060f459a3aa2745de5b9df1eab305853188fe6ab1cdd9cf689d1002fc169be5ef163fecb47fd9197c15733df4b6a0505ac642699e0c81b976dd3a15608d0d2925b334bca1f9acee6b96b4df125575e0e737a1d749afb8edcea702f1de25c8f508c640c6fd16fd079c484870b6d754e51eb3a7ceec8453eafdee80d8c9551f2a2060e069ddeece64a9c7275837556182fde78604a21a563a192753d7963596a1329f3e5d3244aee4e0438dbb67596ab46f464fe00f3ab0434f1b70bf5fa0bd301e11d702b29a3369f850dae3ed57121ce20bf1ad97a06d5a70e23cc72a8115951034960d640e2e98075ce57d5a952db3a923e324cf5e2ae42e7879731121ac01c32a5eb075baa93b17c0e6f58b10d90f1f8ce25d31169cc731bdd5729d8f84ce0aa87595b56a2cf997cf2a90606742f23ce243490e966e80f8961cea9786a940c677308b19014f73e83fa8d93a52e11926015c815b9e07239ae5b27cdc5d7de5156622fbab905720c53396745daaf8dd7fd311f70685a7ed6aade01cb675215f9dfdb5fde03844b5568c7e8ffbd2ef10bb76c4ef5a74e69458e693b65be0866d5ad27b9b3fdd31dc30b56abb7c151b7f6dc5169215bb83088364c3fca6852cd50984e526e95b046a975161b513438bec5445c6a63efa9b8fae607f0b9c0c6df3acdf20f6068e66f1f8e32bcfe48fd2cccc4ba63cb9b5988bdd5ab3a20045729b4053cc4fc7e83828475374a2784a37ee75f6190595220220a21b47f945dd2c5691f656c2443ecdba81125f01370cc74d0679ac9b7409f756b7dd5b41b5e8e5e29427049c495fdbde47ec427e9d1f169a65cc8988e2aa7dbcbe50c8a3ae0c75517a2a6b002b82d3e57f28d7ad2fe1e2bf7e13d0d4c9756fbfcdd536828af990e7e3afbfc676df9f23f2edebd4c366d58c25e06743fa71f1cb829091ef1cf8fc04d3f03366e90763423b1db5a61bd1d16da4fca9b54af8cb008333a748e1350a1445be9c03b912b31f40dbe57ac3fb6a4b98b143c1bb3d460259282a3b0a326dac5d34afa484fd5f4556d5c8b650fd9f5bdb32d3c3105cb870195ccab2057b31056c0aa8e87168aa78df6b061b0b6b09d1e19043cb7a882b7743c802c443358a56005d08dbafd89bfa717d0f255067ea1e628393ee62b1894e9cbdd989825c91e771ac7710a992a20eb3ad4aa5d6e39c8f16775bd3fa7433fa56b16f63a03920d9c4b48d0f438bd5858da54643b4870b94ee6c779c16c84a059354ab652cb4affd57f3b9864ee66ef78ef87596f9cdebddda36f8be6ce56097ba0fc8836b7ca79c03566b704549f5d9fb2b69dc420e02221620718ef4f02afe37fd8a920389c6f6d3c7f845559229803429b804f3ea1289e767b5929950f02dcd20e89bfff55b08494eaf3409ffe29c8ec7a8160df953291312240a196b91b82bfa9c2496d76aea3e56ce03a04238f925841836c710fa9eda729cbea3f4613ded9367ac9038301366d6c72d268ef2c2c8a57d2607df11ee9bd6f337d64b684a6ae078ab31ce6b96ed83899a6cc9a38231b87dbe1955195e3327d920c6322e8f69674f4afb497eece2d2c723bc229c8b4dcb63d7bde82796cfedca222145ac77a0d5ae9c10d0dd9d8b353ecbdae472cb17f265e261f3f1b666f48f2d90464d26c4da3a3b7fdfb08ff4ded3421e38c3a8840c8e65a272171d688cef4e1ac2f6b43ac3df07d8b76f8c4c7130ad01d8d5aa270f9aaa73e649351aa4acb1cac551e7657abc32fe84d1f639a73e2c623884e30ba905abf2c57170e8a092a9a5fbcb753d10a6c51f0a0e271946891d017cbddcc5e190a7f678451fe6d81c18fc6b42bc3cdccd096bd125405d768655c15713b209c31e2ba80a83d8d4baa8725a6c814beaf2e08768757b6f234b7b88252580bf1023a6d9a8c11a46c9b14699f72549cceefc7a83394a6a7558dc104a9970bb0dfa6f825ab6052b608d269e41abd799d053509fb70d383e27f3c8c969fabd402df4a00aff040aff30212f23a17d64331f78f18be83f03db7352de1528c0325500c41f80111f1c5ec70750b2cdb652231a59e3603e9ec34bdbd1e58c22d9f05884597107839ee45c4df8c41d57655bee78fec264c76f23e39128c43aeb9829bcd0efeb11a600ea52ac3d22659b11c2c03ef2d42c6128aa6184c74420e7e39bd5b69096ece8c3212c14579ad58e0d2c6af5ca4073a431bd6f18d7df2d61ab15fb86d5e4d1b0e38e6b1ca803091fa6b184d0d2e26f0e20f302cd1783eea2724d0910039318ee80cb9e9e71475584f3c6ddbcb9bc483db103bb589d97c4e6dc201e7f50f723419433e944f7f58ab44f0aae9891521c1292f62882374443b4c09e9a6285d086a7861f16d9fef7009fa56307ab1e7d4b3cbd6fa1dcb3aab9907b20e664d7f6bf954d48520eab3c0edb5aeec1be68036a8b6a9e093199ce746ee052dd70e5cdcb1e26c66a1bb9ac07bd788677f959f80d28546c81d783279fe83be817067b64a4d6bb50ea4a95b7f1cb31e54081bb2a268175b16a578b007473d3d57b544b8139ced33fc7ca01a6923baaea40007a6f9ec5a022bd78958837d756e2c681f564faf78a7ae289cd8490e826fd0d60f18227c045b58494b3e62f7b482b949089d88e51d3a263fb7dba2d849e3db23630ba5837f88ef2b7e4fa5466f1b1a3a3ae5a644eb5f6139230a9a0c1522edc5b4c1e009f12c98436bb7e4b4c1b62bca86baf8db42d16cefd3cdfb69e2151ea75656657ef1d017e3a257a7f25c5362227deb546e3fdd7a67b9e0a34b0c5b4fdd5514279e8efb7cdbadacb86a85c05ecbc2dfa6e209085fe8658380020368a3320c17574c85664ee5dd48316027ab8a46ca954f7013343acb306b6c90d4c7ef79ff8075ce3da96d43d28bad0b20d86e604a14b3b35adc48861b83dce2ac606ffd537abbfd8921f0b99bf9dd97c3c036e997181f33db9fc70b64ca2dfad23456bc5546a2c5a1b6e1c1b4e08603911e3ddfd5c032828baa861b1c72971414e186a9764a649a70c35273b3f9e92111063f452cd1da32b5924a34a42ba8861836ca76de411fe960c151efb715e1b5be74db5b2301ddee41d7dd62c39c49df20da0339f8acabdaeb73fe3e6811b7238eb2a61fe087e54d8aabbafff817aff62fca2f2dbd426f2f7f7b920440362f110d0e4244ecc74841e2cc90cb5b0658fd5a2faae8e0e3a0cf116b91825ca9bfcd0ced0fcc8f1581d0ae76d3eed54d512cb657263c2e9f481b470e520506dc047343e32d3df86b7ac9a2c3c957f7937863ba0df355e180bc6a5d3a70622302c9cbe7da377d592f2c9d69efc3ac545c74b4202a40cc8918eba479a4bd3f3dddc8b1b854a4be72a0940e7baf5b8b1c34fc3a21e627599177294adea14ffecb23b9d4516b96ca618ae751ce6c40f28d1d1da4cfb60647ec26be3535e169d38d27a91ef5459fe9cc2ef198910ee9eec7002464248f4bea74457ee14a992129a12693fe62da230cd78192c81411b2b5190bea010769d6092a860a64d679d6384f9e5e1f114904691263875a8fe1b4b60fdb424434fad3f706cdd13a6d7a0ffc8340bb1ab385f930a3d8bfe3a07d5a654f5813a1e22a956523f59373a1c65a76457c40ad7f1979a427820e88f9c1750ce6aa2710cf93c08351200a08c51f9f7703affdfd2419d8b5348862c673bc22d6e5a405cd348b0d4495b17cb103b8d5a0f485bd9b60aa710a61d989ffd9b36fedaaaa6e9d78a8cda43ee76ed2b7e8f32d16ca3f1d128f47716d442b832726286b81a7056534c068ea451c887073be26dbeb6bb4e064069f9e5f0b599ad4fcecce9dbb217c524b02f4306ff4924f72d09ece4e03b583626e20aba7c7098bd0b43d9b383aa7dfe9839a573b1c028b668466af022cfc0746ae02db05b8c0f720ae7a64f7247655dbc0e3ab314ce71ce1d06ccbf09000b90f56f6f9e3bb12124bddd398cc20dbf4b7bff2dc4eb3ab569ebbc377077ba154894975ec08431e1e5bc5538ef5737077af4636e697b28d038cc6b64215bc341f12d8ad4a9a61ecd455eafa7d5bac572dce01b999d5577431043f7f80a57111ba43579d5916822a28d7a6aaee46b174f286e79faaaaf4d00d2cb976c9af1eb281a6e5c60fb8b111958140eac08f2df92a06e529f22aaf88be97884c6d4a73ed406c3ec11a71baf160366b7a385f1fd50ba5d229b64bb0d33e923c29ab666cdad0f7097494c47e7042aafeedd2cb88249caabbff98d4f1a6abdbce8060550d8c1276b4e4243e8cea6fcc591283cda7fcb20e8d9b289a3aeda160f33ca20d1519bcf4c58d129ccadef606cf986cef55b58f04faca3b77c406ac33757ef92bca82b517c396736e17c7bc0954d5ce6108820b2a9274fbf76d1a98f59315f1ec1484ba7c19599a6ef1416fb842d592845af02ff20adf7a1bd4cf66e4516d3b38755fdd26ffa59259b8f8f28c698ed89447543b4fa97a93ed8a23f0834eec272ff4318d6c2b0e22b833ee9283389f20f0c0ed46412936e61ac1773035f8449abe8d511303bc19b155f02245e16e6ef07317a7794db0d3739623beaa35d76000f5fb80807cb034023f4a8986ae7fe6d41a03e5", 0x2000, &(0x7f0000001280)={&(0x7f00000001c0)={0x50, 0x0, 0x24db, {0x7, 0x2b, 0x9, 0xa008, 0x8, 0x401, 0x6, 0x3, 0x0, 0x0, 0x8, 0x5}}, &(0x7f0000000240)={0x18, 0x0, 0xffffffff, {0x8}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x8}}, &(0x7f00000002c0)={0x18, 0xffffffffffffffda, 0x8, {0x6}}, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x8, {0x1}}, &(0x7f0000000400)={0x28, 0x0, 0xffffffffffff0001, {{0x400, 0xd7, 0x2}}}, 0x0, &(0x7f0000000500)={0x18, 0x0, 0x5, {0x6}}, &(0x7f0000000540)={0x19, 0x0, 0x80000000, {'/dev/ppp\x00'}}, &(0x7f0000000580)={0x20, 0x0, 0x3, {0x0, 0x1}}, &(0x7f0000000680)={0x78, 0x0, 0xea85, {0x9000, 0x80, 0x0, {0x2, 0x6f8, 0xff, 0x11802d07, 0xff, 0x8, 0xfffffff5, 0xff, 0x2b, 0x1000, 0xfffffc01, 0x0, 0x0, 0x5, 0xe}}}, &(0x7f0000000840)={0x90, 0x0, 0x8, {0x2, 0x2, 0xfffffffffffffffc, 0x80000001, 0x80, 0x80000001, {0x1, 0x3, 0x4, 0x1, 0x27, 0x7a6, 0x4, 0x0, 0x5, 0xa000, 0x4, 0x0, 0x0, 0xf5, 0xfce3}}}, &(0x7f0000000900)={0x10, 0x0, 0x80000001}, &(0x7f0000000b80)={0x298, 0xfffffffffffffff5, 0x5, [{{0x1, 0x0, 0x0, 0x0, 0x1, 0x300, {0x0, 0x2, 0x4, 0xf0ae, 0x3, 0x10, 0x7, 0x8, 0x787, 0xa000, 0x7ba5, 0x0, 0x0, 0x1, 0x5}}, {0x3, 0x6, 0x6, 0xb, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {{0x0, 0x0, 0x3, 0x43, 0x4, 0xd, {0x5, 0x3, 0x5, 0x59c, 0xd, 0xffffffffffff11ee, 0x0, 0x4, 0x1, 0x1000, 0x81, 0x0, 0x0, 0x0, 0x4}}, {0x4, 0x6, 0x9, 0xa889, '/dev/ppp\x00'}}, {{0x6, 0x2, 0xf0, 0x5, 0x69, 0x2, {0x2, 0x401, 0x2, 0x512e, 0x5, 0x1, 0x4, 0x7fffffff, 0x5, 0x6000, 0x9, 0x0, 0xee01, 0x2, 0x9}}, {0x1, 0x3, 0x3, 0x0, '\xdd\\%'}}, {{0x6, 0x1, 0x4, 0xb, 0x0, 0x4e4, {0x0, 0x100000000, 0x4, 0x7ff, 0x4, 0x3, 0x6, 0x2, 0x10000, 0xc000, 0x7cd9, 0x0, 0x0, 0x6, 0x8}}, {0x1, 0x2, 0x4, 0x7, '[{Y%'}}]}, &(0x7f0000000ec0)={0xa0, 0x0, 0xf, {{0x2, 0x1, 0x2, 0x8, 0x7c8, 0xffff8001, {0x6, 0x1ff, 0x8000, 0x3885, 0x2, 0x0, 0x4, 0x80, 0x4a18, 0x2000, 0xfffffffc, 0x0, r3, 0xff, 0x80000000}}, {0x0, 0x2}}}, 0x0, &(0x7f0000001140)={0x130, 0x0, 0x7, {0x72f5, 0x1, 0x0, '\x00', {0x1000, 0x5, 0xfe54, 0x5, 0x0, r5, 0x1000, '\x00', 0x7fff, 0xc, 0x7, 0x800, {0x68c04894, 0x4}, {0x200, 0x80}, {0x0, 0xa94c}, {0x7, 0x4}, 0x1, 0x80, 0x8}}}}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/26, 0x1a}], 0x1) pwrite64(r2, &(0x7f0000000100)="0265", 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0xc1, 0xb3, 0x9a, 0x8, 0x4e6, 0x9, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xe0, 0x22, [{{0x9, 0x4, 0xa2, 0x6, 0x0, 0x69, 0x4b, 0x1, 0x4d}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="859c35"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.962527214s ago: executing program 34 (id=515): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x800) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x20}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = msgget$private(0x0, 0x60) msgctl$MSG_STAT(r5, 0xb, &(0x7f00000000c0)=""/131) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0xfffe, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560af37f0200ff00000000000000005800124824ca945f6400940000000000008000f0fffeffedcbe68b90afb6813510000100080c100094c7ffffcdd37ac036056639067d4bf40173", 0x58}], 0x1) r7 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r7], 0x0) 1.158211163s ago: executing program 35 (id=520): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='X', 0x1}], 0x1}, 0x40c4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4) r4 = creat(0x0, 0x8) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x1, 0x7}}, 0x28) getresgid(&(0x7f0000000fc0)=0x0, &(0x7f0000001000), &(0x7f0000001040)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001780)="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", 0x2000, &(0x7f0000001280)={&(0x7f00000001c0)={0x50, 0x0, 0x24db, {0x7, 0x2b, 0x9, 0xa008, 0x8, 0x401, 0x6, 0x3, 0x0, 0x0, 0x8, 0x5}}, &(0x7f0000000240)={0x18, 0x0, 0xffffffff, {0x8}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x8}}, &(0x7f00000002c0)={0x18, 0xffffffffffffffda, 0x8, {0x6}}, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x8, {0x1}}, &(0x7f0000000400)={0x28, 0x0, 0xffffffffffff0001, {{0x400, 0xd7, 0x2}}}, 0x0, &(0x7f0000000500)={0x18, 0x0, 0x5, {0x6}}, &(0x7f0000000540)={0x19, 0x0, 0x80000000, {'/dev/ppp\x00'}}, &(0x7f0000000580)={0x20, 0x0, 0x3, {0x0, 0x1}}, &(0x7f0000000680)={0x78, 0x0, 0xea85, {0x9000, 0x80, 0x0, {0x2, 0x6f8, 0xff, 0x11802d07, 0xff, 0x8, 0xfffffff5, 0xff, 0x2b, 0x1000, 0xfffffc01, 0x0, 0x0, 0x5, 0xe}}}, &(0x7f0000000840)={0x90, 0x0, 0x8, {0x2, 0x2, 0xfffffffffffffffc, 0x80000001, 0x80, 0x80000001, {0x1, 0x3, 0x4, 0x1, 0x27, 0x7a6, 0x4, 0x0, 0x5, 0xa000, 0x4, 0x0, 0x0, 0xf5, 0xfce3}}}, &(0x7f0000000900)={0x10, 0x0, 0x80000001}, &(0x7f0000000b80)={0x298, 0xfffffffffffffff5, 0x5, [{{0x1, 0x0, 0x0, 0x0, 0x1, 0x300, {0x0, 0x2, 0x4, 0xf0ae, 0x3, 0x10, 0x7, 0x8, 0x787, 0xa000, 0x7ba5, 0x0, 0x0, 0x1, 0x5}}, {0x3, 0x6, 0x6, 0xb, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {{0x0, 0x0, 0x3, 0x43, 0x4, 0xd, {0x5, 0x3, 0x5, 0x59c, 0xd, 0xffffffffffff11ee, 0x0, 0x4, 0x1, 0x1000, 0x81, 0x0, 0x0, 0x0, 0x4}}, {0x4, 0x6, 0x9, 0xa889, '/dev/ppp\x00'}}, {{0x6, 0x2, 0xf0, 0x5, 0x69, 0x2, {0x2, 0x401, 0x2, 0x512e, 0x5, 0x1, 0x4, 0x7fffffff, 0x5, 0x6000, 0x9, 0x0, 0xee01, 0x2, 0x9}}, {0x1, 0x3, 0x3, 0x0, '\xdd\\%'}}, {{0x6, 0x1, 0x4, 0xb, 0x0, 0x4e4, {0x0, 0x100000000, 0x4, 0x7ff, 0x4, 0x3, 0x6, 0x2, 0x10000, 0xc000, 0x7cd9, 0x0, 0x0, 0x6, 0x8}}, {0x1, 0x2, 0x4, 0x7, '[{Y%'}}]}, &(0x7f0000000ec0)={0xa0, 0x0, 0xf, {{0x2, 0x1, 0x2, 0x8, 0x7c8, 0xffff8001, {0x6, 0x1ff, 0x8000, 0x3885, 0x2, 0x0, 0x4, 0x80, 0x4a18, 0x2000, 0xfffffffc, 0x0, r3, 0xff, 0x80000000}}, {0x0, 0x2}}}, 0x0, &(0x7f0000001140)={0x130, 0x0, 0x7, {0x72f5, 0x1, 0x0, '\x00', {0x1000, 0x5, 0xfe54, 0x5, 0x0, r5, 0x1000, '\x00', 0x7fff, 0xc, 0x7, 0x800, {0x68c04894, 0x4}, {0x200, 0x80}, {0x0, 0xa94c}, {0x7, 0x4}, 0x1, 0x80, 0x8}}}}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/26, 0x1a}], 0x1) pwrite64(r2, &(0x7f0000000100)="0265", 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0xc1, 0xb3, 0x9a, 0x8, 0x4e6, 0x9, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xe0, 0x22, [{{0x9, 0x4, 0xa2, 0x6, 0x0, 0x69, 0x4b, 0x1, 0x4d}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="859c35"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) 98.983151ms ago: executing program 36 (id=516): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x64040, 0xc3) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x19) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) open_by_handle_at(r6, &(0x7f00000000c0)=@reiserfs_5={0x14, 0x5, {0x5a2, 0x8, 0x2, 0x8, 0x6}}, 0x185080) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff00000028001a00ffffffff0000000000000000000000aed0000a0101020000000000000000000000000a00eea49620d95fcc12595c0a440a21e91c65195cbac9a8c246b3fc0f750dc94ec8852d6b0a68c7ac9d80334c8404b1a6dca6ee6a97c5693839e68198a77a0de32da621274db5b8ca1687aebcfedad7d161761bfcd6c6f6fdd0ac4f214aeefb1ef52bd105620576746491a152085bc6aab2ac62a4c445c10a5b5a11785bc281107c587191979536312d7e71267fe7d7cdf60c41f60f87653281151c2a7ffdf0dc24c22c8cbfac3e8bf42a9c2fb01a42f8ec3e830aa4d4c9b633f9dc7b44e49e14a90a03dec6cdc347d358e007b7bb3cbea33a001feac87a91035275165af57556190a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) r8 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f00000002c0)=0x10) 0s ago: executing program 37 (id=517): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = syz_open_dev$evdev(0x0, 0x2, 0x20180) ioctl$EVIOCGABS20(r2, 0x80184560, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x80, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000391d1079f6ea04d7c"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, ',/]&!,\\.'}], 0xa, "19925ae42d4ef370e5cf2dacc271f3a2e7575d2b8d3adec75b9343c2b00b2c87e3e54e54f8482925a7d6083e979524cab66fcec9a8fa871b46610dd5d7ee0bd2a98a0d17ae31ccd1dcd6767a"}, 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, 0x0, 0x6) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x28000) mprotect(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x19, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723", 0xd5}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x7, &(0x7f0000000180)=[{0x29, 0x7f, 0x2, 0x6}, {0x2, 0x7, 0x7f, 0x3ff}, {0xfff7, 0x6, 0x9, 0x2}, {0x8000, 0x80, 0xc, 0x8}, {0xd6b1, 0x4, 0x9, 0x3}, {0x0, 0x4, 0xb, 0x7}, {0x9, 0x5, 0x9, 0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vbi(0x0, 0x1, 0x2) kernel console output (not intermixed with test programs): ptor read/8, error -71 [ 130.137442][ T5903] usb usb2-port1: unable to enumerate USB device [ 130.788902][ T5903] usb 3-1: USB disconnect, device number 16 [ 131.487292][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 131.556117][ T5916] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 131.677889][ T24] usb 3-1: device descriptor read/64, error -71 [ 131.836574][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 131.896106][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 131.970151][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.023893][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.033845][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 132.076978][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.095534][ T9] usb 4-1: config 7 has an invalid interface number: 112 but max is 0 [ 132.106886][ T9] usb 4-1: config 7 has no interface number 0 [ 132.113044][ T9] usb 4-1: config 7 interface 112 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 132.123369][ T5916] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 132.136110][ T9] usb 4-1: config 7 interface 112 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 132.148573][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.151993][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=d0.57 [ 132.170507][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.179866][ T9] usb 4-1: Product: syz [ 132.186057][ T24] usb 3-1: device descriptor read/64, error -71 [ 132.186469][ T9] usb 4-1: Manufacturer: syz [ 132.197707][ T9] usb 4-1: SerialNumber: syz [ 132.216017][ T5916] usb 1-1: config 0 descriptor?? [ 132.232119][ T6767] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 132.242504][ T6767] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 132.306270][ T24] usb usb3-port1: attempt power cycle [ 132.553644][ T5916] kone 0003:1E7D:2CED.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 132.709685][ T5916] kone 0003:1E7D:2CED.0007: couldn't init struct kone_device [ 132.717293][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 132.753104][ T5916] kone 0003:1E7D:2CED.0007: couldn't install mouse [ 132.771512][ T5916] kone 0003:1E7D:2CED.0007: probe with driver kone failed with error -5 [ 132.785027][ T24] usb 3-1: device descriptor read/8, error -71 [ 132.812163][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.819346][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.951353][ T5916] usb 1-1: USB disconnect, device number 22 [ 133.126121][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 133.156768][ T24] usb 3-1: device descriptor read/8, error -71 [ 133.248247][ T6780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.338998][ T24] usb usb3-port1: unable to enumerate USB device [ 133.439074][ T30] audit: type=1326 audit(1760273688.509:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c78eec9 code=0x7ffc0000 [ 133.461182][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.515783][ T30] audit: type=1326 audit(1760273688.539:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c78eec9 code=0x7ffc0000 [ 133.546201][ T5896] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 133.562657][ T30] audit: type=1326 audit(1760273688.539:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f881c78d710 code=0x7ffc0000 [ 133.596993][ T30] audit: type=1326 audit(1760273688.539:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881c78eacb code=0x7ffc0000 [ 133.632761][ T30] audit: type=1326 audit(1760273688.539:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881c78eacb code=0x7ffc0000 [ 133.687856][ T30] audit: type=1326 audit(1760273688.539:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881c78eacb code=0x7ffc0000 [ 133.716985][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.726177][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 133.743790][ T5896] usb 2-1: not running at top speed; connect to a high speed hub [ 133.759716][ T5896] usb 2-1: config 129 has an invalid interface number: 28 but max is 0 [ 133.773015][ T5896] usb 2-1: config 129 has no interface number 0 [ 133.781681][ T30] audit: type=1326 audit(1760273688.539:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881c78eacb code=0x7ffc0000 [ 133.815787][ T5896] usb 2-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 133.840489][ T5896] usb 2-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 133.864479][ T30] audit: type=1326 audit(1760273688.669:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881c78eacb code=0x7ffc0000 [ 133.896816][ T5896] usb 2-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.912872][ T5896] usb 2-1: config 129 interface 28 has no altsetting 0 [ 133.920083][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 133.937902][ T30] audit: type=1326 audit(1760273688.739:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881c78eacb code=0x7ffc0000 [ 133.967240][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 133.977642][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.987313][ T24] usb 1-1: Product: syz [ 133.992308][ T24] usb 1-1: Manufacturer: syz [ 133.997282][ T5896] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 134.007093][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.018566][ T5896] usb 2-1: Product: syz [ 134.023368][ T5896] usb 2-1: Manufacturer: 㑭罸﵂趼嬇ᓝ婜軒⬟銤 [ 134.031021][ T24] usb 1-1: SerialNumber: syz [ 134.035758][ T30] audit: type=1326 audit(1760273688.809:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f881c78eacb code=0x7ffc0000 [ 134.058227][ T5896] usb 2-1: SerialNumber: syz [ 134.070865][ T6786] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.081222][ T24] usb 1-1: config 0 descriptor?? [ 134.180108][ T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 134.334754][ T5896] etas_es58x 2-1:129.28: Starting 㑭罸﵂趼嬇ᓝ婜軒⬟銤 syz (Serial Number syz) [ 134.380396][ T5896] etas_es58x 2-1:129.28: could not retrieve the product info string [ 134.444833][ T6792] fuse: Bad value for 'user_id' [ 134.454603][ T9] pn533_usb 4-1:7.112: NFC: Could not find bulk-in or bulk-out endpoint [ 134.499441][ T6792] fuse: Bad value for 'user_id' [ 134.548229][ T9] usb 4-1: USB disconnect, device number 16 [ 134.577920][ T5896] usb 2-1: USB disconnect, device number 13 [ 134.599520][ T6797] program syz.2.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.611473][ T5896] etas_es58x 2-1:129.28: Disconnecting 㑭罸﵂趼嬇ᓝ婜軒⬟銤 syz [ 134.646847][ T24] gspca_sn9c20x: Write register 1001 failed -71 [ 134.681794][ T24] gspca_sn9c20x: Device initialization failed [ 134.710765][ T24] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 134.736099][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 134.750826][ T24] usb 1-1: USB disconnect, device number 23 [ 134.769638][ T6800] netlink: 88 bytes leftover after parsing attributes in process `syz.3.204'. [ 134.780732][ T6799] delete_channel: no stack [ 134.946257][ T5941] IPVS: starting estimator thread 0... [ 134.986124][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 134.995155][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.009058][ T5888] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 135.017917][ T5888] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 135.036173][ T6805] IPVS: using max 38 ests per chain, 91200 per kthread [ 135.046770][ T5888] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 135.130743][ T5888] usb 5-1: config 128 has no interface number 0 [ 135.202239][ T5888] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33442, setting to 64 [ 135.270049][ T5888] usb 5-1: config 128 interface 127 has no altsetting 0 [ 135.327833][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 135.356199][ T5888] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 135.381222][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.404877][ T5888] usb 5-1: Product: syz [ 135.420991][ T5888] usb 5-1: Manufacturer: syz [ 135.428854][ T5888] usb 5-1: SerialNumber: syz [ 135.506261][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 135.602724][ T24] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.622888][ T24] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.661200][ T6815] ip6gre1: entered promiscuous mode [ 135.758583][ T24] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.870538][ T5888] usb 5-1: USB disconnect, device number 12 [ 135.897079][ T24] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.923930][ T24] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.974471][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.989037][ T24] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 136.096022][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.143259][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.216120][ T5903] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 136.218239][ T24] usb 4-1: config 0 descriptor?? [ 137.025894][ T6835] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[6835] [ 138.928302][ T5941] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 139.088092][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.103729][ T5941] usb 3-1: config 0 has no interfaces? [ 139.118655][ T5941] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 139.143095][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.182907][ T5941] usb 3-1: Product: syz [ 139.195768][ T5941] usb 3-1: Manufacturer: syz [ 139.212527][ T5941] usb 3-1: SerialNumber: syz [ 139.226098][ T5903] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 139.248910][ T5941] usb 3-1: config 0 descriptor?? [ 139.447613][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.519613][ T6857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.520614][ T5903] usb 1-1: config 0 has no interfaces? [ 139.556728][ T6857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.598515][ T5903] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 139.618504][ T5888] usb 3-1: USB disconnect, device number 21 [ 139.667050][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.708135][ T5903] usb 1-1: Product: syz [ 139.712342][ T5903] usb 1-1: Manufacturer: syz [ 139.752844][ T5903] usb 1-1: SerialNumber: syz [ 139.803126][ T5903] usb 1-1: config 0 descriptor?? [ 139.812259][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 139.852294][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.866332][ T5941] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 139.907542][ T24] usb 4-1: USB disconnect, device number 17 [ 140.043830][ T6859] FAULT_INJECTION: forcing a failure. [ 140.043830][ T6859] name failslab, interval 1, probability 0, space 0, times 1 [ 140.058466][ T6859] CPU: 1 UID: 0 PID: 6859 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT(full) [ 140.058482][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.058493][ T6859] Call Trace: [ 140.058498][ T6859] [ 140.058503][ T6859] dump_stack_lvl+0x189/0x250 [ 140.058524][ T6859] ? __pfx____ratelimit+0x10/0x10 [ 140.058539][ T6859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.058549][ T6859] ? __pfx__printk+0x10/0x10 [ 140.058562][ T6859] ? __pfx___might_resched+0x10/0x10 [ 140.058577][ T6859] should_fail_ex+0x414/0x560 [ 140.058595][ T6859] should_failslab+0xa8/0x100 [ 140.058608][ T6859] __kmalloc_noprof+0xcb/0x7f0 [ 140.058618][ T6859] ? kfree+0x4d/0x6d0 [ 140.058625][ T6859] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 140.058640][ T6859] tomoyo_realpath_from_path+0xe3/0x5d0 [ 140.058652][ T6859] ? tomoyo_domain+0xd9/0x130 [ 140.058666][ T6859] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 140.058679][ T6859] tomoyo_path_number_perm+0x1e8/0x5a0 [ 140.058694][ T6859] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.058727][ T6859] ? __fget_files+0x2a/0x420 [ 140.058741][ T6859] ? __fget_files+0x3a0/0x420 [ 140.058751][ T6859] ? __fget_files+0x2a/0x420 [ 140.058764][ T6859] security_file_ioctl+0xcb/0x2d0 [ 140.058778][ T6859] __se_sys_ioctl+0x47/0x170 [ 140.058789][ T6859] do_syscall_64+0xfa/0xfa0 [ 140.058804][ T6859] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.058814][ T6859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.058823][ T6859] ? clear_bhb_loop+0x60/0xb0 [ 140.058835][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.058844][ T6859] RIP: 0033:0x7f881c78eec9 [ 140.058857][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.058869][ T6859] RSP: 002b:00007f881a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.058880][ T6859] RAX: ffffffffffffffda RBX: 00007f881c9e5fa0 RCX: 00007f881c78eec9 [ 140.058887][ T6859] RDX: 0000200000000200 RSI: 00000000800c5012 RDI: 0000000000000003 [ 140.058893][ T6859] RBP: 00007f881a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.058899][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.058904][ T6859] R13: 00007f881c9e6038 R14: 00007f881c9e5fa0 R15: 00007f881cb0fa28 [ 140.058920][ T6859] [ 140.058924][ T6859] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.236265][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.336400][ T5941] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.375505][ T5941] usb 5-1: not running at top speed; connect to a high speed hub [ 140.401578][ T5941] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 140.410844][ T5941] usb 5-1: config 0 has no interface number 0 [ 140.437864][ T5941] usb 5-1: config 0 interface 93 has no altsetting 0 [ 140.445542][ T5888] usb 1-1: USB disconnect, device number 25 [ 140.476552][ T5941] usb 5-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 140.526232][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.579492][ T5916] IPVS: starting estimator thread 0... [ 140.596856][ T5941] usb 5-1: Product: syz [ 140.603301][ T5941] usb 5-1: Manufacturer: syz [ 140.611321][ T5941] usb 5-1: SerialNumber: syz [ 140.635471][ T5941] usb 5-1: config 0 descriptor?? [ 140.686269][ T6881] IPVS: using max 49 ests per chain, 117600 per kthread [ 140.948107][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 140.979326][ T5941] usb 5-1: unknown interface protocol 0x1a, assuming v1 [ 140.991373][ T5941] usb 5-1: cannot find UAC_HEADER [ 141.069920][ T5941] snd-usb-audio 5-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 141.305870][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 141.324589][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.93/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.352375][ T5941] usb 5-1: USB disconnect, device number 13 [ 141.371194][ T5916] usb 4-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 141.402474][ T5916] usb 4-1: config 0 interface 0 altsetting 109 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.520998][ T5916] usb 4-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 141.592953][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.623735][ T5916] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 141.753526][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.849008][ T5916] usb 4-1: config 0 descriptor?? [ 141.907081][ T5941] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 142.168802][ T5941] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 142.180791][ T5941] usb 5-1: config 0 has no interface number 0 [ 142.213167][ T5941] usb 5-1: config 0 interface 29 has no altsetting 0 [ 142.247556][ T5941] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 142.276196][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.368655][ T5941] usb 5-1: Product: syz [ 142.372998][ T5941] usb 5-1: Manufacturer: syz [ 142.377690][ T5941] usb 5-1: SerialNumber: syz [ 142.385590][ T5941] usb 5-1: config 0 descriptor?? [ 142.393190][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.226'. [ 142.639760][ T5941] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 142.866638][ T5941] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 142.972217][ T5941] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 143.207969][ T5941] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 143.344972][ T5941] usb 5-1: USB disconnect, device number 14 [ 143.475832][ T6909] fuse: Unknown parameter 'ro|Gotmode' [ 143.501546][ T6912] fuse: Unknown parameter 'ro|Gotmode' [ 143.607917][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 143.620155][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 143.650103][ T5916] usb 4-1: USB disconnect, device number 18 [ 144.156786][ T5916] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 144.306065][ T5903] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 144.393261][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.405634][ T5916] usb 4-1: config 0 has no interfaces? [ 144.473236][ T5916] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 144.482471][ T5903] usb 5-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 144.489831][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.502294][ T5916] usb 4-1: Product: syz [ 144.534195][ T5916] usb 4-1: Manufacturer: syz [ 144.538829][ T5916] usb 4-1: SerialNumber: syz [ 144.547034][ T5916] usb 4-1: config 0 descriptor?? [ 144.569378][ T5903] usb 5-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 144.591973][ T5903] usb 5-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 144.647404][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.659543][ T5903] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 144.726276][ T5919] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 144.756842][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.806628][ T6923] FAULT_INJECTION: forcing a failure. [ 144.806628][ T6923] name failslab, interval 1, probability 0, space 0, times 0 [ 144.806992][ T5903] usb 5-1: config 0 descriptor?? [ 144.820431][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT(full) [ 144.820453][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.820470][ T6923] Call Trace: [ 144.820477][ T6923] [ 144.820484][ T6923] dump_stack_lvl+0x189/0x250 [ 144.820507][ T6923] ? __pfx____ratelimit+0x10/0x10 [ 144.820532][ T6923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.820550][ T6923] ? __pfx__printk+0x10/0x10 [ 144.820573][ T6923] ? __pfx___might_resched+0x10/0x10 [ 144.820593][ T6923] ? fs_reclaim_acquire+0x7d/0x100 [ 144.820618][ T6923] should_fail_ex+0x414/0x560 [ 144.820648][ T6923] should_failslab+0xa8/0x100 [ 144.820670][ T6923] __kmalloc_noprof+0xcb/0x7f0 [ 144.820688][ T6923] ? tomoyo_encode+0x28b/0x550 [ 144.820712][ T6923] tomoyo_encode+0x28b/0x550 [ 144.820736][ T6923] tomoyo_realpath_from_path+0x58d/0x5d0 [ 144.820765][ T6923] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 144.820789][ T6923] tomoyo_path_number_perm+0x1e8/0x5a0 [ 144.820815][ T6923] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 144.820876][ T6923] ? __fget_files+0x2a/0x420 [ 144.820900][ T6923] ? __fget_files+0x3a0/0x420 [ 144.820919][ T6923] ? __fget_files+0x2a/0x420 [ 144.820942][ T6923] security_file_ioctl+0xcb/0x2d0 [ 144.820967][ T6923] __se_sys_ioctl+0x47/0x170 [ 144.820986][ T6923] do_syscall_64+0xfa/0xfa0 [ 144.821001][ T6923] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.821017][ T6923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.821034][ T6923] ? clear_bhb_loop+0x60/0xb0 [ 144.821054][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.821070][ T6923] RIP: 0033:0x7f1b5ef8eec9 [ 144.821086][ T6923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.821100][ T6923] RSP: 002b:00007f1b5fe7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.821118][ T6923] RAX: ffffffffffffffda RBX: 00007f1b5f1e5fa0 RCX: 00007f1b5ef8eec9 [ 144.821130][ T6923] RDX: 0000200000000200 RSI: 00000000800c5012 RDI: 0000000000000003 [ 144.821141][ T6923] RBP: 00007f1b5fe7f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.821151][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.821161][ T6923] R13: 00007f1b5f1e6038 R14: 00007f1b5f1e5fa0 R15: 00007f1b5f30fa28 [ 144.821190][ T6923] [ 144.821209][ T6923] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.318507][ T24] usb 4-1: USB disconnect, device number 19 [ 145.546083][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 145.568856][ T5919] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 145.591713][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.602208][ T5919] usb 1-1: config 0 has no interface number 0 [ 145.614358][ T5919] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 145.634922][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.654319][ T5919] usb 1-1: Product: syz [ 145.658722][ T5919] usb 1-1: Manufacturer: syz [ 145.666038][ T5919] usb 1-1: SerialNumber: syz [ 145.682778][ T5919] usb 1-1: config 0 descriptor?? [ 145.699629][ T5919] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 145.716588][ T5919] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 145.736335][ T5903] usb 5-1: string descriptor 0 read error: -71 [ 145.779037][ T5903] usb 5-1: USB disconnect, device number 15 [ 146.272774][ T6946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.593566][ T6953] program syz.4.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.826177][ T5903] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 147.114413][ T6972] netlink: 'syz.1.245': attribute type 1 has an invalid length. [ 147.155711][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.197278][ T6972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.239862][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.279708][ T6972] vlan2: entered allmulticast mode [ 147.311953][ T6972] bond2: entered allmulticast mode [ 147.326128][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.365614][ T5903] usb 4-1: SerialNumber: syz [ 147.444225][ T5903] usb 4-1: bad CDC descriptors [ 147.477806][ T5919] usb 1-1: USB disconnect, device number 26 [ 147.508329][ T6973] bond2: (slave gretap1): making interface the new active one [ 147.537925][ T6973] gretap1: entered allmulticast mode [ 147.546649][ T6973] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 147.892485][ T10] usb 4-1: USB disconnect, device number 20 [ 148.183134][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 148.399770][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.466075][ T9] usb 3-1: config 0 has no interfaces? [ 148.499823][ T9] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 148.526784][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.540508][ T9] usb 3-1: Product: syz [ 148.544768][ T9] usb 3-1: Manufacturer: syz [ 148.550901][ T9] usb 3-1: SerialNumber: syz [ 148.563348][ T9] usb 3-1: config 0 descriptor?? [ 148.775162][ T6987] FAULT_INJECTION: forcing a failure. [ 148.775162][ T6987] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.866118][ T116] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 148.877555][ T6987] CPU: 1 UID: 0 PID: 6987 Comm: syz.2.249 Not tainted syzkaller #0 PREEMPT(full) [ 148.877578][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.877587][ T6987] Call Trace: [ 148.877594][ T6987] [ 148.877601][ T6987] dump_stack_lvl+0x189/0x250 [ 148.877624][ T6987] ? __pfx____ratelimit+0x10/0x10 [ 148.877647][ T6987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.877664][ T6987] ? __pfx__printk+0x10/0x10 [ 148.877692][ T6987] should_fail_ex+0x414/0x560 [ 148.877719][ T6987] _copy_to_user+0x31/0xb0 [ 148.877742][ T6987] snd_pcm_oss_get_ptr+0xc4a/0xdd0 [ 148.877771][ T6987] ? __pfx_snd_pcm_oss_get_ptr+0x10/0x10 [ 148.877793][ T6987] ? __fget_files+0x2a/0x420 [ 148.877816][ T6987] ? __fget_files+0x3a0/0x420 [ 148.877837][ T6987] snd_pcm_oss_ioctl+0x81f/0xdd0 [ 148.877856][ T6987] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 148.877874][ T6987] __se_sys_ioctl+0xfc/0x170 [ 148.877891][ T6987] do_syscall_64+0xfa/0xfa0 [ 148.877905][ T6987] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.877919][ T6987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.877934][ T6987] ? clear_bhb_loop+0x60/0xb0 [ 148.877953][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.877968][ T6987] RIP: 0033:0x7f2ef618eec9 [ 148.877982][ T6987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.877994][ T6987] RSP: 002b:00007f2ef6ff3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.878010][ T6987] RAX: ffffffffffffffda RBX: 00007f2ef63e5fa0 RCX: 00007f2ef618eec9 [ 148.878021][ T6987] RDX: 0000200000000200 RSI: 00000000800c5012 RDI: 0000000000000003 [ 148.878029][ T6987] RBP: 00007f2ef6ff3090 R08: 0000000000000000 R09: 0000000000000000 [ 148.878038][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.878046][ T6987] R13: 00007f2ef63e6038 R14: 00007f2ef63e5fa0 R15: 00007f2ef650fa28 [ 148.878075][ T6987] [ 148.879996][ T5919] usb 3-1: USB disconnect, device number 22 [ 149.079705][ T116] usb 2-1: Using ep0 maxpacket: 16 [ 149.084698][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.120127][ T116] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 149.146818][ T116] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 149.211498][ T116] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 149.347563][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.406037][ T116] usb 2-1: Product: syz [ 149.427615][ T116] usb 2-1: Manufacturer: syz [ 149.443532][ T116] usb 2-1: SerialNumber: syz [ 149.546752][ T116] usb 2-1: config 0 descriptor?? [ 149.632118][ T6996] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.820355][ T116] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 149.841503][ T116] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 149.916092][ T116] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 149.929904][ T116] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 149.985642][ T116] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 150.068921][ T116] usb 2-1: USB disconnect, device number 14 [ 150.099565][ T116] mcba_usb 2-1:0.0 can0: device disconnected [ 150.257325][ T5916] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 150.406248][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 150.416075][ T5916] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 150.426338][ T5916] usb 4-1: config 4 has no interface number 0 [ 150.432462][ T5916] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.469718][ T5916] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.511115][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 150.546125][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.573570][ T5916] hub 4-1:4.128: USB hub found [ 150.578560][ T5896] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 150.772680][ T5916] hub 4-1:4.128: 2 ports detected [ 150.788440][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.803848][ T5916] hub 4-1:4.128: Using single TT (err -22) [ 150.816002][ T5896] usb 3-1: config 0 has no interfaces? [ 150.830595][ T5896] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 150.842315][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.871570][ T5896] usb 3-1: Product: syz [ 150.880139][ T5896] usb 3-1: Manufacturer: syz [ 150.885035][ T5896] usb 3-1: SerialNumber: syz [ 150.903513][ T5896] usb 3-1: config 0 descriptor?? [ 151.123378][ T5896] usb 3-1: USB disconnect, device number 23 [ 151.136097][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 151.302023][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 151.353565][ T9] usb 2-1: config 0 has no interface number 0 [ 151.403034][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 151.432495][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.445291][ T9] usb 2-1: Product: syz [ 151.452270][ T5916] usb 4-1: USB disconnect, device number 21 [ 151.456068][ T9] usb 2-1: Manufacturer: syz [ 151.463729][ T9] usb 2-1: SerialNumber: syz [ 151.506920][ T9] usb 2-1: config 0 descriptor?? [ 151.525601][ T9] hub 2-1:0.132: bad descriptor, ignoring hub [ 151.548372][ T9] hub 2-1:0.132: probe with driver hub failed with error -5 [ 151.580592][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input10 [ 151.787797][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 152.290085][ T7035] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 152.296797][ T7035] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.336422][ T7040] netlink: 'syz.0.261': attribute type 13 has an invalid length. [ 152.357400][ T7035] vhci_hcd vhci_hcd.0: Device attached [ 152.417973][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.261'. [ 152.607793][ T7040] gretap0: refused to change device tx_queue_len [ 152.646804][ T7040] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 152.666076][ T116] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 152.673860][ T5896] usb 34-1: SetAddress Request (2) to port 0 [ 152.686454][ T5896] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 152.895193][ T7042] vhci_hcd: connection reset by peer [ 152.906993][ T13] vhci_hcd: stop threads [ 152.910940][ T5916] usb 2-1: USB disconnect, device number 15 [ 152.911316][ T13] vhci_hcd: release socket [ 152.929331][ T13] vhci_hcd: disconnect device [ 152.929456][ T116] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.957099][ T116] usb 3-1: config 0 has no interfaces? [ 152.969126][ T116] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 152.985809][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.994694][ T116] usb 3-1: Product: syz [ 153.000565][ T116] usb 3-1: Manufacturer: syz [ 153.005622][ T116] usb 3-1: SerialNumber: syz [ 153.015165][ T116] usb 3-1: config 0 descriptor?? [ 153.267698][ T7045] FAULT_INJECTION: forcing a failure. [ 153.267698][ T7045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.323128][ T7045] CPU: 1 UID: 0 PID: 7045 Comm: syz.2.264 Not tainted syzkaller #0 PREEMPT(full) [ 153.323148][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.323154][ T7045] Call Trace: [ 153.323159][ T7045] [ 153.323164][ T7045] dump_stack_lvl+0x189/0x250 [ 153.323180][ T7045] ? __pfx____ratelimit+0x10/0x10 [ 153.323195][ T7045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.323204][ T7045] ? __pfx__printk+0x10/0x10 [ 153.323221][ T7045] should_fail_ex+0x414/0x560 [ 153.323238][ T7045] _copy_to_user+0x31/0xb0 [ 153.323259][ T7045] simple_read_from_buffer+0xe1/0x170 [ 153.323283][ T7045] proc_fail_nth_read+0x1b3/0x220 [ 153.323309][ T7045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.323335][ T7045] ? rw_verify_area+0x2a6/0x4d0 [ 153.323350][ T7045] ? __lock_acquire+0xab9/0xd20 [ 153.323370][ T7045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.323388][ T7045] vfs_read+0x200/0xa30 [ 153.323398][ T7045] ? fdget_pos+0x247/0x320 [ 153.323411][ T7045] ? __pfx___mutex_lock+0x10/0x10 [ 153.323422][ T7045] ? __pfx_vfs_read+0x10/0x10 [ 153.323432][ T7045] ? __fget_files+0x2a/0x420 [ 153.323445][ T7045] ? __fget_files+0x3a0/0x420 [ 153.323455][ T7045] ? __fget_files+0x2a/0x420 [ 153.323471][ T7045] ksys_read+0x145/0x250 [ 153.323482][ T7045] ? __pfx_ksys_read+0x10/0x10 [ 153.323494][ T7045] ? do_syscall_64+0xbe/0xfa0 [ 153.323505][ T7045] do_syscall_64+0xfa/0xfa0 [ 153.323514][ T7045] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.323523][ T7045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.323532][ T7045] ? clear_bhb_loop+0x60/0xb0 [ 153.323544][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.323553][ T7045] RIP: 0033:0x7f2ef618d8dc [ 153.323563][ T7045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.323571][ T7045] RSP: 002b:00007f2ef6ff3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.323582][ T7045] RAX: ffffffffffffffda RBX: 00007f2ef63e5fa0 RCX: 00007f2ef618d8dc [ 153.323589][ T7045] RDX: 000000000000000f RSI: 00007f2ef6ff30a0 RDI: 0000000000000006 [ 153.323594][ T7045] RBP: 00007f2ef6ff3090 R08: 0000000000000000 R09: 0000000000000000 [ 153.323600][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.323605][ T7045] R13: 00007f2ef63e6038 R14: 00007f2ef63e5fa0 R15: 00007f2ef650fa28 [ 153.323621][ T7045] [ 153.341850][ T856] usb 3-1: USB disconnect, device number 24 [ 154.435682][ T5916] IPVS: starting estimator thread 0... [ 154.546296][ T7092] IPVS: using max 30 ests per chain, 72000 per kthread [ 155.036042][ T856] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 155.156869][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 155.185452][ T7109] capability: warning: `syz.0.278' uses 32-bit capabilities (legacy support in use) [ 155.219653][ T856] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 155.228964][ T856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.363155][ T856] usb 5-1: config 0 descriptor?? [ 155.679935][ T7115] netlink: 'syz.0.279': attribute type 30 has an invalid length. [ 155.711770][ T7115] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 155.740922][ T7119] netlink: 232 bytes leftover after parsing attributes in process `syz.0.279'. [ 155.752656][ T7115] bond1 (unregistering): Released all slaves [ 155.789029][ T7118] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.996303][ T5916] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 156.028617][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 156.127724][ T856] ath6kl: mismatched byte count 0 vs. expected 12 [ 156.300601][ T856] ath6kl: Failed to init ath6kl core: -22 [ 156.329913][ T5916] usb 1-1: device descriptor read/64, error -71 [ 156.333647][ T856] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 156.355154][ T7124] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.466080][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 156.478068][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 156.497648][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.505920][ T9] usb 4-1: Product: syz [ 156.520046][ T9] usb 4-1: Manufacturer: syz [ 156.524874][ T9] usb 4-1: SerialNumber: syz [ 156.543453][ T9] usb 4-1: config 0 descriptor?? [ 156.617885][ T5916] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 156.876063][ T5916] usb 1-1: device descriptor read/64, error -71 [ 156.996523][ T5916] usb usb1-port1: attempt power cycle [ 157.123968][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 157.134746][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.154915][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 157.183626][ T9] usb 4-1: media controller created [ 157.245269][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.324828][ T7118] dtv5100: wlen = 0, aborting. [ 157.336121][ T5916] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 157.375659][ T5916] usb 1-1: device descriptor read/8, error -71 [ 157.481049][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 157.502158][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 157.518294][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 157.559740][ T5919] usb 5-1: USB disconnect, device number 16 [ 157.578242][ T9] usb 4-1: USB disconnect, device number 22 [ 157.666173][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 157.716083][ T5916] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 157.772602][ T5896] usb 34-1: device descriptor read/8, error -110 [ 157.809829][ T5916] usb 1-1: device descriptor read/8, error -71 [ 157.929583][ T5916] usb usb1-port1: unable to enumerate USB device [ 158.177183][ T5916] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 158.185461][ T5896] usb usb34-port1: attempt power cycle [ 158.336031][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 159.209171][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.299962][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.361218][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.373441][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.385658][ T5916] usb 5-1: config 0 descriptor?? [ 159.414077][ T5916] hub 5-1:0.0: USB hub found [ 159.419582][ T5896] usb usb34-port1: unable to enumerate USB device [ 159.567278][ T24] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 159.596415][ T5916] hub 5-1:0.0: 26 ports detected [ 159.602183][ T5916] hub 5-1:0.0: insufficient power available to use all downstream ports [ 160.135530][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.146544][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.208956][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 160.248786][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.266265][ T24] usb 3-1: SerialNumber: syz [ 160.369534][ T24] usb 3-1: invalid UAC_HEADER (v1) [ 160.636085][ T5916] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 160.647464][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 160.679155][ T5916] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 160.718823][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.856398][ T5916] usbhid 5-1:0.0: can't add hid device: -71 [ 160.943876][ T5916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 161.359968][ T7175] geneve3: entered allmulticast mode [ 161.392787][ T5916] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 161.743262][ T5916] usb 5-1: device firmware changed [ 161.801958][ T5916] usb 5-1: USB disconnect, device number 17 [ 161.997562][ T7185] fuse: blksize only supported for fuseblk [ 162.266435][ T5916] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 162.312032][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 162.369507][ T5888] usb 3-1: USB disconnect, device number 25 [ 162.458652][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 162.543652][ T5916] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 162.585999][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.649383][ T5916] usb 5-1: config 0 descriptor?? [ 162.656079][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 162.858739][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.928502][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.928517][ T5916] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 162.937707][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.981654][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 163.016831][ T5916] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 163.046158][ T5916] usb 5-1: media controller created [ 163.046555][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.092731][ T9] usb 2-1: config 0 descriptor?? [ 163.160535][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.360221][ T5919] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 163.429569][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 163.435587][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 163.457295][ T9] usb 2-1: USB disconnect, device number 16 [ 163.534111][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.545730][ T5919] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 163.555013][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.567153][ T5919] usb 4-1: config 0 descriptor?? [ 163.576656][ T5919] pwc: Askey VC010 type 2 USB webcam detected. [ 163.894209][ T7220] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 164.228900][ T5916] az6027: usb out operation failed. (-71) [ 164.234086][ T5919] pwc: recv_control_msg error -71 req 02 val 2b00 [ 164.241727][ T5916] stb0899_attach: Driver disabled by Kconfig [ 164.241743][ T5916] az6027: no front-end attached [ 164.241743][ T5916] [ 164.242115][ T5916] az6027: usb out operation failed. (-71) [ 164.252613][ T5919] pwc: recv_control_msg error -71 req 02 val 2700 [ 164.387955][ T5916] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 164.425919][ T7231] binder: BINDER_SET_CONTEXT_MGR already set [ 164.435727][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 164.606065][ T5919] pwc: recv_control_msg error -71 req 02 val 2c00 [ 164.616118][ T5916] dvb-usb: schedule remote query interval to 400 msecs. [ 164.625213][ T7231] binder: 7230:7231 ioctl 4018620d 200000000100 returned -16 [ 164.632495][ T5916] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 164.648528][ T5916] usb 5-1: USB disconnect, device number 18 [ 164.702786][ T5919] pwc: recv_control_msg error -71 req 04 val 1000 [ 164.711994][ T5919] pwc: recv_control_msg error -71 req 04 val 1300 [ 164.720755][ T5919] pwc: recv_control_msg error -71 req 04 val 1400 [ 164.727767][ T5919] pwc: recv_control_msg error -71 req 02 val 2000 [ 164.825504][ T7238] tipc: Enabling of bearer rejected, failed to enable media [ 164.848216][ T5919] pwc: recv_control_msg error -71 req 02 val 2100 [ 164.898522][ T5919] pwc: recv_control_msg error -71 req 04 val 1500 [ 165.006362][ T5919] pwc: recv_control_msg error -71 req 02 val 2500 [ 165.059315][ T5919] pwc: recv_control_msg error -71 req 02 val 2400 [ 165.082407][ T5919] pwc: recv_control_msg error -71 req 02 val 2600 [ 165.096365][ T5919] pwc: recv_control_msg error -71 req 02 val 2900 [ 165.116632][ T5919] pwc: recv_control_msg error -71 req 02 val 2800 [ 165.131931][ T5919] pwc: recv_control_msg error -71 req 04 val 1100 [ 165.164712][ T5919] pwc: recv_control_msg error -71 req 04 val 1200 [ 165.189114][ T5919] pwc: Registered as video103. [ 165.298850][ T5919] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 166.077980][ T5919] usb 4-1: USB disconnect, device number 23 [ 166.169842][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 166.716082][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 166.766056][ T116] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 166.887852][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.905892][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.929671][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.954456][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.963805][ T116] usb 2-1: Using ep0 maxpacket: 32 [ 166.970747][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.983248][ T116] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.995060][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 167.009420][ T24] usb 4-1: config 0 descriptor?? [ 167.015434][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.032250][ T116] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 167.056840][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.096435][ T5919] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 167.098639][ T116] usb 2-1: config 0 descriptor?? [ 167.157373][ T7265] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 167.194114][ T116] hub 2-1:0.0: USB hub found [ 167.283081][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 167.296199][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 167.317335][ T24] usb 4-1: USB disconnect, device number 24 [ 167.334101][ T5919] usb 3-1: No LPM exit latency info found, disabling LPM. [ 167.350161][ T5919] usb 3-1: config 128 has an invalid interface number: 7 but max is 1 [ 167.359481][ T5919] usb 3-1: config 128 has an invalid interface number: 31 but max is 1 [ 167.388584][ T5919] usb 3-1: config 128 has an invalid interface number: 225 but max is 1 [ 167.399657][ T5919] usb 3-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 167.408821][ T5919] usb 3-1: config 128 has an invalid interface number: 5 but max is 1 [ 167.447986][ T5919] usb 3-1: config 128 has 4 interfaces, different from the descriptor's value: 2 [ 167.506606][ T5919] usb 3-1: config 128 has no interface number 0 [ 167.525175][ T5919] usb 3-1: config 128 has no interface number 1 [ 167.535920][ T5919] usb 3-1: config 128 has no interface number 2 [ 167.543070][ T5919] usb 3-1: config 128 has no interface number 3 [ 167.550118][ T5919] usb 3-1: config 128 interface 7 altsetting 2 endpoint 0x5 has invalid maxpacket 32, setting to 8 [ 167.581959][ T5919] usb 3-1: config 128 interface 7 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 167.584280][ T116] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 167.598564][ T5919] usb 3-1: too many endpoints for config 128 interface 31 altsetting 234: 107, using maximum allowed: 30 [ 167.626380][ T5919] usb 3-1: config 128 interface 31 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 167.644788][ T116] usbhid 2-1:0.0: can't add hid device: -71 [ 167.645780][ T5919] usb 3-1: config 128 interface 225 altsetting 108 endpoint 0xD has invalid maxpacket 544, setting to 8 [ 167.667026][ T5919] usb 3-1: config 128 interface 225 altsetting 108 has an invalid descriptor for endpoint zero, skipping [ 167.676331][ T116] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 167.678876][ T5919] usb 3-1: config 128 interface 225 altsetting 108 endpoint 0x8 has invalid maxpacket 32, setting to 0 [ 167.708146][ T5919] usb 3-1: config 128 interface 225 altsetting 108 has an invalid descriptor for endpoint zero, skipping [ 167.726060][ T5919] usb 3-1: config 128 interface 225 altsetting 108 endpoint 0xF has invalid maxpacket 1023, setting to 8 [ 167.741872][ T5919] usb 3-1: config 128 interface 225 altsetting 108 endpoint 0x7 has invalid maxpacket 1040, setting to 8 [ 167.754566][ T5919] usb 3-1: config 128 interface 225 altsetting 108 has an invalid descriptor for endpoint zero, skipping [ 167.758173][ T116] usb 2-1: USB disconnect, device number 17 [ 167.768478][ T5919] usb 3-1: config 128 interface 225 altsetting 108 endpoint 0xB has invalid maxpacket 1023, setting to 8 [ 167.783530][ T5919] usb 3-1: config 128 interface 225 altsetting 108 has a duplicate endpoint with address 0x7, skipping [ 167.801859][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 167.802553][ T5919] usb 3-1: config 128 interface 225 altsetting 108 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 167.824495][ T5919] usb 3-1: config 128 interface 225 altsetting 108 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 167.843695][ T5919] usb 3-1: config 128 interface 225 altsetting 108 has an invalid descriptor for endpoint zero, skipping [ 167.855515][ T5919] usb 3-1: config 128 interface 225 altsetting 108 has 12 endpoint descriptors, different from the interface descriptor's value: 19 [ 167.877130][ T5919] usb 3-1: config 128 interface 5 altsetting 16 has an endpoint descriptor with address 0x1B, changing to 0xB [ 167.894328][ T5919] usb 3-1: config 128 interface 5 altsetting 16 has a duplicate endpoint with address 0xB, skipping [ 167.914633][ T5919] usb 3-1: config 128 interface 5 altsetting 16 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 167.934949][ T5919] usb 3-1: config 128 interface 5 altsetting 16 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 167.956169][ T5919] usb 3-1: config 128 interface 5 altsetting 16 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 167.976040][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 167.978047][ T5919] usb 3-1: config 128 interface 5 altsetting 16 has a duplicate endpoint with address 0x85, skipping [ 167.996094][ T5919] usb 3-1: config 128 interface 5 altsetting 16 has a duplicate endpoint with address 0xE, skipping [ 167.998079][ T24] usb 4-1: config index 0 descriptor too short (expected 49915, got 18) [ 168.027614][ T5919] usb 3-1: config 128 interface 5 altsetting 16 has a duplicate endpoint with address 0x2, skipping [ 168.034191][ T24] usb 4-1: config 198 has too many interfaces: 158, using maximum allowed: 32 [ 168.040476][ T5919] usb 3-1: config 128 interface 5 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 168.066143][ T5919] usb 3-1: config 128 interface 5 altsetting 16 endpoint 0xA is Bulk; changing to Interrupt [ 168.076065][ T24] usb 4-1: config 198 has an invalid descriptor of length 100, skipping remainder of the config [ 168.076528][ T5919] usb 3-1: config 128 interface 5 altsetting 16 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 168.097821][ T24] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 158 [ 168.106053][ T5919] usb 3-1: config 128 interface 5 altsetting 16 endpoint 0x9 has invalid maxpacket 32, setting to 8 [ 168.113721][ T24] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 168.119225][ T5919] usb 3-1: config 128 interface 5 altsetting 16 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 168.128097][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.151382][ T5919] usb 3-1: config 128 interface 7 has no altsetting 0 [ 168.158723][ T5919] usb 3-1: config 128 interface 31 has no altsetting 0 [ 168.166139][ T5919] usb 3-1: config 128 interface 225 has no altsetting 0 [ 168.173242][ T5919] usb 3-1: config 128 interface 5 has no altsetting 0 [ 168.228578][ T24] usb 4-1: Product: syz [ 168.232777][ T24] usb 4-1: Manufacturer: syz [ 168.268945][ T24] usb 4-1: SerialNumber: syz [ 169.587881][ T5919] usb 3-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=72.70 [ 169.597530][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.659974][ T5919] usb 3-1: can't set config #128, error -71 [ 169.670875][ T5919] usb 3-1: USB disconnect, device number 26 [ 169.836179][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 169.988469][ T10] usb 2-1: config 0 has an invalid descriptor of length 60, skipping remainder of the config [ 170.016326][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.030381][ T10] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 170.040265][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.054430][ T10] usb 2-1: config 0 descriptor?? [ 170.234198][ T7296] netlink: 120 bytes leftover after parsing attributes in process `syz.4.323'. [ 170.646050][ T116] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 170.776089][ T116] usb 3-1: device descriptor read/64, error -71 [ 171.195417][ T116] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 171.346701][ T116] usb 3-1: device descriptor read/64, error -71 [ 171.492880][ T116] usb usb3-port1: attempt power cycle [ 171.512225][ T24] usb 4-1: USB disconnect, device number 25 [ 171.897902][ T116] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 171.926743][ T116] usb 3-1: device descriptor read/8, error -71 [ 172.006094][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 172.156585][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 172.168654][ T24] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.190221][ T24] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.214526][ T24] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.236394][ T116] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 172.259033][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.267454][ T116] usb 3-1: device descriptor read/8, error -71 [ 172.276034][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 172.285081][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.323878][ T24] usb 4-1: config 0 descriptor?? [ 172.376842][ T116] usb usb3-port1: unable to enumerate USB device [ 172.563349][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 172.578518][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 172.617316][ T24] usb 4-1: USB disconnect, device number 26 [ 172.625370][ T5919] usb 2-1: USB disconnect, device number 18 [ 172.834485][ T7310] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 172.933506][ T7310] netlink: 36 bytes leftover after parsing attributes in process `syz.3.327'. [ 173.006284][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.016339][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.023513][ T7310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.196473][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 173.322084][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804caaec00: rx timeout, send abort [ 173.596165][ T24] usb 4-1: device descriptor read/64, error -71 [ 173.822851][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804caaf000: rx timeout, send abort [ 173.831317][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804caaec00: abort rx timeout. Force session deactivation [ 173.916137][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 173.923792][ T116] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 174.106235][ T116] usb 3-1: Using ep0 maxpacket: 16 [ 174.113618][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.133864][ T116] usb 3-1: config 0 has no interfaces? [ 174.147083][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.162410][ T116] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.182589][ T116] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.192724][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.216126][ T116] usb 3-1: Manufacturer: syz [ 174.220877][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.236920][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.246111][ T116] usb 3-1: config 0 descriptor?? [ 174.278628][ T24] usb 4-1: config 0 descriptor?? [ 174.331175][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804caaf000: abort rx timeout. Force session deactivation [ 174.570017][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 174.596650][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 174.643777][ T24] usb 4-1: USB disconnect, device number 28 [ 175.176565][ T5919] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 175.366795][ T5919] usb 2-1: no configurations [ 175.374205][ T5919] usb 2-1: can't read configurations, error -22 [ 175.578806][ T5919] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 175.785479][ T5919] usb 2-1: no configurations [ 175.793069][ T5919] usb 2-1: can't read configurations, error -22 [ 175.804584][ T5919] usb usb2-port1: attempt power cycle [ 176.166059][ T5919] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 176.187190][ T5919] usb 2-1: no configurations [ 176.191880][ T5919] usb 2-1: can't read configurations, error -22 [ 176.326627][ T5919] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 176.347353][ T5919] usb 2-1: no configurations [ 176.351951][ T5919] usb 2-1: can't read configurations, error -22 [ 176.359357][ T5919] usb usb2-port1: unable to enumerate USB device [ 176.480137][ T116] usb 3-1: USB disconnect, device number 31 [ 176.636140][ T5919] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 176.675550][ T7381] netlink: 96 bytes leftover after parsing attributes in process `syz.2.344'. [ 176.688252][ T7381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.802653][ T7384] netlink: 'syz.2.345': attribute type 21 has an invalid length. [ 176.812391][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 176.818971][ T7384] netlink: 100 bytes leftover after parsing attributes in process `syz.2.345'. [ 176.830298][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.851014][ T5919] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 176.876069][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.902915][ T5919] usb 4-1: config 0 descriptor?? [ 176.919294][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.935354][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.960696][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 176.960712][ T30] audit: type=1326 audit(1760273732.029:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.2.347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ef618eec9 code=0x0 [ 177.649314][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 177.657025][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 177.670242][ T5919] usb 4-1: USB disconnect, device number 29 [ 177.831339][ T7400] IPv6: addrconf: prefix option has invalid lifetime [ 178.039832][ T7410] netlink: 84 bytes leftover after parsing attributes in process `syz.1.351'. [ 178.428451][ T7429] sock: sock_timestamping_bind_phc: sock not bind to device [ 178.816115][ T116] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 179.117609][ T116] usb 3-1: device descriptor read/64, error -71 [ 179.456147][ T116] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 179.596012][ T116] usb 3-1: device descriptor read/64, error -71 [ 179.706436][ T116] usb usb3-port1: attempt power cycle [ 180.206088][ T116] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 180.226842][ T116] usb 3-1: device descriptor read/8, error -71 [ 180.297827][ T7450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.390092][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.402211][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.422337][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.437000][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.451320][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.486129][ T116] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 180.564106][ T116] usb 3-1: device descriptor read/8, error -71 [ 180.836338][ T5895] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 180.946465][ T116] usb usb3-port1: unable to enumerate USB device [ 181.007511][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 181.023746][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.076250][ T5895] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 181.085321][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.144438][ T5895] usb 2-1: config 0 descriptor?? [ 181.388855][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.431573][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.552865][ T7463] chnl_net:caif_netlink_parms(): no params data found [ 181.700062][ T7483] netlink: 'syz.2.368': attribute type 21 has an invalid length. [ 181.721666][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 181.776223][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.783592][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.793811][ T7463] bridge_slave_0: entered allmulticast mode [ 181.800547][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 181.802481][ T7463] bridge_slave_0: entered promiscuous mode [ 181.857519][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.865778][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.883986][ T7463] bridge_slave_1: entered allmulticast mode [ 181.901488][ T7463] bridge_slave_1: entered promiscuous mode [ 181.973357][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.010566][ T9] usb 4-1: config 0 has no interfaces? [ 182.013717][ T5895] apple 0003:05AC:024B.0008: unknown main item tag 0x6 [ 182.028211][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.030262][ T7463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.049997][ T5895] apple 0003:05AC:024B.0008: invalid report_size 24312 [ 182.060029][ T5895] apple 0003:05AC:024B.0008: item 0 2 1 7 parsing failed [ 182.078391][ T7463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.080280][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.088472][ T5895] apple 0003:05AC:024B.0008: parse failed [ 182.123818][ T5895] apple 0003:05AC:024B.0008: probe with driver apple failed with error -22 [ 182.124582][ T9] usb 4-1: config 0 descriptor?? [ 182.224175][ T7463] team0: Port device team_slave_0 added [ 182.274245][ T7463] team0: Port device team_slave_1 added [ 182.328202][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.336325][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.372990][ T7463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.393941][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.404253][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.433375][ T7463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.490005][ T5835] Bluetooth: hci4: command tx timeout [ 182.533198][ T7463] hsr_slave_0: entered promiscuous mode [ 182.540280][ T7463] hsr_slave_1: entered promiscuous mode [ 182.549335][ T7463] debugfs: 'hsr0' already exists in 'hsr' [ 182.555547][ T7463] Cannot create hsr debugfs directory [ 183.029874][ T7463] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.039897][ T7463] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.050933][ T7463] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.068543][ T7463] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.147405][ T7463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.174848][ T7463] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.191608][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.198821][ T7254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.207698][ T5919] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 183.219824][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.227270][ T7254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.303930][ T7463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.351235][ T24] usb 2-1: USB disconnect, device number 23 [ 183.399682][ T5919] usb 3-1: config 0 has an invalid interface number: 192 but max is 0 [ 183.434282][ T5919] usb 3-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 183.447317][ T7463] veth0_vlan: entered promiscuous mode [ 183.471859][ T5919] usb 3-1: config 0 has no interface number 0 [ 183.482090][ T7463] veth1_vlan: entered promiscuous mode [ 183.491525][ T5919] usb 3-1: too many endpoints for config 0 interface 192 altsetting 19: 215, using maximum allowed: 30 [ 183.514618][ T5919] usb 3-1: config 0 interface 192 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 215 [ 183.554238][ T5919] usb 3-1: config 0 interface 192 has no altsetting 0 [ 183.572702][ T5919] usb 3-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 183.583071][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.609120][ T7463] veth0_macvtap: entered promiscuous mode [ 183.624400][ T5919] usb 3-1: config 0 descriptor?? [ 183.639087][ T7463] veth1_macvtap: entered promiscuous mode [ 183.685381][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.742825][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.795832][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.805129][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.823892][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.839342][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.940384][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.949080][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.011376][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.022898][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.568754][ T5835] Bluetooth: hci4: command tx timeout [ 184.578734][ T5888] usb 4-1: USB disconnect, device number 30 [ 184.859021][ T5919] usb 3-1: string descriptor 0 read error: -71 [ 184.870335][ T5919] asix 3-1:0.192 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 184.892731][ T5919] asix 3-1:0.192: probe with driver asix failed with error -71 [ 184.914063][ T5919] usb 3-1: USB disconnect, device number 36 [ 185.010939][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'. [ 185.316839][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 185.486141][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 185.494563][ T7535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.509975][ T24] usb 4-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 185.527114][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.573290][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 185.585180][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.593849][ T24] usb 4-1: Product: syz [ 185.598673][ T24] usb 4-1: Manufacturer: syz [ 185.603276][ T24] usb 4-1: SerialNumber: syz [ 185.669498][ T24] usb 4-1: config 0 descriptor?? [ 186.376719][ T5941] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 186.536282][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 186.549692][ T5941] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 186.568161][ T5941] usb 6-1: config 0 has no interface number 0 [ 186.583745][ T5941] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 186.593459][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.611801][ T5941] usb 6-1: Product: syz [ 186.655558][ T5835] Bluetooth: hci4: command tx timeout [ 186.665370][ T5941] usb 6-1: Manufacturer: syz [ 186.895376][ T5941] usb 6-1: SerialNumber: syz [ 186.922666][ T5941] usb 6-1: config 0 descriptor?? [ 186.960038][ T5941] smsc95xx v2.0.0 [ 187.036770][ T7545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.773367][ T5941] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 187.773384][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.773732][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.792608][ T5941] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 187.939224][ T5919] usb 4-1: USB disconnect, device number 31 [ 188.073924][ T7563] ptrace attach of "./syz-executor exec"[5846] was attempted by ""[7563] [ 188.393788][ T7549] warning: `syz.5.382' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 188.677417][ T5941] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 188.727140][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 188.741141][ T5835] Bluetooth: hci4: command tx timeout [ 188.741494][ T5941] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 189.006079][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 189.016991][ T10] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 189.098540][ T5888] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 189.129969][ T10] usb 3-1: config 0 has no interface number 0 [ 189.134635][ T5941] usb 6-1: USB disconnect, device number 2 [ 189.195721][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 189.236669][ T10] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 189.279234][ T10] usb 3-1: Product: syz [ 189.283491][ T10] usb 3-1: Manufacturer: syz [ 189.317872][ T5888] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 189.331746][ T10] usb 3-1: config 0 descriptor?? [ 189.356693][ T5888] usb 2-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 189.404066][ T5888] usb 2-1: config 0 has no interface number 0 [ 189.419103][ T5888] usb 2-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 189.445074][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.480933][ T5888] usb 2-1: config 0 descriptor?? [ 189.585333][ T10] usb 3-1: USB disconnect, device number 37 [ 190.508654][ T5888] asix 2-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 190.565707][ T5888] asix 2-1:0.102 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 190.590476][ T5888] asix 2-1:0.102: probe with driver asix failed with error -71 [ 190.617514][ T5888] usb 2-1: USB disconnect, device number 24 [ 190.720277][ T7611] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 190.733713][ T7613] loop2: detected capacity change from 0 to 7 [ 190.745298][ T7613] Dev loop2: unable to read RDB block 7 [ 190.751719][ T7613] loop2: unable to read partition table [ 190.757817][ T7613] loop2: partition table beyond EOD, truncated [ 190.764098][ T7613] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 190.791189][ T5197] Dev loop2: unable to read RDB block 7 [ 190.796972][ T5197] loop2: unable to read partition table [ 190.802775][ T5197] loop2: partition table beyond EOD, truncated [ 191.223442][ T7620] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.506106][ T5888] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 192.288568][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 192.378100][ T5888] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 192.389120][ T5888] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.406610][ T5888] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.425461][ T5888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.455973][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.464060][ T5888] usb 2-1: Product: syz [ 192.469312][ T5888] usb 2-1: Manufacturer: syz [ 192.473958][ T5888] usb 2-1: SerialNumber: syz [ 193.066193][ T5888] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 194.118268][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.141185][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.151625][ T5888] usb 2-1: current rate 9315074 is different from the runtime rate 9338507 [ 194.253812][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.264617][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.429014][ T5888] usb 2-1: USB disconnect, device number 25 [ 194.617485][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.719261][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 195.206114][ T5888] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 195.387735][ T5888] usb 6-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 195.407914][ T5888] usb 6-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 195.422986][ T5888] usb 6-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 195.450990][ T5888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.467258][ T5888] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 195.586059][ T5896] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 195.593745][ T116] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 195.733998][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.748945][ T5888] usb 6-1: config 0 descriptor?? [ 195.760664][ T116] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 195.773592][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.785337][ T116] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 195.812169][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.826541][ T116] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.844139][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 195.853748][ T116] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 195.870521][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.882737][ T116] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 195.894932][ T5896] usb 4-1: config 0 descriptor?? [ 195.903954][ T5896] hub 4-1:0.0: USB hub found [ 195.911746][ T116] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 195.919509][ T116] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 195.931136][ T116] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.944878][ T116] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 195.970246][ T116] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 195.987990][ T116] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 195.996948][ T116] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 196.016360][ T116] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.118906][ T116] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 196.134871][ T5896] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 196.153635][ T116] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 196.171551][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 196.189182][ T116] usb 3-1: string descriptor 0 read error: -22 [ 196.195478][ T116] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 196.213111][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 196.222555][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.249789][ T5896] usb 4-1: USB disconnect, device number 32 [ 196.277189][ T116] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 196.366957][ T5888] usb 6-1: string descriptor 0 read error: -71 [ 196.442849][ T5888] usb 6-1: USB disconnect, device number 3 [ 196.770569][ T9] usb 3-1: USB disconnect, device number 38 [ 197.909851][ T7692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.058523][ T7698] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 198.067835][ T30] audit: type=1326 audit(1760273753.019:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc93078eec9 code=0x0 [ 198.194696][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 198.236461][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 198.255269][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 198.396063][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 198.402972][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.416143][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.681675][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 198.701741][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 198.713794][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.772419][ T9] usb 3-1: config 0 descriptor?? [ 200.020359][ T7736] netlink: 92 bytes leftover after parsing attributes in process `syz.5.422'. [ 201.346178][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 201.447741][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 201.454523][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 201.462168][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 201.471914][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 201.506261][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 201.606296][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 201.689041][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 201.695078][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 201.715740][ T7765] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 201.740741][ T5896] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 201.748392][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.748418][ T10] usb 2-1: Product: syz [ 201.788797][ T10] usb 2-1: Manufacturer: syz [ 201.798923][ T9] usb 3-1: USB disconnect, device number 39 [ 201.830406][ T10] usb 2-1: SerialNumber: syz [ 201.861170][ T10] usb 2-1: config 0 descriptor?? [ 201.937157][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 201.994114][ T5896] usb 4-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 202.025765][ T5896] usb 4-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 202.066556][ T5896] usb 4-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 202.080346][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.095292][ T5896] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 202.156064][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.195838][ T5896] usb 4-1: config 0 descriptor?? [ 202.906768][ T10] gspca_stk1135: reg_w 0x3 err -110 [ 202.913039][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 202.973718][ T10] gspca_stk1135: Sensor write failed [ 202.989317][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 202.995698][ T10] gspca_stk1135: Sensor write failed [ 203.086065][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 203.096485][ T10] gspca_stk1135: Sensor read failed [ 203.101896][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 203.165345][ T10] gspca_stk1135: Sensor read failed [ 203.172722][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 203.198551][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 203.204996][ T10] gspca_stk1135: Sensor read failed [ 203.235370][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 203.248064][ T5896] usb 4-1: string descriptor 0 read error: -71 [ 203.267286][ T10] gspca_stk1135: Sensor read failed [ 203.278553][ T5896] usb 4-1: USB disconnect, device number 33 [ 203.284943][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 203.330045][ T10] gspca_stk1135: Sensor write failed [ 203.382493][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 203.402389][ T10] gspca_stk1135: Sensor write failed [ 203.430380][ T10] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 203.756027][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 203.886136][ T5896] usb 6-1: device descriptor read/64, error -71 [ 204.126030][ T5896] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 204.256811][ T5896] usb 6-1: device descriptor read/64, error -71 [ 204.377606][ T5896] usb usb6-port1: attempt power cycle [ 204.628786][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 204.736021][ T5896] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 204.777025][ T5896] usb 6-1: device descriptor read/8, error -71 [ 204.796351][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 204.820899][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.844119][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.859466][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.896993][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.931699][ T5919] usb 2-1: USB disconnect, device number 26 [ 204.948061][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.980275][ T9] usb 3-1: config 0 descriptor?? [ 205.026713][ T5896] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 205.056717][ T5896] usb 6-1: device descriptor read/8, error -71 [ 205.178417][ T5896] usb usb6-port1: unable to enumerate USB device [ 205.552084][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input13 [ 205.584663][ T9] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 205.615055][ T7835] netlink: 'syz.2.437': attribute type 8 has an invalid length. [ 205.630661][ T9] usb 3-1: USB disconnect, device number 40 [ 205.769358][ T7864] fido_id[7864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 206.154449][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.439'. [ 206.765814][ T7883] netlink: 'syz.4.443': attribute type 30 has an invalid length. [ 206.815809][ T7883] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 206.880260][ T7890] netlink: 232 bytes leftover after parsing attributes in process `syz.4.443'. [ 206.932624][ T7883] bond1 (unregistering): Released all slaves [ 206.959174][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.445'. [ 207.017642][ T7893] gre1: entered promiscuous mode [ 207.224418][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 207.235830][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 207.257889][ T7899] macvlan2: entered allmulticast mode [ 207.263679][ T7899] veth1_vlan: entered allmulticast mode [ 207.269419][ T5895] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 207.426128][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 207.433169][ T5895] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.442769][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.466804][ T5895] usb 6-1: config 0 descriptor?? [ 207.916089][ T5896] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 208.068577][ T5896] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.083000][ T5896] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 208.139256][ T5895] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 208.161591][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.176200][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 208.176204][ T5895] asix 6-1:0.0: probe with driver asix failed with error -61 [ 208.191741][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 208.212925][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 208.227621][ T5896] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.244341][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.263200][ T5896] usb 4-1: Product: syz [ 208.273319][ T5896] usb 4-1: Manufacturer: syz [ 208.341707][ T9] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 208.347315][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 208.352528][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 208.368783][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 208.386931][ T5896] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 208.392870][ T5896] cdc_wdm 4-1:1.0: Unknown control protocol [ 208.407686][ T9] usb 3-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 208.421421][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.433936][ T9] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 208.445536][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.464231][ T9] usb 3-1: config 0 descriptor?? [ 208.646347][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 208.796060][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 208.803928][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.814918][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 208.826529][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 208.839541][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 208.850681][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.866215][ T5895] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 208.875292][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.886123][ T5895] usb 2-1: Product: syz [ 208.890356][ T5895] usb 2-1: Manufacturer: syz [ 208.894951][ T5895] usb 2-1: SerialNumber: syz [ 208.908720][ T9] usb 3-1: string descriptor 0 read error: -71 [ 208.917769][ T5895] usb 2-1: config 0 descriptor?? [ 208.940249][ T9] usb 3-1: USB disconnect, device number 41 [ 209.136712][ T7911] netlink: 'syz.3.449': attribute type 29 has an invalid length. [ 209.147623][ T7905] netlink: 596 bytes leftover after parsing attributes in process `syz.3.449'. [ 209.667839][ T5896] usb 4-1: USB disconnect, device number 34 [ 210.032108][ T5919] usb 6-1: USB disconnect, device number 8 [ 211.057549][ T7952] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 211.181579][ T7952] bond2: entered promiscuous mode [ 211.199610][ T7952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.267272][ T5941] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 211.428515][ T5941] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 211.437559][ T5941] usb 3-1: config 7 has no interface number 0 [ 211.439609][ T7954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.447149][ T5941] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 211.487415][ T7954] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 211.528920][ T7954] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 211.534471][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.559590][ T5941] usb 3-1: Product: syz [ 211.571012][ T7954] bond2: (slave gre1): making interface the new active one [ 211.578565][ T7954] gre1: entered promiscuous mode [ 211.586254][ T7954] bond2: (slave gre1): Enslaving as an active interface with an up link [ 211.607517][ T5941] usb 3-1: Manufacturer: syz [ 211.613656][ T5941] usb 3-1: SerialNumber: syz [ 211.658949][ T5895] rc_core: IR keymap rc-imon-rsc not found [ 211.671482][ T5895] Registered IR keymap rc-empty [ 211.685130][ T5895] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 211.699144][ T5895] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 211.732397][ T5895] usb 2-1: USB disconnect, device number 27 [ 211.796486][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 212.232819][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 212.241861][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 212.350051][ T7972] netlink: 196 bytes leftover after parsing attributes in process `syz.3.463'. [ 213.616265][ T5895] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 213.768732][ T5895] usb 6-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.302813][ T5895] usb 6-1: config 1 interface 0 has no altsetting 0 [ 214.347096][ T5941] as10x_usb: device has been detected [ 214.356899][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 214.469206][ T5895] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.40 [ 214.479579][ T5941] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 214.490051][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.504451][ T5895] usb 6-1: Product: с [ 214.516194][ T5895] usb 6-1: Manufacturer: ဇ [ 214.520916][ T5895] usb 6-1: SerialNumber: ፙ徫蘬晊㎅㔏蚔 [ 214.530988][ T5941] as10x_usb: error during firmware upload part1 [ 214.537822][ T5941] Registered device Elgato EyeTV DTT Deluxe [ 214.546905][ T5941] usb 3-1: USB disconnect, device number 42 [ 214.820355][ T5941] Unregistered device Elgato EyeTV DTT Deluxe [ 214.845296][ T5941] as10x_usb: device has been disconnected [ 214.867388][ T5895] usbhid 6-1:1.0: can't add hid device: -71 [ 214.873408][ T5895] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 214.940885][ T5895] usb 6-1: USB disconnect, device number 9 [ 215.446435][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 215.463333][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.486091][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.615757][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 215.626499][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 215.636033][ T9] usb 2-1: config 0 has no interface number 0 [ 215.687944][ T5895] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 215.688078][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 215.705253][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.719352][ T9] usb 2-1: Product: syz [ 215.725801][ T9] usb 2-1: Manufacturer: syz [ 215.730522][ T9] usb 2-1: SerialNumber: syz [ 215.768099][ T9] usb 2-1: config 0 descriptor?? [ 215.788402][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 215.848188][ T5895] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 215.859653][ T5895] usb 3-1: config 0 has no interface number 0 [ 215.871310][ T5895] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 215.886157][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.904506][ T5895] usb 3-1: Product: syz [ 215.909418][ T5895] usb 3-1: Manufacturer: syz [ 215.914641][ T5895] usb 3-1: SerialNumber: syz [ 215.935092][ T5895] usb 3-1: config 0 descriptor?? [ 215.945539][ T5895] hub 3-1:0.217: bad descriptor, ignoring hub [ 215.956518][ T5895] hub 3-1:0.217: probe with driver hub failed with error -5 [ 216.656062][ T5896] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 216.694897][ T30] audit: type=1326 audit(1760273771.739:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ef618eec9 code=0x0 [ 216.830259][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.846288][ T30] audit: type=1326 audit(1760273771.739:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ef618eec9 code=0x0 [ 216.886111][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 216.891478][ T5895] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 216.937427][ T5896] usb 6-1: config 0 has an invalid interface number: 53 but max is 0 [ 216.947739][ T5896] usb 6-1: config 0 has no interface number 0 [ 217.124441][ T5895] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 217.173382][ T5896] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 217.193514][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.216018][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.226444][ T5895] dib0700: firmware download failed at 7 with -22 [ 217.254563][ T5896] usb 6-1: Product: syz [ 217.345368][ T5895] usb 3-1: USB disconnect, device number 43 [ 217.361474][ T5896] usb 6-1: Manufacturer: syz [ 217.407149][ T5896] usb 6-1: SerialNumber: syz [ 217.437461][ T5896] usb 6-1: config 0 descriptor?? [ 218.540147][ T8036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.153563][ T8036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.986779][ T9] usb 2-1: qt2_attach - failed to power on unit: -110 [ 220.993731][ T9] quatech2 2-1:0.51: probe with driver quatech2 failed with error -110 [ 223.706028][ T24] usb 2-1: USB disconnect, device number 28 [ 224.096207][ T5941] usb 6-1: USB disconnect, device number 10 [ 225.156209][ T5895] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 226.105846][ T8045] fuse: Invalid gid '00000000000000000003' [ 226.425771][ T5895] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.620275][ T8046] netlink: 'syz.1.480': attribute type 5 has an invalid length. [ 226.832486][ T5895] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 226.892217][ T5895] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.913166][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.056389][ T5895] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 227.116858][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.347115][ T5895] usb 6-1: config 0 descriptor?? [ 227.714343][ T8042] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 227.928968][ T5895] usbhid 6-1:0.0: can't add hid device: -71 [ 227.943186][ T5895] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 227.986762][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 228.029772][ T5895] usb 6-1: USB disconnect, device number 11 [ 228.176186][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 228.303329][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 228.384667][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 228.412250][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.499565][ T10] usb 2-1: Product: syz [ 228.503745][ T10] usb 2-1: Manufacturer: syz [ 228.782949][ T10] usb 2-1: SerialNumber: syz [ 228.837519][ T5895] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 228.873659][ T10] usb 2-1: config 0 descriptor?? [ 228.914654][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 228.963498][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 229.097900][ T8069] netlink: 92 bytes leftover after parsing attributes in process `syz.4.487'. [ 229.124345][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 229.384049][ T5895] usb 6-1: config 2 has an invalid interface number: 25 but max is 0 [ 229.818086][ T5895] usb 6-1: config 2 has an invalid interface number: 1 but max is 0 [ 229.964152][ T5895] usb 6-1: config 2 has an invalid interface number: 85 but max is 0 [ 229.989172][ T5895] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 230.056825][ T5895] usb 6-1: config 2 has 3 interfaces, different from the descriptor's value: 1 [ 230.065827][ T5895] usb 6-1: config 2 has no interface number 0 [ 230.161626][ T5895] usb 6-1: config 2 has no interface number 2 [ 230.168209][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 230.188977][ T5895] usb 6-1: config 2 interface 25 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 230.228029][ T8074] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 230.234386][ T5895] usb 6-1: config 2 interface 25 altsetting 253 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 230.344069][ T5895] usb 6-1: config 2 interface 25 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 230.430223][ T5895] usb 6-1: too many endpoints for config 2 interface 1 altsetting 73: 186, using maximum allowed: 30 [ 230.495130][ T5895] usb 6-1: config 2 interface 1 altsetting 73 has 1 endpoint descriptor, different from the interface descriptor's value: 186 [ 230.619169][ T5895] usb 6-1: too many endpoints for config 2 interface 85 altsetting 50: 172, using maximum allowed: 30 [ 230.641830][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 230.962220][ T5895] usb 6-1: config 2 interface 85 altsetting 50 bulk endpoint 0x1 has invalid maxpacket 24 [ 230.991302][ T5895] usb 6-1: config 2 interface 85 altsetting 50 has a duplicate endpoint with address 0xC, skipping [ 231.880769][ T10] em28xx 2-1:0.0: board has no eeprom [ 233.386052][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 233.393921][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 233.823132][ T856] em28xx 2-1:0.0: Binding DVB extension [ 233.894509][ T10] usb 2-1: USB disconnect, device number 29 [ 233.959463][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 234.823130][ C0] sched: DL replenish lagged too much [ 235.315747][ T5895] usb 6-1: config 2 interface 85 altsetting 50 has an invalid descriptor for endpoint zero, skipping [ 236.152303][ T5895] usb 6-1: config 2 interface 85 altsetting 50 has a duplicate endpoint with address 0xA, skipping [ 236.417410][ T5895] usb 6-1: config 2 interface 85 altsetting 50 has 6 endpoint descriptors, different from the interface descriptor's value: 172 [ 236.499928][ T5895] usb 6-1: config 2 interface 25 has no altsetting 0 [ 236.627316][ T5895] usb 6-1: config 2 interface 1 has no altsetting 0 [ 236.661335][ T5895] usb 6-1: config 2 interface 85 has no altsetting 0 [ 236.713341][ T856] em28xx 2-1:0.0: Registering input extension [ 236.716449][ T5895] usb 6-1: string descriptor 0 read error: -71 [ 236.725740][ T5895] usb 6-1: New USB device found, idVendor=067e, idProduct=1001, bcdDevice=b5.9a [ 236.837002][ T10] em28xx 2-1:0.0: Closing input extension [ 236.886974][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.988677][ T8100] netlink: 48 bytes leftover after parsing attributes in process `syz.4.493'. [ 237.217537][ T10] em28xx 2-1:0.0: Freeing device [ 237.698723][ T5895] usb 6-1: can't set config #2, error -71 [ 237.961297][ T5895] usb 6-1: USB disconnect, device number 12 [ 239.236069][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 240.376524][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 240.415060][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.495464][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.544344][ T9] usb 6-1: Product: syz [ 240.570281][ T9] usb 6-1: Manufacturer: syz [ 240.574912][ T9] usb 6-1: SerialNumber: syz [ 240.626654][ T9] usb 6-1: config 0 descriptor?? [ 240.905490][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.026246][ T5941] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 241.384856][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.422410][ T5941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.692299][ T5941] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.708936][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.015632][ T5941] usb 2-1: Product: syz [ 242.028014][ T5941] usb 2-1: Manufacturer: syz [ 242.032646][ T5941] usb 2-1: SerialNumber: syz [ 242.645331][ T5941] usb 2-1: 0:2 : does not exist [ 242.727192][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 244.313408][ T9] usb 6-1: USB disconnect, device number 13 [ 244.462814][ T8123] trusted_key: syz.3.498 sent an empty control message without MSG_MORE. [ 244.522308][ T5941] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 244.553763][ T8123] sctp: [Deprecated]: syz.3.498 (pid 8123) Use of int in maxseg socket option. [ 244.553763][ T8123] Use struct sctp_assoc_value instead [ 245.331176][ T8130] netlink: 76 bytes leftover after parsing attributes in process `syz.2.500'. [ 245.373666][ T5941] usb 2-1: USB disconnect, device number 30 [ 246.231887][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.488517][ T116] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 246.663687][ T5941] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 246.854074][ T116] usb 3-1: Using ep0 maxpacket: 8 [ 246.974186][ T116] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 247.000796][ T116] usb 3-1: config 2 has no interface number 0 [ 247.068169][ T116] usb 3-1: config 2 interface 31 has no altsetting 0 [ 247.123527][ T5941] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 247.138570][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.077067][ T5941] usb 2-1: Product: syz [ 251.081256][ T5941] usb 2-1: Manufacturer: syz [ 251.085830][ T5941] usb 2-1: SerialNumber: syz [ 254.256435][ T5941] usb 2-1: can't set config #1, error -71 [ 254.277944][ T5941] usb 2-1: USB disconnect, device number 31 [ 254.387753][ T116] usb 3-1: string descriptor 0 read error: -71 [ 254.399966][ T116] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 254.624111][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.883256][ T116] usb 3-1: can't set config #2, error -71 [ 254.959766][ T116] usb 3-1: USB disconnect, device number 44 [ 255.692947][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.726032][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.021226][ T8156] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 257.970778][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.507'. [ 258.485523][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.506'. [ 261.676228][ T30] audit: type=1326 audit(1760273816.739:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.1.510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26f198eec9 code=0x0 [ 264.053921][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.086322][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.119078][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.130131][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.138023][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.194409][ T30] audit: type=1326 audit(1760273819.259:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 264.436213][ T30] audit: type=1326 audit(1760273819.259:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 264.853858][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 265.140837][ T30] audit: type=1326 audit(1760273819.299:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 265.293672][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.376011][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.389647][ T30] audit: type=1326 audit(1760273819.299:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 265.412202][ T30] audit: type=1326 audit(1760273819.299:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 265.499116][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.843426][ T30] audit: type=1326 audit(1760273819.299:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 265.922043][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.936050][ T10] usb 6-1: SerialNumber: syz [ 266.254523][ T52] Bluetooth: hci0: command tx timeout [ 266.298581][ T10] usb 6-1: 0:2 : does not exist [ 266.353629][ T30] audit: type=1326 audit(1760273819.299:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 266.469402][ T10] usb 6-1: USB disconnect, device number 14 [ 266.683787][ T30] audit: type=1326 audit(1760273819.299:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 267.179108][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.916659][ T30] audit: type=1326 audit(1760273819.299:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 268.052009][ T8171] udevd[8171]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.326127][ T52] Bluetooth: hci0: command tx timeout [ 268.355426][ T30] audit: type=1326 audit(1760273819.299:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 268.523397][ T30] audit: type=1326 audit(1760273819.299:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 268.590361][ T30] audit: type=1326 audit(1760273819.319:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 268.664374][ T30] audit: type=1326 audit(1760273819.319:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 268.935316][ T30] audit: type=1326 audit(1760273819.319:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 268.960995][ T30] audit: type=1326 audit(1760273819.319:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 268.990494][ T30] audit: type=1326 audit(1760273819.319:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 269.070173][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.093051][ T30] audit: type=1326 audit(1760273819.319:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 290.316055][ T52] Bluetooth: hci0: command tx timeout [ 290.822244][ T30] audit: type=1326 audit(1760273819.319:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 290.906996][ T30] audit: type=1326 audit(1760273819.319:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 291.018979][ T30] audit: type=1326 audit(1760273819.449:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f520c98ef03 code=0x7ffc0000 [ 291.316153][ T30] audit: type=1326 audit(1760273819.449:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f520c98ef03 code=0x7ffc0000 [ 291.496916][ T30] audit: type=1326 audit(1760273819.469:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 291.827108][ T30] audit: type=1326 audit(1760273819.469:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 292.005994][ T30] audit: type=1326 audit(1760273819.469:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 292.125972][ T30] audit: type=1326 audit(1760273819.489:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 292.241403][ T30] audit: type=1326 audit(1760273819.489:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 292.323683][ T30] audit: type=1326 audit(1760273819.489:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520c98eec9 code=0x7ffc0000 [ 292.948011][ T52] Bluetooth: hci0: command tx timeout [ 293.669538][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.006041][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 316.431654][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.134913][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.141724][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.185172][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.195524][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.226708][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.236915][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.245147][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.411442][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.430273][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.447228][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.455859][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.463862][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.633763][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.653619][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.663175][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.676059][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.691048][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.651410][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.664339][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.672872][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.692013][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.700179][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.302210][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.311958][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.323592][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.337765][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.352752][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.371491][ T52] Bluetooth: hci2: command tx timeout [ 319.826217][ T5835] Bluetooth: hci1: command tx timeout [ 319.833401][ T5835] Bluetooth: hci3: command tx timeout [ 320.726218][ T5835] Bluetooth: hci4: command tx timeout [ 321.546133][ T5835] Bluetooth: hci2: command tx timeout [ 321.551895][ T5835] Bluetooth: hci5: command tx timeout [ 321.955294][ T5835] Bluetooth: hci3: command tx timeout [ 321.966024][ T5835] Bluetooth: hci1: command tx timeout [ 322.806317][ T52] Bluetooth: hci4: command tx timeout [ 323.449034][ T13] bridge_slave_1: left allmulticast mode [ 323.455257][ T13] bridge_slave_1: left promiscuous mode [ 323.478206][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.529022][ T13] bridge_slave_0: left allmulticast mode [ 323.546140][ T13] bridge_slave_0: left promiscuous mode [ 323.552162][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.616097][ T52] Bluetooth: hci5: command tx timeout [ 323.621555][ T52] Bluetooth: hci2: command tx timeout [ 324.006488][ T52] Bluetooth: hci1: command tx timeout [ 324.012052][ T52] Bluetooth: hci3: command tx timeout [ 324.570787][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.590928][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.612322][ T13] bond0 (unregistering): Released all slaves [ 324.887822][ T52] Bluetooth: hci4: command tx timeout [ 325.686597][ T52] Bluetooth: hci2: command tx timeout [ 325.689704][ T5835] Bluetooth: hci5: command tx timeout [ 326.098125][ T5835] Bluetooth: hci3: command tx timeout [ 326.098140][ T52] Bluetooth: hci1: command tx timeout [ 326.114151][ T8245] chnl_net:caif_netlink_parms(): no params data found [ 326.146588][ T8243] chnl_net:caif_netlink_parms(): no params data found [ 326.322013][ T8250] chnl_net:caif_netlink_parms(): no params data found [ 326.566352][ T13] hsr_slave_0: left promiscuous mode [ 326.579888][ T13] hsr_slave_1: left promiscuous mode [ 326.588983][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.596934][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.624042][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.645214][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.704599][ T13] veth1_macvtap: left promiscuous mode [ 326.725843][ T13] veth0_macvtap: left promiscuous mode [ 326.967099][ T52] Bluetooth: hci4: command tx timeout [ 327.789018][ T52] Bluetooth: hci5: command tx timeout [ 327.924364][ T13] team0 (unregistering): Port device team_slave_1 removed [ 328.049916][ T13] team0 (unregistering): Port device team_slave_0 removed [ 329.242993][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 329.423374][ T8247] chnl_net:caif_netlink_parms(): no params data found [ 329.502814][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.523316][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.531908][ T8245] bridge_slave_0: entered allmulticast mode [ 329.542706][ T8245] bridge_slave_0: entered promiscuous mode [ 329.611923][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.622401][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.630690][ T8245] bridge_slave_1: entered allmulticast mode [ 329.648752][ T8245] bridge_slave_1: entered promiscuous mode [ 330.164041][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.173662][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.182102][ T8250] bridge_slave_0: entered allmulticast mode [ 330.191588][ T8250] bridge_slave_0: entered promiscuous mode [ 330.313641][ T8245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.362963][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.370858][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.378841][ T8250] bridge_slave_1: entered allmulticast mode [ 330.387659][ T8250] bridge_slave_1: entered promiscuous mode [ 330.396783][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.403948][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.413023][ T8243] bridge_slave_0: entered allmulticast mode [ 330.421450][ T8243] bridge_slave_0: entered promiscuous mode [ 330.474203][ T8245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.649815][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.670496][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.687446][ T8243] bridge_slave_1: entered allmulticast mode [ 330.721568][ T8243] bridge_slave_1: entered promiscuous mode [ 330.965566][ T13] IPVS: stop unused estimator thread 0... [ 330.972813][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.982929][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.016772][ T8252] bridge_slave_0: entered allmulticast mode [ 331.037468][ T8252] bridge_slave_0: entered promiscuous mode [ 331.060219][ T8250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.100180][ T8250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.177724][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.206551][ T31] INFO: task kworker/1:6:5916 blocked for more than 160 seconds. [ 331.214332][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.241569][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.276016][ T31] task:kworker/1:6 state:D stack:20536 pid:5916 tgid:5916 ppid:2 task_flags:0x4288160 flags:0x00080000 [ 331.304207][ T31] Workqueue: usb_hub_wq hub_event [ 331.416999][ T31] Call Trace: [ 331.420349][ T31] [ 331.423405][ T31] __schedule+0x1798/0x4cc0 [ 331.428812][ T31] ? __pfx___schedule+0x10/0x10 [ 331.433810][ T31] ? preempt_schedule_common+0x83/0xd0 [ 331.447324][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 331.452763][ T31] ? schedule+0x91/0x360 [ 331.457911][ T31] schedule+0x165/0x360 [ 331.462456][ T31] schedule_timeout+0x9a/0x270 [ 331.468313][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 331.473752][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.480858][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.486638][ T31] ? wait_for_completion+0x267/0x5d0 [ 331.491958][ T31] wait_for_completion+0x2bf/0x5d0 [ 331.506518][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 331.512223][ T31] i2c_del_adapter+0x581/0x6e0 [ 331.530358][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 331.535815][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 331.549581][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 331.554939][ T31] ? kfree+0x4d/0x6d0 [ 331.560669][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 331.565487][ T31] dvb_usb_device_exit+0x1be/0x350 [ 331.572360][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.578058][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 331.583822][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 331.591893][ T31] ? usb_disable_interface+0x31d/0x350 [ 331.598379][ T31] usb_unbind_interface+0x26e/0x910 [ 331.603696][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 331.610361][ T31] device_release_driver_internal+0x4d9/0x800 [ 331.616952][ T31] bus_remove_device+0x34d/0x410 [ 331.622014][ T31] device_del+0x511/0x8e0 [ 331.629801][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 331.635225][ T31] ? __pfx_device_del+0x10/0x10 [ 331.641604][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.647298][ T31] usb_disable_device+0x3e9/0x8a0 [ 331.652473][ T31] usb_disconnect+0x330/0x950 [ 331.660608][ T31] hub_event+0x1cf5/0x4a20 [ 331.665386][ T31] ? do_raw_spin_lock+0x121/0x290 [ 331.672630][ T31] ? register_lock_class+0x51/0x320 [ 331.678323][ T31] ? __pfx_hub_event+0x10/0x10 [ 331.683469][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.690145][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.695496][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.703065][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.709483][ T31] process_scheduled_works+0xae1/0x17b0 [ 331.715100][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.721683][ T31] worker_thread+0x8a0/0xda0 [ 331.726849][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.733491][ T31] ? __kthread_parkme+0x7b/0x200 [ 331.741458][ T31] kthread+0x711/0x8a0 [ 331.745576][ T31] ? __pfx_worker_thread+0x10/0x10 [ 331.755189][ T31] ? __pfx_kthread+0x10/0x10 [ 331.760198][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.765446][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.778350][ T31] ? __pfx_kthread+0x10/0x10 [ 331.783172][ T31] ret_from_fork+0x4bc/0x870 [ 331.788678][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.793835][ T31] ? __switch_to_asm+0x39/0x70 [ 331.799154][ T31] ? __switch_to_asm+0x33/0x70 [ 331.804042][ T31] ? __pfx_kthread+0x10/0x10 [ 331.810714][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.815543][ T31] [ 331.820438][ T31] INFO: task syz.0.301:7227 blocked for more than 160 seconds. [ 331.838245][ T8245] team0: Port device team_slave_0 added [ 331.889993][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.916362][ T31] Not tainted syzkaller #0 [ 331.921438][ T31] Blocked by coredump. [ 331.932353][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.947620][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.957285][ T8252] bridge_slave_1: entered allmulticast mode [ 331.980397][ T31] task:syz.0.301 state:D stack:25352 pid:7227 tgid:7221 ppid:5842 task_flags:0x40054c flags:0x00080003 [ 332.001428][ T8252] bridge_slave_1: entered promiscuous mode [ 332.016534][ T31] Call Trace: [ 332.019866][ T31] [ 332.022814][ T31] __schedule+0x1798/0x4cc0 [ 332.048099][ T31] ? __pfx___schedule+0x10/0x10 [ 332.053051][ T31] ? schedule+0x91/0x360 [ 332.072025][ T31] schedule+0x165/0x360 [ 332.079637][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.085156][ T31] __mutex_lock+0x7e6/0x1350 [ 332.093336][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.101706][ T31] ? usbdev_release+0x7e/0x760 [ 332.108196][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.113394][ T31] ? __asan_memset+0x22/0x50 [ 332.119377][ T31] ? __fsnotify_parent+0x242/0x540 [ 332.124672][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 332.130773][ T31] ? do_raw_spin_lock+0x121/0x290 [ 332.136526][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 332.141771][ T31] usbdev_release+0x7e/0x760 [ 332.147109][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 332.152542][ T31] __fput+0x44c/0xa70 [ 332.157419][ T31] task_work_run+0x1d4/0x260 [ 332.162187][ T31] ? __pfx_task_work_run+0x10/0x10 [ 332.168011][ T31] do_exit+0x6b5/0x2300 [ 332.172295][ T31] ? do_raw_spin_lock+0x121/0x290 [ 332.177987][ T31] ? __pfx_do_exit+0x10/0x10 [ 332.182661][ T31] do_group_exit+0x21c/0x2d0 [ 332.190796][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.198158][ T31] get_signal+0x1285/0x1340 [ 332.202757][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 332.213472][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 332.221377][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.227146][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 332.232659][ T31] exit_to_user_mode_loop+0x72/0x130 [ 332.238827][ T31] do_syscall_64+0x2bd/0xfa0 [ 332.243725][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.251092][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.257955][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.262675][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.269348][ T31] RIP: 0033:0x7f881c78d710 [ 332.273887][ T31] RSP: 002b:00007f881a9d4df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 332.283108][ T31] RAX: fffffffffffffffc RBX: 0000000000010000 RCX: 00007f881c78d710 [ 332.291722][ T31] RDX: 0000000000010000 RSI: 0000200000000000 RDI: 00000000ffffff9c [ 332.303367][ T31] RBP: 0000200000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.313264][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000200000000000 [ 332.325189][ T31] R13: 00007f881a9d4eb0 R14: 0000000000000000 R15: 0000200000000180 [ 332.335302][ T31] [ 332.374910][ T31] [ 332.374910][ T31] Showing all locks held in the system: [ 332.425840][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.430278][ T31] 3 locks held by kworker/0:1/10: [ 332.508279][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 332.577052][ T31] #1: ffffc900000f7ba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 332.619676][ T31] #2: ffffffff8f4dfb88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 332.681638][ T31] 4 locks held by kworker/u8:1/13: [ 332.706438][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 332.760699][ T31] #1: ffffc90000127ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 332.809402][ T31] #2: ffffffff8f4d2cf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 332.856088][ T31] #3: ffffffff8f4dfb88 (rtnl_mutex){+.+.}-{4:4}, at: ipmr_net_exit_batch+0x20/0x90 [ 332.865621][ T31] 1 lock held by khungtaskd/31: [ 332.927153][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 332.963480][ T31] 2 locks held by dhcpcd/5492: [ 332.996236][ T31] #0: ffff88808462e6e0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 333.036450][ T31] #1: ffffffff8f4dfb88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 333.045803][ T31] 2 locks held by getty/5588: [ 333.126468][ T31] #0: ffff888033d750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.176008][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 333.246293][ T31] 3 locks held by kworker/0:3/5888: [ 333.251548][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 333.336511][ T31] #1: ffffc9000430fba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 333.396900][ T31] #2: ffffffff8e142c40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 333.437185][ T31] 5 locks held by kworker/1:4/5895: [ 333.442470][ T31] 2 locks held by kworker/0:4/5903: [ 333.454671][ T31] #0: ffff8880b863a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 333.465132][ T31] #1: ffff8880b8624048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 333.474869][ T31] 5 locks held by kworker/1:6/5916: [ 333.480612][ T31] #0: ffff888143ec2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 333.492787][ T31] #1: ffffc900050f7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 333.505313][ T31] #2: ffff888144feb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 333.515170][ T31] #3: ffff8880275ea198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 333.524843][ T31] #4: ffff88807a186160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 333.542392][ T31] 4 locks held by kworker/1:7/5941: [ 333.549036][ T31] 1 lock held by syz.0.301/7227: [ 333.554444][ T31] #0: ffff888144feb198 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x7e/0x760 [ 333.566331][ T31] 4 locks held by kworker/u8:13/8221: [ 333.572035][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 333.584750][ T31] #1: ffffc9000408fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 333.596758][ T31] #2: ffffffff8f4dfb88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 333.605776][ T31] #3: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 333.617791][ T31] 3 locks held by syz-executor/8245: [ 333.623102][ T31] #0: ffff88805c2acdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 333.634258][ T31] #1: ffff88805c2ac0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 333.644717][ T31] #2: ffffffff8f648f28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 333.663880][ T31] 3 locks held by syz-executor/8247: [ 333.670236][ T31] #0: ffff88806b698dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 333.682048][ T31] #1: ffff88806b6980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 333.692431][ T31] #2: ffffffff8f648f28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 333.703822][ T31] 4 locks held by syz-executor/8252: [ 333.709661][ T31] #0: ffff88802f5f0dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 333.721110][ T31] #1: ffff88802f5f00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 333.731600][ T31] #2: ffffffff8f648f28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 333.742589][ T31] #3: ffff88807f4ea338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 333.754926][ T31] [ 333.758804][ T31] ============================================= [ 333.758804][ T31] [ 333.820171][ T31] NMI backtrace for cpu 0 [ 333.820198][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 333.820220][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.820230][ T31] Call Trace: [ 333.820239][ T31] [ 333.820247][ T31] dump_stack_lvl+0x189/0x250 [ 333.820276][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.820295][ T31] ? __pfx__printk+0x10/0x10 [ 333.820326][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 333.820353][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 333.820379][ T31] ? __pfx__printk+0x10/0x10 [ 333.820403][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.820428][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 333.820454][ T31] watchdog+0xf60/0xfa0 [ 333.820500][ T31] ? watchdog+0x1e2/0xfa0 [ 333.820529][ T31] kthread+0x711/0x8a0 [ 333.820551][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.820572][ T31] ? __pfx_kthread+0x10/0x10 [ 333.820592][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.820617][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.820633][ T31] ? __pfx_kthread+0x10/0x10 [ 333.820652][ T31] ret_from_fork+0x4bc/0x870 [ 333.820679][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.820709][ T31] ? __switch_to_asm+0x39/0x70 [ 333.820728][ T31] ? __switch_to_asm+0x33/0x70 [ 333.820747][ T31] ? __pfx_kthread+0x10/0x10 [ 333.820766][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.820804][ T31] [ 333.820811][ T31] Sending NMI from CPU 0 to CPUs 1: [ 333.969976][ C1] NMI backtrace for cpu 1 [ 333.969997][ C1] CPU: 1 UID: 0 PID: 5895 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 333.970016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.970026][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 333.970052][ C1] RIP: 0010:lock_is_held_type+0x65/0x190 [ 333.970072][ C1] Code: 85 ef 00 00 00 65 4c 8b 2c 25 08 40 91 92 41 83 bd 2c 0b 00 00 00 0f 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c <8f> 04 24 4c 8b 24 24 fa 48 c7 c7 c5 c6 7f 8d e8 07 17 00 00 65 ff [ 333.970087][ C1] RSP: 0018:ffffc90000a07c70 EFLAGS: 00000246 [ 333.970101][ C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff88802ec81e40 [ 333.970112][ C1] RDX: 0000000000000100 RSI: 00000000ffffffff RDI: ffffffff8f4dfb88 [ 333.970124][ C1] RBP: 00000000ffffffff R08: ffffc90000a07eaf R09: 0000000000000000 [ 333.970135][ C1] R10: ffffc90000a07e80 R11: fffff52000140fd6 R12: ffff888054ee2920 [ 333.970147][ C1] R13: ffff88802ec81e40 R14: ffffffff8f4dfb88 R15: dffffc0000000000 [ 333.970160][ C1] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 333.970174][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.970186][ C1] CR2: 000055f077aaa0f0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 333.970201][ C1] Call Trace: [ 333.970209][ C1] [ 333.970220][ C1] lockdep_rtnl_is_held+0x1b/0x40 [ 333.970239][ C1] fib_table_lookup+0x2c2/0x16e0 [ 333.970261][ C1] ? __inet_dev_addr_type+0x11f/0x4b0 [ 333.970286][ C1] __inet_dev_addr_type+0x2a2/0x4b0 [ 333.970304][ C1] ? __inet_dev_addr_type+0x11f/0x4b0 [ 333.970323][ C1] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 333.970348][ C1] ? l3mdev_fib_table+0x18/0x160 [ 333.970365][ C1] ? l3mdev_fib_table+0x18/0x160 [ 333.970384][ C1] ? l3mdev_fib_table+0x14e/0x160 [ 333.970404][ C1] ip_route_me_harder+0x3db/0xf10 [ 333.970428][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 333.970455][ C1] ? rcu_is_watching+0x15/0xb0 [ 333.970476][ C1] ? siphash_2u64+0x25/0x2a0 [ 333.970496][ C1] synproxy_send_tcp+0x3a7/0x700 [ 333.970523][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 333.970552][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 333.970573][ C1] ? nft_osf_eval+0x8/0x770 [ 333.970589][ C1] ? synproxy_pernet+0x45/0x270 [ 333.970609][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 333.970629][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 333.970648][ C1] ? nf_ip_checksum+0x13c/0x510 [ 333.970668][ C1] nft_synproxy_do_eval+0x345/0x570 [ 333.970684][ C1] ? unwind_next_frame+0xa5/0x2390 [ 333.970708][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 333.970734][ C1] nft_do_chain+0x40c/0x1920 [ 333.970757][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 333.970777][ C1] ? __lock_acquire+0xab9/0xd20 [ 333.970806][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 333.970825][ C1] nft_do_chain_inet+0x25d/0x340 [ 333.970841][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 333.970864][ C1] ? ipt_do_table+0x2a3/0x1640 [ 333.970880][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 333.970902][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 333.970920][ C1] nf_hook_slow+0xc5/0x220 [ 333.970943][ C1] NF_HOOK+0x206/0x3a0 [ 333.970965][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 333.970987][ C1] ? NF_HOOK+0x9a/0x3a0 [ 333.971006][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 333.971025][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 333.971047][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 333.971069][ C1] ? skb_dst+0x4f/0xd0 [ 333.971090][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 333.971111][ C1] NF_HOOK+0x30c/0x3a0 [ 333.971132][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 333.971153][ C1] ? NF_HOOK+0x9a/0x3a0 [ 333.971172][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 333.971191][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 333.971212][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 333.971237][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 333.971256][ C1] __netif_receive_skb+0x143/0x380 [ 333.971277][ C1] ? process_backlog+0x2d5/0x14f0 [ 333.971297][ C1] process_backlog+0x60e/0x14f0 [ 333.971316][ C1] ? rcu_is_watching+0x15/0xb0 [ 333.971343][ C1] ? __pfx_process_backlog+0x10/0x10 [ 333.971361][ C1] ? do_raw_spin_lock+0x121/0x290 [ 333.971378][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 333.971396][ C1] __napi_poll+0xc7/0x360 [ 333.971413][ C1] ? skb_defer_free_flush+0x229/0x250 [ 333.971433][ C1] net_rx_action+0x5f7/0xdf0 [ 333.971459][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 333.971496][ C1] handle_softirqs+0x286/0x870 [ 333.971519][ C1] ? do_softirq+0xec/0x180 [ 333.971541][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 333.971564][ C1] ? kernel_fpu_end+0xc8/0x120 [ 333.971580][ C1] do_softirq+0xec/0x180 [ 333.971599][ C1] [ 333.971604][ C1] [ 333.971611][ C1] ? __pfx_do_softirq+0x10/0x10 [ 333.971634][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 333.971654][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 333.971674][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.971696][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 333.971714][ C1] kernel_fpu_end+0xd2/0x120 [ 333.971729][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 333.971745][ C1] ? preempt_schedule_common+0x83/0xd0 [ 333.971771][ C1] blake2s_compress+0xe9/0x1b80 [ 333.971791][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 333.971815][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 333.971838][ C1] ? __local_bh_enable_ip+0x13e/0x1c0 [ 333.971863][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.971882][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 333.971907][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 333.971925][ C1] ? kernel_fpu_end+0xd2/0x120 [ 333.971940][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 333.971965][ C1] ? blake2s_compress+0x1b00/0x1b80 [ 333.971986][ C1] ? blake2s_update+0x255/0x450 [ 333.972027][ C1] blake2s_final+0x116/0x270 [ 333.972049][ C1] hmac+0x293/0x330 [ 333.972072][ C1] ? __pfx_hmac+0x10/0x10 [ 333.972097][ C1] ? curve25519_generate_public+0x2f84/0x3010 [ 333.972126][ C1] ? blake2s_update+0x255/0x450 [ 333.972149][ C1] ? __asan_memset+0x22/0x50 [ 333.972168][ C1] message_ephemeral+0x1e2/0x280 [ 333.972191][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 333.972230][ C1] ? down_read+0x1ad/0x2e0 [ 333.972248][ C1] wg_noise_handshake_create_response+0x24d/0x8f0 [ 333.972277][ C1] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 333.972299][ C1] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 333.972316][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.972332][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 333.972354][ C1] ? __pfx___up_read+0x10/0x10 [ 333.972374][ C1] ? wg_noise_handshake_consume_initiation+0x7b4/0x900 [ 333.972401][ C1] ? __lock_acquire+0xab9/0xd20 [ 333.972431][ C1] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 333.972447][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.972463][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 333.972479][ C1] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 333.972495][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 333.972519][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 333.972538][ C1] wg_packet_send_handshake_response+0xf6/0x2d0 [ 333.972559][ C1] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 333.972577][ C1] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 333.972606][ C1] wg_packet_handshake_receive_worker+0x629/0xfd0 [ 333.972634][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 333.972653][ C1] ? register_lock_class+0x51/0x320 [ 333.972675][ C1] ? __lock_acquire+0xab9/0xd20 [ 333.972700][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 333.972725][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.972746][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 333.972766][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 333.972788][ C1] process_scheduled_works+0xae1/0x17b0 [ 333.972823][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.972852][ C1] worker_thread+0x8a0/0xda0 [ 333.972892][ C1] kthread+0x711/0x8a0 [ 333.972909][ C1] ? __pfx_worker_thread+0x10/0x10 [ 333.972929][ C1] ? __pfx_kthread+0x10/0x10 [ 333.972946][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.972967][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.972982][ C1] ? __pfx_kthread+0x10/0x10 [ 333.972998][ C1] ret_from_fork+0x4bc/0x870 [ 333.973020][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 333.973044][ C1] ? __switch_to_asm+0x39/0x70 [ 333.973060][ C1] ? __switch_to_asm+0x33/0x70 [ 333.973077][ C1] ? __pfx_kthread+0x10/0x10 [ 333.973093][ C1] ret_from_fork_asm+0x1a/0x30 [ 333.973120][ C1] [ 335.299618][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 335.306516][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 335.315651][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.325731][ T31] Call Trace: [ 335.329133][ T31] [ 335.332072][ T31] dump_stack_lvl+0x99/0x250 [ 335.336683][ T31] ? __asan_memcpy+0x40/0x70 [ 335.341368][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.346576][ T31] ? __pfx__printk+0x10/0x10 [ 335.351195][ T31] vpanic+0x237/0x6d0 [ 335.355237][ T31] ? __pfx_vpanic+0x10/0x10 [ 335.359756][ T31] ? preempt_schedule_common+0x83/0xd0 [ 335.365246][ T31] panic+0xb9/0xc0 [ 335.368990][ T31] ? __pfx_panic+0x10/0x10 [ 335.373421][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 335.378809][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 335.385061][ T31] watchdog+0xf9f/0xfa0 [ 335.389234][ T31] ? watchdog+0x1e2/0xfa0 [ 335.393671][ T31] kthread+0x711/0x8a0 [ 335.397751][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.402522][ T31] ? __pfx_kthread+0x10/0x10 [ 335.407214][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.412866][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.418087][ T31] ? __pfx_kthread+0x10/0x10 [ 335.422745][ T31] ret_from_fork+0x4bc/0x870 [ 335.427627][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.433076][ T31] ? __switch_to_asm+0x39/0x70 [ 335.438292][ T31] ? __switch_to_asm+0x33/0x70 [ 335.443079][ T31] ? __pfx_kthread+0x10/0x10 [ 335.447685][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.452493][ T31] [ 335.456760][ T31] Kernel Offset: disabled [ 335.461300][ T31] Rebooting in 86400 seconds..