last executing test programs: 15m54.111922717s ago: executing program 0 (id=37): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x80000204}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x2f, 0xb, 0x0, 0x4}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r7, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r8, 0x0, 0x6, 0x7) writev(r7, &(0x7f00000004c0)=[{&(0x7f00000006c0)="fa", 0x1}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x15, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x10}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) syz_emit_ethernet(0x164, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) pipe(&(0x7f0000000040)) io_setup(0x8, &(0x7f00000000c0)) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000240), 0x0, 0x1000, 0x0) openat(r10, &(0x7f0000000040)='./file0\x00', 0x113800, 0x2) write$binfmt_misc(r10, &(0x7f0000000140)="a753ce495ec930e42556c81adc546011407dadfebacc8aa0363c828cb11096bcc2b98246c9b3d8c2360901", 0x2b) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000004f40)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r11, 0x3ba0, &(0x7f0000004fc0)={0x48, 0x5, r12, 0x0, 0xffffffffffffffff, 0x1}) 15m53.944958856s ago: executing program 0 (id=39): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) (async) 15m53.791851836s ago: executing program 0 (id=40): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) sched_setattr(0x0, 0x0, 0x0) (async) pivot_root(0x0, 0x0) (async, rerun: 32) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) (rerun: 32) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x48) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') (rerun: 64) lseek(r4, 0x80, 0x1) ioctl$TCSBRKP(r3, 0x5425, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380)) io_setup(0x7, &(0x7f0000000780)=0x0) io_pgetevents(r6, 0xb, 0x0, 0x0, &(0x7f0000000100), 0x0) (async) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0xc, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe0000b0000000000000a00000000000007000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="14000500"/15], 0x3c}, 0x1, 0x11}, 0x0) (async) r8 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r8}, &(0x7f0000000440)=""/68, 0x44, &(0x7f0000000400)={&(0x7f00000002c0)={'xcbc(aes)\x00'}}) 15m52.8481167s ago: executing program 0 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYRESDEC=r0, @ANYRES32=r1, @ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 15m52.674136778s ago: executing program 0 (id=46): r0 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) pipe(0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback, 0x47}, 0x1c) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000100)) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) mknodat(0xffffffffffffffff, 0x0, 0x8910, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400), &(0x7f00000001c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) (async) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) socket(0xa, 0x5, 0x0) (async) pipe(0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback, 0x47}, 0x1c) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000100)) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (async) mknodat(0xffffffffffffffff, 0x0, 0x8910, 0x4) (async) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) (async) shutdown(r4, 0x1) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) 15m51.630774795s ago: executing program 0 (id=51): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0xfffffffe}}, 0x10) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r5, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x4908, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2e, 0x0, @fd, 0x80000001, 0x0, 0x0, 0x4, 0x0, {0x1}}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 15m36.210782024s ago: executing program 32 (id=51): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0xfffffffe}}, 0x10) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r5, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x4908, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2e, 0x0, @fd, 0x80000001, 0x0, 0x0, 0x4, 0x0, {0x1}}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 53.932063368s ago: executing program 2 (id=3467): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1c000004, 0x0, {[0x6]}}, 0x0, 0x8, &(0x7f0000000300)) (async, rerun: 32) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) (async, rerun: 32) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x2, 0x4}) (async) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, &(0x7f0000000e00)={0x0, 0xc, 0x5, {0x5, 0x4, "6d4c90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x200, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) (async) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) (async) sendto$inet(r9, &(0x7f0000000800)='-', 0x1, 0x2404c094, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) (async) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r8}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) (async, rerun: 64) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x80000000, 0x8, 0x1, 0xbe22, 0x6}) (rerun: 64) 52.846660664s ago: executing program 2 (id=3471): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000380)="f0b58201d5b0bf961cc6c5ed40f4e807859fa947088fac38879c608971ab3ad7d642c05ffc44c3d599026f8737d61146c45028d8dca207139de85b4e72aa2396002afdab09ca0af9127bb2f5c5654ed63c39090bd0a5625a67a5d6594e1dc702e0b0d1e830890bd70ce744c52782d66627ab84865812faa87774436be2b5be5b366d547efb45df1c3d31ef9ac43192fa1a3766bdb16f3f10257490bb7809d0c6b1140efa153f53357cc339255fe6b3c36b535cf80c8427b4aeba21a070cf673c8e59c078b6dfee77adeee94d1f276079da846b", 0xd3}, {&(0x7f0000000280)="219e0a744c851cd6b4b02def817be83a5e86f9d258f7d84d3b1ac237e9cf5599b4c144032d49982dcac51c472afd4b8edf95c1e1d4e6ce9e6b36e3a25440780062a7b79ef1864c0987a3b3e1eadb6fdd11fb5dd55b21c2a52e333da485b9a53f305b729cafb9065a3956dc167ee8c40c840d4fb4038f9474706e7cc0aa", 0x7d}], 0x2, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r2, r2, r1, r2]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}}], 0x150, 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r5 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe64, 0x9, @empty, 0x2}, 0x1c) r6 = socket(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000080000000000ffdbdf257a000000", @ANYRES32=r9, @ANYBLOB="00420100184a06000a000100b9aaaaaaaa1c00005bfe0a00", @ANYRES32=r9, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe64, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) r10 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x49, 0x4) 51.654792887s ago: executing program 2 (id=3475): cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000810000000200000009"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x1000000, 0x20}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x3813, &(0x7f0000000340)={0x0, 0xbe47, 0x40, 0x3, 0x144}, &(0x7f00000003c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) r6 = syz_open_procfs(0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000cb8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x4e, 0x27, 0xe4}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r8 = dup(r7) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r8, 0xae80, 0x0) 49.847830937s ago: executing program 2 (id=3478): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x600843, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000801}, 0x8040) r1 = memfd_secret(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100008010bd40820529009dbb0000000109022400011b00001009040000022a3e740009058bff7f0000100109050b362f"], 0x0) 46.695851358s ago: executing program 2 (id=3490): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000010000b0ffffff00010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdf) 46.509805294s ago: executing program 2 (id=3492): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0]) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000ffffffffffffffc900", "f4bd000000801900", [0x0, 0x2000000000001]}}) 46.023300358s ago: executing program 33 (id=3492): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0]) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000ffffffffffffffc900", "f4bd000000801900", [0x0, 0x2000000000001]}}) 10.602419785s ago: executing program 1 (id=3618): ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000340)={0x5, 0x6, "c76956a1b0c3f1bbcf55e5ba2d4a97450cd8e0024af9a4b33ebdac3d40359b84", 0x7, 0x7, 0x4, 0xfffffffd, 0x303}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000280)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0xc25, 0x1000000080, 0x9, 0x20000004, 0x4, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x200000000000, 0xfffffdfffffffffa], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x7000000000000) 9.959763723s ago: executing program 1 (id=3620): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303, 0x36}, "2fbc61aac78cc949", "d73cb7376ccdd961eb57c264df4580a7bf502983278b5d639eabe200", "549fec04", "a28bd07f456299e8"}, 0x38) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) 9.573483362s ago: executing program 4 (id=3623): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000010000107d2000000000000000a000000060001002b"], 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xb) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x1, 0xd}, {0xe}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000001ac0)=""/4083, 0xff3}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000002cc0)=""/69, 0x45}, {&(0x7f0000002f40)=""/205, 0xcd}], 0x6}, 0x5d}], 0x1, 0x10022, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x14, &(0x7f0000000140)={&(0x7f0000001580)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0xd}, {0x0, 0x1}, {0x6, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x5, 0xa760, 0x0, 0x10, 0x0, [{0x1000, 0x400, 0xfffff000, 0x9f4}, {0xdeb2, 0x3, 0x102, 0xb}, {0x1, 0xfffffffb, 0x100, 0x3fd}, {0x200, 0x3ff, 0x3, 0x4}, {0x1, 0x7, 0x40, 0x8}, {0x3ff, 0x3a5, 0x3, 0xa6d}]}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x24040084) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f00000001c0)={0x8, @vbi={0x5, 0x2, 0x100002, 0x0, [0x7, 0x2], [0xfff, 0x139e], 0x13a}}) listen(r0, 0x10001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@gettaction={0xf0, 0x32, 0x400, 0x1070bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xfffffffffffffeee, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd3f}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x22}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x19}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20048800}, 0x24008080) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r10 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r10, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r10, &(0x7f00000000c0), 0x2) read(r10, &(0x7f00000001c0)=""/93, 0x5d) 6.0153891s ago: executing program 6 (id=3630): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000400000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a54909e8441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce993c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1a8f2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f2466a39addc610406744a8715dbdb12de0a8e53079adc05002703e2f47ba499d0d593e3dc071fe30e0d29c69c5631fbf30c8082905d6834e82b75a0722b273fe4da1c6645e8d3913c8cd8ac50a8a0a25f98c4da5bfd14ea0ca884dba1b0eff2fd6e294e127f9d26ecbeca028d14439a41e8fd11cba79605e26b4cc4b7b6c128e3b9efc02682"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000540)={0x40, 0x7, 0x3, "83aace"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.860657725s ago: executing program 4 (id=3631): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000062000280080040"], 0x3c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) shutdown(r6, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000100), 0x8, 0x40401) setsockopt$inet_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x303}, "71adbb38f51a2b71", "bab395b7c2a6a89bfa88ad67de355826e5fe80b3b569395f89c4dfa93a3930e1", "a62a0eaf", "232d72f1d0843bf9"}, 0x38) ppoll(&(0x7f00000000c0)=[{r6, 0x2001}], 0x1, 0x0, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 5.804098552s ago: executing program 1 (id=3632): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x35, 0xfa, 0x2d, 0x40, 0x85a, 0x8, 0x7f81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3a, 0x0, 0x2, 0x6e, 0xc3, 0x14, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf8, 0x8, 0x22}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x2, 0x4, 0x7}}]}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) fcntl$addseals(r2, 0x409, 0x2) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xab6, 0x7, 0xc, 0x10, 0x1, 0x3ff, 0x7, 0x8000, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.427221223s ago: executing program 4 (id=3635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xb8) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) mq_open(&(0x7f0000001080)='\x00', 0x40, 0x28, &(0x7f00000010c0)={0x6, 0x6, 0xe, 0x2e5b8348}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000001040)={{@my=0x0, 0x4}, @any, 0x0, 0xf, 0xf, 0xfffffffffffffff5, 0x7, 0x20ef, 0x9}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 4.805500029s ago: executing program 4 (id=3637): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000100000001030000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdf) 4.512081969s ago: executing program 4 (id=3638): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf41, 0x0}, {0x4, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0xffff, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x6, [@struct={0x6, 0x1, 0x0, 0x4, 0x1, 0x80000000, [{0xc, 0x2, 0x4}]}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x1, [{0x2, 0x2, 0x2}, {0x4, 0x3, 0xffffffff}, {0x4, 0x2, 0x6}, {0x10, 0x2, 0x1ff}, {0x0, 0x4, 0x2}, {0xe, 0x5}]}, @ptr={0xf}, @struct={0xa, 0x6, 0x0, 0x4, 0x1, 0xa5, [{0xa, 0x5, 0xc}, {0x9, 0x1, 0x101}, {0x5, 0x1, 0x2}, {0x8, 0x2, 0xffffffff}, {0x7, 0x4, 0xa6f9}, {0x3, 0x3, 0x7}]}]}, {0x0, [0x30, 0x61, 0x6f, 0x23b0436f5ad0bdb9]}}, &(0x7f0000000000)=""/94, 0xea, 0x5e, 0x0, 0x1, 0x37208b79b37020e4}, 0x28) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 64) ioprio_set$pid(0x3, 0x0, 0x0) (rerun: 64) ioprio_get$uid(0x3, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.91211323s ago: executing program 5 (id=3641): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(r1, &(0x7f00000049c0)=[{{&(0x7f0000001400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x0, 0x1, 0x4, 0x1}}, 0x80, 0x0}}], 0x1, 0x20000004) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xff09, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmmsg(r1, &(0x7f00000049c0)=[{{&(0x7f0000001400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x0, 0x1, 0x4, 0x1}}, 0x80, 0x0}}], 0x1, 0x20000004) (async) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) (async) getpid() (async) syz_pidfd_open(r2, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xff09, 0x0) (async) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x6) (async) 3.911262888s ago: executing program 6 (id=3642): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$netlink(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x98081, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c841, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x2b8, 0xb0000010, 0xd0, 0x5c8f0200, 0x1a0, 0x3a8, 0x3a8, 0x1a0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffff00], 'vlan0\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x3, 0x6}, 0x0, 0xa8, 0xd0, 0x700}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r5 = fsmount(r3, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000400)=0x8) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r2, &(0x7f0000003b80)={0x2020}, 0x2020) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r8) 3.873358858s ago: executing program 5 (id=3643): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/27) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) pidfd_getfd(0xffffffffffffffff, r5, 0x0) (async, rerun: 64) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$apparmor_current(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 32) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32) unshare(0x22020600) (async) read$FUSE(r8, &(0x7f00000009c0)={0x2020}, 0x2020) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) renameat2(r8, &(0x7f00000002c0)='./file0\x00', r8, &(0x7f00000003c0)='./bus\x00', 0x0) 3.834105393s ago: executing program 1 (id=3644): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x203, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x6, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d2, &(0x7f0000000280)={0x1, r1, 0x1, 0x1, 0xa, 0x7, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea000000000001090800000000000000090400000103000000092100000001220700090581030000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503002413c4cd708657c9a70000000000f7894f3d748db20490780a010101e00000014e200000001090786202000180"], 0x0) connect$pptp(r5, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = syz_clone(0x623f, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r8, 0x0, 0x48010) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22d81, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xa82, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r13, 0x40047438, &(0x7f0000000180)=""/246) writev(r13, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f000000b880)=[{{&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007b80)=[{&(0x7f00000006c0)="88da5d4e9360e32acd6707c8c829921c58197dabf7df3c42129fc3553f2913", 0x1f}, {&(0x7f00000012c0)="90829e377ff4567178ca20f53964692c600fac25669aef9c22a6a4f83a56223af9a2067fa70a6d86f0a04c33f75f415a120400066c4535eab3fb59a8443b1a362e6ab81ba8", 0x45}, {&(0x7f0000007600)="e75d0e6feeee00046447cae0167893d8a9fc00e815dc38245e25b6eb1f8bbf036f2b240dfffe70444bdb41de8703905b4d943be9aadc5ad98f3c6b7033d37cf3df4e2771ad471d3f26f0d010df", 0x4d}, {&(0x7f0000007980)="0ba0a1eb8046776c210d194bd4c715eb703d815cf89e7c166492783c9b2d1c52b265dd85dbe9d40976d19e0af9e0198b053bc6c41d07aad9227850e1177a36c9582b487b595d164cd561b044516775056d855bcd94627b91293c51065a7a3d191572896cd1c443b24503525cce134c7f78b3fd98d6236af34100fc92c341037ff798f28c8ffae43d8987902573ef8fe4c7a80ba95074fad281048e72a9f795aafe", 0xa1}, {&(0x7f0000001380)="26c216f25d959fcb7df6a972f3d1de852a784b884b0afdee556c04", 0x1b}], 0x5, &(0x7f0000007f00)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="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", @ANYBLOB="000000004117caea73b2400000370001000000fdffffff9457950b154cec921e9009c708634b69cfcbc946c5df47e13a1edb53d192067f1d8406ba50b0821813d88cbe9f807045bdf2600300000000000000746e924a103745e02e4ba00c9654b0e0090000000000000029b0d006914433d5c78379e20ae4bf9306322c5f9aaa2d542bac99ddb36afe3e7cf6f91129ece4dd01d667f7440d4000000046", @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r12, @ANYRES32=r9, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r13, @ANYRES32, @ANYRES64=r2, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x4006}}, {{&(0x7f00000076c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007800)=[{&(0x7f0000007740)="cebce8f12f9857643cd4483ff52585411948bf460eba1597dcb2320414dfee25da992f77367656df23315ef4be3402e7249fc5fd754ee60f3abd0092562ff7c2c132c450e8c85420d95ebcc95738f8f74bb3b874e10fff217d2a0c5724b2e933db3cd3dcc201d3f97bc681615992a1cff76c324941459a4c9b7dd8cabf1775068d4278b985eb026941e3", 0x8a}], 0x1, &(0x7f0000007a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r8, @ANYRESOCT, @ANYBLOB="000000001c0000000000a44088a98e86b6e8d185e2b60d5e000100000002000000000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x10000000}}, {{0x0, 0x0, &(0x7f000000b580)=[{&(0x7f000000b080)="4118eebe0f50a846fbe53dd4eca97aa0ea20d37e8175dbb66cca7d96f180f67c03ce063b7330a5fdf16c84cd17e58f78e61fdd1a4f99114288276a9dad52e0d4898ba612eb78b139ef74848566a1bd1a7d58c19e5f90f2b38d225ce2bffedd629e32b2893cfc8c97af62c8e809446fd4e4998ce59e9c23b8a0f7d6b62997bcbe652c65f995c835234f352fbcc4a7e37b035de1ef2b3b9122b176bfa99f30fbec589de8f68045e6e10b73ce632bf4c4bf55d9f2fd5546c3b5f861faa5", 0xbc}, {&(0x7f000000b140)="d009fcffb49eab331e7cbecae74c547fd7cefe959fdd258f22530820b1d66e0e4294ba5c866f34c64b1b7936215844c8378a05e51a06e69921687158090a2cf4c0f2113a7eedc692aa9321f6a50461d2eba0beedc2148be970252c15d3ea51e5c28d810aa5411ea15b099b65638ed0340ac8c21c22bb75026019275ab9f49596de3d2b530e6483a3e5d5e4bd4d6e514aeed4a3b10465bd7e9325f6687a051eb29979e0e555db5cf8b5f0e52085522ab3b4c32b57f6b220ffb49feaa9fe1bf634ef37c5b1c45a2a7006d22c2becda1fcd10225e7f7a5a2c57fd9edcd283acee7c80cbdef1dcda02051b7ca5cf1d9f2a9065d27d527f212c08305dd0", 0xfb}, {&(0x7f000000b240)="41d94e6de3bba22f2b3a8ced943f78eb1bab86f7796a2c4994bb9ca68012eb914bfc963601fb9872015d25d17bc31894748820b09c15fdc2f7593dc2ad52bd5d319611f16fb4ed584936393fce6f4b56f1ec8acc5c5625cd74deffe542af8891ad85376ba5489b6f5cd8519803a478b703db6d4603a80997c044057a004e07bd5ffc868c33cc0d8e372eb62dc42fd32eb5bcd9f1cc7acb8007eff29354397332d10d8b07c261c1540e04797862ca55237fbf9cba4d5e67cab712647f6d7c120648a6b682ca66ca26571df12024b8c0e3aa6f1b0e15e0015d6c6cf82e3dc9d83ebaf4579bc9706af20c654671226238256908", 0xf2}, {&(0x7f000000b340)="7c506cccb5923ed8888e1b7d8d2e9884068e7badc3b89226b8712b6216bee8fac9593f52e3db84c44a6810a8da11b35d7200f57fb80bd2d63dd69274c6fff418f126d304230e9c912563499061e1be98929542a9d864b191117eb221f0ebebe46d09341cff2e9b3a73cd3351c1f587cc11f4d001925abdb02afcdd11855336004426c0ff7e2c5ab9b47be7c6", 0x8c}, {&(0x7f000000b400)="a38a173e5e0b607eb121a74b8596868c714dd3f42759972786ce3a002276aeeb2c4a689212b28313", 0x28}, {&(0x7f000000b440)="d404bdad4af485764d3d7e29a68d36b4a608424d1dc4f29f855e121cffe5e67ad019e23a536f799fed223fa9b836197bddad557989ad4761234484015142", 0x3e}, {&(0x7f000000b480)="89a8c9fa4dcdd628709f8a3cda9c6757d70282dabfe258ad6482a5785f5edab9cf31505aef7bb8ae7b", 0x29}, {&(0x7f000000b4c0)="3b25d4685f514d8399be2384b058b507afb12488ddb9fd6f32d7cd2c4c7c56e7a45ae9c40ff591dde5f4cb28d91f9fb46caec58ddaf5345e1018b3c14bd936341a7803bf8b705ecfa6879c346fa8edc2dbb35fe9dfd8b96ff2f95b888c9d39dbcf9cbb47d9a7bc553199b7271e254fa81dd249f06fe6f60b3ea04d0f979cce0ed16f7ed8e29688f5405fa61d2a61996596d1242bedac430b415118dc701297c6c311", 0xa2}], 0x8, 0x0, 0x0, 0x4000801}}, {{&(0x7f000000b600)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000b780)=[{&(0x7f0000007540)="dec1dfa346ad7b5a6edfe6fb484f0c6312537b79c22da34c74f3e496175ebc093715af2a5c0f21e42cea18ed072fbfe71674bccf3826ad10bfc90213f47164236085b31bc1baa210cc6d82875bfc087fd87b6062649a1c90f0a986f2d187f0df7c3555c6e09dcad99193115e179f45c3bda2c26e9f5366cb79104e06839c19ba8e9180629625a6a008a29ee3d7e7e5aca4f1", 0x92}, {&(0x7f000000b700)="dd7f52cd09cf1e5a366198de6b5e783cfbca421b088eb9649e946185046c5ded8ba466d64958589800c6ee184a2cb10d43c308c3f18b16e2f2eeda41976f0f18a62e300dd99cd447586d", 0x4a}], 0x2, &(0x7f000000b7c0)=[@rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, r10, r10, r8, r3, r11, r5, r0, 0xffffffffffffffff]}}], 0xa0, 0x4000000}}], 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f00000003c0)=""/60, 0x3c}], 0x3, &(0x7f0000000500)=""/132, 0x84}, 0x8}, {{&(0x7f00000005c0)=@caif=@rfm, 0x80, &(0x7f0000000480)=[{&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/162, 0xa2}], 0x3, &(0x7f00000023c0)=""/4096, 0x1000}}, {{&(0x7f0000000a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a80)=""/174, 0xae}, {&(0x7f0000000b40)=""/127, 0x7f}, {&(0x7f0000000c00)=""/224, 0xe0}], 0x3, &(0x7f00000033c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000d00)=@rc, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/50, 0x32}, {&(0x7f0000000dc0)=""/185, 0xb9}, {&(0x7f0000000e80)=""/210, 0xd2}], 0x3, &(0x7f0000000fc0)=""/237, 0xed}, 0x6}, {{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001140)=""/141, 0x8d}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f0000001200)=""/80, 0x50}, {&(0x7f00000053c0)=""/4096, 0x1000}], 0x4, &(0x7f00000063c0)=""/4096, 0x1000}, 0x9}], 0x6, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) 3.660129767s ago: executing program 4 (id=3645): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r6, 0xb}) r7 = dup(r5) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x8400, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)='/pro\x0e/bus/inpu\f\x00\x00\x00\x00\x00\x00\x00rs\x00', 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x104, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0xb}, [@IFLA_AF_SPEC={0xe4, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x38}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x0, 0x0, 0x7}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x4}, @AF_MPLS={0x4}]}]}, 0x104}}, 0x0) 3.356870821s ago: executing program 5 (id=3647): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000b07cbefa12b5b5545014b71a94b9c30c98fe5e2d5fdce0b02f7447075ce405cc5d96203b185e4df5918f6200eed6e0ea3c08a6da8ddf40e5cf887a3f4885d357979cac85f29e8a46f0c7e390606b6ed7599295c96a68cf6bd59880459bfacfab3c362eb946d53299968fd414be4ee3f38a48dc", @ANYRES16, @ANYBLOB="11032bbd7000fbdbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000080)) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) keyctl$instantiate(0xc, r4, &(0x7f0000019080)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\\'}, 0x19, 0xfffffffffffffff9) add_key(&(0x7f0000019100)='big_key\x00', &(0x7f00000191c0), &(0x7f0000019200)="7314098b74303fc187a3dc0028cb91ab552c632b3e67d005a1b4af3700d983c0dfdd40d068925f2ef693a64480c928bf2c00ae0b4cc42a9f22b27c142f95448ede4b8a53f7df4284db171c8d6ae910fd9a7f458fc3173d6688f71499b6eb763f179a01fc8df5be4e42e449851822ec110308c15f4a950dd0e9e043d2d252df213b08dab35a7d1284a20a47e4c8f019c0d0798a5239c87fbf9a934b54505975673fc9acd54d9c72dc962196fad5dde872007e43e00d036b6879ecdf66fa2fee1b12451b5cd55c9e0b5d5165f5477bbab486ddba67f89f574038ff9b6d26c5524c7c6d", 0xffffffffffffff84, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x96) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x26) 3.218416385s ago: executing program 3 (id=3648): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000100000080040000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdf) 3.123982352s ago: executing program 3 (id=3649): syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005219e8089b69bd9c2a76000000010902120001000b00000904f500000804508c53fe1aea91c2f7d484406b33039f71b57a5eeeff43d99408073124102c544f4a63fe20c44ef953479042d6ef2f488da1fc6a7722525ce2aad95305f32dac5dcd9bcec2cac7ef2a0a4ebb66db10a69b4dac60f603ed6e5c6fdc7fd8ecc4bd1e5395f7465bbfcba029e451c13cf48915ebb578a88984e5e7b9205400328e714ce7d97503f3da99a9f4592935b717bc8e5fcce347e8f6185197ea77b2ea8dace1d36e3a3034731f914e4c69deee7ade575dc21c52ed32fdbe628c4c6d6fdb7159cc191a8e"], 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7f, 0x3a, ').', 0x3a, '$)#/@', 0x3a, './file0', 0x3a, [0x16, 0x4f, 0x43, 0x46, 0x46, 0x4f, 0x0]}, 0x35) open(&(0x7f0000000080)='./file0\x00', 0x80c1, 0x3) 2.291376325s ago: executing program 6 (id=3650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaa0180c2000000080045000068000000008106907864010101ac1414aa00004e22000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1000ca9078100000080a8000000000000fbc080a0000000200000002012202080affffffd800000101fe07f9893132a91e1414400000000000000001000000000000009a000000"], 0x0) 2.19984478s ago: executing program 6 (id=3651): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x831, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x78}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008800}, 0x4) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x831, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x78}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008800}, 0x4) fanotify_init(0x200, 0x0) (async) r3 = fanotify_init(0x200, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x28, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @u32=0xbf}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4}]}]}, 0x28}], 0x1}, 0x0) (async) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x28, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @u32=0xbf}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4}]}]}, 0x28}], 0x1}, 0x0) r5 = dup(r0) fanotify_mark(r3, 0x1, 0x48001059, r5, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r7, 0x0, 0xc19) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x64000814) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x64000814) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) (async) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20000000) 2.006464748s ago: executing program 6 (id=3652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="dc040000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000009c0008809800008044000980400000800600010002000000080002007f0000010500030000000000060001000a00000014000200fc020000000000000000000000000000050003000200000008000a000100000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db71724000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e0800070034000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40002) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a790758279e2f268f8edd8f9588af5aa534d6", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000240)={0x200000000000001, 0x4}, 0x8) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) socket$packet(0x11, 0x3, 0x300) 1.650500987s ago: executing program 5 (id=3653): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f00000190c0)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18) (async) r4 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000019100), 0xe09655fc92690cf8, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = syz_open_procfs(r0, &(0x7f0000000180)='attr/current\x00') r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) read$char_usb(r5, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x10000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f00000191c0), 0x1020000, &(0x7f0000019140)=ANY=[@ANYRES16=r7, @ANYRES16, @ANYRES64=r6, @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) (async) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001440)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000019080)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=0x0, @ANYRESOCT=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x5050) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000194c0)={'tunl0\x00', &(0x7f0000019400)={'gre0\x00', 0x0, 0x7800, 0x7, 0x5, 0x7fffffff, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x67, 0x0, 0xd, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x43}, {[@timestamp_prespec={0x44, 0x44, 0xc2, 0x3, 0x0, [{@empty}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x3ff}, {@local, 0x1ff}, {@empty, 0x6}, {@rand_addr=0x64010101, 0x3}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @rr={0x7, 0x27, 0x40, [@dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1, @multicast1, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100, @remote]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019500)={0xffffffffffffffff, r10, 0x25, 0xb, @void}, 0x10) 1.648404355s ago: executing program 3 (id=3654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100009f0000fedbdf25030000005800018044000400200001000a0000000000000000000000000000000000007ade00000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x80) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000000)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000003c0)={0x28, 0x5, r4, 0x0, &(0x7f0000001300)="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", 0x1000, 0x800000008000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r6, 0x20f39000) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4000010, 0xffffffffffffffff, 0x87ace000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x35, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffe9c, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100009f0000fedbdf25030000005800018044000400200001000a0000000000000000000000000000000000007ade00000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x80) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000000)={0xc, r4}) (async) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) (async) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000003c0)={0x28, 0x5, r4, 0x0, &(0x7f0000001300)="4322ac76fd27aab4021884b143b524abf04d5144385fac73f1fd293ceede6a10020901cbeb9c657ac9f5fdd4181fbf3bdf063a842386ef075ed60e44a4e1e2df7e5ccb5c1e6d341e00b86a558cec58aa7ecf7be80d4b6ea9997b1a1640b7a7ff0f3af4ce45cb341ba0e8517b860eaafe303969f489f37f15d6f08f85946a28b11f69568982658fcb51e173a3d58c5798e93ca57cc66582e3fc8c14f16ba668802711f74523423108d8afcdbc47e6a8f09b94765fb5f044a6498e18f862a0fb22be25dc8f5990fda697247ba6ba8b87a59e6001fad9eac432e974bab662106f20f7b0a2f16303beb597c48576bb05a9f3bba4991e534542515dade470099ec3317b1ab3a7894d7f6295fe0625f9a47b52f2d74808e680d78ad21b4946fcb2b7b2e4a3e3e68fe92c9e68ba574bd67ea75241553c6d9e56cba6a0bfe71c9cebeeff6bef4dd60e3bd6efe25d7a8cdafacc057e0746b223603ad68afa7f6e4df9d09694b8bdc7a523c30ce1620c6746188e9505ea279828575e6be64090aa5e24a3a13e3659734ce38bc9d2f9d49efcf9e754d8a01b23c86466a1803d62dac5239baa9574b4b2be52dfea9a81746703ba7793face700b73e0f8f79a9d61366da0506e0d307b5f3e2d3ca15eade8c2ad3af4859976060a8c82ab22c6c93699ac8dd28522d36ee10fd0a15f10c177d59896fec1077ced290328a51a6ad2503688f8c3efdb188cadb16b258b3822a3fc3785ed126931ed79108c99c956ae33d23b627d1b6ff51ef8fd6dfb9544f9276b47efc328e347dc41be1863de99d46abf544f03b7d51cda8160dea3fd1e684823c24c57159364c198d703a610577939533b25980f272a7d43dace143cef0fabc22471a5c1e4e5fdf5275197b5090b9ffa45b029919e06b613348dd12760e315a9c91d5f83a779ba7cf93ceae9a0e13e797fded866b0a3fd3990fd826659eb92efc71ecd1979105cc1fe2cfb7965b598b41eaab987cdee9cb5d6a8fb99e0eb19e844189e80a776250552be421392ed337c2dd6eb14eff0ff88701c4dfc043a6d0b260325bbc2c850354691b49eec24b2e37b011726d3fec1116b35317dca378f971c30e85e845277429df6126f19501b059c33a8ab3746c0460a0d3231eed155ed5ec3071b7b71eff7e2c29fe50affb0897cb610bbd8853840457dcdfaa21e4b26c4fe43be5b6f3a2ec6a22f01ab02d952c1857ed330460b4be656653b0f5e9e33f8b7778ae7703363c3b159e7583856a875db248965c7cc8cdf79ed036be7db73556a003472e747ffb295b71ccb72f54fc8b8d02bcc471a6d19734ce3576df6562199cad30d60d959e0e998b562d137d801e5c139dddb711cdecdad3fbe71f587c40c3513e1da7096780ce7b9ddb601e972e8dd87150c668c2f76152ac4b50a13c8ecd6bdcd396714322ec1adbb30767b0e87267b4e1f608bb69df39411f4430a35f1642dcb1b2c6dfc376d9ef68fffb1b66fda97701d0213c84091b842213d504dc8b530f9fa246b017b30492aefea53fec78421afa681d449207b781737c5ae3c69eab838cdf255d31f88ed1fd6e81cec9aec2d68244eff10d8ae97e8041dbf1cd77f20bcea4230da9675d2e780056930d0bf479ee17fa49d98390307d142098ba5433289d4da21acc57da5d887c25dd4330efd52db2f6ac1ffeccdb030348d26cc5ee18346816ea93e0b5b0b81ea3a31f0ad07c21c0c9c7e528e5a9947ce2dff537c7643e97b6c628ff63fdec52809bb52de5c74c4ef195f956c6b6156717de3aed2c727f64adf0b0d4f7bda67b243a3c66f3d17b9cc56dc50fcdb27cb8c38793b839fe103b715aa61567b610091f9e0ddecfd0db73514b214d6ee466cb5050374b1ed295e507f409f2ba6a73221c6c06915b2343368309205a1ec0cf33f2099907b220ed35864504a37a14c16f9d61a719a6862705c8a720407e772714e2abae2ac5b47b93f549b43805ace2ec563ca2a0ab10e8e3f308e9e9d904e596ffc4cf26fa4519d91082054a8f4db8d09824e08723ed4a81f01e6aa083b0047c2f02476630fa855b4822c477dc0fdf73b7f747d319af0e1e4b56660b696427bb44efee34a955ffb72b412597618bf61145b0c53437ce6a440f0e650936226ba397d73bc865144bbc4a2ae16b237dd56a53a36b3d99f0f4164645257f1a6e8d1bed4dd6e997c9df113ac4074055eac5ea38e1d3b74607b532096e258a114ed5787560616f1ced77d4dad2199ceb3a5475627ede1fbc7fa8fea7ff556c9ef5cb245eab29727e3eb9c489a5f53b25c1c826e4ea7c00cc9426e5e0f0144de499690202ec87e9e66848fde59c2e0a2fe7772220499957a1d7949cc08942dfcc37b0c7f122b7f5a03ab33f941abbee7c87f39ac6ec4d0141f4ad371db299bcdbf2ba13b45eb39a0ab0cc7fdf2206e982711e964af8b10a4cb33f654c55adbdf65c41bb75856f39dee843311bf4bdc339e1648e4e51ebd2ae876de9f104c4b5d7ee9026a9f005085cc50c1c6ecb563f56ce9e8170db081b9d92c742686a1b1e4636712e4cc0694945ce691b00da25db3fc27d30befc48a755b99aa8d93fecece9fa67b8ba3e29ab1b749f6c08326d9977fd9156042a8e4736593c797ac438d04300a16c539d5c0a923bd456ff68d45d1a3570ff5e9b022d43f9cb8f224eb5b2eda28a8bae8892a5feecdf983097058bf40492789010bb57cac1db9a4906e98cee96a2c7725784b83a37cc9c80da7bfd4a4f59dd23f7c41318f3713648b464dabf3bbbf5946ff3ff222f2a338c126613d19d5247756b786a1031b685170f728550a9860141e92376ceb85734af009db36ae94897f818260a4ac7cc4639f5de96c81f7864430d88e627c8508e7c065f53f390bf384b8a8738e5a7470c2ac97be9ef6b4acd93b831491622ee0f653cd1f5be25aa391584a372e853ecb46176e58f4f678dc210ad20e20d5570c5f9feb75e68e00bad698f72516985c8ae6a7d3ba3bbe391293d4fe2f36b721586946c3f6c5e287b050fbecaf60b96521a9c24e7eebba7416e3d258499e7230af643399f0badb38cc37d823fe8bda41ed906661116dad98d07d9017fd83532a6b67c52a3c4c7331c054650774127d336748be6371af30563b8785d7a4241d2b7faec3dff9aac7762a0d01060c09349151b23a0505aad3a9f6523fd556ec2593fac213509926cc7cbb64adb40c55e535517cde1d059eb2ba139cab01dc6450e075069d004f7cecbba3f50801edaead4ff7e3115c32b46ada473970f1481e9a217263e21b30e6b0e0185b644b27e0c55982a6512fad8420fd11fbe84ce726b300000000f3a1f60a3e5cc140c7fdf696b3f61cacea48f4d0906a5ad7e87df2675922779c0ac92625a7501f4355b809622b47de0ae1a7592df56c7c5690800c464a152f4b20027b138d8006a85dcda5381cbe416301678f6056c4701972d5b5d4d00170b740f89147c2f91326758a62171ac117aa532f6c568af6f92a25b097d0c3a35ed6033414073f4c2537a8abe3c1d61ea3991f0ed3d3703112962c65fad72e145a2292c546f4fa33f75ef551020adf378a30ac1e8391f9f4e1ddf937afd2aefe5e249ef2a9934f8d5319ec326c9b6444014c5c09396dac14e9f548f30fa05087b80972994b8a8f529df0f6934c3a0373e25a0b703a7f10f437ee9cb7136538a472af2c655b19aa7c927e48f194a2781befe87b6023ee90838d9acf2a797c9e9bb781a12982ffc31522024a77d766d71bcf0e5ba9bfdbd1808ca358e61a3743229bac2a3d8ab3d186c5c78ebf064a11902c9da414f8f3efae8ad8b67da3fc447c5e2cd9e8f68f1b2d5c673f896d125fb7a844727bb6ca5955cd1255ab41836f8307dba01911f406dbf2e6d98569fdf26c65ac54eeef891d231e7d81461e14713b513d8ad9e90c9fa7093695b7403cc5bf7bbb34ff72dec578c30f5c78a52c7546fdb46cf992b4514e59e8520cb4e339f7bcc2954e2300cfd6132abd1150981a1307e14606d0b098b916f0015228a1f203c2be0e1d6cf481e2927346e3b8df34c58732f4313db73a75a1ebfaf29d49b7b58290b5ca17152c4627935aac4274187e2a4d2e2d4dde92868c8e877dd7c97382ac13b456945c47fc86134b6811f9d93afeea3e415aa0f32de5d7cb38ab73bae973ca59af5d87c4cd6e11aeb472be9a9b221f3e9b1e3650b1ef52d6ad1457f360284875cdb987fa760445e431f0c735d654b30d98a15d1b799922ca5e0d6dcb4e8ee983f946066083328267e6cbb41221b885afd0027c0a23cb7c4b267f3bd3b39e53a51a3940d010c17c0b4b8c113e3577bbb4c54634d7d89e3899be90bfee8cf051e3d94f1caa4b787e99eadc778697cebff7aa55624cf40ebbd6a1d326b6bead26ef19d941e1aa504255fc2957b64d25548354116728784087c549ed9817bff5345077c237ab1b539b23aac44c4716d921835e5e66a37f5f14c6c748a7b81acb8657679bf9f37b7bd482971e27512c8c1facffe023afe4ed7ca798a3156dbb950a5b79c16b942b1b828fdf9ee4172d999f2fb5c80704574bb7034357ead989849e80618aafb9de4cbe7c502ab3f2aae2c972f8cd7c9c1c794ebcbc98c8e304e4b05dcd7373dea71df209e596519066fbb8260dad188d254ac1416d31dd443fbf5d99a7c3f22b94fc82faee22c3b731df783b9baa556e2c770105795debc9e67ae9376b90a08aa5ebf3e3db42ff43f568916af5cd56f79d31520403e7cfe4eb4423aee63372866b728f02f5b6446108fb3700d82579e9ebe1e5f99538ef1731095a54f533d6dfeb879d006a7562de1573622de22b14850504a5a7d78dfe4303d86e6fa65e2d3db6aa1d26175f62bac0fb118d281733b3096b7d27ab38102a13ea9b3c19f46105425833605f77d8daf5ed893b9931fbe1361716752c2855999abd0000000001000000a66446b76f6903d7b2cccd401c35456cd33b53199d359fbe961f065514792330c4b7ceb67103e1ee23f2b76d67a1c47fe82ab559503b04305567839571e5fc37f976b42bcb78675ffef9b8de13a41ae7d22f0f451624e07a5546f422a4cb72725c32f54092c11d9a8782d8c9ab1a24c7b652f1490d4ed2dfeb8bb1fc2eda2a1f9838d0b7faf19d71f3f3b0623e9651e7bdb6813089f7005ba0523a19f589ab67ec3085a776248eedbd1f9a2a0baf7d23215b902a63efcf66573c7dffd65ffd839d90834f139611c3cf18c509ab224b7281bef93e162167e7ea2b6769f9de034bc1795102ee5d50676def4e801cda46c91d7c4df88f97d0293e00fed0dc1734d13ac03a786f6b73bc40adc8ad6e74ad40b16daced7089348a2e1967c63398b11aef6b597b6ac9c2be6b96002a04f9669fd75c5be3242c98ec4a9db3230293bc460ec7c999707dd4a4600a2f8b99c930b33a3ccd9f0454fc06df60836898f1f0d8632259c238c107aaec4d1371bfc144c12e19cbbd2397a6cdf755f64ba7533716d19be843d973498a05f938c98a5325eb610569adfc39b0fa0b9bb6a28dd292d3e2acd944e8bbd779973cfd8f872201ac6c658e71705d9e772429af3bb4b09a7106fc9d906d595761d04d0ad3f774914f88a0775334ffda3471b54c388f1694db7476743da01e1c9fe7c350e053e4bfe94557b240192066aabb6323255f0762e3ca87f2afd7a40b3356212c1356e21bda78124d38bc7344e12ce70cf5eb251fcb66c9cd0fa73084451856319b7a3c042e429aa36aa57db45dfb848a622f46519aff37d433bd191a2127e3ceae043800000000000000", 0x1000, 0x800000008000}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r6, 0x20f39000) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4000010, 0xffffffffffffffff, 0x87ace000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x35, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffe9c, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]}) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040)) (async) 1.352056168s ago: executing program 3 (id=3655): r0 = syz_io_uring_setup(0x236, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0xfffffffe, 0x338}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x1, 0x0, 0x9678, 0x0, 0x0, {0x1}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdir(0x0, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41, 0x4}}}, 0x10) umount2(0x0, 0xb) io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) 1.350868976s ago: executing program 5 (id=3656): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) 1.212573642s ago: executing program 3 (id=3657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x607, 0x0, 0x0, {0xa, 0x0, 0x1a}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x10000) sendto$inet(r2, &(0x7f0000000040)="568cb807d7db0ddbf6771eb31fa5453528b66d8beedfba33b90a39fe9e890a745f3de0158b618387480014cb23060eef", 0x30, 0x0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x487, &(0x7f000000e6c0)={{{@in6=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) 1.109812845s ago: executing program 3 (id=3658): lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x3) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r4 = syz_clone(0xd088200, &(0x7f0000000180)="85a9312429c938552df11cda4aa53a1c9dd2d64f8e2a2a81c1f4e36326b0919d72b6a0ed55fc837b5abee893a48503f39c21a3f6862e42bbbec363b26718ce1a8e703b55c13c93ff0287b669351f0a1e6b19921a854ed3bed3", 0x59, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000380)="0c641a6a484770f30381eac6") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r4}, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x2a}, @TCA_CAKE_RTT={0x8, 0x7, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$packet_buf(r7, 0x107, 0xd, &(0x7f0000000a00)="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", 0x1000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) 720.212975ms ago: executing program 1 (id=3659): syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (rerun: 64) write$UHID_INPUT(r0, &(0x7f0000002100)={0x8, {"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", 0x1000}}, 0x1006) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@delqdisc={0x7c, 0x25, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0x2, 0xfff1}, {0x6, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x6, 0xfffffffb, 0x725, 0x4, 0x5fe, 0xa, 0xfffffff9, 0x3}}}}, @qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xf}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0xe}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006750d920e70451668aba0102030309021b00010000000009040000010202"], 0x0) ioperm(0x1ff, 0x1, 0x81) (async, rerun: 32) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x8528c000) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x4000) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000080)}, {&(0x7f0000000180)=""/111, 0x6f}], 0x3, 0xfffff0f0, 0x5, 0x8) 625.280209ms ago: executing program 6 (id=3660): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x7b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xb}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x38, r2, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}}, 0x40000) 101.07352ms ago: executing program 1 (id=3661): r0 = syz_open_procfs(0x0, &(0x7f0000002440)='statm\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0xfffffffffffffce6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x916}, 0x94) (async) socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfe, 0x29, 0x0, @empty, @loopback}}}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, r6, 0x0, 0x154) close(r1) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r8, 0x0) (async) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) (async) r9 = syz_open_dev$loop(&(0x7f0000000340), 0xff, 0x100) fremovexattr(r9, &(0x7f00000004c0)=@known='system.posix_acl_access\x00') r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) accept4$unix(r8, 0x0, 0x0, 0x80800) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f00000003c0)) (async) r11 = syz_open_procfs(r4, &(0x7f00000002c0)='pagemap\x00') read$FUSE(r11, &(0x7f00000040c0)={0x2020}, 0x2020) (async) read$FUSE(r11, &(0x7f0000000400)={0x2020}, 0x2020) 0s ago: executing program 5 (id=3662): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x3) (async) lseek(r0, 0x2000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x2, 0x0, @local, @multicast1}, {0x16, 0x7c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000010540)=ANY=[@ANYRES32, @ANYRES32], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000010540)=ANY=[@ANYRES32, @ANYRES32], 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00007195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) kernel console output (not intermixed with test programs): [ 958.797188][T13107] usb 2-1: USB disconnect, device number 48 [ 958.803669][T18784] loop5: detected capacity change from 0 to 7 [ 958.835798][T17006] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 958.862291][ T5892] hid (null): global environment stack underflow [ 958.871457][T18784] Dev loop5: unable to read RDB block 7 [ 958.886520][ T5892] hid (null): global environment stack underflow [ 958.906773][T18784] loop5: AHDI p3 [ 958.916451][ T5892] hid (null): unknown global tag 0xd [ 958.921946][T18784] loop5: partition table partially beyond EOD, truncated [ 958.943550][ T5892] hid (null): global environment stack underflow [ 958.968044][ T5892] hid (null): report_id 1005050350 is invalid [ 958.993981][ T5892] hid (null): unknown global tag 0x92 [ 959.005887][T17006] usb 4-1: Using ep0 maxpacket: 16 [ 959.027369][T17006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 959.043416][T17006] usb 4-1: can't read configurations, error -61 [ 959.086361][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.093801][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.126380][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.165304][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3333'. [ 959.174542][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3333'. [ 959.201520][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.227449][T18789] macvlan2: entered allmulticast mode [ 959.232868][T18789] veth1_vlan: entered allmulticast mode [ 959.245701][T17006] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 959.265400][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.295560][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.314321][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.349437][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.375707][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.383136][ T5892] hid-generic 0003:0DFC:0101.0049: unknown main item tag 0x0 [ 959.435761][T17006] usb 4-1: Using ep0 maxpacket: 16 [ 959.444534][ T5892] hid-generic 0003:0DFC:0101.0049: global environment stack underflow [ 959.463125][T17006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 959.483073][T17006] usb 4-1: can't read configurations, error -61 [ 959.491361][ T5892] hid-generic 0003:0DFC:0101.0049: item 0 1 1 11 parsing failed [ 959.514373][T17006] usb usb4-port1: attempt power cycle [ 959.521390][ T5892] hid-generic 0003:0DFC:0101.0049: probe with driver hid-generic failed with error -22 [ 959.664259][ T5892] usb 3-1: USB disconnect, device number 52 [ 959.689592][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3337'. [ 959.816180][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.916827][T17006] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 959.976175][T17006] usb 4-1: Using ep0 maxpacket: 16 [ 960.033039][T17006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 960.077524][T17006] usb 4-1: can't read configurations, error -61 [ 960.266506][T17006] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 960.312570][T17006] usb 4-1: Using ep0 maxpacket: 16 [ 960.329198][T17006] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 960.356090][T17006] usb 4-1: can't read configurations, error -61 [ 960.378811][T17006] usb usb4-port1: unable to enumerate USB device [ 960.441003][T18822] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3342'. [ 960.620334][ T5892] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 960.755901][ T5892] usb 5-1: device descriptor read/64, error -71 [ 960.795077][T18829] input: syz0 as /devices/virtual/input/input122 [ 960.856378][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.900123][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 960.909549][T18831] openvswitch: netlink: IP tunnel TTL not specified. [ 960.921479][T18831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3346'. [ 961.045699][ T5892] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 961.097717][ T43] kworker/1:1 (43) used greatest stack depth: 14472 bytes left [ 961.315696][ T5892] usb 5-1: device descriptor read/64, error -71 [ 961.325719][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 961.426156][ T5892] usb usb5-port1: attempt power cycle [ 961.495930][T17006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.516392][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 961.553961][ T24] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 961.581489][T18837] netlink: 'syz.2.3349': attribute type 10 has an invalid length. [ 961.589778][ T24] usb 2-1: config 0 has no interface number 0 [ 961.597314][ T24] usb 2-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 961.635682][T18837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3349'. [ 961.732152][ T24] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 961.736196][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.765325][T18840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.775697][ T5892] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 961.810198][ T5892] usb 5-1: device descriptor read/8, error -71 [ 961.817166][ T24] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 961.851548][T18842] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2850732983 (182446910912 ns) > initial count (37057207232 ns). Using initial count to start timer. [ 961.897904][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.016664][ T24] usb 2-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 962.065739][ T5892] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 962.113080][ T24] usb 2-1: config 0 interface 41 has no altsetting 0 [ 962.116433][ T5892] usb 5-1: device descriptor read/8, error -71 [ 962.142637][ T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 962.152116][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.163666][ T24] usb 2-1: Product: syz [ 962.168443][ T24] usb 2-1: Manufacturer: syz [ 962.173121][ T24] usb 2-1: SerialNumber: syz [ 962.186257][ T24] usb 2-1: config 0 descriptor?? [ 962.192582][T18835] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 962.201010][T18835] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 962.225732][T17006] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 962.266020][ T5892] usb usb5-port1: unable to enumerate USB device [ 962.295850][ T5945] usb 42-1: device descriptor read/8, error -110 [ 962.335790][T13107] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 962.386941][T17006] usb 4-1: Using ep0 maxpacket: 32 [ 962.396212][T17006] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 962.418008][T18835] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 962.419998][T17006] usb 4-1: config 0 has no interface number 0 [ 962.436213][T17006] usb 4-1: config 0 interface 96 has no altsetting 0 [ 962.443552][T18835] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 962.455234][T17006] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 962.473265][T17006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.488221][T17006] usb 4-1: Product: syz [ 962.492859][T17006] usb 4-1: Manufacturer: syz [ 962.495719][T13107] usb 6-1: Using ep0 maxpacket: 16 [ 962.498629][T17006] usb 4-1: SerialNumber: syz [ 962.515325][T17006] usb 4-1: config 0 descriptor?? [ 962.533028][T17006] legousbtower 4-1:0.96: interrupt endpoints not found [ 962.543547][T13107] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 962.582637][T13107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 962.650456][T13107] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 962.662916][T13107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.717436][ T5945] usb usb42-port1: attempt power cycle [ 962.761297][T13107] usb 6-1: Product: syz [ 962.765528][T13107] usb 6-1: Manufacturer: syz [ 962.779020][T13107] usb 6-1: SerialNumber: syz [ 962.789123][T17006] usb 4-1: USB disconnect, device number 49 [ 962.873887][T13107] usb 6-1: config 0 descriptor?? [ 962.888378][T13107] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 962.912703][T13107] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 962.945972][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.066358][T18835] netlink: 'syz.1.3348': attribute type 2 has an invalid length. [ 963.080938][T18835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.103258][T18835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.128329][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 963.141439][T18835] tipc: Started in network mode [ 963.148990][T18835] tipc: Node identity ac14142f, cluster identity 4711 [ 963.156163][T18835] tipc: New replicast peer: 0.0.0.0 [ 963.164318][T18835] tipc: Enabled bearer , priority 10 [ 963.185087][T18835] tipc: New replicast peer: 255.255.255.255 [ 963.290727][ T24] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 963.330328][ T24] usb 2-1: USB disconnect, device number 49 [ 963.348120][T13107] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 963.356553][ T5945] usb usb42-port1: unable to enumerate USB device [ 963.370532][T13107] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 963.980048][T13107] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 964.001802][T13107] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 964.014366][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.081509][T13107] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 964.164187][T13107] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 964.323714][ T24] tipc: Node number set to 2886997039 [ 964.329298][T13107] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 964.450014][T13107] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 964.459162][T15565] Bluetooth: hci3: command 0x0406 tx timeout [ 964.533641][T13107] usb 6-1: USB disconnect, device number 42 [ 964.552792][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.969449][T13107] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 965.035846][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.125756][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 965.155711][T13107] usb 6-1: Using ep0 maxpacket: 8 [ 965.171984][T13107] usb 6-1: config 36 has an invalid interface number: 44 but max is 0 [ 965.200369][T13107] usb 6-1: config 36 has no interface number 0 [ 965.218017][T13107] usb 6-1: config 36 interface 44 has no altsetting 0 [ 965.239525][T13107] usb 6-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=ad.ea [ 965.258691][T13107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.278796][T13107] usb 6-1: Product: syz [ 965.287168][T13107] usb 6-1: Manufacturer: syz [ 965.292545][ T24] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 965.305724][T13107] usb 6-1: SerialNumber: syz [ 965.310351][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.324382][ T24] usb 4-1: config 0 has no interface number 0 [ 965.347533][ T24] usb 4-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 965.368090][ T24] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 965.378108][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.387219][ T24] usb 4-1: Product: syz [ 965.391656][ T24] usb 4-1: Manufacturer: syz [ 965.397200][ T24] usb 4-1: SerialNumber: syz [ 965.409526][ T24] usb 4-1: config 0 descriptor?? [ 965.580128][ T5885] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 965.588303][ T5892] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 965.743974][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.745681][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 965.759810][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 965.774529][ T5885] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 965.784335][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.806867][ T5885] usb 3-1: config 0 descriptor?? [ 965.814552][ T5892] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 965.850683][ T5892] usb 5-1: config 179 has no interface number 0 [ 965.868385][ T5892] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 965.910752][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 965.920379][ T5892] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 965.922086][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 965.968984][ T5892] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 965.991076][ T24] usb 4-1: USB disconnect, device number 50 [ 966.053724][ T5892] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 966.069005][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.120236][ T5892] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 966.184666][ T5892] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 966.205545][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.227309][T18901] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 966.285512][ T5885] lenovo 0003:17EF:60EE.004A: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 966.476729][T18902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.488644][T18902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.529219][T18902] netlink: 'syz.2.3366': attribute type 10 has an invalid length. [ 966.541578][T18901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.559033][T18901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.579648][T18902] team0: Cannot enslave team device to itself [ 966.792804][T17006] usb 5-1: USB disconnect, device number 63 [ 966.798867][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 966.798901][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 966.858708][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.101310][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.170521][T17006] usb 3-1: USB disconnect, device number 53 [ 967.575868][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.020013][T13107] sisusb 6-1:36.44: Invalid USB2VGA device [ 968.026070][T13107] sisusb 6-1:36.44: probe with driver sisusb failed with error -22 [ 968.038770][ T5885] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 968.049301][T13107] usb 6-1: USB disconnect, device number 43 [ 968.138478][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.185767][T12710] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 968.208633][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 968.216693][ T5885] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 968.235335][ T5885] usb 5-1: config 6 has no interface number 0 [ 968.245701][T17006] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 968.256747][ T5885] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 968.280046][ T5885] usb 5-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 968.302978][ T5885] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 968.313981][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.328875][ T5885] usb 5-1: Product: syz [ 968.343363][ T5885] usb 5-1: Manufacturer: syz [ 968.348363][ T5885] usb 5-1: SerialNumber: syz [ 968.366549][T12710] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 968.417460][T12710] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 968.436773][T17006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.461742][ T5885] hso 5-1:6.2: Failed to find INT IN ep [ 968.467509][T12710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.476151][T17006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.496415][T12710] usb 2-1: Product: syz [ 968.500748][T12710] usb 2-1: Manufacturer: syz [ 968.507755][T17006] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 968.525719][T12710] usb 2-1: SerialNumber: syz [ 968.552893][T12710] usb 2-1: config 0 descriptor?? [ 968.560595][T17006] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 968.598864][T17006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.618171][T12710] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 968.632676][T17006] usb 4-1: config 0 descriptor?? [ 968.726745][T11094] udevd[11094]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 968.811186][T18953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3378'. [ 968.863223][T13107] usb 2-1: USB disconnect, device number 50 [ 968.904843][T18953] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 968.953478][T18956] i2c i2c-0: Invalid block write size 255 [ 968.964911][T18953] bond2 (unregistering): Released all slaves [ 969.067595][T18956] sit1: entered allmulticast mode [ 969.071255][T17006] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 969.177905][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.296484][T13107] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 969.369501][ T5892] usb 4-1: USB disconnect, device number 51 [ 969.388060][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3382'. [ 969.415470][T18969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 969.475676][T13107] usb 2-1: Using ep0 maxpacket: 16 [ 969.483863][T13107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.512969][T13107] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 969.542791][T13107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.581301][T13107] usb 2-1: config 0 descriptor?? [ 969.622901][T13107] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input123 [ 969.655166][T18969] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 969.813326][ T5183] bcm5974 2-1:0.0: could not read from device [ 969.837443][ T5183] bcm5974 2-1:0.0: could not read from device [ 969.874910][ T5183] bcm5974 2-1:0.0: could not read from device [ 969.883108][T13107] usb 2-1: USB disconnect, device number 51 [ 970.109133][T18978] syzkaller1: entered promiscuous mode [ 970.149831][T18978] syzkaller1: entered allmulticast mode [ 970.218059][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.371957][T18983] netlink: 'syz.2.3386': attribute type 1 has an invalid length. [ 970.407651][T13107] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 970.606789][T18983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 970.625823][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.651224][T17006] usb 5-1: USB disconnect, device number 64 [ 970.681061][T13107] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 970.717243][T13107] usb 4-1: config 0 has no interface number 0 [ 970.744617][T13107] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 970.778055][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.849932][ T30] audit: type=1326 audit(1760851898.965:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18986 comm="syz.1.3387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64c3f8efc9 code=0x0 [ 970.857618][T13107] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 971.040254][T13107] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 971.117880][T13107] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 971.191054][T13107] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 971.205717][T17006] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 971.256311][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.269770][T13107] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 971.415702][T13107] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 971.418575][T17006] usb 6-1: Using ep0 maxpacket: 16 [ 971.466231][ T5885] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 971.489279][T13107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.544086][T17006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.578374][T17006] usb 6-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 971.619864][T17006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.686434][T17006] usb 6-1: config 0 descriptor?? [ 971.708473][T13107] usb 4-1: config 0 descriptor?? [ 971.757767][T18979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 971.786645][T18979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 971.834627][ T5885] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 971.909512][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.924319][T13107] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 972.029217][ T5885] usb 3-1: Product: syz [ 972.066645][ T30] audit: type=1800 audit(1760851900.175:914): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3385" name="file1" dev="tmpfs" ino=185 res=0 errno=0 [ 972.084693][ T5885] usb 3-1: Manufacturer: syz [ 972.100261][ T5885] usb 3-1: SerialNumber: syz [ 972.121159][T13107] usb 4-1: USB disconnect, device number 52 [ 972.197726][T13107] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 972.201103][T17006] apple 0003:05AC:0254.004C: hidraw0: USB HID v0.03 Device [HID 05ac:0254] on usb-dummy_hcd.5-1/input0 [ 972.295789][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.323717][ T5885] gspca_main: pac207-2.14.0 probing 093a:2476 [ 972.350850][ T5885] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 972.367364][T17006] usb 6-1: USB disconnect, device number 44 [ 972.389360][ T5885] uvcvideo 3-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 972.414523][T19016] fido_id[19016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 972.454632][ T5885] uvcvideo 3-1:13.0: No valid video chain found. [ 972.484548][ T5885] usb 3-1: USB disconnect, device number 54 [ 972.619442][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.730126][T19019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3394'. [ 973.388232][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.625694][T17006] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 973.655887][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.840785][T17006] usb 3-1: Using ep0 maxpacket: 32 [ 974.100094][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3400'. [ 974.375317][T19047] syzkaller1: entered promiscuous mode [ 974.385822][ T9806] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 974.388673][T19045] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 974.417870][T19045] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 974.429828][T19047] syzkaller1: entered allmulticast mode [ 974.456132][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.474289][T19045] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 974.699554][ T9806] usb 5-1: Using ep0 maxpacket: 32 [ 975.126937][ T9806] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.155687][ T9806] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.205857][ T9806] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 975.251255][ T9806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.274135][ T9806] usb 5-1: Product: syz [ 975.373137][ T9806] usb 5-1: Manufacturer: syz [ 975.404399][ T9806] usb 5-1: SerialNumber: syz [ 975.495916][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.656471][T13107] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 975.708457][ T9806] usb 5-1: 0:2 : does not exist [ 975.739861][ T9806] usb 5-1: USB disconnect, device number 65 [ 975.771413][T11094] udevd[11094]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.822086][T13107] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 975.846054][T13107] usb 2-1: config 16 interface 0 has no altsetting 0 [ 975.864983][T13107] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 975.893594][T13107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.957066][T19067] netlink: 3411 bytes leftover after parsing attributes in process `syz.5.3404'. [ 976.130309][T13107] usb 2-1: string descriptor 0 read error: -71 [ 976.156985][T13107] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 976.173760][T13107] imon 2-1:16.0: unable to initialize intf0, err -19 [ 976.194026][T13107] imon:imon_probe: failed to initialize context! [ 976.218954][T13107] imon 2-1:16.0: unable to register, err -19 [ 976.230546][T13107] usb 2-1: USB disconnect, device number 52 [ 976.490604][T17006] usb 3-1: unable to get BOS descriptor or descriptor too short [ 976.531350][T17006] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 976.589365][T17006] usb 3-1: can't read configurations, error -71 [ 976.597056][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.697634][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.302593][T19097] netlink: 'syz.5.3412': attribute type 1 has an invalid length. [ 977.466043][ T9806] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 977.470861][T19097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 977.619855][T19099] bond1: (slave veth5): Enslaving as an active interface with a down link [ 977.640787][T19109] IPVS: length: 18 != 8 [ 977.645036][T19109] IPVS: length: 18 != 8 [ 977.649515][T19109] IPVS: length: 18 != 8 [ 977.654018][T19109] IPVS: length: 18 != 8 [ 977.661557][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.665271][T19102] bond1: (slave veth0_to_bond): making interface the new active one [ 977.678299][T19109] IPVS: length: 18 != 8 [ 977.686470][T19109] IPVS: length: 18 != 8 [ 977.691084][T19109] IPVS: length: 18 != 8 [ 977.696765][T19109] IPVS: length: 18 != 8 [ 977.701054][T19109] IPVS: length: 18 != 8 [ 977.705465][T19109] IPVS: length: 18 != 8 [ 977.710858][T19109] IPVS: length: 18 != 8 [ 977.716892][T19109] IPVS: length: 18 != 8 [ 977.747993][T19109] IPVS: length: 18 != 8 [ 977.752997][T19109] IPVS: length: 18 != 8 [ 977.759003][T19109] IPVS: length: 18 != 8 [ 977.764117][T19109] IPVS: length: 18 != 8 [ 977.769073][T19109] IPVS: length: 18 != 8 [ 977.774035][T19109] IPVS: length: 18 != 8 [ 977.778787][T19109] IPVS: length: 18 != 8 [ 977.783112][T19109] IPVS: length: 18 != 8 [ 977.785203][T19102] veth0_to_bond: entered promiscuous mode [ 977.788740][T19109] IPVS: length: 18 != 8 [ 977.798011][T19109] IPVS: length: 18 != 8 [ 977.802974][T19109] IPVS: length: 18 != 8 [ 977.807682][T19109] IPVS: length: 18 != 8 [ 977.812082][T19109] IPVS: length: 18 != 8 [ 977.816873][T19109] IPVS: length: 18 != 8 [ 977.822373][T19109] IPVS: length: 18 != 8 [ 977.827325][T19109] IPVS: length: 18 != 8 [ 977.831629][T19109] IPVS: length: 18 != 8 [ 977.836142][T19109] IPVS: length: 18 != 8 [ 977.840515][T19109] IPVS: length: 18 != 8 [ 977.845154][T19109] IPVS: length: 18 != 8 [ 977.850710][T19109] IPVS: length: 18 != 8 [ 977.855026][T19109] IPVS: length: 18 != 8 [ 977.860514][T19109] IPVS: length: 18 != 8 [ 977.865078][T19109] IPVS: length: 18 != 8 [ 977.869925][T19109] IPVS: length: 18 != 8 [ 977.874268][T19109] IPVS: length: 18 != 8 [ 977.879113][T19102] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 977.880365][T19109] IPVS: length: 18 != 8 [ 977.893020][T19109] IPVS: length: 18 != 8 [ 977.899261][T19109] IPVS: length: 18 != 8 [ 977.903941][T19109] IPVS: length: 18 != 8 [ 977.916415][T19109] IPVS: length: 18 != 8 [ 977.921490][T19109] IPVS: length: 18 != 8 [ 977.935969][T19109] IPVS: length: 18 != 8 [ 977.940445][T19109] IPVS: length: 18 != 8 [ 977.944880][T19109] IPVS: length: 18 != 8 [ 977.951623][T19109] IPVS: length: 18 != 8 [ 977.956794][T19109] IPVS: length: 18 != 8 [ 977.961298][T19109] IPVS: length: 18 != 8 [ 977.966896][T19109] IPVS: length: 18 != 8 [ 977.971604][T19109] IPVS: length: 18 != 8 [ 977.978753][T19109] IPVS: length: 18 != 8 [ 977.983154][T19109] IPVS: length: 18 != 8 [ 977.987939][T19109] IPVS: length: 18 != 8 [ 977.992272][T19109] IPVS: length: 18 != 8 [ 977.997655][T19109] IPVS: length: 18 != 8 [ 978.001890][T19109] IPVS: length: 18 != 8 [ 978.007309][T19109] IPVS: length: 18 != 8 [ 978.013598][T19109] IPVS: length: 18 != 8 [ 978.018589][T19109] IPVS: length: 18 != 8 [ 978.023988][T19109] IPVS: length: 18 != 8 [ 978.032330][ T9806] usb 4-1: config 0 has no interfaces? [ 978.040326][T19109] IPVS: length: 18 != 8 [ 978.044642][T19109] IPVS: length: 18 != 8 [ 978.049857][T19109] IPVS: length: 18 != 8 [ 978.142736][ T9806] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 978.186973][ T9806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.195271][ T9806] usb 4-1: Product: syz [ 978.201272][ T9806] usb 4-1: Manufacturer: syz [ 978.209410][ T9806] usb 4-1: SerialNumber: syz [ 978.221632][ T9806] usb 4-1: config 0 descriptor?? [ 978.255682][ T24] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 978.376766][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.480278][ T24] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 978.498620][ T24] usb 2-1: config 0 has no interface number 0 [ 978.506076][ T9806] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 978.599181][ T24] usb 2-1: config 0 interface 212 has no altsetting 0 [ 978.670215][ T24] usb 2-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 978.689174][ T9806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.696539][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.724530][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.736446][ T9806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.761500][ T9806] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 978.771871][ T9806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.780987][ T24] usb 2-1: Product: syz [ 978.787521][ T24] usb 2-1: Manufacturer: syz [ 978.794703][ T9806] usb 6-1: config 0 descriptor?? [ 978.797256][ T24] usb 2-1: SerialNumber: syz [ 978.810440][ T24] usb 2-1: config 0 descriptor?? [ 978.824919][ T24] HFC-S_USB 2-1:0.212: probe with driver HFC-S_USB failed with error -5 [ 978.995690][T12710] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 979.025717][ T5945] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 979.114775][T19128] netlink: 'syz.1.3416': attribute type 21 has an invalid length. [ 979.176084][T12710] usb 3-1: Using ep0 maxpacket: 8 [ 979.185714][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 979.196110][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short [ 979.196196][T12710] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 979.207686][ T5945] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 979.224557][ T5945] usb 5-1: config 8 has no interface number 0 [ 979.231125][ T5945] usb 5-1: config 8 interface 255 has no altsetting 0 [ 979.243735][ T5945] usb 5-1: string descriptor 0 read error: -22 [ 979.251601][ T5945] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 979.277282][ T5945] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 979.287178][ T9806] hid_parser_main: 72 callbacks suppressed [ 979.287199][ T9806] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 979.297563][ T24] usb 2-1: USB disconnect, device number 53 [ 979.305529][T12710] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 979.340310][ T9806] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 979.347522][T12710] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 979.368661][ T9806] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 979.375711][T12710] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 979.385747][ T9806] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 979.392741][ T9806] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 979.399863][T12710] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.413454][ T9806] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 979.420635][T12710] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 979.430003][ T9806] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 979.440288][T12710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.449816][ T9806] cp2112 0003:10C4:EA90.004D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 979.540135][ T9806] cp2112 0003:10C4:EA90.004D: Part Number: 0x00 Device Version: 0x00 [ 979.736435][T17006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.745014][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.748155][ T9806] cp2112 0003:10C4:EA90.004D: error requesting SMBus config [ 979.781103][ T9806] cp2112 0003:10C4:EA90.004D: probe with driver cp2112 failed with error -32 [ 979.807423][ T9806] usb 6-1: USB disconnect, device number 45 [ 979.819537][T15565] Bluetooth: hci4: command 0x0406 tx timeout [ 979.925218][ T24] usb 3-1: USB disconnect, device number 57 [ 980.216112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.677001][T19145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3424'. [ 980.795278][ T24] usb 4-1: USB disconnect, device number 53 [ 980.830120][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.095736][T17006] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 981.258550][T17006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 981.271066][T17006] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 981.284854][T17006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.304260][T17006] usb 6-1: config 0 descriptor?? [ 981.321043][T19146] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 981.407088][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 981.532693][T19146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.542039][T19146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.557772][T19146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.565770][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 981.566942][T19146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.573574][ T24] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 981.589895][ T24] usb 4-1: config 0 has no interface number 0 [ 981.591114][T19146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.615742][ T24] usb 4-1: config 0 interface 29 has no altsetting 0 [ 981.624321][T19146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.627856][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 981.633929][T19146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.642867][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.659797][ T24] usb 4-1: Product: syz [ 981.664040][ T24] usb 4-1: Manufacturer: syz [ 981.665391][T19146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.669749][ T24] usb 4-1: SerialNumber: syz [ 981.689342][T19146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.698863][T19146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.708328][ T24] usb 4-1: config 0 descriptor?? [ 981.729112][T17006] belkin 0003:050D:3201.004E: item fetching failed at offset 0/3 [ 981.738853][T17006] belkin 0003:050D:3201.004E: parse failed [ 981.744843][T17006] belkin 0003:050D:3201.004E: probe with driver belkin failed with error -22 [ 981.786397][ T5885] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 981.802536][ T5945] catc 5-1:8.255: Can't set altsetting 1. [ 981.809108][ T5945] catc 5-1:8.255: probe with driver catc failed with error -5 [ 981.832572][ T5945] usb 5-1: USB disconnect, device number 66 [ 981.896485][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.925659][ T24] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 981.955656][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 981.962698][ T24] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 981.971929][ T24] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 981.980361][ T24] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 981.989613][ T5885] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 981.999981][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.017165][ T5885] usb 2-1: Product: syz [ 982.028200][ T5885] usb 2-1: Manufacturer: syz [ 982.032870][ T5885] usb 2-1: SerialNumber: syz [ 982.041519][ T5885] usb 2-1: config 0 descriptor?? [ 982.061600][ T5885] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 982.071707][ T5885] usb 2-1: Detected FT-X [ 982.080666][ T24] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 982.195793][ T5945] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 982.263771][ T5885] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 982.335003][T19167] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3429'. [ 982.349659][ T5945] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 982.369011][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.383223][ T5945] usb 5-1: Product: syz [ 982.387608][ T5945] usb 5-1: Manufacturer: syz [ 982.393033][ T5945] usb 5-1: SerialNumber: syz [ 982.693745][ T5885] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 982.785874][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.830600][T19161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.844786][T19161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.890332][ T9806] usb 2-1: USB disconnect, device number 54 [ 982.936269][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.996300][ T9806] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 983.015398][ T9806] ftdi_sio 2-1:0.0: device disconnected [ 983.226377][ T5945] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 983.262991][ T5945] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 983.274113][ T5945] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 983.292458][ T5945] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 983.311782][ T5945] usb 5-1: USB disconnect, device number 67 [ 983.520361][T17006] usb 6-1: USB disconnect, device number 46 [ 983.556213][ T9806] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 983.664057][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'. [ 983.716843][ T9806] usb 3-1: Using ep0 maxpacket: 8 [ 983.737421][ T9806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.876376][ T9806] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 983.949932][ T9806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.996197][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.002459][ T9806] usb 3-1: config 0 descriptor?? [ 984.016195][T19184] fuse: Bad value for 'group_id' [ 984.018895][ T9806] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 984.024683][T19184] fuse: Bad value for 'group_id' [ 984.136967][T17140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.221034][T12710] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 984.285917][T17006] usb 4-1: USB disconnect, device number 54 [ 984.435661][T12710] usb 6-1: Using ep0 maxpacket: 8 [ 984.452531][T12710] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 984.500466][T12710] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 984.522497][T12710] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 984.535913][T12710] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 984.555646][T12710] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.574533][T12710] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 984.584622][T12710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.600134][T19198] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3437'. [ 984.706035][T17006] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 984.754837][ T9806] gspca_vc032x: reg_w err -71 [ 984.801986][ T9806] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 984.967603][ T9806] usb 3-1: USB disconnect, device number 58 [ 984.995657][T17006] usb 4-1: device descriptor read/64, error -71 [ 985.016574][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.032908][T12710] usb 6-1: USB disconnect, device number 47 [ 985.256298][T19208] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3440'. [ 985.287850][T17006] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 985.416035][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.525792][ T9806] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 985.535713][T17006] usb 4-1: device descriptor read/64, error -71 [ 985.676126][T17006] usb usb4-port1: attempt power cycle [ 985.717512][ T9806] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 985.737069][ T9806] usb 2-1: config 8 has no interface number 0 [ 985.793035][ T9806] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 985.816494][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.856016][ T9806] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 985.891169][ T9806] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 985.916401][ T9806] usb 2-1: config 8 interface 177 has no altsetting 0 [ 985.925073][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.934350][ T9806] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 985.943754][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.952105][ T9806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.962841][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.977288][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.985103][T19209] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 986.009164][T19214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.038199][T19221] vim2m vim2m.0: vidioc_s_fmt queue busy [ 986.045895][T17006] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 986.116472][T17006] usb 4-1: device descriptor read/8, error -71 [ 986.224061][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.253741][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.376140][T17006] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 986.396368][T17006] usb 4-1: device descriptor read/8, error -71 [ 986.516322][T17006] usb usb4-port1: unable to enumerate USB device [ 986.825405][ T9806] usb 2-1: string descriptor 0 read error: -71 [ 986.835866][ T5945] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 986.862101][ T9806] ir_toy 2-1:8.177: required endpoints not found [ 986.923329][ T9806] usb 2-1: USB disconnect, device number 55 [ 987.015713][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 987.035292][T19234] xt_TCPMSS: Only works on TCP SYN packets [ 987.068299][ T5945] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 987.086539][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.131803][ T5945] usb 3-1: Product: syz [ 987.144986][ T5945] usb 3-1: Manufacturer: syz [ 987.155749][ T5945] usb 3-1: SerialNumber: syz [ 987.172302][ T5945] usb 3-1: config 0 descriptor?? [ 987.241725][ T5945] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 987.281459][ T5945] usb 3-1: Detected FT-X [ 987.630592][ T5945] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 987.667242][ T5945] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 987.683274][ T5945] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 987.701341][ T5945] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 987.725145][ T5945] usb 3-1: USB disconnect, device number 59 [ 987.749151][ T5945] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 987.768430][ T5945] ftdi_sio 3-1:0.0: device disconnected [ 987.915754][ T5885] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 987.995682][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 988.136031][ T5885] usb 2-1: device descriptor read/64, error -71 [ 988.170825][T19263] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3455'. [ 988.185454][T19263] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3455'. [ 988.205689][ T5945] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 988.364173][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 988.455678][ T9806] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 988.476864][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 988.497261][ T5945] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 988.510821][ T5885] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 988.518620][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 988.535138][ T5945] usb 3-1: config 0 has no interface number 0 [ 988.548433][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 988.559498][ T5945] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 988.582078][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.593827][ T5945] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 988.643644][ T5945] usb 3-1: config 0 interface 48 has no altsetting 0 [ 988.650791][ T5945] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 988.664656][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 988.677414][ T5885] usb 2-1: device descriptor read/64, error -71 [ 988.700339][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.727383][ T5945] usb 3-1: config 0 descriptor?? [ 988.770547][T13068] udevd[13068]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.789021][ T5885] usb usb2-port1: attempt power cycle [ 988.885025][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 988.947169][ T5945] usb 3-1: string descriptor 0 read error: -71 [ 988.962373][ T5945] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 988.981961][ T5945] usb 3-1: USB disconnect, device number 60 [ 989.126024][T17140] veth0_to_bond: left promiscuous mode [ 989.152964][T19270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3458'. [ 989.163913][T19250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.176569][T19250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.195692][ T5885] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 989.216368][ T5885] usb 2-1: device descriptor read/8, error -71 [ 989.256003][ T5945] net_ratelimit: 10 callbacks suppressed [ 989.256016][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.276349][T17124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.450028][T19272] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 989.546721][ T5885] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 989.567274][ T5885] usb 2-1: device descriptor read/8, error -71 [ 989.587768][T19275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.681779][ T5885] usb usb2-port1: unable to enumerate USB device [ 990.297399][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.310498][ T5885] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 990.326083][T17006] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 990.465661][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 990.472813][ T5885] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 990.481355][ T5885] usb 5-1: config 1 has no interface number 0 [ 990.485699][T17006] usb 3-1: Using ep0 maxpacket: 16 [ 990.490260][ T5885] usb 5-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 990.502963][ T5885] usb 5-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 990.504999][T17006] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.525474][ T5885] usb 5-1: config 1 interface 236 has no altsetting 0 [ 990.525836][T17006] usb 3-1: config 0 interface 0 has no altsetting 0 [ 990.539287][T17006] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 990.541045][ T5885] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 990.548474][T17006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.567427][ T5885] usb 5-1: config 1 has no interface number 0 [ 990.568190][T17006] usb 3-1: config 0 descriptor?? [ 990.573548][ T5885] usb 5-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 990.573575][ T5885] usb 5-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 990.573596][ T5885] usb 5-1: config 1 interface 236 has no altsetting 0 [ 990.576778][ T5885] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 990.623723][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.632148][ T5885] usb 5-1: Product: syz [ 990.636848][ T5885] usb 5-1: Manufacturer: syz [ 990.641546][ T5885] usb 5-1: SerialNumber: syz [ 990.655244][ T5885] ti_usb_3410_5052 5-1:1.236: TI USB 5052 2 port adapter converter detected [ 990.778189][T19297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3469'. [ 990.891962][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 991.072058][T17006] usbhid 3-1:0.0: can't add hid device: -71 [ 991.089118][T17006] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 991.103594][T17006] usb 3-1: USB disconnect, device number 61 [ 991.154900][T19310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.173852][T19310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.340816][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.504429][ T5892] usb 4-1: USB disconnect, device number 59 [ 991.784193][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.791784][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.896344][ T9805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.412046][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.556368][ T5945] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 992.709909][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 992.721094][ T5945] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 992.732374][ T5945] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 992.752467][ T5945] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 992.771062][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 992.807014][ T5945] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 992.827791][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 992.857346][ T5945] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 992.877251][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.899537][ T5945] usb 4-1: config 0 descriptor?? [ 993.119368][ T5945] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 993.146187][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.157333][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.198689][ T5945] usb 4-1: USB disconnect, device number 60 [ 993.221812][ T5945] usblp0: removed [ 993.350524][T13551] usb 5-1: USB disconnect, device number 69 [ 993.442558][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.599430][T19299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.632351][T19299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.685690][ T5945] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 994.019208][T19300] geneve2: entered promiscuous mode [ 994.024524][T19300] geneve2: entered allmulticast mode [ 994.153968][T19334] netlink: 'syz.1.3477': attribute type 1 has an invalid length. [ 994.226200][T19331] Set syz0 is full, maxelem 0 reached [ 994.300350][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3477'. [ 994.336005][T19337] netlink: 'syz.1.3477': attribute type 10 has an invalid length. [ 994.343948][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 994.350322][T19344] loop5: detected capacity change from 0 to 7 [ 994.357812][T19344] Dev loop5: unable to read RDB block 7 [ 994.363395][T19344] loop5: AHDI p3 [ 994.368151][T19344] loop5: partition table partially beyond EOD, truncated [ 994.382220][ T5945] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 994.409548][ T5945] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 994.425165][ T5945] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 994.443811][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 994.458066][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.470468][ T5945] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 994.482706][T19337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.489817][T19343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3480'. [ 994.503178][T19337] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 994.515666][T17006] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 994.521431][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 994.543721][ T5945] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 994.553876][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.565962][ T5945] usb 4-1: config 0 descriptor?? [ 994.698384][T17006] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 994.725943][T17006] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 994.737148][T17006] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 994.747498][T17006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.749352][T19350] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3483'. [ 994.768563][T19340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 994.784752][T19322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.793392][T17006] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 994.801180][T19322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.809826][ T5945] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 994.828720][ T9805] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 994.883655][ T5945] usb 4-1: USB disconnect, device number 61 [ 994.920780][ T5945] usblp0: removed [ 994.938153][ T9803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.966500][ T9805] usb 5-1: device descriptor read/64, error -71 [ 995.017229][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.058524][T19352] netlink: 14220 bytes leftover after parsing attributes in process `syz.1.3484'. [ 995.176603][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 995.215671][ T9805] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 995.355681][ T9805] usb 5-1: device descriptor read/64, error -71 [ 995.476081][ T9805] usb usb5-port1: attempt power cycle [ 995.495948][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.627214][T19362] program syz.3.3487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.825744][ T9805] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 995.878476][ T9805] usb 5-1: device descriptor read/8, error -71 [ 996.135799][ T9805] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 996.166172][ T9805] usb 5-1: device descriptor read/8, error -71 [ 996.276035][ T9805] usb usb5-port1: unable to enumerate USB device [ 996.535993][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.225274][ T5945] usb 3-1: USB disconnect, device number 62 [ 997.256059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.577289][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.656283][ T9803] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 997.731892][ T1122] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.817736][ T9803] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 997.852757][ T9803] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 997.871453][ T9803] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 997.881071][ T9803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.898758][T19376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 997.922880][ T9803] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.931906][ T1122] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.976831][ T9803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.146527][ T9803] usb 4-1: USB disconnect, device number 62 [ 998.293173][ T1122] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.587015][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 998.598570][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 998.610395][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 998.617624][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.627343][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 998.687279][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 998.968659][ T1122] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.997716][T19404] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3498'. [ 999.169379][T19406] netlink: 'syz.5.3500': attribute type 3 has an invalid length. [ 999.189033][T19406] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3500'. [ 999.471727][T19416] vlan1: entered allmulticast mode [ 999.491399][T19416] veth0_vlan: entered allmulticast mode [ 999.515846][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.545064][T17140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.554613][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.565673][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.640538][ T1122] bridge_slave_1: left allmulticast mode [ 999.647081][ T1122] bridge_slave_1: left promiscuous mode [ 999.647519][T19420] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3504'. [ 999.655159][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.677539][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.706666][ T1122] bridge_slave_0: left allmulticast mode [ 999.713117][ T1122] bridge_slave_0: left promiscuous mode [ 999.720900][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.725690][ T9805] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 999.892765][ T9805] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 999.912518][ T9805] usb 4-1: config 0 has no interface number 0 [ 999.929744][ T9805] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20 [ 999.955422][ T9805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.963588][ T9805] usb 4-1: Product: syz [ 999.968417][ T9805] usb 4-1: Manufacturer: syz [ 999.976014][ T9805] usb 4-1: SerialNumber: syz [ 1000.007114][ T9805] usb 4-1: config 0 descriptor?? [ 1000.034228][ T9805] s2255 4-1:0.83: Could not find bulk-in endpoint [ 1000.044599][ T9805] Sensoray 2255 driver load failed: 0xfffffff4 [ 1000.050904][ T9805] s2255 4-1:0.83: probe with driver s2255 failed with error -12 [ 1000.145183][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.226651][ T9805] usb 4-1: USB disconnect, device number 63 [ 1000.351549][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 1000.548478][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.571631][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.596120][ T1122] bond0 (unregistering): Released all slaves [ 1000.696113][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.779358][ T52] Bluetooth: hci0: command tx timeout [ 1000.888371][ T1122] bond1 (unregistering): Released all slaves [ 1001.050809][T19430] delete_channel: no stack [ 1001.095673][ T9805] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1001.096032][ T1122] bond2 (unregistering): Released all slaves [ 1001.246529][ T1122] tipc: Left network mode [ 1001.251705][ T9805] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1001.322802][T19395] chnl_net:caif_netlink_parms(): no params data found [ 1001.329805][ T9805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.393768][ T9805] usb 4-1: config 0 has no interface number 0 [ 1001.431785][ T9805] usb 4-1: too many endpoints for config 0 interface 55 altsetting 51: 55, using maximum allowed: 30 [ 1001.463199][T19445] loop5: detected capacity change from 0 to 3199 [ 1001.529026][T11094] Buffer I/O error on dev loop5, logical block 399, async page read [ 1001.538147][ T9805] usb 4-1: config 0 interface 55 altsetting 51 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 1001.552925][T19450] loop5: detected capacity change from 3199 to 4799 [ 1001.560076][ T9805] usb 4-1: config 0 interface 55 has no altsetting 0 [ 1001.594655][ T9805] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1001.613028][T11094] Buffer I/O error on dev loop5, logical block 599, async page read [ 1001.700454][ T9805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.715414][ T9805] usb 4-1: config 0 descriptor?? [ 1001.735870][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.805988][T13107] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1001.813611][ T5945] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1001.969305][ T9805] usb 4-1: string descriptor 0 read error: -71 [ 1001.998397][ T9805] usb 4-1: USB disconnect, device number 64 [ 1002.004500][ T1122] hsr_slave_0: left promiscuous mode [ 1002.021017][ T1122] hsr_slave_1: left promiscuous mode [ 1002.033988][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.049937][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.057971][ T5945] usb 5-1: device descriptor read/64, error -71 [ 1002.067513][T13107] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1002.079401][T13107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.100839][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.115872][T13107] usb 2-1: config 0 descriptor?? [ 1002.130075][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.198506][ T1122] veth1_macvtap: left promiscuous mode [ 1002.218936][ T1122] veth0_macvtap: left promiscuous mode [ 1002.224711][ T1122] veth1_vlan: left promiscuous mode [ 1002.231246][ T1122] veth0_vlan: left promiscuous mode [ 1002.307068][ T5945] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1002.340333][T13107] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1002.458005][ T5945] usb 5-1: device descriptor read/64, error -71 [ 1002.487956][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1002.549934][T13107] [drm:udl_init] *ERROR* Selecting channel failed [ 1002.566427][ T5945] usb usb5-port1: attempt power cycle [ 1002.580612][T13107] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1002.607777][T13107] [drm] Initialized udl on minor 2 [ 1002.616809][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.643448][T13107] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1002.653725][T13107] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1002.660548][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1002.678280][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.691231][T13551] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1002.705507][T13107] usb 2-1: USB disconnect, device number 60 [ 1002.713550][T13551] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1002.720910][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1002.744644][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1002.755447][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1002.769408][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.783096][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.793682][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1002.813356][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1002.821636][ T24] usb 4-1: Manufacturer: syz [ 1002.830242][ T24] usb 4-1: config 0 descriptor?? [ 1002.859810][ T52] Bluetooth: hci0: command tx timeout [ 1002.926502][ T5945] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1002.946675][ T5945] usb 5-1: device descriptor read/8, error -71 [ 1003.119863][ T24] rc_core: IR keymap rc-hauppauge not found [ 1003.126034][ T24] Registered IR keymap rc-empty [ 1003.131030][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.164960][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1003.168377][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.196140][ T5945] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1003.207179][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1003.224559][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input124 [ 1003.238656][ T5945] usb 5-1: device descriptor read/8, error -71 [ 1003.238928][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1003.249481][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.280923][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.305882][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.331672][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.349076][ T5945] usb usb5-port1: unable to enumerate USB device [ 1003.385824][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.426766][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.475771][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.515759][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.568874][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.606068][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1003.643692][ T24] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1003.663439][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1003.698639][ T24] usb 4-1: USB disconnect, device number 65 [ 1004.870415][T13107] net_ratelimit: 2 callbacks suppressed [ 1004.870427][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.934089][T19395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.936230][ T52] Bluetooth: hci0: command tx timeout [ 1005.045939][T19395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.074054][T19395] bridge_slave_0: entered allmulticast mode [ 1005.082603][T19395] bridge_slave_0: entered promiscuous mode [ 1005.113362][T19395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.134489][T19395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.156014][T13107] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1005.175401][T19395] bridge_slave_1: entered allmulticast mode [ 1005.184689][T19395] bridge_slave_1: entered promiscuous mode [ 1005.256036][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.264448][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.310543][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.320475][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.329202][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.364479][T13107] usb 5-1: not running at top speed; connect to a high speed hub [ 1005.373759][T19506] netlink: 'syz.5.3519': attribute type 21 has an invalid length. [ 1005.395131][T13107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1005.418884][T19395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.443419][T13107] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.470722][T19395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.480628][T13107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.489268][T13107] usb 5-1: Product: я [ 1005.511230][T13107] usb 5-1: Manufacturer: 뎜 [ 1005.522092][T13107] usb 5-1: SerialNumber: Ѕ [ 1005.552231][T19504] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1005.567947][T19395] team0: Port device team_slave_0 added [ 1005.578889][T19395] team0: Port device team_slave_1 added [ 1005.637712][T19395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.644765][T19395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.688687][T19395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.719263][T19508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.726943][T19508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.803210][T19508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.818917][T19508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.874632][T19508] veth0_macvtap: left allmulticast mode [ 1005.891034][T19508] macvtap0: left allmulticast mode [ 1005.897944][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.959748][T19395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.979835][T19395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.021275][T19395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.050255][T13107] cdc_ncm 5-1:1.0: bind() failure [ 1006.061244][T13107] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1006.068765][T13107] cdc_ncm 5-1:1.1: bind() failure [ 1006.083453][T13107] usb 5-1: USB disconnect, device number 78 [ 1006.231284][T19506] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3519'. [ 1006.254279][T17124] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.269805][T17124] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.297603][T19515] ALSA: seq fatal error: cannot create timer (-22) [ 1006.357113][T19520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3521'. [ 1006.398238][T19521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1006.433116][T17124] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.470896][T17124] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.509609][T19395] hsr_slave_0: entered promiscuous mode [ 1006.517990][T19395] hsr_slave_1: entered promiscuous mode [ 1006.605667][T13107] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1006.645725][ T5945] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1006.765802][T13107] usb 4-1: Using ep0 maxpacket: 32 [ 1006.772964][T13107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1006.785419][T13107] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1006.795181][T13107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.807502][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 1006.817286][T13107] usb 4-1: Product: syz [ 1006.821766][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1006.834341][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1006.846099][T13107] usb 4-1: Manufacturer: syz [ 1006.850795][T13107] usb 4-1: SerialNumber: syz [ 1006.862600][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1006.877157][T13107] usb 4-1: config 0 descriptor?? [ 1006.885126][ T5945] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1006.899372][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.909278][T13107] gs_usb 4-1:0.0: Required endpoints not found [ 1006.925055][ T5945] usb 6-1: config 0 descriptor?? [ 1006.938566][T13551] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1006.948035][T18904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.958813][T19523] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1006.992356][ T5945] hub 6-1:0.0: USB hub found [ 1007.015150][T19395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1007.022297][ T52] Bluetooth: hci0: command tx timeout [ 1007.039216][T19395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1007.082682][T19395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1007.091654][T13551] usb 5-1: device descriptor read/64, error -71 [ 1007.100397][ T9803] usb 4-1: USB disconnect, device number 66 [ 1007.118339][T19395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1007.234238][ T5945] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1007.280560][ T5945] usbhid 6-1:0.0: can't add hid device: -71 [ 1007.305725][ T9805] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1007.305861][ T5945] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1007.324487][T19395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.336012][T13551] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1007.367590][T19395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.385192][T17140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.392405][T17140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.412985][T17124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.420229][T17124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.478124][ T9805] usb 2-1: Using ep0 maxpacket: 8 [ 1007.488939][ T9805] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1007.490191][T13551] usb 5-1: device descriptor read/64, error -71 [ 1007.502157][ T9805] usb 2-1: config 0 has no interface number 0 [ 1007.526350][ T9805] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1007.526432][ T5945] usb 6-1: reset high-speed USB device number 48 using dummy_hcd [ 1007.552444][ T9805] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1007.565982][ T5945] usb 6-1: device reset changed ep0 maxpacket size! [ 1007.583336][ T5945] usb 6-1: USB disconnect, device number 48 [ 1007.583404][ T9805] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1007.604392][T19395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.616357][T13551] usb usb5-port1: attempt power cycle [ 1007.643031][ T9805] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1007.695690][ T9805] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1007.724701][ T9805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.737473][T19395] veth0_vlan: entered promiscuous mode [ 1007.747211][ T9805] usb 2-1: config 0 descriptor?? [ 1007.787811][T19395] veth1_vlan: entered promiscuous mode [ 1007.795024][ T9805] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1007.839417][T19395] veth0_macvtap: entered promiscuous mode [ 1007.869529][T19395] veth1_macvtap: entered promiscuous mode [ 1007.896312][ T5945] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1007.900064][T19395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.926392][T19395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.943283][ T1104] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.962510][ T1104] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.966007][T13551] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1007.981524][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.010499][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.027597][T13551] usb 5-1: device descriptor read/8, error -71 [ 1008.036706][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.060397][ T1104] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.067408][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.076261][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.086199][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.092741][ T1104] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.108756][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.109751][T19569] loop8: detected capacity change from 0 to 7 [ 1008.129564][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.143175][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1008.148503][T19569] Dev loop8: unable to read RDB block 7 [ 1008.167956][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.177956][ T5945] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1008.190032][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.211121][T19569] loop8: AHDI p1 p2 p3 [ 1008.224090][ T5945] usb 6-1: config 0 descriptor?? [ 1008.238003][T19569] loop8: partition table partially beyond EOD, truncated [ 1008.264109][T19569] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1008.285712][T13551] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1008.288616][T19569] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1008.308636][T11094] Dev loop8: unable to read RDB block 7 [ 1008.316571][T13551] usb 5-1: device descriptor read/8, error -71 [ 1008.321322][T11094] loop8: AHDI p1 p2 p3 [ 1008.341314][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.370265][T11094] loop8: partition table partially beyond EOD, truncated [ 1008.378339][ T9803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.386938][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.397064][T11094] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1008.405237][T11094] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1008.418497][T19570] Dev loop8: unable to read RDB block 7 [ 1008.424243][T19570] loop8: AHDI p1 p2 p3 [ 1008.430380][T19570] loop8: partition table partially beyond EOD, truncated [ 1008.436896][T13551] usb usb5-port1: unable to enumerate USB device [ 1008.449337][T19570] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1008.460862][T19570] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1008.531081][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.558485][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.882320][T19581] loop5: detected capacity change from 0 to 2383 [ 1008.919291][T19581] loop5: detected capacity change from 2383 to 3071 [ 1009.032913][T13050] Buffer I/O error on dev loop5, logical block 383, async page read [ 1009.274236][T11094] Buffer I/O error on dev loop5, logical block 383, async page read [ 1010.056596][T18904] net_ratelimit: 2 callbacks suppressed [ 1010.056613][T18904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.072687][T13551] usb 2-1: USB disconnect, device number 61 [ 1010.099697][T19596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3530'. [ 1010.109308][T19595] netlink: 'syz.6.3531': attribute type 7 has an invalid length. [ 1010.118215][T13551] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1010.143968][T19595] netlink: 'syz.6.3531': attribute type 5 has an invalid length. [ 1010.194798][T19595] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3531'. [ 1010.355945][T19600] sctp: [Deprecated]: syz.1.3532 (pid 19600) Use of int in max_burst socket option deprecated. [ 1010.355945][T19600] Use struct sctp_assoc_value instead [ 1010.567152][T19608] macvtap0: entered allmulticast mode [ 1011.043546][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.084219][T19604] fuse: Bad value for 'group_id' [ 1011.098432][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.133959][T19604] fuse: Bad value for 'group_id' [ 1011.496224][ T9803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.576069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.584629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.160675][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.271618][ T5945] usbhid 6-1:0.0: can't add hid device: -71 [ 1012.348645][ T5945] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1012.435975][ T5945] usb 6-1: USB disconnect, device number 49 [ 1012.710461][T19655] loop5: detected capacity change from 0 to 2375 [ 1012.745959][T19655] loop5: detected capacity change from 2375 to 3287 [ 1012.798741][T11094] Buffer I/O error on dev loop5, logical block 410, async page read [ 1012.937256][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.025873][T11094] Buffer I/O error on dev loop5, logical block 410, async page read [ 1013.054684][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.078906][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.524620][T19664] cgroup: fork rejected by pids controller in /syz4 [ 1013.556548][ T9804] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1013.760462][ T9804] usb 7-1: Using ep0 maxpacket: 16 [ 1013.811609][ T9804] usb 7-1: too many configurations: 60, using maximum allowed: 8 [ 1013.920903][ T9804] usb 7-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1013.997702][ T9804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1014.007527][ T9804] usb 7-1: Product: syz [ 1014.012961][ T9804] usb 7-1: Manufacturer: syz [ 1014.020830][ T5945] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1014.042914][ T9804] usb 7-1: SerialNumber: syz [ 1014.059853][ T9804] usb 7-1: config 0 descriptor?? [ 1014.138582][ T9804] pwc: Philips SPC 880NC USB webcam detected. [ 1014.215942][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 1014.233486][ T5945] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.280929][ T5945] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.307143][ T5945] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1014.349362][ T5945] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1014.376905][ T5945] usb 6-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1014.447060][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.569141][ T5945] usb 6-1: config 0 descriptor?? [ 1015.015430][ T5945] logitech-hidpp-device 0003:046D:C262.004F: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.5-1/input0 [ 1015.255828][T13551] net_ratelimit: 3 callbacks suppressed [ 1015.255846][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.279942][ T9804] pwc: Warning: more than 1 configuration available. [ 1015.290647][ T9804] pwc: Failed to set LED on/off time (-71) [ 1015.316105][ T9804] pwc: send_video_command error -71 [ 1015.346957][ T9804] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1015.369395][ T5945] usb 6-1: USB disconnect, device number 50 [ 1015.406457][ T9804] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1015.428813][T20045] fido_id[20045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1015.474495][ T9804] usb 7-1: USB disconnect, device number 2 [ 1015.869786][T20060] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3552'. [ 1016.136257][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.219361][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.272505][T20055] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3551'. [ 1016.295873][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.753911][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.702763][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.711516][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.722751][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.735938][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.776332][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.025674][T17006] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1019.162566][ T5945] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1019.231949][T17006] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.260382][T17006] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1019.288064][T17006] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1019.299197][ T9805] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1019.305675][ T5945] usb 7-1: device descriptor read/64, error -71 [ 1019.325615][T17006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.379336][T17006] usb 2-1: Product: syz [ 1019.419563][T17006] usb 2-1: Manufacturer: syz [ 1019.437572][T17006] usb 2-1: SerialNumber: syz [ 1019.485675][ T9805] usb 6-1: Using ep0 maxpacket: 8 [ 1019.503726][ T9805] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1019.526169][ T9805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.546284][ T9805] usb 6-1: Product: syz [ 1019.550957][ T9805] usb 6-1: Manufacturer: syz [ 1019.557026][ T9805] usb 6-1: SerialNumber: syz [ 1019.558314][ T5945] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1019.727534][ T5945] usb 7-1: device descriptor read/64, error -71 [ 1019.812082][ T9805] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1019.856260][ T5945] usb usb7-port1: attempt power cycle [ 1019.918833][T17006] usb 2-1: 0:2 : does not exist [ 1020.205708][ T5945] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1020.262786][ T5945] usb 7-1: device descriptor read/8, error -71 [ 1020.327687][T20107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.366055][T20107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.453805][T17006] usb 2-1: USB disconnect, device number 62 [ 1020.548466][ T5945] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1020.559339][T20140] loop8: detected capacity change from 0 to 7 [ 1020.609104][T20140] Dev loop8: unable to read RDB block 7 [ 1020.614717][T20140] loop8: AHDI p1 p2 p3 [ 1020.626961][ T5945] usb 7-1: device descriptor read/8, error -71 [ 1020.634442][ T9805] usb 6-1: USB disconnect, device number 51 [ 1020.646223][ T9805] usblp0: removed [ 1020.679780][T20140] loop8: partition table partially beyond EOD, truncated [ 1020.709780][T20140] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1020.736573][T20140] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1020.753201][T11094] Dev loop8: unable to read RDB block 7 [ 1020.760309][ T5945] usb usb7-port1: unable to enumerate USB device [ 1020.769282][T11094] loop8: AHDI p1 p2 p3 [ 1020.773611][T11094] loop8: partition table partially beyond EOD, truncated [ 1020.779221][T15565] Bluetooth: hci1: command 0x0406 tx timeout [ 1020.801591][T11094] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1020.813572][T20126] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1020.822976][T11094] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1020.835740][T20141] Dev loop8: unable to read RDB block 7 [ 1020.842682][T20141] loop8: AHDI p1 p2 p3 [ 1020.853400][T20141] loop8: partition table partially beyond EOD, truncated [ 1020.860810][T13551] net_ratelimit: 1 callbacks suppressed [ 1020.860825][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.876725][T20141] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1020.884704][T20141] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1021.068738][T20147] input: syz1 as /devices/virtual/input/input125 [ 1021.520783][T20164] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3577'. [ 1021.599065][T13551] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1021.715959][T17006] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1021.816314][ T9803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.906512][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.946641][T17006] usb 2-1: Using ep0 maxpacket: 32 [ 1021.962257][T17006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.029414][T17006] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1022.056732][T17006] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1022.087360][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.096047][T17006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.152507][T17006] usb 2-1: config 0 descriptor?? [ 1022.181390][T17006] hub 2-1:0.0: bad descriptor, ignoring hub [ 1022.222579][T17006] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1022.246985][T17006] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1022.315908][T13551] usb 6-1: Using ep0 maxpacket: 32 [ 1022.389605][T13551] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1022.427108][T13551] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1022.487149][T13551] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1022.662755][T13551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1022.905672][T13551] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1023.096600][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.207399][T13551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 1023.265672][T13551] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1023.272894][T20198] loop8: detected capacity change from 0 to 7 [ 1023.321841][T20198] Dev loop8: unable to read RDB block 7 [ 1023.344796][T20198] loop8: AHDI p1 p2 p3 [ 1023.359042][T20198] loop8: partition table partially beyond EOD, truncated [ 1023.384967][T20198] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1023.408429][T20198] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1023.436303][T11094] Dev loop8: unable to read RDB block 7 [ 1023.448379][T11094] loop8: AHDI p1 p2 p3 [ 1023.458277][T11094] loop8: partition table partially beyond EOD, truncated [ 1023.467567][T11094] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1023.485758][T11094] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1023.596231][T13551] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1023.615195][T13551] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1023.621117][T20200] Dev loop8: unable to read RDB block 7 [ 1023.630542][T13551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.644095][T20200] loop8: AHDI p1 p2 p3 [ 1023.656973][T20200] loop8: partition table partially beyond EOD, truncated [ 1023.679160][T20200] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1023.691961][T13551] usb 6-1: config 0 descriptor?? [ 1023.711205][T20200] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1023.866970][ T1089] geneve2: left promiscuous mode [ 1023.873941][ T1089] bridge0: port 3(geneve2) entered disabled state [ 1023.874278][T20158] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1024.025061][ T1089] bridge_slave_1: left promiscuous mode [ 1024.042947][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.083654][ T1089] bridge_slave_0: left promiscuous mode [ 1024.103039][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.136361][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.227755][T13551] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1024.496682][T17140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.508524][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.558374][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.605239][T13551] usb 6-1: USB disconnect, device number 52 [ 1024.633083][T13551] usblp0: removed [ 1024.948805][T20230] input: syz1 as /devices/virtual/input/input126 [ 1025.003527][ T9805] usb 2-1: USB disconnect, device number 63 [ 1025.183414][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.203331][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1025.254485][T20239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 1025.391668][T20242] input: syz0 as /devices/virtual/input/input127 [ 1025.614554][T15565] Bluetooth: hci1: Dropping invalid advertising data [ 1025.623555][T15565] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1025.677828][T17006] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1025.715810][ T9805] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1025.853228][T17006] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1025.862962][T17006] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1025.884989][T17006] usb 5-1: config 0 has no interface number 0 [ 1025.903561][T17006] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 8456, setting to 64 [ 1025.929000][T17006] usb 5-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1025.952933][ T9805] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1025.965688][T17006] usb 5-1: config 0 interface 11 has no altsetting 0 [ 1025.972488][ T9805] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1025.992545][T17006] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1026.015699][T17006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.045049][T17006] usb 5-1: config 0 descriptor?? [ 1026.061694][T17006] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 1026.070549][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 7 [ 1026.089302][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 1026.108161][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 1026.125254][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 1026.142819][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 1026.160859][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 1026.169195][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 1026.203911][T17006] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1026.222945][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 1026.226360][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.231920][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 1026.271940][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 1026.320098][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 1026.356347][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 1026.379445][T17006] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 1026.434134][T17006] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1026.447309][ T9805] usb 7-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 1026.457580][T20248] loop8: detected capacity change from 0 to 7 [ 1026.475462][T17006] usb 5-1: USB disconnect, device number 83 [ 1026.481609][ T9805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.510252][ T9805] usb 7-1: Product: syz [ 1026.533218][T17006] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1026.544820][ T9805] usb 7-1: Manufacturer: syz [ 1026.551169][T20248] Dev loop8: unable to read RDB block 7 [ 1026.557320][ T9805] usb 7-1: SerialNumber: syz [ 1026.586585][T17006] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1026.597954][ T9805] usb 7-1: config 0 descriptor?? [ 1026.615045][T20228] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1026.624124][T20228] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1026.638919][T20248] loop8: AHDI p1 p2 p3 [ 1026.654937][ T9805] option 7-1:0.0: GSM modem (1-port) converter detected [ 1026.657664][T20248] loop8: partition table partially beyond EOD, truncated [ 1026.667614][T17006] keyspan 5-1:0.11: device disconnected [ 1026.682973][ T9805] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1026.749357][T20248] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1026.764885][T20248] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1026.797871][T13050] Dev loop8: unable to read RDB block 7 [ 1026.803484][T13050] loop8: AHDI p1 p2 p3 [ 1026.810125][T13050] loop8: partition table partially beyond EOD, truncated [ 1026.957844][T13050] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1027.004383][T13050] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1027.060863][T20249] Dev loop8: unable to read RDB block 7 [ 1027.085694][T20249] loop8: AHDI p1 p2 p3 [ 1027.101642][T20249] loop8: partition table partially beyond EOD, truncated [ 1027.144622][T20249] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1027.156746][T20249] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1027.258916][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.588887][T17006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.614722][T20262] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3597'. [ 1027.656161][T17140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.801354][ T1089] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1027.969949][ T1089] geneve0 (unregistering): left allmulticast mode [ 1027.981981][ T1089] team0: Port device geneve0 removed [ 1028.296814][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.378464][ T1089] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1028.623527][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.638397][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.655395][ T1089] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1028.673200][ T1089] bond0 (unregistering): Released all slaves [ 1028.698283][ T1089] bond1 (unregistering): Released all slaves [ 1028.712015][ T1089] bond2 (unregistering): Released all slaves [ 1028.736509][T20226] netlink: 'syz.3.3585': attribute type 6 has an invalid length. [ 1029.322801][T20256] netlink: 'syz.4.3596': attribute type 6 has an invalid length. [ 1029.345781][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.647035][T20291] fuse: Bad value for 'group_id' [ 1029.655575][T20291] fuse: Bad value for 'group_id' [ 1029.677201][T20291] fuse: Unknown parameter 'group_i00000000000000000000' [ 1029.771744][T20289] binder: 20288:20289 ioctl c0306201 2000000002c0 returned -14 [ 1029.786011][T20291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3603'. [ 1030.216178][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.225056][T17006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.235826][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.376156][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.391298][T20316] loop8: detected capacity change from 0 to 7 [ 1030.411537][T11094] Dev loop8: unable to read RDB block 7 [ 1030.418405][T11094] loop8: AHDI p1 p2 p3 [ 1030.422730][T11094] loop8: partition table partially beyond EOD, truncated [ 1030.430416][T11094] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1030.438284][T11094] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1030.491983][ T5945] usb 7-1: USB disconnect, device number 7 [ 1030.505191][T11094] Dev loop8: unable to read RDB block 7 [ 1030.513473][T11094] loop8: AHDI p1 p2 p3 [ 1030.518062][T11094] loop8: partition table partially beyond EOD, truncated [ 1030.538048][ T5945] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1030.562684][T11094] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1030.580307][ T5945] option 7-1:0.0: device disconnected [ 1030.600340][T11094] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1030.658530][T20316] Dev loop8: unable to read RDB block 7 [ 1030.725222][T20316] loop8: AHDI p1 p2 p3 [ 1030.766035][T20316] loop8: partition table partially beyond EOD, truncated [ 1030.788928][T20316] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1030.806242][T20316] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1030.878736][ T1089] tipc: Left network mode [ 1030.884452][T20318] Dev loop8: unable to read RDB block 7 [ 1030.893845][T20318] loop8: AHDI p1 p2 p3 [ 1030.899034][T20318] loop8: partition table partially beyond EOD, truncated [ 1030.908184][T20318] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1030.915397][T20318] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1030.928303][ T1089] IPVS: stopping backup sync thread 14154 ... [ 1031.057943][T20333] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3611'. [ 1031.105730][ T5885] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1031.298134][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 1031.311376][T20336] syzkaller1: entered promiscuous mode [ 1031.321023][T20336] syzkaller1: entered allmulticast mode [ 1031.328428][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.352270][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.365854][ T5885] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1031.380019][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.400567][ T5885] usb 5-1: config 0 descriptor?? [ 1031.413863][ T5885] hub 5-1:0.0: USB hub found [ 1031.419778][ T5945] net_ratelimit: 3 callbacks suppressed [ 1031.419794][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.636165][ T5885] hub 5-1:0.0: 1 port detected [ 1031.676909][ T1089] hsr_slave_0: left promiscuous mode [ 1031.706792][ T1089] hsr_slave_1: left promiscuous mode [ 1031.712699][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.925713][T13551] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1032.046665][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.126035][T13551] usb 7-1: Using ep0 maxpacket: 8 [ 1032.138370][T13551] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.208547][T13551] usb 7-1: config 0 has no interfaces? [ 1032.239691][T20358] fuse: Bad value for 'fd' [ 1032.252732][ T5885] hub 5-1:0.0: activate --> -90 [ 1032.377850][T13551] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1032.396494][T13551] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.405316][T13551] usb 7-1: Product: syz [ 1032.418122][T20358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3615'. [ 1032.478888][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.504601][T13551] usb 7-1: Manufacturer: syz [ 1032.509509][T13551] usb 7-1: SerialNumber: syz [ 1032.597286][T13551] usb 7-1: config 0 descriptor?? [ 1032.776297][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.784476][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.959998][T20363] kvm: user requested TSC rate below hardware speed [ 1033.262123][T17006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.360851][T17006] usb 7-1: USB disconnect, device number 8 [ 1033.515114][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.593156][ T5885] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1033.768101][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 1033.850160][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 1034.226649][ T5945] usb 5-1: USB disconnect, device number 84 [ 1034.290698][T20383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3622'. [ 1034.546702][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.149932][T20388] syzkaller0: entered promiscuous mode [ 1035.156282][T20388] syzkaller0: entered allmulticast mode [ 1035.166924][ T30] audit: type=1326 audit(1760851963.275:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.216769][ T30] audit: type=1326 audit(1760851963.275:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.268377][ T30] audit: type=1326 audit(1760851963.275:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.314451][ T30] audit: type=1326 audit(1760851963.275:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.342340][ T30] audit: type=1326 audit(1760851963.285:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.364734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.376602][ T30] audit: type=1326 audit(1760851963.315:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.382732][T20402] kvm: pic: non byte write [ 1035.398961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.417931][ T30] audit: type=1326 audit(1760851963.315:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.441117][ T30] audit: type=1326 audit(1760851963.315:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.463499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.496311][ T30] audit: type=1326 audit(1760851963.315:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.520062][ T30] audit: type=1326 audit(1760851963.315:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20395 comm="syz.5.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786718efc9 code=0x7ffc0000 [ 1035.576205][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.971944][ T9804] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 1036.149707][ T9804] usb 6-1: too many configurations: 28, using maximum allowed: 8 [ 1036.169170][ T9804] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1036.177014][ T9804] usb 6-1: can't read configurations, error -61 [ 1036.303095][T17006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.312974][ T9804] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 1036.479397][ T9804] usb 6-1: too many configurations: 28, using maximum allowed: 8 [ 1036.492456][ T9804] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1036.503785][ T9804] usb 6-1: can't read configurations, error -61 [ 1036.514136][ T9804] usb usb6-port1: attempt power cycle [ 1036.621412][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.868320][ T9804] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 1036.898614][ T9804] usb 6-1: too many configurations: 28, using maximum allowed: 8 [ 1036.921926][ T9804] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1036.929905][ T9804] usb 6-1: can't read configurations, error -61 [ 1037.067840][ T9804] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 1037.117768][ T9804] usb 6-1: too many configurations: 28, using maximum allowed: 8 [ 1037.130011][ T9804] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1037.138754][ T9804] usb 6-1: can't read configurations, error -61 [ 1037.148604][ T9804] usb usb6-port1: unable to enumerate USB device [ 1037.661404][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.135772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.186736][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3631'. [ 1038.218764][T20418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.228155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.249897][T20418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.263734][T20418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.297206][T20418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.309551][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.318309][ T9804] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1038.321901][T20418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.336547][T20422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1038.476732][ T9803] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1038.505992][ T9804] usb 7-1: Using ep0 maxpacket: 16 [ 1038.526529][ T9804] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1038.579083][ T9804] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1038.599677][ T9804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.618879][ T9804] usb 7-1: Product: syz [ 1038.659367][ T9804] usb 7-1: Manufacturer: syz [ 1038.664008][ T9804] usb 7-1: SerialNumber: syz [ 1038.683505][ T9803] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 1038.726634][ T9804] usb 7-1: config 0 descriptor?? [ 1038.731669][ T9803] usb 2-1: config 0 has no interface number 0 [ 1038.748360][ T9803] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1038.770789][ T9804] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1038.806003][ T9803] usb 2-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 1038.817195][ T9804] usb 7-1: Detected FT232R [ 1038.824464][ T9803] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 1038.876576][ T9803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.986255][ T9804] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1039.002658][ T9803] usb 2-1: Product: syz [ 1039.004957][T20439] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 1039.027674][ T9803] usb 2-1: Manufacturer: syz [ 1039.038664][ T9803] usb 2-1: SerialNumber: syz [ 1039.078776][ T9803] usb 2-1: config 0 descriptor?? [ 1039.084473][T20420] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1039.229009][ T9804] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1039.381219][ T9803] kaweth 2-1:0.58: Firmware present in device. [ 1039.577765][ T9803] kaweth 2-1:0.58: Error reading configuration (-71), no net device created [ 1039.592270][ T9803] kaweth 2-1:0.58: probe with driver kaweth failed with error -5 [ 1039.606437][ T9803] usb 2-1: USB disconnect, device number 64 [ 1039.937093][ T9803] usb 7-1: USB disconnect, device number 9 [ 1039.970013][ T9803] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1040.010884][ T9803] ftdi_sio 7-1:0.0: device disconnected [ 1040.405677][T17006] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1040.446211][ T9803] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1040.700504][ T9803] usb 7-1: config 0 has no interfaces? [ 1040.718526][T17006] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1040.729507][ T9803] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1040.743702][T17006] usb 2-1: can't read configurations, error -61 [ 1040.750795][ T9803] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1040.760276][ T9803] usb 7-1: Product: syz [ 1040.764544][ T9803] usb 7-1: Manufacturer: syz [ 1040.769388][ T9803] usb 7-1: SerialNumber: syz [ 1040.779197][ T9803] usb 7-1: config 0 descriptor?? [ 1040.885672][T17006] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1041.038268][T17006] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1041.068441][T17006] usb 2-1: can't read configurations, error -61 [ 1041.107072][T17006] usb usb2-port1: attempt power cycle [ 1041.127365][ T5945] usb 7-1: USB disconnect, device number 10 [ 1041.155682][ T9805] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 1041.317688][ T9805] usb 4-1: config 0 has an invalid interface number: 245 but max is 0 [ 1041.356213][T20484] trusted_key: encrypted_key: insufficient parameters specified [ 1041.374152][ T9805] usb 4-1: config 0 has no interface number 0 [ 1041.412469][ T9805] usb 4-1: New USB device found, idVendor=699b, idProduct=9cbd, bcdDevice=76.2a [ 1041.426116][ T9805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.448920][ T9805] usb 4-1: config 0 descriptor?? [ 1041.485686][T17006] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1041.628936][T17006] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1041.771094][T17006] usb 2-1: can't read configurations, error -61 [ 1041.823803][T20487] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1041.862666][ T9805] usb 4-1: string descriptor 0 read error: -71 [ 1041.877438][ T9805] usb-storage 4-1:0.245: USB Mass Storage device detected [ 1041.896159][ T5885] net_ratelimit: 9 callbacks suppressed [ 1041.896171][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.910024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.982720][ T9805] usb 4-1: USB disconnect, device number 67 [ 1042.025682][T17006] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1042.049268][T17006] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1042.057162][T17006] usb 2-1: can't read configurations, error -61 [ 1042.072967][T17006] usb usb2-port1: unable to enumerate USB device [ 1042.436914][ T9805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.445276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.517895][T20505] tipc: Started in network mode [ 1042.523414][T20505] tipc: Node identity 00000000000000000000007ade000001, cluster identity 4711 [ 1042.532836][T20505] tipc: Enabling of bearer rejected, failed to enable media [ 1042.925631][ T5945] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1042.937805][T13551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.946107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.105622][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 1043.113073][ T5945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.123593][ T5945] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1043.133620][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.145731][ T9805] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1043.157510][ T5945] usb 6-1: config 0 descriptor?? [ 1043.182522][ T5945] usb 6-1: bad CDC descriptors [ 1043.190785][ T5945] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 1043.200543][ T5945] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 1043.209647][ T5945] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 1043.308207][ T9805] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1043.319779][ T9805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.331765][ T9805] usb 4-1: config 0 descriptor?? [ 1043.379385][ T9803] usb 6-1: USB disconnect, device number 58 [ 1043.605688][ T5945] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1043.656266][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.664722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.765693][ T5945] usb 7-1: Using ep0 maxpacket: 8 [ 1043.773434][ T5945] usb 7-1: config 0 has no interfaces? [ 1043.780057][ T5945] usb 7-1: config 0 has no interfaces? [ 1043.786555][ T5945] usb 7-1: config 0 has no interfaces? [ 1043.794014][ T5945] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1043.806423][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.814526][ T5945] usb 7-1: Product: syz [ 1043.820525][ T5945] usb 7-1: Manufacturer: syz [ 1043.822069][ T9805] hackrf 4-1:0.0: Board ID: 00 [ 1043.825181][ T5945] usb 7-1: SerialNumber: syz [ 1043.837571][ T5945] usb 7-1: config 0 descriptor?? [ 1043.845621][ T9805] hackrf 4-1:0.0: Firmware version: [ 1043.871223][ T9805] hackrf 4-1:0.0: Registered as swradio24 [ 1043.878324][ T9805] videodev: could not get a free minor [ 1043.883961][ T9805] hackrf 4-1:0.0: Failed to register as video device (-23) [ 1043.944655][ T9805] hackrf 4-1:0.0: probe with driver hackrf failed with error -23 [ 1043.949672][T20527] ================================================================== [ 1043.960490][T20527] BUG: KASAN: slab-use-after-free in __video_do_ioctl+0x406/0xc10 [ 1043.968316][T20527] Read of size 8 at addr ffff8880752ec660 by task v4l_id/20527 [ 1043.975864][T20527] [ 1043.978202][T20527] CPU: 1 UID: 0 PID: 20527 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1043.978218][T20527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1043.978228][T20527] Call Trace: [ 1043.978234][T20527] [ 1043.978242][T20527] dump_stack_lvl+0x189/0x250 [ 1043.978261][T20527] ? __kasan_check_byte+0x12/0x40 [ 1043.978279][T20527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1043.978293][T20527] ? lock_release+0x4b/0x3e0 [ 1043.978313][T20527] ? __virt_addr_valid+0x4a5/0x5c0 [ 1043.978328][T20527] print_report+0xca/0x240 [ 1043.978345][T20527] ? __video_do_ioctl+0x406/0xc10 [ 1043.978360][T20527] kasan_report+0x118/0x150 [ 1043.978377][T20527] ? __video_do_ioctl+0x406/0xc10 [ 1043.978394][T20527] __video_do_ioctl+0x406/0xc10 [ 1043.978411][T20527] ? __pfx___video_do_ioctl+0x10/0x10 [ 1043.978426][T20527] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1043.978441][T20527] video_usercopy+0x82d/0x1450 [ 1043.978466][T20527] ? __pfx___video_do_ioctl+0x10/0x10 [ 1043.978480][T20527] ? __pfx_video_usercopy+0x10/0x10 [ 1043.978502][T20527] v4l2_ioctl+0x18d/0x1e0 [ 1043.978515][T20527] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1043.978528][T20527] __se_sys_ioctl+0xfc/0x170 [ 1043.978541][T20527] do_syscall_64+0xfa/0xfa0 [ 1043.978556][T20527] ? lockdep_hardirqs_on+0x9c/0x150 [ 1043.978579][T20527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.978593][T20527] ? clear_bhb_loop+0x60/0xb0 [ 1043.978608][T20527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.978621][T20527] RIP: 0033:0x7f112f11d378 [ 1043.978635][T20527] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 1043.978648][T20527] RSP: 002b:00007ffc5508b5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1043.978663][T20527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f112f11d378 [ 1043.978674][T20527] RDX: 00007ffc5508b5f0 RSI: 0000000080685600 RDI: 0000000000000003 [ 1043.978684][T20527] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1043.978692][T20527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.978701][T20527] R13: 00007ffc5508b7a0 R14: 00007f112f8b2000 R15: 000055bd326384d8 [ 1043.978717][T20527] [ 1043.978722][T20527] [ 1044.195261][T20527] Allocated by task 9805: [ 1044.199572][T20527] kasan_save_track+0x3e/0x80 [ 1044.204240][T20527] __kasan_kmalloc+0x93/0xb0 [ 1044.208823][T20527] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1044.214179][T20527] hackrf_probe+0xda/0x1360 [ 1044.218674][T20527] usb_probe_interface+0x668/0xc30 [ 1044.223769][T20527] really_probe+0x26d/0x9e0 [ 1044.228264][T20527] __driver_probe_device+0x18c/0x2f0 [ 1044.233539][T20527] driver_probe_device+0x4f/0x430 [ 1044.238552][T20527] __device_attach_driver+0x2ce/0x530 [ 1044.243914][T20527] bus_for_each_drv+0x251/0x2e0 [ 1044.248752][T20527] __device_attach+0x2b8/0x400 [ 1044.253505][T20527] bus_probe_device+0x185/0x260 [ 1044.258348][T20527] device_add+0x7b6/0xb50 [ 1044.262924][T20527] usb_set_configuration+0x1a87/0x20e0 [ 1044.268367][T20527] usb_generic_driver_probe+0x8d/0x150 [ 1044.273829][T20527] usb_probe_device+0x1c4/0x390 [ 1044.278664][T20527] really_probe+0x26d/0x9e0 [ 1044.283166][T20527] __driver_probe_device+0x18c/0x2f0 [ 1044.288526][T20527] driver_probe_device+0x4f/0x430 [ 1044.293540][T20527] __device_attach_driver+0x2ce/0x530 [ 1044.298917][T20527] bus_for_each_drv+0x251/0x2e0 [ 1044.303751][T20527] __device_attach+0x2b8/0x400 [ 1044.308501][T20527] bus_probe_device+0x185/0x260 [ 1044.313333][T20527] device_add+0x7b6/0xb50 [ 1044.317646][T20527] usb_new_device+0xa39/0x16f0 [ 1044.322406][T20527] hub_event+0x2958/0x4a20 [ 1044.326899][T20527] process_scheduled_works+0xae1/0x17b0 [ 1044.332436][T20527] worker_thread+0x8a0/0xda0 [ 1044.337021][T20527] kthread+0x711/0x8a0 [ 1044.341071][T20527] ret_from_fork+0x4bc/0x870 [ 1044.345646][T20527] ret_from_fork_asm+0x1a/0x30 [ 1044.350407][T20527] [ 1044.352713][T20527] Freed by task 9805: [ 1044.356672][T20527] kasan_save_track+0x3e/0x80 [ 1044.361334][T20527] __kasan_save_free_info+0x46/0x50 [ 1044.366521][T20527] __kasan_slab_free+0x5c/0x80 [ 1044.371269][T20527] kfree+0x19a/0x6d0 [ 1044.375144][T20527] hackrf_probe+0xd98/0x1360 [ 1044.379721][T20527] usb_probe_interface+0x668/0xc30 [ 1044.384819][T20527] really_probe+0x26d/0x9e0 [ 1044.389316][T20527] __driver_probe_device+0x18c/0x2f0 [ 1044.394599][T20527] driver_probe_device+0x4f/0x430 [ 1044.399633][T20527] __device_attach_driver+0x2ce/0x530 [ 1044.404994][T20527] bus_for_each_drv+0x251/0x2e0 [ 1044.409837][T20527] __device_attach+0x2b8/0x400 [ 1044.414586][T20527] bus_probe_device+0x185/0x260 [ 1044.419420][T20527] device_add+0x7b6/0xb50 [ 1044.423744][T20527] usb_set_configuration+0x1a87/0x20e0 [ 1044.429187][T20527] usb_generic_driver_probe+0x8d/0x150 [ 1044.434634][T20527] usb_probe_device+0x1c4/0x390 [ 1044.439470][T20527] really_probe+0x26d/0x9e0 [ 1044.443965][T20527] __driver_probe_device+0x18c/0x2f0 [ 1044.449248][T20527] driver_probe_device+0x4f/0x430 [ 1044.454262][T20527] __device_attach_driver+0x2ce/0x530 [ 1044.459625][T20527] bus_for_each_drv+0x251/0x2e0 [ 1044.464460][T20527] __device_attach+0x2b8/0x400 [ 1044.469221][T20527] bus_probe_device+0x185/0x260 [ 1044.474057][T20527] device_add+0x7b6/0xb50 [ 1044.478374][T20527] usb_new_device+0xa39/0x16f0 [ 1044.483127][T20527] hub_event+0x2958/0x4a20 [ 1044.487530][T20527] process_scheduled_works+0xae1/0x17b0 [ 1044.493076][T20527] worker_thread+0x8a0/0xda0 [ 1044.497653][T20527] kthread+0x711/0x8a0 [ 1044.501706][T20527] ret_from_fork+0x4bc/0x870 [ 1044.506279][T20527] ret_from_fork_asm+0x1a/0x30 [ 1044.511028][T20527] [ 1044.513334][T20527] The buggy address belongs to the object at ffff8880752ec000 [ 1044.513334][T20527] which belongs to the cache kmalloc-8k of size 8192 [ 1044.527368][T20527] The buggy address is located 1632 bytes inside of [ 1044.527368][T20527] freed 8192-byte region [ffff8880752ec000, ffff8880752ee000) [ 1044.541321][T20527] [ 1044.543631][T20527] The buggy address belongs to the physical page: [ 1044.550020][T20527] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x752e8 [ 1044.558786][T20527] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1044.567275][T20527] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1044.575156][T20527] page_type: f5(slab) [ 1044.579125][T20527] raw: 00fff00000000040 ffff88813ffa7280 ffffea00018d7600 dead000000000003 [ 1044.587696][T20527] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1044.596283][T20527] head: 00fff00000000040 ffff88813ffa7280 ffffea00018d7600 dead000000000003 [ 1044.604944][T20527] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1044.613600][T20527] head: 00fff00000000003 ffffea0001d4ba01 00000000ffffffff 00000000ffffffff [ 1044.622258][T20527] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1044.630909][T20527] page dumped because: kasan: bad access detected [ 1044.637315][T20527] page_owner tracks the page as allocated [ 1044.643010][T20527] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5675, tgid 5675 (sshd-session), ts 59973364259, free_ts 57645377701 [ 1044.663679][T20527] post_alloc_hook+0x240/0x2a0 [ 1044.668442][T20527] get_page_from_freelist+0x2365/0x2440 [ 1044.673983][T20527] __alloc_frozen_pages_noprof+0x181/0x370 [ 1044.679777][T20527] alloc_pages_mpol+0x232/0x4a0 [ 1044.684620][T20527] allocate_slab+0x96/0x3a0 [ 1044.689125][T20527] ___slab_alloc+0xe94/0x18a0 [ 1044.693793][T20527] __slab_alloc+0x65/0x100 [ 1044.698201][T20527] __kmalloc_cache_noprof+0x411/0x6f0 [ 1044.703563][T20527] tomoyo_init_log+0x111f/0x1f70 [ 1044.708495][T20527] tomoyo_supervisor+0x340/0x1480 [ 1044.713511][T20527] tomoyo_env_perm+0x149/0x1e0 [ 1044.718276][T20527] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 1044.723896][T20527] tomoyo_bprm_check_security+0x11c/0x180 [ 1044.729604][T20527] security_bprm_check+0x89/0x270 [ 1044.734612][T20527] bprm_execve+0x8ee/0x1450 [ 1044.739100][T20527] do_execveat_common+0x510/0x6a0 [ 1044.744110][T20527] page last free pid 5659 tgid 5659 stack trace: [ 1044.750473][T20527] __free_frozen_pages+0xbc4/0xd30 [ 1044.755581][T20527] __slab_free+0x2e7/0x390 [ 1044.759987][T20527] qlist_free_all+0x97/0x140 [ 1044.764559][T20527] kasan_quarantine_reduce+0x148/0x160 [ 1044.770005][T20527] __kasan_slab_alloc+0x22/0x80 [ 1044.774841][T20527] __kmalloc_noprof+0x3c3/0x7f0 [ 1044.779675][T20527] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1044.785215][T20527] tomoyo_path_perm+0x213/0x4b0 [ 1044.790076][T20527] security_inode_getattr+0x12f/0x330 [ 1044.795454][T20527] __x64_sys_newfstat+0xfc/0x200 [ 1044.800392][T20527] do_syscall_64+0xfa/0xfa0 [ 1044.804974][T20527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.810855][T20527] [ 1044.813162][T20527] Memory state around the buggy address: [ 1044.818777][T20527] ffff8880752ec500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.826821][T20527] ffff8880752ec580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.834867][T20527] >ffff8880752ec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.842915][T20527] ^ [ 1044.850090][T20527] ffff8880752ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.858134][T20527] ffff8880752ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.866174][T20527] ================================================================== [ 1044.971554][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.979938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.139684][T20527] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1045.146922][T20527] CPU: 0 UID: 0 PID: 20527 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1045.155948][T20527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1045.166015][T20527] Call Trace: [ 1045.169392][T20527] [ 1045.172329][T20527] dump_stack_lvl+0x99/0x250 [ 1045.177055][T20527] ? __asan_memcpy+0x40/0x70 [ 1045.181659][T20527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1045.186955][T20527] ? __pfx__printk+0x10/0x10 [ 1045.191559][T20527] vpanic+0x237/0x6d0 [ 1045.195554][T20527] ? __pfx_vpanic+0x10/0x10 [ 1045.200070][T20527] ? preempt_schedule+0xae/0xc0 [ 1045.204945][T20527] ? __pfx_preempt_schedule+0x10/0x10 [ 1045.210335][T20527] panic+0xb9/0xc0 [ 1045.214075][T20527] ? __pfx_panic+0x10/0x10 [ 1045.218508][T20527] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1045.224423][T20527] ? __video_do_ioctl+0x406/0xc10 [ 1045.229466][T20527] check_panic_on_warn+0x89/0xb0 [ 1045.234419][T20527] ? __video_do_ioctl+0x406/0xc10 [ 1045.239456][T20527] end_report+0x78/0x160 [ 1045.243717][T20527] kasan_report+0x129/0x150 [ 1045.248234][T20527] ? __video_do_ioctl+0x406/0xc10 [ 1045.253272][T20527] __video_do_ioctl+0x406/0xc10 [ 1045.258138][T20527] ? __pfx___video_do_ioctl+0x10/0x10 [ 1045.263524][T20527] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1045.268560][T20527] video_usercopy+0x82d/0x1450 [ 1045.273341][T20527] ? __pfx___video_do_ioctl+0x10/0x10 [ 1045.278723][T20527] ? __pfx_video_usercopy+0x10/0x10 [ 1045.283941][T20527] v4l2_ioctl+0x18d/0x1e0 [ 1045.288278][T20527] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1045.293135][T20527] __se_sys_ioctl+0xfc/0x170 [ 1045.297738][T20527] do_syscall_64+0xfa/0xfa0 [ 1045.302251][T20527] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.307461][T20527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.313543][T20527] ? clear_bhb_loop+0x60/0xb0 [ 1045.318237][T20527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.324143][T20527] RIP: 0033:0x7f112f11d378 [ 1045.328570][T20527] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 1045.348190][T20527] RSP: 002b:00007ffc5508b5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.356619][T20527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f112f11d378 [ 1045.364602][T20527] RDX: 00007ffc5508b5f0 RSI: 0000000080685600 RDI: 0000000000000003 [ 1045.372583][T20527] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1045.380570][T20527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.388560][T20527] R13: 00007ffc5508b7a0 R14: 00007f112f8b2000 R15: 000055bd326384d8 [ 1045.396558][T20527] [ 1045.399809][T20527] Kernel Offset: disabled [ 1045.404130][T20527] Rebooting in 86400 seconds..