last executing test programs: 25m23.956690961s ago: executing program 32 (id=480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r3 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac9\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92\xcb9\b\xc6^\xdf\v\x1d\xebQs\x02\xf9\n\x00\x00\x00\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csSP\xc0\x87\xec\xfb\x84f\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`\x8b\xc49\x0e\a\x856\xc7\v\xaa\x12\xd8\xb4\xcd0\x9cIZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\xdd\xa0I\xf7\xe5\x9f\b\xab\xb3A\x17\xf8UB\xe5\xb8\xcb\xf8\x8am\x83\xce\x8a\xf0B\x85\xdf\xfb+po\xf5\x84e\xbeY\xa0\"n\x9a\xf2\x1d\'j\x10\xf6\xdc$W\xfc\xa3', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) read$FUSE(r2, &(0x7f0000002680)={0x2020}, 0x2020) (fail_nth: 2) 18m53.040927022s ago: executing program 3 (id=2458): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000023b00000220180018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000b70300000000000085000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008541000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 18m52.903294485s ago: executing program 3 (id=2459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000080ffffffffffffff0000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000001a2703000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a00040000000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200"], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18m52.860795229s ago: executing program 3 (id=2460): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000000000000150100004908000010000085be0000002900"], 0x20}}], 0x2, 0x4000000) 18m52.797235483s ago: executing program 3 (id=2461): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x8e, &(0x7f0000000280)=ANY=[], 0x0) syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdir(0x0, 0x93) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c25000000000700", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) 18m48.675391093s ago: executing program 3 (id=2483): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0xc3ffffff}, 0x0) 18m48.302323962s ago: executing program 3 (id=2484): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a40000000090a010200000000000000000a00000308000c40000000040900010073797a3000000000100011800b0001006f626a726566000008000740000000385c0300000c0a050000000000000000000a00000714030380100100800c0005400000000000000009ff000640ad633854394dc5cfa2ca4d3aa07d09539224ec532a7806b155f0fc9b991150a04850becdfd4cafe270365e1477bb141801c631ef5621b82c1c553a5248b6272f0147949faa33b30abf0eb36b7ab3e91cca3c4f506b7cbf3a017aa3a0157afc0da61286cb91058fd42edd0a02ffe47dade53a67c18643b5da0469b22c17c41837520926699808c0cbdcc02f7f6ad3d9969de0ba1589e47417de3d624304ce2cab7976779923612546c2c370afe3b4984696cee5744cf3d68f418f8862b6e52bc5ad6e70797254203e9c2558ea57503eb9f63165e9f78b479450f1e8a1c4b8d52e3cb56098b2c57a1e06ebc1b2081f0ac05ca685674ad1eb20e0c17800d401008088000a8024000100819dc23ce61e9d721438c0882a1ff020716fe71c55742911c7b08abc952f2030440002800900020073797a300000000008000180fffffffd08000180fffffffb080003400000000408000340000000020900020073797a300000000008000180ffffffff1c0002800800034000000004080003400000000108000180fffffffe0900090073797a31000000003c000b805200018008000100647570002c00028008000240000000140800024000000014080002400000000c0800024000000015080002400000001100010180100002800900020073797a3100000000ea000100537948450abd2903a880626dedb737924e7f02a1cdb5edae397baa1bb6d5258c5319a82c9a41a23b33948b6f55dbdd8d150d48d8a3396fc1a39d4c6b4ebd163d1b387fadeed36209aee7a900080000000000002dad7211c4fa6a7a135e2cdf044c7af307f32f13f4383078f9e139fb13852a872f912e0c83d5fbe919bfe87faf9ad5ce978925deb1e893e71df5120f501a73fa6e0c76a3f05016ca4460df72f3150152dadb6f9601c982f823f9b8cecd07e5b72ba093938bc60fd3ffb0def4aff1bad1e0cdec7181678887926cb73cf9abc199fa2c14c6f9883e0ca86c3d748376a3fa68bb1f00be100000800900090073797a32000000001c0000800c000540ffffffffffffba980c0004400000000000000007080004400000000108000440000000020900020073797a30000000000900020073797a31000000000900020073797a320000000080020000060a010200000000000000000100000314000480100001800b000100746172676574000062000740d835b01c28d5b4fb06339933c3cd19753a6f05b1464e1e6514e7b5a7ebffe26f2b660b4a0a0eae4a08cd536bf2a2726efe518071aace8af53f077142332612a4aecd7fcfa57f3ba4a01cae2abfe18655fc816abf17df02d31884255c633e000008000940000000020900010073797a310000000008000940000000033c000580080001400000002b080001400000003208000240000000010800014000008808080001400000008708000140000000080800014000008909b60007409d4acc3b4a3be754adf67eaf02a472cc612ec16c33b08eb7861c5da6d5ba5a0422682387e03d5a3a1321518c4b1dead6e66676797deb8ad127e3648530d4aa906d426ba8d855c9bb20476d3e77352b109492055ff74a00558af1da808b51c407449960185686ee413d140f90eedebdbb67be8ce34d37e3136a7af11ad00b9f6a5ea3bd26676851122d7224295b99b328606e0c92d30ac74897199493b7d0879d3c02187c329c6efe2d6f8632de1fe140c6ba00000900020073797a32000000001400058008000140000088ac0800014000000094c4000480140001800d00010073796e70726f787900000000100001800a0001007175657565000000440001800b0001006e756d67656e000034000280080001400000001608000340000000000800034000000000080001400000000408000440000010000800034000000001100001800b00010064796e736574000048000180090001006c6173740000000038000280080001400000000908000140000000060800014000000111080001400000000708000140000000800c000240000000000000010128000000180a01020000000000000000020000010900010073797a31000000000800074000000001140000001100010000000000000000000100000a6a539f794828ccf1bfdcb85514408dd7baf5c51d75bb00bdb0f32de93e1eb8f148f6b322d5ed1a191fc8550730f40810ed608c8ed4138d190b3b58598b7a4356347566505f6dda01c33548df8d999ffddde83f457c34b8ad9be191f178227b08a1170ed92524782058cb27a454e1711eed335da634f3782d8038ad92f32e51c7ea29bc32b42eb772ca"], 0x66c}, 0x1, 0x0, 0x0, 0x4040004}, 0x2000c044) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0xffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x4, 0x200, 0x4, 0x2c, 0x7fffffff, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) unshare(0x2a020480) openat(0xffffffffffffff9c, 0x0, 0x441, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) ptrace(0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfc) getdents(r5, &(0x7f0000001600)=""/34, 0x22) getdents(r5, 0xfffffffffffffffd, 0xbb) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0007"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000000)) 18m37.951028763s ago: executing program 5 (id=2527): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) r0 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x0, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000180)='abcdefghijklmnop', 0x2) keyctl$negate(0xd, r0, 0x10, r1) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000240)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, [@null, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="bc88dbe34e8f525647f6aefbb59f090ab77fe2eb1adbe24a24bf575fee05f687267b3306ca1fcf3bc3280fa20bdf6ab5411b814220238bb18b80c76538edbd82f93acdab80f66c123efb7b56e72fa84b5dafb13664541bb63c3c4a5c40110dbbf47b0b19471d294d3c1c6b277e32bae924c48637de7fa6e4b168723ba9ec506e85bdb2d3c6a634ba4314efe9dae75c587268696606c50f7e9bf7324c9d69f29563771b767ee167e1314405ae73d7f553b618980897114a98bf80daa053b207d5b3666410cdb494021b924db5b59e623000ef6892c10632a8d9", 0xd9}], 0x2, &(0x7f0000001400)=[{0x48, 0x108, 0x39, "0f50e998214bc5185622456fe2ac64e2444857b2b0730e733db6cc2432ce0d1a5166a92b75778ea7e4289f3363d6b0636d38"}, {0xd0, 0x108, 0x3, "67ed3d61bea6d526e3d3ce6b2755108cf9450b232d867feada0511ca2a470a89b2312ad5151aa1e738d229979cbb7d0765f7aa253f722d66a60643c6605c8dfa57dfd82f50b5bfd7fde170534ec7505e162ac2cd63559365f8e092ff5bef891f8b453d0ef5234a763659f35893dc73776a5e87a34b73390842b8033c8cca4e4bc76524cd59bd76a4de76377c5c5d908e68c82127ff6a410f28b25b6d88bc447efe91a832ce7931d4c432f2bd28770662a541c36cc1bf780ec8b7b3"}], 0x118}, 0x80010) r2 = socket$inet(0x2, 0x800, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001580)={0x1, {{0x2, 0x4e23, @remote}}}, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001640), 0x6e, &(0x7f0000001800)=[{&(0x7f00000016c0)=""/80, 0x50}, {&(0x7f0000001740)=""/168, 0xa8}], 0x2, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x10042) ioctl$KVM_CAP_VM_TYPES(r7, 0x4068aea3, &(0x7f00000019c0)={0xeb, 0x0, 0x1}) sendto$inet(r4, &(0x7f0000001a40)="cb97b74ef21ced6ee205b011fb454248a7d53a2afdeea815addcf36997cf81cd1a7ee66586f572f79f446396d31adc31aa4217f6c88fbc888363f3dbec936188f36dd770c59ec6c92037ea0361eb3e01b2a0e31b6009a41ab6b6eb312bf76777d8ab92155e446b91c042e39c80310ef322fda476599a40b5dac115a1787ada4bcc09d9fb0680b0a952f62510252db0673e562e61a048c2748737930787c567", 0x9f, 0x4000000, &(0x7f0000001b00)={0x2, 0x4e22, @remote}, 0x10) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) write$FUSE_INIT(r8, &(0x7f0000001b80)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x80000000, 0x10000, 0x4cbb, 0x7, 0x8, 0x0, 0x0, 0x0, 0x12, 0x6}}, 0x50) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) bind$can_j1939(r5, &(0x7f0000001c00)={0x1d, 0x0, 0x0, {0x3, 0xff, 0x3}, 0xff}, 0x18) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000001c40)=0x1) sendmsg(r6, &(0x7f00000034c0)={&(0x7f0000001c80)=@generic={0x3, "126b16c87c1797273f80f347c68d026e5f79b3d7d08aa1d4e2f770bb2e7e683bb26b7ce5b6eb34b46e3454ed51b62a907d4779bab9eb0bf9619cf07bfc2fa37afbbb5dbe6652fe6f0f63e556f56333aec9eef7858627ae11087c2ee41265ec20e2c46e41a5700afdc0689da1c929c8a5e969660df9902695ade95100465a"}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001d00)="6abbdba2574ab9fbc3e4f00c5ca42607fa0f78c2dbafa00bafdb08688e8049cdf9dbea8cc672c78e4bb664e03f813ce191cf40a840f1a03805dcefaa47a702a13294641ad420aec869e4d1343b34e225a3973084d8758fc3158c9a37dfb635d07e558c238231e918230ad66859dece9aa4a8306d0172abee47dc00a53a0a199ea7ae32213976f6a607200e92bd7601142b76590b00bf0f01c162457368f455ecab7715ed37a7", 0xa6}, {&(0x7f0000001dc0)="6571955f03412805681ade0fa10296dce1be8d9b551c0d43daf1d50f5b4ddbf12e9c12bfdb045f77751d3e309a07cb5c2fa1f6490c0d598845c80a4a923a8b2107100962797d05231c6685ab753a43e96ed203c4ab6a1a0f60efb537bbdb9ab83e9d88fdc711a21bf2f26eaadf1020f62e7193fbe9e79c06f5c513b64d4e34720a53b85f83901979d2e6edccec0d2e12d298e188e61627a901b1294b90b85573be", 0xa1}, {&(0x7f0000001e80)="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", 0xfb}, {&(0x7f0000001f80)="3dcbf24d24213a2747d635e2b89ccd5a262fdb6d92abb7061fab4248b9cb6f75411a10f9a12272869207c88f12e16d88730bd4712594aa2d6f3bae2c0d28f83efdd6430a48289484d83b61c9864889f5c5efc39968df78f9b6ba6637128c76ebf15511cbbd5d14a8cf7afa54c17caabfa186b2cc7f1fd5a09f9d0411e62d10ef9abc50058c1bfc33be1a157592effe7007e1a3ea35966dd53be37d", 0x9b}, {&(0x7f0000002040)="22dd7e8c253f1d43359a0d038db24fb1d75e9a03abae6c5d40001e44ea15a45b2b36cf4ffef6fbcad6ee5fbdf576a709532d34b89d1968ffc5d17c4464af9e8533faa1f388189d4526ac20fc86da2195b750ab2d6a4369b2eb39ee6955be9d3a56e15aed192a15ee256e8859e878731dca3f60e8350d5d8510f05f02b2cf9af7395657ee417d88849e26b0febb633ee83c02702a02ac0096e7853ddf56fd021d3426e8f69beeeaf77b97fa5b48dc3ee0c0dac6e4ec6bb449dabdcf69f4b63d4448f0f08c18b374cca7d98203b04db67b71ecd5e4fc23c582146cd154dd00bae161354a44b26a8c", 0xe7}, {&(0x7f0000002140)="883d6076a544eb65f6c373a95a67b347f44f9b810edd6e4631fe16eeff1479088daa8c25bfd79c430b24a6eb22413b39059faf7cc2d773a7db960475f8ea7aac1b17070d4f2b9c09b83a3670c2c1887d57e607097571d62ab7814785541c013357f05e2ac3e846491fcce555f42c526b2ad08bd56c0bc7c6a66dee4f6e7c998826306c4b783eaaa29e28e37ce6253e40626824100d12b62dc06b0d59e158", 0x9e}, {&(0x7f0000002200)="33af096782da50", 0x7}], 0x7, &(0x7f00000022c0)=[{0x90, 0x6, 0x3, "994a5d5f5a0b6fcf2e3bbfa1705b8a43da15a8c20de86eadd3d45f452fe5f8d47a7cfda5b932108cef712194044bad520a9f6e20cbf9aa5e2bd2c684c44b6a1825f1b207e5dd9d463709a67499e4efe1276ad5401eb5d7ff364d38d936696e9e9d83e93b3acdbcd2efeb8c82551921ca97d23436f4977ece77"}, {0x1010, 0x109, 0x7, "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"}, {0x48, 0x116, 0x200, "d3956be1bcc6bdb6e397b9964a04c79b1ebf24e3bc08bb461ad4a9d625a9b12bf725bb1655fd8c52a5f11ea9853ddb4c74b4fe5a"}, {0xf0, 0x1, 0x8, "e5f03bb53261d9ceea299ed693440e3afad25cb7b9ec937bbf5868d07b4067918a9be6aa9a7c5e05c913705f7897f65f67b9130a9cb322d3630d12b97965b779d670b87449cbbf751feefd2b9956c06317802295fc557700437740a7f7c1edd76417b470344524316e93c0e49bba4482efe2b45956dce4091568761a1bc6550a3844f7b11d1f8044abad8a0267e6597c8a396c37bb9466c6ae407067a898093da1d8c863c50937698e1c4e39e6bc70b33bba6339989c5f7b2e2d4e00ab8bcefedb0bae0566f141e8baa5f531bb2292ae703646b30c7c95cf2d"}], 0x11d8}, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000003500)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000003540)={0x6, 'vlan1\x00', {0x9}, 0x400}) r9 = shmget(0x2, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmat(r9, &(0x7f0000ffd000/0x2000)=nil, 0x0) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000003580), 0x26000, 0x0) write$dsp(r10, &(0x7f00000035c0)="1f5456490bdb459ccdf80a70296309512532b97ad106db009e154ab54bccb3dbe77073e4dd536b33d3279dc178ec2a8d948bfb6295161278d08b3616efd8ef54c0bceb0c6f8bf4cb96ae948d346e3d5e98bfab194f5ef483b0ab146c708d82288e00a86c67ee0081ed6ce62ec978227cf0659d8bed", 0x75) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000003680)={0x13, 0x20, '\x00', 0x0, &(0x7f0000003640)=[0x0, 0x0, 0x0, 0x0]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000036c0)={'wg0\x00'}) socketpair(0x22, 0x4, 0x6, &(0x7f0000003700)) socket$nl_netfilter(0x10, 0x3, 0xc) stat(&(0x7f0000003740)='./file0\x00', &(0x7f0000003780)) 18m37.482239284s ago: executing program 5 (id=2532): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="70010000", @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf2568000000080003", @ANYRES32=r2, @ANYBLOB="1600c700"], 0x170}, 0x1, 0x0, 0x0, 0xc800}, 0x404c000) 18m37.414819575s ago: executing program 5 (id=2533): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x38011, r4, 0xd175000) unshare(0x2040400) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x15) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000002c00)=@buf={0x67, &(0x7f0000000140)="6252e77d4b6ad3d54d0096fd261467f26cd15d347820b97bd45da28176178478be27ac9a0c71bb60dde82683416feb15a86959beb6b2fc517067fe6e560ed3506cd4392c6601eb5fb4682c7207d911c6449f73c7333dcfbe714d239ae96c2d97d6f2ce22250e36"}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 18m36.503559375s ago: executing program 5 (id=2535): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs2/custom1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) syz_clone(0x100000, &(0x7f0000000600)="b196ffda6c46", 0x6, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="2a8bcb4a6037f79662eb53dcd4690558a3e621bb90b662249c877ed8ddbbb95d9ee5d4cf05845b4e3e6d3767c96b4ef5178a4d7a3d39b0656f06a88852fe3f18fc9e11e549fa9ecb180d48aa70f684351dba") ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0xc}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x21}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x400, 0x3231564e, 0x1, @discrete={0x7fffffff, 0x7}}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newpolicy={0x1bc, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x9, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x9, 0x100000000000000}, {0x0, 0x1, 0x1}, 0xfffffffe}, [@tmpl={0x104, 0x5, [{{@in=@broadcast, 0x4d6, 0x32}, 0xa, @in6=@loopback, 0x3505, 0x1, 0x3, 0x3, 0x9, 0xb4, 0x7}, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d4, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x0, 0x0, 0x9, 0x1, 0x8000, 0x8}, {{@in=@local, 0x84d2, 0x33}, 0xa, @in=@remote, 0x3503, 0x2, 0x2, 0xfa, 0x7, 0xa, 0x4}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4d4, 0x6c}, 0xa, @in6=@private1, 0x3501, 0x4, 0x3, 0xf7, 0x1, 0xffffffff, 0x10001}]}]}, 0x1bc}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) 18m35.565913781s ago: executing program 5 (id=2537): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000003e00000220180018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000b70300000000000085000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008541000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 18m35.321875362s ago: executing program 5 (id=2538): r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x54, 0x0, 0x0, 0x90000000000000, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7ff}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cdccfe728e6e04f716066eee8c6db22cbe49b46dc8d7ad49"}]]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x200008f0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000004100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) 18m34.964623664s ago: executing program 33 (id=2538): r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x54, 0x0, 0x0, 0x90000000000000, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7ff}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cdccfe728e6e04f716066eee8c6db22cbe49b46dc8d7ad49"}]]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x200008f0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000004100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) 18m33.062752317s ago: executing program 34 (id=2484): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x66c}, 0x1, 0x0, 0x0, 0x4040004}, 0x2000c044) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0xffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x4, 0x200, 0x4, 0x2c, 0x7fffffff, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) unshare(0x2a020480) openat(0xffffffffffffff9c, 0x0, 0x441, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) ptrace(0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfc) getdents(r5, &(0x7f0000001600)=""/34, 0x22) getdents(r5, 0xfffffffffffffffd, 0xbb) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0007"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000000)) 15m40.930221398s ago: executing program 6 (id=3161): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x1c, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x900, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 15m35.759180766s ago: executing program 6 (id=3173): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x7f, 0x7ff}, 0x100, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, &(0x7f0000000180)=0x1) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d6e1f202"}]}}, 0x0}, 0x0) 15m33.694934023s ago: executing program 6 (id=3180): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1800, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) 15m33.397790205s ago: executing program 6 (id=3182): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r2, 0x0, r1, 0x0, 0x46) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x20000002, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 15m33.127268086s ago: executing program 6 (id=3184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x203}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x24000000) 15m32.932164397s ago: executing program 6 (id=3185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900011373797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x0) 15m32.373138183s ago: executing program 35 (id=3185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900011373797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x0) 14m23.816544719s ago: executing program 1 (id=3410): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f00000000c0)=ANY=[]) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x84, 0x49, 0x10, 0x5ac, 0x24e, 0x8464, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xf8, 0x4, 0x40, 0x82}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) 14m22.296470975s ago: executing program 1 (id=3416): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/70, 0x20}], 0x1000000000000078) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r5 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_proto_private(r5, 0x89e0, &(0x7f0000000240)="f184e12fdc76") 14m21.2917727s ago: executing program 1 (id=3420): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x100000000000000) 14m21.077265261s ago: executing program 1 (id=3421): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a774", 0x22}], 0x1, 0x0) tee(r3, r8, 0x8f5, 0x100000000000000) read$FUSE(r7, &(0x7f00000003c0)={0x2020}, 0x716) write(r5, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r11, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x450, 0xffffffff, 0x128, 0x128, 0x128, 0xfeffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'veth0_to_bond\x00', 'veth0_to_bridge\x00', {}, {}, 0x3a}, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x6, 0x2, 0x1}}, @common=@ipv6header={{0x28}, {0x88, 0x14, 0x1}}]}, @REJECT={0x28}}, {{@ipv6={@remote, @remote, [], [0x0, 0xffffff00], 'rose0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x1}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0x0, 0x0, 0xff]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 14m19.68518357s ago: executing program 1 (id=3426): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = dup3(r1, r0, 0x80000) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x0, r0}]) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0xde, 0x6f, 0xb6, 0x8, 0x4c8, 0x720, 0xb8b6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0xd0, 0x72, [{{0x9, 0x4, 0x9b, 0xfb, 0x0, 0xfc, 0xa2, 0xca, 0x99}}, {{0x9, 0x4, 0xf5, 0x6, 0x0, 0xac, 0xef, 0x41, 0xc}}]}}]}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="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", 0x163}, {&(0x7f0000000480)="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", 0xde7}], 0x2}, 0x800) 14m19.078478145s ago: executing program 1 (id=3428): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x523980, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', './file0'}, 0x816c66) close(0xffffffffffffffff) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1/file0\x00'}) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) 14m18.337539178s ago: executing program 36 (id=3428): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x523980, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', './file0'}, 0x816c66) close(0xffffffffffffffff) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1/file0\x00'}) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) 8m20.013519456s ago: executing program 0 (id=4868): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x60, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) 8m19.70719391s ago: executing program 0 (id=4870): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x16) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064d1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) getsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000780)=""/212, &(0x7f00000000c0)=0xd4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) r4 = socket(0x1d, 0x2, 0x6) getpeername$l2tp(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000940)={'tunl0\x00', r5, 0x40, 0x40, 0x0, 0x8000, {{0xe, 0x4, 0x3, 0x0, 0x38, 0x67, 0x0, 0x7f, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x26}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x24, [@loopback, @empty, @multicast2]}, @ssrr={0x89, 0xf, 0x49, [@local, @multicast2, @multicast2]}, @end]}}}}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@my=0x0}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, &(0x7f00000006c0)={0x9, 0x20, 0xfffffffffffffff9, 0x20, 0x1}, 0x48) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}], 0x2}, 0x24000008) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000880)={0x800, 0x0, '\x00', {0x0, @bt={0x80000001, 0x8484, 0x1, 0x2, 0x7, 0x80000000, 0x7ff, 0x1, 0x7fffffff, 0x2, 0x4, 0x80, 0x9, 0x6a, 0xb, 0x0, {0x2, 0x3}, 0xe, 0x4}}}) 8m19.583128908s ago: executing program 0 (id=4872): socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/keys\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_connect(0x4, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 8m18.471677056s ago: executing program 0 (id=4882): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022dfe00000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f0000000b80)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121040, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_clone(0x88a0000, &(0x7f0000000200)="dbc7404d725082b316c4ef6cbf13494c41e6f6b6a578f7d9c89a1aacdbafd8a4de3389f28017191825c661ff27a64c6a6df749a702da242b9c029f08521d4db7318ed3d65be819d563bb5d017f61ee8e01af65cc4d7836c5dc052e3e7f7b35611a4fd06eaa9b00a6138a223e0fa7d0e688fd95e884c2b9f88f6323488bf3df92eb869287cc6caefe46c353a48f5b603e5eb7a73aa72fd99acd12d341d0c2d187761b113493d2d2f23a5f46fe444a7d292a5ca80ee64712d3d24b88189266c20a941997443d53aef09d85c793f2062f5cec18ca994eb7811ce0e2b0897b4188eea627cfa0610b", 0xe6, &(0x7f0000000080), &(0x7f0000000300), &(0x7f0000000440)="fcbaf180db3e5e231f159be681c76bec2d41edfb4d35043b06a95b5118255958500bc5ddea465c6500d4b764166390754ba29b327c5afbb9f8bb5262875ee57ff8e6ca59a696e0cc7b574bde24ead9acb2b1b924eb3727e18abae180b4c4f0d5e24a9ce4b7f9da64ba68dbc69ecc9d5cd4840f4f1d6af4fddbdf4a7137c3bb1b4f129cebeb5e4ed3434a42ca122053ce17923a972d1be5d520272ee1e91cf1d555157f7ca2b51f009b68973f313faa24a7f45af13e95aae5f1d5c0073c7179f7ce6b40db0fec45883d1464c6cfa46944182cc7f069b89c3a38908481010cdb1aca1a754dbe57") ptrace(0x4208, r10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8m15.147205283s ago: executing program 0 (id=4892): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x2070bd2d, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c012}, 0xffffffffffff) 8m11.79540057s ago: executing program 0 (id=4903): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file1\x00') (async) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0) fallocate(r2, 0x3, 0x0, 0x100000800000000) (async) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045120062006400004d2f"], 0x0) (async) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000040)={@desc={0x1, 0x0, @auto="004d9c1f614b4c54"}}) (async) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000500)={[&(0x7f0000000340)='\x00', &(0x7f0000000440)='\x00']}, 0x0, 0x1000) 8m10.921952583s ago: executing program 37 (id=4903): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file1\x00') (async) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0) fallocate(r2, 0x3, 0x0, 0x100000800000000) (async) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) syz_emit_ethernet(0x70, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045120062006400004d2f"], 0x0) (async) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000040)={@desc={0x1, 0x0, @auto="004d9c1f614b4c54"}}) (async) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000500)={[&(0x7f0000000340)='\x00', &(0x7f0000000440)='\x00']}, 0x0, 0x1000) 11.060918527s ago: executing program 7 (id=7400): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x14) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x20044040) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) mremap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x7000, 0x2, &(0x7f0000a96000/0x7000)=nil) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xa7, 0x7, 0x16, 0x40, 0x6a2, 0x3, 0x3cf2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0xa0, 0x6, [{{0x9, 0x4, 0xb4, 0x4, 0x0, 0xcd, 0x7f, 0xe4, 0x7}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x3c01}}, {0x9e, &(0x7f00000000c0)=@string={0x9e, 0x3, "8a117e7ff567b2e2a86790d141324eb731bf72744ce27b30d2c6980e614bfab4bfb23d002c12d43e1a3b67907e75cdd526f04fe6592ed096aff9012ae91513582dd203138b3fd9056421693a3bfafc15e36323a60c34cbb802704655b97f40b7f6a14c4ba96e73683ce708a816c91f4f0cebc5f24fe676d522f56629c573e7563555babb113f6293e55ad3357cb6f3512b9fe74fcc62531cf58deed9"}}]}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xc3, "2a9f3b8274bcda7d0a74b2d6e594cf6e6e428dff66e2005ddc29c09aa6c3ed265247d135ea9fdd3c3d314a84c96a159b9ff1cf774a5dbc160707e2be61bbe7a9f6fd92cd8878a7c08db7cd60c2f1b0c37c003b13fdc623f68b97b427b51264385e843078c4c118299303507a539fef18c7ddd302b41821ca17fa50ce7ea2d08fae7eaeab40cb5afd91affef13f062ad702b0b8717513320efdcd054efb9cc5a235e1ab0842f128f62c2dec099b05158ac2bb0cd755f3d8131ee5fdcd7c13c78292053a"}, &(0x7f0000000280)=0xcb) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r2, 0x2, 0x5, 0xdd40, 0x1000, 0xe8b}, &(0x7f0000000300)=0x14) 8.119310596s ago: executing program 4 (id=7413): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$get_security(0x11, r2, &(0x7f0000000000)=""/205, 0xcd) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x8, 0x7, 0x9, 0x70290, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x1, @void, @value, @value=r1}, 0x50) 7.979538053s ago: executing program 4 (id=7414): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000500], 0x2, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000fffffffffffffffd000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000020000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000"]}, 0x108) 7.878484549s ago: executing program 7 (id=7415): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (fail_nth: 1) 7.71902873s ago: executing program 4 (id=7416): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120910c83ed7aee853dd9f56a279c8a798a40662000900"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 7.29404465s ago: executing program 7 (id=7418): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000003000000003800000700e70011000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = syz_open_dev$video4linux(0x0, 0x7f, 0x80) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0xa01f, 0xf09, 0x5, 0x8, 0x6, 0x5, 0x378, 0x81, 0x9, 0x40, 0x1, 0x8001, 0x9, 0x5d, 0x9, 0x7, 0x7fffffff, 0x8008001, 0x101, 0x3, 0x9, 0x5, 0x5, 0x80000000, 0x9, 0x3, 0x4, 0x0, 0x4, 0xc, 0x7d2d, 0x4]}) fchdir(0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080), 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) madvise(&(0x7f0000764000/0x3000)=nil, 0x3000, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) io_setup(0x5, &(0x7f0000000000)=0x0) r8 = inotify_init() io_submit(r7, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) bind$packet(r4, &(0x7f0000000040)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="4d7c646f0b9a2818ade60e4d612c64c6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 6.951062909s ago: executing program 9 (id=7420): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x1e8, 0x0, 0xb8, 0x0, 0xb8, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000400000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000"], 0x23c}}, 0x0) 6.809102056s ago: executing program 9 (id=7421): ioprio_set$pid(0x4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xc6aa51aa0d3d52d8, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={r3}, &(0x7f0000000280)=0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000ca", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x2c9ab000) io_uring_setup(0x7c5, 0x0) memfd_create(&(0x7f00000000c0)='[($^\x00', 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 6.102718553s ago: executing program 8 (id=7423): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220180018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000b70300000000000085000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008541000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 5.907166844s ago: executing program 8 (id=7425): socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/keys\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_connect(0x4, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000ffef000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 5.466185578s ago: executing program 9 (id=7427): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x20}, [], {}, [], {0x10, 0x7}}, 0x24, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffff}, {}, {0x10, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async) r2 = socket$kcm(0x2, 0x2, 0x73) prctl$PR_GET_TIMERSLACK(0x1e) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) (async) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) read(r4, &(0x7f0000000240)=""/28, 0xffd2) r5 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r5, 0x80079a0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r5, 0x0) (async, rerun: 32) r6 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) (async) r7 = socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x440, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) (async, rerun: 64) splice(r0, &(0x7f0000000040)=0x40, r7, &(0x7f00000000c0)=0xec7, 0x1bb0, 0xd) (rerun: 64) 5.024387156s ago: executing program 8 (id=7428): r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x54, 0x0, 0x0, 0x90000000000000, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7ff}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cdccfe728e6e04f716066eee8c6db22cbe49b46dc8d7ad49"}]]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x200008f0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) 4.5790265s ago: executing program 4 (id=7429): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="5c6d96225681f077f915204d890e9fa13f6e3fcd865008768782f3c387f24440f46e1cf981b5bd0893237d5eb7f0d7dfb4d2187ff4de548324", @ANYRESOCT, @ANYRESOCT=r0], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xdc, 0x0, 0x80000000, 0xffffffff, 0x7, 0x401, "d7d54e4adeed2d9385ec19c1f52dce8c18b0066d48944b98d54528897e450465c2bb1af366fb82a0523b4bae935b4186e4035d17d260e6557775a1c57a489fd08024652afa541bd8fb1713d86787264fa4d8f3c4f612ac17e827f3fb6bb7459221077c0b095c2241214c313d177f3cd295397cad4128d6454f0cf3e798465644b782d576863785dc386ded5d6a932089a7542cc29c222860522fb05ea2196abfff2d851bc5370202be70f4860633b3c76377b8004b26512b729f470023872d8169247f5b1c6787bb823ee2d3851336eef0529348bd94bcc741defd54"}}, 0x1f4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x0]}}]}}}], 0x60}, 0x20040814) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x3, 0x0, 0x0, 0x8}) 3.776967913s ago: executing program 7 (id=7430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540001300001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x0) 3.498284241s ago: executing program 9 (id=7431): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x109801, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508", @ANYRES16=0x0, @ANYBLOB="1b7dd1ce99475246afab416df1"], 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000300)=0x3) unshare(0x2040400) r3 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x5, 0xfffffffffffffffd}) mq_getsetattr(r3, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xe4, 0x23, 0x100, 0x70bd28, 0x25dfdbfe, {0xc}, [@typed={0x8, 0xd, 0x0, 0x0, @uid=r5}, @generic="958dba693c", @generic="5b6c8843080b878f7589dde23545fd1a7feb50e1afdbf4c1c2941adc20f43130795542c8d416a9a989d7e70dcab2bcd58fd03a21dba4649529815f10d94d1863bbef4e6337c2840a4d3debe3c440e5ba7b01b64ce960eb3f8611ae08abe9446d1c5301e270c6262a24b23a302cc68f8c44ae4e37bb617b2485d91bfaed0066131e9d02ae0c26c84b9bb745723dc075ad449a141afe1fbf98a4e8698e2c3f53c5206cf65072ce19de6f860f9657cf9b9c88f5b1", @typed={0xe, 0xd8, 0x0, 0x0, @str='/dev/dsp1\x00'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x48000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x800001, {0x4, 0x4}, {0xfffffffd}, {0x0, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x6, 0x69, 0x0, 0x100, 0x2, 0xc}) 3.402974435s ago: executing program 7 (id=7432): r0 = syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0xbb4e, 0x1000, 0x0, 0x2d1}, &(0x7f0000000000), &(0x7f0000000b40)) r1 = io_uring_setup(0x2f0c, &(0x7f0000000100)={0x0, 0xec9e, 0x20, 0x0, 0x13, 0x0, r0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYRES64=r6, @ANYRESHEX=r6], 0x20) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x9}, 0x1c) r7 = socket(0xb, 0x80000, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000005f0001"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x1, 0x0, @local}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@getchain={0x2c, 0x66, 0xfcd66a900070b359, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xa, 0xc}}, [{0x8, 0xb, 0x15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 3.309963793s ago: executing program 4 (id=7433): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) close(r0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) brk(0x5d555ede6000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000101c0)={0x8000000, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000240)={'syz0\x00', {0xf, 0x7, 0x7, 0x6}, 0x4a, [0x80000000, 0x3, 0x5, 0x40, 0x0, 0x2, 0x0, 0x80, 0x13, 0x5, 0x22a7, 0x6, 0x0, 0x0, 0x6, 0x1000000, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb6, 0x11e, 0x0, 0x2, 0x0, 0x2, 0xccbd, 0xffff, 0xa, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x2, 0x20000, 0xa, 0xfffffffe, 0x1, 0x0, 0xe, 0x7, 0x0, 0x4, 0x57, 0x5, 0xfffffffa, 0x0, 0xf67e, 0x0, 0x1ab9, 0x0, 0x8, 0x0, 0xfffffffb, 0x1c15d73a], [0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x7, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x9, 0x0, 0xd, 0x80000002, 0x0, 0x0, 0x9, 0x0, 0x9, 0x2, 0xff, 0x5, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10000010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x441238ca, 0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x0, 0x3, 0x9f5, 0x0, 0xe, 0x1c75, 0xf51, 0x0, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x2, 0x6, 0x208, 0x5, 0x0, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x9, 0x63, 0x0, 0x0, 0x0, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x4, 0xb0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x3f, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0xddde, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x5, 0x0, 0x2040, 0x2, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x2, 0x0, 0x0, 0x84, 0x45d, 0x4, 0x0, 0xfff, 0x400b2, 0x9, 0xb]}, 0x45c) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "c668d0c1"}]}}, 0x0}, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x1e, 0x37, 0x2, {0x1, 0x89ee, 0x5e8a56d6, r6}}, 0x1e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.045801929s ago: executing program 7 (id=7434): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "caf8c695"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(serpent-generic)\x00'}, 0x58) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000198c0)={0x14, &(0x7f00000003c0)={0x20, 0x9, 0x102, {0x102, 0x30, "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"}}, &(0x7f0000000200)={0x0, 0x3, 0x85, @string={0x85, 0x3, "932877cf8dd0968c031264f099549e36597a6044823959ab8c0e35c9ffe6f90d9c62fe7ccd3fcc92be7aaa629917c20792f6ba3239204db17bd2eab125e411a3272771c3af6809b37e9792d565f6ab442f3e43907de9bc750a7e32fad24197d575b610a0bb7fc123a0015c71c17862cce6ee9cad2133888d3754e4262c5cb7a917e9a8"}}}, &(0x7f0000019b00)={0x44, 0x0, &(0x7f0000019940)={0x0, 0xa, 0x1}, &(0x7f0000019980)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000199c0)={0x20, 0x81, 0x1, 'n'}, &(0x7f0000019a00)={0x20, 0x82, 0x2, "cf0a"}, &(0x7f0000000100)={0x20, 0x83, 0x3, '\x00\x00\x00'}, &(0x7f0000019b80)=ANY=[@ANYRESDEC=r2], &(0x7f0000019ac0)={0x20, 0x85, 0x3, "e2272b"}}) 3.017518154s ago: executing program 2 (id=7435): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000000000000000000007fffffff00ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000001a2703000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a00040000000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200"], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.691238061s ago: executing program 8 (id=7436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000060002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) 2.690750822s ago: executing program 2 (id=7437): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00328dfd0e6eb8d1ded47621d0b90f02000000b848"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x327000, 0x0) 2.571290008s ago: executing program 8 (id=7438): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x1, @pix={0x3, 0x5, 0x30314742, 0x1, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x3, 0x2}}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080000000f000000000000004500002801ffff"], 0xffbf) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a14000000000a050000000000000000000100000050000000090a010400000000000000000100000008000a40000000030900020073797a32000000000900010073797a300000000008000540000000020c0009800800014000002080080008400000c4"], 0x8c}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) socket$packet(0x11, 0x3, 0x300) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0x1, @pix={0x3, 0x5, 0x30314742, 0x1, 0x0, 0xffffffff, 0x9, 0x7, 0x0, 0x3, 0x2}}) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080000000f000000000000004500002801ffff"], 0xffbf) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a14000000000a050000000000000000000100000050000000090a010400000000000000000100000008000a40000000030900020073797a32000000000900010073797a300000000008000540000000020c0009800800014000002080080008400000c4"], 0x8c}}, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) (async) 1.495814853s ago: executing program 9 (id=7439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x3, 0x8, 0x2, 0x0, 0x0, 0x2, 0x2, 0xfc, 0xfd, 0x12, 0xfe, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x4, 0x8000000000002}) (async) r3 = gettid() (async) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async) io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xb, 0x164, 0x0, r4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd28, 0x24dfdbfe, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x884) r7 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x18, &(0x7f0000000000), 0x1) process_vm_readv(r3, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) 1.371650323s ago: executing program 4 (id=7440): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x8]}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x2, 0x1fec, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000480)={0x2, 0x1, @start={r2, 0x1, "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", "cc8af51ba66124804f9890d3073403b07ed43219aa814b1ffb6a65788957a24406b7f6d64b9107ca802fa4be4b5254de6d4f9d6f05acd3058188fd95313a76b258e490e5bb06eda0d9a61ba9a880da0544b2fb62d190602b03c1723a671b34264285cd9ca7461d005a117210e8793216f4e6abf1d3713394eb421dbd15a6139c658dd68c6198bce0250da836d4fecb36efd2d45ba4beee1d50b712f5732423542f980e33b097661d905d3b1a010e423a721d4eeae24d7ab1e31d162194f0f107c735ade0b03338966187c10c0db172799c7007000f98a82319afcab2bdd17ca2a8ec83717e3cd031884a0569fa460ce97de4f78237845b6a33ee9188138345a5d698524abbbae919f108384e5b7b1d3fec9055c1f9bea60d99881dff3dd6dba8fc03dfd7cd89899532324fced44285de56b12a61d9ceb6171e6c5c571d3d69a2d34ba88a76f601da4dbf95e981d5a547a75b2786f07135dae8de7019dceff56e2bf1a583346010e4fe455dac4d54393decae4a798e72a8397847874bf71f12d3d457bad1b3f45885c5307aa57dd35686c5325abd7e12bdb2fa8af034bbb034dbc87db67d433c27c21ac02eb1200d3734daf28defb37850a946687213dfdf701db99384b728d494953edbbe6bc71ae437422d48abcf7b87a5fc9489953452ee06b93620c811bb5bd335155f5445918ffcd10fe1e9ff3ef1b6918978aff9c54d06c19ec3f9e5654bf31324459ba4cca9bac53e08c099f48303d1f0c6ec6f243910da4da2ae60fa33eb0551e112e4c155ca032ada2207fa1a1299fb935f1ab3ecba1c627b7326508aaa2cc6688867704bbc032a282f9ba083906554ec1881280472d19d77cee715f2857378b2774edfa073425d0b50057f7f0b4e64bde604f09840f5e385950a963c29681c06d29e4cfe7f2272c6c07d86f9d90ec2c6abdff385ae6a561716c36cb39658153398b495b5798dc3e0880da4672b848cfa96cc55347ab9a78f3535d079aabab9785b8c12f66403648458295b6980d75c99d411dbb649c519baaa448b5bacb3a5ca5e930088ded88d91c586ffd8ac8b470bd37969e5be95df429181655b8213cda37abd3cffbf241089a6475f162e112945da8c96d371ef721eb8f3d18be58b92fcd49de29dd681e14db147091d4c9bcf039fe36164fdb7879c585fd82ca35c9f658ea6269c6a9f14e4b3f782babd98bd4f7c0bac1522555675e4e984ba74989ea347949f67f102275e708c8d228b0e9077ef4e29889c762135d8da8f15b23e9e3391288aceeef120445f64c0ad5a96c573241007efd2cacafc3db67f614698a3ac4781853b2c0a92dd0888f9479b75c92f1088aa03e16a334715e81d886670e13948ea0592212904211da7de0af1f24105707b9ee5cabcbe36384c81e12eb0520117a767617c7c1fd639bd013e5636a3d9850ec8db505b"}, [0x8, 0x2, 0x100000000, 0x9, 0x0, 0x5, 0x5, 0x8, 0x2, 0xc, 0x8, 0x6, 0xa, 0xffff, 0x5, 0x5, 0x0, 0x40, 0x5, 0x8, 0x80000000, 0x81a, 0x400, 0x3, 0x7, 0x2, 0x9, 0x4613, 0x8, 0x5b31, 0x8, 0xa1a4, 0xe, 0x4, 0x3ff, 0x80000001, 0x22, 0x7, 0x2, 0x401, 0x0, 0x100000000000, 0x1, 0x6, 0xfffffffffffffffe, 0x100000001, 0x746, 0xf, 0x1, 0x4, 0x8, 0x3, 0xfffffffffffffff3, 0x6, 0x6, 0x7fffffffffffffff, 0x3, 0x3582, 0x1, 0x40, 0x35c2, 0x1, 0xd95, 0x7]}) r3 = creat(&(0x7f0000000ec0)='./file0\x00', 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001100)={0x24, &(0x7f0000000f00)={0x20, 0x7, 0xc8, {0xc8, 0xa, "55292e7087f727b7e5891b26564c7f150ae06452131d623428f508a431238c551dc7890d14f7e08f85bd15a0ab1362a9a4150098fe4e135fa374e180e4fe35208aee6aab0397717b5888aa7e194872d8e31c98afa8653fcc50ccd777fa3428f3ed5240068d4a8b168ea778c49467744e5edba91a6875febff0c8077138a8490efeec613e9f38811d24abab4de9d339c13633208df3929dbf7f674659215eaf9bbe93ed0c0d609c7ac4381fa6ab9c5b51003501cf4a29b9b03aca1336555c895effe4d1746f0a"}}, &(0x7f0000001000)={0x0, 0x3, 0x43, @string={0x43, 0x3, "1a4f1c550f4e72ee130d1fb2ba4b0d4a2736b305929f63b8e65ece07ca81840d00c552ed7468de2139bc219398ae4f51d6e314e54533c41095be276b54a939f50c"}}, &(0x7f0000001080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "34ab5658"}, @global=@item_4={0x3, 0x1, 0x5, "cc274593"}]}}, &(0x7f00000010c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x100}}}}, &(0x7f0000001340)={0x2c, &(0x7f0000001140)={0x0, 0xa, 0xcc, "460cff38cc64388de0f065c30def85df775f81b150a5241408f052371e7c18b69f0ae65eaecc68e37dede7c7319c048be5acb121537d58c839724c03060df1c2a53bb4bdec573b5f9e855db2806f9e49dcccd19f7143e728784ecb2f055f5423a3be74b93912a72034a01a6aec5665e52120a8e6695fd89a78f0f7e8bd109b3b04f6b512e3ed4482681e0490d82a8457d29b09ce95cddd04841d93c5772415f9cae99f3810fb4f52c80a96e545c67714026a05edd1b869b824715819c37ba93f246ceb0bb641d9f22109d9eb"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000012c0)={0x20, 0x1, 0x31, "5711eb5f1e71cce7d8ac831a109a01c50a1ea142513afe4a080f0c77dcdcb9dcd72a0c61fc6d770034c945499624a90e06"}, &(0x7f0000001300)={0x20, 0x3, 0x1, 0x9}}) recvfrom$unix(r1, &(0x7f0000001380)=""/239, 0xef, 0x10000, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000001480)={'NETMAP\x00'}, &(0x7f00000014c0)=0x1e) r4 = syz_open_procfs$userns(0x0, &(0x7f0000001500)) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) readlinkat(r3, &(0x7f0000001540)='.\x00', &(0x7f0000001580)=""/240, 0xf0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f00000016c0)={r5}, 0x1) r6 = socket$inet(0x2, 0xa, 0x8) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001700)) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001740)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000001840)=0xe8) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000001980)={&(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0x5, 0x8}) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000019c0)='ext4_fc_track_range\x00', r1, 0x0, 0x5}, 0x18) r9 = request_key(&(0x7f0000001b00)='dns_resolver\x00', &(0x7f0000001b40)={'syz', 0x0}, &(0x7f0000001b80)=']$!\x00', 0xfffffffffffffffc) add_key(&(0x7f0000001a40)='user\x00', &(0x7f0000001a80)={'syz', 0x3}, &(0x7f0000001ac0)="6e7fee4b99417c9b0be7d74640677e479e65b1102fa0bf0a5221da", 0x1b, r9) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000001bc0)=""/206, &(0x7f0000001cc0)=0xce) socket$qrtr(0x2a, 0x2, 0x0) r10 = dup(r3) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000001d00)=0xdeda) fcntl$getownex(r8, 0x10, &(0x7f0000001d40)) r11 = syz_usb_connect$cdc_ecm(0x1, 0x6a, &(0x7f0000001d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x7, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x65, 0x2, 0x2, 0x6, 0x0, 0xc0, {{0xa, 0x24, 0x6, 0x0, 0x0, "3b7a8369bd"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x1, 0x2}, [@acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x9, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x2, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xb8, 0xe, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x8, 0xeb}}}}}]}}]}}, &(0x7f00000020c0)={0xa, &(0x7f0000001e00)={0xa, 0x6, 0x310, 0x0, 0x1, 0x0, 0x10, 0x22}, 0x24, &(0x7f0000001e40)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x8000, 0xf0f, 0x3, [0xff3f00, 0x30, 0x0, 0x1feffc0]}, @ptm_cap={0x3}]}, 0x3, [{0xcc, &(0x7f0000001e80)=@string={0xcc, 0x3, "506b646d22b37f5e047920b4e94180dfe51a21e5bfe9877fcc906c11392b02b39cc9596316d4b26429ad977c0bb9e7f11f0a71499fb19e4508c0642343fc82dcc7ab02278e2363c776a98faaf1217830360f3e339e01152b86c64cbd5d8e39c972a11597686cc44b86ba4955dcb5b4fa0129832ecd109edd733ddccbc4be1f35a5f6b9bc3f08ac852f6e1985d1d5c95637546ea5903e5a960da3abd0bd118b5de4e503c38c467b583ff654a2eed1bc994ffdcf961bdd3343d062664b41b88f5df3695088384cc217c56c"}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x3409}}, {0xea, &(0x7f0000001fc0)=@string={0xea, 0x3, "132d25b8c7222a5df74165a4a8a433a13f643fd3f9bdf917b1309c1832103c9270cfd478e88506467ef7d0e1b0d7e3589d90468921cd1c75a1a707680cd6e3c89a615f6dfc1c199853ae7c747539787e44039f7d99e02b78a9e2b33693869eb2a665d6b9ed4cf68f896a89f2b8d218b9f373a213d609279bd413685eb52049824e604d90d56ad0098494243f99127cdd7b70ee0bc2e7ac311e5092a7739e0d695012ebd681b5ba827e2ad9334a49be4b3046d069231d822948bace48dc150b143bdc6983494494ec919759d9b37762438078edf61af759edcab61c483ed279bbfdb32ca909a7c4cd"}}]}) syz_usb_control_io$cdc_ecm(r11, &(0x7f0000002180)={0x14, &(0x7f0000002100)={0x0, 0x1, 0x21, {0x21, 0x5, "2bc4449a149d705d773bc9b2029e3d3135f8bd1239969d93a8ae88690ef43e"}}, &(0x7f0000002140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002280)={0x1c, &(0x7f00000021c0)={0x0, 0x15, 0x32, "c5a12c28b005371febbbb844c2d73b7e5a19ab80300315a7d7e77663dfaedded3728dd34b707897a30674891b570ba9ddaf4"}, &(0x7f0000002200)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0x4}}) openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x14001, 0x0) close(r10) 1.315235989s ago: executing program 9 (id=7441): syz_open_dev$video4linux(&(0x7f0000000280), 0x2, 0x101000) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 1.258012108s ago: executing program 2 (id=7442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540004000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x0) 1.187893279s ago: executing program 2 (id=7443): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0xe34, @local, 0x9}}, 0x24) (async) read$FUSE(r3, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETLOCK(r4, &(0x7f00000036c0)=ANY=[@ANYBLOB="ff1eecf2ea50c905c3325d141fc0cb0ac61dc0e4f74e31f6646f2ff05e94e8167a20491001b793cd7bb817cd636106b25c0febde79b38cc0fc6e21ae17c0122d6a7bb589bcd8bdca83a7e7905e7fbb85f24659a32555d2eb3d7153fe00fb7383e4743a07d70b10f0ff5da190388f088339e57b78db0a6456fd24df5bec8db4808e8347cf3374e57398a90d801a158824c6972fb155716de3ec83be52dc731edd41950753096ff7bcdb6e9eaa26496a4868b29f79e0aadad6454f4b45cf652e792547563b365fb2e9268ee44864b34818ce972bf0aff840eef4ebe49013efaddca52cbd7bbe3c882ee2e69440d567f8bc879809", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES16=r6, @ANYRES64, @ANYRES16=r7], 0x200002e6) (async) fcntl$setpipe(r4, 0x407, 0x100000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r9) (async) r10 = socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) sendto$l2tp6(r10, 0x0, 0xf5, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000180)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async) sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) recvfrom$l2tp6(r4, &(0x7f00000026c0)=""/4096, 0x1000, 0x10040, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, 0x0, 0x0) 1.007095106s ago: executing program 2 (id=7444): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) r2 = syz_io_uring_setup(0x4e7d, &(0x7f0000000240)={0x0, 0x82cd, 0x4000, 0x3, 0xab}, &(0x7f0000000340), &(0x7f0000000380)) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de, 0x0, r2}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x21, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x7}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) timer_create(0x0, 0x0, &(0x7f0000044000)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="370000005cd304406e8c68fd1b3852e0e270b8f3112e2fbb5c036454bf08023054c5053eba58d6b406054f224f0779694c5df31478a3bbb31edafdffffffc0a7e103b8df6d9f37d4283a049f061f9b46f9942bd072809024e72018d86bbd18553414e14256bb628d8ef3b25e2c81f2a687d5e83d", @ANYRES16=r9, @ANYBLOB="000100000000000000002b00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000100000012000000040046000a003400010101010101000004005180"], 0x3c}}, 0x40080) 1.004003353s ago: executing program 8 (id=7445): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000020000040"]) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r5, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a1400824fe00000080a01080000000000000000010000001400000011f0100000000000100000000002000a"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x109000, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f00000002c0), 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) syz_io_uring_setup(0x4da, &(0x7f0000000180)={0x0, 0x37d1, 0x20, 0x0, 0x2c3}, &(0x7f0000000000), &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xea0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe74, 0x2, [@TCA_FW_ACT={0xe70, 0x4, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x7, 0x7, 0x10, 0x7}, 0x1, 0x1}, [{0x8, 0x9, 0x1, 0x6, 0x7, 0x588f}, {0x80000000, 0x3, 0x6, 0x2b, 0x1ff, 0x4}, {0x8a1, 0x2, 0x1, 0x7d2f, 0x4, 0x80}, {0xffffffff, 0x6, 0x8000, 0x18, 0x1, 0xc70}, {0xfffffff4, 0x0, 0x0, 0x7, 0xfffffff8, 0x1}, {0xa, 0x1, 0x264, 0xd437, 0x4, 0x6}, {0x2, 0x6, 0x40, 0x5, 0x0, 0x5}, {0xffffffff, 0xfffffffe, 0x7, 0x3, 0x5, 0x7fff}, {0x3, 0xffffff69, 0x2, 0x5d62, 0x7fffffff, 0x5}, {0x5, 0x71, 0xf31, 0x6, 0x6, 0x40000000}, {0x9, 0xfffffffa, 0x1, 0x8, 0x9, 0x1}, {0x10000, 0xb, 0x9, 0xfff, 0x4, 0x5}, {0xd5c6, 0xfffffee4, 0x2, 0x2b60, 0x7fff, 0xfffffffa}, {0x2, 0x2, 0x8, 0x1000, 0x1, 0x3}, {0x5, 0x7, 0x7a8, 0x1979, 0x6, 0x101}, {0x10000, 0x3, 0x3, 0x410a, 0xfffffff4, 0x6}, {0x0, 0x7, 0xffff, 0x9, 0x3, 0x4}, {0x10, 0x7, 0x401, 0x792f, 0x4b1, 0xffff}, {0x6, 0x80000001, 0x3ff, 0x22, 0x4, 0x9}, {0x101, 0x9, 0xf, 0x30, 0x1, 0xc822}, {0x5, 0x4, 0x4, 0x8, 0xfffffffd, 0x7}, {0x78, 0x7, 0x1, 0x800, 0x10, 0x401}, {0xffffffff, 0x10000, 0x6, 0x5fa, 0x7f, 0x800}, {0x100, 0x9, 0x4, 0x7f, 0xc, 0xffffffff}, {0x2d, 0x5, 0x2, 0x3, 0xb4aa, 0xfffffff0}, {0x45, 0x1, 0xdc, 0xa07, 0xfffffffb, 0x4}, {0x4, 0x2, 0x10001, 0x80000000, 0x4, 0xb226}, {0xfffffbff, 0x882, 0x5, 0x8, 0x3, 0x5}, {0x9, 0x6, 0x5, 0x4, 0x3, 0xf6}, {0x2, 0x40, 0x9, 0x4, 0xc, 0x7}, {0x0, 0x9, 0x400, 0x200, 0x6, 0xe}, {0x90dc, 0x7f, 0x9, 0x7, 0x40, 0x10001}, {0x8000, 0x9, 0xfff, 0x3, 0x1, 0x6}, {0x4, 0x208, 0x7, 0x28, 0xcf39, 0x6}, {0x8e, 0x6, 0x4, 0x4, 0xfffffff7, 0x100}, {0xbd, 0x9, 0x6, 0x5, 0x5, 0x3ff}, {0x4, 0x8, 0x7, 0x6, 0x2, 0x5}, {0x1, 0x842, 0xd9a, 0xfff, 0x3}, {0x844c, 0x8, 0x10001, 0x10001, 0x0, 0x4}, {0x2, 0x7fffffff, 0x6, 0x9, 0x7, 0xfd}, {0x7, 0xfffffffe, 0x489e80, 0x9, 0x7, 0x5}, {0xd, 0xc25, 0x21babe1d, 0xff, 0x7, 0x8}, {0xffffffff, 0x6, 0x9, 0x7, 0x1, 0x1000}, {0x7fff, 0x100, 0x279, 0x7fff, 0x8, 0x2}, {0x8001, 0x0, 0x6, 0x1ff, 0x7, 0xffffffff}, {0x5, 0x7, 0x67, 0xfffffffd, 0x7f6bb849, 0x1000}, {0x5, 0x7, 0xfff, 0x1, 0x0, 0xfffffffe}, {0x5, 0x7, 0x1, 0x1, 0x8000, 0xb72}, {0x62a0, 0xf, 0x14c00, 0xfffff3d2, 0x8f, 0x1}, {0x7ffffffd, 0x0, 0x5, 0x7fff, 0x2, 0x492}, {0x3, 0x6, 0x81, 0x4, 0x8, 0x2}, {0x0, 0x80000000, 0x2, 0x7, 0x6, 0x3}, {0xd2bd, 0x89, 0x9, 0x33, 0xb7, 0x8}, {0x2, 0x0, 0xfd, 0x7, 0x8, 0xb}, {0x2, 0x80000001, 0x40, 0x80, 0x3ff, 0xe6d5}, {0x6, 0x3, 0xfffffffb, 0x3, 0x8, 0x5}, {0x5, 0x2, 0x1, 0x93, 0x5, 0x4}, {0x1000, 0xa8d, 0x4, 0x251, 0x10, 0xfffffff7}, {0xa4000000, 0x0, 0x5, 0x10001, 0x0, 0xbb}, {0x5, 0x2, 0xffff, 0xb, 0x8, 0x8}, {0xfff, 0x3, 0x1, 0x2, 0x200, 0x538}, {0x8, 0x6, 0xf, 0x6, 0xb0, 0xba}, {0x7fffffff, 0x4, 0x9, 0x3, 0x9, 0xcdfb}, {0x1, 0xa91, 0xd571, 0x2, 0x81967b8, 0x1}, {0x6, 0xf3fd, 0x1c9, 0x7, 0x7, 0x5}, {0x7, 0x3, 0x5, 0x5, 0x7, 0x5d}, {0x6, 0x2, 0x2fc, 0xfd1, 0x3, 0x8}, {0x1, 0x4, 0x3, 0x1, 0x20000}, {0x2, 0xffff, 0x800, 0x3, 0x5, 0xe}, {0x6d41, 0xe1, 0xc64, 0x7ff, 0x7f, 0x7}, {0xb3a5, 0x4, 0xf, 0x7, 0x5, 0x5}, {0x8, 0xd, 0x16ed, 0x200, 0x986, 0x5}, {0x1, 0x3ff, 0x0, 0x5, 0x2, 0x2}, {0x8, 0x7, 0x5e70, 0x7, 0x8, 0xb39d}, {0x9, 0x1, 0x6, 0x5, 0xce, 0xa}, {0x0, 0x2, 0xfffffffd, 0x8, 0x3}, {0xeb, 0x9, 0x9, 0x3, 0x4, 0x400}, {0x8, 0x3, 0x3, 0x3, 0xf, 0x2}, {0xff, 0x5, 0xd62, 0x4, 0x7, 0x3ff}, {0x7, 0x5, 0x6, 0xd6b, 0x2, 0x2}, {0x9, 0x1, 0xe8e, 0x80000001, 0x7, 0x6}, {0x3, 0x53, 0x7, 0x2f, 0x8, 0x200}, {0x7, 0x7, 0x2, 0x4, 0x10000, 0x2}, {0x6, 0xcea, 0x10000, 0xa8b, 0x1, 0x1eea}, {0x80000000, 0x0, 0x3, 0x6, 0x0, 0xd}, {0x1, 0x1, 0x7, 0x1000, 0x1, 0x2}, {0x7f, 0xf57, 0x3, 0x0, 0x3e8, 0xb}, {0x6, 0xa6, 0x3, 0x6, 0x9, 0x10000}, {0x10000, 0x8, 0x2f1f, 0xae92, 0x5, 0x2}, {0x0, 0x8000, 0xb, 0xe8f, 0x1a0ec1ae, 0x7}, {0x2, 0x6, 0x8, 0xc, 0x4, 0x7}, {0x40, 0x8, 0x3, 0x41c, 0x4, 0x20000000}, {0xe9c4, 0x8, 0x7, 0x3, 0x6, 0x7}, {0xfffffbff, 0x2cc9, 0x1, 0x9, 0x8, 0x100}, {0x9, 0x334, 0xfffffffa, 0x8, 0x8, 0x7f}, {0xbb, 0x7, 0x7, 0x80, 0x9, 0x10}, {0x7f, 0x86a1bb7, 0x9, 0x3, 0x7fffffff, 0xd}, {0xfe, 0x9, 0xffff, 0x4000, 0x0, 0x9}, {0x9, 0x1, 0x30, 0xd52, 0xfffffffe, 0xffffff01}, {0x8, 0xff52, 0x8, 0x3, 0x5, 0x2e8}, {0x5, 0x7, 0x2000, 0x1, 0xffff, 0x4}, {0x4, 0x7, 0x8000, 0xc, 0x6, 0x8}, {0x6, 0xd2, 0x8, 0x7}, {0x1, 0xfb, 0x800, 0x0, 0x7, 0x9}, {0x4, 0x20003, 0x42f, 0x0, 0x2, 0xa}, {0xc5f, 0x39, 0xfd1, 0xfe, 0x4, 0x200}, {0x2, 0x0, 0x8768, 0x1, 0x0, 0xff}, {0x9, 0x40, 0xe15b, 0x2, 0x8, 0x1}, {0x4, 0x5, 0x8001, 0x8, 0x6, 0x7}, {0x80000000, 0x6, 0x5, 0xa11}, {0xff, 0x3, 0x2, 0x2, 0x6, 0x2}, {0x4, 0x100, 0x401, 0x7, 0xfff, 0x790a8e3d}, {0x6, 0xfffffffd, 0x3, 0x3, 0x7, 0x4}, {0x3, 0x8, 0x7, 0x9, 0x3, 0x6}, {0x7, 0x800, 0x101, 0x8, 0x1ff, 0xffffff0a}, {0x3, 0x1, 0x9, 0x8, 0x2, 0x1000}, {0x80000001, 0x99, 0x3, 0xa, 0x7, 0x80}, {0x7, 0xa7, 0xe16, 0xff8, 0x3, 0x6e}, {0x5, 0x8, 0x60f, 0x100, 0x2, 0x5}, {0x8, 0x0, 0x21d6d725, 0x684, 0x80000001, 0x3}, {0xd8, 0x3, 0x0, 0x3, 0x8}, {0x2, 0xb, 0xfffffffc, 0x0, 0x7, 0xff}, {0xb, 0xaf6, 0x2, 0x3, 0xa, 0x100}, {0x14, 0x3fc, 0xcc8, 0x401, 0x2, 0x9}, {0x0, 0x8, 0x3, 0x7fffffff, 0x2, 0x33}, {0x4dd0, 0xe349, 0x9574, 0x5, 0xc, 0x6}, {0x50df, 0x8001, 0xd695, 0x9, 0x10, 0x3}, {0x4, 0x1, 0x4, 0x8, 0x100, 0x7fff}], [{0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x5}, {0x2}, {0x3}, {0x5}, {0x5}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3}, {0x4}, {0x7}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x4, 0x62a58412439a0a79}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x26985000610e45b6, 0x1}, {0x1}, {0x6, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x7}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x5}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xea0}, 0x1, 0x0, 0x0, 0x81}, 0x800) fchdir(0xffffffffffffffff) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) 0s ago: executing program 2 (id=7446): r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x54, 0x0, 0x0, 0x90000000000000, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7ff}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cdccfe728e6e04f716066eee8c6db22cbe49b46dc8d7ad49"}]]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x200008f0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) kernel console output (not intermixed with test programs): or=091e, idProduct=0003, bcdDevice=d7.3b [ 1601.176414][T25133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.185112][T25133] usb 9-1: Product: syz [ 1601.189637][T25133] usb 9-1: Manufacturer: syz [ 1601.194870][T25133] usb 9-1: SerialNumber: syz [ 1601.209459][T25133] usb 9-1: config 0 descriptor?? [ 1602.393190][T29328] netlink: 'syz.2.6770': attribute type 32 has an invalid length. [ 1602.401611][T29328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6770'. [ 1602.461624][T29330] netlink: 'syz.4.6771': attribute type 32 has an invalid length. [ 1603.044146][T13944] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1603.090897][T25136] usb 10-1: USB disconnect, device number 18 [ 1603.181113][T13944] usb 5-1: device descriptor read/64, error -71 [ 1603.297576][T29353] xt_hashlimit: max too large, truncated to 1048576 [ 1603.892854][ T5887] usb 9-1: USB disconnect, device number 25 [ 1603.910206][T13944] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1604.275165][T13944] usb 5-1: device descriptor read/64, error -71 [ 1604.410531][T13944] usb usb5-port1: attempt power cycle [ 1604.598006][T29372] netlink: 'syz.7.6788': attribute type 32 has an invalid length. [ 1604.621289][ T5887] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1604.800369][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 1604.819252][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1604.831851][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1604.841757][T13944] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1604.852914][ T5887] usb 9-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1604.863412][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.872205][T13944] usb 5-1: device descriptor read/8, error -71 [ 1604.883661][ T5887] usb 9-1: config 0 descriptor?? [ 1604.955453][T29380] pim6reg1: entered promiscuous mode [ 1604.970334][T29380] pim6reg1: entered allmulticast mode [ 1605.140330][T13944] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1605.220299][T13944] usb 5-1: device descriptor read/8, error -71 [ 1605.329495][ T5887] usbhid 9-1:0.0: can't add hid device: -71 [ 1605.344173][ T5887] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1605.370572][T13944] usb usb5-port1: unable to enumerate USB device [ 1605.386447][ T5887] usb 9-1: USB disconnect, device number 26 [ 1605.525096][T29388] xt_hashlimit: max too large, truncated to 1048576 [ 1606.131053][T29404] Invalid logical block size (3328) [ 1606.175246][T29405] netlink: 'syz.8.6799': attribute type 1 has an invalid length. [ 1606.254936][T29405] bond5: entered promiscuous mode [ 1606.263377][T29405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1606.357411][T29409] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1606.367356][T29409] bond5: (slave bond6): making interface the new active one [ 1606.427620][T29409] bond6: entered promiscuous mode [ 1606.437289][T29409] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1606.802373][T29418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6804'. [ 1607.470217][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.476684][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.701478][T29430] FAULT_INJECTION: forcing a failure. [ 1607.701478][T29430] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.760253][T29430] CPU: 1 UID: 0 PID: 29430 Comm: syz.2.6807 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 1607.760278][T29430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1607.760289][T29430] Call Trace: [ 1607.760295][T29430] [ 1607.760303][T29430] dump_stack_lvl+0x189/0x250 [ 1607.760333][T29430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1607.760356][T29430] ? __pfx__printk+0x10/0x10 [ 1607.760376][T29430] ? __pfx___might_resched+0x10/0x10 [ 1607.760399][T29430] should_fail_ex+0x414/0x560 [ 1607.760422][T29430] should_failslab+0xa8/0x100 [ 1607.760442][T29430] __kmalloc_noprof+0xcb/0x4f0 [ 1607.760458][T29430] ? mpi_alloc+0x77/0x140 [ 1607.760480][T29430] mpi_alloc+0x77/0x140 [ 1607.760500][T29430] mpi_read_raw_data+0x139/0x970 [ 1607.760525][T29430] dh_set_secret+0x1f3/0x310 [ 1607.760544][T29430] ? crypto_create_tfm_node+0x83/0x3f0 [ 1607.760562][T29430] ? __pfx_dh_set_secret+0x10/0x10 [ 1607.760585][T29430] ? crypto_alloc_tfm_node+0x3c1/0x3f0 [ 1607.760606][T29430] __keyctl_dh_compute+0x507/0xca0 [ 1607.760631][T29430] ? __might_fault+0xb0/0x130 [ 1607.760650][T29430] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1607.760678][T29430] ? __lock_acquire+0xab9/0xd20 [ 1607.760715][T29430] keyctl_dh_compute+0x109/0x160 [ 1607.760736][T29430] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1607.760766][T29430] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1607.760788][T29430] ? vfs_write+0x8d8/0xa90 [ 1607.760814][T29430] __se_sys_keyctl+0x423/0x910 [ 1607.760833][T29430] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1607.760853][T29430] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1607.760876][T29430] ? __fget_files+0x3a0/0x420 [ 1607.760899][T29430] ? fput+0xa0/0xd0 [ 1607.760920][T29430] ? ksys_write+0x22a/0x250 [ 1607.760934][T29430] ? rcu_is_watching+0x15/0xb0 [ 1607.760959][T29430] ? do_syscall_64+0xba/0x220 [ 1607.760977][T29430] ? __x64_sys_keyctl+0x20/0xc0 [ 1607.760995][T29430] do_syscall_64+0xf6/0x220 [ 1607.761015][T29430] ? clear_bhb_loop+0x60/0xb0 [ 1607.761034][T29430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.761049][T29430] RIP: 0033:0x7f803ed8e969 [ 1607.761063][T29430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1607.761078][T29430] RSP: 002b:00007f803fc80038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1607.761094][T29430] RAX: ffffffffffffffda RBX: 00007f803efb5fa0 RCX: 00007f803ed8e969 [ 1607.761106][T29430] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000017 [ 1607.761116][T29430] RBP: 00007f803fc80090 R08: 0000000000000000 R09: 0000000000000000 [ 1607.761126][T29430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1607.761135][T29430] R13: 0000000000000000 R14: 00007f803efb5fa0 R15: 00007f803f0dfa28 [ 1607.761158][T29430] [ 1608.491162][T25136] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1608.670322][ T5889] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1608.700653][T25136] usb 5-1: Using ep0 maxpacket: 16 [ 1608.711279][T25136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.727066][T25136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.738429][T25136] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1608.752863][T25136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.767245][T25136] usb 5-1: config 0 descriptor?? [ 1608.840166][ T5889] usb 10-1: Using ep0 maxpacket: 32 [ 1608.847634][ T5889] usb 10-1: config 0 has an invalid interface number: 218 but max is 0 [ 1608.856222][ T5889] usb 10-1: config 0 has no interface number 0 [ 1608.868717][ T5889] usb 10-1: New USB device found, idVendor=05ac, idProduct=35f9, bcdDevice=6d.89 [ 1608.951932][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.017380][ T5889] usb 10-1: Product: syz [ 1609.023961][ T5889] usb 10-1: Manufacturer: syz [ 1609.034303][ T5889] usb 10-1: SerialNumber: syz [ 1609.050852][ T5889] usb 10-1: config 0 descriptor?? [ 1609.061731][ T5889] ipheth 10-1:0.218: Unable to find alternate settings interface [ 1609.239971][T25136] usbhid 5-1:0.0: can't add hid device: -71 [ 1609.246126][T25136] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1609.264661][ T5889] usb 10-1: USB disconnect, device number 19 [ 1609.355174][T25136] usb 5-1: USB disconnect, device number 104 [ 1610.221872][T29485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1610.620233][T22225] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1610.646942][T29495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6827'. [ 1610.674949][T29495] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6827'. [ 1610.810504][T22225] usb 3-1: Using ep0 maxpacket: 32 [ 1610.823968][T22225] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 1610.847134][T22225] usb 3-1: config 0 has no interface number 0 [ 1610.880229][T22225] usb 3-1: config 0 interface 53 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 1610.913078][T22225] usb 3-1: config 0 interface 53 has no altsetting 0 [ 1610.945915][T22225] usb 3-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice=dd.2e [ 1610.960254][T22225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.998869][T22225] usb 3-1: Product: syz [ 1611.007229][T22225] usb 3-1: Manufacturer: syz [ 1611.023433][T22225] usb 3-1: SerialNumber: syz [ 1611.037925][T22225] usb 3-1: config 0 descriptor?? [ 1611.045617][T29492] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1611.073110][T22225] iowarrior 3-1:0.53: no interrupt-in endpoint found [ 1611.330320][T29492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.381597][T29492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.409175][T25136] usb 3-1: USB disconnect, device number 39 [ 1611.863843][T29524] Invalid logical block size (16896) [ 1611.949820][T29526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6841'. [ 1611.991825][T29526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6841'. [ 1612.169931][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1612.169953][ T30] audit: type=1326 audit(1748360834.239:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29535 comm="syz.4.6846" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fa258e969 code=0x0 [ 1612.373654][T29534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6845'. [ 1612.490851][T13944] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1612.571962][T22225] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1612.640572][T13944] usb 5-1: device descriptor read/64, error -71 [ 1612.730116][T22225] usb 9-1: Using ep0 maxpacket: 16 [ 1612.743217][T22225] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1612.751431][T25136] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1612.765394][T22225] usb 9-1: config 0 has no interface number 0 [ 1612.772177][T22225] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.789098][T22225] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1612.803089][T22225] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1612.816999][T22225] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.825249][T29565] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (130) [ 1612.845561][T22225] usb 9-1: config 0 descriptor?? [ 1612.900319][T25136] usb 10-1: Using ep0 maxpacket: 8 [ 1612.900694][T13944] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1612.916574][T25136] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1612.936515][T25136] usb 10-1: config 248 has an invalid interface number: 51 but max is 0 [ 1612.955446][T25136] usb 10-1: config 248 has no interface number 0 [ 1612.966541][T25136] usb 10-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0 [ 1612.976104][T25136] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.984779][T25136] usb 10-1: Product: syz [ 1612.989301][T25136] usb 10-1: Manufacturer: syz [ 1612.994603][T25136] usb 10-1: SerialNumber: syz [ 1613.050367][T13944] usb 5-1: device descriptor read/64, error -71 [ 1613.173229][T13944] usb usb5-port1: attempt power cycle [ 1613.222938][T25136] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:248.51/input/input140 [ 1613.249656][ T5184] bcm5974 10-1:248.51: could not read from device [ 1613.285145][T25136] usb 10-1: USB disconnect, device number 20 [ 1613.297598][ T5184] bcm5974 10-1:248.51: could not read from device [ 1613.355698][T29575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6862'. [ 1613.372893][T29575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6862'. [ 1613.463812][T22225] uclogic 0003:28BD:0071.003D: pen parameters not found [ 1613.473035][T22225] uclogic 0003:28BD:0071.003D: interface is invalid, ignoring [ 1613.540155][T13944] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1613.571854][T13944] usb 5-1: device descriptor read/8, error -71 [ 1613.707467][T29581] kvm: pic: non byte write [ 1613.714382][T29581] kvm: pic: non byte write [ 1613.811808][T13944] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1613.850172][ T5889] usb 9-1: USB disconnect, device number 27 [ 1613.851743][T13944] usb 5-1: device descriptor read/8, error -71 [ 1613.899994][T29589] loop2: detected capacity change from 0 to 7 [ 1613.917886][T29589] Dev loop2: unable to read RDB block 7 [ 1613.929171][T29589] loop2: unable to read partition table [ 1613.946190][T29589] loop2: partition table beyond EOD, truncated [ 1613.974714][T29589] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1613.990565][T13944] usb usb5-port1: unable to enumerate USB device [ 1614.103685][T29596] netlink: 'syz.9.6869': attribute type 32 has an invalid length. [ 1614.120201][T29596] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6869'. [ 1615.799319][T29619] FAULT_INJECTION: forcing a failure. [ 1615.799319][T29619] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.880343][T29619] CPU: 1 UID: 0 PID: 29619 Comm: syz.8.6875 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 1615.880376][T29619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1615.880387][T29619] Call Trace: [ 1615.880394][T29619] [ 1615.880401][T29619] dump_stack_lvl+0x189/0x250 [ 1615.880431][T29619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1615.880455][T29619] ? __pfx__printk+0x10/0x10 [ 1615.880474][T29619] ? __pfx___might_resched+0x10/0x10 [ 1615.880498][T29619] ? fs_reclaim_acquire+0x7d/0x100 [ 1615.880523][T29619] should_fail_ex+0x414/0x560 [ 1615.880546][T29619] should_failslab+0xa8/0x100 [ 1615.880566][T29619] __kmalloc_noprof+0xcb/0x4f0 [ 1615.880581][T29619] ? kfree+0x4d/0x440 [ 1615.880594][T29619] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1615.880620][T29619] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1615.880643][T29619] ? tomoyo_domain+0xda/0x130 [ 1615.880669][T29619] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1615.880687][T29619] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1615.880707][T29619] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1615.880753][T29619] ? __fget_files+0x2a/0x420 [ 1615.880775][T29619] ? __fget_files+0x3a0/0x420 [ 1615.880793][T29619] ? __fget_files+0x2a/0x420 [ 1615.880814][T29619] security_file_ioctl+0xcb/0x2d0 [ 1615.880832][T29619] __se_sys_ioctl+0x47/0x170 [ 1615.880858][T29619] do_syscall_64+0xf6/0x220 [ 1615.880878][T29619] ? clear_bhb_loop+0x60/0xb0 [ 1615.880900][T29619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.880915][T29619] RIP: 0033:0x7f6905d8e969 [ 1615.880929][T29619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1615.880942][T29619] RSP: 002b:00007f6906c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1615.880958][T29619] RAX: ffffffffffffffda RBX: 00007f6905fb5fa0 RCX: 00007f6905d8e969 [ 1615.880970][T29619] RDX: 0000200000000140 RSI: 0000000000008953 RDI: 0000000000000003 [ 1615.880980][T29619] RBP: 00007f6906c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1615.880990][T29619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1615.880999][T29619] R13: 0000000000000000 R14: 00007f6905fb5fa0 R15: 00007f69060dfa28 [ 1615.881022][T29619] [ 1615.881054][T29619] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1616.397704][T29631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6878'. [ 1616.431148][T29631] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6878'. [ 1617.145903][T29644] netlink: 'syz.2.6884': attribute type 1 has an invalid length. [ 1617.420377][T29656] netlink: 'syz.4.6888': attribute type 13 has an invalid length. [ 1617.503899][T29656] gretap0: refused to change device tx_queue_len [ 1617.528994][T29656] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1617.573671][T29665] Invalid logical block size (33023) [ 1617.850589][ T980] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1617.955656][T29670] xt_hashlimit: max too large, truncated to 1048576 [ 1618.030167][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 1618.107799][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1618.133068][ T980] usb 3-1: config 8 has an invalid interface number: 24 but max is 1 [ 1618.200124][ T980] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.264714][ T980] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 1618.349666][ T980] usb 3-1: config 8 has no interface number 0 [ 1618.371991][ T980] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1618.446801][ T980] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1618.555293][ T980] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1618.580464][T22225] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1618.598071][ T980] usb 3-1: config 8 interface 24 has no altsetting 0 [ 1618.614298][T29681] QAT: Invalid ioctl 37896 [ 1618.626653][ T980] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1618.637779][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.656074][ T980] usb 3-1: Product: syz [ 1618.662808][ T980] usb 3-1: Manufacturer: syz [ 1618.667570][ T980] usb 3-1: SerialNumber: syz [ 1618.675822][T29681] QAT: Invalid ioctl 62727 [ 1618.751587][T22225] usb 9-1: Using ep0 maxpacket: 32 [ 1618.774342][T22225] usb 9-1: config 115 has too many interfaces: 122, using maximum allowed: 32 [ 1618.832483][T22225] usb 9-1: config 115 has an invalid descriptor of length 35, skipping remainder of the config [ 1618.892778][T22225] usb 9-1: config 115 has 0 interfaces, different from the descriptor's value: 122 [ 1619.021942][T22225] usb 9-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1619.039541][T22225] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.040415][ T5889] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1619.048341][T22225] usb 9-1: Product: syz [ 1619.048364][T22225] usb 9-1: Manufacturer: syz [ 1619.048381][T22225] usb 9-1: SerialNumber: syz [ 1619.261267][T29664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.274737][T29664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.365036][ T5889] usb 10-1: device descriptor read/64, error -71 [ 1619.611026][ T5889] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1619.780335][ T5889] usb 10-1: device descriptor read/64, error -71 [ 1619.910831][ T5889] usb usb10-port1: attempt power cycle [ 1620.039702][T29705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6906'. [ 1620.157660][T29705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1620.186023][T29705] bridge0: port 3(bond4) entered blocking state [ 1620.200502][T29705] bridge0: port 3(bond4) entered disabled state [ 1620.224012][T29705] bond4: entered allmulticast mode [ 1620.265860][ T5889] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1620.302467][T29705] bond4: entered promiscuous mode [ 1620.315617][ T5889] usb 10-1: device descriptor read/8, error -71 [ 1620.341490][T29705] bridge0: port 3(bond4) entered blocking state [ 1620.349739][T29705] bridge0: port 3(bond4) entered forwarding state [ 1620.395864][ T996] bridge0: port 3(bond4) entered disabled state [ 1620.590408][ T5889] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1620.619560][ T5889] usb 10-1: device descriptor read/8, error -71 [ 1620.663849][ T980] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 1620.685318][ T980] vmk80xx 3-1:8.24: probe with driver vmk80xx failed with error -22 [ 1620.711327][ T980] usb 3-1: USB disconnect, device number 40 [ 1620.772006][ T5889] usb usb10-port1: unable to enumerate USB device [ 1620.896735][T29716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6909'. [ 1620.906575][T29716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6909'. [ 1621.088985][T22225] usb 9-1: USB disconnect, device number 28 [ 1621.199724][T29724] fuse: Unknown parameter '' [ 1621.206336][ T30] audit: type=1326 audit(1748360843.289:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.241150][T29724] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6913'. [ 1621.256599][ T30] audit: type=1326 audit(1748360843.319:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.310465][ T30] audit: type=1326 audit(1748360843.319:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.350354][ T30] audit: type=1326 audit(1748360843.319:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.392954][ T30] audit: type=1326 audit(1748360843.319:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.418318][ T30] audit: type=1326 audit(1748360843.319:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.450184][ T5889] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1621.469627][ T30] audit: type=1326 audit(1748360843.319:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.493262][ T30] audit: type=1326 audit(1748360843.319:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.516690][ T30] audit: type=1326 audit(1748360843.319:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.541459][ T30] audit: type=1326 audit(1748360843.319:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29723 comm="syz.8.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6905d8e969 code=0x7ffc0000 [ 1621.620157][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 1621.628258][ T5889] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1621.651183][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.662630][ T5889] usb 3-1: config 0 descriptor?? [ 1621.880567][ T5889] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1621.901973][ T5889] asix 3-1:0.0: probe with driver asix failed with error -32 [ 1622.289827][T29746] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.6924'. [ 1622.330158][ T5889] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1622.419253][T22225] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1622.509083][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.539620][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.558207][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1622.601447][ T5889] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1622.612150][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.620539][T22225] usb 10-1: Using ep0 maxpacket: 16 [ 1622.630317][T22225] usb 10-1: config 0 has an invalid interface number: 253 but max is 0 [ 1622.641924][T22225] usb 10-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1622.644010][ T5889] usb 5-1: config 0 descriptor?? [ 1622.695104][T22225] usb 10-1: config 0 has no interface number 0 [ 1622.704189][T22225] usb 10-1: config 0 interface 253 has no altsetting 0 [ 1622.727851][T22225] usb 10-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1622.747858][T22225] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.764004][T22225] usb 10-1: Product: syz [ 1622.770693][T22225] usb 10-1: Manufacturer: syz [ 1622.775227][T29772] netlink: 161716 bytes leftover after parsing attributes in process `syz.8.6932'. [ 1622.775683][T22225] usb 10-1: SerialNumber: syz [ 1622.788296][T29773] netlink: 161716 bytes leftover after parsing attributes in process `syz.8.6932'. [ 1622.805242][T22225] usb 10-1: config 0 descriptor?? [ 1622.874078][T29772] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6932'. [ 1623.001075][ T980] usb 3-1: USB disconnect, device number 41 [ 1623.122357][ T5889] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 1623.172355][T22225] usbhid 10-1:0.253: couldn't find an input interrupt endpoint [ 1623.218803][ T5889] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1623.225841][T22225] usb 10-1: USB disconnect, device number 25 [ 1623.249571][T29777] netlink: 'syz.2.6933': attribute type 13 has an invalid length. [ 1623.328732][T29777] gretap0: refused to change device tx_queue_len [ 1623.356751][T29777] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1623.630896][ T980] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1623.790090][ T980] usb 9-1: Using ep0 maxpacket: 16 [ 1623.809209][ T980] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1623.828654][ T980] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.860589][T25136] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1623.870677][ T980] usb 9-1: Product: syz [ 1623.882627][ T980] usb 9-1: Manufacturer: syz [ 1623.893529][ T980] usb 9-1: SerialNumber: syz [ 1623.916299][ T980] usb 9-1: config 0 descriptor?? [ 1624.032953][T25136] usb 3-1: Using ep0 maxpacket: 16 [ 1624.055051][T25136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.077151][T25136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.097373][T25136] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1624.116008][T25136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.143494][T25136] usb 3-1: config 0 descriptor?? [ 1624.164517][ T980] usb 9-1: USB disconnect, device number 29 [ 1624.240265][T22225] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1624.430234][T22225] usb 10-1: Using ep0 maxpacket: 16 [ 1624.447798][T22225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.470378][T22225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.487603][T22225] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1624.497774][T22225] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.518214][T22225] usb 10-1: config 0 descriptor?? [ 1624.563322][T25136] gt683r_led 0003:1770:FF00.003F: ignoring exceeding usage max [ 1624.599981][T25136] gt683r_led 0003:1770:FF00.003F: hidraw1: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 1624.746504][T29795] dummy0: entered promiscuous mode [ 1624.753991][T29795] vlan3: entered promiscuous mode [ 1624.807664][ T24] usb 3-1: USB disconnect, device number 42 [ 1624.822726][T22225] usbhid 10-1:0.0: can't add hid device: -71 [ 1624.849337][T13944] gt683r_led 0003:1770:FF00.003F: failed to send set report request: -19 [ 1624.872798][T22225] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1624.894453][T29800] fido_id[29800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1624.914536][T22225] usb 10-1: USB disconnect, device number 26 [ 1624.978304][T29803] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6942'. [ 1625.254519][T29807] Invalid logical block size (55998) [ 1625.566623][T29812] vlan4: entered promiscuous mode [ 1625.820185][T25138] usb 5-1: reset high-speed USB device number 109 using dummy_hcd [ 1625.828802][T25138] usb 5-1: device reset changed ep0 maxpacket size! [ 1625.838120][ T980] usb 5-1: USB disconnect, device number 109 [ 1625.920801][T25136] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1625.990491][ T980] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1626.060176][T25136] usb 3-1: device descriptor read/64, error -71 [ 1626.140248][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 1626.165894][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.177685][ T980] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1626.193996][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.206375][ T980] usb 5-1: config 0 descriptor?? [ 1626.311290][T25136] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1626.362985][T29834] loop6: detected capacity change from 0 to 7 [ 1626.372057][T20799] Dev loop6: unable to read RDB block 7 [ 1626.377777][T20799] loop6: unable to read partition table [ 1626.388032][T20799] loop6: partition table beyond EOD, truncated [ 1626.398148][T29834] Dev loop6: unable to read RDB block 7 [ 1626.405138][T29834] loop6: unable to read partition table [ 1626.411596][T29834] loop6: partition table beyond EOD, truncated [ 1626.424860][T29813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.433294][T29834] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1626.451629][T25136] usb 3-1: device descriptor read/64, error -71 [ 1626.463276][T29813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.590759][T25136] usb usb3-port1: attempt power cycle [ 1626.633613][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1626.633632][ T30] audit: type=1326 audit(1748360848.719:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1626.692297][ T30] audit: type=1326 audit(1748360848.759:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1626.714736][ T980] mcp2221 0003:04D8:00DD.0040: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1626.726029][ T30] audit: type=1326 audit(1748360848.759:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1626.748884][ T30] audit: type=1326 audit(1748360848.759:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1626.771535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.777973][ T30] audit: type=1326 audit(1748360848.759:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1626.825135][ T30] audit: type=1326 audit(1748360848.759:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1626.901601][ T30] audit: type=1326 audit(1748360848.759:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1626.953581][T25136] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1627.024666][T25136] usb 3-1: device descriptor read/8, error -71 [ 1627.044059][ T30] audit: type=1326 audit(1748360848.759:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1627.082783][ T980] usb 5-1: USB disconnect, device number 110 [ 1627.124525][ T30] audit: type=1326 audit(1748360848.759:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1627.148107][ T5889] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1627.205728][ T30] audit: type=1326 audit(1748360848.759:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.7.6951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d1f8e969 code=0x7fc00000 [ 1627.301120][T25136] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1627.320547][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 1627.328909][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1627.341369][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1627.355597][T25136] usb 3-1: device descriptor read/8, error -71 [ 1627.387883][ T5889] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1627.405221][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.455013][ T5889] usb 9-1: config 0 descriptor?? [ 1627.560319][T25136] usb usb3-port1: unable to enumerate USB device [ 1627.584918][T29849] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (130) [ 1627.836003][T29843] vlan4: entered promiscuous mode [ 1627.851897][ T5889] usbhid 9-1:0.0: can't add hid device: -71 [ 1627.877887][ T5889] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1627.908950][ T5889] usb 9-1: USB disconnect, device number 30 [ 1628.179350][T29856] netlink: 'syz.7.6962': attribute type 32 has an invalid length. [ 1628.411784][T29865] loop6: detected capacity change from 0 to 7 [ 1628.431412][T29865] Dev loop6: unable to read RDB block 7 [ 1628.437263][T29865] loop6: unable to read partition table [ 1628.450324][T29865] loop6: partition table beyond EOD, truncated [ 1628.467037][T29865] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1628.611307][ T980] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1628.770189][ T980] usb 10-1: device descriptor read/64, error -71 [ 1628.828383][T29876] netlink: 'syz.8.6967': attribute type 1 has an invalid length. [ 1628.961547][T29876] bond7: entered promiscuous mode [ 1629.003429][T29876] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1629.041049][ T980] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1629.092644][T29883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1629.103145][T29883] bond7: (slave bond8): making interface the new active one [ 1629.111077][T29883] bond8: entered promiscuous mode [ 1629.117521][T29883] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1629.180269][ T980] usb 10-1: device descriptor read/64, error -71 [ 1629.289113][T29895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6972'. [ 1629.298748][ T980] usb usb10-port1: attempt power cycle [ 1629.324345][T29895] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6972'. [ 1629.485838][T29901] Invalid logical block size (65408) [ 1629.650243][ T980] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1629.711084][ T980] usb 10-1: device descriptor read/8, error -71 [ 1629.836543][T29907] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6976'. [ 1629.959595][T29911] netlink: 'syz.4.6977': attribute type 32 has an invalid length. [ 1630.000536][ T980] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1630.043419][ T980] usb 10-1: device descriptor read/8, error -71 [ 1630.161517][ T980] usb usb10-port1: unable to enumerate USB device [ 1630.356392][T29917] netlink: 'syz.4.6978': attribute type 32 has an invalid length. [ 1630.410202][T29917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6978'. [ 1630.767213][T29934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6985'. [ 1630.776571][T29934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6985'. [ 1630.996292][T29946] loop2: detected capacity change from 0 to 7 [ 1631.018330][T29946] Dev loop2: unable to read RDB block 7 [ 1631.028521][T29946] loop2: AHDI p1 p2 p3 [ 1631.036190][T29946] loop2: partition table partially beyond EOD, truncated [ 1631.047374][T29946] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1631.058350][T29946] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1631.424431][T29955] fuse: Bad value for 'fd' [ 1631.483312][T29958] netlink: 'syz.4.6992': attribute type 32 has an invalid length. [ 1631.545408][T29958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6992'. [ 1631.897216][T29968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1631.911113][T29968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1632.201607][T29975] Invalid logical block size (65518) [ 1632.387953][T29982] bond_slave_0: entered promiscuous mode [ 1632.394250][T29982] bond_slave_1: entered promiscuous mode [ 1632.549001][T29987] netlink: 5 bytes leftover after parsing attributes in process `syz.8.7003'. [ 1632.596636][T25136] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1632.663826][T29993] vlan3: entered promiscuous mode [ 1632.700288][ T24] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1632.743032][T25136] usb 3-1: device descriptor read/64, error -71 [ 1632.860250][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1632.871081][ T24] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1632.889807][ T24] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1632.906310][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1632.941713][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1632.961531][ T24] usb 10-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1632.971795][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.983096][ T24] usb 10-1: Product: syz [ 1632.987611][ T24] usb 10-1: Manufacturer: syz [ 1632.992569][ T24] usb 10-1: SerialNumber: syz [ 1633.004124][ T24] usb 10-1: config 0 descriptor?? [ 1633.010260][T25136] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1633.032961][ T24] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input141 [ 1633.180467][T25136] usb 3-1: device descriptor read/64, error -71 [ 1633.350791][T25136] usb usb3-port1: attempt power cycle [ 1633.517696][T29981] bond_slave_0: left promiscuous mode [ 1633.523902][T29981] bond_slave_1: left promiscuous mode [ 1633.530185][ T24] rc_core: IR keymap rc-imon-pad not found [ 1633.555342][ T24] Registered IR keymap rc-empty [ 1633.579918][ T24] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1633.583914][T29999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1633.610199][ T24] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1633.647566][ T24] imon:send_packet: packet tx failed (-71) [ 1633.690326][ T24] imon 10-1:0.0: remote input dev register failed [ 1633.697533][ T24] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 1633.720431][T25136] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1633.766476][T25136] usb 3-1: device descriptor read/8, error -71 [ 1633.792702][ T24] imon 10-1:0.0: unable to initialize intf0, err 0 [ 1633.858235][ T24] imon:imon_probe: failed to initialize context! [ 1633.880455][ T24] imon 10-1:0.0: unable to register, err -19 [ 1633.928164][ T24] usb 10-1: USB disconnect, device number 31 [ 1634.010276][T25136] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1634.077478][T25136] usb 3-1: device descriptor read/8, error -71 [ 1634.204323][T25136] usb usb3-port1: unable to enumerate USB device [ 1634.423044][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1634.423065][ T30] audit: type=1326 audit(1748360856.509:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.9.7020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf2318e969 code=0x0 [ 1634.610168][T22225] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1634.623628][ T24] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1634.700324][T25138] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1634.772702][T22225] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.782951][T22225] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1634.793234][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1634.799788][T22225] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1634.810036][T22225] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1634.818131][T22225] usb 9-1: SerialNumber: syz [ 1634.825916][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.850135][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.868912][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1634.870482][T25138] usb 10-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 1634.880243][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.895836][ T24] usb 5-1: config 0 descriptor?? [ 1634.906552][T25138] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.916812][T25138] usb 10-1: Product: syz [ 1634.921481][T25138] usb 10-1: Manufacturer: syz [ 1634.926225][T25138] usb 10-1: SerialNumber: syz [ 1634.940320][T25138] usb 10-1: config 0 descriptor?? [ 1634.952176][T25138] esd_usb 10-1:0.0: sending version message failed [ 1634.959653][T25138] esd_usb 10-1:0.0: probe with driver esd_usb failed with error -22 [ 1635.139164][T30020] vlan4: entered promiscuous mode [ 1635.248410][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 1635.255771][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1635.283116][ T24] usb 5-1: USB disconnect, device number 111 [ 1636.104464][T30043] __nla_validate_parse: 3 callbacks suppressed [ 1636.104488][T30043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7025'. [ 1636.136369][T30044] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7025'. [ 1636.598269][T30051] netlink: 'syz.2.7027': attribute type 32 has an invalid length. [ 1636.899712][T30044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.913875][T30044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.929236][T30044] bond0 (unregistering): Released all slaves [ 1636.991889][T30055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7029'. [ 1637.375125][T22225] usb 9-1: 0:2 : does not exist [ 1637.403457][T22225] usb 9-1: unit 17 not found! [ 1637.547402][ T24] usb 10-1: USB disconnect, device number 32 [ 1637.619843][T22225] usb 9-1: USB disconnect, device number 31 [ 1637.747231][T20799] udevd[20799]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1637.939910][T30088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1639.146400][T30104] syzkaller1: entered promiscuous mode [ 1639.152793][T30104] syzkaller1: entered allmulticast mode [ 1639.243975][T30100] loop2: detected capacity change from 0 to 7 [ 1639.258860][T30100] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1639.263265][T30102] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1639.313735][T30100] loop2: partition table partially beyond EOD, truncated [ 1639.410852][T30100] loop2: p1 size 127 extends beyond EOD, truncated [ 1639.837781][T20799] udevd[20799]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1640.073630][T30109] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7042'. [ 1641.212014][ T24] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1641.310570][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7053'. [ 1641.341962][T30136] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1641.357292][T30136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1641.380150][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1641.388253][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1641.417727][ T24] usb 10-1: config 0 has no interface number 0 [ 1641.425985][T30138] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1641.431963][ T24] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1641.451853][T30138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1641.459041][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.469687][ T24] usb 10-1: Product: syz [ 1641.481609][ T24] usb 10-1: Manufacturer: syz [ 1641.486552][ T24] usb 10-1: SerialNumber: syz [ 1641.503315][ T24] usb 10-1: config 0 descriptor?? [ 1641.522147][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1641.600311][T22225] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1641.680408][T25138] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1641.720745][T30127] loop2: detected capacity change from 0 to 7 [ 1641.721774][T30127] Dev loop2: unable to read RDB block 7 [ 1641.721821][T30127] loop2: unable to read partition table [ 1641.722062][T30127] loop2: partition table beyond EOD, truncated [ 1641.722101][T30127] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1641.725884][T30127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.726307][T30127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.739468][ T24] gspca_spca1528: reg_w err -71 [ 1641.750236][ T24] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 1641.768358][ T24] usb 10-1: USB disconnect, device number 33 [ 1641.770522][T22225] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1641.770558][T22225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.783896][T22225] usb 3-1: config 0 descriptor?? [ 1641.822856][T22225] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1641.845477][T25138] usb 5-1: Using ep0 maxpacket: 16 [ 1641.928507][T25138] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.939926][T25138] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1641.959790][T25138] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1641.967143][T25138] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1641.977062][T25138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.989536][T25138] usb 5-1: config 0 descriptor?? [ 1642.191421][T22225] gp8psk: usb out operation failed. [ 1642.196799][T22225] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1642.215916][T22225] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1642.262265][T22225] usb 3-1: USB disconnect, device number 51 [ 1642.404331][T25138] monterey 0003:0566:3004.0041: unknown main item tag 0x0 [ 1642.417455][T25138] monterey 0003:0566:3004.0041: unknown main item tag 0x0 [ 1642.436280][T25138] monterey 0003:0566:3004.0041: unknown main item tag 0x0 [ 1642.462153][T25138] monterey 0003:0566:3004.0041: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.4-1/input0 [ 1642.610259][ T24] usb 10-1: new low-speed USB device number 34 using dummy_hcd [ 1642.611312][T30140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.655126][T30140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.838246][ T24] usb 10-1: config 6 has an invalid interface number: 137 but max is 0 [ 1642.850525][ T24] usb 10-1: config 6 has no interface number 0 [ 1642.856954][ T24] usb 10-1: config 6 interface 137 has no altsetting 0 [ 1642.896754][ T24] usb 10-1: string descriptor 0 read error: -22 [ 1642.899571][T25138] usb 5-1: USB disconnect, device number 112 [ 1642.910488][ T24] usb 10-1: New USB device found, idVendor=19d2, idProduct=0042, bcdDevice=22.a4 [ 1642.919816][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.020451][T25133] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1643.246788][T30173] netlink: 'syz.4.7066': attribute type 4 has an invalid length. [ 1643.260128][T25133] usb 9-1: Using ep0 maxpacket: 16 [ 1643.384284][T25136] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1643.438263][ T9] usb 10-1: USB disconnect, device number 34 [ 1643.451045][T30172] [U]  [ 1643.612867][T25136] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1643.623009][T25136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.649852][T25136] usb 3-1: config 0 descriptor?? [ 1644.405691][T25136] ath6kl: Failed to submit usb control message: -71 [ 1644.606027][T25136] ath6kl: unable to send the bmi data to the device: -71 [ 1644.613408][T25136] ath6kl: Unable to send get target info: -71 [ 1644.621677][T25136] ath6kl: Failed to init ath6kl core: -71 [ 1644.643550][T25136] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1644.687216][T25136] usb 3-1: USB disconnect, device number 52 [ 1645.583288][T30192] vivid-007: ================= START STATUS ================= [ 1645.591278][T30192] vivid-007: Enable Output Cropping: true [ 1645.597273][T30192] vivid-007: Enable Output Composing: true [ 1645.603629][T30192] vivid-007: Enable Output Scaler: true [ 1645.609359][T30192] vivid-007: Tx RGB Quantization Range: Automatic [ 1645.616157][T30192] vivid-007: Transmit Mode: HDMI [ 1645.621552][T30192] vivid-007: Hotplug Present: 0x00000000 [ 1645.627355][T30192] vivid-007: RxSense Present: 0x00000000 [ 1645.633771][T30192] vivid-007: EDID Present: 0x00000000 [ 1645.639445][T30192] vivid-007: ================== END STATUS ================== [ 1645.658207][T30194] Invalid logical block size (100663296) [ 1646.180244][T25133] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1646.223486][T25133] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1646.340781][T25133] usb 9-1: can't read configurations, error -71 [ 1646.780389][T30203] netlink: 'syz.8.7074': attribute type 13 has an invalid length. [ 1646.878718][T30203] gretap0: refused to change device tx_queue_len [ 1646.901537][T30203] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1647.135961][T30209] Cannot find add_set index 0 as target [ 1647.170579][T25138] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1647.194668][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7078'. [ 1647.352247][T25138] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 1647.488527][T25138] usb 3-1: config 0 has no interface number 0 [ 1647.500320][T25138] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1647.511623][T25138] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1647.521819][T25138] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1647.531901][T25138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.542936][T25138] usb 3-1: config 0 descriptor?? [ 1647.900178][ T980] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1647.982514][T25138] logitech-djreceiver 0003:046D:C71B.0042: unknown main item tag 0x0 [ 1648.013092][T25138] logitech-djreceiver 0003:046D:C71B.0042: unknown main item tag 0x0 [ 1648.142792][T25138] logitech-djreceiver 0003:046D:C71B.0042: unknown main item tag 0x0 [ 1648.197018][T25138] logitech-djreceiver 0003:046D:C71B.0042: unknown main item tag 0x0 [ 1648.227888][ T30] audit: type=1326 audit(1748360870.309:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30204 comm="syz.2.7075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f803ed8e969 code=0x0 [ 1648.260340][T25138] logitech-djreceiver 0003:046D:C71B.0042: unknown main item tag 0x0 [ 1648.307443][T25138] logitech-djreceiver 0003:046D:C71B.0042: unknown main item tag 0x0 [ 1648.326482][T30223] loop6: detected capacity change from 0 to 7 [ 1648.330571][ T980] usb 9-1: Using ep0 maxpacket: 8 [ 1648.346078][ T980] usb 9-1: config 0 has an invalid interface number: 20 but max is 3 [ 1648.354555][ T980] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1648.363621][ T980] usb 9-1: config 0 has an invalid interface number: 140 but max is 3 [ 1648.372549][ T980] usb 9-1: config 0 has an invalid interface number: 235 but max is 3 [ 1648.381139][ T980] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.391642][ T980] usb 9-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 1648.401696][ T980] usb 9-1: config 0 has no interface number 0 [ 1648.407872][ T980] usb 9-1: config 0 has no interface number 1 [ 1648.414705][ T980] usb 9-1: config 0 has no interface number 2 [ 1648.421134][ T980] usb 9-1: config 0 interface 20 altsetting 3 endpoint 0x7 has invalid maxpacket 1040, setting to 64 [ 1648.432262][ T980] usb 9-1: config 0 interface 20 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1648.443997][ T980] usb 9-1: config 0 interface 20 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 16 [ 1648.454280][ T980] usb 9-1: config 0 interface 20 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1648.454758][T25138] logitech-djreceiver 0003:046D:C71B.0042: unknown main item tag 0x0 [ 1648.466180][ T980] usb 9-1: config 0 interface 20 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1648.466217][ T980] usb 9-1: config 0 interface 20 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1648.466247][ T980] usb 9-1: config 0 interface 20 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1648.466272][ T980] usb 9-1: config 0 interface 20 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 1648.466320][ T980] usb 9-1: config 0 interface 235 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1648.466349][ T980] usb 9-1: config 0 interface 20 has no altsetting 0 [ 1648.466370][ T980] usb 9-1: config 0 interface 140 has no altsetting 0 [ 1648.466390][ T980] usb 9-1: config 0 interface 235 has no altsetting 0 [ 1648.618415][ T980] usb 9-1: New USB device found, idVendor=413c, idProduct=8115, bcdDevice=95.7f [ 1648.688135][T25138] logitech-djreceiver 0003:046D:C71B.0042: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32 [ 1648.723546][T25138] usb 3-1: USB disconnect, device number 53 [ 1648.795658][ T980] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.956983][ T980] usb 9-1: Product: syz [ 1648.967934][T30232] netlink: 'syz.2.7081': attribute type 32 has an invalid length. [ 1648.981055][T30227] fido_id[30227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1649.004601][ T980] usb 9-1: Manufacturer: syz [ 1649.009278][ T980] usb 9-1: SerialNumber: syz [ 1649.048886][ T980] usb 9-1: config 0 descriptor?? [ 1649.065864][T30218] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1649.074544][T30218] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1649.084232][T30218] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1649.236278][T30234] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1650.201078][ T980] option 9-1:0.20: GSM modem (1-port) converter detected [ 1650.223894][ T980] option 9-1:0.140: GSM modem (1-port) converter detected [ 1650.258027][ T980] option 9-1:0.235: GSM modem (1-port) converter detected [ 1650.286757][ T980] usb 9-1: USB disconnect, device number 34 [ 1650.310723][ T980] option 9-1:0.20: device disconnected [ 1650.349203][ T980] option 9-1:0.140: device disconnected [ 1650.385414][ T980] option 9-1:0.235: device disconnected [ 1650.542096][T30252] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1650.549500][T30252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1650.629480][T30256] netlink: 'syz.4.7091': attribute type 32 has an invalid length. [ 1650.664566][T30256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7091'. [ 1651.158786][T30276] binder: 30275:30276 ioctl c0306201 2000000003c0 returned -22 [ 1651.305830][T30282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7102'. [ 1651.353751][T30282] vlan4: entered promiscuous mode [ 1652.111066][T30294] sctp: [Deprecated]: syz.7.7106 (pid 30294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1652.111066][T30294] Use struct sctp_sack_info instead [ 1654.917995][T30322] loop6: detected capacity change from 0 to 7 [ 1654.951980][T30322] Dev loop6: unable to read RDB block 7 [ 1654.970194][T30322] loop6: unable to read partition table [ 1654.978238][T30322] loop6: partition table beyond EOD, truncated [ 1654.998349][T30322] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1655.603310][T22886] Bluetooth: hci1: command 0x0406 tx timeout [ 1655.780523][T25133] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1656.180212][T25133] usb 9-1: Using ep0 maxpacket: 32 [ 1656.257683][T25133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.279609][T25133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.308378][T25133] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1656.328736][T25133] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.369115][T25133] usb 9-1: config 0 descriptor?? [ 1656.469413][T30342] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1656.570331][T30342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1656.721124][T30353] netlink: 'syz.2.7127': attribute type 13 has an invalid length. [ 1656.765008][T30353] gretap0: refused to change device tx_queue_len [ 1656.772378][T30353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1656.881794][T25133] savu 0003:1E7D:2D5A.0043: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 1657.350267][ T980] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1657.562314][ T980] usb 10-1: config 0 has no interfaces? [ 1657.616222][ T980] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1657.639960][ T980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.667168][ T980] usb 10-1: Product: syz [ 1657.673674][ T980] usb 10-1: Manufacturer: syz [ 1657.678641][ T980] usb 10-1: SerialNumber: syz [ 1657.736219][ T980] usb 10-1: config 0 descriptor?? [ 1658.420129][T13944] usb 9-1: reset high-speed USB device number 35 using dummy_hcd [ 1658.514837][T30370] rdma_op ffff88805bda69f0 conn xmit_rdma 0000000000000000 [ 1659.358017][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054d32400: rx timeout, send abort [ 1659.359526][T30375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1659.868529][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054d32400: abort rx timeout. Force session deactivation [ 1660.024700][ T980] usb 9-1: USB disconnect, device number 35 [ 1660.624021][T25138] usb 10-1: USB disconnect, device number 35 [ 1660.929917][T30384] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7135'. [ 1661.568289][T30401] netlink: 'syz.4.7139': attribute type 13 has an invalid length. [ 1661.596249][T30399] syzkaller1: entered promiscuous mode [ 1661.649054][T30399] syzkaller1: entered allmulticast mode [ 1661.696299][T30401] gretap0: refused to change device tx_queue_len [ 1661.710887][T30401] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1662.336191][T30420] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1662.445084][ T980] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1662.510133][T13944] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1662.620076][ T980] usb 10-1: Using ep0 maxpacket: 16 [ 1662.667416][ T980] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.687641][ T980] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1662.694982][T13944] usb 3-1: device descriptor read/64, error -71 [ 1662.724659][ T980] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1662.733939][ T980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.747954][ T980] usb 10-1: Product: syz [ 1662.753483][ T980] usb 10-1: Manufacturer: syz [ 1662.758349][ T980] usb 10-1: SerialNumber: syz [ 1662.781697][ T980] usb 10-1: config 0 descriptor?? [ 1662.790684][ T980] hub 10-1:0.0: bad descriptor, ignoring hub [ 1662.842078][ T980] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1662.888078][ T980] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1662.924730][T25125] usb 10-1: Failed to submit usb control message: -71 [ 1662.944876][T25125] usb 10-1: unable to send the bmi data to the device: -71 [ 1662.960154][T13944] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1662.975120][T25125] usb 10-1: unable to get target info from device [ 1663.001093][T25125] usb 10-1: could not get target info (-71) [ 1663.007391][T25125] usb 10-1: could not probe fw (-71) [ 1663.042110][T30429] netlink: 'syz.4.7149': attribute type 32 has an invalid length. [ 1663.057186][T30429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7149'. [ 1663.100420][ T9] usb 10-1: USB disconnect, device number 36 [ 1663.111092][T13944] usb 3-1: device descriptor read/64, error -71 [ 1663.260364][T30431] vlan4: entered promiscuous mode [ 1663.284748][T13944] usb usb3-port1: attempt power cycle [ 1663.454303][T30433] xt_hashlimit: max too large, truncated to 1048576 [ 1663.640238][T13944] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1663.671999][T13944] usb 3-1: device descriptor read/8, error -71 [ 1663.786068][T30439] syzkaller1: entered promiscuous mode [ 1663.793869][T30439] syzkaller1: entered allmulticast mode [ 1663.942498][T13944] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1663.960932][T22225] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 1663.981042][T13944] usb 3-1: device descriptor read/8, error -71 [ 1664.090608][T13944] usb usb3-port1: unable to enumerate USB device [ 1664.122182][T22225] usb 9-1: config 4 has an invalid interface number: 231 but max is 0 [ 1664.138604][T22225] usb 9-1: config 4 has no interface number 0 [ 1664.152999][T22225] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1664.180084][T22225] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.198477][T22225] usb 9-1: Product: syz [ 1664.228666][T22225] usb 9-1: Manufacturer: syz [ 1664.237881][T22225] usb 9-1: SerialNumber: syz [ 1664.259689][T22225] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1664.289362][ T30] audit: type=1326 audit(1748360886.369:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30452 comm="syz.9.7159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf2318e969 code=0x0 [ 1664.705466][T30437] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7153'. [ 1664.725352][T22225] vp7045: USB control message 'in' went wrong. [ 1664.733354][T22225] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1664.744791][T22225] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1664.766083][T22225] usb 9-1: USB disconnect, device number 36 [ 1664.971851][T30469] Invalid logical block size (-2130706433) [ 1665.502769][T30478] syzkaller1: entered promiscuous mode [ 1665.531354][T30478] syzkaller1: entered allmulticast mode [ 1665.684568][T30482] vlan5: entered promiscuous mode [ 1665.876756][T30485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7170'. [ 1665.920434][T30485] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7170'. [ 1665.947057][T30488] fuse: Bad value for 'group_id' [ 1665.973411][T30488] fuse: Bad value for 'group_id' [ 1666.198498][T30492] tipc: Started in network mode [ 1666.222699][T30492] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 1666.240594][T30492] tipc: Enabled bearer , priority 10 [ 1666.296917][T30496] Invalid logical block size (-905969665) [ 1666.498629][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1666.610759][T30506] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (130) [ 1666.663989][T30508] netlink: 'syz.4.7180': attribute type 32 has an invalid length. [ 1666.672574][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1666.687163][T30508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7180'. [ 1666.697243][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1666.720640][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1666.731350][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.760462][ T9] usb 3-1: config 0 descriptor?? [ 1666.778660][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1666.867495][T30515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7183'. [ 1666.871016][T30517] netlink: 'syz.9.7184': attribute type 1 has an invalid length. [ 1666.928687][T30515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7183'. [ 1667.169346][T30532] Invalid logical block size (-625016833) [ 1667.240449][T13944] tipc: Node number set to 10070698 [ 1667.272809][T30538] tipc: Started in network mode [ 1667.280393][T30538] tipc: Node identity fe800000000000000000000000000015, cluster identity 4711 [ 1667.299259][T30538] tipc: Enabled bearer , priority 10 [ 1667.330739][T30539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.354870][T30539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.485612][T30551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1667.521104][T30551] macsec1: entered allmulticast mode [ 1667.540305][T30551] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 1667.593831][T30551] mac80211_hwsim hwsim55 wlan0: left allmulticast mode [ 1667.640387][T13944] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1667.677254][T30557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1667.879416][T30553] bridge0: port 1(macsec0) entered blocking state [ 1667.888337][T30553] bridge0: port 1(macsec0) entered disabled state [ 1667.909602][T30553] macsec0: entered allmulticast mode [ 1667.915986][T30553] veth1_macvtap: entered allmulticast mode [ 1667.932580][T30553] macsec0: entered promiscuous mode [ 1668.136512][T30570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7197'. [ 1668.152793][T30570] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7197'. [ 1668.412630][ T9] tipc: Node number set to 4269801493 [ 1668.890685][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.897699][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.296453][T13944] usb 3-1: USB disconnect, device number 58 [ 1669.349259][T30600] input: syz0 as /devices/virtual/input/input145 [ 1669.702563][T30615] tipc: Started in network mode [ 1669.707483][T30615] tipc: Node identity 8, cluster identity 3 [ 1669.714373][T30615] tipc: Node number set to 8 [ 1669.722201][T30615] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7212'. [ 1669.800733][T25133] usb 10-1: new low-speed USB device number 37 using dummy_hcd [ 1669.830275][T22225] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1669.950155][T25133] usb 10-1: device descriptor read/64, error -71 [ 1669.996908][T22225] usb 9-1: Using ep0 maxpacket: 8 [ 1670.008380][T22225] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1670.038743][T22225] usb 9-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 1670.051236][T22225] usb 9-1: config 8 interface 0 has no altsetting 0 [ 1670.061419][T22225] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1670.071184][T22225] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.079360][T22225] usb 9-1: Product: syz [ 1670.086634][T22225] usb 9-1: Manufacturer: syz [ 1670.100171][T22225] usb 9-1: SerialNumber: syz [ 1670.145343][T30611] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1670.146010][T30627] netlink: 'syz.2.7217': attribute type 32 has an invalid length. [ 1670.161933][T30627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7217'. [ 1670.220726][T25133] usb 10-1: new low-speed USB device number 38 using dummy_hcd [ 1670.380163][T25133] usb 10-1: device descriptor read/64, error -71 [ 1670.395527][T30611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.481790][T30611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.511971][T25133] usb usb10-port1: attempt power cycle [ 1670.545534][T22225] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1670.557290][T22225] usb 9-1: selecting invalid altsetting 0 [ 1670.598870][T22225] usb 9-1: USB disconnect, device number 38 [ 1670.690335][T23516] udevd[23516]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1670.895551][T25133] usb 10-1: new low-speed USB device number 39 using dummy_hcd [ 1670.930914][T25133] usb 10-1: device descriptor read/8, error -71 [ 1671.121083][T25136] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1671.178611][T25133] usb 10-1: new low-speed USB device number 40 using dummy_hcd [ 1671.228942][T25133] usb 10-1: device descriptor read/8, error -71 [ 1671.283004][T25136] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1671.293202][T25136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.311197][T25136] usb 5-1: config 0 descriptor?? [ 1671.350619][T25133] usb usb10-port1: unable to enumerate USB device [ 1671.361711][T30646] netlink: 'syz.7.7223': attribute type 32 has an invalid length. [ 1671.719509][T30636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.779927][T30636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.838016][T25136] elan 0003:04F3:0755.0044: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1672.193794][T22225] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1672.275001][ T5887] usb 5-1: USB disconnect, device number 113 [ 1672.390138][T22225] usb 3-1: Using ep0 maxpacket: 32 [ 1672.401072][T22225] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1672.412985][T30676] netlink: 'syz.8.7235': attribute type 32 has an invalid length. [ 1672.425552][T30674] loop6: detected capacity change from 0 to 7 [ 1672.439600][T22225] usb 3-1: config 0 has no interface number 0 [ 1672.457531][T30674] Dev loop6: unable to read RDB block 7 [ 1672.473320][T22225] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1672.484895][T30674] loop6: unable to read partition table [ 1672.503866][T22225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.512482][T30674] loop6: partition table beyond EOD, truncated [ 1672.518877][T30674] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1672.523430][T22225] usb 3-1: Product: syz [ 1672.540655][T22225] usb 3-1: Manufacturer: syz [ 1672.552275][T22225] usb 3-1: SerialNumber: syz [ 1672.563425][T22225] usb 3-1: config 0 descriptor?? [ 1672.588879][T22225] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1672.816203][T30661] input: syz0 as /devices/virtual/input/input146 [ 1672.878266][T22225] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1672.955228][T22225] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1672.973373][T30691] binder: 30689:30691 ioctl 40046205 0 returned -22 [ 1673.116083][T30703] netlink: 'syz.4.7239': attribute type 1 has an invalid length. [ 1673.330366][T22225] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1673.359644][T30703] bond0: entered promiscuous mode [ 1673.380711][T30703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.461532][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1673.469745][ T5887] usb 3-1: USB disconnect, device number 59 [ 1673.501907][T22225] usb 10-1: device descriptor read/64, error -71 [ 1673.550585][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1673.600333][T30707] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1673.637053][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1673.656798][T30707] bond0: (slave bond5): making interface the new active one [ 1673.665307][ T5887] quatech2 3-1:0.51: device disconnected [ 1673.668698][T30707] bond5: entered promiscuous mode [ 1673.700137][T13944] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 1673.783427][T30707] bond0: (slave bond5): Enslaving as an active interface with an up link [ 1673.830228][T22225] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1673.851913][T13944] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1673.863224][T13944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.958241][T13944] usb 9-1: config 0 descriptor?? [ 1673.990124][T22225] usb 10-1: device descriptor read/64, error -71 [ 1674.100698][T22225] usb usb10-port1: attempt power cycle [ 1674.470227][T22225] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1674.531384][T22225] usb 10-1: device descriptor read/8, error -71 [ 1674.772707][T13944] pegasus 9-1:0.0: probe with driver pegasus failed with error -32 [ 1674.808200][T22225] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1674.854229][T22225] usb 10-1: device descriptor read/8, error -71 [ 1674.980677][T22225] usb usb10-port1: unable to enumerate USB device [ 1674.993303][T30720] netlink: 'syz.7.7246': attribute type 32 has an invalid length. [ 1675.085881][T30723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.100652][T30723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.124957][T30724] fuse: Bad value for 'user_id' [ 1675.130766][T30724] fuse: Bad value for 'user_id' [ 1675.194878][T30727] vlan4: entered promiscuous mode [ 1675.228406][ T5887] usb 9-1: USB disconnect, device number 39 [ 1675.320152][T25133] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1675.333209][T30733] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1675.351964][T30733] ip6gretap0: entered promiscuous mode [ 1675.357760][T30733] vlan5: entered promiscuous mode [ 1675.420203][T25136] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1675.471779][T25133] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1675.494952][T25133] usb 3-1: config 0 has no interface number 0 [ 1675.506313][T25133] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1675.517224][T25133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.526896][T25133] usb 3-1: Product: syz [ 1675.531599][T25133] usb 3-1: Manufacturer: syz [ 1675.536260][T25133] usb 3-1: SerialNumber: syz [ 1675.545802][T25133] usb 3-1: config 0 descriptor?? [ 1675.555285][T25133] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1675.570229][T25136] usb 5-1: Using ep0 maxpacket: 32 [ 1675.577518][T25136] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1675.586477][T25136] usb 5-1: config 0 has no interface number 0 [ 1675.596453][T25136] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1675.607013][T25136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.616435][T25136] usb 5-1: Product: syz [ 1675.621806][T25136] usb 5-1: Manufacturer: syz [ 1675.626961][T25136] usb 5-1: SerialNumber: syz [ 1675.646741][T25136] usb 5-1: config 0 descriptor?? [ 1675.656342][T25136] smsc95xx v2.0.0 [ 1675.767507][T25133] gspca_spca1528: reg_w err -71 [ 1675.790190][T25133] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1675.807226][T25133] usb 3-1: USB disconnect, device number 60 [ 1676.062138][T25136] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1676.127754][T25136] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1676.299820][T30751] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7257'. [ 1676.341471][T30751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1676.375030][T30751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1676.439537][T30751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1676.498790][T30751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.787654][T25136] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1676.824825][T25136] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1677.602510][T25136] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1677.948091][ T5887] usb 5-1: USB disconnect, device number 114 [ 1678.164750][T13944] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1678.309568][T30791] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7269'. [ 1678.342587][T30793] loop6: detected capacity change from 0 to 7 [ 1678.353816][T30793] Dev loop6: unable to read RDB block 7 [ 1678.360770][T30793] loop6: unable to read partition table [ 1678.374729][T30793] loop6: partition table beyond EOD, truncated [ 1678.391975][T13944] usb 3-1: config 0 has no interfaces? [ 1678.397724][T30793] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1678.414195][T13944] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1678.423979][T13944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.460222][T13944] usb 3-1: Product: syz [ 1678.464455][T13944] usb 3-1: Manufacturer: syz [ 1678.469092][T13944] usb 3-1: SerialNumber: syz [ 1678.540813][T13944] usb 3-1: config 0 descriptor?? [ 1678.589878][T30801] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1678.703291][T30801] tipc: Started in network mode [ 1678.708278][T30801] tipc: Node identity 7f000001, cluster identity 4711 [ 1678.718683][T30801] tipc: Enabled bearer , priority 10 [ 1678.957610][T30782] pimreg: entered allmulticast mode [ 1679.001341][T30782] pimreg: left allmulticast mode [ 1679.047839][T30814] netlink: 'syz.4.7277': attribute type 1 has an invalid length. [ 1679.080167][ T5887] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1679.257539][ T5887] usb 10-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1679.291851][ T5887] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1679.323261][ T5887] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1679.344348][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1679.362121][ T5887] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 1679.377090][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.406666][ T5887] usb 10-1: Product: syz [ 1679.421439][ T5887] usb 10-1: Manufacturer: syz [ 1679.440279][ T5887] usb 10-1: SerialNumber: syz [ 1679.472095][ T5887] usb 10-1: config 0 descriptor?? [ 1679.687131][ T5887] usbtest 10-1:0.0: Linux user mode ISO test driver [ 1679.694275][ T5887] usbtest 10-1:0.0: high-speed {control iso-in} tests (+alt) [ 1679.720224][ T5887] tipc: Node number set to 2130706433 [ 1679.891754][T25136] usb 10-1: USB disconnect, device number 46 [ 1680.164330][T30822] netlink: 'syz.8.7279': attribute type 32 has an invalid length. [ 1680.174202][T30822] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7279'. [ 1680.220282][T25136] usb 3-1: USB disconnect, device number 61 [ 1680.474313][T30833] loop6: detected capacity change from 0 to 7 [ 1680.486831][T30833] Dev loop6: unable to read RDB block 7 [ 1680.493489][T30833] loop6: unable to read partition table [ 1680.499405][T30833] loop6: partition table beyond EOD, truncated [ 1680.516138][T30833] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1680.745285][T30842] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (130) [ 1680.874153][T30848] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7291'. [ 1680.908873][T30848] vlan5: entered promiscuous mode [ 1680.953279][T30851] netlink: 'syz.9.7292': attribute type 10 has an invalid length. [ 1680.994596][T30851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.001971][T25136] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1681.017094][T30851] bond0: (slave team0): Enslaving as an active interface with an up link [ 1681.098028][T30857] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1681.140214][T25136] usb 3-1: device descriptor read/64, error -71 [ 1681.181563][T30859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7294'. [ 1681.393286][T25136] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1681.530414][T25136] usb 3-1: device descriptor read/64, error -71 [ 1681.600452][T13944] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1681.652795][T25136] usb usb3-port1: attempt power cycle [ 1681.786078][T13944] usb 10-1: config 0 has no interfaces? [ 1681.802992][T13944] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1681.826781][T30869] loop6: detected capacity change from 0 to 7 [ 1681.838986][T30869] Dev loop6: unable to read RDB block 7 [ 1681.848468][T30869] loop6: unable to read partition table [ 1681.854721][T13944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.856263][T30869] loop6: partition table beyond EOD, truncated [ 1681.872370][T13944] usb 10-1: Product: syz [ 1681.885458][T13944] usb 10-1: Manufacturer: syz [ 1681.895272][T13944] usb 10-1: SerialNumber: syz [ 1681.928293][T13944] usb 10-1: config 0 descriptor?? [ 1681.933005][T30869] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1681.990147][ T5887] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1682.020306][T25136] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1682.080529][T25136] usb 3-1: device descriptor read/8, error -71 [ 1682.246344][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7296'. [ 1682.275777][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 1682.299603][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.320647][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.336171][ T5887] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1682.346082][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.362638][ T5887] usb 9-1: config 0 descriptor?? [ 1682.392921][T25136] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1682.459265][T30872] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7301'. [ 1682.465366][T25136] usb 3-1: device descriptor read/8, error -71 [ 1682.623306][ T5887] usbhid 9-1:0.0: can't add hid device: -71 [ 1682.629613][ T5887] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1682.658538][ T5887] usb 9-1: USB disconnect, device number 40 [ 1682.751934][T25136] usb usb3-port1: unable to enumerate USB device [ 1683.132757][T13944] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1683.341728][T13944] usb 5-1: Using ep0 maxpacket: 32 [ 1683.348873][T13944] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 1683.360769][T13944] usb 5-1: config 0 has no interface number 0 [ 1683.378170][T13944] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1683.399655][T13944] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1683.432374][T13944] usb 5-1: config 0 interface 126 has no altsetting 0 [ 1683.446481][T13944] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1683.456409][T13944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.465713][T13944] usb 5-1: Product: syz [ 1683.470594][T13944] usb 5-1: Manufacturer: syz [ 1683.475606][T13944] usb 5-1: SerialNumber: syz [ 1683.484477][T13944] usb 5-1: config 0 descriptor?? [ 1683.492535][T30880] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1683.505020][T30880] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1683.519360][T30886] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1683.543160][T30886] vlan5: entered promiscuous mode [ 1683.917727][T13944] ir_usb 5-1:0.126: IR Dongle converter detected [ 1684.122605][T13944] usb 5-1: IRDA class descriptor not found, device not bound [ 1684.625083][T30898] vivid-001: disconnect [ 1684.634940][T25133] usb 10-1: USB disconnect, device number 47 [ 1684.798486][T30906] syzkaller1: entered promiscuous mode [ 1684.820090][T30906] syzkaller1: entered allmulticast mode [ 1684.859388][T30901] loop2: detected capacity change from 0 to 7 [ 1684.869563][T30908] loop6: detected capacity change from 0 to 7 [ 1684.879850][T30908] Dev loop6: unable to read RDB block 7 [ 1684.879949][T30901] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1684.889367][T30908] loop6: unable to read partition table [ 1684.897836][T30908] loop6: partition table beyond EOD, truncated [ 1684.901242][T30897] vivid-001: reconnect [ 1684.905206][T30908] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1684.918693][T30901] loop2: partition table partially beyond EOD, truncated [ 1684.933853][T30901] loop2: p1 size 127 extends beyond EOD, truncated [ 1685.085044][T20799] udevd[20799]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1685.239468][T30916] netlink: 'syz.9.7315': attribute type 32 has an invalid length. [ 1685.263090][T13944] usb 5-1: USB disconnect, device number 115 [ 1685.784770][T30934] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7322'. [ 1685.786085][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7322'. [ 1685.844528][T30937] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7323'. [ 1686.324004][T30933] team0 (unregistering): Port device team_slave_0 removed [ 1686.398737][T30933] team0 (unregistering): Port device team_slave_1 removed [ 1686.440355][T30933] team0 (unregistering): Port device dummy0 removed [ 1686.467096][T30950] loop2: detected capacity change from 0 to 7 [ 1686.505903][T30950] Dev loop2: unable to read RDB block 7 [ 1686.529446][T30950] loop2: unable to read partition table [ 1686.540561][T30950] loop2: partition table beyond EOD, truncated [ 1686.575133][T30950] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1686.851043][T30957] netlink: 'syz.9.7329': attribute type 32 has an invalid length. [ 1686.859745][T30955] netlink: 'syz.4.7328': attribute type 32 has an invalid length. [ 1686.951950][T30955] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7328'. [ 1687.329457][T30970] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7330'. [ 1687.357153][T30970] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7330'. [ 1687.790227][T13944] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1687.871963][ T5887] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1687.961105][T13944] usb 3-1: device descriptor read/64, error -71 [ 1687.978849][T30984] vlan5: entered promiscuous mode [ 1688.020607][T25138] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1688.042217][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 1688.057087][ T5887] usb 5-1: config 0 has no interfaces? [ 1688.067530][ T5887] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1688.090499][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.123508][ T5887] usb 5-1: config 0 descriptor?? [ 1688.180543][T25138] usb 10-1: Using ep0 maxpacket: 8 [ 1688.188728][T25138] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1688.200674][T25138] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.210115][T13944] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1688.213466][T25138] usb 10-1: config 0 descriptor?? [ 1688.350567][T25133] usb 5-1: USB disconnect, device number 116 [ 1688.373031][T13944] usb 3-1: device descriptor read/64, error -71 [ 1688.493037][T13944] usb usb3-port1: attempt power cycle [ 1688.870627][T13944] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1688.900852][T13944] usb 3-1: device descriptor read/8, error -71 [ 1689.004251][ T30] audit: type=1326 audit(1748360911.089:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30980 comm="syz.9.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2318e969 code=0x7fc00000 [ 1689.026751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1689.077997][ T30] audit: type=1326 audit(1748360911.119:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30980 comm="syz.9.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2318e969 code=0x7fc00000 [ 1689.105479][T25138] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1689.121701][T25138] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1689.168464][T25138] asix 10-1:0.0: probe with driver asix failed with error -71 [ 1689.185139][T25138] usb 10-1: USB disconnect, device number 48 [ 1689.200254][T13944] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1689.241647][T13944] usb 3-1: device descriptor read/8, error -71 [ 1689.361039][T25136] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1689.374793][T13944] usb usb3-port1: unable to enumerate USB device [ 1689.527883][T30994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.537391][T30994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.642517][T25136] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1689.664497][T25136] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1689.687457][T25136] usb 5-1: can't read configurations, error -71 [ 1690.453957][T31018] syzkaller1: entered promiscuous mode [ 1690.460125][T13944] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1690.475489][T31018] syzkaller1: entered allmulticast mode [ 1690.487477][T31018] loop2: detected capacity change from 0 to 7 [ 1690.499021][T31018] Dev loop2: unable to read RDB block 7 [ 1690.505230][T31018] loop2: unable to read partition table [ 1690.516399][T31018] loop2: partition table beyond EOD, truncated [ 1690.526741][T31018] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1690.658990][T13944] usb 9-1: Using ep0 maxpacket: 16 [ 1690.671162][T13944] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1690.690169][T13944] usb 9-1: config 0 has no interface number 0 [ 1690.704700][T13944] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.715943][T13944] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.729060][T13944] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1690.738390][T13944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.752418][T13944] usb 9-1: config 0 descriptor?? [ 1691.023019][T31022] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1691.066259][T31022] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1691.142199][T31022] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1691.174021][T31022] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1691.187508][T31022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1691.201612][T31022] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1691.249341][T31022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1691.256034][T31022] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1691.503458][T31025] netlink: zone id is out of range [ 1691.895693][T13944] usbhid 9-1:0.1: can't add hid device: -71 [ 1691.914463][T13944] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1691.931815][T25136] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1691.952869][T13944] usb 9-1: USB disconnect, device number 41 [ 1692.092971][ T30] audit: type=1326 audit(1748360914.179:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31038 comm="syz.4.7352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fa258e969 code=0x0 [ 1692.136753][T25136] usb 3-1: device descriptor read/64, error -71 [ 1692.413108][T25136] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1692.570162][T25136] usb 3-1: device descriptor read/64, error -71 [ 1693.040602][T23084] Bluetooth: hci3: command 0x0406 tx timeout [ 1693.196007][T25136] usb usb3-port1: attempt power cycle [ 1693.202312][T23084] Bluetooth: hci0: command 0x0406 tx timeout [ 1693.203857][T22886] Bluetooth: hci5: command 0x0406 tx timeout [ 1693.363470][T22886] Bluetooth: hci1: command 0x0406 tx timeout [ 1693.641801][T31062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7359'. [ 1693.711754][T25136] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1693.774047][T25136] usb 3-1: device descriptor read/8, error -71 [ 1693.821547][T13944] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1694.017502][T13944] usb 10-1: config 68 has an invalid interface number: 220 but max is 0 [ 1694.039780][T13944] usb 10-1: config 68 has no interface number 0 [ 1694.054366][T13944] usb 10-1: config 68 interface 220 has no altsetting 0 [ 1694.077763][T13944] usb 10-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=55.7a [ 1694.097619][T13944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.113406][T13944] usb 10-1: Product: syz [ 1694.117735][T13944] usb 10-1: Manufacturer: syz [ 1694.136241][T13944] usb 10-1: SerialNumber: syz [ 1694.319582][T31079] netlink: 'syz.4.7364': attribute type 32 has an invalid length. [ 1694.327979][T31079] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7364'. [ 1694.393121][T13944] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1694.420199][T13944] gspca_spca501: reg write: error -71 [ 1694.425761][T13944] spca501 10-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 1694.433726][T13944] spca501 10-1:68.220: probe with driver spca501 failed with error -22 [ 1694.453482][T13944] usb 10-1: USB disconnect, device number 49 [ 1694.468249][T31082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7365'. [ 1694.489668][T31082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7365'. [ 1694.737204][T31088] syzkaller1: entered promiscuous mode [ 1694.744886][T31088] syzkaller1: entered allmulticast mode [ 1694.763423][T31088] loop2: detected capacity change from 0 to 7 [ 1694.777322][T20799] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1694.790712][T20799] loop2: partition table partially beyond EOD, truncated [ 1694.799422][T20799] loop2: p1 size 127 extends beyond EOD, truncated [ 1694.818449][T31088] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1694.826292][T31088] loop2: partition table partially beyond EOD, truncated [ 1694.835807][T31088] loop2: p1 size 127 extends beyond EOD, truncated [ 1694.926683][T20799] udevd[20799]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1695.037309][T31094] loop2: detected capacity change from 0 to 7 [ 1695.046753][T31094] Dev loop2: unable to read RDB block 7 [ 1695.150341][T31094] loop2: unable to read partition table [ 1695.159270][T22886] Bluetooth: hci3: command 0x0406 tx timeout [ 1695.172549][T31094] loop2: partition table beyond EOD, truncated [ 1695.191967][T31094] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1695.207336][T20799] udevd[20799]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1695.280162][T23084] Bluetooth: hci5: command 0x0406 tx timeout [ 1695.290253][T23084] Bluetooth: hci0: command 0x0406 tx timeout [ 1695.440367][T23084] Bluetooth: hci1: command 0x0406 tx timeout [ 1695.480452][T25136] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 1695.662996][T25136] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.062821][T25136] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1696.131356][T25136] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1696.150344][T13944] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1696.179524][T25136] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.219678][T25136] usb 9-1: config 0 descriptor?? [ 1696.254366][T25136] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1696.277629][T25136] dvb-usb: bulk message failed: -22 (3/0) [ 1696.310162][T13944] usb 3-1: Using ep0 maxpacket: 16 [ 1696.329259][T13944] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1696.335240][T25136] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1696.345238][T13944] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 1696.369408][T13944] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1696.420860][T13944] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1696.455419][T25136] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1696.550873][T13944] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1696.551442][T25136] usb 9-1: media controller created [ 1696.569347][T25136] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1696.604996][T25136] dvb-usb: bulk message failed: -22 (6/0) [ 1696.611521][T25136] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1696.711939][T25136] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input147 [ 1696.727390][T13944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.748090][T25136] dvb-usb: schedule remote query interval to 150 msecs. [ 1696.772389][T13944] usb 3-1: Product: syz [ 1696.780438][T13944] usb 3-1: Manufacturer: syz [ 1696.788595][T13944] usb 3-1: SerialNumber: syz [ 1696.798984][T25136] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1696.950413][T25136] dvb-usb: bulk message failed: -22 (1/0) [ 1697.030641][T25136] dvb-usb: error while querying for an remote control event. [ 1697.042064][T31104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7372'. [ 1697.210118][T25136] dvb-usb: bulk message failed: -22 (1/0) [ 1697.215994][T25136] dvb-usb: error while querying for an remote control event. [ 1697.381832][T25136] dvb-usb: bulk message failed: -22 (1/0) [ 1697.418303][T25136] dvb-usb: error while querying for an remote control event. [ 1697.631046][T25136] dvb-usb: bulk message failed: -22 (1/0) [ 1697.700192][T25136] dvb-usb: error while querying for an remote control event. [ 1697.860234][T25136] dvb-usb: bulk message failed: -22 (1/0) [ 1697.866064][T25136] dvb-usb: error while querying for an remote control event. [ 1698.030134][T25136] dvb-usb: bulk message failed: -22 (1/0) [ 1698.047820][T25136] dvb-usb: error while querying for an remote control event. [ 1698.280503][T25136] dvb-usb: bulk message failed: -22 (1/0) [ 1698.324635][T25136] dvb-usb: error while querying for an remote control event. [ 1698.619853][T25136] dvb-usb: bulk message failed: -22 (1/0) [ 1698.664513][T25136] dvb-usb: error while querying for an remote control event. [ 1698.830148][T25136] dvb-usb: bulk message failed: -22 (1/0) [ 1698.874818][T25136] dvb-usb: error while querying for an remote control event. [ 1698.936773][ T5887] usb 9-1: USB disconnect, device number 42 [ 1699.073662][T13944] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1699.103475][ T5887] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1699.131001][T13944] usb 3-1: USB disconnect, device number 74 [ 1699.223256][T31142] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (130) [ 1699.390993][T31146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1699.407851][T31146] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1699.417624][T31146] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1699.500203][ T5887] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1699.590196][ T24] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1699.660265][ T5887] usb 9-1: Using ep0 maxpacket: 32 [ 1699.671050][T13944] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1699.684209][ T5887] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 1699.697309][ T5887] usb 9-1: config 0 has no interface number 0 [ 1699.703807][ T5887] usb 9-1: config 0 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1699.718351][ T5887] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1699.737931][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.746373][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1699.751777][ T5887] usb 9-1: Product: syz [ 1699.756017][ T5887] usb 9-1: Manufacturer: syz [ 1699.762820][ T5887] usb 9-1: SerialNumber: syz [ 1699.769288][ T24] usb 10-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 1699.791668][ T5887] usb 9-1: config 0 descriptor?? [ 1699.797772][ T24] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1699.812763][ T5887] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 1699.832335][ T5887] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 1699.842799][ T24] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1699.853505][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.862869][T13944] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 1699.873590][T13944] usb 3-1: config 0 has no interface number 0 [ 1699.880243][ T24] usb 10-1: Product: syz [ 1699.885371][T13944] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1699.897623][ T24] usb 10-1: Manufacturer: syz [ 1699.902608][ T24] usb 10-1: SerialNumber: syz [ 1699.917971][T13944] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1699.931224][T13944] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1699.947299][T13944] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1699.961179][T13944] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 1699.970839][T13944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.978910][T13944] usb 3-1: Product: syz [ 1699.983514][T13944] usb 3-1: Manufacturer: syz [ 1699.988254][T13944] usb 3-1: SerialNumber: syz [ 1700.002291][ T5887] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1700.021918][T13944] usb 3-1: config 0 descriptor?? [ 1700.065703][T13944] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1700.080676][T13944] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input148 [ 1700.153100][T31152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.172939][T31152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.226878][ T5887] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 1700.264053][T25136] usb 3-1: USB disconnect, device number 75 [ 1700.287504][T25136] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1700.445290][ T24] usbhid 10-1:1.0: can't add hid device: -71 [ 1700.468525][ T24] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1700.488610][T31162] netlink: 'syz.8.7383': attribute type 1 has an invalid length. [ 1700.535458][ T24] usb 10-1: USB disconnect, device number 50 [ 1700.811038][T31162] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1700.991120][ T24] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1701.015598][T13944] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1701.041931][T31172] openvswitch: netlink: Message has 20 unknown bytes. [ 1701.049463][T31172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1701.190236][T13944] usb 10-1: Using ep0 maxpacket: 16 [ 1701.213753][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.225112][T13944] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1701.233593][T13944] usb 10-1: config 0 has no interface number 0 [ 1701.255693][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1701.268833][T13944] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.294949][T13944] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.309938][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1701.320746][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1701.328951][T13944] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1701.338812][ T24] usb 5-1: SerialNumber: syz [ 1701.349667][T13944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.373235][T13944] usb 10-1: config 0 descriptor?? [ 1701.458536][T31175] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1701.898428][ T24] usb 5-1: 0:2 : does not exist [ 1701.907402][ T24] usb 5-1: unit 255 not found! [ 1701.932082][ T24] usb 5-1: USB disconnect, device number 119 [ 1702.003390][T13944] uclogic 0003:28BD:0071.0045: pen parameters not found [ 1702.004835][T20799] udevd[20799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1702.030254][T13944] uclogic 0003:28BD:0071.0045: interface is invalid, ignoring [ 1702.114447][T13944] usb 9-1: USB disconnect, device number 43 [ 1702.130891][T13944] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 1702.471093][T31196] netlink: 'syz.4.7395': attribute type 10 has an invalid length. [ 1702.485545][T31196] bridge0: port 4(macsec0) entered blocking state [ 1702.494410][T31196] bridge0: port 4(macsec0) entered disabled state [ 1702.502962][T31196] macsec0: entered allmulticast mode [ 1702.514173][T31196] macsec0: entered promiscuous mode [ 1702.565131][ T5887] usb 10-1: USB disconnect, device number 51 [ 1702.660095][T13944] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1702.841021][T13944] usb 9-1: Using ep0 maxpacket: 16 [ 1702.855434][T13944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.860578][T25139] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1702.874761][T13944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.874817][T13944] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1702.874843][T13944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.929501][T13944] usb 9-1: config 0 descriptor?? [ 1703.200435][T13944] usbhid 9-1:0.0: can't add hid device: -71 [ 1703.268768][T13944] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1703.423122][T13944] usb 9-1: USB disconnect, device number 44 [ 1703.446763][T31205] ip6t_srh: unknown srh match flags 5040 [ 1703.478943][T25139] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1703.498469][T25139] usb 5-1: config 0 has no interfaces? [ 1703.513868][T25139] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 1703.533831][T25139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.574126][T25139] usb 5-1: Product: syz [ 1703.582867][T25139] usb 5-1: Manufacturer: syz [ 1703.592275][T25139] usb 5-1: SerialNumber: syz [ 1703.620341][T25139] usb 5-1: config 0 descriptor?? [ 1703.870569][T31194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7395'. [ 1703.940983][T31196] netlink: 'syz.4.7395': attribute type 275 has an invalid length. [ 1705.228495][T25138] usb 5-1: USB disconnect, device number 120 [ 1705.408916][T31229] netlink: 'syz.9.7405': attribute type 1 has an invalid length. [ 1705.526404][T31229] bond2: entered promiscuous mode [ 1705.650760][T31229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1705.808569][T31233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1705.818267][T31233] bond2: (slave bond3): making interface the new active one [ 1705.825819][T31233] bond3: entered promiscuous mode [ 1705.832348][T31233] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1705.921316][T31243] fuse: Bad value for 'user_id' [ 1705.927115][T31243] fuse: Bad value for 'user_id' [ 1705.946472][T31243] vivid-007: ================= START STATUS ================= [ 1705.956979][T31243] vivid-007: Enable Output Cropping: true [ 1705.964121][T31243] vivid-007: Enable Output Composing: true [ 1705.970794][T31243] vivid-007: Enable Output Scaler: true [ 1705.976562][T31243] vivid-007: Tx RGB Quantization Range: Automatic [ 1705.985945][T31243] vivid-007: Transmit Mode: HDMI [ 1705.992395][T31243] vivid-007: Hotplug Present: 0x00000000 [ 1706.000636][T31243] vivid-007: RxSense Present: 0x00000000 [ 1706.012196][T31243] vivid-007: EDID Present: 0x00000000 [ 1706.018753][T31243] vivid-007: ================== END STATUS ================== [ 1706.080621][T25138] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1706.130180][T13944] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1706.251083][T25138] usb 3-1: Using ep0 maxpacket: 16 [ 1706.268285][T25138] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1706.282397][T13944] usb 9-1: config 4 has an invalid interface number: 231 but max is 0 [ 1706.299060][T25138] usb 3-1: config 0 has no interface number 0 [ 1706.332739][T13944] usb 9-1: config 4 has no interface number 0 [ 1706.332750][T25138] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.371606][T13944] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1706.381449][T13944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.398127][T13944] usb 9-1: Product: syz [ 1706.408478][T13944] usb 9-1: Manufacturer: syz [ 1706.416388][T25138] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.422685][T13944] usb 9-1: SerialNumber: syz [ 1706.460435][T25138] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1706.485124][T25138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.506916][T13944] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1706.531082][T25138] usb 3-1: config 0 descriptor?? [ 1706.618584][T31252] FAULT_INJECTION: forcing a failure. [ 1706.618584][T31252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.670210][T31252] CPU: 0 UID: 0 PID: 31252 Comm: syz.7.7415 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 1706.670247][T31252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1706.670264][T31252] Call Trace: [ 1706.670273][T31252] [ 1706.670284][T31252] dump_stack_lvl+0x189/0x250 [ 1706.670324][T31252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1706.670352][T31252] ? __pfx__printk+0x10/0x10 [ 1706.670370][T31252] ? __might_fault+0xb0/0x130 [ 1706.670406][T31252] should_fail_ex+0x414/0x560 [ 1706.670433][T31252] _copy_from_user+0x2d/0xb0 [ 1706.670453][T31252] ___sys_sendmsg+0x158/0x2a0 [ 1706.670479][T31252] ? __pfx____sys_sendmsg+0x10/0x10 [ 1706.670536][T31252] ? __fget_files+0x2a/0x420 [ 1706.670560][T31252] ? __fget_files+0x3a0/0x420 [ 1706.670589][T31252] __x64_sys_sendmsg+0x19b/0x260 [ 1706.670615][T31252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1706.670653][T31252] ? do_syscall_64+0xba/0x220 [ 1706.670684][T31252] do_syscall_64+0xf6/0x220 [ 1706.670706][T31252] ? clear_bhb_loop+0x60/0xb0 [ 1706.670729][T31252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.670746][T31252] RIP: 0033:0x7fc7d1f8e969 [ 1706.670762][T31252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1706.670778][T31252] RSP: 002b:00007fc7d2e66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1706.670798][T31252] RAX: ffffffffffffffda RBX: 00007fc7d21b5fa0 RCX: 00007fc7d1f8e969 [ 1706.670815][T31252] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1706.670828][T31252] RBP: 00007fc7d2e66090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.670839][T31252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.670850][T31252] R13: 0000000000000000 R14: 00007fc7d21b5fa0 R15: 00007fc7d22dfa28 [ 1706.670876][T31252] [ 1707.140316][T25136] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1707.280472][T25136] usb 5-1: device descriptor read/64, error -71 [ 1707.357335][T25138] uclogic 0003:28BD:0071.0046: pen parameters not found [ 1707.376352][T25138] uclogic 0003:28BD:0071.0046: interface is invalid, ignoring [ 1707.432193][T13944] vp7045: USB control message 'in' went wrong. [ 1707.438519][T13944] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1707.469872][T13944] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1707.505667][T13944] usb 9-1: USB disconnect, device number 45 [ 1707.523675][T25136] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1707.637885][T31269] binder: 31268:31269 ioctl c0306201 0 returned -14 [ 1707.660192][T25136] usb 5-1: device descriptor read/64, error -71 [ 1707.777902][T22225] usb 3-1: USB disconnect, device number 76 [ 1707.781101][T25136] usb usb5-port1: attempt power cycle [ 1708.099685][T31276] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (130) [ 1708.150455][T25136] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1708.261379][T25136] usb 5-1: device descriptor read/8, error -71 [ 1708.507013][T25136] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1708.569733][T31282] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7425'. [ 1708.595892][T25136] usb 5-1: device descriptor read/8, error -71 [ 1708.623134][T31282] vlan5: entered promiscuous mode [ 1708.740693][T25136] usb usb5-port1: unable to enumerate USB device [ 1709.070341][T25136] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1709.245930][T25136] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1709.316911][T25136] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1709.345412][T25136] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1709.387357][T25136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.611712][T31286] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1709.623490][T25136] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1709.911624][T31286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.956790][T31296] netlink: 'syz.8.7428': attribute type 1 has an invalid length. [ 1710.026273][T31286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.077071][T31286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.089105][T31286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.124209][T31296] bond10: entered promiscuous mode [ 1710.130588][T31296] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1710.219065][T31298] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1710.231561][T31298] bond10: (slave bond11): making interface the new active one [ 1710.239357][T31298] bond11: entered promiscuous mode [ 1710.245805][T31298] bond10: (slave bond11): Enslaving as an active interface with an up link [ 1710.638536][T25136] usb 3-1: USB disconnect, device number 77 [ 1711.220119][T25136] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1711.401059][T25136] usb 10-1: Using ep0 maxpacket: 16 [ 1711.422533][T25136] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.455300][T25136] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1711.470507][T31313] netlink: 'syz.2.7435': attribute type 32 has an invalid length. [ 1711.473256][T25136] usb 10-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1711.489072][T25136] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.518189][T31313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7435'. [ 1711.530134][T25138] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1711.553472][T25136] usb 10-1: config 0 descriptor?? [ 1711.710350][T25138] usb 5-1: Using ep0 maxpacket: 16 [ 1711.724069][T25138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.736504][T25138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.748706][T25138] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1711.761557][T25138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.774494][T25138] usb 5-1: config 0 descriptor?? [ 1711.855267][T31319] syzkaller1: entered promiscuous mode [ 1711.861020][T31319] syzkaller1: entered allmulticast mode [ 1711.950164][T22225] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1711.989319][T25136] kye 0003:0458:0138.0047: unknown main item tag 0x4 [ 1711.996628][T25136] kye 0003:0458:0138.0047: unexpected long global item [ 1712.005490][T25136] kye 0003:0458:0138.0047: parse failed [ 1712.011399][T25136] kye 0003:0458:0138.0047: probe with driver kye failed with error -22 [ 1712.104435][T22225] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1712.113953][ T5887] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 1712.122364][T22225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.132376][T22225] usb 3-1: Product: syz [ 1712.137129][T22225] usb 3-1: Manufacturer: syz [ 1712.141851][T22225] usb 3-1: SerialNumber: syz [ 1712.149509][T22225] usb 3-1: config 0 descriptor?? [ 1712.200239][T25138] gt683r_led 0003:1770:FF00.0048: ignoring exceeding usage max [ 1712.219140][T25138] gt683r_led 0003:1770:FF00.0048: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 1712.296954][ T5887] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1712.306745][ T5887] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1712.326217][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1712.338006][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1712.353776][ T5887] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1712.364850][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.374517][T22225] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1712.386207][ T5887] usb 9-1: Product: syz [ 1712.390519][ T5887] usb 9-1: Manufacturer: syz [ 1712.395181][ T5887] usb 9-1: SerialNumber: syz [ 1712.410537][T22225] asix 3-1:0.0: probe with driver asix failed with error -61 [ 1712.424897][T25138] usb 5-1: USB disconnect, device number 125 [ 1712.432564][ T5887] usb 9-1: config 0 descriptor?? [ 1712.445321][T31319] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 1712.458665][T25133] gt683r_led 0003:1770:FF00.0048: failed to send set report request: -19 [ 1712.574435][T22225] usb 3-1: USB disconnect, device number 78 [ 1712.664120][T31323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.673712][T31323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.689470][ T5887] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1712.702794][ T5887] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input149 [ 1712.717106][ C1] powermate: config urb returned -71 [ 1712.723342][ C1] powermate: config urb returned -71 [ 1712.729379][ C1] powermate: config urb returned -71 [ 1712.735323][ C1] powermate: config urb returned -71 [ 1712.763940][ T5887] usb 9-1: USB disconnect, device number 46 [ 1712.769959][ C1] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1712.793585][T25138] usb 10-1: USB disconnect, device number 52 [ 1713.270446][T25138] usb 5-1: new low-speed USB device number 126 using dummy_hcd [ 1713.290646][T25136] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1713.420249][T25138] usb 5-1: Invalid ep0 maxpacket: 64 [ 1713.437743][T31345] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1713.444393][T31345] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1713.452710][T25136] usb 10-1: Using ep0 maxpacket: 8 [ 1713.460329][T25136] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1713.476911][T31346] 8021q: VLANs not supported on vcan0 [ 1713.483127][T25136] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.507641][ T30] audit: type=1326 audit(1748360935.589:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31344 comm="syz.8.7445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6905d8e969 code=0x0 [ 1713.547737][T25136] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1713.556295][T25136] pvrusb2: ********** [ 1713.560553][T25136] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1713.572681][T25138] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 1713.580686][T25136] pvrusb2: Important functionality might not be entirely working. [ 1713.589634][T25136] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1713.620073][T25136] pvrusb2: ********** [ 1713.733834][T25138] usb 5-1: Invalid ep0 maxpacket: 64 [ 1713.743316][T25138] usb usb5-port1: attempt power cycle [ 1713.971750][T31351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.982642][T31351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.076955][T31352] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7441'. [ 1714.108338][T31352] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7441'. [ 1714.124203][T25138] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 1714.182060][T25138] usb 5-1: Invalid ep0 maxpacket: 64 [ 1714.203567][T31352] bridge0: entered promiscuous mode [ 1714.216745][T31352] gretap0: entered promiscuous mode [ 1714.330370][T25138] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 1714.371520][T25138] usb 5-1: Invalid ep0 maxpacket: 64 [ 1714.388410][T25138] usb usb5-port1: unable to enumerate USB device [ 1714.399335][T25125] [ 1714.401717][T25125] ============================================ [ 1714.407950][T25125] WARNING: possible recursive locking detected [ 1714.414751][T25125] 6.15.0-syzkaller-01972-g914873bc7df9 #0 Not tainted [ 1714.421532][T25125] -------------------------------------------- [ 1714.427722][T25125] kworker/u8:2/25125 is trying to acquire lock: [ 1714.434069][T25125] ffff8880471fef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 1714.443178][T25125] [ 1714.443178][T25125] but task is already holding lock: [ 1714.450560][T25125] ffff888043aaaf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 1714.459732][T25125] [ 1714.459732][T25125] other info that might help us debug this: [ 1714.467993][T25125] Possible unsafe locking scenario: [ 1714.467993][T25125] [ 1714.476461][T25125] CPU0 [ 1714.479841][T25125] ---- [ 1714.483143][T25125] lock(&hsr->seqnr_lock); [ 1714.487661][T25125] lock(&hsr->seqnr_lock); [ 1714.492609][T25125] [ 1714.492609][T25125] *** DEADLOCK *** [ 1714.492609][T25125] [ 1714.500755][T25125] May be due to missing lock nesting notation [ 1714.500755][T25125] [ 1714.509159][T25125] 11 locks held by kworker/u8:2/25125: [ 1714.514732][T25125] #0: ffff888030378148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1714.526543][T25125] #1: ffffc9000b767c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1714.539360][T25125] #2: ffffffff8f503588 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 1714.549069][T25125] #3: ffffffff8e13c9a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x208/0x1400 [ 1714.558685][T25125] #4: ffffffff8e13c9a0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 1714.568575][T25125] #5: ffffffff8e13ca00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 1714.578695][T25125] #6: ffff888043aaaf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 1714.588222][T25125] #7: ffffffff8e13c9a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 1714.597827][T25125] #8: ffffffff8e13ca00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 1714.608311][T25125] #9: ffffffff8e13c9a0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 1714.619205][T25125] #10: ffffffff8e13ca00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 1714.630571][T25125] [ 1714.630571][T25125] stack backtrace: [ 1714.637352][T25125] CPU: 1 UID: 0 PID: 25125 Comm: kworker/u8:2 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 1714.637375][T25125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1714.637388][T25125] Workqueue: ipv6_addrconf addrconf_dad_work [ 1714.637417][T25125] Call Trace: [ 1714.637426][T25125] [ 1714.637433][T25125] dump_stack_lvl+0x189/0x250 [ 1714.637458][T25125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1714.637480][T25125] ? __pfx__printk+0x10/0x10 [ 1714.637501][T25125] ? print_lock_name+0xde/0x100 [ 1714.637517][T25125] print_deadlock_bug+0x28b/0x2a0 [ 1714.637539][T25125] validate_chain+0x1a3f/0x2140 [ 1714.637563][T25125] ? unwind_next_frame+0xa5/0x2390 [ 1714.637582][T25125] ? rcu_is_watching+0x15/0xb0 [ 1714.637599][T25125] ? __kasan_check_byte+0x12/0x40 [ 1714.637616][T25125] ? unwind_next_frame+0xa5/0x2390 [ 1714.637637][T25125] __lock_acquire+0xab9/0xd20 [ 1714.637655][T25125] ? hsr_dev_xmit+0x19a/0x220 [ 1714.637677][T25125] lock_acquire+0x120/0x360 [ 1714.637692][T25125] ? hsr_dev_xmit+0x19a/0x220 [ 1714.637718][T25125] ? hsr_dev_xmit+0x19a/0x220 [ 1714.637740][T25125] _raw_spin_lock_bh+0x36/0x50 [ 1714.637756][T25125] ? hsr_dev_xmit+0x19a/0x220 [ 1714.637778][T25125] hsr_dev_xmit+0x19a/0x220 [ 1714.637802][T25125] dev_hard_start_xmit+0x302/0x880 [ 1714.637829][T25125] __dev_queue_xmit+0x1adf/0x3a70 [ 1714.637854][T25125] ? __dev_queue_xmit+0x27e/0x3a70 [ 1714.637878][T25125] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1714.637897][T25125] ? lockdep_hardirqs_on+0x9c/0x150 [ 1714.637916][T25125] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1714.637940][T25125] ? do_raw_read_unlock+0x3d/0x80 [ 1714.637963][T25125] ? ebt_do_table+0x265b/0x2820 [ 1714.637980][T25125] ? __lock_acquire+0xab9/0xd20 [ 1714.638006][T25125] br_dev_queue_push_xmit+0x6c5/0x890 [ 1714.638031][T25125] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1714.638054][T25125] ? NF_HOOK+0x9e/0x3c0 [ 1714.638074][T25125] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1714.638095][T25125] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1714.638116][T25125] NF_HOOK+0x31d/0x3c0 [ 1714.638137][T25125] ? NF_HOOK+0x9e/0x3c0 [ 1714.638157][T25125] ? __pfx_NF_HOOK+0x10/0x10 [ 1714.638178][T25125] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1714.638204][T25125] br_forward_finish+0xd3/0x130 [ 1714.638224][T25125] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1714.638245][T25125] ? __pfx_br_forward_finish+0x10/0x10 [ 1714.638266][T25125] ? __pfx_br_forward_finish+0x10/0x10 [ 1714.638286][T25125] NF_HOOK+0x31d/0x3c0 [ 1714.638308][T25125] ? NF_HOOK+0x9e/0x3c0 [ 1714.638327][T25125] ? __pfx_NF_HOOK+0x10/0x10 [ 1714.638348][T25125] ? __pfx_br_forward_finish+0x10/0x10 [ 1714.638373][T25125] __br_forward+0x41e/0x600 [ 1714.638393][T25125] ? __pfx_br_forward_finish+0x10/0x10 [ 1714.638416][T25125] ? __pfx___br_forward+0x10/0x10 [ 1714.638438][T25125] ? skb_clone+0x246/0x3a0 [ 1714.638460][T25125] maybe_deliver+0xb5/0x160 [ 1714.638482][T25125] br_flood+0x31a/0x6a0 [ 1714.638526][T25125] ? br_dev_xmit+0x185/0x1840 [ 1714.638541][T25125] br_dev_xmit+0x11b3/0x1840 [ 1714.638556][T25125] ? arch_stack_walk+0x11c/0x150 [ 1714.638578][T25125] ? br_dev_xmit+0x185/0x1840 [ 1714.638596][T25125] ? __pfx_br_dev_xmit+0x10/0x10 [ 1714.638611][T25125] ? __pfx_skb_network_protocol+0x10/0x10 [ 1714.638633][T25125] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 1714.638654][T25125] ? __pfx_passthru_features_check+0x10/0x10 [ 1714.638680][T25125] dev_hard_start_xmit+0x302/0x880 [ 1714.638706][T25125] __dev_queue_xmit+0x1adf/0x3a70 [ 1714.638731][T25125] ? __dev_queue_xmit+0x27e/0x3a70 [ 1714.638754][T25125] ? rcu_is_watching+0x15/0xb0 [ 1714.638772][T25125] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1714.638788][T25125] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1714.638806][T25125] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1714.638828][T25125] ? __copy_skb_header+0xa7/0x550 [ 1714.638848][T25125] ? __asan_memcpy+0x40/0x70 [ 1714.638870][T25125] ? __pskb_copy_fclone+0x960/0xf90 [ 1714.638892][T25125] ? __asan_memcpy+0x40/0x70 [ 1714.638914][T25125] ? __pskb_copy_fclone+0x960/0xf90 [ 1714.638937][T25125] ? hsr_create_tagged_frame+0x449/0xc30 [ 1714.638954][T25125] ? __asan_memmove+0x40/0x70 [ 1714.638976][T25125] ? hsr_addr_subst_dest+0x307/0xac0 [ 1714.639002][T25125] hsr_forward_skb+0x158b/0x2860 [ 1714.639022][T25125] ? hsr_forward_skb+0x9e/0x2860 [ 1714.639039][T25125] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1714.639054][T25125] ? do_raw_spin_lock+0x121/0x290 [ 1714.639078][T25125] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1714.639103][T25125] ? hsr_dev_xmit+0x19a/0x220 [ 1714.639126][T25125] hsr_dev_xmit+0x1a5/0x220 [ 1714.639149][T25125] dev_hard_start_xmit+0x302/0x880 [ 1714.639175][T25125] __dev_queue_xmit+0x1adf/0x3a70 [ 1714.639196][T25125] ? register_lock_class+0x51/0x320 [ 1714.639215][T25125] ? __dev_queue_xmit+0x27e/0x3a70 [ 1714.639241][T25125] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1714.639263][T25125] ? read_seqbegin+0x122/0x250 [ 1714.639277][T25125] ? neigh_connected_output+0x1ea/0x460 [ 1714.639292][T25125] ? lockdep_hardirqs_on+0x9c/0x150 [ 1714.639309][T25125] ? read_seqbegin+0x1ac/0x250 [ 1714.639323][T25125] ? __pfx_read_seqbegin+0x10/0x10 [ 1714.639337][T25125] ? eth_header+0x11b/0x200 [ 1714.639355][T25125] ? __asan_memcpy+0x40/0x70 [ 1714.639377][T25125] ? eth_header+0x11b/0x200 [ 1714.639394][T25125] ? __pfx_eth_header+0x10/0x10 [ 1714.639413][T25125] ? neigh_connected_output+0x3b6/0x460 [ 1714.639434][T25125] ip6_finish_output2+0x11fe/0x16a0 [ 1714.639452][T25125] ? ip6_finish_output2+0x701/0x16a0 [ 1714.639472][T25125] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1714.639495][T25125] ? ip6_mtu+0x7d/0x3f0 [ 1714.639511][T25125] ? ip6_mtu+0x7d/0x3f0 [ 1714.639526][T25125] ip6_finish_output+0x234/0x7d0 [ 1714.639542][T25125] ndisc_send_skb+0xb47/0x1400 [ 1714.639563][T25125] ? ndisc_send_skb+0x208/0x1400 [ 1714.639586][T25125] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1714.639607][T25125] ? __pfx_dst_output+0x10/0x10 [ 1714.639626][T25125] ? __asan_memcpy+0x40/0x70 [ 1714.639651][T25125] ? mod_delayed_work_on+0x128/0x200 [ 1714.639676][T25125] ndisc_send_ns+0xcb/0x150 [ 1714.639697][T25125] ? __pfx_ndisc_send_ns+0x10/0x10 [ 1714.639718][T25125] ? addrconf_dad_work+0xa04/0x14b0 [ 1714.639743][T25125] addrconf_dad_work+0xaae/0x14b0 [ 1714.639766][T25125] ? __lock_acquire+0xab9/0xd20 [ 1714.639785][T25125] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1714.639809][T25125] ? process_scheduled_works+0x9ec/0x17a0 [ 1714.639830][T25125] ? _raw_spin_unlock_irq+0x23/0x50 [ 1714.639844][T25125] ? process_scheduled_works+0x9ec/0x17a0 [ 1714.639863][T25125] ? process_scheduled_works+0x9ec/0x17a0 [ 1714.639883][T25125] process_scheduled_works+0xade/0x17a0 [ 1714.639912][T25125] ? __pfx_process_scheduled_works+0x10/0x10 [ 1714.639937][T25125] worker_thread+0x8a0/0xda0 [ 1714.639958][T25125] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1714.639990][T25125] ? __kthread_parkme+0x7b/0x200 [ 1714.640022][T25125] kthread+0x70e/0x8a0 [ 1714.640043][T25125] ? __pfx_worker_thread+0x10/0x10 [ 1714.640069][T25125] ? __pfx_kthread+0x10/0x10 [ 1714.640087][T25125] ? __pfx_kthread+0x10/0x10 [ 1714.640102][T25125] ? _raw_spin_unlock_irq+0x23/0x50 [ 1714.640119][T25125] ? lockdep_hardirqs_on+0x9c/0x150 [ 1714.640139][T25125] ? __pfx_kthread+0x10/0x10 [ 1714.640153][T25125] ret_from_fork+0x4e/0x80 [ 1714.640174][T25125] ? __pfx_kthread+0x10/0x10 [ 1714.640189][T25125] ret_from_fork_asm+0x1a/0x30 [ 1714.640213][T25125] [ 1715.743787][T31357] netlink: 'syz.2.7446': attribute type 1 has an invalid length. [ 1715.797306][T31357] bond1: entered promiscuous mode [ 1715.803140][T31357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1715.850527][T31359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1715.862627][T31359] bond1: (slave bond2): making interface the new active one [ 1715.870354][T31359] bond2: entered promiscuous mode [ 1715.877893][T31359] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1716.777653][ T2343] pvrusb2: Invalid write control endpoint [ 1716.782896][T25136] usb 10-1: USB disconnect, device number 53 [ 1716.832462][ T2343] pvrusb2: Invalid write control endpoint [ 1716.838246][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1716.850542][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1716.858207][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1716.868290][ T2343] pvrusb2: Device being rendered inoperable [ 1716.874639][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1716.882139][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1716.890432][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1716.896099][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1716.906361][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.