last executing test programs: 4m48.785671643s ago: executing program 0 (id=1554): socket$unix(0x1, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xe, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) socket$netlink(0x10, 0x3, 0xf) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r5}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000300)={0x8, r7, r5}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000380)=@arm64) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendfile(r8, r8, 0x0, 0x200000) 4m47.298153466s ago: executing program 0 (id=1556): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x9, 0x4) poll(0x0, 0x0, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x42e6, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r5}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 4m45.60064752s ago: executing program 0 (id=1560): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000200)={0x0, 0x9}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d80), 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_udplite(0x2, 0x2, 0x88) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) fsopen(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="6a34d6aa95b18c7478350b430ba9010351892a29beb65b7a15b5a72ef2edffb1625735adaea33a62fa37096b4f81a879573f78986496027e2b", 0x39}], 0x1}, 0x20040080) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x700}, 0x0) 4m43.950598148s ago: executing program 0 (id=1564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x1, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000305000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000000600050088a80000060001"], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) syz_usb_control_io$hid(r4, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pipe2$watch_queue(&(0x7f0000000200), 0x80) pread64(r6, 0x0, 0x0, 0x1000000000) 4m39.429816188s ago: executing program 0 (id=1575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) syz_open_dev$vcsn(0x0, 0x5, 0x101480) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x14800, 0x0) syz_io_uring_setup(0x3158, &(0x7f0000000080)={0x0, 0xcfcc, 0x40, 0xfffffffd, 0x344}, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x48000) 4m36.107891628s ago: executing program 0 (id=1582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x2, @meta={0xe153d5e9, 0x780d8eab, 0x7d17, 0x28e2, 0x45c11cd}}) memfd_create(0x0, 0x3) 4m20.916798061s ago: executing program 32 (id=1582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x2, @meta={0xe153d5e9, 0x780d8eab, 0x7d17, 0x28e2, 0x45c11cd}}) memfd_create(0x0, 0x3) 14.621998582s ago: executing program 2 (id=2058): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x12, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x2f) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r4, &(0x7f0000002180)={0x50, 0x0, r6, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002140)={0x20, 0x0, r7, {0x403, 0x4, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r4, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x20000) syz_fuse_handle_req(r4, &(0x7f0000008380)="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", 0x2000, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="3800000000000000d100000000000000030000000000000007000000000000001a"], 0x0, 0x0, 0x0, 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x5) 14.279301231s ago: executing program 1 (id=2061): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4d015}, 0x8014) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000002c0)=""/252, &(0x7f0000000000)=0xfc) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) 12.425590064s ago: executing program 4 (id=2062): socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@abs, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0x7, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8a080, 0x39, 0x15}, 0x18) symlinkat(0x0, r4, &(0x7f0000000200)='./file0\x00') r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", '\x00', "00000000000000000100"]}) socket$netlink(0x10, 0x3, 0x10) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000900)="65f30fa7e066b94209000066b81286694866ba000000000f30baa100ec65a00000660f3881433f640f07b801088ed8baf80c66b834ff178166efbafe0cb000eeb8000002c0640f01cf", 0x49}], 0x1, 0x30, 0x0, 0x0) r7 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10) sendto$inet6(r7, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x10, @desc2}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000380)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ffd3bf79a1f5c5dc34cf2645cbc11c4562d22db8780edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b000000fb354673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0100f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce78754182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f26df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132155fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12.220513017s ago: executing program 3 (id=2063): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @remote, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 11.849776305s ago: executing program 5 (id=2064): open(0x0, 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket(0x22, 0x2, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0x6, 0x0, 0x6, 0x8, 0x8, 0xfffffffa, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="e5ff000000000000bc1000000000776b0fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x3, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) shmget(0x3, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x101, 0x0, 0x1126, 0x9}, 0x10) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x8, 0x2, 0xfffffff7, &(0x7f0000000000)="6bb2"}) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='exPc :\x00'], 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 11.363469998s ago: executing program 1 (id=2065): ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) r8 = signalfd4(r1, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f00000002c0)={@empty, @loopback, 0x0, "28def14ada7fe03584396d15257c45a97c7a183aff7b2065d6fa48ad80479a97", 0x800, 0xa1, 0x4, 0x44}, 0x3c) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) mlock2(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x0) 10.552775085s ago: executing program 2 (id=2066): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x2d}]}}]}, 0x3c}}, 0x24040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c4386", 0x9, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 10.039758135s ago: executing program 4 (id=2067): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000540)={{r6, r7+10000000}, {0x0, 0x3938700}}, &(0x7f0000000580)) lseek(r5, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000080)={'syz0\x00', {}, 0x4e, [0x80000000, 0x3, 0x401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xf5b1, 0xffffffff, 0xe459, 0xd, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x7, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000009, 0xffff8000, 0x0, 0xfffffffa, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffa, 0xfffff986], [0x0, 0x7f, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x10c, 0x0, 0x3, 0xffff, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x800, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000002300)={0x2020}, 0xfcdd) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) 9.701845295s ago: executing program 5 (id=2068): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b", 0x6f}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d98", 0x55}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115b0cbc93171494957f635b0", 0xcc}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e97", 0x94}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324f7b7c228df3cb92ea034693b96", 0x6d}], 0x2}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x4, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.367190123s ago: executing program 3 (id=2069): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000000280)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) mkdir(0x0, 0x143) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x103, 0x528ec475) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/hardlockup_count', 0x40000, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000000000a14000000000a01040000000000000000050000002c003b616dda36700789823aa48792cec50000030a01010000000000000000050000000900010073797a30000000000900030073797a700000000044000000060a010400000000000000000200000008000b400000000014000480050001800800010064757000040002800900010073797a300000000006000740ae300000140000001100010000000000000000000000000a"], 0xac}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x2c, 0x12, 0xdbf44c00c5896d57, 0x10000010, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_ADDRESS={0xa, 0x1d, @multicast}]}, 0x2c}}, 0x0) 8.933553144s ago: executing program 5 (id=2070): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r4 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 8.782140367s ago: executing program 1 (id=2071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0xa8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.099819s ago: executing program 2 (id=2072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0c0100002400010026bd7000fcdbdf250400000008002b00ffffffff3b0071ea1b1ce19760f327f93b27c1ffd4be1becd7b73dda4665ac6d2c85ca54820b29aa7280ae1077e6eb97e09e12252e6c4f078f0315ea0e50deaf686eec0d39d6a401df4d1227cfdcf5f357d190ec0dea2f85b9d45452ffdae706888d4645e04e748955d61b56047a2fac45e1b305605fcce2893e82e508a84a55eeb83194c3072a504605a4de6957a69703ed8e4d540579f0c6e80a61d52037ac5610c2e1612d1ed3fea62178dade25af899426e70a365a34f8c8ce381cfa0c3255f2284dc2f02836b4c0e9922b", @ANYRES32=0x0, @ANYBLOB="c00000"], 0x10c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdb"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) r7 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x8ee}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 7.528968394s ago: executing program 3 (id=2073): r0 = socket$kcm(0x21, 0x2, 0x2) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) tee(0xffffffffffffffff, r0, 0x5, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x22020600) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="76617700000000000000000000000000000000000000000000000000000000000400000072fb3d2682fd988f9fd96cd73b60a043edd467aedcf9276cd261f0e321e42803ffbdac2d3417d26c4afb538029c018f3"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40020d0}, 0x44000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r8, 0x402, 0x40000008) 7.361203115s ago: executing program 4 (id=2074): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_io_uring_setup(0xb, 0x0, 0x0, &(0x7f00000000c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 7.224671418s ago: executing program 5 (id=2075): r0 = socket(0x3, 0x3, 0x180000) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff80000001) rt_tgsigqueueinfo(0x0, 0x0, 0x2b, &(0x7f0000000300)={0x8, 0x9, 0x100}) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e79294", 0x3a}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100efffffff000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 6.023214304s ago: executing program 1 (id=2076): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x3b, 0x1, 0x2, "4749570000000000000000000e1609d600", 0x20493859}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="840100001000010025bd7000fcdbdf257f00000100000000002a0e00000000000014142a0000000000000000004e2100004e2000010a00002087000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000002000004d233000000fe8000000000000000000000000000bb01000080000000000c082c500000000000000000000000000b00000000000000070000000000000005000000000000000600000000000000070000000000000001000100000000000300000000000000130d00000000000006000000000000000600000006000000d6a500002abd7000073500000a"], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={r10, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) 5.862365207s ago: executing program 4 (id=2077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r8, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "90fc37852a192ea1b376efee14a7aa1c3009929129c42d06f5e30377f2428d08", 0x2c0b, 0x6, 0x1, 0x400}, 0x3c) ioctl$SIOCGETSGCNT_IN6(r8, 0x89e1, &(0x7f0000000200)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000080)=r10, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5.714094388s ago: executing program 3 (id=2078): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000003c0)="c4c37905d6040f0866bad104ec66660f388043006665660f3a0d9a0050000000b805000000b9050000000f01d926d0eb0f20e035200000000f22e0b9800000c00f3235000100000f306566dad3", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5.534572413s ago: executing program 2 (id=2079): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 4.15882393s ago: executing program 1 (id=2080): socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000100)) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x6542) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x0, 0x4d) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x1e, 0x15, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x1, 0x7]}}) ptrace$cont(0x11, r5, 0x0, 0xffffffff) sched_setattr(r5, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0xfc2a5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.973203749s ago: executing program 3 (id=2081): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) getpeername$inet6(r0, &(0x7f00000001c0), &(0x7f0000000440)=0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e000000200000000ffffffffac14140c"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1f4, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.552743577s ago: executing program 4 (id=2082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={0x0, 0x2, 0x0, 0xfffffff8, 0x4, 0x6}, &(0x7f0000000680)=0x14) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x459, 0x10, r5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe730d03276346fbd}, 0x0) 3.285930123s ago: executing program 2 (id=2083): fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a00070072"], 0xf4}}, 0x10) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) r3 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x181882) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000000000000007000000"], 0x18}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe9, 0x3, 0x641f, 0x9b48, 0x8001], [0x6, 0x101, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x8, 0x800, 0x5]], '\x00', [{0x8000, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x100, 0x0, 0x1, 0x1, 0x1}, {0xf, 0x8008, 0x1, 0x1, 0x1}, {0x9, 0x200, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x80, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x3, 0x0, 0x1}], '\x00', 0x2}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r11, {0xfff2, 0xc}, {0xffff, 0xffff}, {0xb, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044811}, 0x0) 2.079116437s ago: executing program 5 (id=2084): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x39, [0x8000, 0x3, 0xf, 0x8, 0x83, 0xffffffff, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7ffefe, 0x6, 0x5, 0x53e4, 0x5, 0x8006, 0x2, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x105, 0x0, 0x7fff, 0xe661, 0x4, 0x7, 0x0, 0x8, 0x4c74, 0x10000, 0x244, 0x3, 0xe, 0x4, 0x80008071, 0x2007, 0x17, 0x1, 0x5, 0x5, 0xfffffc00, 0x18e, 0x6, 0x6, 0x7, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x9, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2d, 0xe, 0x312, 0x66abcbd0, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0x200000b, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x9, 0x1, 0xfe000000, 0x100f098, 0x2, 0x4, 0x9, 0x3, 0x2003, 0x4000009, 0x4006, 0x0, 0x5, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x2, 0x7ff, 0x5, 0x8002, 0x3, 0x9, 0xb, 0x16, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000009, 0x0, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x4, 0xa9, 0x4, 0xfffffffc, 0xfe2, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x19, 0x3, 0x1, 0x2006, 0x80a2ed, 0x1, 0x25], [0x6, 0xbb33, 0x7, 0xb, 0x45, 0x1938, 0x2, 0x8006, 0x0, 0xb9, 0xce4, 0x80000001, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0xfc14, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x3, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9621, 0x7, 0xaf, 0x20000008, 0x5, 0x22a, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x9, 0x530e, 0x6c1b, 0xc, 0x4, 0x400003, 0x803, 0x7049, 0x200, 0xb, 0xfff]}, 0x45c) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x2, 0x2, 0x1c03, 0x1, 0xfffffffd}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x202, 0x0, 0x6}, 0x10) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000001d40)=ANY=[@ANYBLOB="00000000fd0f000003000000"]) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1}, 0x4081) unshare(0x22020400) 1.905267784s ago: executing program 1 (id=2085): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xf000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0xdddd1000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x2d00, 0x0, [0x0, 0x0, 0x1]}) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f00000002c0)={0x30003, 0x0, {[0x8000000000000000, 0x5, 0x3, 0x65, 0x80000000, 0x8, 0x0, 0x8]}}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1.727292581s ago: executing program 4 (id=2086): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) read(r2, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x8000000, 0x31}) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc040ff0b, &(0x7f0000000180)) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x2, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xe0}, {0xdddd0000, 0xdddd1000, 0x10, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x8, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x8000000, 0x4000, 0x8, 0x4, 0x3, 0x5, 0x0, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0xe6e78c00, [0x0, 0x401, 0x7, 0xc5]}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x54, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1c, 0x6a}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffeff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x20080) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x85b, 0x0, 0x8}]}) 900.159µs ago: executing program 5 (id=2087): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) 394.494µs ago: executing program 2 (id=2088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = open(0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004000625eca60a2f7240b5b73827a942e2801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x80}}, 0x0) 0s ago: executing program 3 (id=2089): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) readv(r4, &(0x7f00000012c0)=[{0x0}], 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0x43, 0xa0, 0x260, 0x98, 0x400, 0x178, 0x178, 0x400, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_to_bond\x00'}, 0x12a, 0x200, 0x260, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xff000000, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x1d, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x0, 0x0, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0xa, 0x7, 0x0, 0x2], 0x2, 0x6}, {0x1, [0x1, 0x1, 0x1, 0x4, 0x4, 0x7], 0x0, 0x2}}}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@loopback, [], 0x0, 0x0, 0x67}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f8) write$binfmt_script(r0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xfdfdffff}}) kernel console output (not intermixed with test programs): 9553] usbhid 5-1:0.0: can't add hid device: -71 [ 819.247138][ T9553] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 819.296091][ T9553] usb 5-1: USB disconnect, device number 32 [ 819.445224][ T5885] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 819.474795][T17615] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1552'. [ 819.505389][ T5885] usb 2-1: device descriptor read/8, error -71 [ 819.775276][ T5885] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 819.830471][ T5885] usb 2-1: device descriptor read/8, error -71 [ 819.985716][ T5885] usb usb2-port1: unable to enumerate USB device [ 820.980637][T17631] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 820.987357][T17631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.017388][T17631] vhci_hcd vhci_hcd.0: Device attached [ 821.056144][T17635] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 821.062805][T17635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.092584][T17631] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 821.099222][T17631] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 821.113241][T17635] vhci_hcd vhci_hcd.0: Device attached [ 821.140201][T17631] vhci_hcd vhci_hcd.0: Device attached [ 821.153250][T17631] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 821.159895][T17631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.170926][T17631] vhci_hcd vhci_hcd.0: Device attached [ 821.198823][T17631] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 821.205499][T17631] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 821.219064][T17631] vhci_hcd vhci_hcd.0: Device attached [ 821.255268][ T5885] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 821.264443][T17635] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 821.271090][T17635] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 821.309214][T17631] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 821.387943][T17661] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 821.398382][T17635] vhci_hcd vhci_hcd.0: Device attached [ 821.446326][T17631] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(23) [ 821.453077][T17631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.574855][T17635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 821.584258][T17631] vhci_hcd vhci_hcd.0: Device attached [ 821.695676][T17442] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 821.762750][T17664] vhci_hcd: connection closed [ 821.764869][ T7859] vhci_hcd vhci_hcd.0: stop threads [ 821.801196][ T7859] vhci_hcd vhci_hcd.0: release socket [ 821.815945][T17653] vhci_hcd: connection closed [ 821.817237][T17645] vhci_hcd: connection closed [ 821.818080][T17632] vhci_hcd: connection reset by peer [ 821.832278][T17640] vhci_hcd: connection closed [ 821.834107][T17637] vhci_hcd: connection closed [ 821.844889][T17647] vhci_hcd: connection closed [ 821.863708][ T7859] vhci_hcd vhci_hcd.0: disconnect device [ 821.875263][T17442] usb 3-1: Using ep0 maxpacket: 16 [ 821.898230][T17442] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 821.917714][ T7859] vhci_hcd vhci_hcd.0: stop threads [ 821.927046][T17442] usb 3-1: config 1 has no interface number 0 [ 821.942302][ T7859] vhci_hcd vhci_hcd.0: release socket [ 821.962131][T17442] usb 3-1: config 1 interface 7 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 821.985875][ T9551] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 821.996236][ T7859] vhci_hcd vhci_hcd.0: disconnect device [ 822.024006][ T7859] vhci_hcd vhci_hcd.0: stop threads [ 822.034046][ T7859] vhci_hcd vhci_hcd.0: release socket [ 822.055423][T17442] usb 3-1: config 1 interface 7 has no altsetting 0 [ 822.074615][ T7859] vhci_hcd vhci_hcd.0: disconnect device [ 822.096198][ T7859] vhci_hcd vhci_hcd.0: stop threads [ 822.101453][ T7859] vhci_hcd vhci_hcd.0: release socket [ 822.109694][ T7859] vhci_hcd vhci_hcd.0: disconnect device [ 822.109814][T17442] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2885, bcdDevice=cf.00 [ 822.154500][ T7859] vhci_hcd vhci_hcd.0: stop threads [ 822.165287][ T9551] usb 2-1: Using ep0 maxpacket: 32 [ 822.171698][T17442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.192529][ T7859] vhci_hcd vhci_hcd.0: release socket [ 822.211737][T17442] usb 3-1: Product: syz [ 822.222183][ T9551] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 822.235017][ T7859] vhci_hcd vhci_hcd.0: disconnect device [ 822.254199][T17442] usb 3-1: Manufacturer: syz [ 822.256523][ T7859] vhci_hcd vhci_hcd.0: stop threads [ 822.272105][ T9551] usb 2-1: config 0 has no interface number 0 [ 822.278398][T17442] usb 3-1: SerialNumber: syz [ 822.288521][ T9551] usb 2-1: config 0 interface 184 has no altsetting 0 [ 822.298878][ T7859] vhci_hcd vhci_hcd.0: release socket [ 822.321231][T17656] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 822.334574][ T7859] vhci_hcd vhci_hcd.0: disconnect device [ 822.371760][ T9551] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 822.385016][T17442] em28xx 3-1:1.7: New device syz syz @ 480 Mbps (eb1a:2885, interface 7, class 7) [ 822.404100][ T7859] vhci_hcd vhci_hcd.0: stop threads [ 822.413227][ T9551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.427211][ T7859] vhci_hcd vhci_hcd.0: release socket [ 822.449157][T17442] em28xx 3-1:1.7: Video interface 7 found: bulk [ 822.453273][ T9551] usb 2-1: Product: syz [ 822.464639][ T7859] vhci_hcd vhci_hcd.0: disconnect device [ 822.471499][ T9551] usb 2-1: Manufacturer: syz [ 822.481146][ T9551] usb 2-1: SerialNumber: syz [ 822.517533][ T9551] usb 2-1: config 0 descriptor?? [ 822.647494][T17442] em28xx 3-1:1.7: unknown em28xx chip ID (0) [ 822.757569][T17442] em28xx 3-1:1.7: reading from i2c device at 0xa0 failed (error=-5) [ 822.809619][T17442] em28xx 3-1:1.7: board has no eeprom [ 822.842146][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 822.925286][T17442] em28xx 3-1:1.7: Identified as Terratec Cinergy H5 (card=79) [ 822.947284][T17442] em28xx 3-1:1.7: Currently, V4L2 is not supported on this model [ 822.975599][ T9555] em28xx 3-1:1.7: Binding DVB extension [ 823.006272][ T9555] em28xx 3-1:1.7: no endpoint for DVB mode and transfer type 0 [ 823.016618][T17442] usb 3-1: USB disconnect, device number 49 [ 823.041278][T17442] em28xx 3-1:1.7: Disconnecting em28xx [ 823.059035][ T9555] em28xx 3-1:1.7: failed to pre-allocate USB transfer buffers for DVB. [ 823.167710][T17668] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 823.175659][ T9555] em28xx 3-1:1.7: Remote control support is not available for this card. [ 823.298220][T17442] em28xx 3-1:1.7: Closing input extension [ 823.451725][T17442] em28xx 3-1:1.7: Freeing device [ 824.845268][T17442] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 825.331817][ T9551] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 825.386290][T17442] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 825.402161][ T9551] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 825.446291][T17442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 825.455782][ T9551] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 825.479140][ T9551] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 825.528962][T17442] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 825.539957][ T9551] usb 2-1: USB disconnect, device number 55 [ 825.735344][T17442] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 825.985211][T17442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.235300][ T9551] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 826.252455][T17442] usb 1-1: Product: syz [ 826.395235][ T9551] usb 2-1: device descriptor read/64, error -71 [ 826.413376][T17442] usb 1-1: Manufacturer: syz [ 826.455519][ T5885] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 826.485294][T17442] usb 1-1: SerialNumber: syz [ 826.494116][T17442] usb 1-1: config 0 descriptor?? [ 826.665606][ T9551] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 826.709990][T17732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 826.808648][T17768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1570'. [ 826.841530][ T9551] usb 2-1: device descriptor read/64, error -71 [ 826.965578][ T9551] usb usb2-port1: attempt power cycle [ 827.061313][T17732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 827.335422][ T9551] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 827.390725][ T9551] usb 2-1: device descriptor read/8, error -71 [ 827.604116][T17793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.655804][T17442] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 827.665279][ T9551] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 827.710581][ T9551] usb 2-1: device descriptor read/8, error -71 [ 827.767202][ T9553] usb usb34-port1: attempt power cycle [ 827.837941][ T9551] usb usb2-port1: unable to enumerate USB device [ 827.855816][T17442] usb 4-1: Using ep0 maxpacket: 32 [ 827.875970][T17442] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 827.904948][T17442] usb 4-1: config 0 has no interface number 0 [ 827.925367][ T9372] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 827.941967][T17442] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 827.969423][T17442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.995733][T17442] usb 4-1: Product: syz [ 828.008719][T17442] usb 4-1: Manufacturer: syz [ 828.024354][T17442] usb 4-1: SerialNumber: syz [ 828.049179][T17442] usb 4-1: config 0 descriptor?? [ 828.108001][ T9372] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 828.118015][ T9372] usb 3-1: config 0 has no interface number 0 [ 828.125919][ T9372] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 828.139525][ T9372] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 828.161169][ T9372] usb 3-1: config 0 interface 113 has no altsetting 0 [ 828.176611][ T9372] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 828.186406][ T9372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.194584][ T9372] usb 3-1: Product: syz [ 828.210342][ T9372] usb 3-1: Manufacturer: syz [ 828.215984][ T9372] usb 3-1: SerialNumber: syz [ 828.228978][ T9372] usb 3-1: config 0 descriptor?? [ 828.248923][ C0] usb 3-1: NFC: Urb failure (status -71) [ 828.258362][ T9372] usb 3-1: NFC: Unable to get FW version [ 828.264635][ T9372] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 828.346917][ T9553] usb usb34-port1: unable to enumerate USB device [ 828.492113][T17442] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 828.522062][T17442] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 828.649055][ T9555] usb 1-1: USB disconnect, device number 48 [ 829.243660][T17838] loop3: detected capacity change from 0 to 7 [ 829.287010][T17838] Dev loop3: unable to read RDB block 7 [ 829.326687][T17838] loop3: unable to read partition table [ 829.445930][T17838] loop3: partition table beyond EOD, truncated [ 829.559134][T17838] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 830.180215][T17442] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 830.230618][T17442] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 830.503676][T17442] usb 3-1: USB disconnect, device number 50 [ 831.242027][ T9553] usb 4-1: USB disconnect, device number 37 [ 831.525225][ T9372] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 831.707586][ T9372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.732789][ T9372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.764783][ T9372] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 831.774258][ T9372] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 831.782670][ T9372] usb 5-1: Manufacturer: syz [ 831.794670][ T9372] usb 5-1: config 0 descriptor?? [ 831.804919][T17882] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 832.233811][T17896] binder: 17893:17896 ioctl 4018620d 0 returned -22 [ 832.246481][ T9372] hid_parser_main: 8 callbacks suppressed [ 832.246498][ T9372] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 832.313623][ T9372] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 832.331296][ T9372] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 832.385276][ T9372] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 832.392133][ T9372] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 832.575217][ T9372] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 832.582104][ T9372] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 832.697756][ T9372] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 833.841318][T17915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1585'. [ 833.866002][ T9372] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 833.895302][ T9372] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 833.935756][ T9372] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -5 [ 834.075723][T17865] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1580'. [ 834.116909][ T9555] usb 5-1: USB disconnect, device number 33 [ 834.437578][T17929] fido_id[17929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 834.788011][T17941] gtp0: entered promiscuous mode [ 834.793022][T17941] gtp0: entered allmulticast mode [ 835.285423][ T9372] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 835.523944][ T9372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 835.552567][ T9372] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 835.645635][ T9372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.716505][ T9372] usb 2-1: config 0 descriptor?? [ 835.768297][ T9372] smsusb:smsusb_probe: board id=8, interface number 0 [ 835.815640][ T9372] smsusb:smsusb_probe: Device initialized with return code -19 [ 836.256019][ T29] audit: type=1326 audit(1771259405.956:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb109f9bf79 code=0x7ffc0000 [ 836.305303][ T29] audit: type=1326 audit(1771259405.996:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb109f9bf79 code=0x7ffc0000 [ 836.324897][T17970] tipc: Enabled bearer , priority 10 [ 836.354098][T17970] tipc: Enabling of bearer rejected, already enabled [ 836.402497][ T29] audit: type=1326 audit(1771259405.996:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb109f9bf79 code=0x7ffc0000 [ 836.435226][ T9372] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 836.478889][ T29] audit: type=1326 audit(1771259405.996:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb109f9bf79 code=0x7ffc0000 [ 836.534960][ T29] audit: type=1326 audit(1771259405.996:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb109f9bf79 code=0x7ffc0000 [ 836.584566][ T29] audit: type=1326 audit(1771259405.996:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb109f9bf79 code=0x7ffc0000 [ 836.618543][ T9372] usb 4-1: Using ep0 maxpacket: 32 [ 836.627172][ T9372] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 836.648601][ T9372] usb 4-1: config 0 has no interface number 0 [ 836.660841][ T9372] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 836.670488][ T9372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.680575][ T9372] usb 4-1: Product: syz [ 836.705333][ T29] audit: type=1326 audit(1771259405.996:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb109f9bf79 code=0x7ffc0000 [ 836.729467][ T9372] usb 4-1: Manufacturer: syz [ 836.748691][ T9372] usb 4-1: SerialNumber: syz [ 836.791376][ T29] audit: type=1326 audit(1771259405.996:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb109f9bf79 code=0x7ffc0000 [ 836.844846][ T29] audit: type=1326 audit(1771259406.006:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb109f9d807 code=0x7ffc0000 [ 836.901105][ T29] audit: type=1326 audit(1771259406.006:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb109f5c84e code=0x7ffc0000 [ 836.926209][ T9372] usb 4-1: config 0 descriptor?? [ 837.347182][ T9372] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 837.369177][ T9372] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 837.761689][T17991] batadv_slave_1: entered promiscuous mode [ 837.776873][T17991] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 838.543797][T17998] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.1595'. [ 838.950650][T17987] batadv_slave_1: left promiscuous mode [ 838.991614][ T9555] usb 2-1: USB disconnect, device number 60 [ 839.098814][ T9372] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 839.127865][ T9372] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 839.878971][T18023] netlink: 'syz.2.1597': attribute type 4 has an invalid length. [ 840.152936][ T9372] usb 4-1: USB disconnect, device number 38 [ 840.305785][ T5885] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 840.465442][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 840.494124][ T5885] usb 3-1: config 0 has no interfaces? [ 840.512629][T18055] netlink: 'syz.3.1599': attribute type 5 has an invalid length. [ 840.546423][ T5885] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 840.558611][ T5885] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 840.570509][ T5885] usb 3-1: Manufacturer: syz [ 840.585756][ T5885] usb 3-1: config 0 descriptor?? [ 840.704840][T18055] ip6erspan0: entered promiscuous mode [ 842.410828][T18103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.249321][ T9555] usb 3-1: USB disconnect, device number 51 [ 844.185203][ T9372] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 844.376342][ T9372] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.400582][ T9372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 844.424610][ T9372] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 844.461870][ T9372] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 844.498907][ T9372] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 844.525569][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1607'. [ 844.534557][ T9372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.558024][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1607'. [ 844.576170][ T9372] usb 2-1: config 0 descriptor?? [ 844.949106][ T9555] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 845.022209][ T9372] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 845.082583][ T9372] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 845.125187][ T9555] usb 5-1: Using ep0 maxpacket: 16 [ 845.140737][ T9372] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 845.174569][ T9555] usb 5-1: config 0 has no interfaces? [ 845.206066][ T9555] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 845.236414][ T9555] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 845.253260][T18134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.265938][ T9372] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 845.288882][ T9555] usb 5-1: Manufacturer: syz [ 845.313590][ T9555] usb 5-1: config 0 descriptor?? [ 845.343949][ T9372] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 845.375862][T18134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.472672][ T9372] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 845.943317][T18191] program syz.1.1605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.506062][ T9372] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 847.659439][T17441] usb 2-1: USB disconnect, device number 61 [ 847.735518][ T9372] usb 4-1: Using ep0 maxpacket: 8 [ 847.757425][ T9372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.827191][T18228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 847.830385][ T9372] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 847.854853][T18228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 847.866515][T18228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 847.881434][T18228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 847.890205][T18228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 847.928955][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 847.967399][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 847.981406][ T9372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.990119][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 848.007467][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 848.015233][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.026883][ T9372] usb 4-1: config 0 descriptor?? [ 848.293927][ T9372] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 848.324315][ T9553] usb 5-1: USB disconnect, device number 34 [ 848.816826][T18207] hub 9-0:1.0: USB hub found [ 848.837335][T18207] hub 9-0:1.0: 1 port detected [ 848.990940][T17441] usb 4-1: USB disconnect, device number 39 [ 849.094579][T18270] chnl_net:caif_netlink_parms(): no params data found [ 849.356038][T18270] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.366428][T18270] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.373661][T18270] bridge_slave_0: entered allmulticast mode [ 849.381011][T18270] bridge_slave_0: entered promiscuous mode [ 849.388966][T18270] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.396298][T18270] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.403549][T18270] bridge_slave_1: entered allmulticast mode [ 849.410839][T18270] bridge_slave_1: entered promiscuous mode [ 849.500136][T18270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.538346][T18270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.828054][T18270] team0: Port device team_slave_0 added [ 849.880894][T18270] team0: Port device team_slave_1 added [ 849.891057][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1614'. [ 850.059678][T18228] Bluetooth: hci5: command tx timeout [ 850.418905][T18270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.441662][T18270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.554697][T18270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.614471][T18270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.655377][T18270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.786605][T18270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.194739][T18270] hsr_slave_0: entered promiscuous mode [ 851.218989][T18270] hsr_slave_1: entered promiscuous mode [ 851.245899][T18270] debugfs: 'hsr0' already exists in 'hsr' [ 851.266751][T18270] Cannot create hsr debugfs directory [ 851.952099][T18270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 851.970076][T18270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 851.981040][T18270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 851.992797][T18270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 852.084543][T17896] syz.0.1582 (17896): drop_caches: 2 [ 852.135259][T18228] Bluetooth: hci5: command tx timeout [ 853.204911][T18270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.249811][T18270] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.278808][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.285944][ T7850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.332428][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.339598][ T7850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.877846][T18270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.215474][T18228] Bluetooth: hci5: command tx timeout [ 854.266845][T18270] veth0_vlan: entered promiscuous mode [ 854.354040][T18270] veth1_vlan: entered promiscuous mode [ 854.518900][T18270] veth0_macvtap: entered promiscuous mode [ 854.564655][T18270] veth1_macvtap: entered promiscuous mode [ 854.676663][T18270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.753181][T18270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.902515][ T95] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.923837][ T95] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.465008][ T95] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.565310][ T95] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.948375][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 856.295350][T18228] Bluetooth: hci5: command tx timeout [ 856.323192][ T7857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.363302][ T7857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.380899][ T7859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.400736][ T7859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.268552][T18655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.126308][T18671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 858.375408][T18679] loop9: detected capacity change from 0 to 7 [ 858.428618][T18679] vivid-000: disconnect [ 859.166017][T18675] vivid-000: reconnect [ 859.298041][T18689] nftables ruleset with unbound chain [ 860.215372][ T9372] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 860.437819][ T9372] usb 2-1: Using ep0 maxpacket: 32 [ 860.560963][ T9372] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.652415][ T9372] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 860.701399][ T9372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.251053][ T9372] usb 2-1: config 0 descriptor?? [ 861.368774][ T9372] gspca_main: spca501-2.14.0 probing 0000:0000 [ 861.491853][T18719] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1637'. [ 861.704434][T18697] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 862.025797][ T9372] gspca_spca501: reg write: error -110 [ 862.093447][ T9372] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 862.153899][ T9372] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 862.980930][ T9372] usb 2-1: USB disconnect, device number 62 [ 863.083023][T17896] syz_tun (unregistering): left allmulticast mode [ 863.815275][T17443] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 863.997857][T17443] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.058244][T17443] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 864.107887][T17443] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 864.134059][T17443] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 864.149334][T17443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.158479][T17443] usb 2-1: Product: syz [ 864.162997][T17443] usb 2-1: Manufacturer: syz [ 864.168588][T17443] usb 2-1: SerialNumber: syz [ 864.223043][T17443] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 864.412863][ T9555] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 864.807267][T17443] usb 2-1: USB disconnect, device number 63 [ 865.585858][ T9555] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 865.594467][ T9555] ath9k_htc: Failed to initialize the device [ 865.602740][T17443] usb 2-1: ath9k_htc: USB layer deinitialized [ 867.375434][ T9372] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 867.629108][ T9372] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 867.675774][ T9372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.686056][ T9372] usb 2-1: config 0 descriptor?? [ 867.719901][ T9372] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 869.638289][ T7850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.746350][ T7850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.777462][ T7850] bond0 (unregistering): Released all slaves [ 869.809772][ T7850] bond1 (unregistering): Released all slaves [ 870.004607][ T9372] usb 2-1: USB disconnect, device number 64 [ 870.010888][ T5176] bcm5974 2-1:0.0: could not read from device [ 870.119408][T15654] bcm5974 2-1:0.0: could not read from device [ 870.149352][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.162815][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.310558][ T7850] hmac(sha224: left promiscuous mode [ 870.435224][ T9551] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 870.557803][T18941] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1652'. [ 870.669575][ T9551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 870.727719][ T9551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 870.777109][ T9551] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 870.805155][ T9551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.865398][ T9551] usb 4-1: Product: syz [ 870.885003][ T9551] usb 4-1: Manufacturer: syz [ 870.907619][ T9551] usb 4-1: SerialNumber: syz [ 870.936397][ T9551] usb 4-1: config 0 descriptor?? [ 870.973882][ T9551] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 872.090659][T15654] udevd[15654]: Error opening device "/dev/input/event4": No such file or directory [ 872.106298][T15654] udevd[15654]: Unable to EVIOCGABS device "/dev/input/event4" [ 872.165930][T15654] udevd[15654]: Unable to EVIOCGABS device "/dev/input/event4" [ 872.212124][T15654] udevd[15654]: Unable to EVIOCGABS device "/dev/input/event4" [ 872.222200][T18944] netlink: 'syz.4.1653': attribute type 12 has an invalid length. [ 872.241945][T15654] udevd[15654]: Unable to EVIOCGABS device "/dev/input/event4" [ 872.282920][ T7850] tipc: Left network mode [ 872.418223][ T7850] IPVS: stopping master sync thread 11240 ... [ 872.905544][ T9551] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 873.119097][ T9551] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.206135][ T9551] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 873.268753][ T9551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.319625][ T9551] usb 2-1: config 0 descriptor?? [ 873.619340][T17443] usb 2-1: USB disconnect, device number 65 [ 874.063526][ T7850] batman_adv: batadv0: Removing interface: macsec1 [ 874.076342][ T9555] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 874.295778][ T9555] usb 2-1: Using ep0 maxpacket: 32 [ 874.380988][ T9555] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.420484][ T7850] hsr_slave_0: left promiscuous mode [ 874.434309][ T7850] hsr_slave_1: left promiscuous mode [ 874.448146][ T9555] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 874.469438][ T7850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.492546][ T7850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.522266][ T9555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.592430][ T9555] usb 2-1: config 0 descriptor?? [ 874.606300][ T9372] usb 4-1: USB disconnect, device number 40 [ 875.217931][T19106] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 875.638085][T19110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 876.110188][ T7850] team0 (unregistering): Port device team_slave_1 removed [ 876.172635][ T7850] team0 (unregistering): Port device team_slave_0 removed [ 876.970133][T19122] netlink: 'syz.5.1660': attribute type 12 has an invalid length. [ 877.028993][ T9555] usb 2-1: USB disconnect, device number 66 [ 877.230468][T19149] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 877.729639][ T7850] IPVS: stop unused estimator thread 0... [ 880.009168][T19196] netlink: 'syz.3.1668': attribute type 33 has an invalid length. [ 880.803257][T19209] ptrace attach of "./syz-executor exec"[18270] was attempted by " /dev/snd/seq   ro ./file0 nel/debug/binder/stats 8    \x09   [ 881.753811][T19220] openvswitch: netlink: IP tunnel dst address not specified [ 882.395199][T19229] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1673'. [ 882.580197][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1672'. [ 883.798203][T19230] tipc: Enabling of bearer rejected, failed to enable media [ 885.109272][ T9555] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 885.264587][T19288] netlink: 'syz.5.1681': attribute type 4 has an invalid length. [ 885.273413][ T9555] usb 3-1: Using ep0 maxpacket: 16 [ 885.283235][ T9555] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.299400][T19288] warning: `syz.5.1681' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 885.311294][ T9555] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.321364][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805569e000: rx timeout, send abort [ 885.346155][T19288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 885.354669][ T9555] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 885.376713][ T9555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.419403][T19285] block device autoloading is deprecated and will be removed. [ 885.821441][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805569e000: abort rx timeout. Force session deactivation [ 885.881006][ T9555] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 887.225260][T17443] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 887.238168][ T9555] usb 3-1: reset high-speed USB device number 52 using dummy_hcd [ 887.416216][T17443] usb 5-1: Using ep0 maxpacket: 8 [ 887.447592][T17443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 887.505989][T17443] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 887.596662][T17443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 887.630864][T19337] xt_hashlimit: size too large, truncated to 1048576 [ 887.645239][T19337] xt_hashlimit: max too large, truncated to 1048576 [ 887.680574][T17443] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 887.722379][T17443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.796921][T17443] usb 5-1: Product: syz [ 887.849883][T17443] usb 5-1: Manufacturer: syz [ 887.898800][T17443] usb 5-1: SerialNumber: syz [ 887.962208][T17443] usb 5-1: config 0 descriptor?? [ 888.057015][T17443] radioshark 5-1:0.0: Invalid radioSHARK device [ 888.151611][T17443] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 888.235495][T17443] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 888.449808][T19312] netlink: 'syz.4.1683': attribute type 2 has an invalid length. [ 888.713652][T17442] usb 3-1: USB disconnect, device number 52 [ 888.944273][ T5885] usb 5-1: USB disconnect, device number 35 [ 889.223602][T19312] @;: entered promiscuous mode [ 891.356009][T19427] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1693'. [ 893.077147][T19489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 894.131754][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'. [ 896.660501][T19555] program syz.4.1701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 896.686297][T19556] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1702'. [ 896.909588][T19572] binder: 19559:19572 ioctl 4018620d 0 returned -22 [ 897.023510][T19557] bond2 (unregistering): Released all slaves [ 897.215154][T17443] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 897.402768][T17443] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 897.447346][T17443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.487051][T17443] usb 3-1: Product: syz [ 897.515873][T17443] usb 3-1: Manufacturer: syz [ 897.532723][T17443] usb 3-1: SerialNumber: syz [ 897.560687][T17443] usb 3-1: config 0 descriptor?? [ 897.592534][T17443] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 053 [ 897.995029][T17443] (null): failure reading functionality [ 898.108548][T17443] i2c i2c-1: failure reading functionality [ 898.143400][T17443] i2c i2c-1: connected i2c-tiny-usb device [ 898.497520][T17443] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 898.617658][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'. [ 898.666864][T17443] usb 2-1: config 17 has an invalid interface number: 255 but max is 0 [ 898.691224][T17443] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 898.761408][T17443] usb 2-1: config 17 has no interface number 0 [ 898.776831][T17443] usb 2-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 898.789808][T17443] usb 2-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 898.826025][T17443] usb 2-1: config 17 interface 255 has no altsetting 0 [ 898.904712][T17443] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 898.943592][T17443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.030411][T17443] aiptek 2-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 899.095403][ T5885] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 899.103014][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032843c00: rx timeout, send abort [ 899.279563][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 899.296952][ T5885] usb 5-1: config 0 has no interfaces? [ 899.314490][ T5885] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 899.328925][ T5885] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 899.362729][ T5885] usb 5-1: Manufacturer: syz [ 899.382316][ T5885] usb 5-1: config 0 descriptor?? [ 899.603075][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032843c00: abort rx timeout. Force session deactivation [ 899.907297][ T9557] usb 3-1: USB disconnect, device number 53 [ 901.350351][ T9551] usb 2-1: USB disconnect, device number 67 [ 902.064152][ T5885] usb 5-1: USB disconnect, device number 36 [ 902.420790][T19747] netlink: 'syz.4.1713': attribute type 5 has an invalid length. [ 902.506628][T19747] ip6erspan0: entered promiscuous mode [ 903.415528][ T9557] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 903.575456][ T9557] usb 6-1: Using ep0 maxpacket: 32 [ 903.590353][ T9557] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 903.618660][ T9557] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 903.663114][ T9557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.699181][ T9557] usb 6-1: config 0 descriptor?? [ 903.753404][ T9557] hub 6-1:0.0: bad descriptor, ignoring hub [ 903.776062][ T9557] hub 6-1:0.0: probe with driver hub failed with error -5 [ 903.805494][T17443] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 903.828582][ T9557] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 903.985714][T17443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 904.005208][T17443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 904.159452][T17443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 904.206046][T17443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 904.292971][T17443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 904.355208][T17443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 904.355907][ T5885] usb 6-1: USB disconnect, device number 2 [ 904.626126][T17443] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 904.653256][T17443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.678733][T17443] usb 3-1: Product: syz [ 904.693759][T17443] usb 3-1: Manufacturer: syz [ 904.707809][T17443] usb 3-1: SerialNumber: syz [ 904.735669][T17443] usb 3-1: config 0 descriptor?? [ 905.438458][T17443] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 905.467506][T17443] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 905.799132][T19803] openvswitch: netlink: Flow key attr not present in new flow. [ 908.930615][T19830] cifs: Unknown parameter ' [ 908.983355][T19831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.126445][ T5885] usb 3-1: USB disconnect, device number 54 [ 910.511022][T19849] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 910.535559][T19849] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 910.553167][T19849] netlink: 'syz.4.1727': attribute type 10 has an invalid length. [ 910.572293][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 910.600104][T19849] team0 (unregistering): left promiscuous mode [ 910.606766][T19849] team_slave_0: left promiscuous mode [ 910.612333][T19849] team_slave_1: left promiscuous mode [ 910.619436][T19849] batadv1: left promiscuous mode [ 910.661215][T19849] team0 (unregistering): Port device team_slave_0 removed [ 910.696791][T19849] team0 (unregistering): Port device team_slave_1 removed [ 910.728711][T19849] team0 (unregistering): Port device batadv1 removed [ 912.323156][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1732'. [ 912.334495][T19891] netem: invalid attributes len -7 [ 912.355643][T19891] netem: change failed [ 914.816301][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 915.220397][T19958] Failed to get privilege flags for destination (handle=0x2:0x0) [ 915.382651][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 915.382670][ T29] audit: type=1326 audit(1771259485.076:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19919 comm="syz.5.1737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x0 [ 916.356260][ T5885] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 916.781859][ T5885] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 916.831503][ T5885] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 916.934393][ T5885] usb 5-1: config 8 has no interface number 0 [ 916.964833][ T5885] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 917.039005][ T5885] usb 5-1: config 8 interface 177 has no altsetting 0 [ 917.100068][ T5885] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 917.253475][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.380582][T19988] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 917.434821][T19988] team0: Port device batadv1 added [ 917.625031][T19995] hub 9-0:1.0: USB hub found [ 917.642542][T19995] hub 9-0:1.0: 1 port detected [ 918.000033][ T5885] ir_toy 5-1:8.177: required endpoints not found [ 918.912952][T19998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1744'. [ 919.375242][T17443] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 919.525421][T17443] usb 4-1: Using ep0 maxpacket: 32 [ 919.546527][T17443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8192, setting to 64 [ 919.581835][T17443] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 919.605244][T17443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.625654][T17441] usb 5-1: USB disconnect, device number 37 [ 919.661861][T17443] usb 4-1: Product: syz [ 919.676033][T17443] usb 4-1: Manufacturer: syz [ 919.692915][T17443] usb 4-1: SerialNumber: syz [ 919.721375][T17443] usb 4-1: config 0 descriptor?? [ 919.768553][T17443] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 920.131393][T20039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1747'. [ 921.399354][T17441] usb 4-1: USB disconnect, device number 41 [ 921.430991][T17441] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 922.385363][ T9551] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 922.593054][ T9551] usb 6-1: unable to get BOS descriptor or descriptor too short [ 922.624461][ T9551] usb 6-1: config 182 has an invalid interface number: 132 but max is 0 [ 922.642482][T20078] netlink: 'syz.4.1752': attribute type 4 has an invalid length. [ 922.654824][ T9551] usb 6-1: config 182 has no interface number 0 [ 922.669531][ T9551] usb 6-1: config 182 interface 132 has no altsetting 0 [ 922.739206][ T9551] usb 6-1: string descriptor 0 read error: -22 [ 922.753501][ T9551] usb 6-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 922.772136][ T9551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.215474][ T9557] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 923.465464][ T9557] usb 5-1: Using ep0 maxpacket: 16 [ 923.519172][ T9557] usb 5-1: config 0 has no interfaces? [ 923.555374][ T9557] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 923.586606][ T9557] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 923.665864][ T9557] usb 5-1: Manufacturer: syz [ 923.705701][ T9557] usb 5-1: config 0 descriptor?? [ 924.048237][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 924.780276][ T9557] usb 6-1: USB disconnect, device number 3 [ 925.158560][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1755'. [ 925.289484][T20147] erspan0: entered promiscuous mode [ 925.312706][T20147] macvtap1: entered allmulticast mode [ 925.362475][T20147] erspan0: entered allmulticast mode [ 925.965807][ T9551] usb 5-1: USB disconnect, device number 38 [ 926.095773][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1757'. [ 927.682970][T20205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1760'. [ 927.783503][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 927.828624][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 927.838182][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 927.908325][T20205] openvswitch: netlink: Flow actions attr not present in new flow. [ 928.705182][ T9551] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 928.884176][ T9551] usb 6-1: Using ep0 maxpacket: 8 [ 928.910429][ T9551] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 928.944117][ T9551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.953858][ T9551] usb 6-1: Product: syz [ 929.013720][ T9551] usb 6-1: Manufacturer: syz [ 929.025548][ T9551] usb 6-1: SerialNumber: syz [ 929.036445][ T9551] usb 6-1: config 0 descriptor?? [ 929.108111][ T9551] option 6-1:0.0: GSM modem (1-port) converter detected [ 929.197912][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 929.314163][T20235] vlan2: entered promiscuous mode [ 929.321605][T20235] bridge0: entered promiscuous mode [ 929.654200][T20238] bridge0: port 3(hsr0) entered blocking state [ 929.663440][T20238] bridge0: port 3(hsr0) entered disabled state [ 929.676664][T20238] hsr0: entered allmulticast mode [ 929.683201][T20238] hsr_slave_0: entered allmulticast mode [ 929.691380][T20238] hsr_slave_1: entered allmulticast mode [ 929.718397][T20238] hsr0: entered promiscuous mode [ 930.778322][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'. [ 930.904557][ T5885] usb 6-1: USB disconnect, device number 4 [ 930.911821][ T5885] option 6-1:0.0: device disconnected [ 931.468048][T20247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1765'. [ 931.583265][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.599255][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.715237][ T9372] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 931.742716][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.762900][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.975591][ T9372] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 931.997542][ T9372] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 932.044067][ T9372] usb 2-1: config 0 interface 0 has no altsetting 0 [ 932.081386][ T9372] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 932.102955][ T9372] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 932.142002][ T9372] usb 2-1: Product: syz [ 932.151876][ T9372] usb 2-1: Manufacturer: syz [ 932.169463][ T9372] usb 2-1: SerialNumber: syz [ 932.200241][ T9372] usb 2-1: config 0 descriptor?? [ 932.234151][ T9372] usb 2-1: selecting invalid altsetting 0 [ 933.706122][T20314] netlink: 'syz.2.1772': attribute type 10 has an invalid length. [ 933.866950][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1773'. [ 935.550461][ T9551] usb 2-1: USB disconnect, device number 68 [ 936.105969][T20363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1778'. [ 936.262038][T20314] team0: Port device dummy0 added [ 936.755480][T17443] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 936.955219][T17443] usb 4-1: Using ep0 maxpacket: 16 [ 936.968503][T17443] usb 4-1: config 0 has no interfaces? [ 936.989491][T17443] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 937.010338][T17443] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 937.039236][T17443] usb 4-1: Manufacturer: syz [ 937.067949][T17443] usb 4-1: config 0 descriptor?? [ 937.285153][ T9557] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 937.675497][ T9557] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 937.691303][ T9557] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.703296][ T9557] usb 2-1: config 0 has no interfaces? [ 937.727736][ T9557] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 937.738716][ T9557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.781881][ T9557] usb 2-1: config 0 descriptor?? [ 939.383204][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 939.574082][ T9557] usb 4-1: USB disconnect, device number 42 [ 939.961246][ T9372] usb 2-1: USB disconnect, device number 69 [ 942.094007][T20458] netlink: 'syz.1.1788': attribute type 4 has an invalid length. [ 942.470253][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 942.496423][ T9557] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 942.765123][ T9557] usb 2-1: Using ep0 maxpacket: 16 [ 942.795122][ T9557] usb 2-1: config 0 has no interfaces? [ 942.822510][ T9557] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 942.939033][ T9557] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 942.995234][ T9557] usb 2-1: Manufacturer: syz [ 943.065868][ T9557] usb 2-1: config 0 descriptor?? [ 944.496728][T20525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.516701][T20525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.875278][T20540] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 944.923306][T20551] hub 9-0:1.0: USB hub found [ 944.972736][T20540] team0: Port device batadv1 added [ 944.983689][T20551] hub 9-0:1.0: 1 port detected [ 945.951208][T20577] tipc: Enabling of bearer rejected, failed to enable media [ 946.173078][ T9557] usb 2-1: USB disconnect, device number 70 [ 946.202114][T20577] tipc: Enabling of bearer rejected, failed to enable media [ 946.363388][T20590] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 946.371005][T20590] PKCS7: Only support pkcs7_signedData type [ 946.689756][T20600] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 946.818908][T20600] xt_hashlimit: size too large, truncated to 1048576 [ 947.048827][T20609] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1798'. [ 950.615263][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1803'. [ 950.782052][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 950.800738][T20655] netem: invalid attributes len -7 [ 950.835166][T20655] netem: change failed [ 951.055179][T17443] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 951.245806][T17443] usb 6-1: Using ep0 maxpacket: 16 [ 951.282066][T17443] usb 6-1: config 0 has no interfaces? [ 951.310912][T17443] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 951.358738][T17443] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 951.409047][T17443] usb 6-1: Manufacturer: syz [ 951.464679][T17443] usb 6-1: config 0 descriptor?? [ 951.654933][T20681] openvswitch: netlink: Flow key attr not present in new flow. [ 953.216049][T20700] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1807'. [ 953.426711][ T9551] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 953.682701][T17443] usb 6-1: USB disconnect, device number 5 [ 953.727025][ T9551] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 953.766467][ T9551] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 953.827068][ T9551] usb 4-1: config 8 has no interface number 0 [ 953.864242][ T29] audit: type=1326 audit(1771259523.556:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.1.1808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb109f9bf79 code=0x0 [ 953.877556][ T9551] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 954.032525][ T9551] usb 4-1: config 8 interface 177 has no altsetting 0 [ 954.070844][ T9551] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 954.134430][ T9551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.238085][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1809'. [ 954.321601][ T9551] ir_toy 4-1:8.177: required endpoints not found [ 955.924439][T20712] bridge3: entered promiscuous mode [ 956.268658][ T29] audit: type=1326 audit(1771259525.926:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 956.338281][ T9557] usb 4-1: USB disconnect, device number 43 [ 956.362758][ T29] audit: type=1326 audit(1771259525.936:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 956.507565][ T29] audit: type=1326 audit(1771259526.026:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 956.608872][ T29] audit: type=1326 audit(1771259526.026:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 956.669069][ T29] audit: type=1326 audit(1771259526.156:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 956.721312][ T29] audit: type=1326 audit(1771259526.166:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 956.796726][ T29] audit: type=1326 audit(1771259526.166:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 956.822720][ T29] audit: type=1326 audit(1771259526.166:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 956.845745][ T9372] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 956.863818][ T29] audit: type=1326 audit(1771259526.176:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 956.985775][ T9372] usb 5-1: device descriptor read/64, error -71 [ 957.237846][ T9372] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 957.435874][ T9372] usb 5-1: device descriptor read/64, error -71 [ 957.556601][ T9372] usb usb5-port1: attempt power cycle [ 957.905775][ T9372] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 957.936647][ T9372] usb 5-1: device descriptor read/8, error -71 [ 958.185828][ T9372] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 958.229093][ T9372] usb 5-1: device descriptor read/8, error -71 [ 958.346077][ T9372] usb usb5-port1: unable to enumerate USB device [ 958.523969][T20775] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1815'. [ 958.924245][T20785] wireguard: wg1: Could not create IPv4 socket [ 958.954867][T20785] wg1: entered promiscuous mode [ 960.392319][T20818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.531913][T20846] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[20846] [ 964.245746][ T9551] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 964.408435][ T9551] usb 6-1: Using ep0 maxpacket: 32 [ 964.435626][ T9551] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 964.444853][ T9551] usb 6-1: config 0 has no interface number 0 [ 964.453226][ T9551] usb 6-1: config 0 interface 12 has no altsetting 0 [ 964.462494][ T9551] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 964.503742][ T9551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.527558][ T9551] usb 6-1: Product: syz [ 964.531884][ T9551] usb 6-1: Manufacturer: syz [ 964.539095][ T9551] usb 6-1: SerialNumber: syz [ 964.574093][ T9551] usb 6-1: config 0 descriptor?? [ 964.693290][T20892] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1831'. [ 965.940427][ T9551] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 965.948530][ T9551] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 966.038258][ T9551] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 966.225832][ T9551] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 966.266800][ T9551] usb 6-1: USB disconnect, device number 6 [ 967.141642][T20934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 967.198060][T20936] SET target dimension over the limit! [ 967.213531][T20936] netdevsim netdevsim4: Direct firmware load for / [ 967.213531][T20936] failed with error -2 [ 967.321147][T20936] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 967.321147][T20936] [ 969.152171][T20960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.636056][ T9551] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 969.934804][ T9551] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 969.960860][ T9551] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.993440][ T9551] usb 3-1: config 0 has no interface number 0 [ 970.009333][ T9551] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 970.080878][ T9551] usb 3-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 970.137670][ T9557] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 970.171054][ T9551] usb 3-1: config 0 interface 113 has no altsetting 0 [ 970.276874][ T9551] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 970.325154][ T9557] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 970.356178][ T9551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.384634][ T9557] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 970.425556][ T9551] usb 3-1: Product: syz [ 970.439008][ T9551] usb 3-1: Manufacturer: syz [ 970.454666][ T9557] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 970.481134][ T9551] usb 3-1: SerialNumber: syz [ 970.513411][ T9551] usb 3-1: config 0 descriptor?? [ 970.554786][ T9551] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 970.573570][ T9557] usb 5-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 970.677946][ T9557] usb 5-1: config 1 interface 0 has no altsetting 0 [ 970.770756][ T9557] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 970.803012][ T9557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.834952][ T9557] usb 5-1: Product: syz [ 970.862727][ T9557] usb 5-1: Manufacturer: syz [ 970.869240][T20992] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1842'. [ 970.881665][ T9557] usb 5-1: SerialNumber: syz [ 970.930172][T20983] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 970.965387][T20983] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 971.354812][T20983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.381125][T20983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.756835][ T9557] rtl8150 5-1:1.0: couldn't find required endpoints [ 971.783566][ T9557] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 971.824755][ T9557] usb 5-1: USB disconnect, device number 43 [ 972.584456][T17441] usb 3-1: USB disconnect, device number 55 [ 972.895274][ T9557] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 973.107443][ T9557] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 973.161691][ T9557] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.180464][T21053] netlink: 'syz.4.1848': attribute type 4 has an invalid length. [ 973.241697][ T9557] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 973.262713][ T9557] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.334688][ T9557] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 973.360945][ T9557] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 973.383191][ T9557] usb 2-1: Product: syz [ 973.394022][ T9557] usb 2-1: Manufacturer: syz [ 973.424638][ T9557] cdc_wdm 2-1:1.0: skipping garbage [ 973.460487][ T9557] cdc_wdm 2-1:1.0: skipping garbage [ 973.481471][ T9557] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 973.678703][T21026] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 973.730899][T17441] usb 2-1: USB disconnect, device number 71 [ 973.865350][ T9557] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 974.046427][ T9557] usb 5-1: Using ep0 maxpacket: 16 [ 974.123928][ T9557] usb 5-1: config 0 has no interfaces? [ 974.133571][ T9557] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 974.198726][ T9557] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 974.294505][ T9557] usb 5-1: Manufacturer: syz [ 974.345112][T17441] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 974.372486][ T9557] usb 5-1: config 0 descriptor?? [ 974.616010][ T5824] Bluetooth: hci5: command 0x0406 tx timeout [ 975.253282][T21115] SET target dimension over the limit! [ 975.374965][T21115] netdevsim netdevsim3: Direct firmware load for / [ 975.374965][T21115] failed with error -2 [ 975.405093][T17441] usb 3-1: Using ep0 maxpacket: 8 [ 975.416068][T21115] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 975.416068][T21115] [ 975.441043][T17441] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 975.462781][T17441] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 975.535889][T17441] usb 3-1: config 127 has no interface number 1 [ 975.581722][T17441] usb 3-1: config 127 interface 171 has no altsetting 0 [ 975.629637][T17441] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 975.653376][T17441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.680198][T17441] usb 3-1: Product: syz [ 975.698020][T17441] usb 3-1: Manufacturer: syz [ 975.729370][T17441] usb 3-1: SerialNumber: syz [ 976.755806][T21142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.168412][ T5885] usb 5-1: USB disconnect, device number 44 [ 977.639590][T17441] xr_serial 3-1:127.171: xr_serial converter detected [ 977.670729][T17441] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 977.719996][T17441] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 977.795267][T17441] usb 3-1: USB disconnect, device number 56 [ 978.030195][T17441] xr_serial 3-1:127.171: device disconnected [ 978.405745][T17441] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 978.655559][T17441] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 978.665959][T17441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.674076][T17441] usb 3-1: Product: syz [ 978.678754][T17441] usb 3-1: Manufacturer: syz [ 978.683389][T17441] usb 3-1: SerialNumber: syz [ 978.700176][T17441] usb 3-1: config 0 descriptor?? [ 978.738583][T21198] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 978.934998][T17441] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 979.955811][T21217] binder: 21210:21217 ioctl 400c620e 200000000100 returned -22 [ 981.517738][T17441] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 981.590053][T17441] usb 3-1: USB disconnect, device number 57 [ 982.711488][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 986.092940][T21281] kernel profiling enabled (shift: 9) [ 986.918385][T17441] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 987.105388][T17441] usb 5-1: Using ep0 maxpacket: 8 [ 987.207787][T17441] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 987.228896][T17441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.328738][T17441] pvrusb2: Hardware description: Terratec Grabster AV400 [ 987.376057][T17441] pvrusb2: ********** [ 987.445725][T17441] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 987.499159][T17441] pvrusb2: Important functionality might not be entirely working. [ 987.563659][T17441] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 987.682712][T17441] pvrusb2: ********** [ 987.818701][ T2343] pvrusb2: Invalid write control endpoint [ 988.018566][T21286] pvrusb2: Invalid write control endpoint [ 988.152164][ T2343] pvrusb2: Invalid write control endpoint [ 988.171637][ T9551] usb 5-1: USB disconnect, device number 45 [ 988.252005][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 988.299305][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 988.347961][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 988.380936][ T2343] pvrusb2: Device being rendered inoperable [ 988.415974][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 988.486887][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 988.555109][ T2343] pvrusb2: Attached sub-driver cx25840 [ 988.587017][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 988.645273][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 989.295704][ T9551] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 989.484683][ T9551] usb 5-1: Using ep0 maxpacket: 8 [ 989.536215][ T9551] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.560357][ T9551] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 989.606939][ T9551] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 989.648492][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 989.648508][ T29] audit: type=1326 audit(1771259559.346:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 989.731514][ T9551] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 989.779028][ T29] audit: type=1326 audit(1771259559.386:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 989.802013][ T9551] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 989.828562][ T9551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.858941][T21362] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1876'. [ 989.874495][ T29] audit: type=1326 audit(1771259559.386:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 989.901641][ T95] wlan0: Trigger new scan to find an IBSS to join [ 989.974601][ T9551] hub 5-1:1.0: bad descriptor, ignoring hub [ 990.007306][ T9551] hub 5-1:1.0: probe with driver hub failed with error -5 [ 990.037832][ T9551] cdc_wdm 5-1:1.0: skipping garbage [ 990.058682][ T9551] cdc_wdm 5-1:1.0: skipping garbage [ 990.123413][ T9551] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 990.144706][ T9551] cdc_wdm 5-1:1.0: Unknown control protocol [ 990.255616][ T29] audit: type=1326 audit(1771259559.386:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 990.342235][ T29] audit: type=1326 audit(1771259559.386:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 990.486620][ T29] audit: type=1326 audit(1771259559.386:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 990.626001][ T29] audit: type=1326 audit(1771259559.386:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 990.756174][ T29] audit: type=1326 audit(1771259559.386:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 990.895284][ T29] audit: type=1326 audit(1771259559.386:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 991.056687][ T29] audit: type=1326 audit(1771259559.386:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21357 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 993.023773][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.030484][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.432353][ T5885] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 993.503793][T21419] batadv_slave_1: entered promiscuous mode [ 993.543453][T21419] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 993.590152][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.602278][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.616039][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 993.631806][ T5885] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.662337][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.684099][ T5885] usb 2-1: config 0 descriptor?? [ 993.707482][ T9551] usb 5-1: USB disconnect, device number 46 [ 993.903906][ T7850] wlan0: Trigger new scan to find an IBSS to join [ 994.148551][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 994.212910][ T5885] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 994.312936][ T5885] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 994.605205][T21414] batadv_slave_1: left promiscuous mode [ 994.863728][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.835204][ T9555] usb 2-1: reset high-speed USB device number 72 using dummy_hcd [ 996.151296][T21469] fuse: Unknown parameter 'd&}Jgŏ5SQcf20xffffffffffffffff' [ 996.607420][T21475] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 996.893838][T21488] netlink: 'syz.5.1891': attribute type 21 has an invalid length. [ 996.918946][T21488] netlink: 'syz.5.1891': attribute type 1 has an invalid length. [ 996.959278][T21488] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1891'. [ 997.000495][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1891'. [ 997.110977][T21488] netlink: set zone limit has 4 unknown bytes [ 997.499384][T17441] usb 2-1: USB disconnect, device number 72 [ 998.459701][T21520] vlan2: entered promiscuous mode [ 998.465563][T21520] bridge0: entered promiscuous mode [ 998.496528][T21534] bridge0: port 3(hsr0) entered blocking state [ 998.528276][T21534] bridge0: port 3(hsr0) entered disabled state [ 998.541401][T21534] hsr0: entered allmulticast mode [ 998.567121][T21534] hsr_slave_0: entered allmulticast mode [ 998.575090][T21534] hsr_slave_1: entered allmulticast mode [ 998.594844][T21534] hsr0: entered promiscuous mode [ 998.612329][T21534] bridge0: port 3(hsr0) entered blocking state [ 998.618672][T21534] bridge0: port 3(hsr0) entered forwarding state [ 1000.219851][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 1000.257637][T21546] ptrace attach of "./syz-executor exec"[5836] was attempted by " /dev/snd/seq   ./file0 nel/debug/binder/stats 8    \x09   [ 1000.485896][T21553] fuse: Unknown parameter '5' [ 1000.843526][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1000.843540][ T29] audit: type=1326 audit(1771259570.536:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621819bf79 code=0x7ffc0000 [ 1001.033766][ T29] audit: type=1326 audit(1771259570.576:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.2.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621819bf79 code=0x7ffc0000 [ 1003.130493][T21596] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1902'. [ 1003.986184][T21609] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1003.999126][T21609] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1005.650265][T21628] syzkaller0: entered promiscuous mode [ 1005.658561][T21628] syzkaller0: entered allmulticast mode [ 1006.708608][T21643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1906'. [ 1006.896150][ T9557] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1007.065120][ T9557] usb 4-1: Using ep0 maxpacket: 8 [ 1007.072880][T21651] blktrace: Concurrent blktraces are not allowed on sg0 [ 1007.096992][ T9557] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1007.107262][ T9557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.116303][ T9557] usb 4-1: Product: syz [ 1007.120647][ T9557] usb 4-1: Manufacturer: syz [ 1007.125623][ T9557] usb 4-1: SerialNumber: syz [ 1007.147231][ T9557] usb 4-1: config 0 descriptor?? [ 1007.170346][ T9557] option 4-1:0.0: GSM modem (1-port) converter detected [ 1007.448553][ T9557] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1007.671299][ T9557] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.689025][ T9557] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1007.723628][ T9557] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1007.755765][ T9557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.837267][ T9557] usb 2-1: config 0 descriptor?? [ 1008.829700][ T9557] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1008.891765][ T9557] usb 4-1: USB disconnect, device number 44 [ 1008.914026][ T9557] option 4-1:0.0: device disconnected [ 1009.203075][T17441] usb 2-1: USB disconnect, device number 73 [ 1009.349277][ T29] audit: type=1326 audit(1771259579.046:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1009.495884][ T29] audit: type=1326 audit(1771259579.066:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1009.554731][ T29] audit: type=1326 audit(1771259579.086:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1009.642972][ T29] audit: type=1326 audit(1771259579.086:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1009.676234][ T29] audit: type=1326 audit(1771259579.086:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1009.707975][ T29] audit: type=1326 audit(1771259579.086:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1009.852365][ T29] audit: type=1326 audit(1771259579.086:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1009.948148][ T29] audit: type=1326 audit(1771259579.086:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1010.058249][ T29] audit: type=1326 audit(1771259579.086:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1010.148873][ T29] audit: type=1326 audit(1771259579.086:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21679 comm="syz.3.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bafd9bf79 code=0x7ffc0000 [ 1011.654606][T21643] bond0: entered promiscuous mode [ 1011.672346][T21643] bond_slave_0: entered promiscuous mode [ 1011.711530][T21643] bond_slave_1: entered promiscuous mode [ 1011.749312][T21643] geneve0: entered promiscuous mode [ 1011.757224][T21643] debugfs: 'hsr1' already exists in 'hsr' [ 1011.772370][T21643] Cannot create hsr debugfs directory [ 1011.786153][T21643] hsr1: entered promiscuous mode [ 1012.275606][ T5885] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1012.466289][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 1012.479765][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.499493][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 1012.521073][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59336, setting to 1024 [ 1012.552222][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1012.615547][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1012.663020][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.708788][ T5885] usb 5-1: config 0 descriptor?? [ 1012.771289][T21723] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1014.228107][ T9557] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1014.478813][ T9557] usb 3-1: Using ep0 maxpacket: 16 [ 1014.512283][ T9557] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.555912][ T9557] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.619613][ T9557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1014.644850][T21778] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1921'. [ 1014.659714][ T9557] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1014.682862][ T9557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.722228][ T9557] usb 3-1: config 0 descriptor?? [ 1014.965640][T21759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.986754][T21759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.032801][T17443] usb 5-1: USB disconnect, device number 47 [ 1016.789156][T21804] macvtap1: left allmulticast mode [ 1016.804263][T21804] erspan0: left allmulticast mode [ 1017.178748][ T9551] IPVS: starting estimator thread 0... [ 1017.275718][T21814] IPVS: using max 26 ests per chain, 62400 per kthread [ 1017.760182][ T9557] usbhid 3-1:0.0: can't add hid device: -71 [ 1017.778644][ T9557] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1017.815575][ T9557] usb 3-1: USB disconnect, device number 58 [ 1018.167323][T21836] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 1018.732358][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1018.732377][ T29] audit: type=1326 audit(1771259588.426:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1018.834561][ T29] audit: type=1326 audit(1771259588.426:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1018.834620][ T29] audit: type=1326 audit(1771259588.486:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1018.834663][ T29] audit: type=1326 audit(1771259588.486:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1018.834715][ T29] audit: type=1326 audit(1771259588.486:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1018.834764][ T29] audit: type=1326 audit(1771259588.486:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1018.834820][ T29] audit: type=1326 audit(1771259588.486:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1018.834868][ T29] audit: type=1326 audit(1771259588.486:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1018.834922][ T29] audit: type=1326 audit(1771259588.486:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1018.834975][ T29] audit: type=1326 audit(1771259588.486:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1019.225521][ T5885] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1019.388154][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1019.405471][ T5885] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 1019.418177][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1019.430227][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1019.440429][ T5885] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1019.457433][ T5885] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1019.467651][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.476624][ T5885] usb 6-1: Product: syz [ 1019.481974][ T5885] usb 6-1: Manufacturer: syz [ 1019.488315][ T5885] usb 6-1: SerialNumber: syz [ 1019.504622][ T5885] usb 6-1: config 0 descriptor?? [ 1019.511327][T21843] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1019.527989][ T5885] usb 6-1: ucan: probing device on interface #0 [ 1019.540151][ T5885] usb 6-1: ucan: invalid endpoint configuration [ 1019.547502][ T5885] usb 6-1: ucan: probe failed; try to update the device firmware [ 1019.752784][ T5885] usb 6-1: USB disconnect, device number 7 [ 1020.212716][T21871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1020.857298][T21881] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1932'. [ 1021.320370][T21892] netlink: 'syz.4.1934': attribute type 6 has an invalid length. [ 1021.595124][ T9551] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1021.829272][ T9551] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1021.880233][ T9551] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1021.938844][ T9551] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1021.991247][ T9551] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1022.078645][ T9551] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1022.174136][ T9551] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1022.205460][ T9551] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1022.228715][ T9551] usb 5-1: Product: syz [ 1022.256722][ T9551] usb 5-1: Manufacturer: syz [ 1022.314578][ T9551] cdc_wdm 5-1:1.0: skipping garbage [ 1022.371308][ T9551] cdc_wdm 5-1:1.0: skipping garbage [ 1022.408649][ T9551] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1022.440385][ T9551] cdc_wdm 5-1:1.0: Unknown control protocol [ 1023.253608][T21892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1934'. [ 1023.915212][T17441] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1024.089647][T17441] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1024.131270][T17441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.158991][T17441] usb 2-1: Product: syz [ 1024.173565][T17441] usb 2-1: Manufacturer: syz [ 1024.197821][T17441] usb 2-1: SerialNumber: syz [ 1024.240593][T17441] usb 2-1: config 0 descriptor?? [ 1024.321956][T17441] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1024.886027][ T5885] usb 5-1: USB disconnect, device number 48 [ 1025.303762][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'. [ 1025.396371][T21956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 1025.537712][T21956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 1025.566050][T17441] gspca_stk1135: reg_w 0x3 err -110 [ 1025.580048][T17441] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.614707][T17441] gspca_stk1135: Sensor write failed [ 1025.627086][T17441] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.634167][T17441] gspca_stk1135: Sensor write failed [ 1025.644549][T17441] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.650938][T17441] gspca_stk1135: Sensor read failed [ 1025.658758][T17441] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.667501][T17441] gspca_stk1135: Sensor read failed [ 1025.672781][T17441] gspca_stk1135: Detected sensor type unknown (0x0) [ 1025.679895][T17441] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.686562][T17441] gspca_stk1135: Sensor read failed [ 1025.693202][T17441] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.699895][T17441] gspca_stk1135: Sensor read failed [ 1025.706296][T17441] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.712669][T17441] gspca_stk1135: Sensor write failed [ 1025.718299][T17441] gspca_stk1135: serial bus timeout: status=0x00 [ 1025.725976][T17441] gspca_stk1135: Sensor write failed [ 1025.731446][T21933] hsr_slave_0: left promiscuous mode [ 1025.741635][T17441] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1025.780731][T21933] hsr_slave_1: left promiscuous mode [ 1027.174537][ T9551] usb 2-1: USB disconnect, device number 74 [ 1027.315672][ T5885] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1027.517078][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 1027.548020][ T5885] usb 4-1: config 0 has no interfaces? [ 1027.555811][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1027.637872][ T5885] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1027.666284][T22010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1943'. [ 1027.697570][ T5885] usb 4-1: Manufacturer: syz [ 1027.748827][ T5885] usb 4-1: config 0 descriptor?? [ 1028.374559][T21977] bridge0: port 3(bond0) entered blocking state [ 1028.381001][T21977] bridge0: port 3(bond0) entered forwarding state [ 1028.387985][T21977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.395178][T21977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.402565][T21977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.409746][T21977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.596816][T21977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1028.735472][T22037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1030.393288][ T9553] usb 4-1: USB disconnect, device number 45 [ 1030.790820][T22106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 1031.041471][T22113] fuse: Unknown parameter '5' [ 1032.257089][T22131] sctp: [Deprecated]: syz.5.1952 (pid 22131) Use of int in maxseg socket option. [ 1032.257089][T22131] Use struct sctp_assoc_value instead [ 1032.791687][T22141] netlink: 'syz.1.1953': attribute type 29 has an invalid length. [ 1034.338085][T22170] CUSE: info not properly terminated [ 1034.497181][T22173] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1957'. [ 1034.507796][T22157] IPVS: length: 149 != 17667290688 [ 1034.857097][T22170] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1957'. [ 1035.109615][T22184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1959'. [ 1036.545878][T22186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1960'. [ 1037.726638][ T5885] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1038.076286][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1038.230873][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1038.435781][ T5885] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1038.509422][ T9553] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 1038.526632][ T5885] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1038.545884][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.754819][ T5885] usb 6-1: Product: syz [ 1038.765633][ T5885] usb 6-1: Manufacturer: syz [ 1038.854699][ T5885] usb 6-1: SerialNumber: syz [ 1038.909849][ T5885] usb 6-1: config 0 descriptor?? [ 1039.032296][ T9553] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1039.046485][ T9553] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1039.206278][ T9553] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1039.353210][T22216] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1039.452593][T22240] __vm_enough_memory: pid: 22240, comm: syz.3.1967, bytes: 4503599627366400 not enough memory for the allocation [ 1039.514176][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1966'. [ 1039.597144][ T9553] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1040.041099][T22245] fuse: Unknown parameter '5' [ 1040.093392][ T9553] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1040.153857][T22216] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1040.747957][ T9553] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1040.844058][ T9553] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1040.844084][ T9553] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1040.844103][ T9553] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1040.844122][ T9553] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1041.851994][ T9553] usb 2-1: unable to read config index 2 descriptor/start: -71 [ 1041.930277][ T9553] usb 2-1: can't read configurations, error -71 [ 1043.460046][T17443] usb 6-1: USB disconnect, device number 8 [ 1047.877866][T22362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1980'. [ 1048.198461][T22368] trusted_key: encrypted_key: insufficient parameters specified [ 1048.767771][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 1049.765320][T22392] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1985'. [ 1049.913186][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 1050.198322][T22399] macvlan0: entered allmulticast mode [ 1050.392557][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1988'. [ 1051.716579][T22439] netlink: 'syz.2.1989': attribute type 29 has an invalid length. [ 1053.532098][T22465] xt_policy: output policy not valid in PREROUTING and INPUT [ 1054.093796][T22483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.460240][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.480099][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.240117][T22513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1999'. [ 1058.225085][T17443] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1058.373406][T22541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 1058.409248][T17443] usb 4-1: config 1 interface 0 altsetting 15 bulk endpoint 0x1 has invalid maxpacket 32 [ 1058.453361][T17443] usb 4-1: config 1 interface 0 altsetting 15 bulk endpoint 0x82 has invalid maxpacket 8 [ 1058.523364][T17443] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1058.582160][T17443] usb 4-1: string descriptor 0 read error: -22 [ 1058.598496][T17443] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1058.670730][T17443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.849255][T22530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1059.006244][T22530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1061.475143][ T9557] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1061.701363][ T9557] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1061.722164][ T9557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.752082][ T9557] usb 5-1: Product: syz [ 1061.764590][ T9557] usb 5-1: Manufacturer: syz [ 1061.783257][ T9557] usb 5-1: SerialNumber: syz [ 1061.820809][ T9557] usb 5-1: config 0 descriptor?? [ 1062.010291][T17443] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 15 proto 3 vid 0x0525 pid 0xA4A8 [ 1062.077683][ T9557] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1062.113491][T17443] usb 4-1: USB disconnect, device number 46 [ 1062.160350][T17443] usblp0: removed [ 1062.318057][T22579] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1062.387587][T22579] bond3 (unregistering): Released all slaves [ 1062.795230][T17443] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1063.007722][T17443] usb 2-1: config 0 has no interfaces? [ 1063.055740][T17443] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1063.115663][T17443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.126261][T17443] usb 2-1: Product: syz [ 1063.130516][T17443] usb 2-1: Manufacturer: syz [ 1063.145608][T17443] usb 2-1: SerialNumber: syz [ 1063.157831][T17443] usb 2-1: config 0 descriptor?? [ 1064.745221][T17443] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1064.912005][ T9557] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1064.965758][T17443] usb 3-1: Using ep0 maxpacket: 16 [ 1064.978327][ T9557] usb 5-1: USB disconnect, device number 49 [ 1065.040642][T17443] usb 3-1: config 0 has no interfaces? [ 1065.080340][T17443] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1065.099334][T17443] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1065.157201][T17443] usb 3-1: Manufacturer: syz [ 1065.293460][T17443] usb 3-1: config 0 descriptor?? [ 1065.310977][ T9553] usb 2-1: USB disconnect, device number 77 [ 1065.462752][T22734] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1067.326664][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1067.326683][ T29] audit: type=1326 audit(1771259637.016:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1067.433045][ T29] audit: type=1326 audit(1771259637.016:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1067.486955][ T29] audit: type=1326 audit(1771259637.016:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1067.514402][ T29] audit: type=1326 audit(1771259637.016:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1067.609525][ T29] audit: type=1326 audit(1771259637.016:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1067.675643][ T29] audit: type=1326 audit(1771259637.016:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1067.765546][ T29] audit: type=1326 audit(1771259637.016:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1067.858395][T22782] hub 9-0:1.0: USB hub found [ 1067.868754][T22782] hub 9-0:1.0: 1 port detected [ 1067.904214][ T29] audit: type=1326 audit(1771259637.016:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1068.006500][ T29] audit: type=1326 audit(1771259637.016:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1068.110656][ T29] audit: type=1326 audit(1771259637.016:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22769 comm="syz.4.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d83f9bf79 code=0x7ffc0000 [ 1068.235549][ T9553] usb 3-1: USB disconnect, device number 59 [ 1068.509839][T22779] usb usb8: usbfs: process 22779 (syz.4.2015) did not claim interface 0 before use [ 1068.564717][T22779] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1068.604241][T22779] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1068.624460][T22779] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1069.488984][T22818] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2018'. [ 1069.585584][T22823] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 1069.786082][T22827] use of bytesused == 0 is deprecated and will be removed in the future, [ 1069.807074][T22827] use the actual size instead. [ 1070.401228][T22836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'. [ 1070.420975][T17443] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1070.453722][T22836] bridge_slave_1: left allmulticast mode [ 1070.498337][T22836] bridge_slave_1: left promiscuous mode [ 1070.514347][T22836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.567305][T22836] bridge_slave_0: left allmulticast mode [ 1070.573069][T22836] bridge_slave_0: left promiscuous mode [ 1070.601524][T22836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.615533][T17443] usb 3-1: Using ep0 maxpacket: 32 [ 1070.648216][T17443] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1070.732813][T17443] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1070.820907][T17443] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1070.858127][T17443] usb 3-1: Product: syz [ 1070.893954][T17443] usb 3-1: Manufacturer: syz [ 1070.938662][T17443] usb 3-1: SerialNumber: syz [ 1070.964181][T22846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2023'. [ 1070.984546][T17443] usb 3-1: config 0 descriptor?? [ 1070.998710][T22834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1071.270050][T17443] usb 3-1: USB disconnect, device number 60 [ 1071.625825][T17443] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1071.786746][T17443] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1071.814930][T17443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.844497][T17443] usb 3-1: config 0 descriptor?? [ 1071.857302][T17443] cp210x 3-1:0.0: cp210x converter detected [ 1072.267400][T22834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.277621][T17443] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1072.282652][T22834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.351979][T22834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.395985][T22834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.443436][T17443] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1072.463150][T17443] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1072.502260][T17443] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1072.554250][T17443] usb 3-1: USB disconnect, device number 61 [ 1072.584719][T17443] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1072.610689][T17443] cp210x 3-1:0.0: device disconnected [ 1072.709393][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2024'. [ 1073.462358][T22923] netlink: 'syz.2.2027': attribute type 4 has an invalid length. [ 1073.502138][T22922] netlink: 'syz.2.2027': attribute type 4 has an invalid length. [ 1073.529638][T22922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1074.942687][T22954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1075.025198][T17443] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1075.216360][T17443] usb 6-1: Using ep0 maxpacket: 8 [ 1075.255101][T17441] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1075.439416][T17441] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1075.478661][T22960] geneve2: entered promiscuous mode [ 1075.484728][T17441] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1075.488108][T22960] geneve2: entered allmulticast mode [ 1075.584721][T17441] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1075.611503][T17441] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1075.696326][T17441] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1075.705723][T17441] usb 4-1: Product: syz [ 1075.759375][T17441] usb 4-1: Manufacturer: syz [ 1075.800282][T17441] usb 4-1: SerialNumber: syz [ 1075.882129][T17441] usb 4-1: config 0 descriptor?? [ 1075.924099][T17441] usb 4-1: selecting invalid altsetting 0 [ 1076.658689][T17441] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1076.895157][T17441] usb 5-1: Using ep0 maxpacket: 16 [ 1076.997546][T17441] usb 5-1: config 0 has no interfaces? [ 1077.012021][T17441] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1077.041032][T17441] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1077.156734][T17441] usb 5-1: Manufacturer: syz [ 1077.473015][T17441] usb 5-1: config 0 descriptor?? [ 1077.775089][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 1077.892853][T22983] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1078.137350][T17443] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1078.181724][T17443] usb 6-1: no configurations [ 1078.318017][T17443] usb 6-1: can't read configurations, error -22 [ 1079.082543][ T9555] usb 4-1: USB disconnect, device number 47 [ 1079.350572][T17441] usb 5-1: USB disconnect, device number 50 [ 1079.555550][T17443] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1079.626943][T23083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2038'. [ 1079.798149][T17443] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1079.874267][T17443] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1079.936827][T17443] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1080.002247][T17443] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1080.091505][T17443] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.129694][T17443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.214801][T17443] usb 6-1: config 0 descriptor?? [ 1080.233609][T23082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2037'. [ 1080.993894][T17443] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1081.793966][T23125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.075622][T17443] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1082.269042][T17443] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 1082.318395][T17443] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.375973][ T9551] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 1082.397327][T17443] usb 2-1: config 0 has no interface number 0 [ 1082.433608][T17443] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1082.503372][T17443] usb 2-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1082.535658][ T9551] usb 6-1: device descriptor read/64, error -32 [ 1082.552175][T17443] usb 2-1: config 0 interface 113 has no altsetting 0 [ 1082.588307][T17443] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1082.600386][T17443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.616896][T17443] usb 2-1: Product: syz [ 1082.621917][T17443] usb 2-1: Manufacturer: syz [ 1082.628796][T17443] usb 2-1: SerialNumber: syz [ 1082.639808][T17443] usb 2-1: config 0 descriptor?? [ 1082.653697][T17443] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1082.785651][ T9551] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 1082.987766][ T9551] usb 6-1: device descriptor read/64, error -32 [ 1083.174897][T23137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2042'. [ 1083.235540][ T9551] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 1083.296050][ T9551] usb 6-1: device descriptor read/8, error -32 [ 1083.532714][T23029] raw-gadget.0 gadget.5: failed to queue suspend event [ 1083.555838][ T9551] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 1083.600229][T23029] raw-gadget.0 gadget.5: failed to queue disconnect event [ 1083.788617][ T9551] usb 6-1: device not accepting address 11, error -71 [ 1083.869028][ T9553] usb 6-1: USB disconnect, device number 11 [ 1084.899847][ T9555] usb 2-1: USB disconnect, device number 78 [ 1085.366348][T23186] raw_sendmsg: syz.3.2046 forgot to set AF_INET. Fix it! [ 1085.705095][T17443] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1085.894293][T17443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 1085.936578][T17443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 1085.976122][T17443] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1086.010207][T17443] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1086.035947][T17443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.087815][T17443] usb 2-1: config 0 descriptor?? [ 1086.124031][T23182] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1086.663349][T17443] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1086.748522][T23207] trusted_key: encrypted_key: insufficient parameters specified [ 1086.895972][T23217] Cannot find del_set index 1 as target [ 1088.167970][ T9555] usb 2-1: reset high-speed USB device number 79 using dummy_hcd [ 1088.445298][ T9557] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1088.636310][ T9557] usb 6-1: Using ep0 maxpacket: 16 [ 1088.647958][ T9557] usb 6-1: config 0 has no interfaces? [ 1088.656617][ T9557] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1088.715936][ T9557] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1088.790742][ T9557] usb 6-1: Manufacturer: syz [ 1088.839169][ T9557] usb 6-1: config 0 descriptor?? [ 1089.245608][T23234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1089.493387][T23249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1090.406392][T17443] usb 2-1: USB disconnect, device number 79 [ 1091.545716][ T9555] usb 6-1: USB disconnect, device number 12 [ 1091.796903][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1091.796924][ T29] audit: type=1326 audit(1771259661.486:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1091.940163][ T29] audit: type=1326 audit(1771259661.526:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1091.999759][ T29] audit: type=1326 audit(1771259661.526:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1092.058981][ T29] audit: type=1326 audit(1771259661.526:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1092.123519][ T29] audit: type=1326 audit(1771259661.526:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1092.174624][ T29] audit: type=1326 audit(1771259661.526:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1092.243922][ T29] audit: type=1326 audit(1771259661.526:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1092.300244][ T29] audit: type=1326 audit(1771259661.526:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1092.381131][ T29] audit: type=1326 audit(1771259662.016:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1092.442901][ T29] audit: type=1326 audit(1771259662.016:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.5.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8719b9bf79 code=0x7ffc0000 [ 1092.685639][ T5885] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1092.788336][T23357] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2056'. [ 1093.046563][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 1093.095931][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.107023][ T5885] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1093.133418][ T5885] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1093.148815][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.168788][ T5885] usb 6-1: Product: syz [ 1093.188322][ T5885] usb 6-1: Manufacturer: syz [ 1093.213899][ T5885] usb 6-1: SerialNumber: syz [ 1093.282602][ T5885] usb 6-1: config 0 descriptor?? [ 1093.442713][T23341] dvmrp0: entered allmulticast mode [ 1093.901791][T23385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1094.242880][T23405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2060'. [ 1096.033208][T23428] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1096.188685][T17443] usb 6-1: USB disconnect, device number 13 [ 1096.991769][T23455] xt_hashlimit: size too large, truncated to 1048576 [ 1099.431864][T23488] netlink: 'syz.3.2069': attribute type 29 has an invalid length. [ 1100.346814][T23468] input: syz0 as /devices/virtual/input/input40 [ 1101.493739][T23523] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2072'. [ 1102.290770][T23531] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2076'. [ 1104.578076][T23571] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1104.614725][T23571] team0: Port device batadv1 added [ 1104.643603][T23571] hub 9-0:1.0: USB hub found [ 1104.689914][T23571] hub 9-0:1.0: 1 port detected [ 1106.364677][T23595] program syz.5.2084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1106.905985][ T5885] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1107.088064][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 1107.120633][ T5885] usb 2-1: config 0 has no interfaces? [ 1107.156422][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1107.199013][ T5885] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1107.340454][ T5885] usb 2-1: Manufacturer: syz [ 1107.502338][ T5885] usb 2-1: config 0 descriptor?? [ 1108.320337][T23652] Cannot find add_set index 0 as target [ 1108.378997][T23652] netdevsim netdevsim2: Direct firmware load for / [ 1108.378997][T23652] failed with error -2 [ 1108.406753][T23652] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 1108.406753][T23652] [ 1108.540422][ T7859] [ 1108.542806][ T7859] ============================================ [ 1108.548980][ T7859] WARNING: possible recursive locking detected [ 1108.555279][ T7859] syzkaller #0 Tainted: G L [ 1108.561265][ T7859] -------------------------------------------- [ 1108.567498][ T7859] kworker/u8:15/7859 is trying to acquire lock: [ 1108.573737][ T7859] ffff8880328e0260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 1108.583080][ T7859] [ 1108.583080][ T7859] but task is already holding lock: [ 1108.590432][ T7859] ffff8880328e0260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1108.600018][ T7859] [ 1108.600018][ T7859] other info that might help us debug this: [ 1108.608065][ T7859] Possible unsafe locking scenario: [ 1108.608065][ T7859] [ 1108.615531][ T7859] CPU0 [ 1108.618818][ T7859] ---- [ 1108.622092][ T7859] lock(k-sk_lock-AF_INET6); [ 1108.626803][ T7859] lock(k-sk_lock-AF_INET6); [ 1108.631484][ T7859] [ 1108.631484][ T7859] *** DEADLOCK *** [ 1108.631484][ T7859] [ 1108.639618][ T7859] May be due to missing lock nesting notation [ 1108.639618][ T7859] [ 1108.647936][ T7859] 4 locks held by kworker/u8:15/7859: [ 1108.653306][ T7859] #0: ffff88801b380948 ((wq_completion)krds_cp_wq#12/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1108.665068][ T7859] #1: ffffc90004857c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1108.677901][ T7859] #2: ffff8880328e0260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1108.687910][ T7859] #3: ffff8880328e0408 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 1108.697925][ T7859] [ 1108.697925][ T7859] stack backtrace: [ 1108.703817][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.703836][ T7859] Tainted: [L]=SOFTLOCKUP [ 1108.703841][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1108.703850][ T7859] Workqueue: krds_cp_wq#12/0 rds_send_worker [ 1108.703866][ T7859] Call Trace: [ 1108.703872][ T7859] [ 1108.703878][ T7859] dump_stack_lvl+0xe8/0x150 [ 1108.703896][ T7859] print_deadlock_bug+0x279/0x290 [ 1108.703916][ T7859] __lock_acquire+0x253f/0x2cf0 [ 1108.703936][ T7859] ? unwind_next_frame+0xa5/0x23c0 [ 1108.703958][ T7859] lock_acquire+0xf0/0x2e0 [ 1108.703972][ T7859] ? inet6_getname+0x15d/0x650 [ 1108.703991][ T7859] lock_sock_nested+0x48/0x100 [ 1108.704007][ T7859] ? inet6_getname+0x15d/0x650 [ 1108.704023][ T7859] inet6_getname+0x15d/0x650 [ 1108.704041][ T7859] rds_tcp_conn_slots_available+0x288/0x470 [ 1108.704059][ T7859] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1108.704080][ T7859] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1108.704099][ T7859] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1108.704117][ T7859] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1108.704134][ T7859] ? rds_send_worker+0x7d/0x2e0 [ 1108.704145][ T7859] ? process_scheduled_works+0xb02/0x1830 [ 1108.704161][ T7859] ? worker_thread+0xa50/0xfc0 [ 1108.704179][ T7859] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1108.704201][ T7859] rds_recv_incoming+0x9f6/0x12d0 [ 1108.704221][ T7859] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1108.704238][ T7859] ? skb_copy_bits+0x7e5/0x8f0 [ 1108.704260][ T7859] rds_tcp_data_recv+0x7f1/0xa40 [ 1108.704282][ T7859] __tcp_read_sock+0x196/0x970 [ 1108.704299][ T7859] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1108.704317][ T7859] rds_tcp_data_ready+0x369/0x9a0 [ 1108.704333][ T7859] ? __pfx_sock_def_readable+0x10/0x10 [ 1108.704349][ T7859] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1108.704367][ T7859] ? tcp_grow_window+0x4fc/0xc50 [ 1108.704387][ T7859] tcp_data_queue+0x1e2e/0x5e50 [ 1108.704406][ T7859] ? tcp_urg+0x106/0x410 [ 1108.704419][ T7859] ? __pfx_tcp_data_queue+0x10/0x10 [ 1108.704433][ T7859] ? __pfx_tcp_urg+0x10/0x10 [ 1108.704445][ T7859] ? ktime_get+0x45/0x200 [ 1108.704456][ T7859] ? seqcount_lockdep_reader_access+0x20/0x100 [ 1108.704468][ T7859] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1108.704502][ T7859] tcp_rcv_established+0xf45/0x2740 [ 1108.704522][ T7859] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1108.704535][ T7859] ? ip6_dst_check+0x50/0x7e0 [ 1108.704555][ T7859] ? ip6_dst_check+0xe2/0x7e0 [ 1108.704574][ T7859] ? ip6_dst_check+0x5e3/0x7e0 [ 1108.704592][ T7859] ? __pfx_ip6_dst_check+0x10/0x10 [ 1108.704612][ T7859] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1108.704632][ T7859] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1108.704647][ T7859] __release_sock+0x1b8/0x3a0 [ 1108.704665][ T7859] release_sock+0x5f/0x1f0 [ 1108.704683][ T7859] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1108.704702][ T7859] rds_send_xmit+0x207e/0x28d0 [ 1108.704739][ T7859] ? __pfx_rds_send_xmit+0x10/0x10 [ 1108.704760][ T7859] ? preempt_schedule_thunk+0x16/0x30 [ 1108.704775][ T7859] rds_send_worker+0x7d/0x2e0 [ 1108.704788][ T7859] ? process_scheduled_works+0xa25/0x1830 [ 1108.704805][ T7859] process_scheduled_works+0xb02/0x1830 [ 1108.704830][ T7859] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.704849][ T7859] ? assign_work+0x3d5/0x5e0 [ 1108.704867][ T7859] worker_thread+0xa50/0xfc0 [ 1108.704893][ T7859] kthread+0x388/0x470 [ 1108.704905][ T7859] ? __pfx_worker_thread+0x10/0x10 [ 1108.704921][ T7859] ? __pfx_kthread+0x10/0x10 [ 1108.704934][ T7859] ret_from_fork+0x51e/0xb90 [ 1108.704952][ T7859] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.704988][ T7859] ? __switch_to+0xc7d/0x1450 [ 1108.705009][ T7859] ? __pfx_kthread+0x10/0x10 [ 1108.705026][ T7859] ret_from_fork_asm+0x1a/0x30 [ 1108.705059][ T7859] [ 1109.064059][ T7859] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 1109.072844][ T7859] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7859, name: kworker/u8:15 [ 1109.082138][ T7859] preempt_count: 201, expected: 0 [ 1109.087176][ T7859] RCU nest depth: 0, expected: 0 [ 1109.092105][ T7859] INFO: lockdep is turned off. [ 1109.096890][ T7859] Preemption disabled at: [ 1109.096899][ T7859] [<0000000000000000>] 0x0 [ 1109.105666][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.105700][ T7859] Tainted: [L]=SOFTLOCKUP [ 1109.105708][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.105722][ T7859] Workqueue: krds_cp_wq#12/0 rds_send_worker [ 1109.105745][ T7859] Call Trace: [ 1109.105755][ T7859] [ 1109.105763][ T7859] dump_stack_lvl+0xe8/0x150 [ 1109.105790][ T7859] __might_resched+0x378/0x4d0 [ 1109.105818][ T7859] lock_sock_nested+0x5d/0x100 [ 1109.105843][ T7859] inet6_getname+0x15d/0x650 [ 1109.105869][ T7859] rds_tcp_conn_slots_available+0x288/0x470 [ 1109.105896][ T7859] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1109.105928][ T7859] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1109.105957][ T7859] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1109.105980][ T7859] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1109.106006][ T7859] ? rds_send_worker+0x7d/0x2e0 [ 1109.106022][ T7859] ? process_scheduled_works+0xb02/0x1830 [ 1109.106044][ T7859] ? worker_thread+0xa50/0xfc0 [ 1109.106073][ T7859] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1109.106097][ T7859] rds_recv_incoming+0x9f6/0x12d0 [ 1109.106119][ T7859] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1109.106138][ T7859] ? skb_copy_bits+0x7e5/0x8f0 [ 1109.106163][ T7859] rds_tcp_data_recv+0x7f1/0xa40 [ 1109.106205][ T7859] __tcp_read_sock+0x196/0x970 [ 1109.106225][ T7859] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1109.106246][ T7859] rds_tcp_data_ready+0x369/0x9a0 [ 1109.106266][ T7859] ? __pfx_sock_def_readable+0x10/0x10 [ 1109.106285][ T7859] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1109.106306][ T7859] ? tcp_grow_window+0x4fc/0xc50 [ 1109.106329][ T7859] tcp_data_queue+0x1e2e/0x5e50 [ 1109.106352][ T7859] ? tcp_urg+0x106/0x410 [ 1109.106367][ T7859] ? __pfx_tcp_data_queue+0x10/0x10 [ 1109.106384][ T7859] ? __pfx_tcp_urg+0x10/0x10 [ 1109.106398][ T7859] ? ktime_get+0x45/0x200 [ 1109.106411][ T7859] ? seqcount_lockdep_reader_access+0x20/0x100 [ 1109.106425][ T7859] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1109.106444][ T7859] tcp_rcv_established+0xf45/0x2740 [ 1109.106465][ T7859] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1109.106481][ T7859] ? ip6_dst_check+0x50/0x7e0 [ 1109.106503][ T7859] ? ip6_dst_check+0xe2/0x7e0 [ 1109.106523][ T7859] ? ip6_dst_check+0x5e3/0x7e0 [ 1109.106544][ T7859] ? __pfx_ip6_dst_check+0x10/0x10 [ 1109.106565][ T7859] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1109.106587][ T7859] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1109.106604][ T7859] __release_sock+0x1b8/0x3a0 [ 1109.106623][ T7859] release_sock+0x5f/0x1f0 [ 1109.106643][ T7859] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1109.106665][ T7859] rds_send_xmit+0x207e/0x28d0 [ 1109.106704][ T7859] ? __pfx_rds_send_xmit+0x10/0x10 [ 1109.106729][ T7859] ? preempt_schedule_thunk+0x16/0x30 [ 1109.106746][ T7859] rds_send_worker+0x7d/0x2e0 [ 1109.106760][ T7859] ? process_scheduled_works+0xa25/0x1830 [ 1109.106778][ T7859] process_scheduled_works+0xb02/0x1830 [ 1109.106807][ T7859] ? __pfx_process_scheduled_works+0x10/0x10 [ 1109.106828][ T7859] ? assign_work+0x3d5/0x5e0 [ 1109.106847][ T7859] worker_thread+0xa50/0xfc0 [ 1109.106876][ T7859] kthread+0x388/0x470 [ 1109.106889][ T7859] ? __pfx_worker_thread+0x10/0x10 [ 1109.106907][ T7859] ? __pfx_kthread+0x10/0x10 [ 1109.106921][ T7859] ret_from_fork+0x51e/0xb90 [ 1109.106942][ T7859] ? __pfx_ret_from_fork+0x10/0x10 [ 1109.106960][ T7859] ? __switch_to+0xc7d/0x1450 [ 1109.106977][ T7859] ? __pfx_kthread+0x10/0x10 [ 1109.106990][ T7859] ret_from_fork_asm+0x1a/0x30 [ 1109.107018][ T7859] [ 1109.107026][ T7859] BUG: scheduling while atomic: kworker/u8:15/7859/0x00000202 [ 1109.449962][ T7859] INFO: lockdep is turned off. [ 1109.454741][ T7859] Modules linked in: [ 1109.458703][ T7859] Preemption disabled at: [ 1109.458711][ T7859] [<0000000000000000>] 0x0 [ 1109.467489][ T7859] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 1109.476273][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: kworker/u8:15 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1109.487412][ T7859] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1109.492600][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.502679][ T7859] Workqueue: krds_cp_wq#12/0 rds_send_worker [ 1109.508660][ T7859] Call Trace: [ 1109.511935][ T7859] [ 1109.514857][ T7859] vpanic+0x56c/0xa60 [ 1109.518841][ T7859] ? __pfx_vpanic+0x10/0x10 [ 1109.523349][ T7859] ? rcu_is_watching+0x15/0xb0 [ 1109.528119][ T7859] panic+0xc5/0xd0 [ 1109.531846][ T7859] ? __pfx_panic+0x10/0x10 [ 1109.536277][ T7859] ? __pfx__printk+0x10/0x10 [ 1109.540883][ T7859] ? vprintk_emit+0x4eb/0x560 [ 1109.545566][ T7859] ? __pfx_vprintk_emit+0x10/0x10 [ 1109.550609][ T7859] check_panic_on_warn+0x89/0xb0 [ 1109.555555][ T7859] __schedule_bug+0xf6/0x150 [ 1109.560163][ T7859] __schedule+0x16a9/0x5340 [ 1109.564691][ T7859] ? __wake_up_klogd+0xe6/0x120 [ 1109.569536][ T7859] ? vprintk_emit+0x4eb/0x560 [ 1109.574210][ T7859] ? rcu_is_watching+0x15/0xb0 [ 1109.578979][ T7859] ? __pfx_vprintk_emit+0x10/0x10 [ 1109.584010][ T7859] ? unwind_next_frame+0xa5/0x23c0 [ 1109.589123][ T7859] ? do_raw_spin_lock+0x12b/0x2f0 [ 1109.594153][ T7859] ? __pfx___schedule+0x10/0x10 [ 1109.599003][ T7859] ? rcu_is_watching+0x15/0xb0 [ 1109.603763][ T7859] ? rcu_is_watching+0x15/0xb0 [ 1109.608529][ T7859] ? lock_release+0x4b/0x3d0 [ 1109.613119][ T7859] ? schedule+0x90/0x360 [ 1109.617372][ T7859] ? wq_worker_sleeping+0x63/0x250 [ 1109.622503][ T7859] schedule+0x164/0x360 [ 1109.626690][ T7859] __lock_sock+0x161/0x2c0 [ 1109.631119][ T7859] ? __pfx___lock_sock+0x10/0x10 [ 1109.636050][ T7859] ? do_raw_spin_lock+0x12b/0x2f0 [ 1109.641084][ T7859] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1109.647145][ T7859] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1109.652514][ T7859] ? lock_acquire+0x57/0x2e0 [ 1109.657100][ T7859] ? dump_stack_lvl+0x135/0x150 [ 1109.661955][ T7859] ? lock_sock_nested+0x6a/0x100 [ 1109.666895][ T7859] lock_sock_nested+0x9f/0x100 [ 1109.671670][ T7859] inet6_getname+0x15d/0x650 [ 1109.676272][ T7859] rds_tcp_conn_slots_available+0x288/0x470 [ 1109.682189][ T7859] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1109.688612][ T7859] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1109.694435][ T7859] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1109.700853][ T7859] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1109.705988][ T7859] ? rds_send_worker+0x7d/0x2e0 [ 1109.710855][ T7859] ? process_scheduled_works+0xb02/0x1830 [ 1109.716579][ T7859] ? worker_thread+0xa50/0xfc0 [ 1109.721352][ T7859] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1109.726998][ T7859] rds_recv_incoming+0x9f6/0x12d0 [ 1109.732036][ T7859] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1109.737500][ T7859] ? skb_copy_bits+0x7e5/0x8f0 [ 1109.742272][ T7859] rds_tcp_data_recv+0x7f1/0xa40 [ 1109.747224][ T7859] __tcp_read_sock+0x196/0x970 [ 1109.751992][ T7859] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1109.757462][ T7859] rds_tcp_data_ready+0x369/0x9a0 [ 1109.762491][ T7859] ? __pfx_sock_def_readable+0x10/0x10 [ 1109.767952][ T7859] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1109.773503][ T7859] ? tcp_grow_window+0x4fc/0xc50 [ 1109.778448][ T7859] tcp_data_queue+0x1e2e/0x5e50 [ 1109.783314][ T7859] ? tcp_urg+0x106/0x410 [ 1109.787561][ T7859] ? __pfx_tcp_data_queue+0x10/0x10 [ 1109.792763][ T7859] ? __pfx_tcp_urg+0x10/0x10 [ 1109.797360][ T7859] ? ktime_get+0x45/0x200 [ 1109.801700][ T7859] ? seqcount_lockdep_reader_access+0x20/0x100 [ 1109.807857][ T7859] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1109.813670][ T7859] tcp_rcv_established+0xf45/0x2740 [ 1109.818879][ T7859] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1109.824514][ T7859] ? ip6_dst_check+0x50/0x7e0 [ 1109.829199][ T7859] ? ip6_dst_check+0xe2/0x7e0 [ 1109.833906][ T7859] ? ip6_dst_check+0x5e3/0x7e0 [ 1109.838672][ T7859] ? __pfx_ip6_dst_check+0x10/0x10 [ 1109.843789][ T7859] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1109.848472][ T7859] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1109.853589][ T7859] __release_sock+0x1b8/0x3a0 [ 1109.858316][ T7859] release_sock+0x5f/0x1f0 [ 1109.862746][ T7859] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1109.869002][ T7859] rds_send_xmit+0x207e/0x28d0 [ 1109.873791][ T7859] ? __pfx_rds_send_xmit+0x10/0x10 [ 1109.878910][ T7859] ? preempt_schedule_thunk+0x16/0x30 [ 1109.884298][ T7859] rds_send_worker+0x7d/0x2e0 [ 1109.888991][ T7859] ? process_scheduled_works+0xa25/0x1830 [ 1109.894715][ T7859] process_scheduled_works+0xb02/0x1830 [ 1109.900287][ T7859] ? __pfx_process_scheduled_works+0x10/0x10 [ 1109.906280][ T7859] ? assign_work+0x3d5/0x5e0 [ 1109.910896][ T7859] worker_thread+0xa50/0xfc0 [ 1109.915505][ T7859] kthread+0x388/0x470 [ 1109.919588][ T7859] ? __pfx_worker_thread+0x10/0x10 [ 1109.924697][ T7859] ? __pfx_kthread+0x10/0x10 [ 1109.929314][ T7859] ret_from_fork+0x51e/0xb90 [ 1109.933909][ T7859] ? __pfx_ret_from_fork+0x10/0x10 [ 1109.939017][ T7859] ? __switch_to+0xc7d/0x1450 [ 1109.943700][ T7859] ? __pfx_kthread+0x10/0x10 [ 1109.948284][ T7859] ret_from_fork_asm+0x1a/0x30 [ 1109.953065][ T7859] [ 1109.956736][ T7859] Kernel Offset: disabled [ 1109.961066][ T7859] Rebooting in 86400 seconds..