last executing test programs: 21m33.044804908s ago: executing program 0 (id=3334): socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000006d9000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) write$cgroup_int(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f0000001e40)='syz0\x00', 0x1ff) 21m30.041039308s ago: executing program 0 (id=3342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1000, 0x0, 0xb49, 0x401, 0x8, 0x0, 0x100006}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000380)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x4002, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x2, 0xde, 0x9, 0x9, 0x7, 0x3, 0x4}}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000002280)=ANY=[@ANYBLOB="12011003000000086b1d011140000102030109025f00030140f0100904000000010100000a240180000306010209040100000102000009040101010102000009050109ff0337e9650f1cdaad630dc3000725018140008009040200000102000009040201010102000009058209ff037b0209072501001b0080"], &(0x7f0000000380)={0x0, 0x0, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x66, 0xf00f, 0xfffa, [0x3f00, 0xffa0f0]}]}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r8, r9, 0x0, 0xff7e82) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 21m25.666557624s ago: executing program 0 (id=3349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000100000099"], 0x0, 0x0, 0x0, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000540)="4372466288", 0x5}, {0x0}], 0x2) r3 = fanotify_init(0x202, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x10001) fanotify_mark(r3, 0x11, 0x4800001b, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) read$rfkill(r5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES32=r5, @ANYRES8, @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x20044080) 21m22.251022027s ago: executing program 0 (id=3358): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4040100}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000001) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfc}}, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r6, 0x0, 0x7ffc, 0x4) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000040)) 21m18.635583902s ago: executing program 0 (id=3372): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x806a}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x1440, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x5, 0xea, 0x1, {0x22, 0xeb5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x0, 0x6, 0x5, 0x8, 0x1}, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44d}}, {0x2, &(0x7f00000003c0)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x861}}, {0x9, &(0x7f0000000500)=@string={0x9, 0x3, "24ccd9332ab7df"}}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x44, &(0x7f0000000c40)=@string={0x44, 0x3, "1cc5b4ea63b78620c1558b1dcfb5845e242abe52db9ae7eb24938393f7f0e55e2e870b5832d2b6627332a5fb28a9d3cb73869d92f56705df0f40226bdef30a6eecda"}}, {0x78, &(0x7f0000000d00)=@string={0x78, 0x3, "ae1afe4c017e16b361bab5d2a08d0824dcecd748a0424d4c0c624bf79e3bf66e319e21b535853451d11d9cc97502e6cb6811e09fe04dd3bec9f0f226e42323e0154a90f855a8b5ae4822216142befa42a06fe438db66b88c9d8fb78464369668add39e5fe73da11a3246f435a52742551d8e9add14d1"}}, {0x0, 0x0}]}) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xfdef) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x6, &(0x7f00000001c0)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 21m14.251853858s ago: executing program 0 (id=3391): r0 = socket$packet(0x11, 0xa, 0x300) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}], 0x30}, 0x84) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) connect$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6, 0x10}, 0xc) r9 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1b, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x80064}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x64c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0xa, 0x7, 0x9, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x5}, 0x1c) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 20m58.501228743s ago: executing program 32 (id=3391): r0 = socket$packet(0x11, 0xa, 0x300) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}], 0x30}, 0x84) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) connect$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6, 0x10}, 0xc) r9 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1b, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x80064}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x64c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0xa, 0x7, 0x9, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x5}, 0x1c) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 18m6.382989619s ago: executing program 4 (id=4105): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) mkdir(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080046004578000000000011907800000000000000000000000000640000100000000000000000000002fda296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696f"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 18m5.363130676s ago: executing program 4 (id=4112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) clock_getres(0x1, 0x0) 18m5.249934104s ago: executing program 4 (id=4113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000093007a402104070051b80102030109024b00010000000009040000000202ff00052406"], 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) exit(0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000100000015cd0000010100fafe070000ffff0000000000000700000004000000020000008afaffff"]) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x3e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) 18m2.101281545s ago: executing program 4 (id=4133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x10) 17m59.004433041s ago: executing program 4 (id=4150): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a40)="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", 0x2000, &(0x7f0000006840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x4e23, 0xed, 0x0, 0xa0, 0xa0, 0x73}, {0xc9a3, 0x3, 0x4, 0x0, 0x100000001, 0xffffffffffffffff, 0x8000000000000001, 0xfffffffffffffff9}, {0x6, 0x8, 0x7, 0x7d}, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d4, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3500, 0x4, 0x3, 0x7, 0x80000000, 0x161, 0x80}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 17m45.719573246s ago: executing program 4 (id=4194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0x4, 0x400082) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x3) 17m29.979068794s ago: executing program 33 (id=4194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0x4, 0x400082) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x3) 14m34.867007566s ago: executing program 3 (id=4911): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r0, &(0x7f0000000000)='children\x00') syz_mount_image$fuse(0x0, &(0x7f0000004040)='./file0\x00', 0x2000080, 0x0, 0xfd, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000240)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000"], 0xcc}}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000900)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x7f94, {0x7, 0x28, 0x3, 0x162848}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x0, 0x2, 0x81, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 14m30.932220972s ago: executing program 3 (id=4920): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000540)=""/271, 0x10f}, {&(0x7f0000000e80)=""/4083, 0xff3}, {&(0x7f0000000680)=""/150, 0x96}, {&(0x7f0000000740)=""/225, 0xe1}], 0x5}, 0xe68e}], 0x4, 0x10100, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x1010, r1, 0x9d3e8000) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) read(r3, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x1}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x4}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=@ipv6_getaddr={0x78, 0x16, 0x701, 0x3, 0x0, {0xa, 0x78, 0x0, 0x0, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x73e4, 0x1, 0x9, 0x5902}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x200048d0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000540)=""/271, 0x10f}, {&(0x7f0000000e80)=""/4083, 0xff3}, {&(0x7f0000000680)=""/150, 0x96}, {&(0x7f0000000740)=""/225, 0xe1}], 0x5}, 0xe68e}], 0x4, 0x10100, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x1010, r1, 0x9d3e8000) (async) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) (async) read(r3, &(0x7f00000001c0)=""/93, 0x5d) (async) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x1}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x4}, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=@ipv6_getaddr={0x78, 0x16, 0x701, 0x3, 0x0, {0xa, 0x78, 0x0, 0x0, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x73e4, 0x1, 0x9, 0x5902}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x200048d0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) 14m28.693573858s ago: executing program 3 (id=4927): r0 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1", 0x1001}], 0x1) close(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x40, 0x0, 0x1800000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r5}) 14m27.795237513s ago: executing program 3 (id=4930): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74}, {0x6c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x4, 0x3, 0x40, 0x6, '\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 14m24.449626657s ago: executing program 3 (id=4937): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) socket$unix(0x1, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r0], 0x54}}, 0x20000000) 14m24.007669214s ago: executing program 3 (id=4940): syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) io_uring_setup(0x3454, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="fec96b1890e924f0e68a5720c990384ffbdf05ecba334fb8", 0x18, 0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="1c007a800c000300631f17af01aa24ee0c00030058"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5044}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x10000000}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000740)='z', 0x1}], 0x1}}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x4, 0x2, 0x1040, 0x4, 0x0, 0x2, 0xfffffffffffffffe, 0xffffffff, 0xff, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x10, 0x80002, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0xef92, 0x10, 0x0, 0x0) clock_nanosleep(0x2, 0x225c17d03, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e6572000000400002800800024000000084080003"], 0xa8}}, 0x0) 14m8.792823439s ago: executing program 34 (id=4940): syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) io_uring_setup(0x3454, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="fec96b1890e924f0e68a5720c990384ffbdf05ecba334fb8", 0x18, 0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="1c007a800c000300631f17af01aa24ee0c00030058"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5044}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x10000000}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000740)='z', 0x1}], 0x1}}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x4, 0x2, 0x1040, 0x4, 0x0, 0x2, 0xfffffffffffffffe, 0xffffffff, 0xff, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x10, 0x80002, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0xef92, 0x10, 0x0, 0x0) clock_nanosleep(0x2, 0x225c17d03, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e6572000000400002800800024000000084080003"], 0xa8}}, 0x0) 14m4.172178544s ago: executing program 2 (id=5012): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4b8, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48eb, 0x1158, 0x2, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x7fff, 0x4503230, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x4000, 0x9, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 14m3.266742433s ago: executing program 2 (id=5017): syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x525, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f616400000002fffd0000000000000000000000008879e66485201a0015ca83747357a02745000400000000000000001900"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 14m2.369498506s ago: executing program 2 (id=5018): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_io_uring_setup(0xcf, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10010) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) shutdown(0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f07726a70d9ab00000000000100000921000000012205000905810300"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x2f, {0x2f, 0x23, "ff7dbd0b342790b332d8c143e8b52873d5c7f9fcd26fce9651dc18e8c5389e527f8c6b82705d1d35606f2230b0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x7, 0x80000001, {{0x14, 0x4, 0x3, 0x26, 0x50, 0x66, 0x0, 0xf9, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xdf, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @local, @private=0xa010102, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0xcf, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @multicast2, @multicast1]}]}}}}}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x88, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0x1a001}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_VFINFO_LIST={0x60, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x6}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfe, 0x3}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x62c, 0x7e2, 0x7}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffffffff, 0x3, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x8}}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) syz_io_uring_setup(0xcf, 0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10010) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) shutdown(0xffffffffffffffff, 0x0) (async) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f07726a70d9ab00000000000100000921000000012205000905810300"], 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x2f, {0x2f, 0x23, "ff7dbd0b342790b332d8c143e8b52873d5c7f9fcd26fce9651dc18e8c5389e527f8c6b82705d1d35606f2230b0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x7, 0x80000001, {{0x14, 0x4, 0x3, 0x26, 0x50, 0x66, 0x0, 0xf9, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xdf, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @local, @private=0xa010102, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0xcf, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @multicast2, @multicast1]}]}}}}}) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x88, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0x1a001}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_VFINFO_LIST={0x60, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x6}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfe, 0x3}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x62c, 0x7e2, 0x7}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffffffff, 0x3, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x8}}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) 13m59.15059854s ago: executing program 2 (id=5034): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [0x0, 0x0, 0x0, 0xffd2], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 13m59.030072839s ago: executing program 2 (id=5036): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 'id1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="8f", 0x1}], 0x1, 0x1) close(r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x10001, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) splice(r5, 0x0, r3, 0x0, 0xfffd, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000000000005c00000008000300", @ANYRES32=r6, @ANYBLOB="05f71f8da6cac78d"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf255200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900fcffffff310000000500890095000000050c89000d00030006004800630000000800cb00c3d500000500880003000000"], 0x50}, 0x1, 0x0, 0x0, 0x88c0}, 0x4010) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) fcntl$setstatus(r7, 0x4, 0xf2451ae1ed0d06) 13m58.863211597s ago: executing program 2 (id=5038): syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="fec96b1890e924f0e68a5720c990384ffbdf05ecba334fb8", 0x18, 0x8) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="1c007a800c000300631f17af01aa24ee0c00030058"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5044}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000040)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100, @val=0x80}}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f080f78a7ff0066b97108000066b80090000066ba000000000f30bad10466b8c993d49566efba410066ed0f22960f01c266da7d862e3e650f5606000036f20f30"}], 0x1, 0x47, 0x0, 0x3e) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b0000000000080028"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 13m43.686774003s ago: executing program 35 (id=5038): syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="fec96b1890e924f0e68a5720c990384ffbdf05ecba334fb8", 0x18, 0x8) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="1c007a800c000300631f17af01aa24ee0c00030058"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5044}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000040)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100, @val=0x80}}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f080f78a7ff0066b97108000066b80090000066ba000000000f30bad10466b8c993d49566efba410066ed0f22960f01c266da7d862e3e650f5606000036f20f30"}], 0x1, 0x47, 0x0, 0x3e) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b0000000000080028"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 10m58.198612955s ago: executing program 5 (id=5697): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7800000000000000190100"], 0x2a8}, 0x8040000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc04000000000000000000000b000000ff02000000000000000000000000000100000000ff"], 0x0) 10m57.947104784s ago: executing program 5 (id=5701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a31f500000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240000000000800014000496341c300030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}}, 0x0) 10m57.708688202s ago: executing program 5 (id=5706): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0xb4}}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000407e050efa9ad62488e51cd8a85ede8ffd00000e200000000000010902240001007447124bde2db48903000000092100000800000000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x578, 0x3f, 0x4, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0x100}) unshare(0x42060000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r6, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) lseek(r0, 0x1000000, 0x0) 10m54.55339532s ago: executing program 5 (id=5714): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x83, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYRES16=r1], 0x14}}, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = dup3(r6, r1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002280)={'vxcan1\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=@bloom_filter={0x1e, 0x7, 0x2, 0x7ff, 0x26c0a, r6, 0x2, '\x00', r9, r7, 0x0, 0x0, 0x5, 0x3}, 0x50) syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0xf958, 0x10100}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000002580)={0x5042000, 0x0, 0x0, 0x0, {0x4036}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000022c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@bloom_filter={0x1e, 0x1, 0x9, 0x31a2, 0x400, r10, 0x8002, '\x00', r9, r7, 0x4, 0x2, 0x2, 0xd}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 10m53.883220128s ago: executing program 5 (id=5721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000402e0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x600}, 0x90) 10m52.563004943s ago: executing program 5 (id=5723): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x8d8, 0x6c8, 0x6c8, 0x0, 0x6c8, 0x1c0, 0x808, 0x808, 0x808, 0x808, 0x808, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@remote, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x20000000}, {}, {}, {0x2}, {}, {0x0, 0x81}, {}, {0x0, 0x0, 0xa2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}]}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00', {0xff}}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x938) 10m51.531582349s ago: executing program 36 (id=5723): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x8d8, 0x6c8, 0x6c8, 0x0, 0x6c8, 0x1c0, 0x808, 0x808, 0x808, 0x808, 0x808, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@remote, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x20000000}, {}, {}, {0x2}, {}, {0x0, 0x81}, {}, {0x0, 0x0, 0xa2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}]}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00', {0xff}}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x938) 30.875337216s ago: executing program 1 (id=7879): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x1268, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12c8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000000a00", @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x44}}, 0x8000) 30.068928972s ago: executing program 1 (id=7881): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000001540)={&(0x7f0000001480)="38d7032ab0c216141a687a4e99908858cd5ee982b85485f2895e158e05ad33a2ae7233baae6d776da17cc855d403d2fff3c4e1c9bdd559205816afd17e462c0b14d7f11abe31fcdf54f01dd87bf2f36c4d0db1e9160bb7456311b3a8cf1689c07c2d067d5bd26bb15c718f011033e857cb75f486e15cd2a0dfda80539e1229f44987a52205", 0x85}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000040)='}i', 0x2, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r5, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000340)={0x8, 0x0, r3, 0xe0e0e0e0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(0x0, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0xfe, 0x3, 0xfffffffe, 0x40, @private2, @mcast1, 0x10, 0x700, 0x1, 0x9}}) sendmsg$nl_route(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x401) syz_io_uring_setup(0x50ea, &(0x7f0000001340)={0x0, 0x7048, 0x2000, 0x1, 0x2bc}, &(0x7f00000013c0), &(0x7f0000001400)) 28.280318255s ago: executing program 1 (id=7885): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000002000f030000000000003404000001ed0a0014040000170000801c400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc0700bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c398ab724577fd742bf44cdd8489086e61aa3cb1d3ab3dac8183102fe6fc8a038e3868a0592811446867969f0fb3f547e83c4ca35aac023f09f15bb0acb3cdc6efd9b0e9df56af7fda01280a384028b35994388"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="5d580000004000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x20) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r5, &(0x7f0000000380)=ANY=[@ANYRES16=r4], 0x69) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x800) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000200)=""/206) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x3, 0xd}, {0x8, 0x1}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) 25.729542478s ago: executing program 1 (id=7891): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r3 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 23.219230458s ago: executing program 1 (id=7899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000400000000a20000000000a05000000000000000000010000030900010073797a300000000014000000020a010100000000000000000100000920000000000a010500c285501527f0a2b40000090900f1ff72797a300000000020000000050a05000000000000000000010000060900010073797a30"], 0x9c}}, 0x0) 22.877898595s ago: executing program 1 (id=7901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000340)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10000, 0xc0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x0, 0xb49, 0x9, 0x100000000000007, 0x0, 0x3}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r6, r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x2}, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000001900000008001c00", @ANYRES32, @ANYBLOB="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"], 0x2c}}, 0x0) write$binfmt_script(r8, &(0x7f0000000080), 0xfecc) symlinkat(0x0, r7, &(0x7f0000000140)='./file0\x00') ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x3, 0xf, 0x0, [{0x3, 0xffffca76, 0xabaf}]}) socket$nl_generic(0x10, 0x3, 0x10) 11.834730353s ago: executing program 7 (id=7928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000800a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000000000000000000000000000ffffffffffffffff020000000000000000000000000000000000000000040000000a0000000000000000000000804000000000000000000864ce000000000000000000000000000044000500fe8000000000000000000000000000bb000000003c00000000000000ffffffff0000000000000000000000000000000000038100"/180], 0xfc}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xe803}}}}}}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x4a58, 0x400, 0x2000003, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x1) 9.76461585s ago: executing program 9 (id=7935): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x5) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x0, 0x2, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240), 0x0, 0x1, 0x1, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @host}, 0x10) socket$inet6(0x10, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000401a0000f7000000000000009ddd0ef2a3a1", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=r5, @ANYRES32], 0x48) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1, 0x4, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x400003, 0x64c240) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 9.165414234s ago: executing program 8 (id=7936): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) getpid() (async) write$sequencer(0xffffffffffffffff, 0x0, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x20000001, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) flock(r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) (async) io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 8.739575259s ago: executing program 7 (id=7937): socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000300000008ac0d4e024000010203010902240006000000000000000101030102aa092100ff0a0122a40f0905810310007f033a"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 8.447140141s ago: executing program 9 (id=7939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200001000000000fcffffff18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001900b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.207443057s ago: executing program 9 (id=7941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) r1 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00090e000000000000000000000000ff000000440001800c000280050001008400000014e9018008000100e0000001082002007f0000011400018008000100e000000108000200e00000020c0002800500010001008000080015400000000106dc2901001700000000040000c821000000080000000208b5374000000400"], 0x7c}, 0x1, 0x0, 0x0, 0x44005}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00090e000000000000000000000000ff000000440001800c000280050001008400000014e9018008000100e0000001082002007f0000011400018008000100e000000108000200e00000020c0002800500010001008000080015400000000106dc2901001700000000040000c821000000080000000208b5374000000400"], 0x7c}, 0x1, 0x0, 0x0, 0x44005}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f00005e8000/0x11000)=nil, 0x11000, 0x7, 0x28011, r1, 0xffff8000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffc, 0x0, @local, 0x7}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="fb03", 0x2}], 0x1}}], 0x1, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="c8000000190000032bbd7000040000000000000000000000000000000000000120010000000000000000000000000002000003ff000000000a000000000000008140423a13cc31ec6ab9c922d4ddca1cae907803cba448ddb77fc6d538360d62305d97ed69775b64f8af74722b92ddcfae1447ee30d9e369bd93", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000020080000000000000000010000000000000010000a002abd70002ebd700008000000"], 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x3b40, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000140), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000440000000000069078ac1414bbac1414aa441c79c1e000070000000000e00000021000037400000000000004d24e224001", @ANYRES32=0x41424344, @ANYRESDEC=r4, @ANYBLOB="5002000090780000"], 0x0) (async) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000440000000000069078ac1414bbac1414aa441c79c1e000070000000000e00000021000037400000000000004d24e224001", @ANYRES32=0x41424344, @ANYRESDEC=r4, @ANYBLOB="5002000090780000"], 0x0) 7.480728848s ago: executing program 37 (id=7901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000340)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10000, 0xc0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x0, 0xb49, 0x9, 0x100000000000007, 0x0, 0x3}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r6, r5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x2}, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000001900000008001c00", @ANYRES32, @ANYBLOB="810014005fcff4003d44cd783e82ca74b4b73e0066d7fbc4c3e1773c926b130ff2a4a81440d6884dd9c3044854820bb6c94aa13f71ae03e041c0c09aa7e26a231f1cb8790cf959d429a079a70a7e6d905cc4489f459826e7895d927190f8fdf77e63aae47a52df758aee2fa813f9fbf21cd96608000000ce52d510d70e6f8bebfc1bb995493026bfe08bde01dc25293342f13fef0928639c5b7646e2f5a6bfbcdbafd8a98aa439f2a13d396f00c0ab9710f6845ce5d2b9e761a304cf2f0c103bcff72e61a659422e93b83a95d9cbd2ab2f00f1802bc165ababdc3a0aecb942f07503c11dde594a8c9df532471f569ef1294afea30f999c8b03c507fb56b0507cabbdb22555f1e9a68217a6b4a84cb6b7360a7ef09226b4f4fa8280fa253091f049c5a708ef78df9f53e7335cfb547ea36d4ad9c30e28682756fd529fc88e1121b6177d353974b88333d83e1e2082f40c924ae3d1059f2b25a6db8c476118d1007ee9ab679ddcfe6e44cb18dbc9e733b70ab5811edf4e470f7a2fb914dfb69292305984ee479477082c37981d21ac4a43"], 0x2c}}, 0x0) write$binfmt_script(r8, &(0x7f0000000080), 0xfecc) symlinkat(0x0, r7, &(0x7f0000000140)='./file0\x00') ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x3, 0xf, 0x0, [{0x3, 0xffffca76, 0xabaf}]}) socket$nl_generic(0x10, 0x3, 0x10) 6.95150344s ago: executing program 8 (id=7943): r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030303030303030a92099e669c00b5c9e3cb0c58c"], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x880) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f00000001c0)=0x1) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) listen(r5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) io_setup(0x9, &(0x7f0000000100)) write(r0, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d12", 0x26) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x60, 0x116, 0x5, "2436a1b5c5b24765552b49ccc57d3457ef918a0664aa1247bd76d11497230db97adb78a91e872289f2b983f957346cb7d8a8160f6165966cda822ae84a1f54f16bdce5b3013767a0a584cd5df9849e32"}, {0x98, 0x109, 0x2, "f413582941e06f6e34e65913e2ef6eb92c289fe9f801a3e63029eab3f2813d1a61556181b03a65057469ece6004e1b1e756345e955cb8dad236f2bd0d216bc6531b9f07fee6bd15f28ac664f317278d6bbf3a638a8f467d2079719ef86a96f72c4d9d99b0a92a4fbf288492e268e4e051778b0df3f0a5de02cd8b82114f30ffa8593"}, {0xa0, 0x131, 0x9, "72dc60dc774e1d0a5685c0c6582193eadb5ebec5c263eb93fb4e2e054b016d04698fe22a30946da07a8988e1f3fe2ff891393b9311c276f475e96007335cb83e377ddde70d69e25436d9fc70c0cfa0388a4aa4e9690962996645a8194b8aca79ad9932bab0c7c04ecd952f0da2e806879b7e160c2a96fd0406b1c25e964106ee18c023ae1daee17a3a"}], 0x198}, 0x10) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) socket$inet_smc(0x2b, 0x1, 0x0) 6.712665051s ago: executing program 9 (id=7944): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x2c, 0x1, 0x3, "1c13973c4aab93c17d4226b1d750185fd75a206da058e85b2197ed31439b1cc2", 0x55595659}) 6.509439484s ago: executing program 6 (id=7945): unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000001fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.875245363s ago: executing program 6 (id=7946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x40, 0x0, 0x40, 0x5, 0x0, 0x9, 0x6, 0x0, 0xff, 0xff, 0xf9, 0x92, 0x901}, {0x1, 0x3, 0x1, 0x9, 0xbf, 0x1, 0x5, 0x9, 0xc, 0x0, 0x7, 0x2, 0x100000001}, {0xc4ef, 0x1c8, 0x0, 0x5, 0x7, 0x2, 0x2, 0x2, 0x78, 0x71, 0x7, 0x8, 0xb4}], 0x4cee2298}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getpeername(r3, 0x0, &(0x7f00000000c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000498b81403b0905a081090000000109022200010000000009045c00012f81f50009058002ff030305e807059445d7c2"], 0x0) 5.622021197s ago: executing program 7 (id=7947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, r5, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000002000000050000000700000000000000", @ANYRES32, @ANYBLOB="025b00000000000000000000000000ffffffec000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) 4.729571337s ago: executing program 8 (id=7948): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000100001040000", @ANYRES32=0x0, @ANYBLOB="5d580000004000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x20) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r5, &(0x7f0000000380)=ANY=[@ANYRES16=r4], 0x69) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x800) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000200)=""/206) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x3, 0xd}, {0x8, 0x1}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) 3.138432797s ago: executing program 9 (id=7949): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_ts_info={0x19}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000008b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [r3, r4]}}], 0x18, 0x20000004}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x37a, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r8, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket(0x2, 0xa, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205647, &(0x7f0000000100)={0x9e0000, 0x6, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00906, 0x0, '\x00', @p_u32=0x0}}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r11, @ANYRES64=r1, @ANYBLOB="1600030021200000500012800c0001006d6163766c616e00400002800800030003000000280005800a00040000000000000000000a00040000000000000000000a000400aaaaaaaaaabb00000a000400ffffffffffff0000"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000083) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'macvlan1\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26008094}, 0x4008000) 3.126272145s ago: executing program 8 (id=7950): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x5) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x0, 0x2, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240), 0x0, 0x1, 0x1, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @host}, 0x10) socket$inet6(0x10, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000001801a0000f7000000000000009ddd0ef2a3a1", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=r5, @ANYRES32], 0x48) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1, 0x4, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x400003, 0x64c240) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2.407083699s ago: executing program 7 (id=7951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x1268, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12c8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000006000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x44}}, 0x8000) 2.287242841s ago: executing program 6 (id=7952): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 2.039673455s ago: executing program 8 (id=7953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) (async) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) write$binfmt_misc(r2, &(0x7f0000000300)="c5f9", 0x2) (async) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x7}], 0x1, 0x40000001, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000140)=0x8) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@any, 0x7}, 0x0, 0x1}) (async) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.981178334s ago: executing program 7 (id=7954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) fchdir(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000240)={0x3, 0x6, {r1}, {0xee01}, 0x800, 0x5}) ptrace(0x10, r4) write$sequencer(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x105, &(0x7f0000000140)={0x0, 0xb6a6, 0x0, 0x20000001, 0x89, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r9, 0x0, r9, &(0x7f00000000c0)=0xc, 0x3, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x1}) r10 = fsopen(&(0x7f0000000300)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) symlink(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00') gettid() bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00\x00\x000 \x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3db1870ea0455b3524aab49a027c432864d518df5948c9ead869240c909b88a7462bda7de5ab3ef20bdfbf816d0936f9d84cee6c73be0e48ee9b186ce84fbc1fb64ad31fabd4696799d882f18dd7be99b55ea5d348f10b1e9b8532480f5541d003a1d4dddce1a769cc6833b9", @ANYRES64=0x0], 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 1.815211257s ago: executing program 6 (id=7955): unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000fffe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.480068002s ago: executing program 8 (id=7956): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd931d3864d39dd5f) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) close(r1) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={[0xfffffffffffffffd, &(0x7f0000000380)='GPL\x00']}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000003c00)=@nat={'nat\x00', 0x19, 0x1, 0x90, [0x200000003a40, 0x0, 0x0, 0x200000003a70, 0x200000003aa0], 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000900000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]}, 0x104) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xffff, 0x7, 0xdd5, 0x1e69}, 0x8) sendmmsg$inet6(r9, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="70b49448f21196840d046b312a7927219f1fc3bb195653502c000000", 0x1c}], 0x1}}], 0x1, 0x20000004) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r6, 0x3b8c, &(0x7f0000000040)={0x30, r8, 0x0, 0x0, 0x8000, 0x6, 0x0, 0x0}) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) 919.240469ms ago: executing program 6 (id=7957): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x40) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000280)=@x25={0x9, @remote}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/253, 0xfd}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/119, 0x77}], 0x8, &(0x7f00000019c0)=""/106, 0x6a}, 0xffff52e0}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000001a40)=""/159, 0x9f}, {&(0x7f0000001b00)=""/42, 0x2a}, {&(0x7f0000001b40)=""/225, 0xe1}, {&(0x7f0000001c40)=""/32, 0x20}], 0x5, &(0x7f0000001d00)=""/106, 0x6a}, 0x2}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/27, 0x1b}, {&(0x7f0000001e00)=""/174, 0xae}], 0x3, &(0x7f0000001f00)=""/209, 0xd1}, 0x3}, {{&(0x7f0000002000)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002080)=""/213, 0xd5}, {&(0x7f0000002180)=""/42, 0x2a}, {&(0x7f00000021c0)=""/108, 0x6c}], 0x3, &(0x7f0000002280)=""/6, 0x6}, 0x4}, {{&(0x7f00000022c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002340)=""/195, 0xc3}, {&(0x7f0000002440)=""/172, 0xac}], 0x2}, 0xb}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002540)=""/61, 0x3d}, {&(0x7f0000002580)=""/163, 0xa3}], 0x2, &(0x7f0000002680)=""/230, 0xe6}, 0x5}], 0x6, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x3, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r5, 0x0) 659.074915ms ago: executing program 7 (id=7958): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x4000000000000d, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) (rerun: 32) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000080)='./file1\x00', 0xc000, 0x1) renameat2(r4, &(0x7f0000000540)='./file1\x00', r4, &(0x7f0000000040)='./file0\x00', 0x5) (async) unlinkat(r4, &(0x7f00000006c0)='./file0\x00', 0x200) getdents64(r4, &(0x7f0000000040)=""/131, 0x83) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x20, 0x14, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0x10, 0x2, "d8b4"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x2b801) io_setup(0x6, &(0x7f0000000540)=0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x44442, 0x10e, 0x21}, 0x18) faccessat2(r7, &(0x7f0000000180)='./file1\x00', 0x28, 0x100) (async) io_submit(r5, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r6, 0x0}]) (async) syz_usb_connect(0x5, 0x61, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000cc9560101d0620c0c4b30102030109024f00020800c00009046d060125a5117a0905010400020017050904ff01040202060f0724010f0305000905010110004b070209058a1200040101d009050b02ff0306cb08090508"], 0x0) (async, rerun: 32) syz_usb_control_io$printer(r3, &(0x7f0000000240)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0xe5, {0xe5, 0x22, "8db52b3c700f535136b44598a46af82b38f6c9cc6179a17fa47b67715eee812b65070d59dd85729a2e765a72f66bdbc07a4211eced98379080e0caabef8ddc0502f7e208bcf7ff55b8b4d771ea2a40df05338d605431bb31ef78240ae53f17db57e37b7ff493f9400928986b2c312f0a0dd789025fa5d9f06aa7ca6fa5ab4e03d81bd2ebd1b0a1528864c5d4cb8f58c2d1ec4435c7cd74edb87bb359ade93c312e44296dfc9aae23984c3007372ad5846f5c9ff364dd0125f670ef85107c287a878f68fd1294f8f37510700a0820b817516851c9ee62b2c4050d836d72d0ca6e157889"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, &(0x7f0000000640)={0x34, &(0x7f00000003c0)={0x0, 0x1b, 0x5c, "8720729beacbae0836d409a57f26f3bb89f3c4374cf0b902ed989e539e08b08faf76c2b3d0a1f9e7f03a7bfbdca896905084e688814c22d6eb9d6ecf820baa5d0b477079316fbc2ac71a0cfe348927627c7ab21db163b217e897ff60"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6c}, &(0x7f0000000500)={0x20, 0x0, 0x30, {0x2e, "a2e492fd2c3173dfb4b37b8b4c7e952e209f1e963802fb8a5062f6dd1ab49d13642d2d89b06aef993d5fef550b4e"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x1}}) (rerun: 32) 463.438516ms ago: executing program 6 (id=7959): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000100001040000", @ANYRES32=0x0, @ANYBLOB="5d580000004000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x20) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r5, &(0x7f0000000380)=ANY=[@ANYRES16=r4], 0x69) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x800) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000200)=""/206) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x3, 0xd}, {0x8, 0x1}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 9 (id=7960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[]) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, r5, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000002000000050000000700000000000000", @ANYRES32, @ANYBLOB="025b00000000000000000000000000ffffffec000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) kernel console output (not intermixed with test programs): usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2092.325758][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2092.334081][ T24] usb 7-1: SerialNumber: syz [ 2092.334116][ T5947] usb 2-1: Product: syz [ 2092.345488][ T5947] usb 2-1: Manufacturer: syz [ 2092.350211][ T5947] usb 2-1: SerialNumber: syz [ 2092.351218][ T24] usb 7-1: config 0 descriptor?? [ 2092.371757][ T5947] usb 2-1: config 0 descriptor?? [ 2092.393092][ T5947] usb 2-1: selecting invalid altsetting 0 [ 2092.483255][ T24] usb 7-1: selecting invalid altsetting 0 [ 2092.942289][ T9869] ptrace attach of "./syz-executor exec"[29175] was attempted by "./syz-executor exec"[9869] [ 2094.306922][ T9898] tipc: Started in network mode [ 2094.311938][ T9898] tipc: Node identity 4aee8878b659, cluster identity 4711 [ 2094.338863][ T9898] tipc: Enabled bearer , priority 0 [ 2094.347235][ T9898] syzkaller0: entered promiscuous mode [ 2094.353546][ T9898] syzkaller0: entered allmulticast mode [ 2094.380594][ T9898] tipc: Resetting bearer [ 2094.520853][ T5947] usb 7-1: USB disconnect, device number 6 [ 2094.982698][ T9895] tipc: Resetting bearer [ 2095.242992][ T9895] tipc: Disabling bearer [ 2095.480465][ T5947] usb 2-1: USB disconnect, device number 78 [ 2095.934569][ T9955] xt_nfacct: accounting object `syz0' does not exists [ 2097.179324][ T9981] fuse: Unknown parameter 'gaoup' [ 2098.057598][ T9991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2098.064066][ T9991] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2098.071831][ T9991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2098.080884][ T9991] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2098.091108][ T9991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2098.111237][ T9991] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2098.585791][ T9991] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2099.111493][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.119523][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.776429][ T4189] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2099.804471][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2099.946686][ T4189] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2099.981055][ T4189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2100.010180][ T4189] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2100.031374][ T4189] usb 2-1: config 1 has no interface number 1 [ 2100.069742][ T4189] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2100.089620][ T9] usb 7-1: config 0 has no interfaces? [ 2100.101770][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2100.112514][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.121494][ T9] usb 7-1: Product: syz [ 2100.127618][ T9] usb 7-1: Manufacturer: syz [ 2100.139023][ T9] usb 7-1: SerialNumber: syz [ 2100.178959][ T5451] Bluetooth: hci0: command 0x0405 tx timeout [ 2100.179062][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 2100.185084][ T5451] Bluetooth: hci2: command 0x0406 tx timeout [ 2100.185139][ T5451] Bluetooth: hci6: command 0x0405 tx timeout [ 2100.185183][ T5451] Bluetooth: hci3: command 0x0c1a tx timeout [ 2100.185316][ T4189] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2100.233987][ T9] usb 7-1: config 0 descriptor?? [ 2100.632338][ T4189] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2100.714498][ T4189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.812857][ T4189] usb 2-1: Product: syz [ 2100.824109][ T4189] usb 2-1: Manufacturer: syz [ 2100.896591][ T4189] usb 2-1: SerialNumber: syz [ 2101.181923][ T4189] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 2101.194117][ T4189] usb 2-1: MIDIStreaming interface descriptor not found [ 2101.356781][ T4189] usb 2-1: USB disconnect, device number 79 [ 2101.518189][ T6343] udevd[6343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2102.220048][T12736] Bluetooth: hci0: command 0x0405 tx timeout [ 2102.455614][ T4189] usb 7-1: USB disconnect, device number 7 [ 2103.278143][ T4189] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2103.556112][ T4189] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2103.584445][ T4189] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2103.629877][ T4189] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2103.664600][ T4189] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2103.685788][ T4189] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2103.703904][ T4189] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2103.713586][ T4189] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2103.730391][ T4189] usb 7-1: Product: syz [ 2103.738629][T10120] netlink: 140 bytes leftover after parsing attributes in process `syz.9.7411'. [ 2103.750363][ T4189] usb 7-1: Manufacturer: syz [ 2103.762287][ T4189] cdc_wdm 7-1:1.0: skipping garbage [ 2103.769016][T10120] netlink: 140 bytes leftover after parsing attributes in process `syz.9.7411'. [ 2103.778248][ T4189] cdc_wdm 7-1:1.0: skipping garbage [ 2103.788601][ T4189] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2103.795815][ T4189] cdc_wdm 7-1:1.0: Unknown control protocol [ 2104.255859][ T5853] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2104.285060][ T5853] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2104.294782][T12736] Bluetooth: hci0: command 0x0405 tx timeout [ 2104.335125][ T5853] usb 9-1: USB disconnect, device number 44 [ 2104.515455][ C1] wdm_int_callback: 418 callbacks suppressed [ 2104.515481][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.528092][ C1] wdm_int_callback: 418 callbacks suppressed [ 2104.528107][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.541000][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.547639][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.554156][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.560767][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.567288][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.573876][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.580168][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.586760][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.593036][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.599645][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.606055][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.612677][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.624518][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.631154][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.644596][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.651254][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.657941][ T4189] usb 7-1: USB disconnect, device number 8 [ 2104.664713][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2104.671349][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2104.677453][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2104.894826][ T5853] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 2105.073708][ T5853] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2105.153503][ T5853] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2105.181516][ T5853] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2105.213275][ T5853] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2105.250421][ T5853] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2105.298694][ T5853] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2105.326034][ T5853] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2105.354166][ T5853] usb 9-1: Product: syz [ 2105.366524][ T5853] usb 9-1: Manufacturer: syz [ 2105.396674][ T5853] cdc_wdm 9-1:1.0: skipping garbage [ 2105.425329][ T5853] cdc_wdm 9-1:1.0: skipping garbage [ 2105.451655][ T5853] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2105.525315][ T5853] cdc_wdm 9-1:1.0: Unknown control protocol [ 2105.804640][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2105.975227][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2106.003059][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2106.064829][ T9] usb 2-1: config 179 has no interface number 0 [ 2106.071165][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2106.212489][T10197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2106.262139][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2106.414598][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2106.483340][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2106.501013][T10191] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2106.530077][ T9] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2106.635576][ T9] usb 2-1: config 179 interface 65 has no altsetting 0 [ 2106.673982][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2106.844139][ T5947] usb 9-1: USB disconnect, device number 45 [ 2106.850125][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2106.861557][T10113] cdc_wdm 9-1:1.0: Tx URB error: -19 [ 2107.031191][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.100084][T10202] cdc_wdm 9-1:1.0: Tx URB error: -19 [ 2107.180217][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7418'. [ 2107.338187][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input105 [ 2107.396502][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.450727][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.467115][ T5204] input input105: unable to receive magic message: -110 [ 2107.532833][ T5204] input input105: unable to receive magic message: -32 [ 2107.655693][ T5204] input input105: unable to receive magic message: -32 [ 2107.690143][ T5204] input input105: unable to receive magic message: -32 [ 2107.748745][ T9] usb 2-1: USB disconnect, device number 80 [ 2107.754742][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2107.942292][T10251] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 2108.119310][T10259] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2108.454755][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2109.015004][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 2109.150040][ T9] usb 7-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2109.217153][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2109.232909][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 2109.279636][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.303660][ T9] usb 7-1: config 0 descriptor?? [ 2109.664888][ T30] audit: type=1326 audit(1752987648.407:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2109.774617][ T30] audit: type=1326 audit(1752987648.407:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2109.806601][ T9] lenovo 0003:17EF:60FE.0034: hidraw0: USB HID v0.0b Device [HID 17ef:60fe] on usb-dummy_hcd.6-1/input0 [ 2109.834606][ T30] audit: type=1326 audit(1752987648.407:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2110.544895][ T30] audit: type=1326 audit(1752987648.407:9557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2110.574501][ T30] audit: type=1326 audit(1752987648.417:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2110.604522][ T30] audit: type=1326 audit(1752987648.417:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2110.727886][ T30] audit: type=1326 audit(1752987648.417:9560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2110.760474][ T30] audit: type=1326 audit(1752987648.417:9561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2110.787642][ T30] audit: type=1326 audit(1752987648.417:9562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2110.814594][ T30] audit: type=1326 audit(1752987648.417:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.7.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2111.027073][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7426'. [ 2111.092972][T10298] syz_tun: entered promiscuous mode [ 2111.166181][T10298] syz_tun: left promiscuous mode [ 2111.744621][ T5947] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2111.896447][ T5947] usb 10-1: device descriptor read/64, error -71 [ 2111.987131][ T4189] usb 7-1: USB disconnect, device number 9 [ 2112.199265][ T5947] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 2112.235316][T10349] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7436'. [ 2112.340699][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7439'. [ 2112.362090][T10365] syz_tun: entered promiscuous mode [ 2112.371641][T10365] syz_tun: left promiscuous mode [ 2112.385254][ T5947] usb 10-1: device descriptor read/64, error -71 [ 2112.394078][T10369] sg_write: data in/out 475/8 bytes for SCSI command 0xfd-- guessing data in; [ 2112.394078][T10369] program syz.7.7437 not setting count and/or reply_len properly [ 2112.535270][ T5947] usb usb10-port1: attempt power cycle [ 2112.894670][ T6230] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2112.916994][ T5947] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 2112.945304][ T5947] usb 10-1: device descriptor read/8, error -71 [ 2112.974659][ T4189] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2113.057568][ T6230] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2113.069321][ T6230] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2113.079673][ T6230] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2113.089109][ T6230] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.099534][ T6230] usb 7-1: config 0 descriptor?? [ 2113.134539][ T4189] usb 2-1: Using ep0 maxpacket: 16 [ 2113.164877][ T4189] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 2113.198714][ T4189] usb 2-1: config 0 has no interface number 0 [ 2113.205612][ T4189] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2113.214454][ T5947] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 2113.222094][ T4189] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2113.244052][ T4189] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 2113.267406][ T4189] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2113.277776][ T4189] usb 2-1: Product: syz [ 2113.282006][ T4189] usb 2-1: Manufacturer: syz [ 2113.290174][ T4189] usb 2-1: SerialNumber: syz [ 2113.296896][ T5947] usb 10-1: device descriptor read/8, error -71 [ 2113.318827][ T4189] usb 2-1: config 0 descriptor?? [ 2113.331764][ T4189] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 2113.341964][ T4189] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 2113.358847][ T4189] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 2113.376063][ T4189] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2113.390704][ T4189] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 2113.411814][ T4189] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2113.417712][ T6230] usbhid 7-1:0.0: can't add hid device: -71 [ 2113.433607][ T4189] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 2113.452834][ T5947] usb usb10-port1: unable to enumerate USB device [ 2113.462059][ T6230] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2113.474899][ T6230] usb 7-1: USB disconnect, device number 10 [ 2113.493062][ T4189] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2113.523173][ T4189] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 2113.591737][ T4189] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2113.978490][T10452] netlink: 120 bytes leftover after parsing attributes in process `syz.6.7449'. [ 2114.823050][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7452'. [ 2114.838311][T10459] syz_tun: entered promiscuous mode [ 2114.845915][T10459] syz_tun: left promiscuous mode [ 2115.565620][T10474] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_team, syncid = 3, id = 0 [ 2115.699418][T10477] binder: 10476:10477 ioctl c0306201 200000000100 returned -11 [ 2115.755525][ T24] usb 2-1: USB disconnect, device number 81 [ 2115.776433][ T24] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2115.852577][ T24] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2116.224998][ T24] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2116.309285][ T24] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2116.462898][ T24] keyspan 2-1:0.107: device disconnected [ 2116.608013][ T4189] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2116.781371][ T4189] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2116.796359][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7458'. [ 2116.820485][ T4189] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2116.852885][ T4189] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2116.882535][ T4189] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2116.912049][ T4189] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2116.946488][ T4189] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2116.970447][ T4189] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2117.003042][ T4189] usb 7-1: Product: syz [ 2117.012248][ T4189] usb 7-1: Manufacturer: syz [ 2117.047922][ T4189] cdc_wdm 7-1:1.0: skipping garbage [ 2117.064515][ T4189] cdc_wdm 7-1:1.0: skipping garbage [ 2117.075977][ T4189] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2117.081934][ T4189] cdc_wdm 7-1:1.0: Unknown control protocol [ 2117.535926][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7463'. [ 2117.564247][T10545] syz_tun: entered promiscuous mode [ 2117.597073][T10545] syz_tun: left promiscuous mode [ 2117.623866][ C1] wdm_int_callback: 5 callbacks suppressed [ 2117.623891][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2117.624309][ T6230] usb 7-1: USB disconnect, device number 11 [ 2117.629758][ C1] wdm_int_callback: 5 callbacks suppressed [ 2117.629776][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2117.629792][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2117.697845][T10539] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 2117.754531][T10542] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 2118.110881][T10574] input: syz0 as /devices/virtual/input/input106 [ 2118.214760][ T6230] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 2118.390156][ T6230] usb 10-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2118.394149][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2118.403921][ T6230] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.420799][ T6230] usb 10-1: Product: syz [ 2118.426594][ T6230] usb 10-1: Manufacturer: syz [ 2118.436837][ T6230] usb 10-1: SerialNumber: syz [ 2118.456051][ T6230] usb 10-1: config 0 descriptor?? [ 2118.475380][ T6230] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2118.594457][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 2118.624544][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2118.632038][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2118.684546][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2118.722214][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2118.769692][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2118.822795][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2118.839812][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2118.879333][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2118.940091][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2118.971848][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2118.995460][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2119.003115][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2119.026731][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2119.044504][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2119.064414][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2119.080027][ T24] usb 2-1: string descriptor 0 read error: -22 [ 2119.087730][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2119.109838][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.141392][T10588] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7470'. [ 2119.151996][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2119.521824][ T24] usb 2-1: USB disconnect, device number 82 [ 2119.582569][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7471'. [ 2119.597364][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7471'. [ 2119.752196][T10617] xt_TCPMSS: Only works on TCP SYN packets [ 2120.361555][ T6230] gspca_sunplus: reg_r err -71 [ 2120.379023][ T6230] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 2120.409098][ T6230] usb 10-1: USB disconnect, device number 74 [ 2120.628174][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2120.628195][ T30] audit: type=1326 audit(1752987659.397:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2120.661287][ T30] audit: type=1326 audit(1752987659.397:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2120.689829][ T30] audit: type=1326 audit(1752987659.407:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2120.717695][ T30] audit: type=1326 audit(1752987659.407:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2120.743434][ T30] audit: type=1326 audit(1752987659.407:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2120.805538][ T30] audit: type=1326 audit(1752987659.407:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2120.830064][ T30] audit: type=1326 audit(1752987659.407:9600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2120.854138][ T30] audit: type=1326 audit(1752987659.407:9601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2120.877474][ T30] audit: type=1326 audit(1752987659.407:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2120.900829][ T30] audit: type=1326 audit(1752987659.417:9603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.7476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2121.110549][T10644] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7478'. [ 2122.460955][T10659] fuse: Bad value for 'user_id' [ 2122.470402][T10659] fuse: Bad value for 'user_id' [ 2122.481128][T10657] fuse: Bad value for 'user_id' [ 2122.486413][T10657] fuse: Bad value for 'user_id' [ 2122.557312][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2122.566822][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2123.143802][T10679] vhci_hcd vhci_hcd.0: port 0 already used [ 2123.534638][ T4189] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2123.704774][ T4189] usb 2-1: config 0 has no interfaces? [ 2123.722496][ T4189] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2123.734300][ T4189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.744150][ T4189] usb 2-1: Product: syz [ 2123.751834][ T4189] usb 2-1: Manufacturer: syz [ 2123.760030][ T4189] usb 2-1: SerialNumber: syz [ 2123.773479][ T4189] usb 2-1: config 0 descriptor?? [ 2123.996192][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7485'. [ 2124.064741][ T4189] usb 10-1: new full-speed USB device number 75 using dummy_hcd [ 2124.221714][ T4189] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2124.263883][ T4189] usb 10-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 2124.325708][ T4189] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.375470][ T4189] usb 10-1: config 0 descriptor?? [ 2124.822808][ T4189] nintendo 0003:057E:200E.0035: ignoring exceeding usage max [ 2124.831026][ T4189] nintendo 0003:057E:200E.0035: item fetching failed at offset 5/7 [ 2124.840438][ T4189] nintendo 0003:057E:200E.0035: HID parse failed [ 2124.870727][ T4189] nintendo 0003:057E:200E.0035: probe - fail = -22 [ 2124.889300][ T4189] nintendo 0003:057E:200E.0035: probe with driver nintendo failed with error -22 [ 2125.947829][ T4189] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2126.100310][T10759] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7492'. [ 2126.219612][ T4189] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2126.302550][ T4189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.368368][ T4189] usb 7-1: config 0 descriptor?? [ 2126.461801][ T24] usb 2-1: USB disconnect, device number 83 [ 2126.633524][ T4189] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2126.642531][T10769] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2126.745797][ T9] usb 10-1: USB disconnect, device number 75 [ 2126.835892][ T4189] [drm:udl_init] *ERROR* Selecting channel failed [ 2126.884038][ T4189] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 2126.919529][ T4189] [drm] Initialized udl on minor 2 [ 2127.095070][ T4189] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2127.202675][ T4189] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 2127.277803][ T24] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2127.294538][T10792] binder: 10791:10792 unknown command 0 [ 2127.365809][ T4189] usb 7-1: USB disconnect, device number 12 [ 2127.372070][ T24] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 2127.405720][T10792] binder: 10791:10792 ioctl c0306201 200000001a80 returned -22 [ 2127.630287][T10815] xt_nfacct: accounting object `syz0' does not exists [ 2127.948352][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 2127.948374][ T30] audit: type=1326 audit(1752987666.787:9679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.7.7500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x0 [ 2128.814632][T10847] lo: entered promiscuous mode [ 2128.822298][T10847] tunl0: entered promiscuous mode [ 2128.832747][T10847] gre0: entered promiscuous mode [ 2128.846736][T10847] gretap0: entered promiscuous mode [ 2128.860813][T10847] erspan0: entered promiscuous mode [ 2128.877468][T10847] ip_vti0: entered promiscuous mode [ 2128.892814][T10847] ip6_vti0: entered promiscuous mode [ 2128.908576][T10847] sit0: entered promiscuous mode [ 2128.922726][T10847] ip6tnl0: entered promiscuous mode [ 2128.938325][T10847] ip6gre0: entered promiscuous mode [ 2128.951135][T10847] syz_tun: entered promiscuous mode [ 2128.963485][T10847] ip6gretap0: entered promiscuous mode [ 2129.002192][T10847] bridge0: entered promiscuous mode [ 2129.023434][T10847] vcan0: entered promiscuous mode [ 2129.052283][T10847] bond0: entered promiscuous mode [ 2129.065652][T10847] bond_slave_0: entered promiscuous mode [ 2129.085773][T10847] bond_slave_1: entered promiscuous mode [ 2129.092882][T10847] team0: entered promiscuous mode [ 2129.098998][T10847] team_slave_0: entered promiscuous mode [ 2129.106450][T10847] team_slave_1: entered promiscuous mode [ 2129.116264][T10847] dummy0: entered promiscuous mode [ 2129.131420][T10847] nlmon0: entered promiscuous mode [ 2129.161432][T10847] caif0: entered promiscuous mode [ 2129.186950][T10847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2129.342272][T10831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2130.384512][ T5947] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 2130.624583][ T5947] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 2130.632981][ T5947] usb 7-1: config 0 has no interface number 0 [ 2130.639252][ T5947] usb 7-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 2130.652937][ T5947] usb 7-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2130.675690][ T5947] usb 7-1: config 0 interface 84 has no altsetting 0 [ 2130.682447][ T5947] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2130.691874][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.792627][ T5947] usb 7-1: config 0 descriptor?? [ 2130.842824][T10897] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2130.876572][ T5947] option 7-1:0.84: GSM modem (1-port) converter detected [ 2131.088368][ T5947] usb 7-1: USB disconnect, device number 13 [ 2131.155216][ T5947] option 7-1:0.84: device disconnected [ 2131.343947][T10986] xt_nfacct: accounting object `syz0' does not exists [ 2131.858959][T10991] macsec1: entered promiscuous mode [ 2131.877188][T10991] macsec1: entered allmulticast mode [ 2131.893509][T10991] hsr0: entered allmulticast mode [ 2131.910146][T10991] hsr_slave_0: entered allmulticast mode [ 2132.036576][T10991] hsr_slave_1: entered allmulticast mode [ 2132.835438][T10991] hsr0: left allmulticast mode [ 2132.874530][T10991] hsr_slave_0: left allmulticast mode [ 2132.886718][T10991] hsr_slave_1: left allmulticast mode [ 2133.311837][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7516'. [ 2133.334513][T27058] Bluetooth: hci0: command 0x0405 tx timeout [ 2133.615852][T27058] Bluetooth: hci3: command 0x0c1a tx timeout [ 2134.191577][T11013] syz_tun: entered promiscuous mode [ 2134.200295][T11013] syz_tun: left promiscuous mode [ 2134.405384][T10989] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2134.446944][T10989] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2134.464993][T10989] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2134.491895][T10989] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2134.498781][T10989] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2135.764678][T11055] kAFS: unable to lookup cell '.,' [ 2135.918830][ T5947] IPVS: starting estimator thread 0... [ 2136.241871][T11065] binder: 11064:11065 ioctl c0306201 200000000640 returned -14 [ 2136.344778][T11057] IPVS: using max 47 ests per chain, 112800 per kthread [ 2136.504741][T12736] Bluetooth: hci6: command 0x0405 tx timeout [ 2136.578588][T12736] Bluetooth: hci0: command 0x0405 tx timeout [ 2136.584720][T12736] Bluetooth: hci4: command 0x0406 tx timeout [ 2136.590739][T12736] Bluetooth: hci2: command 0x0406 tx timeout [ 2138.187753][T11095] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7532'. [ 2139.458005][ T6230] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 2139.654454][ T6230] usb 9-1: Using ep0 maxpacket: 16 [ 2139.665480][ T6230] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2140.064804][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2140.410575][T11100] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7531'. [ 2140.774496][ T6230] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2141.057016][T11122] bond1: entered allmulticast mode [ 2141.103005][T11122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2141.370145][ T6230] usb 9-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 2141.398496][ T6230] usb 9-1: config 0 has no interface number 0 [ 2141.407601][ T6230] usb 9-1: too many endpoints for config 0 interface 1 altsetting 240: 228, using maximum allowed: 30 [ 2141.481867][ T6230] usb 9-1: config 0 interface 1 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 228 [ 2141.549448][ T6230] usb 9-1: config 0 interface 1 has no altsetting 0 [ 2141.559666][ T6230] usb 9-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 2141.572152][ T6230] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.606402][ T6230] usb 9-1: Product: syz [ 2141.621371][ T6230] usb 9-1: Manufacturer: syz [ 2141.688646][ T6230] usb 9-1: SerialNumber: syz [ 2141.710214][ T6230] usb 9-1: config 0 descriptor?? [ 2141.820997][T11171] macsec1: entered promiscuous mode [ 2141.888632][T11171] macsec1: entered allmulticast mode [ 2141.924958][T11171] hsr0: entered allmulticast mode [ 2141.934553][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2141.955127][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.991356][T11171] hsr_slave_0: entered allmulticast mode [ 2142.028315][ T6230] usb 9-1: USB disconnect, device number 46 [ 2142.045374][T11171] hsr_slave_1: entered allmulticast mode [ 2142.086327][T11171] hsr0: left allmulticast mode [ 2142.091194][T11171] hsr_slave_0: left allmulticast mode [ 2142.104542][T11171] hsr_slave_1: left allmulticast mode [ 2142.710942][T11211] syzkaller1: entered promiscuous mode [ 2142.717019][T11211] syzkaller1: entered allmulticast mode [ 2143.063202][T11227] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7550'. [ 2143.104099][T11112] syz.9.7534 (11112): drop_caches: 2 [ 2143.524560][ T888] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2144.226938][T11253] geneve2: entered allmulticast mode [ 2144.294447][ T888] usb 7-1: Using ep0 maxpacket: 32 [ 2144.329877][ T888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2144.368030][ T888] usb 7-1: config 5 has an invalid interface number: 52 but max is 0 [ 2144.393075][ T888] usb 7-1: config 5 has no interface number 0 [ 2144.411055][ T888] usb 7-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2144.424721][ T24] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 2144.442293][T11263] macsec1: entered promiscuous mode [ 2144.448614][T11263] macsec1: entered allmulticast mode [ 2144.459822][ T888] usb 7-1: string descriptor 0 read error: -22 [ 2144.466177][T11263] hsr0: entered allmulticast mode [ 2144.474665][ T888] usb 7-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 2144.483865][T11263] hsr_slave_0: entered allmulticast mode [ 2144.490524][T11263] hsr_slave_1: entered allmulticast mode [ 2144.496328][ T888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.511712][T11263] hsr0: left allmulticast mode [ 2144.518446][T11230] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2144.545551][T11263] hsr_slave_0: left allmulticast mode [ 2144.558895][T11263] hsr_slave_1: left allmulticast mode [ 2144.571239][ T888] aircable 7-1:5.52: aircable converter detected [ 2144.584490][ T24] usb 10-1: device descriptor read/64, error -71 [ 2144.651839][ T888] usb 7-1: aircable converter now attached to ttyUSB0 [ 2144.824521][ T24] usb 10-1: new full-speed USB device number 77 using dummy_hcd [ 2145.015692][ T24] usb 10-1: device descriptor read/64, error -71 [ 2145.135057][ T24] usb usb10-port1: attempt power cycle [ 2145.284494][ T4189] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2145.404639][ T5915] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 2145.426190][ T4189] usb 2-1: device descriptor read/64, error -71 [ 2145.494676][ T24] usb 10-1: new full-speed USB device number 78 using dummy_hcd [ 2145.528481][ T24] usb 10-1: device descriptor read/8, error -71 [ 2145.569439][ T5915] usb 9-1: config 0 has no interfaces? [ 2145.583350][ T5915] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2145.593389][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.606555][ T5915] usb 9-1: Product: syz [ 2145.610841][ T5915] usb 9-1: Manufacturer: syz [ 2145.618693][ T5915] usb 9-1: SerialNumber: syz [ 2145.634230][ T5915] usb 9-1: config 0 descriptor?? [ 2145.684769][ T4189] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2145.774630][ T24] usb 10-1: new full-speed USB device number 79 using dummy_hcd [ 2145.819495][ T24] usb 10-1: device descriptor read/8, error -71 [ 2145.826093][ T4189] usb 2-1: device descriptor read/64, error -71 [ 2145.871616][T11284] : entered promiscuous mode [ 2145.880962][ T888] usb 9-1: USB disconnect, device number 47 [ 2145.935870][ T24] usb usb10-port1: unable to enumerate USB device [ 2145.944049][ T4189] usb usb2-port1: attempt power cycle [ 2146.092385][ T888] usb 7-1: USB disconnect, device number 14 [ 2146.120891][ T888] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 2146.146391][ T888] aircable 7-1:5.52: device disconnected [ 2146.284462][ T4189] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2146.305501][ T4189] usb 2-1: device descriptor read/8, error -71 [ 2146.519146][ T888] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 2146.544610][ T4189] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2146.598871][ T4189] usb 2-1: device descriptor read/8, error -71 [ 2146.709968][ T888] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 2146.715169][ T4189] usb usb2-port1: unable to enumerate USB device [ 2146.718689][ T888] usb 7-1: config 0 has no interface number 0 [ 2146.733430][ T888] usb 7-1: config 0 interface 29 has no altsetting 0 [ 2146.743198][ T888] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 2146.799934][ T888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.834520][ T888] usb 7-1: Product: syz [ 2146.839929][ T888] usb 7-1: Manufacturer: syz [ 2146.854703][ T888] usb 7-1: SerialNumber: syz [ 2146.865351][ T5915] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 2146.886392][ T888] usb 7-1: config 0 descriptor?? [ 2147.004969][ T5915] usb 9-1: device descriptor read/64, error -71 [ 2147.182807][ T888] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2147.384774][ T5915] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 2147.416504][ T888] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 2147.463669][ T888] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 2147.527510][ T888] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 2147.606338][ T5915] usb 9-1: device descriptor read/64, error -71 [ 2147.745308][ T5915] usb usb9-port1: attempt power cycle [ 2147.875832][ T888] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -22 [ 2148.021978][ T888] usb 7-1: USB disconnect, device number 15 [ 2148.146197][T11368] macsec1: entered promiscuous mode [ 2148.151938][T11368] macsec1: entered allmulticast mode [ 2148.158444][T11368] hsr0: entered allmulticast mode [ 2148.166673][T11368] hsr_slave_0: entered allmulticast mode [ 2148.173411][T11368] hsr_slave_1: entered allmulticast mode [ 2148.195390][T11368] hsr0: left allmulticast mode [ 2148.200382][T11368] hsr_slave_0: left allmulticast mode [ 2148.210517][T11368] hsr_slave_1: left allmulticast mode [ 2148.274661][ T5915] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2148.296467][T11374] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7569'. [ 2148.352466][ T5915] usb 9-1: device descriptor read/8, error -71 [ 2148.594668][ T5915] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2148.729633][ T30] audit: type=1326 audit(1752987687.507:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2148.759220][ T30] audit: type=1326 audit(1752987687.507:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2148.802494][ T5915] usb 9-1: device descriptor read/8, error -71 [ 2148.890596][ T30] audit: type=1326 audit(1752987687.507:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2148.944754][ T5915] usb usb9-port1: unable to enumerate USB device [ 2148.958688][ T30] audit: type=1326 audit(1752987687.507:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2149.186713][ T30] audit: type=1326 audit(1752987687.507:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2149.393359][ T30] audit: type=1326 audit(1752987687.517:9685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2149.596207][ T30] audit: type=1326 audit(1752987687.517:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2149.841024][ T30] audit: type=1326 audit(1752987687.517:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2149.892427][ T30] audit: type=1326 audit(1752987687.517:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2149.921933][ T30] audit: type=1326 audit(1752987687.517:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b80d8e9a9 code=0x7ffc0000 [ 2150.196317][T11399] fuse: Bad value for 'user_id' [ 2150.201404][T11398] fuse: Bad value for 'user_id' [ 2150.206326][T11399] fuse: Bad value for 'user_id' [ 2150.211182][T11398] fuse: Bad value for 'user_id' [ 2150.625352][T11409] syz.7.7578: attempt to access beyond end of device [ 2150.625352][T11409] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2150.764294][T12736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2150.776951][T12736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2150.785966][T12736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2150.797522][T12736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2150.818036][T12736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2150.894954][T11429] tipc: Enabling of bearer rejected, failed to enable media [ 2151.027705][ T4189] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 2151.198256][ T4189] usb 10-1: Using ep0 maxpacket: 16 [ 2151.223087][T11533] hsr0: entered promiscuous mode [ 2151.229223][T11533] macsec1: entered promiscuous mode [ 2151.236726][ T4189] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.248777][T11533] macsec1: entered allmulticast mode [ 2151.254267][T11533] hsr0: entered allmulticast mode [ 2151.262971][T11533] hsr_slave_0: entered allmulticast mode [ 2151.270947][T11533] hsr_slave_1: entered allmulticast mode [ 2151.278519][ T4189] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2151.291185][T11533] hsr0: left allmulticast mode [ 2151.296929][T11533] hsr_slave_0: left allmulticast mode [ 2151.302432][T11533] hsr_slave_1: left allmulticast mode [ 2151.317693][ T4189] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2151.327680][ T4189] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2151.367226][ T4189] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2151.382281][ T4189] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2151.392724][ T4189] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2151.401411][ T4189] usb 10-1: Manufacturer: syz [ 2151.450046][ T4189] usb 10-1: config 0 descriptor?? [ 2151.558488][T11427] chnl_net:caif_netlink_parms(): no params data found [ 2151.695770][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7579'. [ 2151.912607][ T4189] rc_core: IR keymap rc-hauppauge not found [ 2151.934898][ T4189] Registered IR keymap rc-empty [ 2151.939985][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2151.984499][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.019540][ T4189] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 2152.021993][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 2152.048464][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.057601][T11427] bridge_slave_0: entered allmulticast mode [ 2152.064167][ T4189] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input108 [ 2152.082243][T11427] bridge_slave_0: entered promiscuous mode [ 2152.087067][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.108382][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 2152.116021][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.123802][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 2152.132287][T11427] bridge_slave_1: entered allmulticast mode [ 2152.138894][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.150677][T11427] bridge_slave_1: entered promiscuous mode [ 2152.174671][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.194627][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.228968][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.261126][T11427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2152.270637][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.284137][T11427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2152.302286][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.324518][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.354875][ T4189] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2152.396600][ T4189] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2152.414151][T11427] team0: Port device team_slave_0 added [ 2152.421611][ T4189] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2152.447743][T11427] team0: Port device team_slave_1 added [ 2152.468076][ T4189] usb 10-1: USB disconnect, device number 80 [ 2152.584989][T11427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2152.592509][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2152.620583][T11427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2152.637228][T11427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2152.644287][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2152.672370][T11427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2152.754245][T11427] hsr_slave_0: entered promiscuous mode [ 2152.761734][T11427] hsr_slave_1: entered promiscuous mode [ 2152.770967][T11427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2152.778916][T11427] Cannot create hsr debugfs directory [ 2152.854593][T12736] Bluetooth: hci1: command tx timeout [ 2153.068918][T11427] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.110611][T11799] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2153.206121][T11427] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.445715][T11427] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.706015][T11427] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.787042][T11812] xt_nfacct: accounting object `syz0' does not exists [ 2154.256845][T11823] kvm: pic: non byte write [ 2154.605058][T11427] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2154.642803][T11427] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2154.666761][ T4189] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 2154.705841][T11427] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2154.742243][T11427] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2154.944521][ T4189] usb 10-1: Using ep0 maxpacket: 32 [ 2154.944866][T12736] Bluetooth: hci1: command 0x041b tx timeout [ 2154.971592][ T4189] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2155.307910][ T4189] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.483187][ T4189] usb 10-1: config 0 descriptor?? [ 2155.572466][T11427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2155.871231][T11427] 8021q: adding VLAN 0 to HW filter on device team0 [ 2156.053386][ T1254] bridge0: port 1(bridge_slave_0) entered blocking state [ 2156.060936][ T1254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2156.105198][ T558] bridge0: port 2(bridge_slave_1) entered blocking state [ 2156.112451][ T558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2156.472820][T11427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2156.824007][T11873] FAULT_INJECTION: forcing a failure. [ 2156.824007][T11873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2156.838178][T11873] CPU: 0 UID: 0 PID: 11873 Comm: syz.7.7598 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 2156.838204][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2156.838214][T11873] Call Trace: [ 2156.838223][T11873] [ 2156.838231][T11873] dump_stack_lvl+0x189/0x250 [ 2156.838260][T11873] ? __pfx____ratelimit+0x10/0x10 [ 2156.838282][T11873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2156.838303][T11873] ? __pfx__printk+0x10/0x10 [ 2156.838330][T11873] ? fs_reclaim_acquire+0x7d/0x100 [ 2156.838357][T11873] should_fail_ex+0x414/0x560 [ 2156.838382][T11873] prepare_alloc_pages+0x213/0x610 [ 2156.838400][T11873] __alloc_frozen_pages_noprof+0x123/0x370 [ 2156.838414][T11873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2156.838432][T11873] ? policy_nodemask+0x27c/0x720 [ 2156.838451][T11873] ? __lock_acquire+0xab9/0xd20 [ 2156.838474][T11873] alloc_pages_bulk_noprof+0x560/0x710 [ 2156.838501][T11873] ? alloc_pages_noprof+0xbe/0x190 [ 2156.838529][T11873] kasan_populate_vmalloc+0xba/0x1a0 [ 2156.838551][T11873] alloc_vmap_area+0xd51/0x1490 [ 2156.838575][T11873] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2156.838589][T11873] ? __kasan_kmalloc+0x93/0xb0 [ 2156.838608][T11873] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 2156.838634][T11873] ? __get_vm_area_node+0x13f/0x300 [ 2156.838657][T11873] ? prealloc_init+0x123/0x630 [ 2156.838683][T11873] __get_vm_area_node+0x1f8/0x300 [ 2156.838708][T11873] __vmalloc_node_range_noprof+0x301/0x12f0 [ 2156.838724][T11873] ? prealloc_init+0x123/0x630 [ 2156.838737][T11873] ? __lock_acquire+0xab9/0xd20 [ 2156.838765][T11873] ? do_raw_spin_lock+0x121/0x290 [ 2156.838793][T11873] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2156.838824][T11873] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2156.838847][T11873] bpf_map_area_alloc+0x12d/0x180 [ 2156.838863][T11873] ? prealloc_init+0x123/0x630 [ 2156.838879][T11873] prealloc_init+0x123/0x630 [ 2156.838896][T11873] ? __percpu_counter_init_many+0x364/0x380 [ 2156.838912][T11873] htab_map_alloc+0x6ce/0xc70 [ 2156.838946][T11873] map_create+0xaa3/0x1310 [ 2156.838968][T11873] ? security_bpf+0x7e/0x300 [ 2156.838989][T11873] __sys_bpf+0x67e/0x860 [ 2156.839016][T11873] ? __pfx___sys_bpf+0x10/0x10 [ 2156.839038][T11873] ? ksys_write+0x22a/0x250 [ 2156.839053][T11873] ? __pfx_ksys_write+0x10/0x10 [ 2156.839066][T11873] ? rcu_is_watching+0x15/0xb0 [ 2156.839103][T11873] __x64_sys_bpf+0x7c/0x90 [ 2156.839128][T11873] do_syscall_64+0xfa/0x3b0 [ 2156.839148][T11873] ? lockdep_hardirqs_on+0x9c/0x150 [ 2156.839166][T11873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2156.839179][T11873] ? clear_bhb_loop+0x60/0xb0 [ 2156.839192][T11873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2156.839203][T11873] RIP: 0033:0x7fcb5878e9a9 [ 2156.839215][T11873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2156.839225][T11873] RSP: 002b:00007fcb59530038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2156.839246][T11873] RAX: ffffffffffffffda RBX: 00007fcb589b6080 RCX: 00007fcb5878e9a9 [ 2156.839260][T11873] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 1101000000000000 [ 2156.839272][T11873] RBP: 00007fcb59530090 R08: 0000000000000000 R09: 0000000000000000 [ 2156.839284][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2156.839295][T11873] R13: 0000000000000000 R14: 00007fcb589b6080 R15: 00007fcb58adfa28 [ 2156.839325][T11873] [ 2156.840109][T11873] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2156.983154][T11427] veth0_vlan: entered promiscuous mode [ 2157.213406][T27058] Bluetooth: hci1: command 0x041b tx timeout [ 2157.326372][T11427] veth1_vlan: entered promiscuous mode [ 2157.509245][T11427] veth0_macvtap: entered promiscuous mode [ 2157.535084][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2157.701655][T11427] veth1_macvtap: entered promiscuous mode [ 2157.704746][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2157.983238][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=81.ea [ 2158.030620][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.057750][T11427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2158.080191][ T9] usb 2-1: Product: syz [ 2158.082015][T11427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2158.108916][ T9] usb 2-1: Manufacturer: syz [ 2158.148791][ T9] usb 2-1: SerialNumber: syz [ 2158.264537][ T9] usb 2-1: config 0 descriptor?? [ 2158.274166][T11427] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.305591][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2158.314597][ T9] usb 2-1: setting power ON [ 2158.320376][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 2158.330511][T11427] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.379209][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2158.497940][T11427] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.537589][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2158.546336][ T9] usb 2-1: media controller created [ 2158.579695][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2158.604815][T11427] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.116387][ T9] usb 2-1: selecting invalid altsetting 6 [ 2159.122193][ T9] usb 2-1: digital interface selection failed (-22) [ 2159.180211][ T4189] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2159.255887][T27058] Bluetooth: hci1: command 0x041b tx timeout [ 2159.274050][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2159.292424][ T4189] usb 10-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2159.302386][ T4189] usb 10-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2159.400462][ T9] usb 2-1: setting power OFF [ 2159.443768][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 2159.546091][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2159.664514][ T9] (NULL device *): no alternate interface [ 2159.889659][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2159.930194][T11943] netlink: 124 bytes leftover after parsing attributes in process `syz.7.7604'. [ 2159.960206][T11944] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7603'. [ 2160.034772][ T9] usb 2-1: USB disconnect, device number 88 [ 2160.123636][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.178727][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.342031][T19602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.350329][T19602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.550209][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.558891][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.195995][T11980] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2161.334796][T27058] Bluetooth: hci1: command 0x041b tx timeout [ 2163.970020][T11998] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2164.679332][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7616'. [ 2164.789256][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7616'. [ 2165.028270][T12033] kvm: pic: non byte write [ 2165.371779][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7618'. [ 2165.464539][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7618'. [ 2168.764210][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2168.945078][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 2168.952193][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 2168.967088][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2168.990712][ T24] usb 7-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.40 [ 2169.009778][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.023196][ T24] usb 7-1: Product: 崁䙣刪ᖪ颸Џ艈踘쓛瓃鼾頊ᣟ첃蓾䑄큙癘툩욝汚⭶與奺塀䎤渡‒๐栖턙⒅䭘럤퓘ꙝ皃ꃘ拫᭰詃陾龃⮃㭃ꬴΙ캏ㅮ奃⯣彝﫪鉷㗿ꀌ⚍㰖㦷ꇒ笩铯毙ᨢ凗䷉輟뉥暺놓爈 [ 2169.060982][ T24] usb 7-1: Manufacturer: Ꞻꦬ㋜䊆ួ곮ꬫꂏⴚ봇鈻玊㋃ᙛ괔ﭔ诟푆᠎珲㿪䘬ࢬꃘ陼ꖓ盗ﲽ뷺륖ꂍՠ忿ꯡ笖猒訪㒱㢊몄糱먳鳿玉ﴆ픩⍉⾽눔퍯㩦郞㮲䣁↱뎾䟝埿㘘崏苩▸ⲫ媧诧⨺鹳눳 [ 2169.086395][ T24] usb 7-1: SerialNumber: М [ 2169.113723][ T24] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 2169.134967][ T24] usb 7-1: no configuration chosen from 1 choice [ 2169.540283][T12143] netlink: 'syz.1.7631': attribute type 11 has an invalid length. [ 2169.600941][T12146] kvm: pic: non byte write [ 2169.756128][T12156] @: renamed from syz_tun (while UP) [ 2171.559989][ T888] usb 7-1: USB disconnect, device number 16 [ 2171.782880][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2171.782900][ T30] audit: type=1326 audit(1752987710.587:9723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2171.815296][ T30] audit: type=1326 audit(1752987710.587:9724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2171.838148][ T30] audit: type=1326 audit(1752987710.587:9725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2171.861011][ T30] audit: type=1326 audit(1752987710.587:9726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2171.955059][ T30] audit: type=1326 audit(1752987710.587:9727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2172.162356][ T30] audit: type=1326 audit(1752987710.587:9728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2172.325019][ T30] audit: type=1326 audit(1752987710.587:9729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2172.352116][ T30] audit: type=1326 audit(1752987710.597:9730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2172.643701][ T30] audit: type=1326 audit(1752987710.597:9731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2172.666233][ C1] vkms_vblank_simulate: vblank timer overrun [ 2172.808091][ T30] audit: type=1326 audit(1752987710.597:9732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.8.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2173.443821][T12226] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_team, syncid = 3, id = 0 [ 2174.493156][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7651'. [ 2174.513938][T12259] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7651'. [ 2174.985371][ T9] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 2175.175580][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 2175.183378][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2175.209633][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2175.233615][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.269801][ T9] usb 9-1: Product: syz [ 2175.274044][ T9] usb 9-1: Manufacturer: syz [ 2175.328805][ T9] usb 9-1: SerialNumber: syz [ 2175.396076][ T9] usb 9-1: config 0 descriptor?? [ 2175.422447][ T9] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2175.467858][ T9] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 2175.753544][T12318] GUP no longer grows the stack in syz.1.7655 (12318): 200000005000-200000008000 (200000004000) [ 2175.768683][T12318] CPU: 0 UID: 0 PID: 12318 Comm: syz.1.7655 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 2175.768713][T12318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2175.768726][T12318] Call Trace: [ 2175.768734][T12318] [ 2175.768749][T12318] dump_stack_lvl+0x189/0x250 [ 2175.768784][T12318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2175.768808][T12318] ? __pfx__printk+0x10/0x10 [ 2175.768833][T12318] ? find_vma+0xe7/0x160 [ 2175.768885][T12318] fixup_user_fault+0x661/0x720 [ 2175.768919][T12318] fault_in_user_writeable+0x72/0xe0 [ 2175.768945][T12318] futex_lock_pi+0x283/0xa60 [ 2175.768985][T12318] ? __pfx_futex_lock_pi+0x10/0x10 [ 2175.769011][T12318] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2175.769067][T12318] ? __pfx_futex_wake_mark+0x10/0x10 [ 2175.769115][T12318] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 2175.769151][T12318] do_futex+0x292/0x420 [ 2175.769184][T12318] ? __pfx_do_futex+0x10/0x10 [ 2175.769211][T12318] ? __vm_munmap+0x301/0x3d0 [ 2175.769242][T12318] __se_sys_futex+0x36f/0x400 [ 2175.769277][T12318] ? __pfx___se_sys_futex+0x10/0x10 [ 2175.769305][T12318] ? rcu_is_watching+0x15/0xb0 [ 2175.769337][T12318] ? __x64_sys_futex+0x21/0xf0 [ 2175.769367][T12318] do_syscall_64+0xfa/0x3b0 [ 2175.769389][T12318] ? lockdep_hardirqs_on+0x9c/0x150 [ 2175.769410][T12318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2175.769429][T12318] ? clear_bhb_loop+0x60/0xb0 [ 2175.769454][T12318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2175.769473][T12318] RIP: 0033:0x7f00c318e9a9 [ 2175.769491][T12318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2175.769509][T12318] RSP: 002b:00007f00c3f99038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2175.769531][T12318] RAX: ffffffffffffffda RBX: 00007f00c33b6080 RCX: 00007f00c318e9a9 [ 2175.769546][T12318] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 2175.769559][T12318] RBP: 00007f00c3210d69 R08: 0000000000000000 R09: 0000000000000000 [ 2175.769572][T12318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2175.769584][T12318] R13: 0000000000000000 R14: 00007f00c33b6080 R15: 00007f00c34dfa28 [ 2175.769616][T12318] [ 2175.773554][T12314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7655'. [ 2176.122276][ T9] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 2176.123006][T12267] xt_policy: neither incoming nor outgoing policy selected [ 2176.571832][ T9] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2176.590180][ T9] em28xx 9-1:0.0: board has no eeprom [ 2176.875858][ T9] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2176.884747][T12360] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2176.919196][T12360] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2177.217522][ T9] em28xx 9-1:0.0: dvb set to bulk mode. [ 2177.411102][ T6230] em28xx 9-1:0.0: Binding DVB extension [ 2177.471181][ T9] usb 9-1: USB disconnect, device number 52 [ 2177.677479][ T9] em28xx 9-1:0.0: Disconnecting em28xx [ 2178.205660][ T6230] em28xx 9-1:0.0: Registering input extension [ 2178.212631][ T9] em28xx 9-1:0.0: Closing input extension [ 2178.368070][ T9] em28xx 9-1:0.0: Freeing device [ 2179.175062][ T6230] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2179.337221][ T6230] usb 2-1: device descriptor read/64, error -71 [ 2179.424546][ T9] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 2179.584770][ T9] usb 9-1: device descriptor read/64, error -71 [ 2179.634717][ T6230] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2179.785855][ T6230] usb 2-1: device descriptor read/64, error -71 [ 2179.873973][ T9] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2179.938453][ T6230] usb usb2-port1: attempt power cycle [ 2180.284547][ T9] usb 9-1: device descriptor read/64, error -71 [ 2180.352471][ T6230] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2180.399159][ T9] usb usb9-port1: attempt power cycle [ 2180.663739][ T6230] usb 2-1: device descriptor read/8, error -71 [ 2180.924483][ T9] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2180.965302][ T6230] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2181.005635][ T6230] usb 2-1: device descriptor read/8, error -71 [ 2181.169738][ T6230] usb usb2-port1: unable to enumerate USB device [ 2181.841421][ T9] usb 9-1: device descriptor read/8, error -71 [ 2182.100372][T12460] macsec1: entered promiscuous mode [ 2182.112815][T12460] macsec1: entered allmulticast mode [ 2182.118620][T12460] hsr0: entered allmulticast mode [ 2182.124250][T12460] hsr_slave_0: entered allmulticast mode [ 2182.149905][T12460] hsr0: left allmulticast mode [ 2182.157295][T12460] hsr_slave_0: left allmulticast mode [ 2182.163758][T12465] netlink: 'syz.6.7674': attribute type 11 has an invalid length. [ 2182.176950][T12465] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7674'. [ 2182.192073][T12465] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7674'. [ 2182.344847][T12471] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7677'. [ 2182.754451][ T9] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2182.795219][ T9] usb 9-1: device descriptor read/8, error -71 [ 2182.914912][ T9] usb usb9-port1: unable to enumerate USB device [ 2183.690001][T12490] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=704 (1408 ns) > initial count (512 ns). Using initial count to start timer. [ 2184.194494][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2184.403280][ T9] usb 7-1: config 0 has no interfaces? [ 2184.429513][ T9] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2184.445939][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.474412][ T9] usb 7-1: Product: syz [ 2184.482447][ T9] usb 7-1: Manufacturer: syz [ 2184.493642][ T9] usb 7-1: SerialNumber: syz [ 2184.513144][ T9] usb 7-1: config 0 descriptor?? [ 2185.782626][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7686'. [ 2187.919855][T23173] usb 7-1: USB disconnect, device number 17 [ 2188.776581][T12580] xt_cgroup: path and classid specified [ 2188.794583][T12580] netlink: 84 bytes leftover after parsing attributes in process `syz.7.7696'. [ 2188.815885][T12580] xt_cgroup: path and classid specified [ 2189.131431][T12590] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7697'. [ 2190.332530][T12630] kvm: pic: non byte write [ 2191.504472][ T24] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2191.644529][ T24] usb 9-1: device descriptor read/64, error -71 [ 2192.024538][ T24] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2192.224468][ T24] usb 9-1: device descriptor read/64, error -71 [ 2192.335546][ T24] usb usb9-port1: attempt power cycle [ 2192.774927][ T24] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2192.835250][ T24] usb 9-1: device descriptor read/8, error -71 [ 2193.078611][ T24] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2193.088578][T12679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7714'. [ 2193.140731][ T24] usb 9-1: device descriptor read/8, error -71 [ 2193.147442][T12679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7714'. [ 2193.192259][T12682] vivid-000: kernel_thread() failed [ 2193.274766][ T24] usb usb9-port1: unable to enumerate USB device [ 2193.440993][T12692] tipc: Enabled bearer , priority 10 [ 2193.880961][T12710] sctp: [Deprecated]: syz.1.7721 (pid 12710) Use of int in max_burst socket option. [ 2193.880961][T12710] Use struct sctp_assoc_value instead [ 2194.163072][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2194.163092][ T30] audit: type=1326 audit(1752987732.997:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.7.7722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2194.304592][ T30] audit: type=1326 audit(1752987732.997:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.7.7722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2194.327524][ T30] audit: type=1326 audit(1752987732.997:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.7.7722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2194.349950][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.441443][ T30] audit: type=1326 audit(1752987733.197:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.7.7722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2194.463781][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.472534][ T30] audit: type=1326 audit(1752987733.197:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.7.7722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2194.496779][ T30] audit: type=1326 audit(1752987733.197:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.7.7722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5878e9a9 code=0x7ffc0000 [ 2194.564491][ T9] tipc: Node number set to 4269801487 [ 2195.884602][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2195.914574][T23173] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2196.050548][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2196.061851][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2196.074382][T23173] usb 7-1: Using ep0 maxpacket: 32 [ 2196.080926][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2196.096759][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2196.113558][T23173] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2196.122095][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2196.135090][T23173] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2196.146269][T23173] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2196.156813][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2196.169651][T23173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.179013][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2196.192938][T23173] usb 7-1: Product: syz [ 2196.197540][ T24] usb 2-1: Product: syz [ 2196.201737][ T24] usb 2-1: Manufacturer: syz [ 2196.206805][T23173] usb 7-1: Manufacturer: syz [ 2196.211429][T23173] usb 7-1: SerialNumber: syz [ 2196.225994][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 2196.251814][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 2196.263146][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2196.276072][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 2196.850103][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.856735][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2196.863714][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.870347][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2196.876581][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.883168][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2196.895009][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.901671][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2196.909177][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.915821][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2196.922489][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.929123][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2196.944601][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.951215][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2196.957519][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.964145][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2196.970439][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.977046][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2196.984479][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2196.991118][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2197.000696][ T5853] usb 2-1: USB disconnect, device number 93 [ 2197.006801][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2198.076935][ T30] audit: type=1326 audit(1752987736.917:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12816 comm="syz.8.7736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2198.315044][ T30] audit: type=1326 audit(1752987736.967:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12816 comm="syz.8.7736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2198.338180][ T30] audit: type=1326 audit(1752987736.967:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12816 comm="syz.8.7736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2198.362890][ T30] audit: type=1326 audit(1752987736.977:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12816 comm="syz.8.7736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06358e9a9 code=0x7ffc0000 [ 2199.251770][T12844] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2200.067928][T23173] usbhid 7-1:1.0: can't add hid device: -71 [ 2200.161886][T12854] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2200.196153][T23173] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 2200.512159][T23173] usb 7-1: USB disconnect, device number 18 [ 2201.366116][T12873] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_team, syncid = 3, id = 0 [ 2204.504862][ T888] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2204.686544][ T888] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2204.724206][ T888] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2204.762215][ T888] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2204.801925][ T888] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2204.834648][ T888] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2204.848579][ T888] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2204.858655][ T888] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2204.872861][ T888] usb 9-1: Product: syz [ 2204.877321][ T888] usb 9-1: Manufacturer: syz [ 2204.922231][T12937] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2204.933178][ T888] cdc_wdm 9-1:1.0: skipping garbage [ 2205.021218][ T888] cdc_wdm 9-1:1.0: skipping garbage [ 2205.119458][ T888] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2205.424802][ T888] cdc_wdm 9-1:1.0: Unknown control protocol [ 2205.900516][ C0] wdm_int_callback: 5 callbacks suppressed [ 2205.900542][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 2205.905496][ T5853] usb 9-1: USB disconnect, device number 61 [ 2205.906409][ C0] wdm_int_callback: 5 callbacks suppressed [ 2205.906427][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 2205.930811][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2207.972594][T12997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2208.381812][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 2208.381832][ T30] audit: type=1326 audit(1752987747.217:9818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.6.7770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17538e9a9 code=0x0 [ 2209.314486][ T5915] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2209.624787][ T9] usb 9-1: new low-speed USB device number 62 using dummy_hcd [ 2209.825648][ T5915] usb 2-1: config 0 has no interfaces? [ 2209.990746][ T5915] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2210.083890][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.211579][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2210.247706][ T9] usb 9-1: config 0 has no interface number 0 [ 2210.259778][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2210.311517][ T5915] usb 2-1: Product: syz [ 2210.348609][T13060] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7773'. [ 2210.377361][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2210.407782][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2210.434862][ T5915] usb 2-1: Manufacturer: syz [ 2210.464294][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.474484][ T5915] usb 2-1: SerialNumber: syz [ 2210.520419][ T5915] usb 2-1: config 0 descriptor?? [ 2210.534083][ T9] usb 9-1: config 0 descriptor?? [ 2210.605578][T13031] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2210.675210][ T9] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2210.694596][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2211.014697][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 2211.089064][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2211.116367][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2211.147114][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 2211.158206][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.183170][ T24] usb 7-1: Product: syz [ 2211.305032][T13102] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7781'. [ 2211.345655][ T24] usb 7-1: Manufacturer: syz [ 2211.356252][ T24] usb 7-1: SerialNumber: syz [ 2211.381180][ T888] usb 9-1: USB disconnect, device number 62 [ 2211.427136][ T24] usb 7-1: config 0 descriptor?? [ 2211.459551][ T24] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 2211.498628][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 2211.536489][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2211.553627][ T24] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 2211.570942][ T24] usb 7-1: media controller created [ 2211.690430][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2212.100312][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2212.108418][ T24] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 2212.178117][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input110 [ 2212.194035][ T24] dvb-usb: schedule remote query interval to 50 msecs. [ 2212.202829][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 2212.210063][ T24] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 2212.287855][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2212.293611][ T24] dvb-usb: error while querying for an remote control event. [ 2212.563012][ T9] usb 2-1: USB disconnect, device number 94 [ 2212.564437][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 2212.600540][ T24] dvb-usb: error while querying for an remote control event. [ 2212.690890][T13132] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2212.746103][T13134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7784'. [ 2212.852683][T23173] usb 7-1: USB disconnect, device number 19 [ 2213.044229][T23173] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 2213.194493][ T9] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 2213.465918][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2213.538526][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2213.574013][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 2213.592125][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2213.608430][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.617560][ T9] usb 2-1: Product: syz [ 2213.621909][ T9] usb 2-1: Manufacturer: syz [ 2213.627741][ T9] usb 2-1: SerialNumber: syz [ 2213.639141][ T9] usb 2-1: config 0 descriptor?? [ 2213.646286][T13134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2213.654035][T13134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2213.666113][ T9] usb 2-1: ucan: probing device on interface #0 [ 2214.075617][ T9] usb 2-1: ucan: device reported invalid tx-fifo size [ 2214.087609][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 2214.284064][ T6230] usb 2-1: USB disconnect, device number 95 [ 2214.374574][T13211] input: syz1 as /devices/virtual/input/input111 [ 2214.464951][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2214.636806][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.648019][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2214.658318][ T9] usb 7-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 2214.667916][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.676079][ T5947] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2214.688744][ T9] usb 7-1: config 0 descriptor?? [ 2214.851030][ T5947] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2214.862527][ T5947] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2214.872745][ T5947] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2214.881907][ T5947] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.895213][T13216] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2214.909775][ T5947] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2215.105081][T13216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2215.117475][T13216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2215.128033][ T24] usb 9-1: USB disconnect, device number 63 [ 2215.172458][ T9] itetech 0003:06CB:2968.0036: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.6-1/input0 [ 2215.353002][ T9] usb 7-1: USB disconnect, device number 20 [ 2215.924473][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2215.966864][T13290] xt_nfacct: accounting object `syz0' does not exists [ 2216.001570][T13291] program syz.8.7796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2216.189549][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2216.338261][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2216.408483][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2216.417838][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.450405][T13282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2216.462333][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2216.554715][ T6230] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2216.734596][T13282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2216.743697][T13282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2216.778141][ T6230] usb 7-1: Using ep0 maxpacket: 8 [ 2216.815406][ T6230] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2216.832664][ T6230] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.939158][ T6230] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2216.968119][ T6230] pvrusb2: ********** [ 2216.972492][ T6230] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2216.987011][ T6230] pvrusb2: Important functionality might not be entirely working. [ 2216.997502][ T6230] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2217.010296][ T6230] pvrusb2: ********** [ 2217.173545][ T2342] pvrusb2: Invalid write control endpoint [ 2217.338821][ T2342] pvrusb2: Invalid write control endpoint [ 2217.362543][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2217.429764][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2217.574656][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2217.587057][ T2342] pvrusb2: Device being rendered inoperable [ 2217.593238][ T2342] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 2217.733391][ T2342] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2217.861356][T13282] netlink: 'syz.1.7795': attribute type 21 has an invalid length. [ 2217.873148][ T2342] pvrusb2: Attached sub-driver cx25840 [ 2217.905740][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2217.941294][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2218.144894][T13282] netlink: 'syz.1.7795': attribute type 1 has an invalid length. [ 2218.153015][T13282] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.7795'. [ 2220.489259][ T888] usb 2-1: USB disconnect, device number 96 [ 2220.692453][T13367] netlink: 84 bytes leftover after parsing attributes in process `syz.8.7805'. [ 2220.751348][T23173] usb 7-1: USB disconnect, device number 21 [ 2220.944887][ T9] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2221.140762][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 2221.215170][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 2221.341528][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.365984][T13404] netlink: 'syz.6.7807': attribute type 10 has an invalid length. [ 2221.408369][ T9] usb 9-1: Product: syz [ 2221.412566][ T9] usb 9-1: Manufacturer: syz [ 2221.472736][T13404] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2221.504133][ T9] usb 9-1: SerialNumber: syz [ 2221.970629][ T9] usb 9-1: config 0 descriptor?? [ 2221.989202][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.989724][ T4189] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2221.995686][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.119373][ T9] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 2222.128899][ T4189] dvb_usb_az6027 10-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2222.230153][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 2222.317934][ T4189] usb 10-1: USB disconnect, device number 81 [ 2222.337929][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2222.384923][ T9] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 2222.669072][ T9] usb 9-1: media controller created [ 2222.714795][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2222.750122][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2222.756486][ T9] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 2222.780817][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input112 [ 2222.853695][ T9] dvb-usb: schedule remote query interval to 50 msecs. [ 2222.885288][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 2222.885479][ T4189] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 2222.894821][ T9] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 2222.959932][ T888] dvb-usb: bulk message failed: -22 (1/0) [ 2223.005515][ T888] dvb-usb: error while querying for an remote control event. [ 2223.104763][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 2223.110570][ T9] dvb-usb: error while querying for an remote control event. [ 2223.279083][ T888] dvb-usb: bulk message failed: -22 (1/0) [ 2223.287985][ T888] dvb-usb: error while querying for an remote control event. [ 2223.364957][ T888] dvb-usb: bulk message failed: -22 (1/0) [ 2223.376153][ T888] dvb-usb: error while querying for an remote control event. [ 2223.474938][ T888] dvb-usb: bulk message failed: -22 (1/0) [ 2223.494583][ T888] dvb-usb: error while querying for an remote control event. [ 2223.574544][ T888] dvb-usb: bulk message failed: -22 (1/0) [ 2223.580371][ T888] dvb-usb: error while querying for an remote control event. [ 2223.654520][ T888] dvb-usb: bulk message failed: -22 (1/0) [ 2223.660564][ T888] dvb-usb: error while querying for an remote control event. [ 2223.764471][ T888] dvb-usb: bulk message failed: -22 (1/0) [ 2223.770424][ T888] dvb-usb: error while querying for an remote control event. [ 2223.838565][ T24] usb 9-1: USB disconnect, device number 64 [ 2223.854755][ T888] dvb-usb: bulk message failed: -22 (1/0) [ 2223.892856][ T888] dvb-usb: error while querying for an remote control event. [ 2223.915436][ T4189] usb 10-1: device descriptor read/64, error -71 [ 2224.194452][ T4189] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 2224.262663][ T24] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 2224.407093][ T4189] usb 10-1: Using ep0 maxpacket: 8 [ 2224.427399][ T4189] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2224.568671][ T4189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.583504][ T4189] usb 10-1: Product: syz [ 2224.608658][ T4189] usb 10-1: Manufacturer: syz [ 2224.619126][ T4189] usb 10-1: SerialNumber: syz [ 2224.628503][ T4189] usb 10-1: config 0 descriptor?? [ 2224.653239][ T4189] gspca_main: se401-2.14.0 probing 047d:5003 [ 2225.071237][T13456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2225.613751][T13456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2225.746350][T13456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2225.867207][T13456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2225.894882][ T4189] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 2225.908000][ T4189] se401 10-1:0.0: probe with driver se401 failed with error -110 [ 2227.123078][T13528] macsec1: entered promiscuous mode [ 2227.145661][T13528] macsec1: entered allmulticast mode [ 2227.154746][T13528] hsr0: entered allmulticast mode [ 2227.162744][T13528] hsr_slave_0: entered allmulticast mode [ 2227.172760][T13528] hsr_slave_1: entered allmulticast mode [ 2227.199901][T13528] hsr0: left allmulticast mode [ 2227.205853][T13528] hsr_slave_0: left allmulticast mode [ 2227.212579][T13528] hsr_slave_1: left allmulticast mode [ 2227.214386][ T888] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2227.341401][ T24] usb 10-1: USB disconnect, device number 83 [ 2228.572803][ T888] usb 2-1: config 0 has no interfaces? [ 2228.611247][ T888] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2228.771385][ T888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.984394][ T888] usb 2-1: Product: syz [ 2228.988638][ T888] usb 2-1: Manufacturer: syz [ 2228.993265][ T888] usb 2-1: SerialNumber: syz [ 2229.255507][ T888] usb 2-1: config 0 descriptor?? [ 2229.625107][T13598] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7832'. [ 2231.380607][ T888] usb 2-1: USB disconnect, device number 97 [ 2232.417171][T13642] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7841'. [ 2233.594657][ T5853] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2233.754433][ T5853] usb 7-1: Using ep0 maxpacket: 32 [ 2234.555111][ T5853] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2234.568160][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.592675][ T5853] usb 7-1: config 0 descriptor?? [ 2234.906509][T13698] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2237.040947][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7854'. [ 2237.082426][ T5853] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2237.193095][ T5853] usb 7-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2237.203402][ T5853] usb 7-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2239.732971][T13760] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2239.868672][ T30] audit: type=1326 audit(1752987778.617:9819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2240.134612][ T30] audit: type=1326 audit(1752987778.617:9820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2240.158406][ T30] audit: type=1326 audit(1752987778.617:9821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2240.181432][ T30] audit: type=1326 audit(1752987778.617:9822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2240.263697][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7865'. [ 2240.308862][ T30] audit: type=1326 audit(1752987778.617:9823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2240.359477][ T30] audit: type=1326 audit(1752987778.617:9824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2240.388469][ T30] audit: type=1326 audit(1752987778.627:9825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2240.452160][ T30] audit: type=1326 audit(1752987778.627:9826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2240.484695][ T30] audit: type=1326 audit(1752987778.627:9827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2240.512329][ T30] audit: type=1326 audit(1752987778.627:9828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13755 comm="syz.6.7864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fb17538e9a9 code=0x7ffc0000 [ 2241.101142][ T6230] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 2241.246740][ T6230] usb 9-1: device descriptor read/64, error -71 [ 2241.574530][ T6230] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 2241.974500][ T6230] usb 9-1: device descriptor read/64, error -71 [ 2242.114433][ T6230] usb usb9-port1: attempt power cycle [ 2242.193843][T13804] fuse: Bad value for 'user_id' [ 2242.198856][T13804] fuse: Bad value for 'user_id' [ 2243.044396][ T6230] usb 9-1: new full-speed USB device number 67 using dummy_hcd [ 2243.170486][ T6230] usb 9-1: device descriptor read/8, error -71 [ 2243.444808][ T6230] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 2243.505304][ T6230] usb 9-1: device descriptor read/8, error -71 [ 2243.664909][ T6230] usb usb9-port1: unable to enumerate USB device [ 2244.658596][T13829] netlink: 168 bytes leftover after parsing attributes in process `syz.7.7875'. [ 2245.856783][T13850] macsec1: entered promiscuous mode [ 2246.024380][T13850] macsec1: entered allmulticast mode [ 2246.045298][T13850] hsr0: entered allmulticast mode [ 2246.060399][T13850] hsr_slave_0: entered allmulticast mode [ 2246.080664][T13850] hsr_slave_1: entered allmulticast mode [ 2246.107262][T13850] hsr0: left allmulticast mode [ 2246.291472][T13850] hsr_slave_0: left allmulticast mode [ 2246.386112][T13850] hsr_slave_1: left allmulticast mode [ 2247.099616][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2247.099637][ T30] audit: type=1326 audit(1752987785.847:9862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2247.149863][ T5947] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2247.255687][ T30] audit: type=1326 audit(1752987785.847:9863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2247.319024][ T30] audit: type=1326 audit(1752987785.857:9864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2247.363276][ T5947] usb 9-1: config 0 has no interfaces? [ 2247.390076][ T5947] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2247.420145][ T30] audit: type=1326 audit(1752987785.857:9865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2247.433561][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.575224][ T5947] usb 9-1: Product: syz [ 2247.579601][ T5947] usb 9-1: Manufacturer: syz [ 2247.584235][ T5947] usb 9-1: SerialNumber: syz [ 2247.616251][ T5947] usb 9-1: config 0 descriptor?? [ 2247.629965][ T30] audit: type=1326 audit(1752987785.857:9866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2247.788875][ T30] audit: type=1326 audit(1752987785.857:9867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2247.889052][T13868] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7880'. [ 2247.977972][ T30] audit: type=1326 audit(1752987785.857:9868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2248.197830][ T30] audit: type=1326 audit(1752987785.857:9869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2248.287482][ T30] audit: type=1326 audit(1752987785.857:9870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2248.514434][ T30] audit: type=1326 audit(1752987785.857:9871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.1.7881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f00c318e9a9 code=0x7ffc0000 [ 2250.306292][ T5947] usb 9-1: USB disconnect, device number 69 [ 2250.824178][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7890'. [ 2250.976565][ T5947] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2251.094551][ T6230] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 2251.173954][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2251.185379][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2251.195663][ T5947] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2251.210966][ T5947] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2251.232270][ T5947] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.264495][ T6230] usb 10-1: Using ep0 maxpacket: 32 [ 2251.271951][ T6230] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 2251.288258][ T6230] usb 10-1: config 0 has no interface number 0 [ 2251.311874][ T6230] usb 10-1: config 0 interface 184 has no altsetting 0 [ 2251.320587][ T5947] usb 9-1: config 0 descriptor?? [ 2251.359798][ T6230] usb 10-1: New USB device found, idVendor=0424, idProduct=7502, bcdDevice=69.ee [ 2251.369848][ T6230] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.444421][ T6230] usb 10-1: Product: syz [ 2251.537445][ T6230] usb 10-1: Manufacturer: syz [ 2251.552841][ T6230] usb 10-1: SerialNumber: syz [ 2251.673704][ T6230] usb 10-1: config 0 descriptor?? [ 2251.772671][ T5947] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2252.343360][T13957] xt_nfacct: accounting object `syz0' does not exists [ 2253.144496][ T5947] usb 9-1: reset high-speed USB device number 70 using dummy_hcd [ 2253.336592][ T5947] usb 9-1: device descriptor read/64, error -32 [ 2253.640694][ T5947] usb 9-1: reset high-speed USB device number 70 using dummy_hcd [ 2253.817566][ T6230] usb 10-1: USB disconnect, device number 84 [ 2253.874602][ T5947] usb 9-1: device descriptor read/64, error -32 [ 2254.191947][ T5947] usb 9-1: reset high-speed USB device number 70 using dummy_hcd [ 2254.241590][ T5947] usb 9-1: device descriptor read/8, error -32 [ 2254.564589][ T5947] usb 9-1: reset high-speed USB device number 70 using dummy_hcd [ 2254.837921][T13924] raw-gadget.1 gadget.8: failed to queue suspend event [ 2254.968182][ T5947] usb 9-1: device descriptor read/8, error -71 [ 2255.054827][T13924] raw-gadget.1 gadget.8: failed to queue disconnect event [ 2255.185104][ T9] usb 9-1: USB disconnect, device number 70 [ 2256.824110][T14039] netlink: 84 bytes leftover after parsing attributes in process `syz.7.7906'. [ 2257.076811][T14051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.090857][T14051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.477161][T14068] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7910'. [ 2257.481994][T14069] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7911'. [ 2261.461538][T14112] netlink: 199960 bytes leftover after parsing attributes in process `syz.6.7920'. [ 2261.563610][T14115] dlm: non-version read from control device 0 [ 2263.094432][ T4189] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 2263.272896][ T4189] usb 10-1: config 0 has no interfaces? [ 2263.286020][ T4189] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2263.295706][ T4189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.304085][ T4189] usb 10-1: Product: syz [ 2263.308788][ T4189] usb 10-1: Manufacturer: syz [ 2263.318919][ T4189] usb 10-1: SerialNumber: syz [ 2263.348166][ T4189] usb 10-1: config 0 descriptor?? [ 2264.453769][T14149] macsec1: entered promiscuous mode [ 2264.460308][T14149] macsec1: entered allmulticast mode [ 2264.465849][T14149] hsr0: entered allmulticast mode [ 2264.470977][T14149] hsr_slave_0: entered allmulticast mode [ 2264.476716][T14149] hsr_slave_1: entered allmulticast mode [ 2264.485206][T14149] hsr0: left allmulticast mode [ 2264.489987][T14149] hsr_slave_0: left allmulticast mode [ 2264.495926][T14149] hsr_slave_1: left allmulticast mode [ 2264.873919][T14160] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7928'. [ 2266.622821][ T4189] usb 10-1: USB disconnect, device number 85 [ 2267.360489][T14200] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2270.493518][T12736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2270.504036][T12736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2270.512871][T12736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2270.522578][T12736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2270.537133][T12736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2270.716771][T23173] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 2271.069903][T23173] usb 10-1: config 0 has no interfaces? [ 2271.296326][T23173] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2271.394550][T23173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.425837][T23173] usb 10-1: Product: syz [ 2271.430153][T23173] usb 10-1: Manufacturer: syz [ 2271.454277][T23173] usb 10-1: SerialNumber: syz [ 2271.479741][T23173] usb 10-1: config 0 descriptor?? [ 2271.756571][T14257] chnl_net:caif_netlink_parms(): no params data found [ 2272.099974][T14257] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.112256][T14257] bridge0: port 1(bridge_slave_0) entered disabled state [ 2272.132634][T14257] bridge_slave_0: entered allmulticast mode [ 2272.195511][T14257] bridge_slave_0: entered promiscuous mode [ 2272.318445][T14257] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.344887][T14436] netlink: 112 bytes leftover after parsing attributes in process `syz.8.7948'. [ 2272.374598][T14257] bridge0: port 2(bridge_slave_1) entered disabled state [ 2272.392478][T14257] bridge_slave_1: entered allmulticast mode [ 2272.428279][T14257] bridge_slave_1: entered promiscuous mode [ 2272.543463][T14257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2272.565435][T14257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2272.614651][T12736] Bluetooth: hci3: command tx timeout [ 2272.677325][T14257] team0: Port device team_slave_0 added [ 2272.739438][T14257] team0: Port device team_slave_1 added [ 2272.853872][T14257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2272.865565][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2272.929557][T14257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2272.961925][T14257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2272.976603][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2273.032411][T14257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2273.143679][T14257] hsr_slave_0: entered promiscuous mode [ 2273.151776][T14257] hsr_slave_1: entered promiscuous mode [ 2273.160501][T14257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2273.169849][T14257] Cannot create hsr debugfs directory [ 2273.538335][T23173] usb 10-1: USB disconnect, device number 86 [ 2273.701301][T14608] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2274.423648][T14638] macsec1: entered promiscuous mode [ 2274.429826][T14638] macsec1: entered allmulticast mode [ 2274.435440][T14638] hsr0: entered allmulticast mode [ 2274.440620][T14638] hsr_slave_0: entered allmulticast mode [ 2274.446627][T14638] hsr_slave_1: entered allmulticast mode [ 2274.525299][T14638] hsr0: left allmulticast mode [ 2274.531472][T14638] hsr_slave_0: left allmulticast mode [ 2274.541870][T14638] hsr_slave_1: left allmulticast mode [ 2274.695645][T27058] Bluetooth: hci3: command tx timeout [ 2275.286013][T27058] Bluetooth: hci1: command 0x041b tx timeout [ 2276.016992][T14677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2276.636222][T14706] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7959'. [ 2276.775031][T12736] Bluetooth: hci3: command tx timeout [ 2277.247411][ T9] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 2277.394451][ T9] usb 10-1: device descriptor read/64, error -71 [ 2277.569901][T14257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2277.606224][T14257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2277.634543][ T9] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 2277.646536][T14257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2277.686343][T14257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2277.784501][ T9] usb 10-1: device descriptor read/64, error -71 [ 2277.913757][ T9] usb usb10-port1: attempt power cycle [ 2278.080774][T14257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2278.147219][T14257] 8021q: adding VLAN 0 to HW filter on device team0 [ 2278.189955][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.197179][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2278.283808][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.291138][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2278.313442][ T9] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 2278.349364][ T9] usb 10-1: device descriptor read/8, error -71 [ 2278.360735][T14731] xt_TCPMSS: Only works on TCP SYN packets [ 2278.604382][ T9] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 2278.636185][ T9] usb 10-1: device descriptor read/8, error -71 [ 2278.666464][T14257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2278.684500][ T5915] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2278.751206][T14257] veth0_vlan: entered promiscuous mode [ 2278.760235][ T9] usb usb10-port1: unable to enumerate USB device [ 2278.794016][T14257] veth1_vlan: entered promiscuous mode [ 2278.864914][T12736] Bluetooth: hci3: command tx timeout [ 2278.868780][T14257] veth0_macvtap: entered promiscuous mode [ 2278.886536][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2278.889988][T14257] veth1_macvtap: entered promiscuous mode [ 2278.904365][ T5915] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2278.932708][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2278.953897][ T5915] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 2278.975696][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.013482][ T5915] usb 9-1: config 0 descriptor?? [ 2279.058480][ T5915] em28xx 9-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 2279.091201][T14257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2279.203484][T14257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2279.309964][ T4189] usb 9-1: USB disconnect, device number 71 [ 2279.311237][T14257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2279.369503][T14257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2279.392593][T14257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2279.414632][T14257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2279.689000][ T1255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2279.715993][T14810] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2279.767474][ T1255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.010438][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2280.410185][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.970113][T14825] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7966'. [ 2281.095561][ T5915] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2281.278535][ T5915] usb 9-1: Using ep0 maxpacket: 16 [ 2281.297242][ T5915] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2281.311247][ T5915] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12336, setting to 64 [ 2281.326386][ T5915] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2281.431357][T23173] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2281.480059][ T5915] usb 9-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 2281.593706][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2281.652007][ T5915] usb 9-1: Product: syz [ 2281.696175][T23173] usb 1-1: Using ep0 maxpacket: 16 [ 2281.726048][ T5915] usb 9-1: Manufacturer: syz [ 2281.752702][T23173] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2281.762072][ T5915] usb 9-1: SerialNumber: syz [ 2281.798124][ T5915] usb 9-1: config 0 descriptor?? [ 2281.803164][T23173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2281.883553][ T5915] peak_usb 9-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 2281.899118][T23173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2281.947891][ T5915] peak_usb 9-1:0.0: unable to read PCAN-USB serial number (err -8) [ 2282.155643][T23173] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 2282.184380][T23173] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2282.204063][T23173] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2282.214626][T23173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.222635][T23173] usb 1-1: Product: 쐡ㄠ㓚ꊏ㉇㓂㷄⛨辢期䢨眭篹⦍㮚嵐㚥ꢌ촿㯏⏵ʏஸ៯ǝ殩䨬㼕䴒賂臹ᗑ矟࿎飏₁ݶݾ범팆꛶㑊歺﫥꜆㴡ṵ떮இ䬒䘙⴫杋楴࢜䠿씴㘱࢛䒫쉺뮔㥄뻦䪄柫✸聜깇᰷ [ 2282.252539][T23173] usb 1-1: Manufacturer: э [ 2282.302137][T23173] usb 1-1: SerialNumber: ﳿ [ 2282.414773][ T5915] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -8 [ 2282.514578][ T5915] usb 9-1: USB disconnect, device number 72 [ 2282.600375][T23173] usb 1-1: 0:2 : does not exist [ 2282.717075][T23173] usb 1-1: USB disconnect, device number 122 [ 2282.877109][T12425] udevd[12425]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2283.431183][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.442500][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2298.843212][ T5853] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2298.887104][ T5853] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2298.913365][ T5853] usb 7-1: USB disconnect, device number 22 [ 2299.612330][T19602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.685859][T19602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.776938][T19602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.832213][T19602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2300.033933][T19602] bridge_slave_1: left allmulticast mode [ 2300.050787][T19602] bridge_slave_1: left promiscuous mode [ 2300.074860][T19602] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.090061][T19602] bridge_slave_0: left allmulticast mode [ 2300.098510][T19602] bridge_slave_0: left promiscuous mode [ 2300.112396][T19602] bridge0: port 1(bridge_slave_0) entered disabled state [ 2300.832378][T19602] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 2301.038723][T19602] bond0 (unregistering): Released all slaves [ 2301.210262][T19602] bond1 (unregistering): Released all slaves [ 2301.323112][T19602] tipc: Disabling bearer [ 2301.342726][T19602] tipc: Left network mode [ 2301.391953][T19602] IPVS: stopping master sync thread 12873 ... [ 2301.617987][T19602] hsr_slave_0: left promiscuous mode [ 2301.628799][T19602] hsr_slave_1: left promiscuous mode [ 2301.638828][T19602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2301.646435][T19602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2301.667398][T19602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2301.679567][T19602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2301.707538][T19602] veth1_macvtap: left promiscuous mode [ 2301.713151][T19602] veth0_macvtap: left promiscuous mode [ 2301.719260][T19602] veth1_vlan: left promiscuous mode [ 2301.724800][T19602] veth0_vlan: left promiscuous mode [ 2303.238831][T19602] IPVS: stop unused estimator thread 0... [ 2344.859187][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.865767][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2390.938530][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2393.024499][T15542] Bluetooth: hci3: command 0x0406 tx timeout [ 2406.309332][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.317283][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2454.935019][ T31] INFO: task kworker/0:3:13042 blocked for more than 143 seconds. [ 2454.942948][ T31] Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 [ 2454.951995][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2454.962650][ T31] task:kworker/0:3 state:D stack:21208 pid:13042 tgid:13042 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2454.974912][ T31] Workqueue: usb_hub_wq hub_event [ 2454.980014][ T31] Call Trace: [ 2454.983319][ T31] [ 2454.986369][ T31] __schedule+0x16f5/0x4d00 [ 2454.990945][ T31] ? schedule+0x165/0x360 [ 2454.995683][ T31] ? __pfx___schedule+0x10/0x10 [ 2455.000576][ T31] ? schedule+0x91/0x360 [ 2455.005004][ T31] schedule+0x165/0x360 [ 2455.009204][ T31] usb_kill_urb+0x1be/0x2d0 [ 2455.013709][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2455.018898][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2455.025064][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2455.030147][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2455.035817][ T31] ? __kmalloc_noprof+0x29b/0x4f0 [ 2455.040879][ T31] usb_control_msg+0x232/0x3e0 [ 2455.045736][ T31] hub_port_init+0xbf9/0x2800 [ 2455.050493][ T31] hub_event+0x2518/0x4a00 [ 2455.055184][ T31] ? __pfx_hub_event+0x10/0x10 [ 2455.060187][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2455.066033][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2455.071307][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2455.077114][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2455.082866][ T31] process_scheduled_works+0xae1/0x17b0 [ 2455.088533][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2455.095849][ T31] worker_thread+0x8a0/0xda0 [ 2455.100504][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2455.106970][ T31] ? __kthread_parkme+0x7b/0x200 [ 2455.111942][ T31] kthread+0x70e/0x8a0 [ 2455.116388][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2455.121508][ T31] ? __pfx_kthread+0x10/0x10 [ 2455.126575][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2455.131813][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2455.137199][ T31] ? __pfx_kthread+0x10/0x10 [ 2455.141854][ T31] ret_from_fork+0x3fc/0x770 [ 2455.146741][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2455.152232][ T31] ? __switch_to_asm+0x39/0x70 [ 2455.157111][ T31] ? __switch_to_asm+0x33/0x70 [ 2455.162548][ T31] ? __pfx_kthread+0x10/0x10 [ 2455.167272][ T31] ret_from_fork_asm+0x1a/0x30 [ 2455.172072][ T31] [ 2455.177668][ T31] [ 2455.177668][ T31] Showing all locks held in the system: [ 2455.185527][ T31] 1 lock held by khungtaskd/31: [ 2455.190403][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2455.200449][ T31] 2 locks held by kworker/u8:5/1004: [ 2455.207033][ T31] 2 locks held by getty/5611: [ 2455.211753][ T31] #0: ffff8880312130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2455.221817][ T31] #1: ffffc9000363b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2455.232028][ T31] 5 locks held by kworker/0:3/13042: [ 2455.237589][ T31] #0: ffff888021ae1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2455.249009][ T31] #1: ffffc90004ba7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2455.261015][ T31] #2: ffff888144fd9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 2455.270634][ T31] #3: ffff888144fdc510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 2455.280714][ T31] #4: ffff888028d45d68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 2455.290608][ T31] 3 locks held by kworker/u8:2/19604: [ 2455.297509][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2455.308046][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 2455.319626][ T31] #2: ffff8880b8625958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 2455.328757][ T31] 5 locks held by kworker/u8:0/558: [ 2455.334698][ T31] [ 2455.337067][ T31] ============================================= [ 2455.337067][ T31] [ 2455.345695][ T31] NMI backtrace for cpu 1 [ 2455.345709][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 2455.345729][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2455.345739][ T31] Call Trace: [ 2455.345747][ T31] [ 2455.345756][ T31] dump_stack_lvl+0x189/0x250 [ 2455.345781][ T31] ? __wake_up_klogd+0xd9/0x110 [ 2455.345810][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2455.345832][ T31] ? __pfx__printk+0x10/0x10 [ 2455.345871][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2455.345902][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2455.345926][ T31] ? _printk+0xcf/0x120 [ 2455.345955][ T31] ? __pfx__printk+0x10/0x10 [ 2455.345982][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2455.346002][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2455.346032][ T31] watchdog+0xfee/0x1030 [ 2455.346052][ T31] ? watchdog+0x1de/0x1030 [ 2455.346078][ T31] kthread+0x70e/0x8a0 [ 2455.346117][ T31] ? __pfx_watchdog+0x10/0x10 [ 2455.346133][ T31] ? __pfx_kthread+0x10/0x10 [ 2455.346161][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2455.346179][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2455.346197][ T31] ? __pfx_kthread+0x10/0x10 [ 2455.346224][ T31] ret_from_fork+0x3fc/0x770 [ 2455.346247][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2455.346273][ T31] ? __switch_to_asm+0x39/0x70 [ 2455.346295][ T31] ? __switch_to_asm+0x33/0x70 [ 2455.346317][ T31] ? __pfx_kthread+0x10/0x10 [ 2455.346343][ T31] ret_from_fork_asm+0x1a/0x30 [ 2455.346382][ T31] [ 2455.346390][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2455.506206][ C0] NMI backtrace for cpu 0 [ 2455.506225][ C0] CPU: 0 UID: 0 PID: 6230 Comm: kworker/0:4 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 2455.506244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2455.506254][ C0] Workqueue: events ovs_dp_masks_rebalance [ 2455.506276][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 2455.506298][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 cb da c2 f5 cc [ 2455.506312][ C0] RSP: 0018:ffffc9000c5ff480 EFLAGS: 00000246 [ 2455.506325][ C0] RAX: ffffffff8167d60c RBX: ffffc9000c5ff540 RCX: e355be5518c93b00 [ 2455.506337][ C0] RDX: 0000000000000001 RSI: ffffffff8db83fd2 RDI: ffffffff8167d60c [ 2455.506355][ C0] RBP: ffffc9000c5ff510 R08: ffffc9000c5ffe70 R09: 0000000000000000 [ 2455.506367][ C0] R10: ffffc9000c5ff4d8 R11: fffff520018bfe9d R12: ffff888060089e00 [ 2455.506379][ C0] R13: 1ffff920018bfebc R14: ffffffff81acff10 R15: ffffc9000c5ff488 [ 2455.506390][ C0] FS: 0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 2455.506404][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2455.506415][ C0] CR2: 000055a6762b1660 CR3: 000000000df38000 CR4: 00000000003526f0 [ 2455.506432][ C0] Call Trace: [ 2455.506439][ C0] [ 2455.506445][ C0] arch_stack_walk+0xfc/0x150 [ 2455.506467][ C0] ? ret_from_fork+0x3fc/0x770 [ 2455.506485][ C0] stack_trace_save+0x9c/0xe0 [ 2455.506504][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2455.506527][ C0] save_stack+0xf5/0x1f0 [ 2455.506548][ C0] ? __pfx_save_stack+0x10/0x10 [ 2455.506566][ C0] ? __free_frozen_pages+0xc71/0xe70 [ 2455.506587][ C0] ? __put_partials+0x161/0x1c0 [ 2455.506600][ C0] ? put_cpu_partial+0x17c/0x250 [ 2455.506615][ C0] ? __slab_free+0x2f7/0x400 [ 2455.506629][ C0] ? qlist_free_all+0x97/0x140 [ 2455.506646][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 2455.506664][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 2455.506683][ C0] ? __kmalloc_noprof+0x27a/0x4f0 [ 2455.506702][ C0] ? ovs_flow_masks_rebalance+0xf4/0xc30 [ 2455.506716][ C0] ? ovs_dp_masks_rebalance+0x56/0xe0 [ 2455.506731][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 2455.506747][ C0] ? worker_thread+0x8a0/0xda0 [ 2455.506763][ C0] ? kthread+0x70e/0x8a0 [ 2455.506782][ C0] ? page_ext_put+0x97/0xc0 [ 2455.506805][ C0] __reset_page_owner+0x71/0x1f0 [ 2455.506826][ C0] __free_frozen_pages+0xc71/0xe70 [ 2455.506850][ C0] __put_partials+0x161/0x1c0 [ 2455.506867][ C0] put_cpu_partial+0x17c/0x250 [ 2455.506882][ C0] ? put_cpu_partial+0x6d/0x250 [ 2455.506898][ C0] __slab_free+0x2f7/0x400 [ 2455.506915][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2455.506929][ C0] ? __phys_addr+0xd3/0x180 [ 2455.506950][ C0] qlist_free_all+0x97/0x140 [ 2455.506969][ C0] kasan_quarantine_reduce+0x148/0x160 [ 2455.506988][ C0] __kasan_kmalloc+0x22/0xb0 [ 2455.507007][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 2455.507027][ C0] ? ovs_flow_masks_rebalance+0xf4/0xc30 [ 2455.507044][ C0] ovs_flow_masks_rebalance+0xf4/0xc30 [ 2455.507065][ C0] ovs_dp_masks_rebalance+0x56/0xe0 [ 2455.507079][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2455.507096][ C0] process_scheduled_works+0xae1/0x17b0 [ 2455.507125][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2455.507148][ C0] worker_thread+0x8a0/0xda0 [ 2455.507172][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2455.507190][ C0] ? __kthread_parkme+0x7b/0x200 [ 2455.507212][ C0] kthread+0x70e/0x8a0 [ 2455.507233][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2455.507250][ C0] ? __pfx_kthread+0x10/0x10 [ 2455.507270][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2455.507284][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2455.507299][ C0] ? __pfx_kthread+0x10/0x10 [ 2455.507319][ C0] ret_from_fork+0x3fc/0x770 [ 2455.507336][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2455.507360][ C0] ? __switch_to_asm+0x39/0x70 [ 2455.507379][ C0] ? __switch_to_asm+0x33/0x70 [ 2455.507396][ C0] ? __pfx_kthread+0x10/0x10 [ 2455.507415][ C0] ret_from_fork_asm+0x1a/0x30 [ 2455.507440][ C0] [ 2455.508271][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2455.915837][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 2455.927737][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2455.937799][ T31] Call Trace: [ 2455.941088][ T31] [ 2455.944030][ T31] dump_stack_lvl+0x99/0x250 [ 2455.948638][ T31] ? __asan_memcpy+0x40/0x70 [ 2455.953241][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2455.958451][ T31] ? __pfx__printk+0x10/0x10 [ 2455.963061][ T31] panic+0x2db/0x790 [ 2455.966970][ T31] ? __pfx_panic+0x10/0x10 [ 2455.971399][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 2455.977250][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2455.982644][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2455.988905][ T31] watchdog+0x102d/0x1030 [ 2455.993340][ T31] ? watchdog+0x1de/0x1030 [ 2455.997858][ T31] kthread+0x70e/0x8a0 [ 2456.001943][ T31] ? __pfx_watchdog+0x10/0x10 [ 2456.006626][ T31] ? __pfx_kthread+0x10/0x10 [ 2456.011241][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2456.016453][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2456.021659][ T31] ? __pfx_kthread+0x10/0x10 [ 2456.026267][ T31] ret_from_fork+0x3fc/0x770 [ 2456.030871][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2456.035997][ T31] ? __switch_to_asm+0x39/0x70 [ 2456.040770][ T31] ? __switch_to_asm+0x33/0x70 [ 2456.045567][ T31] ? __pfx_kthread+0x10/0x10 [ 2456.050209][ T31] ret_from_fork_asm+0x1a/0x30 [ 2456.055173][ T31] [ 2456.058345][ T31] Kernel Offset: disabled [ 2456.062677][ T31] Rebooting in 86400 seconds..