last executing test programs: 26m39.832304031s ago: executing program 0 (id=6): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x86, 0x33}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040810}, 0x4000004) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x6, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0xc3, 0x1, 0x3, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa6f3, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x3, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0xfd, 0xfb, 0x1, 0x15, 0x0, 0x1, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x1000000, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffe, 0x4002004c4, 0x1000, 0x0, 0x0, 0x10, 0x1, 0x3, 0x0, 0x1000000], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x90901) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 26m36.579776715s ago: executing program 0 (id=15): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x1, 0x5}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"/357, @ANYRESDEC=r0, @ANYRESDEC], 0x3c}}, 0x2000c020) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x204, 0xff, 0x2, 0x0}, &(0x7f00000000c0)=0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0xa002}, 0x1, {0x0, r12}}) io_uring_enter(r9, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x2b, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r5, 0x207a98, 0x0, 0x0, 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000640)={'#! ', './file0', [{0x20, 'blkio.bfq*secuors\x006\xa7\xe5C\x82\x92(\xe3\xbc\xb6\xbfyrA*\xa6W#@,\x9d \xd1\x1fE$\x9f0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x10800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001940)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x37c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x8e, 0x6, "1bdf8415f67dc67aca30cdbde2efbd861aa43c2f6863f685834601f0b86863c4eb151e9ace5b74c8df1fbd4067b5768291b99832a458d75df847caa1820253162e94e72b9f253949bc40316b4c4ed2689f5303fd3ee24eb4125e5345dc49a85299c8d8ac40c9e46ca832541909fd986335b67f5af402d986d45b22102ca3488988607be0c5571a865428"}, @NFTA_TABLE_USERDATA={0xf2, 0x6, "57d25d4708cbdd6d0dd80acfc02545409e6ee52c90f3bcb91add3c396c89dda3ebe3a54de40bb20da6f4e0d8797de71508dcd0126b5acac6d0010f603a3c1c91af549aff66a2cffba17d068efa0638da7e279e6f14ee7a525acd6b999084e3afc49d2ca79b8ee4375ff5b70f7309ca913099a64660dc8d484ccfdf5f60bef5f3f88fb11724a335eb9bf7569f50bf95cc1956873c4a631b053d665f8ccb183dd3dbcd367a7c896f19efdfff0f03a402d439dfdd476fe44df48836813d499fc59ed124da6a9d3871cafa86d7913ad288e19003c3662657c18547964501d42f7ab6fecea0a98329639d10b33b2dc299"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd2, 0x6, "2f914789790cea1c7d3dcbfa8cc414ac1698c76ee04f621046dc1ad41a1f0494fbdede81a4912355f98a2f7f360574a4ecc4bf517fffb9e07bcee92f945665942a6c0832610121101ec4dce84d9e23842002e4a80c96ab6b5be4360a263bdec1d15521a43c4601e2f269843e9045018daeffef95ab4f2464fbc9072f36d8f1d420058427b7f1e4d0bb24e4b6cfd8023f0f3801241a5ad7c7edbcd54b7fd459cdceb644a066f816773aacaec7153cbbff221a07596432188f8087737719b1d472e898af162bf4b1e5b347bba522e6"}, @NFTA_TABLE_USERDATA={0xe0, 0x6, "b868c74fc0ec2c1dc06b275dabda0886384eae64981a8fd5999cfc1e4c09835b511af1a4442b343fda40bddcadc0602d43ccf6e358b9b637c3b1dcb6794d87bbe55838efe5dd1ffe8902f7facbab25c1252cabb89876e3acc65fce78678710d6be9b21ed5dc0e6fe91fa777d73991b74902c5d2805564aaa741cbdafb0c13031da78216dfe3334baaae62b50fe6ff28016656c90a124d5780c676eb48e0f3c82797f6e6cd00d70223592e599600c95898b279de2e2de100c06ea5c2eeacb5428c7521e0cd8b5930a6ad869e1df34a2a221e9d2cd269754731d436dbc"}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}]}, @NFT_MSG_DELRULE={0x80, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x805}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xe6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0xf, 0x0, 0x6}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELSETELEM={0xce0, 0xe, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc78, 0x3, 0x0, 0x1, [{0x5d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x124, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "2072f7fff7037e325f03c6a2018bb20d3da8c59c7df5209554e6db3c58f74afbc652c86f3d2f766e8edf44bf8e2105534b19cad4a4e77269c7bbd6b8824ed56f0d58f24374261dc1a095a8c216bde8822f49c58b684e07ce6a456f161d7bad18593ff7dbb808589eb91ce6dbdaa9caf7c093a3d21a70bd64dd21541ef07e214b4c69f362122688dd10622034af8755665fc2030527c56040e9e8e7eb1c697564a1f5edad9e2d3fe243836c0dafa3291e492f14746e87eaa22b5a1d22e8cec4176d993d"}, @NFTA_DATA_VALUE={0xc, 0x1, "812dbfac30f10e1b"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_DATA={0x3a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf0, 0x1, "202f2167cf1d94fbc3bb4afd9936ba4baf616573c19c99488fb2ff48f5acbd2ddc9de05c51d10ae58b8896285f5ea1aa7cb93a24150e1862f9379d6f691392343f6e753643f5d06c68f95ec78223da2104b16ab94cefc87ed98f3d2f89dffdb1721edace7d40ffc6a56afec4c97e69d7164a05151d57652bfaeb7e4902c75b1ace266b5a0e27b486e8178bddd6bda4626514fbcaf6c2a6eea769f5807c2e32a716f9f07b29f920327d0f38b1cdd2a8ee4e97635d0dbb75eed77acb27fa879dca3ff508340c0d02b952f79f263cdb790ea03594a9c317d981aaa866ac5e21a90f2832852655b21cc33bf3b5a0"}, @NFTA_DATA_VALUE={0xc0, 0x1, "017eaf614f87add4809ea63bdaecd704fcf6b344de9f52b81bf0ecf298871e383a579b5c045f2740a52da3a255eb6197f16fbc12dd6785d74733a746fbd6a0d3063ec2689be6e502e25c7c560385d80ca287f93ed2f08e03ed28085fd6b6418eb705654556305647fdee6969c01f64c7d1ddb04ce6ccfd0bee40f52be08963805b82941abdf5e63abfe49f05d76021111157dd8c9594a2687a5e8ec1557d2022728425e3cb9bf851de47b38f3ff237d52253bc3a36cc0c690a8a293e"}, @NFTA_DATA_VALUE={0x3e, 0x1, "40b4616f394c7a7d21e4ef239c66f1a355e8737d467533e70dd661479436b69cd8df277276b6d5c17b5acbf830ec81fd9d252aff0a88b9c8cc92"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "7d7d631e4241af53195b352665f6ef8ecb3fd8e47120f594eb9659b67af54f33955719616b8eb144a3a28e6e4284b9105c4999936927f0b60e6a67a67a407b06da381044fb8abb05"}, @NFTA_DATA_VALUE={0xbf, 0x1, "146e69c5bf35ae69f1306e0091c5c48c650f890194ab7e1fbc310c2cb678c04314d268ff0835f7ff3ae62a550abc424a8d57f15d2daa70306c2c3d7d536bb2e04ad7f792b7128ba97d2a741f2a5b3a0ce0055d291b2050871d7b9cdfe068eb6da1fae3ac42a748047178b8639608820bab9bf9f6b6c5424be5dd3bc68fb9cc53b4cbd231ddd8fee0492b2f0bf9055b2b1ed4bdc96f155cef946a2e1fba91e32759675a91cde7397a0f15067139f8a557b11a4dc630fb2ae88af891"}]}, @NFTA_SET_ELEM_USERDATA={0xe2, 0x6, 0x1, 0x0, "df7545c68860bbe32e6538e67d91b967e04347d63722a39bbefbd026a57a924582ca2bae150b757f3fba2951b61c4a8a8fbe4ab054376aecfcc038356141991cb049d3eadd177ff8599a904fb6d7e4234df704e61152e084b6a88f285e616849483bbe12f4072f8073b2f710203b728a32743befca7f53904b70a3b9c7a46cda4e8e5f5308932e21a954265e904c2a7ac4e8edf012612abc033a617f57bc32ea967a1c7f4e671edc7d8e156dac829d750f391835d7074aabbf635ceed017d6943e4320f1ffd399bdfb15cbd07b5bea35e88be95e5f227d38042d0f91a8c9"}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xf9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x72}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "ec02b696969dc3f86b076c69d405f35964f2fe34e6f90b8cecaa93ffb4b0d6d94a65c2aa0f3c1c646994c8550b60292ed91d5f12f2f0808f9f71095951de69b6374e8c7b1e969dc0a2e7d6ac8bd26c0f73fe602d1206ed09f0b4df2d4480046eaf4d2e7d270570dc5fa3c80d12fcc0910914d27f4dd872110e15eed1e4c2900341b2f4bf813ddebd532e464b3f4b002dbc01b7501bc2c4348ba056e8e7468a8b2253a415995564da8000bf6800541fbf85f4a0e285b82f5bccbafc5e6ccf80ae82fa6ddb55a90de512a245a314a763e4b595a1a0183ead"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x174, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x134, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "963bf0eff388d7e5ad821c75fd3b5012d49065d121bb7b3cac82901a129cfecbf32affb1e3c04f841962930902fbdb2520225bb72c7c2589ab7d21273ed3946a30abfb5ba99de9e0091ee5161d1a89e53eed75839d9de8f3b7"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "2a7ec2eb58"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x418}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1920}]}, {0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "a839bf6dda00ab3db52c5ef817c2c01b09e9e416d50289fcad819439f8ac9f4e434370cad374096da65e7ae91df16463f68c9bf353dc4668"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "7ba473ab80ea0b67825ed7876866282e11c5ae4bd135f50738a9d8c1b1abd2d6bff31f5b13692265c3679247660dacb22983d271f588308146c605597168e9e397b0bf54abdf1aaa3b21c61286cb98b0190c60bb194cf9a051ca06c9f0cd9030fd49e2fcfcd45d36"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x1f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "2cec4aaa0447f43028fabf855db27d5d762d01d3"}, @NFTA_DATA_VALUE={0x70, 0x1, "306fc8592e2fd16233caabb9d9ef2fe610eae43796c92ffcc478363bb2940ecbaae98edcaa0d938e0516810d6f14adf4e6d9bb7dd809369c82911bc96fe56ebd6de79d90281c060c2656ffd9ab35210c130e3f14efe5afa9e98ddde8225838ebab54d88a01eeb003b600e9f4"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x401}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x260, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x46, 0x6, "3061af3256e53d6442ab85a573e1429c28c5860fc1a997fafd86c3be337d7e60ee8a95e49d58be1227a3fe9cca103cfe23212ca911277d9906539a263bc431ac2f06"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xfa, 0x6, "68326bf757767ac73ad0281a303035ea8513646b9dd84a2d3a456e704870cc2a48911d2ac9f10f0c9cad05319093b3a96dc0af85c30bec27137c84bed9bd03a009a10a338eab8f20aa3bc06ddc907da732fcd98c39494d743690e05487ae8c470089c113b8033542e1f1fb238e0d581a90ee13990cb755b64f6e643bcc8f5be8b2df5a8ab0e925317a855b80a67cb4dff91037a2ec0f37fdacaaa72bbce68e9c5a364eda11cf30396a6e3f3d22cc7653e8c39748ecbad027bb0a95b37417cb7a9180f6c67a9a2c184fa987b81059af774d1cb8540daf6b3a063265712f87ec8e68c7f35dbc6ce0965dac8cd3af5bc774b724e62246b4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "254554a9ac2b4753adf0c9484b561a07bf770de3db341c515c99a64f633f0efec656fcc1c01cbea7d95b0bcc5fb41f01a7ed1e05b17188c04b9e0e1bd29b25482fc4733d9624fb22f8b3089b1996b7d8fce07db4c484509e2fce7ad45e31fdb637ed0dcc3c77449b756b070a4e3e0da15e0dc81293bf899fc30172b8ca252e1bcf7d5304d7f394bac8f60911725e2acd48a9ea3ad7ec7731dffcd153a437e5b76d7fda49c8047556154bc4155bb5b716932dafe7111c2f84d9ce938797de9e6d3a5fca1af8a8e16219705119282058a3fedb005abe0956"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1538}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x80, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x4804}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r2, 0x40, 0x20, 0x773c, 0x3a, {{0xc, 0x4, 0x2, 0x2, 0x30, 0x65, 0x0, 0x40, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, {[@lsrr={0x83, 0x17, 0x54, [@multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000001bc0)={0x1, 0x1, 0x5, r4, 0x4}, 0xc) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000001c00)={0x1d, r4, 0x2, {0x1, 0x1, 0x1}, 0xff}, 0x18) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000001cc0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x18, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)='veth0_to_batadv\x00', 0x2, 0x9, 0x4f}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001d40)={0xc0, 0x7fffffff, 0x3, 0x7fffffff, 0x10001}, 0x14) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000001dc0)=0x1) socket$netlink(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001e40), 0x60401, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000001e80)={{r10}, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x2, &(0x7f0000002e80)) connect$inet(r6, &(0x7f0000002ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000002f00)={0x3, 0x6, 0x9, 0x84080, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_CTL(r11, 0xc0109428, &(0x7f0000002f40)={0x3, 0x9}) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002fc0), r10) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f0000003100)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000030c0)={&(0x7f0000003000)={0x84, r12, 0x801, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1ffe0000, 0x0, 0x7fffffff, 0x3ab, 0x200]}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x40002}, 0x8044) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000003140)='\x16\x00', &(0x7f0000003180)='syz2\x00', 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000031c0)={{{@in=@empty, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x6c, 0x0, 0xffffffffffffffff}, {0x5, 0x4, 0x10000, 0x800, 0x69a41701, 0xfffffffffffffffb, 0x9, 0x4}, {0x9, 0x3, 0x8, 0x7f}, 0x8, 0x0, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d6, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x1, 0x1, 0x5, 0xfffffffc, 0x4, 0x9}}, 0xe8) 26m36.059318006s ago: executing program 0 (id=20): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r2, 0xfffffffffffffffc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffdaa, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150a0102000000000000000001000067983875c2fbaffe3200e50000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24048008) setpgid(r6, r6) setpgid(0x0, r6) wait4(r6, 0x0, 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000540)=r6, 0x12) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1]) r10 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 26m34.095505216s ago: executing program 0 (id=24): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4040080) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000520001023abd7000fedbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x1101}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'net_cls'}, {0x2d, 'blkio'}, {0x2b, 'freezer'}]}, 0x19) 26m33.959854792s ago: executing program 0 (id=27): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000400d51068a111062f810102030109021200010600f0f90904aa0000b200e408"], 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, &(0x7f00000000c0)=""/213, 0xd5}, 0x8001) 26m32.820600079s ago: executing program 32 (id=27): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000400d51068a111062f810102030109021200010600f0f90904aa0000b200e408"], 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3, &(0x7f00000000c0)=""/213, 0xd5}, 0x8001) 16m43.150239552s ago: executing program 5 (id=2501): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240)) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x10000, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80002) 16m42.307407278s ago: executing program 5 (id=2505): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000580)=ANY=[@ANYRES64=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r6, @ANYRESHEX=r4], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r5, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20044000) fsopen(0x0, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000480)="5294c6694982", 0x0, 0x0, 0x14, 0x1, 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xc9, &(0x7f0000000c00)={@random="e33110495bfd", @dev, @val={@val={0x88a8, 0x1, 0x1, 0xffd}, {0x8100, 0x1, 0x1, 0x1}}, {@generic={0x9700, "1d71dec9286204a5c892e7590c070d87eca09d1d2543eaf28eb83815df718470c9009d9fb29338b7048b7a53218a59291827a36edf144e6b8132def2de1e6ea59e2295408f579dd8399f686cee48c0d8a8311a491c67b12af55cb64c6088d62acbddf9509a99c22566aa78566d13216e9beb4cd3e847a1d7f65406ce85ed66f918cdaa4fdbe887de4bd4243cc3846cc41e46bbf1f64b11539a30109d1568fc7e8a92e99fad647ee00c22731e973504c324b167"}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16m40.691947538s ago: executing program 5 (id=2512): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) (async, rerun: 64) syz_open_dev$video4linux(0x0, 0xff, 0x8000) (rerun: 64) prlimit64(0x0, 0xe, 0x0, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x103080, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async, rerun: 64) listen(r4, 0x0) (rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380), 0x0) (async) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r9 = dup(r5) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) (async) getpeername$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 16m40.329855653s ago: executing program 5 (id=2515): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffd7, 0x2, {0x7f, 0x4}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 16m39.345251004s ago: executing program 5 (id=2524): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x46100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xf7, 0x56a, 0x69, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x65, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x4, 0x54, 0x1, {0x22, 0x1c0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x15, 0x50, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0xfa, 0x6}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0x7, 0x7, 0x8, 0x8}, 0x29, &(0x7f0000000180)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x64, 0x6, 0x101, 0x7707, 0x7, [0x30, 0xff003f, 0x3ff0, 0xff000f, 0x3f0f, 0xffc0ff]}]}, 0x3, [{0x3f, &(0x7f00000001c0)=@string={0x3f, 0x3, "4bbfdfb9296fc9bae3596d24407893ce2a6d53ad0b9b4c4760ae25cdd5c1c1531e6185b6ec321604ca250cfceb3f68d4eda047c633b89ae84adabb8658"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x458}}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x10, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x100, &(0x7f0000000380)=0x101, 0x0, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018538700", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f505cb103f00a00000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x29, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r8 = memfd_create(&(0x7f00000005c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xb7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1H\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\x83\x0e\x00\x00\x00\x00\x00\x00G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0f\a\x00\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\xf6\xc20\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21A\xa3\xd8\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\x8a\x96\xe8\xc4\xc3g\xcf\xf3\xac\x90\x1a\x9b\xe4\xb1pf\x9f\xb1\x01\xb3\x95\xcf\xce\xc4\xe5\xcc\xb0\x83\xf8\xca#\x9f\xdd\xfe\a\x8e\'R\x1dC\xd1\x005\x85\x0eX\xa8>\xb6\x04*\xd7\x01\xaf\xbc\xd5q2B\f\xf9\x10m\x15[^\xee\xafS\xf4}\xf5\x9c7_F\xf6\xcfQ\x8dWHZM:\x7f\xb3&\x06\xaaE\xfd\x1e.\xbf\xad\xeb\xa2S\xec\n\xcf\x80\xebH\x81\x133:(\x8ew\xa9$\x90\xa2K$-\xb6\bj2Cg\x9e\x88\xfa\xcb\xfa\xa5y\xa1\x85_\xbc:\xff\xbd\xba\x87\xaf\xfai\v\v\t0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000300)="0fc71c3e2e0f09b8010000000f01d92e360f01cfb805000000b9003000000f01c1b9800000c00f3235002000000f300f01cfb930030000b800800000ba000000000f302e0f015d0b66b801018ed8", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@mon_options]}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x4040084) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xfffffffffffffffd}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000540)={r5}, 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m38.536342421s ago: executing program 33 (id=2526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000300)="0fc71c3e2e0f09b8010000000f01d92e360f01cfb805000000b9003000000f01c1b9800000c00f3235002000000f300f01cfb930030000b800800000ba000000000f302e0f015d0b66b801018ed8", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@mon_options]}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x4040084) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xfffffffffffffffd}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000540)={r5}, 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.419931796s ago: executing program 4 (id=6212): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x40000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffb, 0x6, 0xc0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="53c66ac636de", 0x0, 0x1, 0x10011, 0x3, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec80fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xcc000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) creat(&(0x7f0000000080)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a4, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="b00100001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 25.240852851s ago: executing program 4 (id=6214): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(r3) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r9 = syz_io_uring_setup(0x2b26, &(0x7f0000000040)={0x0, 0xacff, 0x800, 0x0, 0x21}, &(0x7f0000ffd000), 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="14d518760adee36ac8e67b7007f1e89ac8cfece9120d1868ec91e60d9fd5f24d54871a422ed11b2a0a6271d3a20e4500887aa7cc1cd562e6a2b02919bca9ed5f9d6e6a1a0f49908025a2c7cbd92fb368b30a1c3a74b8d24ffd2f2d0fbd32fac1459796044289b6dc99b3a63a26d46340897eca8579d7fa87d1b1377e0e853a139c7be75b5a90bf490f876dedc53016a788d31d4fb2f1ca1cbfd92c8bd9ec57076f1b8bad739faa2f9d69425194c8d1c110144f6e1b4d9cc52845ce502d2d4997f42cca948514f248eb87fcbcb076e480b0f9603eddaf7be23b9ac6bf764691bbd8a35a07765d44547dc3bb5e24b5", 0xee, 0x12020, 0x1, {0x0, r10}}) 23.89621877s ago: executing program 4 (id=6218): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000380)=0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000a3e1270f266607fda760ac6fd5d7c696b1f6e6a92965f1068086d0af1073a96dd9bc0bd61879cd39a1c653e6d0e89ce46451b2dfa27fb6fbb8", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xcdb041efcda25507, 0xffff00, 0x0, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x6c}}, 0x40040) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010002ffd26f10cb060600eb9a010203010902240001000000000904df0102"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/82, 0x52}], 0x1}, 0x6}], 0x1, 0x28101, 0x0) 20.760251268s ago: executing program 4 (id=6224): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x5761, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x188, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xf5, 0x7, 0x1, 0x0, "89c90bed569a1222634139ba9057adc786d1ea43f2022cf5628b5307da8ce5fa718ee55031ee62b6c5954d464977d4ac17d1ba04c74ccc317850f4cf89ce12b757ff2b32fb1f39e4dfda61e32d82fd08f1be0eb2fba036f92980cca0b3541105525bd9337849e0d3acbc569372a87e79ce569edfb0eac1fe94bcc2a9ec0b0c4413ada0a5624f07a6b305d216c0d52a0c9150b7482e4f9485a39b18f554f8d323cb1a8e99c6c50f7f5729b3f77275143d413d5a073598cf280beb3897a2dadd1be996aaaf5e4ce4f4ae8b77c4d29586f95d7a305812ef5a197d5a3044bcf75e0b2dad9191dfb6d2d1eecc247388d3f31146"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x444}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x1, 0x4, 0x9}}) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 19.295380767s ago: executing program 4 (id=6227): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508"], 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 16.088061649s ago: executing program 4 (id=6234): socket$inet6(0xa, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x3, 0x4, 0x0, 0x3, {0x77359400}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x2, "110000fb"}, 0x0, 0x1, {0x0}, 0xea}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000200)=0x2) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x5, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRESHEX=r5], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000040) 9.991957121s ago: executing program 2 (id=6258): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/92, 0x5c}, 0x7f}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4004) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) close(r1) 9.762220922s ago: executing program 2 (id=6259): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000000000001000ea500", @ANYRES32]) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff00000000001300000000000000000000000000000000000000000000000000524b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000beffa4000000000000eadd345902c672a4aa9ba335baa5a19d1f35ad76d2effb2d874ca52128e2fef85ff1"], 0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r1) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ef17856000000000000109022400014000000009040008210300000009210000080122050009058103"], 0x0) shutdown(r0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x82, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x1, 0xa0, 0x72, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "9456d2cf"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xa, 0x8, 0xf4}, [@mbim={0xc, 0x24, 0x1b, 0xf, 0x3, 0x5, 0x7, 0x8000, 0x5b}, @mdlm={0x15, 0x24, 0x12, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x9, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x8, 0xfc}}], {{0x9, 0x5, 0x82, 0x2, 0x428, 0x2, 0x7, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x80, 0x80, 0x8}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xfd, 0x5, 0x5, 0x20, 0x50}, 0x23, &(0x7f0000000000)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x91, "b70000e965108300"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xff, 0x7, 0x7f}]}, 0x2, [{0xa0, &(0x7f00000001c0)=@string={0xa0, 0x3, "7a0a4663b80445a075da5cc15e948e86254a12928be9baa6da7b3b3b2d80acd2639f72a180eb23465c159071282037fff636ff81846e51162e4cbb6484e2e577fd333526241f7c5f680bc6e87a456a6e4a5999737d4b5f8013acce455aa9b2b05ecf58e7a76de5ddd7f2f3abb569f6097b5f75b8ab31a6905f780757a9d8b17109f35742c37f32253ebdae73335844b3f0910db3267c3f99141a19d2e8a6"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc67}}]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB="bba400f41b0000000684038f050e050d018387018a8c880a068b800287098c80808f83"]) syz_usb_control_io$hid(r3, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="9917b1ad3d06a27855d01141e914353e8c663ed1065e32301b8acd1815ed897020c9092fe19ef95bd3c69397d675e3c19835f4c930a9bcbd49c4d872b7679a32e22015d7df39001b2d750fe2484101ef67cb628910e4cde2d8285b9017f55e84b67b72840813a8d080b71200f197d5b65f243ac4ac17d0cba3d08c98ceedf43365fc78aa0f52585ef7d8d525c049e1ae193a110f2dcfce4e6114b15de04b2720d6bd946506004cf479e742dcf73534e370150d97a55b559b5a1bedbc9290cbcac428f960e016fb88cfc21d86da2974ec3f2632992a27a4e5864623e05722eb07d27139b45171ec0cefa44e98f05dd4ff957056265edbacd81a611e4dfacb2b4879517e00c52e84728b1de1193bc88e509860ff143fc216c5100c41667a3ba5b157db616145a6d5ddb592e6b9589cdc93e3e8ef63da3cb4033d9f676cec3dcbb003ae54940e30203e1dc7b939c9c32029ad645b46ee269892e7a786bd36c2f7d962aad3b8d6e9d946adfa984a52cf7d35c5b2f492ab267c1ca948a5c0323d628364a612004c1c7feb2671a984f4dc05330a968e4b8cbe9200f111597c8ecc7ea7681ec281e168edbadc83d98de2b0dda7b187f509e487d63300932f3c76a1b66b4e01dffb07b4c80b5f5273a84b3cb0732b691738bba87517d53cf2b88b481cb325b8b912f54cee9d2546f2fdb96931bda2821eb66554abd4a21a8281c3c461df633a97f5cb3cf924fb324782399df0dc72d18d22b320e605dddf1123417dffc6452835a63fca230fbb002fd9c204b0819c56c4ce398423518b59dc8220bbf0c8b66f54c8009f1170f4c5582bfc703938bdf4d88ffe3eb87f4d2a62d442bb08ba405e11984c919fed63f9e86fd16c00843fa07cd9170919f4d07a12ad38db3f9effcfe1d631a48150e33ce07b3516fefab9587043a908dac8b0ffe361ec8e0fe7531f6d6d858cdabf7600f3a2bd90bce672cba7d366ae4ac6e33813f18340349422230cfe1d8c5757eb139321d44b57159089c68c13d7806cdbebeb42953f6f1670a313278a13076defab61b2016cf636ed37c7e7e1c49a4fb1d6a3d249e189087b37e724b6b24824bce4f77ab6f8a8d2f571d23c5120d75440e8eeda120467b5046b316e39aea9b6c7fa65eb4db56a3fed78c25fcde3afa956dee186fcad0b83f3d50a153f269113f5d9f1ccdff5ba86390c95b3a4ac782cd1121253f728b9b28a3cf59ebd82b0439d2f439e9cd00ca11a3f73515b6256b0faa56063ab761d5860a002c27fede7ce87b6336a4a146f2286ee32bb12e5a8bef04ba8cdb901c602a80eec7e74c947f88f6939ad240db8bc4baf655b941d1fc166fcbd2a64b5691e9145847ebc3ff5f8c07b8265c00176fa4617b6b7249aa801a090d4c65e36cfbbbca28913a892c3a7dd856fdf1f9a7279acfeee9fe51d14f87e4928f07f80145f54afb9a94fce7e76d38b64858327883b8f7141ccac8de649b7eb216d1b6c63f6d4d56dd9f11a2b36a6b3913917c378931e1ba3ec16aec67ef2bab2f1336a6990f7a78ab8acbc81d4ef49dc9bf02e6bae05118c706aeafa332e785ab59140d41ec0d00261ef9dd1735e19954cf1e8042b84185fa8bea4878e22ae53841b9c9752c950e5b21c7e7212b0297f22675cf8baae246e3c46a33e7228633954253add2592dbb7335b24569c834977a53ef23a84f7819deabd2c499422f23e7b682dc7f81b5d47b2ed330b83bb4f6c8f976539a8bf0d1f9b88d534c672d329ba41009f75c928ede7", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000000), 0x4) syz_usbip_server_init(0x3) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf9, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0xf, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x40, 0x0, 0x7}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x8, 0x2, 0x9, 0x40, 0x4}, 0x2c, &(0x7f0000000600)={0x5, 0xf, 0x2c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf8, 0x1, 0xd}, @wireless={0xb, 0x10, 0x1, 0x0, 0x14, 0x2, 0x9, 0x800}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fff, 0xf00, 0x6}, @ssp_cap={0x0, 0x10, 0xa, 0x5, 0x0, 0x3, 0x1e, 0xfffb, [0x0, 0x0, 0xf]}]}, 0x1, [{0x38, &(0x7f0000000580)=ANY=[]}]}) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 8.032994535s ago: executing program 3 (id=6264): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) listen(0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) 7.78380345s ago: executing program 6 (id=6265): socket$inet_udp(0x2, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x646, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x12, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x200000002, 0x400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000700", [0x0, 0xffffffff9673e35d]}}) 6.981960007s ago: executing program 6 (id=6267): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x68152000) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 6.59836248s ago: executing program 2 (id=6269): r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x84000000) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x6100204) (async) ppoll(&(0x7f00000000c0)=[{r1, 0x2000}, {r1}], 0x2, 0x0, 0x0, 0x0) (async) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x73a, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) socket(0x2, 0x4, 0x0) 5.961135977s ago: executing program 3 (id=6270): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x40}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001240)={0x20, 0x6, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x11}, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x40}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001240)={0x20, 0x6, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 4.991935912s ago: executing program 2 (id=6271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x50, 0x4, 0x0, 0xa99, 0x9, 0x8, 0xfffffffd, 0x3}, 0x0) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0}], 0x1, 0x8000, 0x0) (async) syz_pidfd_open(0x0, 0x0) (async) open$dir(0x0, 0x400000, 0x100) (async) socket$inet(0x2b, 0x800, 0x8) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x789081, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffdcd, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004) (async) ptrace$getregset(0x4204, 0x0, 0x204, &(0x7f0000000040)={&(0x7f00000000c0)=""/10, 0xa}) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.288844428s ago: executing program 3 (id=6274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x4a00, 0x0) (async) r2 = socket(0x1d, 0x2, 0x6) (async) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x20000000485, 0x4e4101) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x2}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) r6 = dup3(r5, r4, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) (async) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r8, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10183, 0x0) (async) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77aa, 0x2000, 0x1, 0x31d, 0x0, r9}) 3.135845563s ago: executing program 6 (id=6276): socket$inet_udp(0x2, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x646, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x12, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x200000002, 0x400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000003f00", [0x0, 0xffffffff9673e35d]}}) 3.0305453s ago: executing program 2 (id=6277): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) (async) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f024}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f024}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) 2.695914206s ago: executing program 1 (id=6278): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0x5460, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) r3 = dup(r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e21, 0xff, @remote, 0x6}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90) write$UHID_INPUT(r3, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) 2.465448531s ago: executing program 6 (id=6279): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) listen(0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) 2.424879393s ago: executing program 1 (id=6280): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(r3) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r7 = syz_io_uring_setup(0x2b26, &(0x7f0000000040)={0x0, 0xacff, 0x800, 0x0, 0x21}, &(0x7f0000ffd000), 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="14d518760adee36ac8e67b7007f1e89ac8cfece9120d1868ec91e60d9fd5f24d54871a422ed11b2a0a6271d3a20e4500887aa7cc1cd562e6a2b02919bca9ed5f9d6e6a1a0f49908025a2c7cbd92fb368b30a1c3a74b8d24ffd2f2d0fbd32fac1459796044289b6dc99b3a63a26d46340897eca8579d7fa87d1b1377e0e853a139c7be75b5a90bf490f876dedc53016a788d31d4fb2f1ca1cbfd92c8bd9ec57076f1b8bad739faa2f9d69425194c8d1c110144f6e1b4d9cc52845ce502d2d4997f42cca948514f248eb87fcbcb076e480b0f9603eddaf7be23b9ac6bf764691bbd8a35a07765d44547dc3bb5e24b5", 0xee, 0x12020, 0x1, {0x0, r8}}) 1.531808387s ago: executing program 3 (id=6281): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) syz_emit_ethernet(0x32, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00220f000000944ac1a1935aa8257f90b3af45cee12ad57e193c6a2356885cff8ecbcd84976c75038145ec74b1c8cf"], 0x0}, 0x0) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x82) syz_fuse_handle_req(r4, &(0x7f0000000740)="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", 0x2000, &(0x7f0000005540)={&(0x7f0000002740)={0x50, 0xfffffffffffffffe, 0x5, {0x7, 0x2b, 0x1, 0x8000000, 0x0, 0x9, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffffffbc}}, &(0x7f00000027c0)={0x18, 0xfffffffffffffffe, 0x7, {0x5}}, &(0x7f0000002800)={0x18, 0xffffffffffffffda, 0x6, {0x7fff}}, &(0x7f0000002840)={0x18, 0x0, 0x3, {0x1}}, &(0x7f0000002880)={0x18, 0x0, 0x8, {0xfffff84d}}, &(0x7f00000028c0)={0xff4b, 0x0, 0x8000000000000001, {{0x40000000000, 0xc71, 0x1}}}, &(0x7f0000002900)={0x60, 0xffffffffffffffda, 0x5d2, {{0x22a3, 0xf, 0x9, 0x8, 0xffffffffffffffff, 0x7, 0x14, 0x7}}}, &(0x7f00000029c0)={0x18, 0x0, 0x3, {0x3}}, &(0x7f0000002ac0)={0x14, 0x0, 0x401, {'\xba.#\x00'}}, &(0x7f0000002a00)={0x20, 0x0, 0x40, {0x0, 0x8}}, &(0x7f0000002a40)={0x78, 0x0, 0x400000000007, {0x0, 0x4, 0x0, {0x8000000000004, 0x5, 0x9, 0x2, 0x5, 0x4, 0x2, 0xc3f, 0xf3f283c, 0x6000, 0x9, 0x0, 0x0, 0x400, 0xd}}}, &(0x7f0000002c00)={0x90, 0x0, 0x9, {0x1, 0x0, 0x8, 0x5, 0x9, 0x5, {0x3, 0xa, 0x7, 0x2, 0x6, 0x1, 0x49fe, 0x81, 0x1, 0x6000, 0xfc000000, 0x0, 0x0, 0x2, 0xb27}}}, &(0x7f0000002cc0)=ANY=[@ANYBLOB="30000000169672d8ff07000000000000080000000000000002000000000000000600000007000000776c616e30000000"], &(0x7f0000004f80)={0x150, 0x0, 0x1, [{{0x2f, 0x2, 0x2d74c32f, 0xffffffffffffff82, 0x3, 0x56d, {0x6, 0x0, 0x4, 0x4, 0x2, 0x8c8, 0x6, 0x100, 0x39c1, 0x2000, 0x2, 0x0, 0x0, 0x2, 0x4}}, {0x0, 0x9, 0x4, 0x2, 'raw\x00'}}, {{0x0, 0x2, 0xa, 0xffffffff, 0x1, 0x1, {0x1, 0xcb43, 0x24cc67e8, 0x98a, 0x81, 0x9, 0x3, 0x1, 0x2, 0x2000, 0x5, 0x0, 0x0, 0x15e, 0x7}}, {0x0, 0x7, 0x1, 0xfffffffa, '('}}]}, &(0x7f0000005240)={0xa0, 0x0, 0x7, {{0x0, 0x0, 0x800, 0x8, 0x2, 0x0, {0x6, 0x9, 0x3, 0x7, 0x1, 0xd4, 0x6, 0x8, 0x101, 0xc000, 0x9, 0x0, 0xee01, 0x40, 0xe1}}, {0x0, 0x5}}}, &(0x7f0000005300)={0x20, 0x0, 0x4, {0x5, 0x0, 0x5, 0x5}}, &(0x7f0000005400)={0x130, 0xffffffffffffffda, 0x903, {0x7, 0x0, 0x0, '\x00', {0x2000, 0x6, 0x2, 0x5, 0x0, 0x0, 0x4000, '\x00', 0x8001, 0x1, 0x7, 0x4, {0xfffffffffffff800, 0x7}, {0x5, 0x9}, {0x3, 0x92}, {0x6, 0x7fff}, 0x8, 0x4, 0xfff, 0x1}}}}) (async) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000080)={0x3, 0xffffffff, 0x9, 0x4, 0xfffffffb, 0x7ff}) (async) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) pwrite64(r0, &(0x7f0000000240)="aa0fc468f2a6824e7adb57d705bfbe5b98b3bbb7068b43d61b8f5945e5892fbd095ff177d1789cd7b6f2cb61dcf59bb8a46ca4564ca6b177cf5a8ddb0dd0b5b78681316cf778e159c80fd0af8767cfa0716c91e37f5c0b9c8860574366b02a988482613345bc1599d162440b239f90ef01f449263eaf7e10982fd6d2ab19a3cda6566d358821d6fdd0ffd78c6917a65519f61ced2b9cc53e96c8e6486a92595200c4af8b80ea271f6f72f984a49c177e9ade4c19b0326f0652ba5cb8442d89aec046fafafce9", 0xc6, 0x6) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 1.205790142s ago: executing program 1 (id=6282): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1b7) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x2, 0x0, 0x2}, [{0x2, 0xf, 0x7365, 0x1ff, 0x9, 0x3, 0x1, 0x160f}, {0x3, 0x8001, 0xaa, 0xb42d, 0xffffffffffffb0e4, 0x4, 0x0, 0x17d7}]}, 0xb0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x44602, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000240)={"173c1ac743c3fbe15abad991f4176de7b746ce96a287a8cccc49b8f14fc9", 0x0, 0x2, 0x401, 0x401, 0x80, 0xb17, 0x9cc, 0x4, [0x317, 0xb69, 0xcb9, 0x6, 0x401, 0x9, 0xd, 0x0, 0x6, 0x6, 0xffff, 0x4, 0x2, 0x4, 0x8, 0x8, 0x2d, 0xe2, 0x8]}) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(r0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x121040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r3, r4, &(0x7f0000000080)=0x911, 0x8000) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 912.417694ms ago: executing program 2 (id=6283): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f00000001c0), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/23, 0x17}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/204, 0xcc}, {&(0x7f00000013c0)=""/220, 0xdc}, {&(0x7f0000000100)=""/60, 0x3c}], 0x5, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x15, 0x1f, {0x1f, 0x22, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x200) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x10, 0x6, &(0x7f0000000040)={0x15, "42534b7f06b72948fca87f78692b670631502414208316e61e54c1c7fb824bb2c6"}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x800, 0x2, 0x1}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)='w', 0x1}], 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fcntl$getown(r6, 0x9) sched_setattr(r7, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ptrace$getregset(0x4204, r7, 0x3, &(0x7f0000001640)={&(0x7f00000015c0)=""/109, 0x6d}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 760.104463ms ago: executing program 1 (id=6284): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000dabe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 536.490618ms ago: executing program 6 (id=6285): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x7, 0x0, 0x1}) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20080, 0x13) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x8000000, 0x6, 0xa}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="361dfc275215e2ccb518773682fe5f4e35565254deee45ade9bc92b5dd64eda9b806e5af5ca8ee6a75744863219191d0dd055875d0b3a63a2169", 0x3a}, {&(0x7f0000000180)="1305b5eb9b25ac39bfc6296029d310284746c27c95a35d82f31ff74bc5bfbf862e553991e01ce9634897549542f2dca83f3bd65a44f53cdde016873733330f307f053104b507d4bfe0b658003a1c1c11eedf8c45ecc89fb05955bc86eb250ac1689fb27b4b36f2556190473e1334bc37266ed86c8deffefdcf069e05acad9e80ee520c904c5c7891a2982e528c298465e89522c169c7c8463fef35acab4417637b90d3fa036aa4bea4b45783893587477f292e42272d9be5b63df005fefa8768b198e9db3cd6", 0xc6}, {&(0x7f0000000280)="7938d506f6b3b6789074d564dc45d24c142333d5a08c826e2d6b2e1fcff6ecb46955d94f7800a0fc9df70d", 0x2b}], 0x3, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x18}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xd7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000380)="b80dfb1bd948a6ee07089d3dc285", 0xe}, {&(0x7f00000003c0)="bfead3bfb8262fccfff7315007a8fd64ccf3e1910b7d1b900299b61fa6bc6b0787d71b7a1e481e9a54a3a164245d9e0736ec80874b7553523724c32f549654ad71b97abc157b060986261e92e2aa262f29bec7bb0c588224ea5375303be3b5f0386542bf0d1b6605", 0x68}], 0x2, &(0x7f0000000480)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x8, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0x4}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000001}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x5e, 0x1b, '\x00', [@ra, @calipso={0x7, 0x8, {0x0, 0x0, 0xf, 0x6}}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @mcast1}, @generic={0x1, 0xaa, "1c5745e9c54309595fbb4b0e73bbe31a2123b9a5da8e86aa9819d754506f04901871058c7fc5c9410c25f126dd6a0033032c7063258852799e4c1fe389b40d096ebbe3352730447d1a3996dc44595c7c2c07332ee6fb75c738ad62df35b2ae54da3e711e71ac2f147323dc5b20e8786a6ac5e0ddd47c429d2f80d333babf01dd602a4dbec8db4715c8cd0ef2e8f695a7b74f4ce1196c3040a8114e0de7266f89662a36406922066607f7"}, @ra={0x5, 0x2, 0xaf0c}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x1d, 0x0, 0x0, 0x5}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x170}}], 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1e8, 0x1e8, 0x100, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000680), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x2}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@private=0xa010100, @broadcast, 0xff000000, 0xff, 0xb, 0xb, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x200, 0x200, 0xff, 0x4, 0xffc0, 'bond_slave_1\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x0, 0x4c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@cgroup=r0, 0x10, 0x1, 0x6, &(0x7f0000000b00)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000c40)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0], 0x0, 0x16, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1a, 0x11, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x91d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='syzkaller\x00', 0x4, 0xae, &(0x7f0000000d80)=""/174, 0x41100, 0x1, '\x00', r2, @tracing=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x9, 0x7fff, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000011c0)=[r0, r0], 0x0, 0x10, 0x6}, 0x94) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000012c0), 0x4) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x4e000, 0x2, 0x20}, 0x18) r4 = openat(r3, &(0x7f0000001380)='./file0\x00', 0x80, 0x140) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000001400)={0x801c, 0x38, '\x00', 0x1, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000001440)={'gretap0\x00', r2, 0x20, 0x8, 0x6, 0x6, {{0x1b, 0x4, 0x0, 0x14, 0x6c, 0x66, 0x0, 0x6, 0x29, 0x0, @remote, @loopback, {[@ssrr={0x89, 0xb, 0x60, [@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101]}, @end, @timestamp_addr={0x44, 0x3c, 0xb7, 0x1, 0x7, [{@private=0xa010100, 0x401}, {@multicast1, 0xd}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010101, 0x67}, {@broadcast, 0x50b}]}, @end, @generic={0x82, 0xd, "35ce19022b485076615a55"}]}}}}}) syz_open_dev$midi(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000001580)={0xfffffff2, 0x5, 0x1, 0x4, 0xfffffffa, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001600)={0x0, 0x0}) tkill(r6, 0x2c) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001680)=""/220) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001780)=[@in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x93e}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}], 0x48) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000001800), &(0x7f0000001840)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000001880)={0x3, 0x6569, 0x7fff, {0x7, 0x7}, 0xe8f, 0xbde9}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001980)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001b40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b00)={&(0x7f00000019c0)={0x120, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x7f946c875ce3bae}, 0x20014880) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000001b80)={0x29c, 0x494a}) 404.465088ms ago: executing program 1 (id=6286): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d80000001a0081044e81f882db4cb9040a1d08007b490d4f1e81f8d815000100ff08002603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a0f8a190457f0189137ac5af425ae4d2aa60d6e6c0438bbbc523233738b6ff2ab87e6c4f7a52a53785720b4e0b1a833708d060b1779e6bc63e626a1658a525532d2f156caf79d38149f02cdd78020983e5d2a5d0d09bc3e9edd5e1f199a59c6a816bf0ecfbcad71eedfade38ede9c10839de43fb2f42d4c7cb343b7ec92cbbcb240572192e", 0xda}], 0x1}, 0x40) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x6) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x6, 0x4e24, 0xc, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x2}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@local, 0x4d4, 0xff}, 0x500, @in=@loopback, 0x3, 0x4}]}]}, 0x17c}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x10000f40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r7, 0x4010ae74, &(0x7f0000000140)={0x7f, 0x200, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x4f9, 0x8001, 0xef, 0x8}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000940)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r3}) 276.045406ms ago: executing program 3 (id=6287): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000040)}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100677265746170000024000280050008000200000006000e000200000006000f000500000008000700ac1414aac366340e79293fca3e4af2ee877b0be8cb6953bd3e3ab44a96405fe319ca38e09f7df704e7c448496844cf924871bb99137f2329a85356e59575de7a90bb7194c4453fdc6c6a68de993dcc817fb5ec6d5ad262f65c049064962e8378edab564e7045a7f17a8c1467fa4cb1e6d7937fefa73e3e8b3b8a0622bbfc88d8f304760d0ef59d03deaa581f18f28d8fe7d4744eb7514ba98d7deb5972515c264c238330ce079ed506d7f004c5750d"], 0x54}}, 0x0) 83.18712ms ago: executing program 1 (id=6288): socket$inet_udp(0x2, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x646, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x12, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x200000002, 0x400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000004000", [0x0, 0xffffffff9673e35d]}}) 74.51375ms ago: executing program 3 (id=6289): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) pipe(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) syz_usbip_server_init(0x4) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) (async) pipe(0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7) (async) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) (async) syz_usbip_server_init(0x4) (async) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) (async) 0s ago: executing program 6 (id=6290): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea629495, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x6, {{0xa, 0x4e21, 0xa9d, @rand_addr=' \x01\x00', 0x9}}, {{0xa, 0x4e20, 0xfffffff7, @private2, 0x7fffffff}}}, 0x108) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fd6d000000442505a8a440000102030109021b000101040000000400030107010203f5050102bf07060601dc41296b43847beb81156778b82963c728c1a2168a2baf82662ea69a0bc21244ab"], &(0x7f00000018c0)={0x0, 0x0, 0x34, &(0x7f0000001400)={0x5, 0xf, 0x34, 0x2, [@generic={0xb, 0x10, 0x3, "8d1d701621c9a746"}, @generic={0x24, 0x10, 0xa, "96a51215d872e486e0ba3528f170dd0f51a1629ee35c46b2a0772caf01cf4f22dd"}]}}) kernel console output (not intermixed with test programs): n invalid length. [ 1489.295290][T32288] net_ratelimit: 147 callbacks suppressed [ 1489.295307][T32288] openvswitch: netlink: EtherType 0 is less than min 600 [ 1489.350359][T24651] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1489.373167][T24651] usb 4-1: device descriptor read/8, error -71 [ 1489.500769][T24651] usb usb4-port1: unable to enumerate USB device [ 1489.624322][T32304] netlink: 'syz.6.5843': attribute type 1 has an invalid length. [ 1489.668934][T32304] Cannot find add_set index 0 as target [ 1489.950345][T24651] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1489.984407][T32322] ip6gre1: entered promiscuous mode [ 1490.071950][T32329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1490.112564][T24651] usb 7-1: Using ep0 maxpacket: 16 [ 1490.128622][T24651] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.159991][T24651] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1490.182853][T24651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.194940][T24651] usb 7-1: config 0 descriptor?? [ 1490.207884][T24651] pxrc 7-1:0.0: Could not find endpoint [ 1490.409020][T32304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.419709][T32304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.458532][ T5913] usb 7-1: USB disconnect, device number 124 [ 1490.707571][T32365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.734891][T32365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.940389][ T5913] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 1491.123961][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.168928][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1491.243836][ T5913] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1491.294314][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.334176][ T5913] usb 2-1: config 0 descriptor?? [ 1491.416197][T32385] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5856'. [ 1491.427064][T32385] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1491.475241][T32384] bridge1: entered allmulticast mode [ 1491.542665][ T5913] usb 2-1: string descriptor 0 read error: -71 [ 1491.573268][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input129 [ 1491.682240][ T5913] usb 2-1: USB disconnect, device number 77 [ 1493.880161][T19602] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1494.065611][T19602] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.129608][T19602] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1494.177308][T19602] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1494.206590][T19602] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1494.227230][T19602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.254565][T19602] usb 2-1: Product: syz [ 1494.267247][T19602] usb 2-1: Manufacturer: syz [ 1494.324368][T19602] usb 2-1: SerialNumber: syz [ 1494.437085][T19602] cdc_mbim 2-1:1.0: skipping garbage [ 1494.442623][T19602] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 1494.449536][T19602] cdc_mbim 2-1:1.0: bind() failure [ 1494.652562][T32441] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5862'. [ 1494.800425][T20943] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1494.941989][ T10] usb 2-1: USB disconnect, device number 78 [ 1494.975028][T20943] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1495.031323][T20943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.094704][T20943] usb 7-1: Product: syz [ 1495.107253][T20943] usb 7-1: Manufacturer: syz [ 1495.136514][T20943] usb 7-1: SerialNumber: syz [ 1495.179714][T20943] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1495.201495][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 1495.261278][T19599] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1495.602769][T32462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1495.724444][T32501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5869'. [ 1495.750507][T20943] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1495.814813][T32501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1496.096484][T19598] usb 7-1: USB disconnect, device number 125 [ 1496.111860][T32501] macvlan4: entered promiscuous mode [ 1496.121412][T20943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.138457][T20943] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1496.152449][T32501] bond5: entered promiscuous mode [ 1496.158191][T32501] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1496.250162][T20943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.289910][T32501] bond5: left promiscuous mode [ 1496.299116][T20943] usb 2-1: config 0 descriptor?? [ 1496.324694][T19599] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1496.343479][T19599] ath9k_htc: Failed to initialize the device [ 1496.391026][T19598] usb 7-1: ath9k_htc: USB layer deinitialized [ 1496.744623][T20943] magicmouse 0003:05AC:0265.0061: unknown main item tag 0x0 [ 1496.759877][T20943] magicmouse 0003:05AC:0265.0061: unknown main item tag 0x0 [ 1496.792895][T20943] magicmouse 0003:05AC:0265.0061: unknown main item tag 0x0 [ 1496.811814][T20943] magicmouse 0003:05AC:0265.0061: hidraw0: USB HID v1.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 1497.098444][T24651] usb 2-1: USB disconnect, device number 79 [ 1497.243305][T32574] fido_id[32574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1497.347486][T32592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1497.413064][T19602] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1497.603290][T19602] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1497.674516][T19602] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1497.757694][T19602] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1497.782511][T19602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.981351][T32575] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1498.016790][T19602] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1498.460349][T19598] usb 7-1: USB disconnect, device number 126 [ 1499.353447][T32659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5880'. [ 1500.521975][T32680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.588623][T32680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.239015][ T52] Bluetooth: hci4: ACL packet too small [ 1502.312985][T19602] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1502.485684][T19602] usb 7-1: Using ep0 maxpacket: 8 [ 1502.520177][T19602] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.540136][T19602] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.573906][T19602] usb 7-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1502.589022][T19602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.620900][T19602] usb 7-1: config 0 descriptor?? [ 1503.049429][T19602] uclogic 0003:5543:0004.0062: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.6-1/input0 [ 1503.237498][T19599] usb 7-1: USB disconnect, device number 127 [ 1503.640566][T19598] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1503.743408][T19602] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1503.832489][T19598] usb 2-1: Using ep0 maxpacket: 32 [ 1503.860613][T19598] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.910275][T19598] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1503.920143][T19602] usb 4-1: device descriptor read/64, error -71 [ 1503.949161][T19598] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1503.987846][T19598] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.40 [ 1504.009059][T19598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.019127][T19598] usb 2-1: Product: â ¬ [ 1504.024219][T19598] usb 2-1: Manufacturer: Ф [ 1504.028992][T19598] usb 2-1: SerialNumber: ဇ [ 1504.185283][T19602] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1504.333296][T19602] usb 4-1: device descriptor read/64, error -71 [ 1504.465749][T19602] usb usb4-port1: attempt power cycle [ 1504.472309][ T335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.483301][ T335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.557489][T19598] usbhid 2-1:1.0: can't add hid device: -71 [ 1504.565681][T19598] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1504.585486][T19598] usb 2-1: USB disconnect, device number 80 [ 1504.830832][T19602] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1504.870959][T19602] usb 4-1: device descriptor read/8, error -71 [ 1505.143212][T19602] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1505.181126][T19602] usb 4-1: device descriptor read/8, error -71 [ 1505.200189][T19599] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1505.299951][T19602] usb usb4-port1: unable to enumerate USB device [ 1505.380169][T19599] usb 7-1: Using ep0 maxpacket: 8 [ 1505.386884][T19599] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.408106][T19599] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1505.420371][T19599] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.428389][T19599] usb 7-1: Product: syz [ 1505.440124][T19599] usb 7-1: Manufacturer: syz [ 1505.472506][T19599] usb 7-1: SerialNumber: syz [ 1505.495131][T19599] usb 7-1: config 0 descriptor?? [ 1505.714643][T19602] usb 7-1: USB disconnect, device number 2 [ 1506.188997][ T454] bridge1: entered allmulticast mode [ 1506.199353][ T454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5918'. [ 1506.612908][T24651] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1506.900173][T24651] usb 2-1: Using ep0 maxpacket: 8 [ 1506.907312][T24651] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1506.917166][T24651] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1506.927984][T24651] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1506.946407][T24651] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1507.028758][T24651] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1507.059542][T24651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.337385][T24651] usb 2-1: GET_CAPABILITIES returned 0 [ 1507.343435][T24651] usbtmc 2-1:16.0: can't read capabilities [ 1508.873134][ T524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5929'. [ 1509.297922][T19598] usb 2-1: USB disconnect, device number 81 [ 1509.427780][ T548] tipc: Started in network mode [ 1509.433404][ T548] tipc: Node identity 22b60b365e11, cluster identity 4711 [ 1509.441015][ T548] tipc: Enabled bearer , priority 0 [ 1509.448929][ T548] syzkaller0: entered promiscuous mode [ 1509.455188][ T548] syzkaller0: entered allmulticast mode [ 1509.486235][ T548] tipc: Resetting bearer [ 1509.558625][ T548] tipc: Resetting bearer [ 1509.587374][ T548] tipc: Disabling bearer [ 1509.820487][T19598] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1509.861022][ T574] tipc: Enabled bearer , priority 0 [ 1509.867943][ T577] tipc: Enabling of bearer rejected, already enabled [ 1509.878217][ T573] syzkaller0: entered promiscuous mode [ 1509.884049][ T573] syzkaller0: entered allmulticast mode [ 1509.908716][ T572] tipc: Resetting bearer [ 1509.930378][ T572] tipc: Disabling bearer [ 1509.981466][T19598] usb 4-1: Using ep0 maxpacket: 16 [ 1509.992610][T19598] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1510.002268][T19598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.011153][T19598] usb 4-1: Product: syz [ 1510.016215][T19598] usb 4-1: Manufacturer: syz [ 1510.023713][T19598] usb 4-1: SerialNumber: syz [ 1510.038281][T19598] usb 4-1: config 0 descriptor?? [ 1510.502033][ T587] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5939'. [ 1510.770522][T24651] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1510.950374][T24651] usb 7-1: Using ep0 maxpacket: 32 [ 1510.975504][T24651] usb 7-1: config 0 has an invalid interface number: 79 but max is 0 [ 1510.988704][T24651] usb 7-1: config 0 has no interface number 0 [ 1511.041294][T24651] usb 7-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1511.053522][T24651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.077362][T24651] usb 7-1: Product: syz [ 1511.104736][T24651] usb 7-1: Manufacturer: syz [ 1511.112495][T24651] usb 7-1: SerialNumber: syz [ 1511.162962][T24651] usb 7-1: config 0 descriptor?? [ 1511.470781][ T587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.485652][ T587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.533638][ T619] sctp: [Deprecated]: syz.1.5945 (pid 619) Use of int in max_burst socket option deprecated. [ 1511.533638][ T619] Use struct sctp_assoc_value instead [ 1512.162135][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1512.360276][ T634] support for the xor transformation has been removed. [ 1512.495634][T19598] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 1512.531469][T19598] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1512.581515][T19598] usb 4-1: USB disconnect, device number 81 [ 1513.767854][T24651] cp210x 7-1:0.79: cp210x converter detected [ 1513.786656][T24651] cp210x 7-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1513.823988][T24651] cp210x 7-1:0.79: querying part number failed [ 1513.837775][ T664] loop4: detected capacity change from 0 to 7 [ 1513.839031][T24651] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1513.872368][ T664] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 1513.878111][ T664] loop4: p1 size 2228224 extends beyond EOD, truncated [ 1513.890708][T19598] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1513.891567][ T664] loop4: p2 start 1982821989 is beyond EOD, [ 1513.907760][T24651] usb 7-1: USB disconnect, device number 3 [ 1513.930717][ T664] truncated [ 1513.959254][ T664] loop4: p3 size 327680 extends beyond EOD, truncated [ 1513.981570][T24651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1513.984932][ T664] loop4: p4 start 1970174324 is beyond EOD, [ 1513.992702][T24651] cp210x 7-1:0.79: device disconnected [ 1513.999205][ T664] truncated [ 1514.052979][T19598] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1514.061811][T19598] usb 2-1: not running at top speed; connect to a high speed hub [ 1514.076686][ T664] loop4: p5 start 1680801792 is beyond EOD, truncated [ 1514.123966][T19598] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1514.190939][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1514.199487][T19598] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1514.203489][ T8206] udevd[8206]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1514.281715][T19598] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1514.315169][T19598] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1514.373774][T19598] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1514.388724][T19598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.398189][T19598] usb 2-1: Product: syz [ 1514.400221][T24651] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1514.402939][T19598] usb 2-1: Manufacturer: syz [ 1514.417803][T19598] usb 2-1: SerialNumber: syz [ 1514.545541][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1514.545561][ T30] audit: type=1326 audit(1762196928.320:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1514.581622][ T30] audit: type=1326 audit(1762196928.350:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1514.582735][T24651] usb 7-1: Using ep0 maxpacket: 16 [ 1514.605962][ T30] audit: type=1326 audit(1762196928.350:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1514.634328][ T30] audit: type=1326 audit(1762196928.350:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1514.636794][T24651] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.675913][T24651] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.677359][ T30] audit: type=1326 audit(1762196928.350:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1514.687208][T24651] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.721775][T24651] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1514.733350][T24651] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1514.741484][ T701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5951'. [ 1514.743987][T24651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.810664][ T30] audit: type=1326 audit(1762196928.350:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1514.826381][T19598] usb 2-1: 0:2 : does not exist [ 1514.856342][ T30] audit: type=1326 audit(1762196928.350:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1514.919156][ T30] audit: type=1326 audit(1762196928.350:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1514.961900][T24651] usb 7-1: config 0 descriptor?? [ 1514.971476][T19598] usb 2-1: USB disconnect, device number 82 [ 1515.026414][ T30] audit: type=1326 audit(1762196928.350:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1515.135417][ T30] audit: type=1326 audit(1762196928.350:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=696 comm="syz.3.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1515.174444][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1515.290772][T20964] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1515.490210][T20964] usb 4-1: Using ep0 maxpacket: 32 [ 1515.505772][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.520072][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.531152][T20964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.546553][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.560446][T20964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1515.570931][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.577633][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.584983][T20964] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1515.594422][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.601838][T20964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.610151][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.618396][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.625985][T20964] usb 4-1: config 0 descriptor?? [ 1515.638410][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.653431][T20964] hub 4-1:0.0: USB hub found [ 1515.666615][T24651] kye 0003:0458:0153.0063: unknown main item tag 0x0 [ 1515.684337][T24651] kye 0003:0458:0153.0063: unexpected long global item [ 1515.697991][T24651] kye 0003:0458:0153.0063: parse failed [ 1515.707612][T24651] kye 0003:0458:0153.0063: probe with driver kye failed with error -22 [ 1515.731119][T24651] usb 7-1: USB disconnect, device number 4 [ 1515.906224][T20964] hub 4-1:0.0: 2 ports detected [ 1516.952397][T20964] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 1517.110080][T20964] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 1517.145279][T20964] usbhid 4-1:0.0: can't add hid device: -32 [ 1517.159124][T20964] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1517.670514][T19599] usb 4-1: USB disconnect, device number 82 [ 1517.916780][ T782] loop4: detected capacity change from 0 to 7 [ 1517.926323][ T5843] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 1517.933527][ T5843] loop4: p1 size 2228224 extends beyond EOD, truncated [ 1517.944878][ T5843] loop4: p2 start 1982821989 is beyond EOD, truncated [ 1517.953171][ T5843] loop4: p3 size 327680 extends beyond EOD, truncated [ 1517.975725][ T5843] loop4: p4 start 1970174324 is beyond EOD, truncated [ 1517.985357][ T5843] loop4: p5 start 1680801792 is beyond EOD, truncated [ 1517.999227][ T782] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 1518.012778][ T782] loop4: p1 size 2228224 extends beyond EOD, truncated [ 1518.026099][ T782] loop4: p2 start 1982821989 is beyond EOD, truncated [ 1518.035052][ T782] loop4: p3 size 327680 extends beyond EOD, truncated [ 1518.045388][ T782] loop4: p4 start 1970174324 is beyond EOD, truncated [ 1518.072505][ T782] loop4: p5 start 1680801792 is beyond EOD, truncated [ 1518.233088][ T8206] udevd[8206]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1518.251609][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1518.666759][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1518.673894][ T8206] udevd[8206]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1520.941874][ T838] netlink: 'syz.3.5972': attribute type 1 has an invalid length. [ 1520.949993][ T838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5972'. [ 1520.977606][ T850] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5973'. [ 1521.154323][ T845] netlink: 'syz.3.5972': attribute type 1 has an invalid length. [ 1521.165880][ T845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5972'. [ 1521.183900][ T851] fuse: Unknown parameter ' [ 1521.183900][ T851] ' [ 1521.985924][ T878] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5979'. [ 1524.097912][T19599] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1524.132004][T19602] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1524.269207][ T964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5992'. [ 1524.281963][ T964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5992'. [ 1524.310215][T19602] usb 7-1: Using ep0 maxpacket: 8 [ 1524.310329][T19599] usb 4-1: device descriptor read/64, error -71 [ 1524.318851][T19602] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1524.345402][T19602] usb 7-1: config 4 has an invalid interface number: 30 but max is 0 [ 1524.354062][T19602] usb 7-1: config 4 has no interface number 0 [ 1524.370643][T19602] usb 7-1: config 4 interface 30 has no altsetting 0 [ 1524.381556][T19602] usb 7-1: string descriptor 0 read error: -22 [ 1524.388036][T19602] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1524.406271][T19602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.446089][T19602] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1524.455297][T19602] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1524.470890][T19602] dvb-usb: bulk message failed: -22 (2/0) [ 1524.479852][T19602] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1524.500691][T19602] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1524.524739][T19602] usb 7-1: media controller created [ 1524.540306][T19602] dvb-usb: bulk message failed: -22 (6/0) [ 1524.551566][T19602] dw2102: i2c transfer failed. [ 1524.556541][T19602] dvb-usb: bulk message failed: -22 (6/0) [ 1524.575355][T19602] dw2102: i2c transfer failed. [ 1524.584731][T19602] dvb-usb: bulk message failed: -22 (6/0) [ 1524.590320][T19599] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1524.590773][T19602] dw2102: i2c transfer failed. [ 1524.608860][T19602] dvb-usb: bulk message failed: -22 (6/0) [ 1524.618386][T19602] dw2102: i2c transfer failed. [ 1524.627232][T19602] dvb-usb: bulk message failed: -22 (6/0) [ 1524.633541][T19602] dw2102: i2c transfer failed. [ 1524.638648][T19602] dvb-usb: bulk message failed: -22 (6/0) [ 1524.645148][T19602] dw2102: i2c transfer failed. [ 1524.654629][T20964] hid_parser_main: 820 callbacks suppressed [ 1524.654646][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.670444][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.678696][T19602] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1524.699438][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.719713][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.719955][ T981] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.5993'. [ 1524.736540][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.736595][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.736624][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.736652][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.736679][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.736707][T20964] hid-generic 0006:0004:0009.0064: unknown main item tag 0x0 [ 1524.741319][T20964] hid-generic 0006:0004:0009.0064: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1524.747804][T19599] usb 4-1: device descriptor read/64, error -71 [ 1524.755364][T19602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1524.810142][T19598] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1524.828598][T19602] dvb-usb: bulk message failed: -22 (3/0) [ 1524.839051][T19602] dw2102: command 0x0e transfer failed. [ 1524.845220][T19602] dvb-usb: bulk message failed: -22 (3/0) [ 1524.851579][T19602] dw2102: command 0x0e transfer failed. [ 1524.901203][T19599] usb usb4-port1: attempt power cycle [ 1525.010732][T19598] usb 2-1: Using ep0 maxpacket: 16 [ 1525.062865][T19598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1525.113623][T19598] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1525.120552][ T984] fido_id[984]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1525.140699][T19598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.148746][T19598] usb 2-1: Product: syz [ 1525.160202][T19602] dvb-usb: bulk message failed: -22 (3/0) [ 1525.166084][T19602] dw2102: command 0x0e transfer failed. [ 1525.181955][T19598] usb 2-1: Manufacturer: syz [ 1525.182502][T19602] dvb-usb: bulk message failed: -22 (3/0) [ 1525.201020][T19598] usb 2-1: SerialNumber: syz [ 1525.203422][T19602] dw2102: command 0x0e transfer failed. [ 1525.214401][T19602] dvb-usb: bulk message failed: -22 (1/0) [ 1525.230153][T19602] dw2102: command 0x51 transfer failed. [ 1525.236279][T19598] usb 2-1: config 0 descriptor?? [ 1525.242015][T19602] dvb-usb: bulk message failed: -22 (5/0) [ 1525.258273][T19602] dw2102: i2c probe for address 0x68 failed. [ 1525.263476][T19598] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1525.265558][T19602] dvb-usb: bulk message failed: -22 (5/0) [ 1525.274917][T19599] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1525.281357][T19602] dw2102: i2c probe for address 0x69 failed. [ 1525.301620][T19599] usb 4-1: device descriptor read/8, error -71 [ 1525.301915][T19602] dvb-usb: bulk message failed: -22 (5/0) [ 1525.310395][T19598] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1525.314430][T19602] dw2102: i2c probe for address 0x6a failed. [ 1525.344542][T19602] dw2102: probing for demodulator failed. Is the external power switched on? [ 1525.389361][T19602] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1525.556274][T19602] rc_core: IR keymap rc-tt-1500 not found [ 1525.566644][T19602] Registered IR keymap rc-empty [ 1525.574124][T19602] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1525.590936][T19599] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1525.625972][T19599] usb 4-1: device descriptor read/8, error -71 [ 1525.668481][ T1006] pim6reg: entered allmulticast mode [ 1525.770673][T19602] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input131 [ 1525.782854][T19602] dvb-usb: schedule remote query interval to 250 msecs. [ 1525.791870][T19602] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1525.798336][T19602] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1525.829343][T19602] usb 7-1: USB disconnect, device number 5 [ 1525.840742][T19599] usb usb4-port1: unable to enumerate USB device [ 1525.930622][T19598] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1526.128284][T19602] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1526.637200][T19598] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1526.646835][T19598] em28xx 2-1:0.0: board has no eeprom [ 1526.838255][ T1038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.867979][ T1038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.951161][T19598] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1526.965315][T19598] em28xx 2-1:0.0: dvb set to bulk mode. [ 1526.982797][ T10] em28xx 2-1:0.0: Binding DVB extension [ 1527.007855][T19598] usb 2-1: USB disconnect, device number 83 [ 1527.054208][T19598] em28xx 2-1:0.0: Disconnecting em28xx [ 1527.060263][T20964] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1527.167668][ T10] em28xx 2-1:0.0: Registering input extension [ 1527.203013][T19598] em28xx 2-1:0.0: Closing input extension [ 1527.260244][T20964] usb 7-1: Using ep0 maxpacket: 16 [ 1527.271682][T20964] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1527.291148][T20964] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1527.323054][T19598] em28xx 2-1:0.0: Freeing device [ 1527.356033][T20964] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1527.370119][T19602] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1527.379252][T20964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.467951][T20964] usb 7-1: Product: syz [ 1527.487857][T20964] usb 7-1: Manufacturer: syz [ 1527.506052][T20964] usb 7-1: SerialNumber: syz [ 1527.614859][T19602] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1527.664817][T19602] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1527.720221][T19602] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1527.781257][T19602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.807924][ T1072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1527.855939][T19602] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1527.907162][T20964] usb 7-1: USB disconnect, device number 6 [ 1527.977007][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1527.977026][ T30] audit: type=1326 audit(1762196941.750:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1528.138295][ T30] audit: type=1326 audit(1762196941.750:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1528.445602][T19602] usb 4-1: USB disconnect, device number 87 [ 1528.500203][ T30] audit: type=1326 audit(1762196941.750:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1528.579833][ T30] audit: type=1326 audit(1762196941.750:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1528.748007][ T30] audit: type=1326 audit(1762196941.750:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1528.834947][ T30] audit: type=1326 audit(1762196941.760:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1528.878272][ T30] audit: type=1326 audit(1762196941.790:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1528.945589][ T30] audit: type=1326 audit(1762196941.790:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1529.075674][ T30] audit: type=1326 audit(1762196941.790:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1529.126604][ T30] audit: type=1326 audit(1762196941.790:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1120 comm="syz.1.6001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1529.397397][T19602] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1529.456053][T20943] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1529.651252][ T1196] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6007'. [ 1529.711372][ T1200] netlink: 393 bytes leftover after parsing attributes in process `syz.2.6008'. [ 1529.730792][T20943] usb 2-1: Using ep0 maxpacket: 8 [ 1529.752387][T20943] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1529.762404][T20943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.785459][T20943] usb 2-1: Product: syz [ 1529.813849][T20943] usb 2-1: Manufacturer: syz [ 1529.822304][ T1196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1529.841539][T20943] usb 2-1: SerialNumber: syz [ 1529.850756][T20943] usb 2-1: config 0 descriptor?? [ 1530.136818][ T1208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.150908][ T1208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.873579][T20943] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 1530.881860][T20943] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1530.965609][ T1237] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1531.130171][T19599] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1531.591632][T19599] usb 7-1: device descriptor read/64, error -71 [ 1531.990291][T19599] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1532.144383][T19599] usb 7-1: device descriptor read/64, error -71 [ 1532.167300][T20943] usb 2-1: USB disconnect, device number 84 [ 1532.284356][T19599] usb usb7-port1: attempt power cycle [ 1532.654815][T19599] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1532.725573][T19599] usb 7-1: device descriptor read/8, error -71 [ 1533.002208][T19599] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1533.081434][T19599] usb 7-1: device descriptor read/8, error -71 [ 1533.122713][ T1276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1533.204314][T19599] usb usb7-port1: unable to enumerate USB device [ 1533.437589][ T1345] fuse: Bad value for 'fd' [ 1533.464185][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 1533.464202][ T30] audit: type=1326 audit(1762196947.240:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1346 comm="syz.3.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1533.506020][ T30] audit: type=1326 audit(1762196947.280:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1346 comm="syz.3.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1533.533791][ T30] audit: type=1326 audit(1762196947.280:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1346 comm="syz.3.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1533.593520][ T30] audit: type=1326 audit(1762196947.280:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1346 comm="syz.3.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1533.640749][ T1350] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1533.652316][ T1350] [U] J"—E:ÀÆ" [ 1533.656030][ T1350] [U] [ 1533.897323][ T1352] fuse: Invalid uid '00000000000000000003' [ 1533.998111][ T1365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6028'. [ 1534.051810][ T1365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6028'. [ 1534.103525][ T1365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6028'. [ 1534.211094][T19599] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1534.383057][T19599] usb 4-1: Using ep0 maxpacket: 16 [ 1534.396833][ T1380] pimreg: entered allmulticast mode [ 1534.412798][T19599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.432742][T19599] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1534.437102][ T1380] pimreg: left allmulticast mode [ 1534.462244][T19599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.504336][T19599] usb 4-1: config 0 descriptor?? [ 1534.515324][T19599] pxrc 4-1:0.0: Could not find endpoint [ 1534.831138][ T1407] loop6: detected capacity change from 0 to 7 [ 1534.852557][ T1407] Dev loop6: unable to read RDB block 7 [ 1534.858206][ T1407] loop6: AHDI p3 [ 1534.880115][ T1407] loop6: partition table partially beyond EOD, truncated [ 1535.070262][ T5913] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1535.231972][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.243239][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.255005][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1535.267537][T19598] usb 4-1: USB disconnect, device number 88 [ 1535.268628][ T5913] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1535.287498][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.303987][ T5913] usb 7-1: config 0 descriptor?? [ 1535.340185][T20943] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1535.508572][T20943] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 1535.517819][T20943] usb 2-1: config 0 has no interface number 0 [ 1535.534770][T20943] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1535.563205][T20943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.574609][T20943] usb 2-1: Product: syz [ 1535.578799][T20943] usb 2-1: Manufacturer: syz [ 1535.584790][T20943] usb 2-1: SerialNumber: syz [ 1535.600707][T20943] usb 2-1: config 0 descriptor?? [ 1535.638366][T20943] peak_usb 2-1:0.99: probe with driver peak_usb failed with error 99 [ 1535.790390][ T5913] usbhid 7-1:0.0: can't add hid device: -71 [ 1535.796452][ T5913] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1535.819645][ T5913] usb 7-1: USB disconnect, device number 12 [ 1535.842903][ T1421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.890970][ T1421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.916844][ T1421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.943854][ T1421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.976622][T20943] usb 2-1: USB disconnect, device number 85 [ 1536.311456][T20964] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1536.408405][ T30] audit: type=1326 audit(1762196950.180:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1478 comm="syz.6.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1536.432419][ T30] audit: type=1326 audit(1762196950.180:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1478 comm="syz.6.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1536.460712][ T30] audit: type=1326 audit(1762196950.210:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1478 comm="syz.6.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1536.483979][ T30] audit: type=1326 audit(1762196950.210:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1478 comm="syz.6.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1536.521670][T20964] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1536.533560][T20964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1536.556339][T20964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1536.569531][T20964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1536.586490][T20964] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1536.586702][ T30] audit: type=1326 audit(1762196950.210:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1478 comm="syz.6.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1536.599678][T20964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.645060][T20964] usb 4-1: config 0 descriptor?? [ 1536.663481][ T1468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1536.686937][ T30] audit: type=1326 audit(1762196950.210:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1478 comm="syz.6.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1537.161907][T20964] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1537.230212][T19598] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1537.380268][T19598] usb 2-1: Using ep0 maxpacket: 32 [ 1537.391103][T19598] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1537.410919][T19598] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1537.429352][T20964] usb 4-1: USB disconnect, device number 89 [ 1537.444283][T19598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.465083][T19598] usb 2-1: Product: syz [ 1537.472841][T19598] usb 2-1: Manufacturer: syz [ 1537.477480][T19598] usb 2-1: SerialNumber: syz [ 1537.500630][T19598] usb 2-1: config 0 descriptor?? [ 1538.254964][T19598] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 1538.327069][T19598] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1538.349802][T19598] usb 2-1: USB disconnect, device number 86 [ 1539.110704][T19598] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1539.270256][T20943] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1539.281083][T19598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1539.294495][T19598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1539.306309][T19598] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1539.319924][T19598] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1539.329978][T19598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.344114][T19598] usb 2-1: config 0 descriptor?? [ 1539.356888][T19598] hub 2-1:0.0: USB hub found [ 1539.400148][T20943] usb 4-1: device descriptor read/64, error -71 [ 1539.666999][ T1581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.673582][T20943] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1539.690308][ T1581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.840134][T19598] hub 2-1:0.0: 9 ports detected [ 1539.848787][T19598] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1539.891123][T20943] usb 4-1: device descriptor read/64, error -71 [ 1540.011306][T20943] usb usb4-port1: attempt power cycle [ 1540.020887][T19598] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1540.031154][T19598] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1540.072095][T19598] usb 2-1: USB disconnect, device number 87 [ 1540.360132][T20943] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1540.385492][T20943] usb 4-1: device descriptor read/8, error -71 [ 1540.578842][ T1654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1540.650169][T20943] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1540.731452][T20943] usb 4-1: device descriptor read/8, error -71 [ 1540.844079][ T1666] libceph: resolve '0..' (ret=-3): failed [ 1540.854264][T20943] usb usb4-port1: unable to enumerate USB device [ 1541.310883][ T1694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6073'. [ 1541.327242][T20943] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1541.492386][T20943] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1541.504359][T20943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1541.516140][T20943] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1541.530994][T20943] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1541.540869][T20943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.555667][T20943] usb 7-1: config 0 descriptor?? [ 1541.653564][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1541.653584][ T30] audit: type=1326 audit(1762196955.430:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1541.684678][ T30] audit: type=1326 audit(1762196955.430:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1541.708120][ T30] audit: type=1326 audit(1762196955.430:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1541.732289][ T30] audit: type=1326 audit(1762196955.430:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1541.768201][ T30] audit: type=1326 audit(1762196955.430:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1541.793493][ T30] audit: type=1326 audit(1762196955.430:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1541.816568][ T30] audit: type=1326 audit(1762196955.430:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1541.840365][ T30] audit: type=1326 audit(1762196955.430:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1541.873396][ T30] audit: type=1326 audit(1762196955.430:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1541.896892][ T30] audit: type=1326 audit(1762196955.430:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1702 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1542.033575][T20943] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1542.262656][ T1679] input: syz0 as /devices/virtual/input/input137 [ 1542.520194][T20964] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1542.530181][T19602] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1542.672178][T20964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.686624][T20964] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1542.695874][T19602] usb 2-1: Using ep0 maxpacket: 8 [ 1542.701142][T20964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.709177][T20964] usb 4-1: Product: syz [ 1542.716266][T20964] usb 4-1: Manufacturer: syz [ 1542.721080][T20964] usb 4-1: SerialNumber: syz [ 1542.727135][T19602] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1542.737908][T20964] usb 4-1: config 0 descriptor?? [ 1542.744395][T19602] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 1542.757847][T20964] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1542.765361][T19602] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1542.776691][T20964] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1542.784060][T19602] usb 2-1: config 8 interface 0 has no altsetting 0 [ 1542.791554][T20964] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1542.803596][T19602] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1542.813250][T19602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.822470][T19602] usb 2-1: Product: syz [ 1542.826795][T19602] usb 2-1: Manufacturer: syz [ 1542.831665][T19602] usb 2-1: SerialNumber: syz [ 1542.841368][ T1721] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1542.949527][ T1720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.960479][ T1720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.073592][T19602] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1543.083050][T19602] usb 2-1: selecting invalid altsetting 0 [ 1543.119582][T19602] usb 2-1: USB disconnect, device number 88 [ 1544.011456][T20964] usb 7-1: USB disconnect, device number 13 [ 1544.103546][ T1799] syzkaller0: entered promiscuous mode [ 1544.392792][ T1815] x_tables: unsorted underflow at hook 2 [ 1544.505987][ T1822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6083'. [ 1544.731280][ T1826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6083'. [ 1544.947886][ T1836] futex_wake_op: syz.2.6086 tries to shift op by 32; fix this program [ 1545.040736][ T5913] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1545.212542][ T5913] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1545.221125][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.232092][ T5913] usb 2-1: config 0 has no interface number 0 [ 1545.248977][ T5913] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1545.277659][ T10] usb 4-1: USB disconnect, device number 94 [ 1545.298069][T19599] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1545.313938][ T10] garmin_gps 4-1:0.0: device disconnected [ 1545.466572][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.522873][ T5913] usb 2-1: Product: syz [ 1545.530550][T19599] usb 7-1: Using ep0 maxpacket: 8 [ 1545.541379][T19599] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.552828][T19599] usb 7-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1545.560234][ T5913] usb 2-1: Manufacturer: syz [ 1545.567095][ T5913] usb 2-1: SerialNumber: syz [ 1545.568996][T19599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.594375][T19599] usb 7-1: config 0 descriptor?? [ 1545.607240][ T5913] usb 2-1: config 0 descriptor?? [ 1545.610484][T19599] usb 7-1: bad CDC descriptors [ 1545.623974][T19599] cdc_acm 7-1:0.0: Control and data interfaces are not separated! [ 1545.632922][T19599] cdc_acm 7-1:0.0: This needs exactly 3 endpoints [ 1545.644540][T19599] cdc_acm 7-1:0.0: probe with driver cdc_acm failed with error -22 [ 1545.680389][ T5913] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1545.693573][ T5913] uvcvideo 2-1:0.64: No valid video chain found. [ 1545.861259][ T1865] input: syz1 as /devices/virtual/input/input138 [ 1545.886737][T19599] usb 2-1: USB disconnect, device number 89 [ 1545.915357][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.922350][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.687693][ T1865] syz.3.6089 (1865): drop_caches: 1 [ 1548.003083][T20964] usb 7-1: USB disconnect, device number 14 [ 1550.248238][ T1951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1550.561006][ T1968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6103'. [ 1550.625448][ T1968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6103'. [ 1551.688010][ T1933] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6098'. [ 1552.305979][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1552.306006][ T30] audit: type=1400 audit(1762196966.080:2844): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=1999 comm="syz.2.6108" [ 1554.231433][ T2087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6118'. [ 1554.490258][T20964] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1554.640274][T20964] usb 7-1: Using ep0 maxpacket: 16 [ 1554.651805][T20964] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1554.661128][T20964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.669489][T20964] usb 7-1: Product: syz [ 1554.674970][T20964] usb 7-1: Manufacturer: syz [ 1554.690367][T20964] usb 7-1: SerialNumber: syz [ 1554.701618][T20964] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1554.707904][T20964] r8152-cfgselector 7-1: config 0 descriptor?? [ 1554.980257][T19598] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1555.172002][T19598] usb 2-1: Using ep0 maxpacket: 16 [ 1555.186758][T19598] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 1555.198186][T19598] usb 2-1: config 8 has no interface number 0 [ 1555.209576][T19598] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1555.246784][T19598] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 1555.266639][T19598] usb 2-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1555.297493][T19598] usb 2-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1555.344138][T19598] usb 2-1: config 8 interface 206 has no altsetting 0 [ 1555.364867][T19598] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1555.376693][ T2107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1555.398276][ T2107] IPVS: ip_vs_add_dest(): server weight less than zero [ 1555.424293][T19598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.455258][T19598] usb 2-1: Product: syz [ 1555.472107][T19598] usb 2-1: Manufacturer: syz [ 1555.492165][T19598] usb 2-1: SerialNumber: syz [ 1555.781370][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.792537][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.858843][T19598] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 1555.883601][T19598] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1556.014008][T19598] usb 2-1: USB disconnect, device number 90 [ 1556.055164][T19598] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1556.080909][T19598] garmin_gps 2-1:8.206: device disconnected [ 1556.890943][ T2159] binder_alloc: 2158: binder_alloc_buf size 65088 failed, no address space [ 1556.900004][ T2159] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1558.084071][ T30] audit: type=1326 audit(1762196971.860:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1558.131422][ T30] audit: type=1326 audit(1762196971.860:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1558.172116][ T30] audit: type=1326 audit(1762196971.880:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1558.251057][ T30] audit: type=1326 audit(1762196971.880:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1558.273809][T20964] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1558.281217][T20964] r8152-cfgselector 7-1: bad CDC descriptors [ 1558.298876][T20964] r8152-cfgselector 7-1: USB disconnect, device number 15 [ 1558.322619][ T30] audit: type=1326 audit(1762196971.880:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1558.347260][ T30] audit: type=1326 audit(1762196971.880:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1558.377221][ T30] audit: type=1326 audit(1762196971.880:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1558.405291][ T30] audit: type=1326 audit(1762196971.890:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1558.429796][ T30] audit: type=1326 audit(1762196971.890:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca6038d810 code=0x7ffc0000 [ 1558.456273][ T30] audit: type=1326 audit(1762196971.890:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2182 comm="syz.1.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1558.737753][ T2198] netlink: 'syz.4.6131': attribute type 1 has an invalid length. [ 1558.752476][ T2199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6131'. [ 1558.855529][ T2198] bond8: entered promiscuous mode [ 1558.878725][ T2198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1558.891661][ T2199] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1559.198432][ T2254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6135'. [ 1563.350896][T30675] Bluetooth: hci2: command 0x0406 tx timeout [ 1578.716792][T30675] Bluetooth: hci0: command 0x0405 tx timeout [ 1607.353988][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.360589][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.471815][T20970] kworker/1:12 (20970) used greatest stack depth: 15320 bytes left [ 1651.022036][ T2298] fuse: Bad value for 'user_id' [ 1651.113696][ T2298] fuse: Bad value for 'user_id' [ 1651.202767][ T2301] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1651.259426][ T2301] bond9 (unregistering): Released all slaves [ 1651.410132][ T10] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1651.510357][T24651] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1651.562477][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.572949][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1651.585112][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1651.596465][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1651.614022][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1651.627725][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1651.638963][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1651.723566][ T10] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1651.734529][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.735337][T24651] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.744781][ T10] usb 2-1: Product: syz [ 1651.760468][T24651] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1651.760838][ T10] usb 2-1: Manufacturer: syz [ 1651.780155][ T10] usb 2-1: SerialNumber: syz [ 1651.791507][ T10] usb 2-1: config 0 descriptor?? [ 1651.801255][ T2306] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1651.808955][T24651] usb 7-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1651.814874][ T10] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 1651.833437][ T10] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 1651.838681][T24651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.877967][T24651] usb 7-1: config 0 descriptor?? [ 1652.033530][ T10] usb 2-1: USB disconnect, device number 91 [ 1652.104846][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1652.104865][ T30] audit: type=1326 audit(1762197065.880:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.137376][ T30] audit: type=1326 audit(1762197065.880:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.163956][ T30] audit: type=1326 audit(1762197065.880:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.187206][ T30] audit: type=1326 audit(1762197065.880:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.210761][ T30] audit: type=1326 audit(1762197065.880:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.234112][ T30] audit: type=1326 audit(1762197065.880:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.258426][ T30] audit: type=1326 audit(1762197065.880:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.281776][ T30] audit: type=1326 audit(1762197065.880:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.305284][ T30] audit: type=1326 audit(1762197065.880:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.328635][ T30] audit: type=1326 audit(1762197065.880:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2342 comm="syz.6.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1652.358646][T24651] kye 0003:0458:501A.0067: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1652.369888][T24651] kye 0003:0458:501A.0067: unbalanced delimiter at end of report description [ 1652.379291][T24651] kye 0003:0458:501A.0067: parse failed [ 1652.384958][T24651] kye 0003:0458:501A.0067: probe with driver kye failed with error -22 [ 1652.560658][T24651] usb 7-1: USB disconnect, device number 16 [ 1653.080811][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1653.090127][T24651] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1653.147873][ T2467] bridge_slave_0: left allmulticast mode [ 1653.154051][ T2467] bridge_slave_0: left promiscuous mode [ 1653.159893][ T2467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.170910][ T2467] bridge_slave_1: left allmulticast mode [ 1653.177568][ T2467] bridge_slave_1: left promiscuous mode [ 1653.183590][ T2467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.197950][ T2467] bond0: (slave bond_slave_0): Releasing backup interface [ 1653.209014][ T2467] bond0: (slave bond_slave_1): Releasing backup interface [ 1653.226886][ T2467] team0: Port device team_slave_0 removed [ 1653.239080][ T2467] team0: Port device team_slave_1 removed [ 1653.245011][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1653.248500][ T2467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1653.252365][ T10] usb 2-1: config 0 has an invalid interface number: 127 but max is 0 [ 1653.258378][T24651] usb 4-1: Using ep0 maxpacket: 32 [ 1653.267013][ T10] usb 2-1: config 0 has no interface number 0 [ 1653.272200][ T2467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.283821][ T10] usb 2-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=50.49 [ 1653.288262][T24651] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1653.295896][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.305812][ T2467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1653.319093][T24651] usb 4-1: config 0 has no interface number 0 [ 1653.319253][ T10] usb 2-1: Product: syz [ 1653.326844][ T2467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.336881][ T10] usb 2-1: Manufacturer: syz [ 1653.336902][ T10] usb 2-1: SerialNumber: syz [ 1653.341966][ T10] usb 2-1: config 0 descriptor?? [ 1653.354654][T24651] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1653.357772][ T2467] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1653.364603][T24651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.394829][T24651] usb 4-1: Product: syz [ 1653.399023][T24651] usb 4-1: Manufacturer: syz [ 1653.403770][T24651] usb 4-1: SerialNumber: syz [ 1653.413183][T24651] usb 4-1: config 0 descriptor?? [ 1653.426786][T24651] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1653.624865][ T10] ums-sddr55 2-1:0.127: USB Mass Storage device detected [ 1653.680800][T24651] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1653.717867][ T10] usb 2-1: USB disconnect, device number 92 [ 1653.742158][T24651] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1654.105401][ T2426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.130791][ T2426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.398824][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1654.401245][T19598] usb 4-1: USB disconnect, device number 95 [ 1654.435167][T19598] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1654.536339][T19598] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1654.569206][T19598] quatech2 4-1:0.51: device disconnected [ 1654.641116][T24651] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1654.806455][T24651] usb 7-1: config 0 has an invalid interface number: 216 but max is 0 [ 1654.816442][T24651] usb 7-1: config 0 has no interface number 0 [ 1654.823172][T24651] usb 7-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1654.833782][T24651] usb 7-1: config 0 interface 216 has no altsetting 0 [ 1654.840996][T24651] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1654.850672][T24651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.863060][T24651] usb 7-1: config 0 descriptor?? [ 1654.881878][ T2552] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1654.898773][T24651] usb 7-1: NFC: intf ffff888078fcc000 id ffffffff8e908bc0 [ 1655.060377][ T2603] vlan3: entered promiscuous mode [ 1655.065569][ T2603] bridge0: entered promiscuous mode [ 1655.071255][ T2603] vlan3: entered allmulticast mode [ 1655.076490][ T2603] bridge0: entered allmulticast mode [ 1655.368661][ T2602] fuse: root generation should be zero [ 1655.378166][T24651] usb 7-1: USB disconnect, device number 17 [ 1655.420705][ T2600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6161'. [ 1656.412440][ T2644] netlink: 208 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1657.160199][ T2665] geneve2: entered allmulticast mode [ 1658.056598][ T2692] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.6171'. [ 1658.931443][ T2726] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1659.252587][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1659.252601][ T30] audit: type=1326 audit(1762197073.030:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1659.306585][T19598] hid_parser_main: 7 callbacks suppressed [ 1659.306607][T19598] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1659.328306][ T30] audit: type=1326 audit(1762197073.060:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1659.355848][T19598] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1659.368495][ T30] audit: type=1326 audit(1762197073.060:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1659.392939][ T30] audit: type=1326 audit(1762197073.060:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1659.495285][ T30] audit: type=1326 audit(1762197073.060:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1659.524510][T20964] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1659.606856][ T30] audit: type=1326 audit(1762197073.060:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1659.660549][T19598] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1659.704716][ T30] audit: type=1326 audit(1762197073.060:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1659.741072][ T2732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.755175][ T2732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.763069][T24651] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1659.775547][ T2732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.788874][ T2732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.900735][T19598] usb 2-1: Using ep0 maxpacket: 32 [ 1659.933795][T24651] usb 7-1: Using ep0 maxpacket: 8 [ 1659.935158][T19598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.940846][ T30] audit: type=1326 audit(1762197073.060:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1659.950144][T19598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.982851][T19598] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1659.993915][T19598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.002918][T24651] usb 7-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1660.006605][T19598] usb 2-1: config 0 descriptor?? [ 1660.027552][T19598] hub 2-1:0.0: USB hub found [ 1660.086480][T24651] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.104761][ T2756] fido_id[2756]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1660.113105][ T30] audit: type=1326 audit(1762197073.060:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1660.143014][ T30] audit: type=1326 audit(1762197073.060:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2730 comm="syz.6.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1660.224723][T19598] hub 2-1:0.0: 1 port detected [ 1660.234386][T20964] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1660.265214][T24651] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1660.301580][T20964] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1660.353392][T24651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.361622][T20964] usb 4-1: can't read configurations, error -71 [ 1660.819016][T24651] usb 7-1: string descriptor 0 read error: -71 [ 1660.826274][T24651] hub 7-1:32.0: bad descriptor, ignoring hub [ 1660.847878][ T10] hub 2-1:0.0: activate --> -90 [ 1660.869308][T24651] hub 7-1:32.0: probe with driver hub failed with error -5 [ 1661.068929][ T2696] delete_channel: no stack [ 1661.081047][T24651] usb 7-1: USB disconnect, device number 18 [ 1661.100834][T20964] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1661.261656][T19599] usb 2-1: USB disconnect, device number 93 [ 1661.268456][ T10] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1661.280119][T20964] usb 4-1: Using ep0 maxpacket: 16 [ 1661.328073][T20964] usb 4-1: config 0 has no interfaces? [ 1661.418162][T20964] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1661.468648][T20964] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1661.510891][T20964] usb 4-1: Manufacturer: syz [ 1661.569615][T20964] usb 4-1: config 0 descriptor?? [ 1661.636771][ T2883] tipc: Enabling of bearer rejected, failed to enable media [ 1661.804716][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1662.125811][ T10] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 1662.134433][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.154151][ T10] usb 7-1: config 0 has no interface number 0 [ 1662.162835][ T10] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1662.186502][ T10] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1662.374516][ T10] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1662.384185][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.461789][ T10] usb 7-1: Product: syz [ 1662.473037][ T10] usb 7-1: Manufacturer: syz [ 1662.481313][ T10] usb 7-1: SerialNumber: syz [ 1662.534635][ T10] usb 7-1: config 0 descriptor?? [ 1662.951471][ T10] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1663.062658][ T10] usb 7-1: USB disconnect, device number 19 [ 1663.720278][T19599] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1663.890965][T19599] usb 2-1: Using ep0 maxpacket: 16 [ 1663.923672][T19599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.966239][T19599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1664.000811][T19599] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1664.040775][T19599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.086080][T20964] usb 4-1: USB disconnect, device number 97 [ 1664.134049][T19599] usb 2-1: config 0 descriptor?? [ 1664.363087][T19599] saitek 0003:06A3:0621.0069: item fetching failed at offset 4/5 [ 1664.374224][ T2969] tipc: Enabled bearer , priority 0 [ 1664.381666][T19599] saitek 0003:06A3:0621.0069: parse failed [ 1664.387637][T19599] saitek 0003:06A3:0621.0069: probe with driver saitek failed with error -22 [ 1664.413831][ T2970] syzkaller0: entered promiscuous mode [ 1664.419342][ T2970] syzkaller0: entered allmulticast mode [ 1664.454237][T19599] usb 2-1: USB disconnect, device number 94 [ 1664.956834][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1664.956855][ T30] audit: type=1326 audit(1762197078.550:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.105195][ T30] audit: type=1326 audit(1762197078.550:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.127558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.175900][ T30] audit: type=1326 audit(1762197078.550:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.216559][ T3007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6198'. [ 1665.228070][ T2985] tipc: Resetting bearer [ 1665.249143][ T30] audit: type=1326 audit(1762197078.550:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.304692][ T30] audit: type=1326 audit(1762197078.550:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.327044][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.370182][T20943] tipc: Node number set to 104340465 [ 1665.418953][ T30] audit: type=1326 audit(1762197078.550:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.441354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.530065][ T30] audit: type=1326 audit(1762197078.550:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.642679][ T30] audit: type=1326 audit(1762197078.550:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.730121][ T30] audit: type=1326 audit(1762197078.550:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.846891][ T30] audit: type=1326 audit(1762197078.550:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2994 comm="syz.1.6195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1665.969236][ T2985] tipc: Disabling bearer [ 1666.309353][T30675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1666.320141][T30675] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1666.348856][T30675] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1666.358816][T30675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1666.369622][T30675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1666.687064][ T3036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6199'. [ 1667.014449][T15568] team0: Port device syz_tun removed [ 1667.040454][T20943] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1667.202384][T20943] usb 4-1: config 0 has no interfaces? [ 1667.224869][T20943] usb 4-1: New USB device found, idVendor=041e, idProduct=401f, bcdDevice=71.32 [ 1667.235949][T20943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.250850][T20943] usb 4-1: Product: syz [ 1667.255057][T20943] usb 4-1: Manufacturer: syz [ 1667.259847][T20943] usb 4-1: SerialNumber: syz [ 1667.310845][T20943] usb 4-1: config 0 descriptor?? [ 1667.367689][ T3025] chnl_net:caif_netlink_parms(): no params data found [ 1667.529263][T20943] usb 4-1: USB disconnect, device number 98 [ 1667.738756][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.747274][ T3025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.757296][ T3025] bridge_slave_0: entered allmulticast mode [ 1667.766163][ T3025] bridge_slave_0: entered promiscuous mode [ 1667.775056][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.782853][ T3025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.790426][ T3025] bridge_slave_1: entered allmulticast mode [ 1667.795817][ T3229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6206'. [ 1667.798491][ T3025] bridge_slave_1: entered promiscuous mode [ 1667.878397][ T3025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.881502][T19599] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1667.895794][ T3025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.966131][ T3025] team0: Port device team_slave_0 added [ 1667.974860][ T3025] team0: Port device team_slave_1 added [ 1668.015350][ T3025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1668.023373][ T3025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.060727][ T3025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.130484][T19599] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.152576][ T3025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.159582][ T3025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.283239][T19599] usb 7-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1668.293218][T19599] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1668.300091][ T3025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.302533][T19599] usb 7-1: Product: syz [ 1668.334211][T19599] usb 7-1: Manufacturer: syz [ 1668.342912][T19599] usb 7-1: SerialNumber: syz [ 1668.399551][T19599] usb 7-1: config 0 descriptor?? [ 1668.409742][T19599] gspca_main: conex-2.14.0 probing 0572:0041 [ 1668.432246][ T3310] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1668.443173][ T3310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1668.449303][ T3310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1668.471390][ T3310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1668.479031][ T3310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1668.485260][T30675] Bluetooth: hci3: command tx timeout [ 1668.544920][ T3310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1668.553128][ T3310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1668.578785][ T3310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1668.587390][ T3310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1668.609043][ T3310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1668.643922][ T3194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.678318][ T3194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.736697][ T3025] hsr_slave_0: entered promiscuous mode [ 1668.755938][ T3025] hsr_slave_1: entered promiscuous mode [ 1668.770805][ T3025] debugfs: 'hsr0' already exists in 'hsr' [ 1668.776890][ T3025] Cannot create hsr debugfs directory [ 1668.795286][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.802760][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.905163][T19599] usb 7-1: USB disconnect, device number 20 [ 1669.481204][ T3025] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1669.576040][ T3025] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.158487][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1670.158544][ T30] audit: type=1326 audit(1762197083.440:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1670.348464][ T30] audit: type=1326 audit(1762197083.440:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1670.450107][ T30] audit: type=1326 audit(1762197083.440:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1670.466220][ T3025] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1670.476117][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1670.494334][T30675] Bluetooth: hci4: command 0x0406 tx timeout [ 1670.544112][ T3025] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.555346][T30675] Bluetooth: hci2: command 0x0406 tx timeout [ 1670.613127][ T30] audit: type=1326 audit(1762197083.440:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1670.636938][T30675] Bluetooth: hci0: command 0x0405 tx timeout [ 1670.640261][ T52] Bluetooth: hci3: command 0x041b tx timeout [ 1670.643221][ T30] audit: type=1326 audit(1762197083.440:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1670.674392][ T30] audit: type=1326 audit(1762197083.450:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1670.840172][ T30] audit: type=1326 audit(1762197083.450:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1670.912448][ T3025] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1670.940387][ T30] audit: type=1326 audit(1762197083.450:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1670.964964][ T3025] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.002629][ T30] audit: type=1326 audit(1762197083.860:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1671.027455][ T30] audit: type=1326 audit(1762197083.860:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3443 comm="syz.4.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f8b8efc9 code=0x7ffc0000 [ 1671.189169][ T3025] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1671.236486][ T3025] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.247271][T20943] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1671.381992][T20943] usb 7-1: device descriptor read/64, error -71 [ 1671.660883][T20943] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1671.865550][ T3025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1671.890733][T20943] usb 7-1: device descriptor read/64, error -71 [ 1671.973527][ T3025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1672.005215][ T3484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6213'. [ 1672.025390][ T3484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6213'. [ 1672.034710][ T3025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1672.090623][ T3025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1672.100642][T20943] usb usb7-port1: attempt power cycle [ 1672.470128][T20943] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1672.497094][ T3025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.551064][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1672.587376][ T3025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.624275][T19218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.631527][T19218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.639143][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1672.685927][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.693196][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.701466][T20943] usb 7-1: device not accepting address 23, error -71 [ 1672.712096][T30675] Bluetooth: hci0: command 0x0405 tx timeout [ 1672.717824][ T52] Bluetooth: hci3: command 0x041b tx timeout [ 1672.768957][ T3025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1672.780329][ T3025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1672.849889][ T3025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.968664][ T3025] veth0_vlan: entered promiscuous mode [ 1672.984709][ T3509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6218'. [ 1672.996082][ T3025] veth1_vlan: entered promiscuous mode [ 1673.007959][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6218'. [ 1673.068783][ T3025] veth0_macvtap: entered promiscuous mode [ 1673.081681][ T3025] veth1_macvtap: entered promiscuous mode [ 1673.123233][ T3025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.149264][ T3025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1673.169768][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.184719][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.198350][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.209109][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.300789][T19599] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1673.308633][T19216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.328493][T19216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.357863][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.366622][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.440796][T19599] usb 4-1: device descriptor read/64, error -71 [ 1673.680161][T19599] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1673.957898][ T3542] syz.2.6196 (3542): drop_caches: 2 [ 1673.982406][ T3542] syz.2.6196 (3542): drop_caches: 2 [ 1674.022775][T19599] usb 4-1: device descriptor read/64, error -71 [ 1674.360459][T19599] usb usb4-port1: attempt power cycle [ 1674.425752][ T3551] fuse: Bad value for 'fd' [ 1674.510876][T20964] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1674.691759][T20964] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1674.710030][T20964] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1674.730142][T19599] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1674.750761][T19599] usb 4-1: device descriptor read/8, error -71 [ 1674.759799][T20964] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.790588][ T52] Bluetooth: hci3: command 0x041b tx timeout [ 1674.837936][T20964] usb 7-1: config 220 has no interface number 2 [ 1674.847646][T20964] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1674.865821][T20964] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1674.872809][T20964] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1675.147239][T20964] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1675.150183][T19599] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1675.236645][T19599] usb 4-1: device descriptor read/8, error -71 [ 1675.350723][T19599] usb usb4-port1: unable to enumerate USB device [ 1675.390273][T20964] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1675.402052][T20964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.563789][T20964] usb 7-1: Product: syz [ 1675.578516][T20964] usb 7-1: Manufacturer: syz [ 1675.639506][T20964] usb 7-1: SerialNumber: syz [ 1676.481418][T20943] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1676.626764][T20943] usb 4-1: device descriptor read/64, error -71 [ 1676.840106][ T5913] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1676.870212][ T52] Bluetooth: hci3: command 0x041b tx timeout [ 1676.888353][T20943] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1677.040534][T20943] usb 4-1: device descriptor read/64, error -71 [ 1677.256103][ T5913] usb 2-1: device descriptor read/64, error -71 [ 1677.371518][T20943] usb usb4-port1: attempt power cycle [ 1677.521234][ T5913] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1677.660182][ T5913] usb 2-1: device descriptor read/64, error -71 [ 1677.720178][T20943] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1677.741469][T20943] usb 4-1: device descriptor read/8, error -71 [ 1677.770732][ T5913] usb usb2-port1: attempt power cycle [ 1677.976488][T20964] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1677.980851][T20943] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1677.985485][T20964] uvcvideo 7-1:220.0: No valid video chain found. [ 1677.999221][T20964] usb 7-1: selecting invalid altsetting 0 [ 1678.011340][T20943] usb 4-1: device descriptor read/8, error -71 [ 1678.032137][T20964] usb 7-1: selecting invalid altsetting 0 [ 1678.038687][T20964] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1678.067985][T20964] usb 7-1: USB disconnect, device number 25 [ 1678.120190][ T5913] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1678.143163][T20943] usb usb4-port1: unable to enumerate USB device [ 1678.149923][ T5913] usb 2-1: device descriptor read/8, error -71 [ 1678.400258][ T5913] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1678.420879][ T5913] usb 2-1: device descriptor read/8, error -71 [ 1678.530368][ T5913] usb usb2-port1: unable to enumerate USB device [ 1678.560119][T20964] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1678.700169][T20964] usb 7-1: device descriptor read/64, error -71 [ 1678.940178][T20964] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1678.950205][ T52] Bluetooth: hci3: command 0x041b tx timeout [ 1679.070316][T20964] usb 7-1: device descriptor read/64, error -71 [ 1679.180481][T20964] usb usb7-port1: attempt power cycle [ 1679.309078][ T3523] IPVS: starting estimator thread 0... [ 1679.316265][ T3650] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20001 [ 1679.324829][ T3650] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1679.334701][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6231'. [ 1679.343701][ T3650] netlink: 'syz.3.6231': attribute type 30 has an invalid length. [ 1679.413755][ T9280] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.423293][ T9280] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.432794][ T9280] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.447568][ T9280] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.456824][ T3651] IPVS: using max 27 ests per chain, 64800 per kthread [ 1679.530524][T20964] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1679.550893][T20964] usb 7-1: device descriptor read/8, error -71 [ 1679.990107][T20964] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1680.011541][T20964] usb 7-1: device descriptor read/8, error -71 [ 1680.130914][T20964] usb usb7-port1: unable to enumerate USB device [ 1680.620808][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1680.620831][ T30] audit: type=1326 audit(1762197094.360:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1680.662958][ T30] audit: type=1326 audit(1762197094.360:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1680.696161][ T30] audit: type=1326 audit(1762197094.360:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1680.748187][ T30] audit: type=1326 audit(1762197094.370:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1680.987922][ T30] audit: type=1326 audit(1762197094.370:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1681.069152][ T30] audit: type=1326 audit(1762197094.370:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1681.077616][ T52] Bluetooth: hci3: command 0x041b tx timeout [ 1681.280118][ T30] audit: type=1326 audit(1762197094.370:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1681.442282][ T30] audit: type=1326 audit(1762197094.370:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1681.520322][ T30] audit: type=1326 audit(1762197094.370:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1681.550849][ T30] audit: type=1326 audit(1762197094.370:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fca6038efc9 code=0x7ffc0000 [ 1682.144657][ T3694] loop6: detected capacity change from 0 to 7 [ 1682.181204][ T3694] Dev loop6: unable to read RDB block 7 [ 1682.190584][ T3694] loop6: AHDI p3 [ 1682.194449][ T3694] loop6: partition table partially beyond EOD, truncated [ 1682.540136][ T3523] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1682.590838][T20964] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1682.710782][ T3523] usb 2-1: Using ep0 maxpacket: 16 [ 1682.730105][T20964] usb 7-1: device descriptor read/64, error -71 [ 1682.737055][ T3523] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1682.745851][ T3523] usb 2-1: config 0 has no interface number 0 [ 1682.760634][ T3523] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1682.790205][ T3523] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1682.810422][ T3523] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1682.822133][ T3523] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1682.840137][ T3523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.848177][ T3523] usb 2-1: Product: syz [ 1682.860747][ T3523] usb 2-1: Manufacturer: syz [ 1682.865404][ T3523] usb 2-1: SerialNumber: syz [ 1682.883069][ T3523] usb 2-1: config 0 descriptor?? [ 1682.891451][ T3700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1682.898817][ T3700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1682.990396][T20964] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1683.043036][T30675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1683.066153][T30675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1683.079776][T30675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1683.102941][T30675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1683.113596][T30675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1683.127454][ T3700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1683.140664][ T3700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1683.172693][T20964] usb 7-1: device descriptor read/64, error -71 [ 1683.300547][T20964] usb usb7-port1: attempt power cycle [ 1683.327408][T19218] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.403293][ T3738] loop4: detected capacity change from 0 to 7 [ 1683.411357][ T3738] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 1683.416999][ T3738] loop4: p1 size 2228224 extends beyond EOD, truncated [ 1683.431678][ T3738] loop4: p2 start 1982821989 is beyond EOD, truncated [ 1683.438543][ T3738] loop4: p3 size 327680 extends beyond EOD, truncated [ 1683.466540][ T3738] loop4: p4 start 1970174324 is beyond EOD, truncated [ 1683.475214][ T3738] loop4: p5 start 1680801792 is beyond EOD, truncated [ 1683.519928][T19218] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.570427][ T2563] udevd[2563]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1683.581370][ T3523] Error reading MAC address [ 1683.582705][ T2289] udevd[2289]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1683.597248][ T3700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1683.607745][ T3700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1683.666243][T20964] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1683.704954][T20964] usb 7-1: device descriptor read/8, error -71 [ 1683.722649][T19218] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.817699][T19218] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.961457][T20964] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1684.004347][T20964] usb 7-1: device descriptor read/8, error -71 [ 1684.082957][ T3727] chnl_net:caif_netlink_parms(): no params data found [ 1684.134255][T20964] usb usb7-port1: unable to enumerate USB device [ 1684.235840][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.256405][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.318142][T19218] bridge_slave_1: left allmulticast mode [ 1684.342274][T19218] bridge_slave_1: left promiscuous mode [ 1684.348182][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.368921][ T3904] loop6: detected capacity change from 0 to 7 [ 1684.380397][ T3904] Dev loop6: unable to read RDB block 7 [ 1684.386022][ T3904] loop6: AHDI p3 [ 1684.402086][T19218] bridge_slave_0: left allmulticast mode [ 1684.450202][ T3904] loop6: partition table partially beyond EOD, truncated [ 1684.459842][T19218] bridge_slave_0: left promiscuous mode [ 1684.480910][T19218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.202285][ T52] Bluetooth: hci4: command tx timeout [ 1685.661786][ T3928] loop4: detected capacity change from 0 to 7 [ 1685.677968][ T3928] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 1685.687915][ T3928] loop4: p1 size 2228224 extends beyond EOD, truncated [ 1685.703769][ T3928] loop4: p2 start 1982821989 is beyond EOD, truncated [ 1685.710927][ T3928] loop4: p3 size 327680 extends beyond EOD, truncated [ 1685.722224][ T3928] loop4: p4 start 1970174324 is beyond EOD, truncated [ 1685.729510][ T3928] loop4: p5 start 1680801792 is beyond EOD, truncated [ 1685.798338][ T2289] udevd[2289]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1685.816430][ T2563] udevd[2563]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1685.826350][T20964] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1685.843567][ T3938] vivid-002: disconnect [ 1685.848256][ T3938] vivid-002: reconnect [ 1685.861287][T19218] bond1 (unregistering): Released all slaves [ 1685.892761][T19218] bond2 (unregistering): Released all slaves [ 1685.917151][T19218] bond3 (unregistering): Released all slaves [ 1685.984128][T20964] usb 7-1: Using ep0 maxpacket: 16 [ 1685.996813][T20964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.016016][T20964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.026511][T20964] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1686.039934][T20964] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1686.050323][T20964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.079514][T20964] usb 7-1: config 0 descriptor?? [ 1686.202122][T19218] bond4 (unregistering): Released all slaves [ 1686.372606][T19218] bond5 (unregistering): Released all slaves [ 1686.516316][T20964] microsoft 0003:045E:07DA.006A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1686.576464][T20964] microsoft 0003:045E:07DA.006A: no inputs found [ 1686.583315][T20964] microsoft 0003:045E:07DA.006A: could not initialize ff, continuing anyway [ 1686.615482][T19218] bond6 (unregistering): Released all slaves [ 1686.678234][T19218] bond0 (unregistering): Released all slaves [ 1686.757639][T19218] bond7 (unregistering): (slave vcan1): Releasing backup interface [ 1686.766705][T19218] vcan1: left allmulticast mode [ 1686.775392][T19218] bond7 (unregistering): Released all slaves [ 1687.152761][T19218] bond8 (unregistering): Released all slaves [ 1687.195613][ T3523] sr9700 2-1:0.41 eth13: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, e6:96:b9:ab:ab:09 [ 1687.271016][ T52] Bluetooth: hci4: command tx timeout [ 1687.311207][ T3523] usb 2-1: USB disconnect, device number 99 [ 1687.364556][ T3523] sr9700 2-1:0.41 eth13: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 1687.413092][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.423335][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.445776][ T3727] bridge_slave_0: entered allmulticast mode [ 1687.482432][ T3727] bridge_slave_0: entered promiscuous mode [ 1687.534981][T19218] tipc: Left network mode [ 1687.540713][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.556334][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.569247][ T3727] bridge_slave_1: entered allmulticast mode [ 1687.596507][ T3727] bridge_slave_1: entered promiscuous mode [ 1687.735048][ T3727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1687.754308][ T3727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.878056][ T3727] team0: Port device team_slave_0 added [ 1687.882849][ T3523] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1687.891295][ T3727] team0: Port device team_slave_1 added [ 1687.975722][ T4056] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1688.018550][ T4056] gretap1: entered allmulticast mode [ 1688.194404][ T3523] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1688.220176][ T3523] usb 2-1: config 0 has no interface number 0 [ 1688.226439][ T3523] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.235157][ T3727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.255844][ T3727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.261186][ T3523] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.307722][ T3727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.325130][ T3523] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1688.354378][ T3523] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1688.354755][ T3727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.367994][ T3523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.420064][ T3727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.451739][ T3727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.495447][ T3523] usb 2-1: config 0 descriptor?? [ 1688.505566][ T4102] loop6: detected capacity change from 0 to 7 [ 1688.524345][ T3523] usb 2-1: can't set config #0, error -71 [ 1688.541830][ T3523] usb 2-1: USB disconnect, device number 100 [ 1688.565668][ T4102] Dev loop6: unable to read RDB block 7 [ 1688.582338][ T4102] loop6: AHDI p3 [ 1688.596255][ T4102] loop6: partition table partially beyond EOD, truncated [ 1688.641725][ T3603] usb 7-1: USB disconnect, device number 34 [ 1688.855176][ T3727] hsr_slave_0: entered promiscuous mode [ 1688.881568][ T3727] hsr_slave_1: entered promiscuous mode [ 1688.902609][ T3727] debugfs: 'hsr0' already exists in 'hsr' [ 1688.925573][ T3727] Cannot create hsr debugfs directory [ 1689.022849][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1689.022869][ T30] audit: type=1326 audit(1762197102.790:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1689.152851][ T4166] loop4: detected capacity change from 0 to 7 [ 1689.160928][ T30] audit: type=1326 audit(1762197102.790:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1689.185454][T19218] hsr_slave_0: left promiscuous mode [ 1689.185788][ T4166] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 1689.237804][ T4166] loop4: p1 size 2228224 extends beyond EOD, truncated [ 1689.257412][T19218] hsr_slave_1: left promiscuous mode [ 1689.287228][ T4166] loop4: p2 start 1982821989 is beyond EOD, truncated [ 1689.304541][ T4166] loop4: p3 size 327680 extends beyond EOD, truncated [ 1689.312167][ T30] audit: type=1326 audit(1762197102.800:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1689.354509][ T52] Bluetooth: hci4: command tx timeout [ 1689.362338][ T4166] loop4: p4 start 1970174324 is beyond EOD, truncated [ 1689.362894][T19218] veth1_macvtap: left promiscuous mode [ 1689.459091][ T4166] loop4: p5 start 1680801792 is beyond EOD, truncated [ 1689.540193][ T30] audit: type=1326 audit(1762197102.800:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1689.550953][T19218] veth0_macvtap: left promiscuous mode [ 1689.716951][T19218] veth1_vlan: left promiscuous mode [ 1689.748453][ T30] audit: type=1326 audit(1762197102.800:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1689.757115][T19218] veth0_vlan: left promiscuous mode [ 1689.806577][ T2508] udevd[2508]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1689.824385][ T2563] udevd[2563]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1689.971250][ T30] audit: type=1326 audit(1762197102.800:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1690.020933][ T30] audit: type=1326 audit(1762197102.800:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1690.145134][ T30] audit: type=1326 audit(1762197102.800:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1690.299478][ T30] audit: type=1326 audit(1762197102.800:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1690.380234][ T30] audit: type=1326 audit(1762197103.250:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4159 comm="syz.3.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352458efc9 code=0x7ffc0000 [ 1691.116651][ T3603] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1691.304831][ T3603] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1691.314269][ T3603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.324816][ T3603] usb 4-1: Product: syz [ 1691.329015][ T3603] usb 4-1: Manufacturer: syz [ 1691.335251][ T3603] usb 4-1: SerialNumber: syz [ 1691.351405][ T3603] usb 4-1: config 0 descriptor?? [ 1691.367496][ T3603] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1691.430339][ T52] Bluetooth: hci4: command tx timeout [ 1693.032791][T19218] IPVS: stop unused estimator thread 0... [ 1693.187367][ T4202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1693.204439][ T4321] loop6: detected capacity change from 0 to 7 [ 1693.251180][ T4321] Dev loop6: unable to read RDB block 7 [ 1693.263546][ T4321] loop6: AHDI p3 [ 1693.267229][ T4321] loop6: partition table partially beyond EOD, truncated [ 1693.287437][ T4202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1693.439191][ T3603] gspca_sunplus: reg_r err -71 [ 1693.469588][ T3603] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1693.532247][ T3603] usb 4-1: USB disconnect, device number 107 [ 1693.696750][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6275'. [ 1693.885049][ T4361] loop4: detected capacity change from 0 to 7 [ 1693.892586][ T4361] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 1693.898287][ T4361] loop4: p1 size 2228224 extends beyond EOD, truncated [ 1693.915358][ T4361] loop4: p2 start 1982821989 is beyond EOD, truncated [ 1693.953643][ T4361] loop4: p3 size 327680 extends beyond EOD, truncated [ 1693.987410][ T4361] loop4: p4 start 1970174324 is beyond EOD, truncated [ 1694.029999][ T4361] loop4: p5 start 1680801792 is beyond EOD, truncated [ 1694.244930][ T2563] udevd[2563]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1694.255440][ T2508] udevd[2508]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1694.774809][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1694.774841][ T30] audit: type=1326 audit(1762197108.340:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1694.786182][ T3727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1694.885053][ T3727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1694.916800][ T3727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1694.943183][ T3727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1694.950256][ T30] audit: type=1326 audit(1762197108.340:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1695.047873][ T30] audit: type=1326 audit(1762197108.340:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1695.166415][ T30] audit: type=1326 audit(1762197108.340:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1695.300112][ T30] audit: type=1326 audit(1762197108.340:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1695.417844][ T30] audit: type=1326 audit(1762197108.340:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1695.519492][ T30] audit: type=1326 audit(1762197108.340:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1695.645750][ T30] audit: type=1326 audit(1762197108.340:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1695.718936][ T30] audit: type=1326 audit(1762197108.340:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1695.829533][ T30] audit: type=1326 audit(1762197108.480:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.6.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbccb38efc9 code=0x7ffc0000 [ 1695.959740][ T3727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1696.090819][ T4461] loop6: detected capacity change from 0 to 7 [ 1696.101030][ T3727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1696.111497][ T2508] Dev loop6: unable to read RDB block 7 [ 1696.120694][ T2508] loop6: AHDI p3 [ 1696.128710][ T2508] loop6: partition table partially beyond EOD, truncated [ 1696.139417][ T4461] Dev loop6: unable to read RDB block 7 [ 1696.152125][ T4461] loop6: AHDI p3 [ 1696.168826][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.175995][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.192678][ T4461] loop6: partition table partially beyond EOD, truncated [ 1696.273772][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.281072][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.480277][ T4481] netlink: 'syz.1.6286': attribute type 3 has an invalid length. [ 1696.514141][ T4481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6286'. [ 1696.552214][ T3727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.763329][ T3727] veth0_vlan: entered promiscuous mode [ 1696.805180][ T4493] loop4: detected capacity change from 0 to 7 [ 1696.824421][ T4493] loop4: [POWERTEC] p1 p2 p3 p4 p5 [ 1696.824449][ T3727] veth1_vlan: entered promiscuous mode [ 1696.838338][ T4493] loop4: p1 size 2228224 extends beyond EOD, truncated [ 1696.869888][ T4502] [ 1696.870919][ T4493] loop4: p2 start 1982821989 is beyond EOD, [ 1696.872285][ T4502] ===================================================== [ 1696.872296][ T4502] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1696.872317][ T4502] syzkaller #0 Not tainted [ 1696.886875][ T4493] truncated [ 1696.892661][ T4502] ----------------------------------------------------- [ 1696.892673][ T4502] syz.3.6289/4502 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1696.892692][ T4502] ffff888067959b40 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1696.905850][ T3727] veth0_macvtap: entered promiscuous mode [ 1696.907170][ T4502] [ 1696.907170][ T4502] and this task is already holding: [ 1696.916424][ T4493] loop4: p3 size 327680 extends beyond EOD, [ 1696.923453][ T4502] ffff888147b9f028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1696.923511][ T4502] which would create a new lock dependency: [ 1696.923520][ T4502] (&client->buffer_lock){....}-{3:3} [ 1696.941611][ T3727] veth1_macvtap: entered promiscuous mode [ 1696.942604][ T4502] -> (&new->fa_lock){...-}-{3:3} [ 1696.942639][ T4502] [ 1696.942639][ T4502] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1696.952915][ T4493] truncated [ 1696.958756][ T4502] (&dev->event_lock#2){..-.}-{3:3} [ 1696.958790][ T4502] [ 1696.958790][ T4502] ... which became SOFTIRQ-irq-safe at: [ 1696.958802][ T4502] lock_acquire+0x120/0x360 [ 1696.981108][ T4493] loop4: p4 start 1970174324 is beyond EOD, [ 1696.984341][ T4502] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1696.984377][ T4502] input_inject_event+0xa5/0x340 [ 1696.994573][ T4493] truncated [ 1697.004025][ T4502] kd_sound_helper+0x101/0x210 [ 1697.004060][ T4502] input_handler_for_each_handle+0x101/0x1c0 [ 1697.004082][ T4502] call_timer_fn+0x17e/0x5f0 [ 1697.004100][ T4502] __run_timer_base+0x61a/0x860 [ 1697.004126][ T4502] run_timer_softirq+0xb7/0x180 [ 1697.004152][ T4502] handle_softirqs+0x286/0x870 [ 1697.004173][ T4502] __irq_exit_rcu+0xca/0x1f0 [ 1697.004190][ T4502] irq_exit_rcu+0x9/0x30 [ 1697.004210][ T4502] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1697.004235][ T4502] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1697.004257][ T4502] finish_task_switch+0x26b/0x950 [ 1697.004286][ T4502] __schedule+0x17a0/0x4cc0 [ 1697.004309][ T4502] schedule+0x165/0x360 [ 1697.004332][ T4502] schedule_timeout+0x9a/0x270 [ 1697.004352][ T4502] unix_wait_for_peer+0x1e9/0x2e0 [ 1697.004376][ T4502] unix_dgram_sendmsg+0xb7a/0x1850 [ 1697.004401][ T4502] __sock_sendmsg+0x21c/0x270 [ 1697.004434][ T4502] ____sys_sendmsg+0x52d/0x830 [ 1697.004454][ T4502] ___sys_sendmsg+0x21f/0x2a0 [ 1697.123845][ T4502] __sys_sendmmsg+0x227/0x430 [ 1697.128634][ T4502] __x64_sys_sendmmsg+0xa0/0xc0 [ 1697.133581][ T4502] do_syscall_64+0xfa/0xfa0 [ 1697.138176][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.144157][ T4502] [ 1697.144157][ T4502] to a SOFTIRQ-irq-unsafe lock: [ 1697.151170][ T4502] (tasklist_lock){.+.+}-{3:3} [ 1697.151196][ T4502] [ 1697.151196][ T4502] ... which became SOFTIRQ-irq-unsafe at: [ 1697.163833][ T4502] ... [ 1697.163840][ T4502] lock_acquire+0x120/0x360 [ 1697.171282][ T4502] _raw_read_lock+0x36/0x50 [ 1697.175877][ T4502] __do_wait+0xde/0x740 [ 1697.180127][ T4502] do_wait+0x1f8/0x510 [ 1697.184333][ T4502] kernel_wait+0xab/0x170 [ 1697.188756][ T4502] call_usermodehelper_exec_work+0xbe/0x230 [ 1697.194730][ T4502] process_scheduled_works+0xae1/0x17b0 [ 1697.200360][ T4502] worker_thread+0x8a0/0xda0 [ 1697.205038][ T4502] kthread+0x711/0x8a0 [ 1697.209203][ T4502] ret_from_fork+0x4bc/0x870 [ 1697.213882][ T4502] ret_from_fork_asm+0x1a/0x30 [ 1697.218739][ T4502] [ 1697.218739][ T4502] other info that might help us debug this: [ 1697.218739][ T4502] [ 1697.228967][ T4502] Chain exists of: [ 1697.228967][ T4502] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1697.228967][ T4502] [ 1697.242539][ T4502] Possible interrupt unsafe locking scenario: [ 1697.242539][ T4502] [ 1697.250854][ T4502] CPU0 CPU1 [ 1697.256217][ T4502] ---- ---- [ 1697.261580][ T4502] lock(tasklist_lock); [ 1697.265815][ T4502] local_irq_disable(); [ 1697.272563][ T4502] lock(&dev->event_lock#2); [ 1697.279758][ T4502] lock(&client->buffer_lock); [ 1697.287126][ T4502] [ 1697.290576][ T4502] lock(&dev->event_lock#2); [ 1697.295450][ T4502] [ 1697.295450][ T4502] *** DEADLOCK *** [ 1697.295450][ T4502] [ 1697.303591][ T4502] 7 locks held by syz.3.6289/4502: [ 1697.308696][ T4502] #0: ffff888028f28118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1697.317849][ T4502] #1: ffff8881466d2230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1697.327964][ T4502] #2: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1697.337636][ T4502] #3: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1697.347212][ T4502] #4: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1697.356354][ T4502] #5: ffff888147b9f028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1697.366549][ T4502] #6: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1697.375606][ T4502] [ 1697.375606][ T4502] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1697.386006][ T4502] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1697.391665][ T4502] IN-SOFTIRQ-W at: [ 1697.395733][ T4502] lock_acquire+0x120/0x360 [ 1697.402058][ T4502] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1697.409085][ T4502] input_inject_event+0xa5/0x340 [ 1697.415860][ T4502] kd_sound_helper+0x101/0x210 [ 1697.422453][ T4502] input_handler_for_each_handle+0x101/0x1c0 [ 1697.430260][ T4502] call_timer_fn+0x17e/0x5f0 [ 1697.436677][ T4502] __run_timer_base+0x61a/0x860 [ 1697.443357][ T4502] run_timer_softirq+0xb7/0x180 [ 1697.450071][ T4502] handle_softirqs+0x286/0x870 [ 1697.456668][ T4502] __irq_exit_rcu+0xca/0x1f0 [ 1697.463081][ T4502] irq_exit_rcu+0x9/0x30 [ 1697.469143][ T4502] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1697.476611][ T4502] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1697.484415][ T4502] finish_task_switch+0x26b/0x950 [ 1697.491266][ T4502] __schedule+0x17a0/0x4cc0 [ 1697.497594][ T4502] schedule+0x165/0x360 [ 1697.503575][ T4502] schedule_timeout+0x9a/0x270 [ 1697.510162][ T4502] unix_wait_for_peer+0x1e9/0x2e0 [ 1697.517013][ T4502] unix_dgram_sendmsg+0xb7a/0x1850 [ 1697.523952][ T4502] __sock_sendmsg+0x21c/0x270 [ 1697.530466][ T4502] ____sys_sendmsg+0x52d/0x830 [ 1697.537054][ T4502] ___sys_sendmsg+0x21f/0x2a0 [ 1697.543565][ T4502] __sys_sendmmsg+0x227/0x430 [ 1697.550078][ T4502] __x64_sys_sendmmsg+0xa0/0xc0 [ 1697.556755][ T4502] do_syscall_64+0xfa/0xfa0 [ 1697.563086][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.570800][ T4502] INITIAL USE at: [ 1697.574778][ T4502] lock_acquire+0x120/0x360 [ 1697.581018][ T4502] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1697.587958][ T4502] input_inject_event+0xa5/0x340 [ 1697.594646][ T4502] kbd_led_trigger_activate+0xbc/0x100 [ 1697.601841][ T4502] led_trigger_set+0x52d/0x950 [ 1697.608361][ T4502] led_trigger_set_default+0x260/0x2a0 [ 1697.616692][ T4502] led_classdev_register_ext+0x73d/0x930 [ 1697.624079][ T4502] input_leds_connect+0x517/0x790 [ 1697.630890][ T4502] input_register_device+0xd00/0x1140 [ 1697.638006][ T4502] atkbd_connect+0x72e/0xa00 [ 1697.644343][ T4502] serio_driver_probe+0x82/0xd0 [ 1697.650937][ T4502] really_probe+0x26d/0x9e0 [ 1697.657185][ T4502] __driver_probe_device+0x18c/0x2f0 [ 1697.664213][ T4502] driver_probe_device+0x4f/0x430 [ 1697.670978][ T4502] __driver_attach+0x452/0x700 [ 1697.677489][ T4502] bus_for_each_dev+0x233/0x2b0 [ 1697.684075][ T4502] serio_handle_event+0x1f9/0x8d0 [ 1697.690838][ T4502] process_scheduled_works+0xae1/0x17b0 [ 1697.698123][ T4502] worker_thread+0x8a0/0xda0 [ 1697.704449][ T4502] kthread+0x711/0x8a0 [ 1697.710275][ T4502] ret_from_fork+0x4bc/0x870 [ 1697.716612][ T4502] ret_from_fork_asm+0x1a/0x30 [ 1697.723110][ T4502] } [ 1697.725695][ T4502] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1697.734810][ T4502] -> (&client->buffer_lock){....}-{3:3} { [ 1697.740549][ T4502] INITIAL USE at: [ 1697.744445][ T4502] lock_acquire+0x120/0x360 [ 1697.750516][ T4502] _raw_spin_lock+0x2e/0x40 [ 1697.756587][ T4502] evdev_pass_values+0xb9/0xbd0 [ 1697.763008][ T4502] evdev_events+0x1e6/0x340 [ 1697.769088][ T4502] input_pass_values+0x288/0x890 [ 1697.775606][ T4502] input_event_dispose+0x330/0x6b0 [ 1697.782300][ T4502] input_inject_event+0x1dd/0x340 [ 1697.788908][ T4502] evdev_write+0x2fc/0x480 [ 1697.794897][ T4502] vfs_write+0x27e/0xb30 [ 1697.800712][ T4502] ksys_write+0x145/0x250 [ 1697.806636][ T4502] do_syscall_64+0xfa/0xfa0 [ 1697.812726][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.820197][ T4502] } [ 1697.822702][ T4502] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1697.830876][ T4502] ... acquired at: [ 1697.834686][ T4502] lock_acquire+0x120/0x360 [ 1697.839390][ T4502] _raw_spin_lock+0x2e/0x40 [ 1697.844074][ T4502] evdev_pass_values+0xb9/0xbd0 [ 1697.849122][ T4502] evdev_events+0x1e6/0x340 [ 1697.853835][ T4502] input_pass_values+0x288/0x890 [ 1697.858954][ T4502] input_event_dispose+0x330/0x6b0 [ 1697.864255][ T4502] input_inject_event+0x1dd/0x340 [ 1697.869481][ T4502] evdev_write+0x2fc/0x480 [ 1697.874085][ T4502] vfs_write+0x27e/0xb30 [ 1697.878531][ T4502] ksys_write+0x145/0x250 [ 1697.883040][ T4502] do_syscall_64+0xfa/0xfa0 [ 1697.887725][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.893790][ T4502] [ 1697.896118][ T4502] [ 1697.896118][ T4502] the dependencies between the lock to be acquired [ 1697.896128][ T4502] and SOFTIRQ-irq-unsafe lock: [ 1697.909653][ T4502] -> (tasklist_lock){.+.+}-{3:3} { [ 1697.914957][ T4502] HARDIRQ-ON-R at: [ 1697.919119][ T4502] lock_acquire+0x120/0x360 [ 1697.925643][ T4502] _raw_read_lock+0x36/0x50 [ 1697.932173][ T4502] __do_wait+0xde/0x740 [ 1697.938361][ T4502] do_wait+0x1f8/0x510 [ 1697.944453][ T4502] kernel_wait+0xab/0x170 [ 1697.950797][ T4502] call_usermodehelper_exec_work+0xbe/0x230 [ 1697.958695][ T4502] process_scheduled_works+0xae1/0x17b0 [ 1697.966255][ T4502] worker_thread+0x8a0/0xda0 [ 1697.972849][ T4502] kthread+0x711/0x8a0 [ 1697.978933][ T4502] ret_from_fork+0x4bc/0x870 [ 1697.985527][ T4502] ret_from_fork_asm+0x1a/0x30 [ 1697.992288][ T4502] SOFTIRQ-ON-R at: [ 1697.996443][ T4502] lock_acquire+0x120/0x360 [ 1698.002946][ T4502] _raw_read_lock+0x36/0x50 [ 1698.009466][ T4502] __do_wait+0xde/0x740 [ 1698.015629][ T4502] do_wait+0x1f8/0x510 [ 1698.021720][ T4502] kernel_wait+0xab/0x170 [ 1698.028082][ T4502] call_usermodehelper_exec_work+0xbe/0x230 [ 1698.035990][ T4502] process_scheduled_works+0xae1/0x17b0 [ 1698.043547][ T4502] worker_thread+0x8a0/0xda0 [ 1698.050152][ T4502] kthread+0x711/0x8a0 [ 1698.056239][ T4502] ret_from_fork+0x4bc/0x870 [ 1698.062849][ T4502] ret_from_fork_asm+0x1a/0x30 [ 1698.069630][ T4502] INITIAL USE at: [ 1698.073715][ T4502] lock_acquire+0x120/0x360 [ 1698.080146][ T4502] _raw_write_lock_irq+0xa2/0xf0 [ 1698.087005][ T4502] copy_process+0x224f/0x3c00 [ 1698.093597][ T4502] kernel_clone+0x21e/0x840 [ 1698.100015][ T4502] user_mode_thread+0xdd/0x140 [ 1698.106689][ T4502] rest_init+0x23/0x300 [ 1698.112753][ T4502] start_kernel+0x3ae/0x410 [ 1698.119200][ T4502] x86_64_start_reservations+0x24/0x30 [ 1698.126574][ T4502] x86_64_start_kernel+0x143/0x1c0 [ 1698.133601][ T4502] common_startup_64+0x13e/0x147 [ 1698.140479][ T4502] INITIAL READ USE at: [ 1698.144981][ T4502] lock_acquire+0x120/0x360 [ 1698.151832][ T4502] _raw_read_lock+0x36/0x50 [ 1698.158688][ T4502] __do_wait+0xde/0x740 [ 1698.165199][ T4502] do_wait+0x1f8/0x510 [ 1698.171623][ T4502] kernel_wait+0xab/0x170 [ 1698.178303][ T4502] call_usermodehelper_exec_work+0xbe/0x230 [ 1698.186541][ T4502] process_scheduled_works+0xae1/0x17b0 [ 1698.194431][ T4502] worker_thread+0x8a0/0xda0 [ 1698.201368][ T4502] kthread+0x711/0x8a0 [ 1698.207813][ T4502] ret_from_fork+0x4bc/0x870 [ 1698.214757][ T4502] ret_from_fork_asm+0x1a/0x30 [ 1698.221970][ T4502] } [ 1698.224662][ T4502] ... key at: [] tasklist_lock+0x18/0x40 [ 1698.232668][ T4502] ... acquired at: [ 1698.236660][ T4502] lock_acquire+0x120/0x360 [ 1698.241347][ T4502] _raw_read_lock+0x36/0x50 [ 1698.246041][ T4502] send_sigio+0x101/0x370 [ 1698.250554][ T4502] kill_fasync+0x24d/0x4d0 [ 1698.255166][ T4502] lease_break_callback+0x26/0x30 [ 1698.260728][ T4502] __break_lease+0x6a5/0x1620 [ 1698.265600][ T4502] vfs_truncate+0x428/0x520 [ 1698.270289][ T4502] do_sys_truncate+0xdb/0x190 [ 1698.275157][ T4502] __x64_sys_truncate+0x5b/0x70 [ 1698.280283][ T4502] do_syscall_64+0xfa/0xfa0 [ 1698.284972][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.291043][ T4502] [ 1698.293366][ T4502] -> (&f_owner->lock){....}-{3:3} { [ 1698.298671][ T4502] INITIAL USE at: [ 1698.302655][ T4502] lock_acquire+0x120/0x360 [ 1698.308908][ T4502] _raw_write_lock_irq+0xa2/0xf0 [ 1698.316030][ T4502] __f_setown+0x67/0x370 [ 1698.322033][ T4502] fcntl_dirnotify+0x3fa/0x6a0 [ 1698.328587][ T4502] do_fcntl+0x6d0/0x1910 [ 1698.334581][ T4502] __se_sys_fcntl+0xc8/0x150 [ 1698.341014][ T4502] do_syscall_64+0xfa/0xfa0 [ 1698.347287][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.354925][ T4502] INITIAL READ USE at: [ 1698.359347][ T4502] lock_acquire+0x120/0x360 [ 1698.366026][ T4502] _raw_read_lock_irqsave+0xaf/0x100 [ 1698.373502][ T4502] send_sigio+0x38/0x370 [ 1698.379924][ T4502] dnotify_handle_event+0x169/0x440 [ 1698.387309][ T4502] fsnotify+0x1814/0x1a80 [ 1698.393813][ T4502] vfs_mkdir+0x477/0x510 [ 1698.400237][ T4502] do_mkdirat+0x247/0x590 [ 1698.406748][ T4502] __x64_sys_mkdirat+0x87/0xa0 [ 1698.413712][ T4502] do_syscall_64+0xfa/0xfa0 [ 1698.420400][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.428471][ T4502] } [ 1698.431059][ T4502] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1698.440005][ T4502] ... acquired at: [ 1698.443912][ T4502] lock_acquire+0x120/0x360 [ 1698.448592][ T4502] _raw_read_lock_irqsave+0xaf/0x100 [ 1698.454059][ T4502] send_sigio+0x38/0x370 [ 1698.458481][ T4502] kill_fasync+0x24d/0x4d0 [ 1698.463075][ T4502] lease_break_callback+0x26/0x30 [ 1698.468286][ T4502] __break_lease+0x6a5/0x1620 [ 1698.473178][ T4502] do_dentry_open+0x8b7/0x13f0 [ 1698.478126][ T4502] vfs_open+0x3b/0x340 [ 1698.482367][ T4502] path_openat+0x2ee5/0x3830 [ 1698.487137][ T4502] do_filp_open+0x1fa/0x410 [ 1698.491823][ T4502] do_sys_openat2+0x121/0x1c0 [ 1698.496679][ T4502] __x64_sys_open+0x11e/0x150 [ 1698.501531][ T4502] do_syscall_64+0xfa/0xfa0 [ 1698.506215][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.512287][ T4502] [ 1698.514619][ T4502] -> (&new->fa_lock){...-}-{3:3} { [ 1698.519760][ T4502] IN-SOFTIRQ-R at: [ 1698.523742][ T4502] lock_acquire+0x120/0x360 [ 1698.529897][ T4502] _raw_read_lock_irqsave+0xaf/0x100 [ 1698.536836][ T4502] kill_fasync+0x199/0x4d0 [ 1698.542919][ T4502] sock_wake_async+0x137/0x160 [ 1698.549341][ T4502] sock_def_readable+0x3bb/0x550 [ 1698.555939][ T4502] mptcp_data_ready+0x4e7/0x910 [ 1698.562461][ T4502] subflow_data_ready+0x2c0/0x7e0 [ 1698.572263][ T4502] tcp_data_queue+0x201e/0x64a0 [ 1698.578781][ T4502] tcp_rcv_established+0x1335/0x2670 [ 1698.585727][ T4502] tcp_v4_do_rcv+0xa90/0x1430 [ 1698.592061][ T4502] tcp_v4_rcv+0x2675/0x2f20 [ 1698.598240][ T4502] ip_protocol_deliver_rcu+0x221/0x440 [ 1698.605362][ T4502] ip_local_deliver_finish+0x3bb/0x6f0 [ 1698.612484][ T4502] NF_HOOK+0x30c/0x3a0 [ 1698.618220][ T4502] NF_HOOK+0x30c/0x3a0 [ 1698.623941][ T4502] __netif_receive_skb+0x143/0x380 [ 1698.630717][ T4502] process_backlog+0x60e/0x14f0 [ 1698.637236][ T4502] __napi_poll+0xc7/0x360 [ 1698.643223][ T4502] net_rx_action+0x5f7/0xdf0 [ 1698.649483][ T4502] handle_softirqs+0x286/0x870 [ 1698.655992][ T4502] __irq_exit_rcu+0xca/0x1f0 [ 1698.662235][ T4502] irq_exit_rcu+0x9/0x30 [ 1698.668176][ T4502] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1698.675461][ T4502] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1698.683091][ T4502] do_syscall_64+0xc3/0xfa0 [ 1698.689251][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.696819][ T4502] INITIAL USE at: [ 1698.700713][ T4502] lock_acquire+0x120/0x360 [ 1698.706777][ T4502] _raw_write_lock_irq+0xa2/0xf0 [ 1698.713277][ T4502] fasync_remove_entry+0xf1/0x1c0 [ 1698.719868][ T4502] lease_modify+0x1ca/0x3c0 [ 1698.725940][ T4502] locks_remove_file+0x4bf/0xea0 [ 1698.732445][ T4502] __fput+0x3ab/0xa70 [ 1698.737997][ T4502] task_work_run+0x1d4/0x260 [ 1698.744160][ T4502] exit_to_user_mode_loop+0xe9/0x130 [ 1698.751009][ T4502] do_syscall_64+0x2bd/0xfa0 [ 1698.757179][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.764633][ T4502] INITIAL READ USE at: [ 1698.768959][ T4502] lock_acquire+0x120/0x360 [ 1698.775457][ T4502] _raw_read_lock_irqsave+0xaf/0x100 [ 1698.782738][ T4502] kill_fasync+0x199/0x4d0 [ 1698.789160][ T4502] lease_break_callback+0x26/0x30 [ 1698.796207][ T4502] __break_lease+0x6a5/0x1620 [ 1698.802887][ T4502] do_dentry_open+0x8b7/0x13f0 [ 1698.809641][ T4502] vfs_open+0x3b/0x340 [ 1698.815700][ T4502] path_openat+0x2ee5/0x3830 [ 1698.822287][ T4502] do_filp_open+0x1fa/0x410 [ 1698.828787][ T4502] do_sys_openat2+0x121/0x1c0 [ 1698.835460][ T4502] __x64_sys_open+0x11e/0x150 [ 1698.842137][ T4502] do_syscall_64+0xfa/0xfa0 [ 1698.848650][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.856553][ T4502] } [ 1698.859064][ T4502] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1698.867750][ T4502] ... acquired at: [ 1698.871555][ T4502] lock_acquire+0x120/0x360 [ 1698.876261][ T4502] _raw_read_lock_irqsave+0xaf/0x100 [ 1698.881732][ T4502] kill_fasync+0x199/0x4d0 [ 1698.886347][ T4502] evdev_pass_values+0x627/0xbd0 [ 1698.891467][ T4502] evdev_events+0x1e6/0x340 [ 1698.896150][ T4502] input_pass_values+0x288/0x890 [ 1698.901268][ T4502] input_event_dispose+0x330/0x6b0 [ 1698.906560][ T4502] input_inject_event+0x1dd/0x340 [ 1698.911764][ T4502] evdev_write+0x2fc/0x480 [ 1698.916356][ T4502] vfs_write+0x27e/0xb30 [ 1698.920783][ T4502] ksys_write+0x145/0x250 [ 1698.925293][ T4502] do_syscall_64+0xfa/0xfa0 [ 1698.929978][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.936042][ T4502] [ 1698.938365][ T4502] [ 1698.938365][ T4502] stack backtrace: [ 1698.944266][ T4502] CPU: 0 UID: 0 PID: 4502 Comm: syz.3.6289 Not tainted syzkaller #0 PREEMPT(full) [ 1698.944285][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1698.944296][ T4502] Call Trace: [ 1698.944305][ T4502] [ 1698.944313][ T4502] dump_stack_lvl+0x189/0x250 [ 1698.944338][ T4502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1698.944360][ T4502] ? __pfx__printk+0x10/0x10 [ 1698.944385][ T4502] validate_chain+0x1f05/0x2140 [ 1698.944413][ T4502] __lock_acquire+0xab9/0xd20 [ 1698.944430][ T4502] ? kill_fasync+0x199/0x4d0 [ 1698.944449][ T4502] lock_acquire+0x120/0x360 [ 1698.944463][ T4502] ? kill_fasync+0x199/0x4d0 [ 1698.944486][ T4502] _raw_read_lock_irqsave+0xaf/0x100 [ 1698.944507][ T4502] ? kill_fasync+0x199/0x4d0 [ 1698.944526][ T4502] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1698.944545][ T4502] ? do_raw_spin_lock+0x121/0x290 [ 1698.944571][ T4502] kill_fasync+0x199/0x4d0 [ 1698.944589][ T4502] ? kill_fasync+0x53/0x4d0 [ 1698.944608][ T4502] evdev_pass_values+0x627/0xbd0 [ 1698.944631][ T4502] ? evdev_pass_values+0x621/0xbd0 [ 1698.944652][ T4502] evdev_events+0x1e6/0x340 [ 1698.944670][ T4502] ? evdev_events+0x79/0x340 [ 1698.944688][ T4502] ? input_pass_values+0x8d/0x890 [ 1698.944705][ T4502] input_pass_values+0x288/0x890 [ 1698.944725][ T4502] ? input_handle_event+0x70c/0xf30 [ 1698.944750][ T4502] input_event_dispose+0x330/0x6b0 [ 1698.944776][ T4502] input_inject_event+0x1dd/0x340 [ 1698.944801][ T4502] ? input_inject_event+0xb6/0x340 [ 1698.944826][ T4502] evdev_write+0x2fc/0x480 [ 1698.944844][ T4502] ? futex_private_hash_put+0x245/0x280 [ 1698.944867][ T4502] ? __pfx_evdev_write+0x10/0x10 [ 1698.944887][ T4502] ? bpf_lsm_file_permission+0x9/0x20 [ 1698.944905][ T4502] ? security_file_permission+0x75/0x290 [ 1698.944925][ T4502] ? rw_verify_area+0x255/0x4d0 [ 1698.944946][ T4502] ? __lock_acquire+0xab9/0xd20 [ 1698.944960][ T4502] ? __pfx_evdev_write+0x10/0x10 [ 1698.944979][ T4502] vfs_write+0x27e/0xb30 [ 1698.945004][ T4502] ? __pfx_vfs_write+0x10/0x10 [ 1698.945026][ T4502] ? __fget_files+0x2a/0x420 [ 1698.945042][ T4502] ? __fget_files+0x2a/0x420 [ 1698.945056][ T4502] ? __fget_files+0x3a0/0x420 [ 1698.945070][ T4502] ? __fget_files+0x2a/0x420 [ 1698.945087][ T4502] ksys_write+0x145/0x250 [ 1698.945110][ T4502] ? __pfx_ksys_write+0x10/0x10 [ 1698.945135][ T4502] ? do_syscall_64+0xbe/0xfa0 [ 1698.945157][ T4502] do_syscall_64+0xfa/0xfa0 [ 1698.945179][ T4502] ? lockdep_hardirqs_on+0x9c/0x150 [ 1698.945200][ T4502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.945215][ T4502] ? clear_bhb_loop+0x60/0xb0 [ 1698.945233][ T4502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.945249][ T4502] RIP: 0033:0x7f352458efc9 [ 1698.945265][ T4502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1698.945279][ T4502] RSP: 002b:00007f3525467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1698.945296][ T4502] RAX: ffffffffffffffda RBX: 00007f35247e5fa0 RCX: 00007f352458efc9 [ 1698.945308][ T4502] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 1698.945319][ T4502] RBP: 00007f3524611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1698.945329][ T4502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1698.945339][ T4502] R13: 00007f35247e6038 R14: 00007f35247e5fa0 R15: 00007f352490fa28 [ 1698.945357][ T4502] [ 1699.278038][ T3727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1699.288405][ T3727] batman_adv: batadv0: Interface activated: batadv_slave_1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1699.334393][ T4493] loop4: p5 start 1680801792 is beyond EOD, truncated [ 1699.343402][ T4502] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1699.349936][ T4502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1699.362132][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.373311][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.382649][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.391494][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.413701][ T4502] vhci_hcd vhci_hcd.0: Device attached [ 1699.420278][T24651] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1699.455851][ T3727] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht' [ 1699.477364][ T2563] udevd[2563]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1699.484014][ T3727] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht' [ 1699.490097][T19216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.561923][T24651] usb 7-1: device descriptor read/64, error -71 [ 1699.602565][ T2508] udevd[2508]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1699.612506][T20964] vhci_hcd: vhci_device speed not set [ 1699.642109][T19216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.643692][ T5913] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1699.680913][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.700037][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.750477][T20964] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 1699.823903][T24651] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1699.880641][ T4505] vhci_hcd: connection reset by peer [ 1699.887636][T19216] vhci_hcd: stop threads [ 1699.920521][T19216] vhci_hcd: release socket [ 1699.930728][T19216] vhci_hcd: disconnect device [ 1700.712045][T19218] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.848546][T19218] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.925124][T19218] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.023232][T19218] bond0: (slave netdevsim0): Releasing backup interface [ 1701.032697][T19218] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.487132][T19218] bond0 (unregistering): Released all slaves [ 1701.565328][T19218] tipc: Left network mode [ 1701.728001][T19218] hsr_slave_0: left promiscuous mode [ 1701.737463][T19218] hsr_slave_1: left promiscuous mode [ 1701.749151][T19218] veth1_macvtap: left promiscuous mode [ 1701.755017][T19218] veth0_macvtap: left promiscuous mode [ 1701.760753][T19218] veth1_vlan: left promiscuous mode [ 1701.766090][T19218] veth0_vlan: left promiscuous mode [ 1701.829575][T19218] pim6reg (unregistering): left allmulticast mode [ 1702.552215][T19218] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.618987][T19218] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.666818][T19218] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.725635][T19218] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.830054][T19218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.840877][T19218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.877002][T19218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.887839][T19218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.952030][T19218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.965491][T19218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.006251][T19218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.018405][T19218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.114788][T19218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.125787][T19218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.168903][T19218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.181348][T19218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.227068][T19218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.237532][T19218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.292989][T19218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.306325][T19218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.404631][T19218] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.453835][T19218] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.534167][T19218] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.625731][T19218] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.716638][T19218] bridge_slave_1: left allmulticast mode [ 1703.722528][T19218] bridge_slave_1: left promiscuous mode [ 1703.728243][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.738223][T19218] bridge_slave_0: left allmulticast mode [ 1703.745036][T19218] bridge_slave_0: left promiscuous mode [ 1703.751466][T19218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.763288][T19218] bond1: left allmulticast mode [ 1703.768164][T19218] bond1: left promiscuous mode [ 1703.773331][T19218] bridge0: port 3(bond1) entered disabled state [ 1703.781559][T19218] bridge_slave_1: left allmulticast mode [ 1703.787218][T19218] bridge_slave_1: left promiscuous mode [ 1703.793198][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.802497][T19218] bridge_slave_0: left allmulticast mode [ 1703.808167][T19218] bridge_slave_0: left promiscuous mode [ 1703.814490][T19218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.826694][T19218] bridge_slave_1: left allmulticast mode [ 1703.832549][T19218] bridge_slave_1: left promiscuous mode [ 1703.838220][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.847808][T19218] bridge_slave_0: left allmulticast mode [ 1703.858006][T19218] bridge_slave_0: left promiscuous mode [ 1703.866610][T19218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.877032][T19218] bridge_slave_1: left allmulticast mode [ 1703.883388][T19218] bridge_slave_1: left promiscuous mode [ 1703.889098][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.898428][T19218] bridge_slave_0: left allmulticast mode [ 1703.905438][T19218] bridge_slave_0: left promiscuous mode [ 1703.911544][T19218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.076580][T19218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.087033][T19218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.096807][T19218] bond0 (unregistering): Released all slaves [ 1704.207678][T19218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.217857][T19218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.227332][T19218] bond0 (unregistering): Released all slaves [ 1704.344844][T19218] bond1 (unregistering): Released all slaves [ 1704.354413][T19218] bond2 (unregistering): Released all slaves [ 1704.456472][T19218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.466270][T19218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.477022][T19218] bond0 (unregistering): Released all slaves [ 1704.545085][T19218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.555659][T19218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.565137][T19218] bond0 (unregistering): Released all slaves [ 1704.658496][T19218] tipc: Left network mode [ 1704.870288][T20964] vhci_hcd: vhci_device speed not set [ 1705.173355][T19218] hsr_slave_0: left promiscuous mode [ 1705.179211][T19218] hsr_slave_1: left promiscuous mode [ 1705.185207][T19218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.192836][T19218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.206424][T19218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.214080][T19218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.224523][T19218] hsr_slave_0: left promiscuous mode [ 1705.231770][T19218] hsr_slave_1: left promiscuous mode [ 1705.237533][T19218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.245158][T19218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.253233][T19218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.264215][T19218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.276705][T19218] hsr_slave_0: left promiscuous mode [ 1705.283905][T19218] hsr_slave_1: left promiscuous mode [ 1705.289656][T19218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.297428][T19218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.305714][T19218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.314565][T19218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.324492][T19218] hsr_slave_0: left promiscuous mode [ 1705.330276][T19218] hsr_slave_1: left promiscuous mode [ 1705.335908][T19218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.343463][T19218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.351277][T19218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.358656][T19218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.375829][T19218] veth1_macvtap: left promiscuous mode [ 1705.381583][T19218] veth0_macvtap: left promiscuous mode [ 1705.387107][T19218] veth1_vlan: left promiscuous mode [ 1705.392621][T19218] veth0_vlan: left promiscuous mode [ 1705.398561][T19218] veth1_macvtap: left promiscuous mode [ 1705.404167][T19218] veth0_macvtap: left promiscuous mode [ 1705.409767][T19218] veth1_vlan: left promiscuous mode [ 1705.415058][T19218] veth0_vlan: left promiscuous mode [ 1705.421066][T19218] veth1_macvtap: left promiscuous mode [ 1705.426547][T19218] veth0_macvtap: left promiscuous mode [ 1705.432288][T19218] veth1_vlan: left promiscuous mode [ 1705.437613][T19218] veth0_vlan: left promiscuous mode [ 1705.443648][T19218] veth1_macvtap: left promiscuous mode [ 1705.449132][T19218] veth0_macvtap: left promiscuous mode [ 1705.454803][T19218] veth1_vlan: left promiscuous mode [ 1705.460255][T19218] veth0_vlan: left promiscuous mode [ 1705.732800][T19218] team0 (unregistering): Port device team_slave_1 removed [ 1705.761457][T19218] team0 (unregistering): Port device team_slave_0 removed [ 1705.950111][T19218] team0 (unregistering): Port device team_slave_1 removed [ 1705.963770][T19218] team0 (unregistering): Port device team_slave_0 removed [ 1706.140546][T19218] team0 (unregistering): Port device team_slave_1 removed [ 1706.169500][T19218] team0 (unregistering): Port device team_slave_0 removed [ 1706.356869][T19218] team0 (unregistering): Port device team_slave_1 removed [ 1706.383604][T19218] team0 (unregistering): Port device team_slave_0 removed