last executing test programs: 13m55.049536967s ago: executing program 1 (id=252): syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb080045000078000040020511907800000000000000004e2400000064907802000000010000000400000069812e688797c1df9eddf3822bac1f02321701b2c341"], 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x11080a2, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) r5 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmdt(r5) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="5001000000000000fbffffffffffffff02000000000000000100000000000000060000000000000000080000000000000800000004000000fdffffffffffffff38eb1d5600000000070000000000000008000000000000000400000000000000ff010000000000008db2000000000000ffff00000040000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0800000006000000000000000400000000000000070000000000000002000000000000002e25000000000000020000000000000000000000000000000600000000000000b50800000000000004000000ff7f00000500000000000000230d0000000000000300000000000000ff7f00000000000003000000000000000700000000000000080000000900000000000000001000002fba0000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000002000000000000000000100000000000000080000000000000002000000020000002e25000000000000"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) unshare(0xe040400) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000ffff28bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000baff000000440012800b000100697036746e6c000034000280140002002001000000000000000000000000000014000300ff020000000000000000000000000001050009005700"], 0x6c}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x2) io_uring_setup(0x63ea, &(0x7f0000000080)={0x0, 0x0, 0x10422, 0x0, 0x28a, 0x0, r8}) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x20) futex(0x0, 0x9, 0x2, &(0x7f00000000c0), 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fedbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900060000002ee78bb75f24e051fe8b000000220033fa66c3570008021100ffff260012004e8100000000080257005a050000"], 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x40810) 13m54.850405097s ago: executing program 1 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x10bc01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000001040)={0x7, 'vlan1\x00', {0x9}, 0x5}) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r2, {0x2400000000}}, './file0\x00'}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060086dd"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001180)=@nat={'nat\x00', 0x1b, 0x5, 0x388, 0x190, 0xe8, 0xffffffff, 0x238, 0xe8, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, &(0x7f0000001100), {[{{@ip={@private=0xa010101, @loopback, 0xff000000, 0xffffff, 'wg1\x00', 'xfrm0\x00', {}, {}, 0x5e, 0x2, 0xa}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x6, 0x0, 0x2, 0x0, 0x6], 0x2}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x20, @multicast1, @multicast2, @icmp_id=0x65, @gre_key=0x684}}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0xffffff00, 0xff000000, 'pim6reg0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x62, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @broadcast, @remote, @gre_key=0x1, @icmp_id=0x66}}}}, {{@ip={@rand_addr=0x64010101, @broadcast, 0xffffffff, 0xff000000, 'bridge0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x66, 0x2, 0x8}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xe, @broadcast, @private=0xa010102, @gre_key=0x2ccf, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1e, @ipv6=@remote, @ipv4=@multicast2, @icmp_id=0x67, @icmp_id=0x67}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x5, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0xffffffff, 0x1, 0xfffffffffffffffe, 0x9, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x142790}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13m54.673586473s ago: executing program 1 (id=254): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x40000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000180)={@val={0x0, 0x10}, @val={0x1, 0x0, 0x308, 0x3, 0x0, 0x1}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xaad0469e39e46aa7}, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @mcast1}}, 0x42) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x42}) 13m54.245709182s ago: executing program 1 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1000) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "b341af", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0xff, 0x0, 0x7, 0x8}]}}}}}, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 13m54.016688166s ago: executing program 1 (id=260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008894}, 0x20004890) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e2000000500070088000000090002007379"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 13m53.701522939s ago: executing program 1 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x1020) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)="7884dc447d928c18ab1c156c7e9de7924e253f2c575960f5193c3aace71412a896e2ea52ad66d481f9e7b3812069e8f424aa18587f728c20724a10242a56878edefe4946"}, {&(0x7f0000000140)="8c3ab4aaae433df0f70ac9fe"}, {&(0x7f0000001d40)="d0a13c11faf4a2bc424c8c79c0137d4b9fd2f58f5e9a83687843a973b334cb6f69f769d210009e03d04643d8ad71fe3f8c5594b273be3824e5b5f1a4d55606d23bee838a2ada7d57c1ec48847fd43c02eeb64b4e06eebfe1957758a363b83887a75c004afd70f0405c5d3315ed3a06b7d9eb3c585a084d6a6c717f42879124f79238121ba8e2b865575cb61446ba59ec51e86cdb7628fffad93c71e1568c6823df1eb8648f1cc1952d0fb6f05958568817d08effd136a5e9eee23dfc5038c21b833eed318542f7eb81f355dcedda154fda8cc3a3b7e99b1ec41af02c3b51b2"}, {&(0x7f00000001c0)="5412"}, {&(0x7f0000001e40)="cf7b4ec6f2dbecf8b64e419d45645a7a45129ca94180b060be7be4a556c46218dcc9c5319909239c1f2f6210e6d4e736aedc75ee779986ea6e273894ccd5f949fa230ff45d986bdeb57c5814f2eb388fddbf9f15e8942b0ddd4432b649d8cc3b4e83014efd0ccf4f517c3bf9c3724aaaca406d461575c84588eec4dd975d5e14cf88130f51d256dc46424f7b"}], 0x0, &(0x7f0000001f00)=[@rights={{0x0, 0x1, 0x1, [r4, r1]}}, @rights={{0x0, 0x1, 0x1, [r4, 0xffffffffffffffff, r7, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r2]}}, @rights={{0x0, 0x1, 0x1, [r6, r0]}}, @rights={{0x0, 0x1, 0x1, [r6, r7, r6, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5]}}, @rights={{0x0, 0x1, 0x1, [r7]}}], 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000b40)="a6970bee6528e53a029e1751c20869f576fab021f400b37165ef72736791e0c2b01a0f00d2c4c50a5c3ff3d171b73399c12442f7f72d33953cc92541bf81ede331f5"}], 0x0, &(0x7f0000002480)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}], 0x0, 0x20004840}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000024c0)="f73aab4f558a4196583c8498096fd11a0afd152976ec797c9097b3f22830d1aba05fcebae7c7a137dcdd9c5be0ed8f7aac51b06b0c22f66102079a4198f7ae01da0d928de8fc0f2e5cb25182939940a8c03b5d213b5e5d699214a31d1a22bd07745ff9e798641d7af66685267f7faa7260b00e73a34b7ffeed0954f6308381ca374f3b6c05771c3b520cca59adeb13b0cc1645d54bd54d1362ea9b77cebbac6e78e7fb20ef78e5039c2cb7559b6efa74f30706e1548c3649841de86d4f04991797970ae7a714431f56bb44a0d2c5ab15c0638f36e2e18d34b830da9f6ef3a9d000732b86c87dfc33"}], 0x0, &(0x7f0000002600)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @rights={{0x0, 0x1, 0x1, [r5]}}], 0x0, 0x80}}, {{&(0x7f0000002640)=@abs={0x1, 0x0, 0x4e24}, 0x0, &(0x7f0000003a00)=[{&(0x7f00000026c0)="741c496d91813c438838342f84e819a4b1099a2ee3cc107fc677ac42cd247393b8bc2cae44ea80c579f21a05a6b2f529b5c425301a4e6ad1e80df92dd8fde6d66ff7b67b170b2d00608932dde57f16d984e4d269332675803bf469b2ce7182a5fbd612907f6f14562b740a3c3d614b20557084991f6c8211b1457807b8f358d946063cb5a6923d7f9bb7df1cdbd4735a5e75a0094746012015ce4296b6d886bc1edd2269731cbc274bb1f4ecd7e2185a394b54af78fc60527709644c8d3e1f32857ea17fa370dcfcd7c8cc84addc92ae28b8e44c045e661c389153ed37e3"}, {&(0x7f00000027c0)="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"}, {&(0x7f00000037c0)="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"}, {&(0x7f00000038c0)="c1b27d6e0321cd3efddb919bc8f465b114be8d51691d3890b92a989ad2cbbd048204fb6a8d7f4efeaacafecff432de2541489b56f633b939636e59b9b11dab1981ef03b38497a9897d34862d03961a2ea01461c04d4b6cf7f0adf675fa02a3fcb73829fe44b144c20a625564a9134bdce4407e4f0c8e48108237248b3025165d0d406e0271fed6defc94be453d7eb22207d9a0cbccf4a2bb12287dda3eeed079fbca291cc565b5d403e473f0deab37a468b1c2b3de7b785a60235e6c"}, {&(0x7f0000003980)="6208bf511ab6e667d5a2863cc3cfb24c35c651e1760c86b23ba8ce3bff81e1229e4185ae932232c15d12adb2535658c7fe3133169d111ee278c8e3029a49296172289ceb1d03eafad922281cc06ec25189f16419240d6b774e13fff80a3d371857a5326ade0e4ed3a2ee0c02b9b14abe5984bcd73da2d118cc38e4cb45"}], 0x0, &(0x7f0000003bc0)=[@cred, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x0, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4, r2]}}, @rights={{0x0, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r6, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}, @cred], 0x0, 0x1}}], 0x3fffffffffffc81, 0x4000000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=ANY=[@ANYBLOB="3c0000001800010025bd7000f7dbdf25022014f80002ff0900ce807634001680140001000000000000000000840004009920000008001e0040000000a14d27307b6089522061b0c05d5ab985e62d25358adf0ac792ee3747e7c12e352973dc1e63ccd61723448c381a65051080c84924cf9c34e46023fa06295fc36140b146c038f449741c894668474ee58007d3924dc87a45316e473c3e9c2140478ab96d46ae6836e38c0dc278b8812713ef50fc5c71bceb7a9327"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x4800, &(0x7f0000fff000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000440)={0x4, &(0x7f0000000240)=[{0x6, 0x25, 0xfc, 0x7}, {0x5, 0x5, 0x6, 0x5}, {0xc3a, 0x3, 0xc0, 0x8}, {0x3ff, 0x9, 0xf8, 0x8}]}) sendmmsg$alg(r4, &(0x7f0000002000)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)}, {&(0x7f0000000380)="8430bbefae84df5406fe3351de94748ff562fec4494a1bdb", 0x18}], 0x2, &(0x7f0000000640)=ANY=[], 0x188, 0x4048044}, {0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000640)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x140, 0x117, 0x2, 0x125, "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"}, @assoc={0x18, 0x117, 0x4, 0xfffffff4}], 0x1a0, 0x40}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000480)="9f38d8d63ed27d502270dd210492f37695ac4c7d6e5f4617fa6f6b441cd436b3c3eb0e69a044064335fc88875c40407aaa", 0x31}, {&(0x7f00000004c0)="2492244740e9571cfeed2b951af7ff8309951fc23bdcff29a6c4617590ecde9d350391d827914e794d2f04d61f7ccfce3307834448e689d76b68b95a5305479ee3290384bb17be4c318bc6da239ca73e9ce1f354f567fe751fe2ddfc1e20ac4620", 0x61}, {&(0x7f0000000900)="1e1f43b779bc430a10fd140b291a5e957b9b5433f6e67564cb58245321f214f444cc60db748bd0e354a489e7e988522bce93969fe5c88732ad0175da855efd3732f2adb481c9fc623d652c3e84695b3878e448cbecfeb17b5913e6733f98a8ec849c0b94b4627901ab45486b2d67d9ba189a92d3dc165db05db596678af4", 0x7e}, {&(0x7f0000000980)="a1a7249016a14e94b1ca830ae6cb5951c261ff16205da2fd9c1e5d7a5c28897671a97f9dd47082dfe7cd6d3ff3932923d6d9c281f3c4fd54d91515364974bd957b284a650b448466fb506b53dd86c60acc1b990032cdfa3afa1c7d4b3c1d7bf844f565d6d5ab3cd733cb4532fed40809e2c27ad3432f3bdf49701a885dc4888ccdfc6bec10b01465bd3a1dcc9c29df489b577c5f26596b2f2bce8b1e8e85900fd23ef1566516d821270e4ed2d8a7", 0xae}], 0x4, 0x0, 0x0, 0xd1}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a80)="4a228019db3d5ae51d556adc9debf314ce989b96656bc43bfb6403b999e39e559bac71d0f92c80b3b011cd0f2d89099fd97704c5c9fed5e2a6f5fadbb8f81fe432404e077e0299a43629e26b5ebe2f3cdde1285f4eb289761329b201c6b944412cd5b1bf63bb7dbd79e0a7cf9ef1cafd454e960a19fb40f66043cc9ad4bb168a961e5469750d61b9cb9b3b26566637a62795c2286e9fdf1157c2f2", 0x9b}, {&(0x7f0000000800)="65c349cbe3de02ce5dec41369b7e015fb347c5a4d739846f0f9befc00c2795efd7564515f160ffc167fed84a33dfcd79afa71fff658bf7a32f4d864000435a6f215e7550709614a5ac64fd79e7fffa0193a1d2cd7699aaa95a0fc06ade68c5f278d65c62ceb2a139", 0x68}, {&(0x7f0000000bc0)="122453ae7f2363ef40897f8ffb2037e23c751623bd92c893edb7df4edf2708460c6118c5c2fdfceb1748c603f013f5187c69f2624f7b1e941e4464a03e8aa6c5fb9a83c2a280721000d4e4a763ca20d6e32b5746e31d2c7410d4d613cf7b85d9518fde3f4a239f79a4baf98b4fb92e38d2f38e42de8972eac9eaa19ecd5dbaf70c8915060122f044aeb8e73c5124bf6a2850d28ee05a149fd537694dffb58060ec74bd494c4e311c9a8d45dd19eeba8e3e", 0xb1}, {&(0x7f0000000c80)="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", 0xffe}, {0x0}], 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x298, 0x18800}], 0x4, 0x24040005) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x803, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0xfffffffffffffffe) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)) 13m52.749796141s ago: executing program 32 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x1020) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)="7884dc447d928c18ab1c156c7e9de7924e253f2c575960f5193c3aace71412a896e2ea52ad66d481f9e7b3812069e8f424aa18587f728c20724a10242a56878edefe4946"}, {&(0x7f0000000140)="8c3ab4aaae433df0f70ac9fe"}, {&(0x7f0000001d40)="d0a13c11faf4a2bc424c8c79c0137d4b9fd2f58f5e9a83687843a973b334cb6f69f769d210009e03d04643d8ad71fe3f8c5594b273be3824e5b5f1a4d55606d23bee838a2ada7d57c1ec48847fd43c02eeb64b4e06eebfe1957758a363b83887a75c004afd70f0405c5d3315ed3a06b7d9eb3c585a084d6a6c717f42879124f79238121ba8e2b865575cb61446ba59ec51e86cdb7628fffad93c71e1568c6823df1eb8648f1cc1952d0fb6f05958568817d08effd136a5e9eee23dfc5038c21b833eed318542f7eb81f355dcedda154fda8cc3a3b7e99b1ec41af02c3b51b2"}, {&(0x7f00000001c0)="5412"}, {&(0x7f0000001e40)="cf7b4ec6f2dbecf8b64e419d45645a7a45129ca94180b060be7be4a556c46218dcc9c5319909239c1f2f6210e6d4e736aedc75ee779986ea6e273894ccd5f949fa230ff45d986bdeb57c5814f2eb388fddbf9f15e8942b0ddd4432b649d8cc3b4e83014efd0ccf4f517c3bf9c3724aaaca406d461575c84588eec4dd975d5e14cf88130f51d256dc46424f7b"}], 0x0, &(0x7f0000001f00)=[@rights={{0x0, 0x1, 0x1, [r4, r1]}}, @rights={{0x0, 0x1, 0x1, [r4, 0xffffffffffffffff, r7, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r2]}}, @rights={{0x0, 0x1, 0x1, [r6, r0]}}, @rights={{0x0, 0x1, 0x1, [r6, r7, r6, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5]}}, @rights={{0x0, 0x1, 0x1, [r7]}}], 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000b40)="a6970bee6528e53a029e1751c20869f576fab021f400b37165ef72736791e0c2b01a0f00d2c4c50a5c3ff3d171b73399c12442f7f72d33953cc92541bf81ede331f5"}], 0x0, &(0x7f0000002480)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}], 0x0, 0x20004840}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000024c0)="f73aab4f558a4196583c8498096fd11a0afd152976ec797c9097b3f22830d1aba05fcebae7c7a137dcdd9c5be0ed8f7aac51b06b0c22f66102079a4198f7ae01da0d928de8fc0f2e5cb25182939940a8c03b5d213b5e5d699214a31d1a22bd07745ff9e798641d7af66685267f7faa7260b00e73a34b7ffeed0954f6308381ca374f3b6c05771c3b520cca59adeb13b0cc1645d54bd54d1362ea9b77cebbac6e78e7fb20ef78e5039c2cb7559b6efa74f30706e1548c3649841de86d4f04991797970ae7a714431f56bb44a0d2c5ab15c0638f36e2e18d34b830da9f6ef3a9d000732b86c87dfc33"}], 0x0, &(0x7f0000002600)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @rights={{0x0, 0x1, 0x1, [r5]}}], 0x0, 0x80}}, {{&(0x7f0000002640)=@abs={0x1, 0x0, 0x4e24}, 0x0, &(0x7f0000003a00)=[{&(0x7f00000026c0)="741c496d91813c438838342f84e819a4b1099a2ee3cc107fc677ac42cd247393b8bc2cae44ea80c579f21a05a6b2f529b5c425301a4e6ad1e80df92dd8fde6d66ff7b67b170b2d00608932dde57f16d984e4d269332675803bf469b2ce7182a5fbd612907f6f14562b740a3c3d614b20557084991f6c8211b1457807b8f358d946063cb5a6923d7f9bb7df1cdbd4735a5e75a0094746012015ce4296b6d886bc1edd2269731cbc274bb1f4ecd7e2185a394b54af78fc60527709644c8d3e1f32857ea17fa370dcfcd7c8cc84addc92ae28b8e44c045e661c389153ed37e3"}, {&(0x7f00000027c0)="8d2cb67b6d3277eb6a0f791a52cb4bbee0044fbfb7fc24101f36dcfe3b89af09188a804ac744c3f434aaa00e5128d28d14ce28889a2b594256babe7b21be8f1720a0001e9b8fe05a14ea145868befea770fd3743bd07639e279c7437413c0c3aecd11f673637620b935d4fb719943f12f38fc0eae92638fe75b2a9c95efca67038d7fa9905d115e009af50796fa85e839731f27d0fe9c1a8dbdf165f33c24e27efb11c91ce6d5c1f43d26003c721b48c9789d04ee73bfebbf8d91a7a383d066f0192ba2b044e76800fb6dafbd4537c22a403a1e81e8e1cd75a25983857e005648d418432f9c697a2b37569c3aa7a723e4fd74e6bb621a8131c9e1759faf0f599c330b308b1ccdf0433b243661de62929bee2c82475e1267ff14b6306509c4f68a64e535458cf94bb1a07ddf0425be06b4eb85c46f6dc0426846a8c819b85e00267b43c1b316b2bcd6ddc833b785587f6c43fcd3ec31542bb3a6d189cab2f72cf62f3eb0d260ea5ab97f4e141a285082ba2cf9c6d34795d86432850bdecf8085b5c602142272daf7132a43791e203adaf0b66bbc7aa85978d8c4c7d74ed03611baf4576dcfdd462b3c2e185c8555c78134c20cb6bfc9f556a1871ab5eea9d90ac4313a1dc7ce89c87eed5be999012c1ea426bc6e1a1858a6be9c1844b7d7a4e5334348310fd74ba91e29662f984773675e82761f0b50a78dd1aba2d5d1c84c1797a057ee1a836bc5ff2387aebcd554e6a39cd77fa0ad1e2ad46ca691bedd904064b2756e4e19d2dd774de23451eabd69abd56c64fb4ab479d2067951c1074e05f0ccd5bcc22f3b4cdf20817691449ae98e7b4b89a814ea3bd205b1466c8755b15237abb3b713b00accbb3876a67f7ed53d3b1b3a30a4a1ec5e273f31dca528e20b5231964b1f76e9130e336a1e5be851d2984e9bb6d806f052cf120584f721bce4f0b8456578adfac77a0a5e633ecabd118e68934e46173894f3719c705619765e46c8702a25fabe9c86729c5f229af843b03fe8a02b5e6113a979f1d953682f9c23d05cbb2b765941b3a3bf4f4dcfde68427b293f9be1c9570f9f595bcd29e262705b9305d1129bcaf7abef47ed11159024b54661da6f2b5380cb3b329d3c44ffcf4f97b498052f26421c53d6e6afca90aed107473fe7587fc0c167a26240f63dc4189bf164c4dfa12892b3f9783b230375b3812edca06d16c0a62125909e272c99bbc69676053d67064c1314cf19e1af8ec9f311c97bbf2f82fbad807b75f94a126060c729e0639ccbf633578aabedcd912691041b61df2fcbd64d127c5c1edd1669f1b27994edde1af2c98aed768df0d1d49486c9a46191a8f3d5116a6bb0dc504f4b042890d0b7e3178bc4c0d8c393481dabb7c00e6ee12182415bdfa840be55c4525b7b12619b67129822043e68d607d05af514a44f2e198ae28f755f7ad2cfb03b0685c72de77f6c24af235e5eb46f270b6cfb37c412d5ad9a8920f7d546ca327d04eb92de08bf7a643c5ebbe06bac2d59a01d3ec3bb3e86d43b8bdbd30de8efd0ee92d8f581d5f069bf15d99f78b3d313eca8f2968b540e748c458fc2d35b53ce148aa2af80ae6f62f67a7731b3f4095c73b4a0e9aa1d980af0a51f7ea424ed181ce496f2fd01b75d984dd521ceb6876bab8ba3b26a161db74aa590acbaa34de8b03f58410fb1326781ad55ea8a28a012169ca576f38f515f50d0aed8c5ac958bb836d4711cda2faa54804f98ebf78a8fefb614fef7e714e420edb2e425d4de58bb3ea9117d148b90ad34317ae90cf18b3a627b6520ad6ca79f43b113598e4d45c3a30f7bb93867fe214a2271094b62fe812dbe6c21590bdc7ac8a9aca57cef513157b9d44a95720cbd14194b8586a2d298635ca68782a153c7a47e48043bf8e885166680775efdd611fb5a342589021f7cc05c3005113f5c26e9083c0fc456d8f50f34bd9e373356519d5b1fe78891c59883a606305bd991f032bf76f0f38bcdf488d3c72bc6617ef1906fa02d752c3448044d16c3be7969bfd93412e5e74288c0706b44eb0cca172f75c8a4126e347cc5609c6f01a5d268082fd4727445ff36982bda1c7d3fa2762e6ac24e579fafa75533f5f3f40887b015ca8989bb5c5851b9c019a1caee2a7c7edcdb80854c65e2642d1dc8dd4361ae1cf9431e9142fea3f4df4049802376f78505d1b1f53e22c40f7804a114bd0d79588cfb0ec14896672711fe664f48e4c0ad539c3ce4b318a7113fc6aaf5ccd6cdec6564d7a159e90e5daad4e81d9a1ad367f61d444fe486fdfd39658499f2417d4b71663cf3e5c4189543fe43af7135ee7f7547bcab36dfb3d43cd357934bc1bc775972a1ea29f5a6b13b61beb5bab015f0ac132b132e5d3bdb234c9f05b29a9cfacd637d890d561ac720f9ceecc428388f9978bcc6c90b3f21b306e698f971566cbf38ac0f763c58f778102d0d7118d8d27f5188767d9262fb3915742a153a931b3de9766344a7bc9bec36f305bb561ffdeaec483032b803dd5d8273b7e8a565120f798623c3352611bc7e1d8a1fbaf35b72e3dd4731651530aa5633d8e182c7d823dea75e8ab9db0ad3e9218b345761f99815e7065bc8761d4c10e65d542d05be5047b211c31bd3d5ca5133bf816d74021de04dd492d51360c90ff5958a31aa17290966d29d2a5a910ca51eccf1f072c77de27f8856d4453653a01facab5db0a72911ed298a98011b9e011ded05487ed090a508289d0c8e1a0dd1e931570e87ba6ef427571c06d25231a3b3fdf388ac88550198f69b1cc2db23510ed02c104f1187c588811da1f03e5670951ddc4fd2e3c7cf2024a13bc4dcad7e4088d713090b91e6428c023b96ebdef0413a9b843c337aee06fb9f78efb0d8f2fab17f1515e921fdd23f82cb787438a26d7081ffc4eaeaa38be468300a86be2b8fc35c77b3132fe558133677fd410ab6c3738b57a1229a723636fe220f0ef0c7dd3a02e47d2c7321d1335ebd824636fddbd477d09be289d0cd0e77a58000e3932e87212f8a7d553c7190d336d9f2a11280290c71b6bff8db0ea4f55129c2a5adb9dbda7b48ffc28cb3b81ece0b6724b9ef58816bfb14436606a04231b930d238f6eab3d324e435784652119b5a38eef5ff734c2a667dd7b3440bde09f41bb7c64db63f70d42dfe82057ecaa3a206c966f070161a9fc4593460bf50c1763d01ae03d0ef98c72c6669b94a2a57ecf03e5c23fb38fd03b52ecd0970e93e16ba286df5f3d5287ef996f8671441aa4000ba97efced9a794af51eec49b3ab1ed3b7b2f4b56e1d86c741386a2f210b1377296eb28f0dc355a3274b86bd5b5a96326568ee0e8be1e62ef1c10e57adebacdfb35e3cd989022e25818cb6203eb628adfc8aab5b479ece2ab6c000490439db74c7f011d4e42247afd512283a305f8777448e4fb61abc459ea9e9029895ed06c0dabd738fe233c74d115a9830f8084eb47781b174385871a5b5c0577c9cc1607738215f8785837d542c4834cd93724fc2338e48b79a4f6418f873e95d12628ab00b0d6933fa6a23852007e0a5c530fea05b6e9039bddd6c1b8d6466dfb5761dd043e2f8b19295e6957d16e924646b861ead2179d8b09b0b772b956141577cb90586dec5bf98c81b0c3fb3fef022114856351c9781bdf18c92c74ea7fe23d3af043ac103d17a6b4cc244343bb443de58de4f0e7640013e540fc28b7446e114c85422697c97c6cea41edcd230c74f3ce7b96fe30954cbdb60c0455eb0ae4df63d6c372362b37b44ec7cd5ef7f46cd05e247567fed479c5f547aae2b945ca1af339823b1c6876b94cf6f45cc4c727bb6def5cc589114be29068f7f2e6ece1bd12db124543ff9f142179942c1913ef6f4c16fb06b09d1997d2b52a8f462420101117ad45c90d87fb6ba63a5a85e38b325ffb50ae6aa26dbaefa20adeb436292a5e671ebf96418507c8eb051edcf6a02d00a2bf4d251a4eec4e42aed017c0a3d1a0e140e0d19ad9b5603e8f35fd51f22f7bd7481ebba29b6a60afbf55f0aeb9a5d32b5eda52499e366edd2250d5a9c0b3b36801f1bff11ca06de1329e0c8dd59c1ae5cc4124e29cfd27aa6fb922382dac2806bda02c9b9e94ebe3e8d634374e2f33df363eee0f7ef452556df32a8635a6bc9f51e2bd9d0d1010c2eb53f1ea052e17d0bb5090ffb0af2027bc534e8f0b638e2980011bf526852c3c1305323fa5e2795925409311a16ec4f881c354fac84447e2a3bcfaf8797c06ccd5a430b9578d2688960c240edf4e12c0165d02e93a1887856092313aa95c455634ca841f326b9e5d9727e768c59a2fc0c7b451c3c6ae05a5ef39d6e9c71c2214370a86a6b2c6247434c535ad6286b18107321cf107d8ddd42a257c4b4fc006ffb5bdcbde882aca7c881eb1fb594da2b2a02d605cf1b99fd8d237ddfe1764f827b368bec0f13290c796318cc91a7b19c5b2912052d48e0e05c7e3debfec5da49a53c5dd37afe93c7074aa0c16281055afef18c5466862b4a720ffa6f9de87bd7eda48630cb370a7004b722fd533c1dc35162f0f4627faabfcc1a2b4910395e02c507397bc9057f8c04027da885200d70a093601b723645e105765e5efcf577ad94e7cce49da3c2b0b64d9d822acc843d41bcd98ad89a5a19bf084d09dc4d485bda2cfa2cd042d4209b07cfaa7f3f64339b2f991bbcaa04afb231049234b660327c3be913380d98917eb2329660df895c640502e76060eed2f8ae5625f45454bec005d663d0118f07b19f3330436bb76315a4ba15700e8161b2af2c11fa638ffad81645389875020ae98788962f5d0400d46906f6eedf1d54004cb4bdba558cdc895da61d434857f4ee6997eb8655c9c23d04117cf572bc0849f204ca78088b004f5efc77eec4b8e0371833935204d64efcfafe233b076d8a901fb634c85a1b30ec312bce4e232d0783de695518e2b405fd572abc568b86eb6707cc3692d3de4cfd04d7d5fe66733944f356554e411bce8cc78f2f3e096db7cfe2276e542cd8b3f281db7adcb91766cec8174913cf50c3210f14ebe209256d21adc62112d1022563ee539479e43f9603bc631ea92005e84eb18b96987c8bc2cc4e62ba2e214c57b6a810975f32c87733bbef4419d580552490336a05598ae511d4b2ddc508c01ab0bee5ad3b2af45bd43125b86b9d609b761e3381a378d060fd87f62408f27f47707cd37122512761a153a78ae6266e9d50ab2cb79ad0259a97452d4ce786c5c51e19c2faffa21a848a3411b95e5234b6032663cc9287c24604b5f71409a286528588e70e376413e7eea8ec48dc79f7775aff3659172f038a85c1c9671af32c59415b2ba4bbea538d3508c92eb8972edc3d8a583e5b29b1e6483e63f33eca18087313f75b674879716ff2df7bab72ef2916e3763df98778e480f911288372d115ca5a8bdef062952a709e564c422041a2b9c30ac6cabfc5440c621b5f1421ce9acf1a9628395a2d42106ad18d86b35e8e138f32e832b94c877f81c4cc9162315b821ebd04add97926ece07e311c2a3b5b4a4adaa25740d9a68cd8c45a6fcbcfdcd75f326b8e3b094f13301d5604914ee44c726434d110242010f7799bde3ae52ea2270ffdc82ad8d639ca7571b79eeada69d82f33098004cc34b6450c1ded4d0dcd485efb429592accd8d4c27720ea25abb8b7ed5ed54b91334a266a69e685680d4011c79a16e23f2f31dac50bde4b5695e53d8211777f29c803ad2413744987e3a3a014603140ae9fe7cd2b5f81418150372363262d5d309912626a7d6c6a3dc5b42b1c561"}, {&(0x7f00000037c0)="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"}, {&(0x7f00000038c0)="c1b27d6e0321cd3efddb919bc8f465b114be8d51691d3890b92a989ad2cbbd048204fb6a8d7f4efeaacafecff432de2541489b56f633b939636e59b9b11dab1981ef03b38497a9897d34862d03961a2ea01461c04d4b6cf7f0adf675fa02a3fcb73829fe44b144c20a625564a9134bdce4407e4f0c8e48108237248b3025165d0d406e0271fed6defc94be453d7eb22207d9a0cbccf4a2bb12287dda3eeed079fbca291cc565b5d403e473f0deab37a468b1c2b3de7b785a60235e6c"}, {&(0x7f0000003980)="6208bf511ab6e667d5a2863cc3cfb24c35c651e1760c86b23ba8ce3bff81e1229e4185ae932232c15d12adb2535658c7fe3133169d111ee278c8e3029a49296172289ceb1d03eafad922281cc06ec25189f16419240d6b774e13fff80a3d371857a5326ade0e4ed3a2ee0c02b9b14abe5984bcd73da2d118cc38e4cb45"}], 0x0, &(0x7f0000003bc0)=[@cred, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x0, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4, r2]}}, @rights={{0x0, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r6, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}, @cred], 0x0, 0x1}}], 0x3fffffffffffc81, 0x4000000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=ANY=[@ANYBLOB="3c0000001800010025bd7000f7dbdf25022014f80002ff0900ce807634001680140001000000000000000000840004009920000008001e0040000000a14d27307b6089522061b0c05d5ab985e62d25358adf0ac792ee3747e7c12e352973dc1e63ccd61723448c381a65051080c84924cf9c34e46023fa06295fc36140b146c038f449741c894668474ee58007d3924dc87a45316e473c3e9c2140478ab96d46ae6836e38c0dc278b8812713ef50fc5c71bceb7a9327"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x4800, &(0x7f0000fff000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000440)={0x4, &(0x7f0000000240)=[{0x6, 0x25, 0xfc, 0x7}, {0x5, 0x5, 0x6, 0x5}, {0xc3a, 0x3, 0xc0, 0x8}, {0x3ff, 0x9, 0xf8, 0x8}]}) sendmmsg$alg(r4, &(0x7f0000002000)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)}, {&(0x7f0000000380)="8430bbefae84df5406fe3351de94748ff562fec4494a1bdb", 0x18}], 0x2, &(0x7f0000000640)=ANY=[], 0x188, 0x4048044}, {0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000640)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x140, 0x117, 0x2, 0x125, "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"}, @assoc={0x18, 0x117, 0x4, 0xfffffff4}], 0x1a0, 0x40}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000480)="9f38d8d63ed27d502270dd210492f37695ac4c7d6e5f4617fa6f6b441cd436b3c3eb0e69a044064335fc88875c40407aaa", 0x31}, {&(0x7f00000004c0)="2492244740e9571cfeed2b951af7ff8309951fc23bdcff29a6c4617590ecde9d350391d827914e794d2f04d61f7ccfce3307834448e689d76b68b95a5305479ee3290384bb17be4c318bc6da239ca73e9ce1f354f567fe751fe2ddfc1e20ac4620", 0x61}, {&(0x7f0000000900)="1e1f43b779bc430a10fd140b291a5e957b9b5433f6e67564cb58245321f214f444cc60db748bd0e354a489e7e988522bce93969fe5c88732ad0175da855efd3732f2adb481c9fc623d652c3e84695b3878e448cbecfeb17b5913e6733f98a8ec849c0b94b4627901ab45486b2d67d9ba189a92d3dc165db05db596678af4", 0x7e}, {&(0x7f0000000980)="a1a7249016a14e94b1ca830ae6cb5951c261ff16205da2fd9c1e5d7a5c28897671a97f9dd47082dfe7cd6d3ff3932923d6d9c281f3c4fd54d91515364974bd957b284a650b448466fb506b53dd86c60acc1b990032cdfa3afa1c7d4b3c1d7bf844f565d6d5ab3cd733cb4532fed40809e2c27ad3432f3bdf49701a885dc4888ccdfc6bec10b01465bd3a1dcc9c29df489b577c5f26596b2f2bce8b1e8e85900fd23ef1566516d821270e4ed2d8a7", 0xae}], 0x4, 0x0, 0x0, 0xd1}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a80)="4a228019db3d5ae51d556adc9debf314ce989b96656bc43bfb6403b999e39e559bac71d0f92c80b3b011cd0f2d89099fd97704c5c9fed5e2a6f5fadbb8f81fe432404e077e0299a43629e26b5ebe2f3cdde1285f4eb289761329b201c6b944412cd5b1bf63bb7dbd79e0a7cf9ef1cafd454e960a19fb40f66043cc9ad4bb168a961e5469750d61b9cb9b3b26566637a62795c2286e9fdf1157c2f2", 0x9b}, {&(0x7f0000000800)="65c349cbe3de02ce5dec41369b7e015fb347c5a4d739846f0f9befc00c2795efd7564515f160ffc167fed84a33dfcd79afa71fff658bf7a32f4d864000435a6f215e7550709614a5ac64fd79e7fffa0193a1d2cd7699aaa95a0fc06ade68c5f278d65c62ceb2a139", 0x68}, {&(0x7f0000000bc0)="122453ae7f2363ef40897f8ffb2037e23c751623bd92c893edb7df4edf2708460c6118c5c2fdfceb1748c603f013f5187c69f2624f7b1e941e4464a03e8aa6c5fb9a83c2a280721000d4e4a763ca20d6e32b5746e31d2c7410d4d613cf7b85d9518fde3f4a239f79a4baf98b4fb92e38d2f38e42de8972eac9eaa19ecd5dbaf70c8915060122f044aeb8e73c5124bf6a2850d28ee05a149fd537694dffb58060ec74bd494c4e311c9a8d45dd19eeba8e3e", 0xb1}, {&(0x7f0000000c80)="7bbcdbd13b1681b822447f1dcea8da94d5e36b8068ebcb2280b42cfb2c2348f503c32365b57b8dd55cae74d2ed3b50aeae4da7257f1d8b2f15d7795f3774047c463eb01ccb116bfe807e064c979ea9aef7f04dde6645912d747c1354915b946d36dce8ec7c0e85ea7b0cd14b47f9b034ef59bca7db880e5bad058173753830a3e450828cfaea86b85a552ace39a37740352722d588734bbcf315782e726b7cc6333dcb949019b0220149e87641c0c84339f7ecc510a63a41d80b77eadd0b28c1dd9fbf4ceb75b3250b026a3f05e221174c7d62e9ee8fb3a074af03aff2e7410d26e6553092b637ead6f65ae94c93ae91bd1d37f6c735851cd676c9aa12ee3a778d8d7b07cd5af1005ad6689a360d71aba679022a67452f7cf818a5c3ea687d95aa5f7a8ad5d260d884397fc7375379ae2caaeab927deea2cb46e0637c5b37db914719673085d205a8c0118b0fab675642f8e0355f30495db0e1b6ec759be3499864e3562d0c744529473545d8771280e1ddefce85107052819c892114c8a541f554dce0d18719db3081103fb5a7433313785234f0393943013691594aca26869b90c8484a43b1484a00cc68a52c51afbea972d0b1d0fa8ab43392b25ec58e385d6028bda7ceff41969e051834cf5d0ebbfda8ad795b278a338011be6a9f84470926a11802e5330f22a1a75fe4976aae48e98f65505775e9bb5f7cd3e14a4d992aeea9248ca9d4955975c4f1a39f12d849b2d0720c1c6e540ba890e3b8ec45050341963cc1509e4fcd9b30fb14cff6f7fb89aa32842bc0fb2fd44a4a71709e25a09414abff0912be9e235cef3ab82fcca08468e31004e3b394947905683b492f0200b5f3f6b75bdb7208d393c703352097cf1ce9e4d9beac407c06f8181d0662cd24144b263dedd62d78e9b7f4d9d39036dfd724e2aa3a1b38a81703a705ff1796fe8a1ee616f9215af19b6ad335550605906ebeac936688901b36057e6e73251d8d283a919a3fa23b71484721e9c8cd3df92a966638a4ba11feb54c6bc7c99b53b416785c11c6ad2f963cf548920387a97b4409af379102307a348e76ac63cdd21592c876fb5995fe49d6d0efedde7138a9bafa2ee05df21600e472d2562b30b245a7af29574ecf14324c9141dafdb9ccd9603525bc9a959abdd6202988e0d95660dcb36df79a7e5a8572df03bc69aa078413712f576ad025fabdfe1e1e5fa8a58834d5b8bf24f9610b1e2c664f56038692335c7859af1b6d0c55124a5edc9fd69f67ba370ae746efe8688a6d5fb7f93d7bcfa6c904d0b91d1dec56033cb564e7403707bab4bfd2eb5a3326af0e5c32007733d95f2f64aa0311de00f6c68eed6af8f68bbb10e88fdfd5511e8c80ff5502fd5bad4b11fcc14ec4a25d1fd73bce221ae9fc1d8003e53b322e6af3befaed03a5e916a19564c7d3c0ff87bf6f28af2871b39e5d608feb130cd2e9bac84c227744f654a971860dc980fc25a66e263bd1515752c92e31e4802b2929322f64d72e5af3110a50e1825f25e0b720c62206d07df1731a58cbbd37321dcac7842729b2d5c63d0ad3d145cdc759642941559498a0a8902b03ecc445fafc519d20e6a95b85fa40f22713309201eed718ab4459451cdef4ad06a97cb69e0769d23146c81970d1fbe607f6071b3a22ea0b0b75588d4217cebfdbc36eec7a0d170e32f955e95023571cae785467645f9b51f82d6e42b67b2a90bb0ae6b2e6b5a5042bf716ac87d2db6569bd290be6dd792b82f3cc89173881eb38e82a4a288ca736e367629df94fcca657ab4c9d5235d560e2c681eb8dc4df2daab6cfc97f3bc2bd04652e4f97206031b3f92ff6491251482dfd59bfaf8f97eee913c18f01d82e1f7f3b54250bf7cd8b7de853e3356784e10bcab88b44d34f32d0fe11288c2b3959345ddb82247790baab5afc277bc084772b52094f45ae4d385479df9fa4a84951f7c28e3e43aad78078f5f2c53a6dcea7b85198ef033523a830f62762ee9330a216550122b541f4b1479c342a9cbe20e2c30a9d38f6343fe38076509c9e0936a664a57ceca0b347162abbf9699a681b256ddbaede2e35ec163197d95f8580c5eab7fba4008612e3744fc667f30808fff3e0cbcda6044219e64ca0ad1174613ac8d37c213848cdf196cbf20538267e8fd3ec485eb2d5010a81662a8696c088e4d3cd24d7091f67240e9254c9e1978022993bf1c0273622db711a43c90557679ee2478300571b5ccaa9ebba5296316ee7f55b3d5d6f1f08155d9f53238601a05b43dbe8ce5e745b84d497a8d1e21803da9871e3764d35b2d5014a866e090a557b5cb35dd94e359a57bebe6233608bda4ea7782393df85a673f5b25d861dee53affe0c8f7ff3d2143f7489c3555d5395c3f6d41d358f24285c4d7cf4d376386785b519ecbd72ff333f13c4d64417e5f23287fbf93e2d8540de4af2eef1e455fc054c0c073724d86f2813296239db4e5c99712f0140c0df7acffa1dbc8cf5fa61eb314ab8e54e87f02821dc53bbe7445e7c364e3c096350178ddd5a3ade7f353d8cb2dd4221aee62c1da8f9ba91eaf66beadd012b779d844a07df098907b0973c945e80529e57fa1188353e434fbfd2c09311d6040c179f9d37f38205f48b12d8a5cb5cbddb56aedbbe6cf8dbf075bbd7014e0a6dd45c1353892f9b6762411deac0eefda0231d6da5f488fa6a8cb71b5bad995a1d0d78ddcd8930d28ff14538a9f9cdd2dc58afd75331e1de0630bb857344bbb8b51ab4d711570062aaebd1789cef0844af9f5a06c4e307a8791c5f36ccdeb117133c03214c6b938d9465e8c02f442a4a7a3781d86cc15730f5b43c5214a3cd9da4e63a59fc07690950d5287e7f0eafd63033f602d43c079651e729b41b54ae3be7e1eb72b7e3b8a83ce049f07b04d0ebcb18ba26973da889539478e75052ea9e7c104fe4d2325f40c30a277bcc4692d8b53bfdb077ce5795617c0fb99730751a5e08a29a13f7c4e5eb64b4211d99669e074c54e59123f3f5873e1af992bc9213bb60a057a95d14978f72b10ea0bade62e176f3c337521b74554909c140740cd0cdc7593039271edcc36fd42eaa4df52c5a6418c5987764fb251622b4209f44fb304b67a7eca0c145019c426bd0b710a487139f105bf5eea9448d03e5532560ebcafcd51cdbc62d9e167226a4b219920ee06161ad790b2a05c104e1c31ed6cc5dee59cd285c5283b4b713a2800212a04d1da8b85e9960913c6ebe38ce3275e2cd0bbf582e6f21a90c69c82f8139d06e9af95ae11eb1dbb88eec54c64c2302f0da29f8adfb04d220878b47ea64ec9c5ee1c5a0e8bf0ce56bc17a9e5884153d75a419760b787061ec042257666194c87b3e0f9c80a2c245d42891d2a9129d53e7a2976aac6c636e8e2ec4067348865589d4355a56dc755246cf296a792ce97dbbf9da7efb3ddb065ba47c15e036559f045f7f15c16ab87e55522c7342a4b1cc23f9287203b5fd9c096aefb0290b69fbfbf2c686ea435649a9ad358758297d1ec18e78e336e2997b81561b85aaeea64223110ee85a7b1164b0881acd8d82525b63af1c593f3f26b9dda9f7164d9bbcdcb998b68e21106a3e3099f5729925c4bdcb6567d27fd9a5a9d33c183026c5bd4aba826c65b61d0166ca2228b90eec6feae781c6fc7c2d8a45694ce4d514f5905d4d7b11abc10acc5c13263bb79a0f08aa3a03d80ffae4b675fecc96a31cc782b503a5d80f88efb487f83dfb4c1b81c632f4531feb1f48967aee0108ebc314177e3fa2bb5191339a1bf7d1c33cedc39b60f3f5e4854f291ec49319d940e635738c466125d82f630c22abcd107bcf7776dab9526821afe5628d5440b6d094504e285a2b457d5794e9f18180a8faa9cbb7fc0fa76376de93906ad1292ff685f8d44b81a3056ca66e34b4ffe69f1556fb52b322e0d868189392203173f7feec37c04777ce13251ed7a69ba502c029da6e3af1d7e9d41e360dc13b73322637de79dce5524288f6f2dbcf944327c91c2589eb1e36858f318291d33ef4d0944f6db105f1e9c7e328a9f538a45b3a51d69833cc5cab3bd4ded41d6d5010da39ee479c11b8f747bc905e944547a25d7adf615f3d65821f65303de8015d8462061add455224cdfdbe00f9d1144ef9da55cf27e6271858599b694c9615ca938319bda1ca6ffa52c9a6dd345c0e7a961db821d4fb62e9205fe73150afd4f826de1476ed544ff208b8fee8c4622b36a5f6136ff331a435caf195e1e9cb03682055872c43302131c04501ba4353f5e73a0a9399137f6690456c21f0aa817490596bfc7f5bbc8a57029206a9d2d111f7825de74aa3adf3e440903016eb1c63a00684b2f925346a36e4ae60ce618c576ae8b8b97e614b98ae73cb25bfe98c5750ea6ead740adbcc0e2f456dd9bc93f693c71fae21c1b00c79a0f6112267c0af065e42409f72450075f551ba05ff3e5badea064cd3041c59ed2e6f2a2c79f43e2883ca9da1951e99f7f7ee752b5d3f5ecb7fbd2b05074d3039b684ea3a3e74268d9bdeaf7ab4c83364836a056c6418f228e0df4ab3ccaa749a0e3ac991b1fac20d472cb0c4f957b0769f086f70110527cd36222a3008b397345528a41e316aed1937bee1e6841aafe3d88643272583d6fb49e39274ffee911537a4da40e3622888f1035b79ce96fbbd016b444163a6a4205d69e7bbf6c28743b96ac3a68f355e6648493e8b9ae1c65e1f861d97abc50df530bf8f6cc4ed2079ee58154f61f1f7288408bf4f7735971a517937dc2e2e4147377973f46f5d8eeeff07ad867d5eb42807bf0e8a6992077437b42b3ffa0e6c54091e7c2afdad36d85fd97fe013b069dee0104e2b4ce101ac2fa7561d08398881405ce6b32b803cc08d772007bd207e539c13fc88b60d4f29f199bd843f672871b7edb537ae8124ee905848d989d16902f32abd825fde636be1bacb28360742745ab20c121426cd3285f4389d581262bc2f3c3d07755ad8553203299def55a9d6e39d7e09ccab22f84d73ef9fbd3b4e7a7e6391343f5fe8f3eede821eace1dcbe96a935206531701c1ce8ac94f1389edafe71e0d51036b4900ca8539818ba7c046c6ba931bd4f17814fa577f752af2d2e5ac7dbd29ce62ee0bef01268a367e921231791d2beddc5dc868379d25d92be9aa323e8cfb0f9b48180f5a180578f564685ff09a2285d86481467db164c6dbe62e8cc17a15f67e42b86c0a7d17c6b1b5297a99eaf76e58f857755574fa95f9a62effdc0e18ef79e6c05fb50dc9ba3b435634a45ce48b276f02012cc2554ee6d76c4087d277cbef71a405a5e3817e57f43094ffdc1aea9cb81cb1be7352c643fd63ef853a130be2ec5210b2f85dcb6ede2694a313444b5949eea2c4d681205d335b5830832d2000fa66252e053a8af643f59b9175deea3f9e72ea87034096eff23eb577e2e7815a80f248c58cd9a1905c4fd18a1f988a77b09b8a0b684f2f5c3a3b34e422d4c5d32f01792cc9d7b39aa7711ed3ccbb13e0b56959940f5cacbe0da347e916069aa9ad747cad4dd8901c30c048aefdf82384d6dfc44ac30c5b5f59e8fc47a9493febb95de21ff86db5a52ff127828dc8e8fd1c2739c1009d36383af5b46e905d50e0fe0feaf21756dfa96c1ec53f2304f0de68d73b371de3b5fdbcbe461c4af505036aeb44b52b623c132769530237ac4a39756e3c04a61f881b45f53476b4aa2b045eb292128ef7ea4e5802325ab8f316d7eac3c4102ecb64b0a8a0655d2f74193df8638a7b07ccf4a778b136abaa6b3f6fea00eab2", 0xffe}, {0x0}], 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x298, 0x18800}], 0x4, 0x24040005) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x803, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0xfffffffffffffffe) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)) 13m38.716948596s ago: executing program 3 (id=330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = dup(r2) getsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f00000002c0)=""/243, &(0x7f0000000080)=0xf3) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000000)='ip6_vti0\x00', 0x42000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x4]}, {0x40, 0x7ff, 0xe95, 0x2}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x7fffffff}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x4, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x4, 0x0, "8af6666f626cc343be4424de93dc387bf794eca06c4c6a2a8f26fa1ac23a36b152691f6fc33f63b5fe3dd70897d7eb07648eaa8a6777069f5f695a01288982c5", "6406e12df27f2114c33407215d7f32b4af8c510a3ad7c6272c9e9c41b14d20b55239b5a5402d20891a03e68c534f5eed55bf011c9e7143e3c35da5e565223c49", "79310c77328c9d6ea753c2ebb90f8212fdcc78dc7812c09e808ba4c7d7b2cd2b", [0x223]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) (async) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) dup(r2) (async) getsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f00000002c0)=""/243, &(0x7f0000000080)=0xf3) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000100)={r0, &(0x7f0000000000)='ip6_vti0\x00', 0x42000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x4]}, {0x40, 0x7ff, 0xe95, 0x2}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x7fffffff}) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x4, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x4, 0x0, "8af6666f626cc343be4424de93dc387bf794eca06c4c6a2a8f26fa1ac23a36b152691f6fc33f63b5fe3dd70897d7eb07648eaa8a6777069f5f695a01288982c5", "6406e12df27f2114c33407215d7f32b4af8c510a3ad7c6272c9e9c41b14d20b55239b5a5402d20891a03e68c534f5eed55bf011c9e7143e3c35da5e565223c49", "79310c77328c9d6ea753c2ebb90f8212fdcc78dc7812c09e808ba4c7d7b2cd2b", [0x223]}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) (async) 13m38.473914897s ago: executing program 3 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "7f852d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xe9) openat$audio1(0xffffff9c, &(0x7f0000000100), 0x300, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x4}]}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r6, 0x47bc, 0x20, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xba49c73ec47e2f7b}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x440, 0x3f3, 0x10, 0x70bd27, 0x25dfdbfb, {0x2, 0x1, 0x2, [0x0, 0x56b, 0x9, 0x7ff, 0x7, 0x64847673, 0x4, 0x2, 0x200, 0x3, 0x1, 0x6, 0x9, 0x0, 0x0, 0x2, 0x7ff, 0x1, 0xd, 0x7, 0xc, 0x2, 0xffffffc4, 0x9, 0x4, 0xa, 0x0, 0x7, 0xb, 0x9e5b, 0xfe7, 0x6, 0x7, 0xd5a6, 0x8, 0x1, 0x6, 0x2, 0x7, 0xb, 0xffffffff, 0x1, 0x2, 0x1, 0x18d3, 0x1, 0xb, 0xc, 0x81, 0x2, 0x1, 0x400, 0x7, 0xb, 0x7, 0x6, 0x6, 0x16b83550, 0x0, 0x7, 0x0, 0x0, 0x1, 0x4], [0x400, 0x5, 0x9, 0x6, 0x5, 0xfffffff9, 0x9, 0xe, 0x6, 0x6e1, 0x7ff, 0x8e35, 0x1, 0x0, 0x4dd, 0x812, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, 0x7, 0x4, 0x15, 0xa82, 0x2, 0x7f, 0xe, 0x30000, 0x8000, 0x0, 0x54, 0x3ff, 0x0, 0x9, 0x7d7, 0x3ad, 0x6, 0x7f, 0x0, 0x3, 0x4, 0x5e8, 0x9876, 0x1ff, 0x7, 0x0, 0x3, 0x8, 0x1, 0x3, 0x53, 0x8, 0xffffffc0, 0x81, 0xee7fea5a, 0xfff, 0x71c2, 0x10f8, 0x30000, 0xffffffff, 0x3, 0xc], [0x3, 0x8, 0xa30, 0x4, 0x80, 0x7, 0x7, 0x4, 0x19, 0x2, 0x2, 0xb, 0x7f, 0xfffff3e3, 0x6, 0x9, 0xfd2, 0x3, 0x0, 0x4, 0x17, 0x3, 0x10000000, 0x8, 0x1, 0x1, 0x28, 0x401, 0x7f, 0x4, 0x5, 0x10, 0x0, 0x7ff, 0x0, 0x8, 0x5, 0xb196, 0x8, 0xd1, 0x31, 0x291, 0x40, 0x800, 0xb, 0x3, 0x6e21, 0x0, 0x0, 0x5, 0xc, 0x0, 0xffffffff, 0x4, 0x5, 0x400, 0x1000, 0x4, 0x8f, 0x9, 0xfff, 0x0, 0x2, 0x2c], [0x101, 0x40, 0xfffffffc, 0x4, 0xfffffff9, 0x7ff, 0x100, 0x4, 0x0, 0xcb, 0xffffffff, 0x7f, 0x40, 0xfffffffe, 0xffffffe0, 0x42, 0x10001, 0x10000, 0x9, 0x1, 0x9, 0x6, 0x6, 0x5, 0x1900, 0xfffffffa, 0x6, 0x1, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5, 0xa, 0x7, 0xffffffff, 0x10, 0x4, 0x0, 0x400, 0x3ff, 0x1, 0x10001, 0x672, 0x0, 0xe, 0x41, 0xe, 0xffff7fff, 0xfffffffb, 0x6, 0x6, 0x3, 0x0, 0x8, 0x8000, 0x2, 0x10000, 0x2, 0x6, 0x7, 0x5], 0x1f, ['syz0\x00', 'syz0\x00', 'osf\x00', '$-/@!]@[,[,%*$\\]\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c850) 13m38.278964779s ago: executing program 3 (id=335): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x11, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x2000) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b9af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="0198000000000000200012800800010067726500ffff018008000700ac14140006000304bf00000049212128e388784d55"], 0x40}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="0198000000000000200012800800010067726500ffff018008000700ac14140006000304bf00000049212128e388784d55"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f", 0x15, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000002000000000000000e0ffffffffb654d914", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000076070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080200000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x1, 0xffff, 0x2, 0x2, 0x3}, &(0x7f0000000040)=0x98) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x1, 0xffff, 0x2, 0x2, 0x3}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r10, 0x800}, 0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r10, 0x800}, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 13m38.106191101s ago: executing program 3 (id=336): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@flushpolicy={0x40, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@mcast1, 0x2, 0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) close(r9) dup(r5) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000540)={0xd, 0x0, 0x4, {0x7, 0x5000, 0x401, 0x582}}) r10 = syz_genetlink_get_family_id$ethtool(0x0, r9) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) 13m36.048869936s ago: executing program 3 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "7f852d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) (fail_nth: 10) 13m35.917429065s ago: executing program 3 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 13m35.494017465s ago: executing program 33 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 13m27.619355008s ago: executing program 5 (id=376): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000043f000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7fffff7a, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x19}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f0000000100)=[{0x0, 0x0, 0x6}, {0xff, 0x6, 0x9}, {0x1, 0xa, 0x4, 0x2}, {0x2, 0xa3, 0x40, 0x6}, {0x9, 0x2, 0x80, 0x3ff}]}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r7, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 13m24.28079329s ago: executing program 5 (id=384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x2, 0x2}, 0x10) (async, rerun: 64) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @val=@netfilter={0x0, 0x1, 0x6c}}, 0x20) (rerun: 64) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000180), &(0x7f0000000580)={0x0, 0xfb, 0x1015, 0x1, 0x8, "11d1066b23ac75e1b80576b833790a31", "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"}, 0x1015, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c00028005000100006309d030955796f10000000800074000000000040006"], 0x70}}, 0x0) 13m24.060363351s ago: executing program 5 (id=387): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000001eafb2"], 0x8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x8108}, {r2, 0x441}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) sendmsg$inet6(r0, &(0x7f0000001540)={&(0x7f0000000080)={0xa, 0x4e21, 0x401, @rand_addr=' \x01\x00', 0x3e9}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000000c0)="fe96cd83e06f242c27d9bebc822fe1e780897116789eab56ca7c9a71854cee2c36022852069eef82c35aaa6a6a071286dc2ed8f7cfc60fcccd781114fd09815f9896bc1b6203a821ae93e0baeddebce416cf16cebe523313738c444fbbf1bc5f11ed9f3276b541be40d5fb490e6431d2020d68dd0ebbcde54c8395993358f851e0562193672717b89583f003fe3881214ab8729034704eb5b7d5ad9abc292a18a37981f18cb50363fdb6aec2a87004234f083e212a684adc46da99f3e7357dcf3ca4165e320f29de2985a50bcdad6a4eb2913dac48c4d23a08af62eaef", 0xdd}, {&(0x7f00000001c0)="b03125220ebed6041bf3af491bc1f780d91d22dc67f2847734722abf652f199d6927c68e28aa9e3dfced597553e56db4f493eb4b1d75821112abff3186c80d49d49012365de8c6101fe3483f20462667767d0ed9822cb4dec1b084c9", 0x5c}, {&(0x7f0000000240)="caefe7343311e76387f07556d22a083d", 0x10}, {&(0x7f0000001440)="444071a6ff973d69278e6a4d58d0066869146c824ff5ef4687bfc7a856ac04cca813b1d04cc750d0df559c7accc8fc58f4724773500bf3adf1f0d7fc6694995dcd973c7fa854cf18d35c9bab65cdbf9833b16176b3d02b0c7596e5034dae978e92a4a97ab5a18ae937de44b6ee87a3b6ed5895c01793ef4bf734fba56ffeca2f9a3f09a63b8756b57d19bf8c807d76be754d3f0541002a4ae7e35c32c0a958d1f8fa100d6da6c91839de7cd76a9e85459e3e26919020cc4433e57428a2", 0xbd}], 0x5, &(0x7f0000001500)=[@rthdr={{0x38, 0x29, 0x39, {0x16, 0x4, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}}], 0x38}, 0x408c4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 13m22.855367479s ago: executing program 5 (id=395): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1f40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000200004801c0001800a0001007175657565"], 0x7c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r3}) r4 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6a63c32ce4097e5891eeb6fc2ba0131325c94115017411b5e6a496512e47329ec2f8d9ace36cc3df", @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$midi(0x4, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100060000002030144b4740000102030109022000010101700909040000000157f044008baf660f"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = memfd_secret(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ac58000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DVB_DEMUX_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000000240)={0x906, 0x0, r4}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f00000002c0)={0x3, 0x0, {[0x80000000, 0x1, 0xfffffffffffffffe, 0x8, 0x8, 0x10001, 0x8, 0x1fd]}}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0xffff1000, 0x7, 0x22, 0x7ff, 0x0, [{0x40, 0xfd, 0x4d, '\x00', 0xff}, {0x7, 0x5, 0x6, '\x00', 0xf1}, {0x2, 0x6, 0x3, '\x00', 0x6}, {0xeb, 0x9, 0x22, '\x00', 0x2}, {0xf7, 0x86, 0x10, '\x00', 0x11}, {0x3, 0x4, 0x7, '\x00', 0xff}, {0x10, 0x81, 0x9, '\x00', 0x7}, {0x80, 0x3, 0xc, '\x00', 0x6}, {0x40, 0x65, 0x4, '\x00', 0x3}, {0x1, 0xfe, 0x4, '\x00', 0x7}, {0x3, 0x5, 0x2, '\x00', 0xff}, {0x0, 0x7, 0x6, '\x00', 0x42}, {0x5, 0x16, 0xff, '\x00', 0x1}, {0xc, 0x37, 0x9, '\x00', 0x6}, {0xcc, 0xd1, 0x0, '\x00', 0x15}, {0xa2, 0x1, 0xa7, '\x00', 0x3}, {0x80, 0x7, 0x2, '\x00', 0xe}, {0xa5, 0x4, 0x5, '\x00', 0x6}, {0x42, 0x9d, 0x6, '\x00', 0x12}, {0x1, 0x1, 0x11, '\x00', 0x50}, {0x9, 0x3, 0x82, '\x00', 0x5}, {0x4, 0x7, 0x0, '\x00', 0x5}, {0x7, 0x0, 0x5, '\x00', 0x3d}, {0x4, 0x4, 0x89, '\x00', 0x4}]}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 13m20.365039716s ago: executing program 5 (id=405): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x70, 0x8310000, 0x3ff, 0xff, 0x3, 0xa54, 0x0, 0x0, 0x10, 0x20000000}}, 0x50) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1}}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 13m20.174612622s ago: executing program 5 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d3c000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003075f37407104020695a40102030109021b000142d8000a0904"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 13m19.595762526s ago: executing program 34 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d3c000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003075f37407104020695a40102030109021b000142d8000a0904"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 9m19.433731406s ago: executing program 7 (id=1445): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd010203010902"], 0x0) socket(0xa, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x202, 0x2) syz_usb_connect$cdc_ecm(0x5, 0x67, &(0x7f0000000080)=ANY=[], 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000018002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 9m17.685325834s ago: executing program 7 (id=1460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) r1 = socket(0xa, 0x3, 0x3a) sendmmsg$unix(r1, &(0x7f0000007140)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040805}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2f, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 9m17.532081852s ago: executing program 7 (id=1462): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x8, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571103f00000000006700000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@empty, 0x57}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000001c0)={0x6, 0xb0, 0x8}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m16.157221396s ago: executing program 7 (id=1465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x840) r9 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f0000000200), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[], 0xf}, 0x40080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$kcm(0x21, 0x2, 0xa) 9m15.765079195s ago: executing program 7 (id=1469): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c03cba2d1f1f78de2c3ba843600c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') read$FUSE(r3, &(0x7f00000025c0)={0x2020}, 0x2020) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88847b96648e582002c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) lseek(r4, 0x3, 0x0) getdents64(r4, &(0x7f0000003440)=""/92, 0x5c) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x73a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c03cba2d1f1f78de2c3ba843600c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') (async) read$FUSE(r3, &(0x7f00000025c0)={0x2020}, 0x2020) (async) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88847b96648e582002c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) (async) lseek(r4, 0x3, 0x0) (async) getdents64(r4, &(0x7f0000003440)=""/92, 0x5c) (async) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0x73a) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) (async) 9m14.998395908s ago: executing program 7 (id=1471): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000140)=@random="13a3dd875156", 0x6, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) getsockopt(r1, 0xfff, 0xa, &(0x7f0000000180)=""/18, &(0x7f00000001c0)=0x12) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x1, @start={0xff, 0x1}}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001740), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) write$binfmt_register(r2, &(0x7f0000001780)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x47f73aac, 0x3a, '^(--P,+/', 0x3a, 'mptcp_pm\x00', 0x3a, './file0'}, 0x38) 9m14.302479681s ago: executing program 35 (id=1471): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000140)=@random="13a3dd875156", 0x6, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) getsockopt(r1, 0xfff, 0xa, &(0x7f0000000180)=""/18, &(0x7f00000001c0)=0x12) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x1, @start={0xff, 0x1}}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001740), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) write$binfmt_register(r2, &(0x7f0000001780)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x47f73aac, 0x3a, '^(--P,+/', 0x3a, 'mptcp_pm\x00', 0x3a, './file0'}, 0x38) 12.236958889s ago: executing program 4 (id=3505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xf50c0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f00001ae000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.661366066s ago: executing program 4 (id=3507): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x2c00, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001d40)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0xffffff00, 0x80, 0x8}}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xfffffffe, @empty, 0xf}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x1, 0x1, [0x1]}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f00000002c0)={0xfffffd56, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r9}) sendto$inet6(r4, &(0x7f00000000c0)="c1913a000000000000", 0x9, 0x4088804, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r10, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) 10.57738608s ago: executing program 4 (id=3512): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r2, 0x541d) (async) ioctl$TIOCCONS(r2, 0x541d) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000080)="9f") syz_usb_ep_read(r1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 8.501115264s ago: executing program 4 (id=3520): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000043f000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7fffff7a, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x19}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000100)=[{0xff, 0x6, 0x9}, {0x1, 0xa, 0x4, 0x2}, {0x2, 0xa3, 0x40, 0x6}, {0x9, 0x2, 0x80, 0x3ff}]}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000012c0)={r8, 0x8002, 0x7fff, 0x0, 0x0, [], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)) 8.236773424s ago: executing program 8 (id=3522): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/107, 0x6b) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180060200a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 7.01684429s ago: executing program 8 (id=3525): socket$nl_generic(0x10, 0x3, 0x10) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x5c5a83, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x96495, 0x1, &(0x7f0000000c80)="ec", 0x10000}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x1000}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000000)=0x1) socket$rxrpc(0x21, 0x2, 0x2) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x1}, {0xf000, 0x5000, 0xb, 0xfc, 0x8, 0x9, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x70000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4, 0xfb}, {0x5000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x5}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x81, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0, 0x10}, {0x41000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0xa000, 0x3000, 0xe, 0x2, 0xff, 0x6e, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x2}, {0x2000, 0xb}, {0x4000}, 0x9df9ffdf, 0x0, 0x2, 0x8, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2002000010000100feffffbf00010000fe880000000000000000000000000001fe800000000000000000000000000026000100044e230005020000003a000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 6.929638602s ago: executing program 2 (id=3526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 6.904355243s ago: executing program 2 (id=3527): getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000580)={0x6, 0x1, 0x8003, 0x7, 0x4, 0x0, 0x81}, &(0x7f00000005c0)=0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = eventfd2(0x8, 0x81800) read$eventfd(r0, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101a03) ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, &(0x7f0000000080)={0x0}) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xb}, @in={0x2, 0x4e20, @private=0xa010100}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x200000, 0x0, 0x300}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01010000000000000000070000010900010073797a300000000050020000080a010100000000000000000a00000004010740132ddf84b0469205e77ab5b60ab98037dc04a4de30b602cb1af9bf25921e53f7219703012297afed30eb97ca4ff50fcf5704c43d83e462027f120800000079986f0e5b8e68d44c863136b21909000000000000003aebece4115c60ec68ba2bd189dd0ab44f6fe74f8ea92aea204a24ec27a49be2a1f489844b6b695cab98c4efcfd9c8ee78407d550990670900000000000000002baab4d5ceffdd84faf4e0c86d1fcca3000000000000000000000000000097d51079f07f7be9ef0637b7cc8de31b38d9e860fc7580d50151cc291f2076408e60aa9f8c37349abb6b9b870e50638b869e63e83a6af8e33a541be6ecafd906cfbe62c9f2ba004a798b044ea92554000480240001800a000100696e6e65720000001400028008000440000000400800024000000011140001800b0001007470726f78790000040002800c000180080001006f7366000c00018008000100647570000c000580080001400000002fd000074039080eded84fcd3c678155d7bfb5a9b5b2c61b37c5ab985f1cb7ed86d4e08fdb79e26c28a534b2bb6a4d20e16786c7ed69420fa533025fccf83954070c70417fa5d2731c3d1c453a851296259e8e2665934b0229bacab918269abc53cb4ab8bfe9456a9f7ec3acb2e60ee8fc9826f2784ac0f99a45bc7d61d78f46b28acdf5d3dee004d88bd8cf7f228fdd765fa550f8b2afe6ac06564071fa96dcb23b5befe12260b31de49f06e64b6a0b8f7c8bb3d551b6444181718cc15f7e243c0608000b4000000004140000001000010000000000000000000084000a00"/664], 0x298}}, 0x0) listen(0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000240)="6dd02c5af55988387ce5bdd460d540d5bbcf7beb1aac79ef4cfc0989493b01bcefd832871ceeaffe5dfe0c8cf72128814b2858b5efa60f238c929d122fe811ca5b0088d124d5e43a618f314ef2327d34ce46d911"}) 5.251662814s ago: executing program 0 (id=3532): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r0, 0x1, 0x3, 0x0, &(0x7f0000001040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000020000000c0099002200000001000000080001"], 0x28}}, 0x8000040) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc00090582", @ANYBLOB="b10d47d0f1816383ea9048be4f515437bf"], 0x0) 4.872934627s ago: executing program 2 (id=3533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)={0x3, 0x0, [{0x8000000, 0x1b, &(0x7f0000000080)=""/27}, {0x70000, 0xe4, &(0x7f00000006c0)=""/228}, {0x4, 0x0, 0x0}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$video(&(0x7f00000001c0), 0x4000000000ba5, 0xa0141) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000480)={0x2, 0x4e1c, @empty}, 0x10, 0x0}}], 0x1, 0x200088d0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000001ff0)={0x1d, r6}, 0x10) sendmsg$can_raw(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x80044940, &(0x7f00000010c0)) syz_emit_ethernet(0x1a3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x4, [0x557, 0xb3b, 0xceb, 0xd4d]}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000080)) writev(r10, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000240)="2857e5671ef0d8e3c39651a014a3a298466c68130e5b77e37f04a5cec22a4cc681c424e649ef28c1bd78afcb20e74b1ad3ac2c75e5c03189383f8e1d3e61a1", 0x3f}], 0x2) close_range(r9, 0xffffffffffffffff, 0x0) write$apparmor_exec(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB='exec :'], 0x149) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000680)={0x0, "4900bb33663fb3b6d05a929145325c94db33661d4653f6702f7c8d16a03d8bc8", 0x4, 0x400, 0x8000665f, 0x8000, 0x8, 0x1, 0xfffffffe, 0x5}) r11 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$x86(r11, &(0x7f00000000c0)={0x0, &(0x7f00000004c0)=[@nested_amd_inject_event={0x180, 0x38, {0x1, 0x83, 0x4, 0xc}}, @in_dx={0x69, 0x20, {0xae28, 0x7}}, @code={0xa, 0x65, {"67660fc7b515000000c744240036000000c744240200880000ff1c2436263e0fc72d0a000000400f22c666ba400066b8684666ef2e640f01c82e2e67470f06c443fd000600c441f16a0066ba4200b8bf000000ef"}}, @wr_crn={0x67, 0x20, {0x4, 0x100}}, @wr_crn={0x67, 0x20, {0x8, 0xdfe}}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @uexit={0x0, 0x18, 0x4}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x51b, 0x8, 0x3, 0xcf}}], 0x185}) 4.620496318s ago: executing program 2 (id=3534): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000feeffffff"], 0x0, 0x0}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f50539", 0x23}], 0x7, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc350256c77f4e6e63466d3481f6bc59325ad99a551a874b901ed7478d589452109e200940bc27d0efb7bbce0bf88495c5e550beba28b917ea48cbb953b7ddf6fe250ead7aa0091e4679f3c41016ea"], 0xd4}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.594486119s ago: executing program 4 (id=3535): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x3, 0x0, 0x40, 0x8}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}}, 0x80, 0x0}}], 0x1, 0x200000c1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r9 = syz_open_procfs(r7, &(0x7f00000000c0)='net/netlink\x00') inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4a000306) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03814006090587"], 0x0) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd) io_uring_setup(0x78a3, &(0x7f0000000480)={0x0, 0x9f65, 0x1000, 0x3, 0x309, 0x0, r1}) r10 = openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, 0x0, 0x4000000) ioctl$KVM_GET_STATS_FD_cpu(r10, 0xaece) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x1, 0x1, 0x53, 0x8, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x68, 0x0, 0xb, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0xad, 0x1, 0xf, [{@loopback, 0xc980}, {@multicast2, 0x3}, {@multicast1, 0x8a4e}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x22, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@generic={0x8, 0x1, 0x0, 0xd}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x101}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, &(0x7f0000000200), 0x40f00, 0x8, '\x00', r11, @fallback=0x12, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x1, 0x1000, 0x61}, 0x10, 0x0, r9, 0x4, &(0x7f0000000600)=[r9, r9, r2, r3, r3, 0x1, r1], &(0x7f0000000640)=[{0x4, 0x4, 0xa, 0x6}, {0x2, 0x4, 0xb, 0x6}, {0x2, 0x4, 0xc, 0xb}, {0x1, 0x5, 0xb, 0xa}], 0x10, 0x8}, 0x94) 3.737105902s ago: executing program 6 (id=3539): prctl$PR_SET_VMA(0x51, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000001c0)="bb", 0x1}], 0x2, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) 3.736908706s ago: executing program 0 (id=3540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3ff}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000000000001c03000000", 0x26}, {&(0x7f00000000c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 3.726960023s ago: executing program 8 (id=3541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4012) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4012) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x51) (async) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x51) 3.598170594s ago: executing program 6 (id=3542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x301}, 0x94) 3.468902285s ago: executing program 8 (id=3543): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0xffffffffffffffc7, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x7f, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x6, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf9, 0xff, 0xa}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x40, 0x2, 0x2, 0x20, 0x3}, 0x21, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f2100020a10030209010509070012100b68d7c0e3649de29326679b225d1ef0"], 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x4, &(0x7f0000000540)=@string={0x0, 0x3, "9a27eb195ee5be6a690b9fdd3693557f979d95e66f45f78ecddf54c5d80e3457518e54cc605999af3d5e8646d22a2d566e2d61ea9b6c04660e7bb083244b067d36f4e271281f1b7346d1374486112d7902f500aa19a42fe03ec6c71ab5cefab70a7c216e2a3aef56e3583ed2dc0c335844eca796c202da3ee1f663f9c9997a7a0426f317652bc9e8562531b7fbae43a127613a4db76b710b775a6c5a68908da448c7e05d592f52dfa47036a05dfdf41ad6b33568bf25cda7a4d90656c4ab"}}]}) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) unshare(0x24020400) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r5, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fb, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000480)=r8) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sync() socket(0x6, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) 3.417384899s ago: executing program 6 (id=3544): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0x0, 0xc}, {0xffff, 0xffe1}}}, 0x24}}, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 3.341837802s ago: executing program 0 (id=3545): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x80000001, 0x1) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x1, 0x401, 0xbb7, 0x40, {0x0, 0x1800000, 0x2, 0x49, 0x10, 0xef, 0xc, 0x7ff, 0x2, 0xf000, 0x3, r2, r3, 0x3, 0xd98}}, {0x0, 0x1, 0x1, 0x2, '\x00'}}]}, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) getdents64(r6, 0xfffffffffffffffe, 0x29) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)={0x2, &(0x7f0000001840)="c642084c0a663fc2bfb36a11eb8fd6371d5554262547d3858a448a11ebaa75f2edd55f8549851e7f2d661ffdf8443d2a245e305a0a3075230f83a9e936e51447a6e26409906ce9a523ff9fc42c58f28bbcc8e3f1cc954615e8e5f23eb24998fe3793dcc3ac9756eadcfeaf98d54e1f835985baa8b6b3819116ca3dba8527458e4cf80f3c633cede94d1d3d86078108e5cbfaf7cf7c6abcec621859d965a81026ad4d5ee791272fa8791105adebf6a6322741bf593dc8cd4a0e007be8b1ddcc0feebaf4f938e7db76216c55673504b86b74cc05f53e7bdfb94b920900f1607fe6ab1d02bbfeece4aa8564a1f601d0ed44da53430ade6d7962671308ebfb14c6fbb8e40d7f14684120af38d6ae6fa5c413dcca75eea58fb4c664ec247fd65c64e173758b4f044f694675c6fce2973ea55263249c419ae9168d1157e6f83a3006cb336348ff54e90edba888124228bf2f4b435e145c1bd53a40d4e272bc4edd1b5ff81716e04d2a415dd1dfca9195deb5c29def5980402447d9ba1bc42ca140b6b6c9743dbbccc8d338d7ab70488d6cf0ad9cba6ab0624148e1ebb88dcb15f2db1ffd75e2d73ff88dcaba98101f5374d6d9fd7a8c02af79013d6f6d16b835689aca7652bb2d1886613cd929741239d53bf48232a3e6d1d6a6a40630e23a2c582e90673810eb207fb9ae80cdb6c963691efa4d6448ff4a85fb93518d94efdb0e11ac62838e7f327fa7c1026b9ff118e48cfa6c555af4fd184479db4b57bdb7cbe3deee1c4a7050a87b28132e7a5a6ebc792a6497f6e71d4634c56c1431e3911056c50576d7377b05e4c45122014e21d98664cca44a532ad33e597b945bd246d6ecf58e4b"}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00"], 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8001, 0x0) close(0x3) 2.677008551s ago: executing program 4 (id=3546): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xaf2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011b891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60ade2bd907fd00", '\x00', "d4e9e1c90d89691c"}, 0x38) read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x2020) shutdown(r1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2004) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) 1.980842736s ago: executing program 6 (id=3547): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) 1.908698574s ago: executing program 6 (id=3548): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x8, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571103f00000000006700000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@empty, 0x57}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000001c0)={0x6, 0xb0, 0x8}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.545349503s ago: executing program 0 (id=3549): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.415491476s ago: executing program 2 (id=3550): syz_clone(0x22029400, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f00000000c0)={'vcan0\x00', @ifru_addrs=@llc={0x1a, 0xf, 0xe1, 0x1a, 0x7, 0xc, @multicast}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x200, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9710, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1638}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "6fb4480704ee5e33e7450bd7d1eca31270137a65b105dfb9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x8800}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0xa, 0x2, 0x0) (async) r2 = socket(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xc}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) (async) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup(r2) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000001000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000001000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)=r6}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.413846772s ago: executing program 0 (id=3551): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) ioctl$EVIOCGLED(r1, 0x80284504, &(0x7f0000000000)=""/52) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000020000000055a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002002dc6080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7453801896034277ce06bbace8034cb393a5e83d42365f003724a237ee4b11602b2270000000014d6d9bc8742ee045d10511b53c74a81d530dfe1d9c322fe040000005025acca262f3d40fad75667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccb3", 0xd8}], 0x1}, 0x0) 1.045217522s ago: executing program 0 (id=3552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r4, &(0x7f0000006800)="10", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x1310c0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xaf4, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000180)={{0x0, 0x3, 0x0, 0x0, 0x9}, 0x3, 0x81}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='batadv_slave_1\x00'}) 801.185486ms ago: executing program 2 (id=3553): r0 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) prctl$PR_SET_PTRACER(0x59616d61, r1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000580)={0x48}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) mknod(&(0x7f0000000300)='./file0\x00', 0x80, 0xc) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000540)={{&(0x7f0000b46000/0x3000)=nil, 0x3000}, 0x1}) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000a38000/0x10000)=nil, &(0x7f000067b000/0x1000)=nil, 0x0, &(0x7f0000000240)=[{0x5, 0x2}, {0x66c3, 0x100000801, 0x8}, {0x81, 0x1, 0x7fff}], 0x3, 0x9, 0x22, 0x0, 0x0, 0x3f}) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) r9 = syz_pidfd_open(r1, 0x0) setns(r9, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x5}, 0x8) 449.480238ms ago: executing program 8 (id=3554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x500}, 0x94) 185.264924ms ago: executing program 8 (id=3555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3ff}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000000000000014000000", 0x26}, {&(0x7f00000000c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 0s ago: executing program 6 (id=3556): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xffb0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) kernel console output (not intermixed with test programs): x7fda8079c799 code=0x7ffc0000 [ 858.091885][ T30] audit: type=1326 audit(1774294399.362:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 858.221792][ T30] audit: type=1326 audit(1774294399.362:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 858.303772][ T30] audit: type=1326 audit(1774294399.362:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 858.369332][ T30] audit: type=1326 audit(1774294399.362:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 858.661290][ T30] audit: type=1326 audit(1774294399.362:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 858.714729][ T30] audit: type=1326 audit(1774294399.362:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31386 comm="syz.4.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 859.089206][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 859.123964][T24993] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 859.147803][ T10] usb 7-1: USB disconnect, device number 14 [ 859.209926][T18972] udevd[18972]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.331670][T24993] usb 3-1: Using ep0 maxpacket: 32 [ 859.348846][T24993] usb 3-1: config 0 has no interfaces? [ 859.366568][T24993] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 859.381522][T24993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.398856][T24993] usb 3-1: config 0 descriptor?? [ 859.510790][T31450] Invalid argument reading file caps for ./file0 [ 859.565062][T31454] loop5: detected capacity change from 0 to 7 [ 859.699532][T31454] Dev loop5: unable to read RDB block 7 [ 859.729934][T31454] loop5: unable to read partition table [ 859.736208][T31454] loop5: partition table beyond EOD, truncated [ 859.742655][T31454] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 859.805091][T31414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.847159][T31414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.857739][ T5879] usb 3-1: USB disconnect, device number 120 [ 860.361217][ T5879] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 860.369099][ T5880] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 860.522713][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 860.531534][ T5880] usb 7-1: config 0 has no interfaces? [ 860.541938][ T5880] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 860.561672][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.571589][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 860.590166][ T5880] usb 7-1: Product: syz [ 860.594485][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 860.608815][ T5880] usb 7-1: Manufacturer: syz [ 860.620642][ T5880] usb 7-1: SerialNumber: syz [ 860.630211][ T5879] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 860.640001][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.649689][ T5880] usb 7-1: config 0 descriptor?? [ 860.656401][ T5879] usb 3-1: Manufacturer: à ’ [ 860.669770][ T5879] usb 3-1: SerialNumber: syz [ 860.701758][ T5879] usb 3-1: config 0 descriptor?? [ 860.722618][ T5879] em28xx 3-1:0.0: New device à ’ @ 480 Mbps (2040:0264, interface 0, class 0) [ 860.879283][ T5879] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 860.917059][T31485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.982320][T31414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.991248][T31485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.006139][T31414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.026642][T31485] vlan2: entered promiscuous mode [ 861.102201][ T5879] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 861.119674][ T796] usb 7-1: USB disconnect, device number 15 [ 861.127901][ T5879] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 861.144692][ T5879] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 861.165494][ T5879] em28xx 3-1:0.0: No AC97 audio processor [ 861.189586][ T5879] usb 3-1: USB disconnect, device number 121 [ 861.203216][ T5879] em28xx 3-1:0.0: Disconnecting em28xx [ 861.223914][ T5879] em28xx 3-1:0.0: Freeing device [ 861.860131][ T796] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 862.052109][ T796] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 862.060756][ T796] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 862.101286][ T796] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 862.122794][ T796] usb 9-1: config 220 has no interface number 2 [ 862.129973][ T796] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 862.171031][ T796] usb 9-1: config 220 interface 0 has no altsetting 0 [ 862.188949][ T796] usb 9-1: config 220 interface 76 has no altsetting 0 [ 862.201161][ T796] usb 9-1: config 220 interface 1 has no altsetting 0 [ 862.233261][ T796] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 862.242702][ T796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.252656][ T796] usb 9-1: Product: syz [ 862.260946][ T796] usb 9-1: Manufacturer: syz [ 862.278699][ T796] usb 9-1: SerialNumber: syz [ 862.512013][T31543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.521075][T31543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.627417][ T796] usb 9-1: selecting invalid altsetting 0 [ 862.653432][ T796] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 862.739288][ T796] uvcvideo 9-1:220.0: No valid video chain found. [ 862.756913][ T796] usb 9-1: selecting invalid altsetting 0 [ 862.790054][ T796] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 862.852794][ T796] usb 9-1: USB disconnect, device number 65 [ 863.344007][T31619] fuse: Invalid gid '00000000000000000004' [ 863.484236][T31623] QAT: failed to copy from user cfg_data. [ 863.830935][T31628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'. [ 866.578099][T31635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'. [ 866.961414][ T796] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 867.145862][ T796] usb 7-1: config 0 has no interfaces? [ 867.156684][ T796] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 867.186640][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.210692][T31680] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3248'. [ 867.399107][ T796] usb 7-1: Product: syz [ 867.412010][ T796] usb 7-1: Manufacturer: syz [ 867.430378][ T796] usb 7-1: SerialNumber: syz [ 867.466351][ T796] usb 7-1: config 0 descriptor?? [ 867.664924][T31699] netlink: 'syz.4.3251': attribute type 25 has an invalid length. [ 867.686286][T31699] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3251'. [ 867.740096][T31644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.749197][T31644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.779430][T31644] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3242'. [ 867.809288][T31698] delete_channel: no stack [ 867.852518][T24993] usb 7-1: USB disconnect, device number 16 [ 867.978600][ T796] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 868.144852][ T796] usb 1-1: Using ep0 maxpacket: 8 [ 868.175175][ T796] usb 1-1: unable to get BOS descriptor or descriptor too short [ 868.185813][ T796] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.201206][ T796] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 868.246830][ T796] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 868.259612][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.270624][ T796] usb 1-1: Product: syz [ 868.275120][ T796] usb 1-1: Manufacturer: syz [ 868.279877][ T796] usb 1-1: SerialNumber: syz [ 868.532941][ T5900] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 868.576767][ T796] usb 1-1: USB disconnect, device number 41 [ 868.678628][T31755] loop4: detected capacity change from 0 to 7 [ 868.690770][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.700470][ C1] buffer_io_error: 11 callbacks suppressed [ 868.700491][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 868.711213][ T5900] usb 5-1: device descriptor read/64, error -71 [ 868.721486][T24993] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 868.844043][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.853769][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 868.871064][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.880824][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 869.070920][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.080622][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 869.098639][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.108358][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 869.116793][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.126661][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 869.135118][ T5900] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 869.146322][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.155953][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 869.164135][T18972] ldm_validate_partition_table(): Disk read failed. [ 869.174428][T24993] usb 7-1: Using ep0 maxpacket: 32 [ 869.179667][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.189330][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 869.197503][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.207183][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 869.215255][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 869.224878][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 869.233778][T18972] Dev loop4: unable to read RDB block 0 [ 869.240572][T24993] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 869.243042][T18972] loop4: unable to read partition table [ 869.259038][T24993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.259314][T18972] loop4: partition table beyond EOD, truncated [ 869.271305][ T5900] usb 5-1: device descriptor read/64, error -71 [ 869.331066][T24993] usb 7-1: config 0 descriptor?? [ 869.359514][T31755] ldm_validate_partition_table(): Disk read failed. [ 869.369993][T31755] Dev loop4: unable to read RDB block 0 [ 869.389628][T31755] loop4: unable to read partition table [ 869.407075][T31755] loop4: partition table beyond EOD, truncated [ 869.411717][ T5900] usb usb5-port1: attempt power cycle [ 869.444576][T31755] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 869.541351][T31759] Invalid logical block size (6) [ 869.590626][T24993] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 869.644444][T24993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 869.738416][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 869.738442][ T30] audit: type=1326 audit(1774294411.232:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 869.839397][ T5900] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 869.864132][T24993] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 869.875926][T24993] usb 7-1: media controller created [ 869.893569][ T5900] usb 5-1: device descriptor read/8, error -71 [ 869.920639][ T30] audit: type=1326 audit(1774294411.272:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 869.955154][T24993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 869.996194][ T30] audit: type=1326 audit(1774294411.272:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 870.072201][ T24] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 870.089549][T24993] az6027: usb out operation failed. (-71) [ 870.098468][T24993] az6027: usb out operation failed. (-71) [ 870.104572][T24993] stb0899_attach: Driver disabled by Kconfig [ 870.110891][T24993] az6027: no front-end attached [ 870.110891][T24993] [ 870.119784][T24993] az6027: usb out operation failed. (-71) [ 870.126641][T24993] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 870.239124][ T30] audit: type=1326 audit(1774294411.272:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 870.241185][ T5900] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 870.293184][T24993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input80 [ 870.311532][ T5900] usb 5-1: device descriptor read/8, error -71 [ 870.366285][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 870.386245][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.395836][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.445523][ T30] audit: type=1326 audit(1774294411.272:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 870.476196][T24993] dvb-usb: schedule remote query interval to 400 msecs. [ 870.508563][T24993] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 870.545341][ T30] audit: type=1326 audit(1774294411.272:9778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 870.568348][ T30] audit: type=1326 audit(1774294411.272:9779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 870.593178][ T30] audit: type=1326 audit(1774294411.272:9780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 870.616793][ T30] audit: type=1326 audit(1774294411.272:9781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 870.617014][ T5900] usb usb5-port1: unable to enumerate USB device [ 870.670745][T24993] usb 7-1: USB disconnect, device number 17 [ 870.697952][ T30] audit: type=1326 audit(1774294411.272:9782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 870.743410][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.756201][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.768205][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 870.830521][T24993] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 871.003013][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.029013][ T24] usb 3-1: config 0 descriptor?? [ 871.241439][T24993] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 871.463685][T24993] usb 7-1: unable to get BOS descriptor or descriptor too short [ 871.481079][T24993] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.491743][T24993] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 871.504496][T24993] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 871.599132][T31828] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.606899][T31828] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.639381][T24993] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 871.651858][T24993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.691237][T24993] usb 7-1: Product: syz [ 871.702157][T24993] usb 7-1: Manufacturer: syz [ 871.722725][T24993] usb 7-1: SerialNumber: syz [ 872.157047][ T5900] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 872.275570][T31828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.290841][T31828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.331419][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 872.349899][ T5900] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 872.366399][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.406393][ T5900] usb 9-1: Product: syz [ 872.417540][ T5900] usb 9-1: Manufacturer: syz [ 872.426446][ T5900] usb 9-1: SerialNumber: syz [ 872.442965][ T5900] usb 9-1: config 0 descriptor?? [ 872.463458][ T5900] gspca_main: se401-2.14.0 probing 047d:5003 [ 872.830633][T21344] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.841611][T21344] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.876803][T21344] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.887768][ T5900] gspca_se401: ExtraFeatures: 48 [ 873.005445][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 873.012768][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 873.039449][T21344] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.050425][ T24] usb 3-1: USB disconnect, device number 122 [ 873.174681][ T5900] input: se401 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input81 [ 873.360077][ T5900] usb 9-1: USB disconnect, device number 66 [ 873.768221][T31891] loop5: detected capacity change from 0 to 7 [ 873.789712][T31891] Dev loop5: unable to read RDB block 7 [ 873.797185][T31891] loop5: unable to read partition table [ 873.815236][T31891] loop5: partition table beyond EOD, truncated [ 873.855136][T31891] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 874.991618][T24993] cdc_ncm 7-1:1.0: skipping garbage [ 875.009692][T24993] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 875.177144][T24993] cdc_ncm 7-1:1.0: bind() failure [ 875.332326][T24993] usb 7-1: USB disconnect, device number 18 [ 875.344887][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 875.344900][ T30] audit: type=1326 audit(1774294416.842:9872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 875.438605][ T30] audit: type=1326 audit(1774294416.872:9873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 875.552628][ T30] audit: type=1326 audit(1774294416.872:9874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 875.584065][T31984] kAFS: unparsable volume name [ 875.605727][T31984] loop2: detected capacity change from 0 to 7 [ 875.619107][T31984] Dev loop2: unable to read RDB block 7 [ 875.638443][T31984] loop2: AHDI p1 p2 p3 [ 875.649725][ T30] audit: type=1326 audit(1774294416.872:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 875.731083][T31984] loop2: partition table partially beyond EOD, [ 875.731079][ T30] audit: type=1326 audit(1774294416.872:9876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 875.785672][T31994] kAFS: unparsable volume name [ 875.791927][T31984] truncated [ 875.795607][T31984] loop2: p1 start 1601398130 is beyond EOD, truncated [ 875.803571][T31984] loop2: p2 start 1702059890 is beyond EOD, truncated [ 876.036711][ T30] audit: type=1326 audit(1774294416.872:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 876.197396][ T30] audit: type=1326 audit(1774294416.872:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 876.488307][ T30] audit: type=1326 audit(1774294416.872:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 876.659379][ T30] audit: type=1326 audit(1774294416.872:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 876.767508][ T30] audit: type=1326 audit(1774294416.872:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31964 comm="syz.6.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 876.963835][ T5900] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 877.111204][ T5900] usb 9-1: device descriptor read/64, error -71 [ 877.421300][ T5900] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 877.591182][ T5900] usb 9-1: device descriptor read/64, error -71 [ 877.702469][ T5900] usb usb9-port1: attempt power cycle [ 878.171187][ T5900] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 878.221041][ T5900] usb 9-1: device descriptor read/8, error -71 [ 878.501374][ T5900] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 878.532235][ T5900] usb 9-1: device descriptor read/8, error -71 [ 878.733438][ T5900] usb usb9-port1: unable to enumerate USB device [ 881.772599][T32124] C: renamed from team_slave_0 [ 882.014323][T32136] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3295'. [ 882.141996][ T796] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 882.188317][T32124] netlink: 'syz.6.3293': attribute type 1 has an invalid length. [ 882.196143][T32124] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3293'. [ 882.208364][T32124] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 882.314402][ T796] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 882.348599][ T796] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=7c.79 [ 882.377324][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.448927][ T796] usb 5-1: Product: syz [ 882.468264][ T796] usb 5-1: Manufacturer: syz [ 882.513130][ T796] usb 5-1: SerialNumber: syz [ 882.577360][ T796] comedi comedi5: Wrong number of endpoints [ 882.599337][ T796] dt9812 5-1:2.0: driver 'dt9812' failed to auto-configure device. [ 882.747467][ T5887] usb 5-1: USB disconnect, device number 40 [ 883.794699][ T5887] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 883.928758][T32200] syzkaller0: entered promiscuous mode [ 883.934338][T32200] syzkaller0: entered allmulticast mode [ 884.076021][ T5887] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 884.094676][ T5887] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 884.119576][ T5887] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 884.144938][ T5887] usb 9-1: config 220 has no interface number 2 [ 884.157047][T32211] syzkaller0: entered promiscuous mode [ 884.169215][ T5887] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 884.185292][T32211] syzkaller0: entered allmulticast mode [ 884.196677][ T5887] usb 9-1: config 220 interface 0 has no altsetting 0 [ 884.210751][ T5887] usb 9-1: config 220 interface 76 has no altsetting 0 [ 884.238742][ T5887] usb 9-1: config 220 interface 1 has no altsetting 0 [ 884.251823][ T5887] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 884.263281][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.281343][ T5887] usb 9-1: Product: syz [ 884.291843][ T5887] usb 9-1: Manufacturer: syz [ 884.327763][ T5887] usb 9-1: SerialNumber: syz [ 884.582567][T32222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.631806][T32184] 8021q: VLANs not supported on caif0 [ 884.677762][ T5887] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 884.700517][ T5887] uvcvideo 9-1:220.0: No valid video chain found. [ 884.721022][ T5887] usb 9-1: selecting invalid altsetting 0 [ 884.748438][ T5887] usb 9-1: selecting invalid altsetting 0 [ 884.761035][ T5887] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 884.796370][ T5887] usb 9-1: USB disconnect, device number 71 [ 886.016183][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 886.016197][ T30] audit: type=1326 audit(1774294427.512:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32293 comm="syz.6.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 886.080277][ T30] audit: type=1326 audit(1774294427.542:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32293 comm="syz.6.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 886.158918][ T30] audit: type=1326 audit(1774294427.552:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32293 comm="syz.6.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f017c19c799 code=0x7ffc0000 [ 886.265494][ T30] audit: type=1326 audit(1774294427.552:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32293 comm="syz.6.3311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f017c19c799 code=0x0 [ 886.474893][ T30] audit: type=1326 audit(1774294427.952:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32302 comm="syz.8.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e2d9c799 code=0x7ffc0000 [ 886.602677][ T30] audit: type=1326 audit(1774294427.972:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32302 comm="syz.8.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e2d9c799 code=0x7ffc0000 [ 886.801441][ T30] audit: type=1326 audit(1774294427.972:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32302 comm="syz.8.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc6e2d9c799 code=0x7ffc0000 [ 887.000516][ T30] audit: type=1326 audit(1774294427.972:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32302 comm="syz.8.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e2d9c799 code=0x7ffc0000 [ 887.066683][ T30] audit: type=1326 audit(1774294427.992:9994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32302 comm="syz.8.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc6e2d9c799 code=0x7ffc0000 [ 887.242478][ T30] audit: type=1326 audit(1774294427.992:9995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32302 comm="syz.8.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e2d9c799 code=0x7ffc0000 [ 887.591701][T24993] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 887.785920][T24993] usb 7-1: config 4 has an invalid interface number: 121 but max is 0 [ 887.805592][T24993] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 887.838998][T24993] usb 7-1: config 4 has no interface number 0 [ 887.867290][T24993] usb 7-1: config 4 interface 121 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 887.946585][T24993] usb 7-1: config 4 interface 121 has no altsetting 0 [ 887.975950][T24993] usb 7-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 887.990331][T32348] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3321'. [ 888.021228][T24993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.029309][T24993] usb 7-1: Product: syz [ 888.033843][T24993] usb 7-1: Manufacturer: syz [ 888.038454][T24993] usb 7-1: SerialNumber: syz [ 888.047762][T24993] usb-storage 7-1:4.121: USB Mass Storage device detected [ 888.252185][T24993] usb 7-1: USB disconnect, device number 19 [ 888.371607][ T5887] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 888.521350][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 888.554478][ T5887] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 888.562988][ T5887] usb 5-1: config 0 has no interface number 0 [ 888.569222][ T5887] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 888.620127][ T5887] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 888.646133][ T5887] usb 5-1: config 0 interface 48 has no altsetting 0 [ 888.663249][ T5887] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 888.672564][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.681540][ T5887] usb 5-1: Product: syz [ 888.685843][ T5887] usb 5-1: Manufacturer: syz [ 888.690517][ T5887] usb 5-1: SerialNumber: syz [ 888.720348][ T5887] usb 5-1: config 0 descriptor?? [ 889.162475][ T5887] gspca_main: se401-2.14.0 probing 047d:5003 [ 889.197503][ T5900] IPVS: starting estimator thread 0... [ 889.292007][T32391] IPVS: using max 55 ests per chain, 132000 per kthread [ 889.511548][ T5879] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 889.752853][ T5879] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.801231][ T5879] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 889.801268][ T5879] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 889.816120][ T5879] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.816153][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.816174][ T5879] usb 7-1: Product: syz [ 889.816190][ T5879] usb 7-1: Manufacturer: syz [ 889.816205][ T5879] usb 7-1: SerialNumber: syz [ 889.908096][ T5879] cdc_ncm 7-1:1.0: skipping garbage [ 889.977803][ T5887] gspca_se401: read req failed req 0x06 error -19 [ 889.991588][ T5887] usb 5-1: USB disconnect, device number 41 [ 891.298596][T32449] fuse: Bad value for 'fd' [ 891.312451][T32434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3333'. [ 891.332227][T32434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3333'. [ 891.515975][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 891.515996][ T30] audit: type=1326 audit(1774294432.972:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 891.551620][ T30] audit: type=1326 audit(1774294432.972:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 891.575867][ T30] audit: type=1326 audit(1774294432.972:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 891.582523][ T5900] usb 9-1: new full-speed USB device number 72 using dummy_hcd [ 891.707243][ T30] audit: type=1326 audit(1774294432.972:10130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 891.855413][ T30] audit: type=1326 audit(1774294432.972:10131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 891.896428][ T5900] usb 9-1: config 136 has an invalid interface number: 23 but max is 0 [ 891.930275][ T5900] usb 9-1: config 136 has no interface number 0 [ 891.953439][ T5900] usb 9-1: config 136 interface 23 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 891.962030][ T30] audit: type=1326 audit(1774294432.972:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 891.998402][ T5900] usb 9-1: config 136 interface 23 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 892.009537][ T5900] usb 9-1: config 136 interface 23 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 892.035557][ T5900] usb 9-1: config 136 interface 23 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 892.040880][ T30] audit: type=1326 audit(1774294432.972:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 892.079187][ T5900] usb 9-1: config 136 interface 23 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 892.092988][ T30] audit: type=1326 audit(1774294432.972:10134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 892.103188][ T5900] usb 9-1: config 136 interface 23 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 892.132201][ T30] audit: type=1326 audit(1774294432.972:10135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 892.201241][ T30] audit: type=1326 audit(1774294432.972:10136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32447 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 892.211225][ T5900] usb 9-1: config 136 interface 23 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 892.257755][ T5900] usb 9-1: config 136 interface 23 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 892.283436][ T5879] cdc_ncm 7-1:1.0: bind() failure [ 892.314254][ T5879] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 892.338401][ T5900] usb 9-1: config 136 interface 23 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 892.338877][ T5879] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 892.368595][ T5879] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 892.400477][ T5900] usb 9-1: config 136 interface 23 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 892.417516][ T5879] usb 7-1: USB disconnect, device number 20 [ 892.439244][ T5900] usb 9-1: config 136 interface 23 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 892.466742][ T5900] usb 9-1: config 136 interface 23 has no altsetting 0 [ 892.518677][ T5900] usb 9-1: New USB device found, idVendor=1b3d, idProduct=9305, bcdDevice=d6.f5 [ 892.535796][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.561195][ T5900] usb 9-1: Product: # [ 892.575009][ T5900] usb 9-1: Manufacturer: Ы [ 892.597614][ T5900] usb 9-1: SerialNumber: á Œ [ 892.616281][T32449] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 892.625723][T32449] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 892.860966][ T5900] ftdi_sio 9-1:136.23: FTDI USB Serial Device converter detected [ 892.873074][ T5900] ftdi_sio ttyUSB0: unknown device type: 0xd6f5 [ 892.939619][ T5900] usb 9-1: USB disconnect, device number 72 [ 893.065650][ T5900] ftdi_sio 9-1:136.23: device disconnected [ 893.222380][T32507] netlink: 39 bytes leftover after parsing attributes in process `syz.0.3341'. [ 893.231616][T32507] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3341'. [ 893.457004][T32510] netlink: 'syz.8.3343': attribute type 2 has an invalid length. [ 894.262233][T32525] Cannot find add_set index 0 as target [ 895.010352][T32534] netlink: 'syz.8.3347': attribute type 1 has an invalid length. [ 895.157739][T32534] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 895.199263][T32534] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 895.246391][T32562] syzkaller0: entered promiscuous mode [ 895.252617][T32562] syzkaller0: entered allmulticast mode [ 896.521693][ T5900] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 896.726374][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 896.958553][ T5900] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 897.080423][ T5900] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.150505][T32629] bond1: option xmit_hash_policy: invalid value (14) [ 897.175479][ T5900] usb 9-1: config 0 has no interface number 0 [ 897.187208][T32629] bond1 (unregistering): Released all slaves [ 897.195641][ T5900] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 897.556525][ T5900] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 897.593585][ T5900] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 897.639949][ T5900] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.681153][ T5900] usb 9-1: config 0 interface 52 has no altsetting 0 [ 897.724348][ T5900] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 897.772605][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.813930][ T5900] usb 9-1: config 0 descriptor?? [ 898.067925][ T5900] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input82 [ 898.278068][T24993] usb 9-1: USB disconnect, device number 73 [ 898.278212][ C1] synaptics_usb 9-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 898.541854][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 898.541873][ T30] audit: type=1326 audit(1774294440.022:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 898.787768][ T30] audit: type=1326 audit(1774294440.022:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 898.841289][T32757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3360'. [ 898.931464][T24993] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 899.041940][ T30] audit: type=1326 audit(1774294440.022:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 899.123349][ T30] audit: type=1326 audit(1774294440.022:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 899.146334][ T5879] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 899.151609][T24993] usb 3-1: Using ep0 maxpacket: 32 [ 899.240753][T24993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.278905][T24993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.311192][T24993] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 899.351321][T24993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.407810][T24993] usb 3-1: config 0 descriptor?? [ 899.415874][ T5879] usb 7-1: Using ep0 maxpacket: 32 [ 899.525285][ T30] audit: type=1326 audit(1774294440.022:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 899.555342][ T5879] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 899.591717][ T5879] usb 7-1: config 0 has no interface number 0 [ 899.612091][ T5879] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 899.688854][ T30] audit: type=1326 audit(1774294440.022:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 899.718524][ T311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3364'. [ 899.732407][ T5879] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 899.788734][ T5879] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 899.807466][ T30] audit: type=1326 audit(1774294440.022:10206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 899.837344][ T5879] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 899.925818][ T316] syz_tun: entered allmulticast mode [ 899.938536][ T5879] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 899.980574][ T30] audit: type=1326 audit(1774294440.022:10207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 899.980965][ T317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3365'. [ 900.031653][T24993] ft260 0003:0403:6030.0032: unknown main item tag 0x7 [ 900.048916][ T5879] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 900.106102][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.133642][ T30] audit: type=1326 audit(1774294440.022:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 900.156715][ T316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3365'. [ 900.156736][ T5879] usb 7-1: Product: syz [ 900.237745][ T5879] usb 7-1: Manufacturer: syz [ 900.267352][ T5879] usb 7-1: SerialNumber: syz [ 900.267436][T24993] ft260 0003:0403:6030.0032: failed to retrieve chip version [ 900.325076][T24993] ft260 0003:0403:6030.0032: probe with driver ft260 failed with error -5 [ 900.331282][ T30] audit: type=1326 audit(1774294440.022:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32742 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 900.404717][ T5879] usb 7-1: config 0 descriptor?? [ 900.424274][ T5879] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input83 [ 900.552761][ T317] syz_tun (unregistering): left allmulticast mode [ 901.305018][ T344] dlm: plock device version mismatch: kernel (1.2.0), user (619199281.1581691892.1258375512) [ 901.621517][ T5879] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 901.731485][ T796] usb 7-1: USB disconnect, device number 21 [ 901.821660][ T5879] usb 9-1: not running at top speed; connect to a high speed hub [ 901.832510][ T5879] usb 9-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 901.832543][ T5879] usb 9-1: config 1 interface 0 has no altsetting 0 [ 901.837694][ T5879] usb 9-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 901.837727][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.837747][ T5879] usb 9-1: Product: syz [ 901.837763][ T5879] usb 9-1: Manufacturer: syz [ 901.837779][ T5879] usb 9-1: SerialNumber: syz [ 901.858247][ T354] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 902.106212][ T5879] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input84 [ 902.108101][ T5178] bcm5974 9-1:1.0: could not read from device [ 902.142914][ T5178] bcm5974 9-1:1.0: could not read from device [ 902.144763][ T796] usb 3-1: USB disconnect, device number 123 [ 902.175431][ T5178] bcm5974 9-1:1.0: could not read from device [ 902.176979][ T5178] bcm5974 9-1:1.0: could not read from device [ 902.194693][ T5879] usb 9-1: USB disconnect, device number 74 [ 902.886591][ T5879] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 903.091390][ T346] Bluetooth: hci5: command 0x0406 tx timeout [ 903.179505][ T5879] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 903.188387][ T5879] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 903.200374][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 903.214896][ T5879] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 903.242751][ T5879] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 903.257629][ T5887] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 903.303357][ T5879] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 903.362097][ T5879] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 903.372830][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 903.462207][ T5879] usb 3-1: Product: syz [ 903.467104][ T5887] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 903.562421][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.582708][ T5879] usb 3-1: Manufacturer: syz [ 903.592095][ T5887] usb 9-1: Product: syz [ 903.596473][ T5887] usb 9-1: Manufacturer: syz [ 903.612259][ T437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 903.621698][ T5887] usb 9-1: SerialNumber: syz [ 903.652200][ T5887] usb 9-1: config 0 descriptor?? [ 903.660966][ T5879] cdc_wdm 3-1:1.0: skipping garbage [ 903.678005][ T5879] cdc_wdm 3-1:1.0: skipping garbage [ 903.703281][ T5880] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 903.793672][ T5879] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 903.810315][ T5879] cdc_wdm 3-1:1.0: Unknown control protocol [ 903.861549][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 903.869591][ T5880] usb 1-1: config 253 has an invalid interface number: 184 but max is 0 [ 904.003365][ T5880] usb 1-1: config 253 has no interface number 0 [ 904.009841][ T5880] usb 1-1: config 253 interface 184 has no altsetting 0 [ 904.017622][ T5879] usb 3-1: USB disconnect, device number 124 [ 904.115932][ T5880] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 904.139168][ T437] Cannot find del_set index 2 as target [ 904.221237][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.229718][ T5880] usb 1-1: Product: syz [ 904.432652][ T531] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3379'. [ 904.452858][ T531] loop6: detected capacity change from 0 to 524288000 [ 904.466154][ T5880] usb 1-1: Manufacturer: syz [ 904.472753][ T5880] usb 1-1: SerialNumber: syz [ 904.472928][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 904.472942][ T30] audit: type=1326 audit(1774294445.972:10269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 904.519839][ T5880] go7007 1-1:253.184: probe with driver go7007 failed with error -12 [ 904.666305][ T30] audit: type=1326 audit(1774294445.972:10270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 904.718796][ T496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.738751][ T496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.759542][ T30] audit: type=1326 audit(1774294446.012:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 904.792254][ T496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.816618][ T496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.834485][ T30] audit: type=1326 audit(1774294446.012:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 904.866870][T24993] usb 1-1: USB disconnect, device number 42 [ 904.931047][ T30] audit: type=1326 audit(1774294446.012:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 904.977114][ T30] audit: type=1326 audit(1774294446.012:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 905.022794][ T30] audit: type=1326 audit(1774294446.012:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 905.068212][ T30] audit: type=1326 audit(1774294446.012:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 905.118179][ T30] audit: type=1326 audit(1774294446.012:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 905.189577][ T30] audit: type=1326 audit(1774294446.012:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.4.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8079c799 code=0x7ffc0000 [ 905.365508][ T557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 905.731253][ T5879] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 906.007723][ T5880] usb 9-1: USB disconnect, device number 75 [ 906.116411][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 906.145089][ T5879] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 906.178881][ T5879] usb 5-1: config 0 has no interface number 0 [ 906.201689][ T5879] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 906.350497][ T5879] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 906.492130][ T5879] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 906.546936][ T5879] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 906.664788][ T586] tipc: Started in network mode [ 906.677054][ T586] tipc: Node identity a60d00229911, cluster identity 4711 [ 906.695090][ T586] tipc: Enabled bearer , priority 0 [ 906.713240][ T586] syzkaller0: entered promiscuous mode [ 906.719037][ T586] syzkaller0: entered allmulticast mode [ 906.743786][ T5879] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 906.839657][ T585] tipc: Resetting bearer [ 906.918100][ T346] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 906.954606][ T346] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 906.973335][ T346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 906.974335][ T585] tipc: Disabling bearer [ 906.987138][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 907.045017][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.060255][ T5879] usb 5-1: Product: syz [ 907.072232][ T346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 907.084865][ T346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 907.158659][ T5879] usb 5-1: Manufacturer: syz [ 907.164323][ T5879] usb 5-1: SerialNumber: syz [ 907.171639][ T5879] usb 5-1: config 0 descriptor?? [ 907.281055][ T5879] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input85 [ 907.751885][ T796] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 907.881640][ T796] usb 3-1: device descriptor read/64, error -71 [ 907.969627][ T1002] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.025740][ T1002] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 908.191454][ T796] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 908.329350][ T1002] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.343692][ T796] usb 3-1: device descriptor read/64, error -71 [ 908.418986][ T1002] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 908.466924][ T796] usb usb3-port1: attempt power cycle [ 908.576076][ T1002] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.619155][ T1002] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 908.831771][ T796] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 908.864150][ T5887] usb 5-1: USB disconnect, device number 42 [ 908.873504][ T796] usb 3-1: device descriptor read/8, error -71 [ 908.884145][ T1002] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 908.899183][ T1002] bridge0: port 3(netdevsim0) entered disabled state [ 908.935951][ T1002] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.976492][ T1002] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 909.131316][ T796] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 909.171693][ T51] Bluetooth: hci4: command tx timeout [ 909.183743][ T796] usb 3-1: device descriptor read/8, error -71 [ 909.302358][ T796] usb usb3-port1: unable to enumerate USB device [ 909.391209][ T5887] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 909.486647][ T599] chnl_net:caif_netlink_parms(): no params data found [ 909.541266][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 909.570562][ T5887] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 909.600409][ T5887] usb 5-1: string descriptor 0 read error: -22 [ 909.610832][ T5887] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 909.761766][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.858983][ T1002] bridge_slave_1: left allmulticast mode [ 909.868769][ T1002] bridge_slave_1: left promiscuous mode [ 909.884887][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.932815][ T1002] bridge_slave_0: left allmulticast mode [ 909.941268][ T1002] bridge_slave_0: left promiscuous mode [ 909.947109][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.177709][ T5887] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 910.206568][ T5887] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 910.247345][ T5887] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 910.294333][ T5887] usb 5-1: USB disconnect, device number 43 [ 910.470841][ T1002] ip6gretap0 (unregistering): left allmulticast mode [ 910.497481][ T1002] ip6gretap0 (unregistering): left promiscuous mode [ 911.075520][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 911.075538][ T30] audit: type=1326 audit(1774294452.492:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 911.169904][ T30] audit: type=1326 audit(1774294452.492:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 911.261344][ T51] Bluetooth: hci4: command tx timeout [ 911.261408][ T30] audit: type=1326 audit(1774294452.502:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 911.461567][ T1002] bond5 (unregistering): (slave gretap1): Releasing active interface [ 911.475881][ T30] audit: type=1326 audit(1774294452.502:10321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 911.731239][ T30] audit: type=1326 audit(1774294452.502:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 911.780072][ T30] audit: type=1326 audit(1774294452.502:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 911.802653][ T5887] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 911.814984][ T30] audit: type=1326 audit(1774294452.502:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 911.850156][ T1002] dvmrp0 (unregistering): left allmulticast mode [ 911.880188][ T30] audit: type=1326 audit(1774294452.502:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 911.909287][ T1002] bond3 (unregistering): (slave geneve2): Releasing active interface [ 911.962874][ T5887] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 911.967917][ T30] audit: type=1326 audit(1774294452.502:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 911.985180][ T5887] usb 3-1: config 0 has no interface number 0 [ 912.003892][ T5887] usb 3-1: config 0 interface 30 has no altsetting 0 [ 912.055759][ T5887] usb 3-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 912.085473][ T30] audit: type=1326 audit(1774294452.502:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=786 comm="syz.0.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 912.085538][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.138488][ T5880] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 912.213217][ T5887] usb 3-1: Product: syz [ 912.227532][ T5887] usb 3-1: Manufacturer: syz [ 912.239686][ T5887] usb 3-1: SerialNumber: syz [ 912.268848][ T5887] usb 3-1: config 0 descriptor?? [ 912.291007][ T5887] hub 3-1:0.30: bad descriptor, ignoring hub [ 912.304976][ T5887] hub 3-1:0.30: probe with driver hub failed with error -5 [ 912.313426][ T1002] bond0 (unregistering): (slave 30): Releasing backup interface [ 912.321193][ T5880] usb 9-1: Using ep0 maxpacket: 8 [ 912.327160][ T5887] keyspan 3-1:0.30: Keyspan - (without firmware) converter detected [ 912.336434][ T1002] bond0 (unregistering): Released all slaves [ 912.344988][ T5880] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 912.363368][ T5880] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 912.382804][ T796] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 912.413782][ T1002] bond1 (unregistering): Released all slaves [ 912.421178][ T5880] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 912.435457][ T5880] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 912.446784][ T5880] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 912.484417][ T1002] bond2 (unregistering): Released all slaves [ 912.522275][ T5880] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 912.535193][ T5880] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 912.551286][ T5880] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 912.564692][ T5880] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 912.578842][ T5880] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 912.581639][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 912.596416][ T5880] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 912.606063][ T5880] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 912.623427][ T1002] bond3 (unregistering): Released all slaves [ 912.635012][ T796] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 912.650870][ T5880] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 912.654934][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.686814][ T5880] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 912.691730][ T1002] bond4 (unregistering): Released all slaves [ 912.717000][ T796] pvrusb2: Hardware description: Terratec Grabster AV400 [ 912.725771][ T5880] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 912.735873][ T796] pvrusb2: ********** [ 912.754281][ T796] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 912.760662][ T5880] usb 9-1: string descriptor 0 read error: -22 [ 912.765266][ T1002] bond5 (unregistering): Released all slaves [ 912.779506][ T796] pvrusb2: Important functionality might not be entirely working. [ 912.784059][ T5880] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 912.797023][ T796] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 912.814419][ T796] pvrusb2: ********** [ 912.836430][ T848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 912.843697][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.937722][ T5887] usb 3-1: USB disconnect, device number 3 [ 912.953182][ T2347] pvrusb2: Invalid write control endpoint [ 912.964565][ T5887] keyspan 3-1:0.30: device disconnected [ 912.967399][ T1002] tipc: Disabling bearer [ 913.015143][ T5880] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 913.056549][ T1002] tipc: Left network mode [ 913.142640][ T2347] pvrusb2: Invalid write control endpoint [ 913.156583][ T796] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 913.169379][ T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.202297][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 913.219341][ T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.246320][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 913.331529][ T51] Bluetooth: hci4: command tx timeout [ 913.338133][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 913.348418][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 913.359403][ T599] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.372704][ T2347] pvrusb2: Device being rendered inoperable [ 913.373265][ T796] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 913.389838][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.410340][ T599] bridge_slave_0: entered allmulticast mode [ 913.431849][ T827] pvrusb2: Attempted to execute control transfer when device not ok [ 913.438694][ T796] usb 1-1: config 0 has no interface number 0 [ 913.482578][ T599] bridge_slave_0: entered promiscuous mode [ 913.496271][ T796] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 913.507672][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 913.518604][ T5880] usb 5-1: USB disconnect, device number 44 [ 913.559353][ T599] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.574329][ T796] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 913.600410][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 913.607051][ T599] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.631392][ T796] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 913.648505][ T2347] pvrusb2: Attached sub-driver cx25840 [ 913.655089][ T599] bridge_slave_1: entered allmulticast mode [ 913.682312][ T599] bridge_slave_1: entered promiscuous mode [ 913.698735][ T796] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 913.710705][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 913.767154][ T796] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 913.791412][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 913.847177][ T796] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 913.890159][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.929722][ T796] usb 1-1: Product: syz [ 913.941230][ T796] usb 1-1: Manufacturer: syz [ 913.945871][ T796] usb 1-1: SerialNumber: syz [ 913.962727][ T796] usb 1-1: config 0 descriptor?? [ 914.034273][ T796] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input86 [ 914.079756][ T599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.291055][ T599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.699568][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.474422][ T51] Bluetooth: hci4: command tx timeout [ 915.483131][ T5900] usb 9-1: USB disconnect, device number 76 [ 915.679239][ T1002] batadv1 (unregistering): left promiscuous mode [ 915.706046][ T1002] batadv1 (unregistering): left allmulticast mode [ 915.804203][ T1002] team0 (unregistering): Port device batadv1 removed [ 916.244248][ T5900] usb 1-1: USB disconnect, device number 43 [ 916.408072][ T1002] team_slave_1 (unregistering): left promiscuous mode [ 916.424969][ T1002] team_slave_1 (unregistering): left allmulticast mode [ 916.443355][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 916.477294][ T1002] C (unregistering): left promiscuous mode [ 916.489835][ T1002] C (unregistering): left allmulticast mode [ 916.506549][ T1002] team0 (unregistering): Port device C removed [ 916.701209][ T5900] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 916.847774][ T599] team0: Port device team_slave_0 added [ 916.856098][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 916.867780][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 916.891159][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 916.918682][ T599] team0: Port device team_slave_1 added [ 916.991342][ T5900] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 917.000443][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.080804][ T5900] usb 1-1: Product: syz [ 917.087269][ T5900] usb 1-1: Manufacturer: syz [ 917.102147][ T5900] usb 1-1: SerialNumber: syz [ 917.127183][ T599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.140996][ T599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.172988][ T5900] usb 1-1: config 0 descriptor?? [ 917.339807][ T5900] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 917.349289][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 917.349307][ T30] audit: type=1326 audit(1774294458.752:10399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 917.393068][ T5900] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 917.433481][ T30] audit: type=1326 audit(1774294458.752:10400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 917.464151][ T599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.501890][ T599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.508957][ T599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.553217][ T30] audit: type=1326 audit(1774294458.752:10401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 917.742313][ T1072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.751663][ T1072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.784025][ T30] audit: type=1326 audit(1774294458.752:10402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 917.810343][ T599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.904429][ T30] audit: type=1326 audit(1774294458.752:10403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 917.991803][ T5900] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 918.082543][ T5900] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 918.186104][ T30] audit: type=1326 audit(1774294458.752:10404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 918.225202][ T599] hsr_slave_0: entered promiscuous mode [ 918.243337][ T599] hsr_slave_1: entered promiscuous mode [ 918.271689][ T30] audit: type=1326 audit(1774294458.752:10405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 918.417704][ T30] audit: type=1326 audit(1774294458.752:10406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 918.454532][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 918.666047][ T30] audit: type=1326 audit(1774294458.752:10407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 918.727590][ T5900] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 919.140604][ T30] audit: type=1326 audit(1774294458.752:10408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1099 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4d9c799 code=0x7ffc0000 [ 919.351875][T21539] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 919.534269][T21539] usb 3-1: config 0 has no interfaces? [ 919.543010][T21539] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 919.553991][T21539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.578025][T21539] usb 3-1: Product: syz [ 919.591791][T21539] usb 3-1: Manufacturer: syz [ 919.605347][T21539] usb 3-1: SerialNumber: syz [ 919.637159][T21539] usb 3-1: config 0 descriptor?? [ 919.709203][ T1002] IPVS: stop unused estimator thread 0... [ 919.857002][ T5900] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 919.869219][ T5900] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 919.888463][ T1209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.897224][ T1209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.923801][ T1209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3414'. [ 919.949966][ T1249] tipc: Started in network mode [ 919.968748][ T1249] tipc: Node identity 3285547d2184, cluster identity 4711 [ 919.976330][ T1249] tipc: Enabled bearer , priority 0 [ 920.045636][T21539] usb 3-1: USB disconnect, device number 4 [ 920.107049][ T5900] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 920.165347][ T1249] tipc: Resetting bearer [ 920.229656][ T5900] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 920.230044][ T1248] tipc: Disabling bearer [ 920.239929][ T5900] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 920.446955][ T5900] usb 1-1: USB disconnect, device number 44 [ 920.811167][ T1306] Cannot find add_set index 0 as target [ 920.852720][ T1307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3417'. [ 921.163843][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 921.373222][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 921.388776][ T5887] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 921.426110][ T5887] usb 3-1: config 0 has no interface number 0 [ 921.452207][ T5887] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 921.551223][ T5887] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 921.616321][ T5887] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 921.678919][ T5887] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 921.755171][ T5887] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 921.991706][ T5887] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 921.996199][ T599] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 922.020521][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.059159][ T599] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 922.081190][ T5887] usb 3-1: Product: syz [ 922.085482][ T5887] usb 3-1: Manufacturer: syz [ 922.119409][ T5887] usb 3-1: SerialNumber: syz [ 922.157015][ T5887] usb 3-1: config 0 descriptor?? [ 922.190058][ T599] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 922.252887][ T599] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 922.346020][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input87 [ 922.552383][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 922.552402][ T30] audit: type=1326 audit(1774294464.012:10436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 922.650227][ T30] audit: type=1326 audit(1774294464.052:10437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 922.673204][ T30] audit: type=1326 audit(1774294464.112:10438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 922.830547][ T30] audit: type=1326 audit(1774294464.112:10439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 922.908103][ T30] audit: type=1326 audit(1774294464.112:10440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 922.991587][ T30] audit: type=1326 audit(1774294464.112:10441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 923.058200][ T30] audit: type=1326 audit(1774294464.112:10442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 923.117172][ T30] audit: type=1326 audit(1774294464.112:10443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 923.204477][ T30] audit: type=1326 audit(1774294464.112:10444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 923.233090][ T30] audit: type=1326 audit(1774294464.112:10445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1355 comm="syz.0.3419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2cd9c799 code=0x7ffc0000 [ 923.321181][ T796] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 923.331529][ T10] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 923.349128][ T599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.444391][ T599] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.461581][ T10] usb 9-1: device descriptor read/64, error -71 [ 923.480910][T21318] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.488112][T21318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.498623][ T796] usb 1-1: config 0 has no interfaces? [ 923.515369][ T796] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 923.539538][T21344] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.546677][T21344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.561366][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.586499][ T796] usb 1-1: config 0 descriptor?? [ 923.726691][ T5880] usb 3-1: USB disconnect, device number 5 [ 923.727827][ T10] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 923.830388][ T599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.831249][ T1377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.881818][ T10] usb 9-1: device descriptor read/64, error -71 [ 923.914517][ T1377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.944921][ T5887] usb 1-1: USB disconnect, device number 45 [ 924.089563][ T1422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.148989][ T599] veth0_vlan: entered promiscuous mode [ 924.183385][ T10] usb usb9-port1: attempt power cycle [ 924.218387][ T599] veth1_vlan: entered promiscuous mode [ 924.345383][ T599] veth0_macvtap: entered promiscuous mode [ 924.432747][ T796] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 924.611702][ T10] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 924.621666][ T599] veth1_macvtap: entered promiscuous mode [ 924.647871][ T599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.660481][ T599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.838922][ T10] usb 9-1: device descriptor read/8, error -71 [ 924.847413][T21332] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.861303][ T796] usb 1-1: unable to get BOS descriptor or descriptor too short [ 924.900406][ T796] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 924.914489][ T796] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 924.939760][T21332] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.955181][ T796] usb 1-1: string descriptor 0 read error: -22 [ 924.962335][ T796] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 925.000144][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.035257][T21332] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.054416][T21332] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.091512][ T10] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 925.116952][ T10] usb 9-1: device descriptor read/8, error -71 [ 925.258179][ T10] usb usb9-port1: unable to enumerate USB device [ 925.265508][ T796] usb 1-1: Can't get UAC3 power state for id 10 [ 925.592636][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.600537][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.682499][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.692312][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.861410][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 925.900956][ T796] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 926.081358][ T10] usb 3-1: config 0 has no interfaces? [ 926.128766][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 926.161650][ T796] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 926.187170][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.415713][ T10] usb 3-1: Product: syz [ 926.438282][ T10] usb 3-1: Manufacturer: syz [ 926.461182][ T10] usb 3-1: SerialNumber: syz [ 926.501441][ T10] usb 3-1: config 0 descriptor?? [ 926.762579][ T1482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.771503][ T1482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.786422][ T1482] team_slave_0: entered promiscuous mode [ 926.792149][ T1482] team_slave_1: entered promiscuous mode [ 926.806019][ T1482] vlan2: entered promiscuous mode [ 926.820186][ T1482] team0: entered promiscuous mode [ 926.978505][T21539] usb 3-1: USB disconnect, device number 6 [ 927.213680][ T796] usb 1-1: USB disconnect, device number 46 [ 927.842162][ T1594] Cannot find add_set index 0 as target [ 928.435054][T21539] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 928.468366][ T1612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3433'. [ 928.638047][T21539] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.679507][T21539] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 928.710055][T21539] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.772002][T21539] usb 7-1: config 0 descriptor?? [ 928.859130][ T1630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.896410][ T796] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 929.085277][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 929.170530][ T796] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 929.170562][ T796] usb 3-1: config 0 has no interface number 0 [ 929.170599][ T796] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 929.170621][ T796] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 929.170648][ T796] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 929.170674][ T796] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 929.170700][ T796] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 929.196930][T21539] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 929.244741][ T796] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 929.244775][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.244795][ T796] usb 3-1: Product: syz [ 929.244810][ T796] usb 3-1: Manufacturer: syz [ 929.244827][ T796] usb 3-1: SerialNumber: syz [ 929.249452][T21539] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0033/input/input88 [ 929.275457][ T796] usb 3-1: config 0 descriptor?? [ 929.287231][ T796] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input89 [ 929.382482][T21539] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 929.778891][ T796] usb 7-1: USB disconnect, device number 22 [ 929.954817][ T1685] fido_id[1685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 930.341255][ T5880] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 930.541258][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 930.543668][ T5880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 930.544629][ T5880] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 930.544653][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.546422][ T5880] usb 5-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 930.546443][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.546454][ T5880] usb 5-1: Product: syz [ 930.546463][ T5880] usb 5-1: Manufacturer: syz [ 930.546471][ T5880] usb 5-1: SerialNumber: syz [ 930.818133][ T5900] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 931.132039][ T5900] usb 7-1: Using ep0 maxpacket: 16 [ 931.181256][ T5900] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 931.189925][ T5900] usb 7-1: config 1 has no interface number 0 [ 931.207853][ T5900] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 931.267433][ T5900] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 931.362972][ T5900] usb 7-1: config 1 interface 105 has no altsetting 0 [ 931.409130][ T5900] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 931.437871][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 931.479043][ T5900] usb 7-1: Product: syz [ 931.501191][ T5900] usb 7-1: Manufacturer: syz [ 931.605060][ T5900] usb 7-1: SerialNumber: syz [ 931.648323][ T24] usb 3-1: USB disconnect, device number 7 [ 931.660284][ T1729] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 931.668497][ T1729] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 931.740010][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.746437][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.072095][T21539] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 932.192475][ T1783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3442'. [ 932.238053][ T1783] vlan2: entered allmulticast mode [ 932.249173][ T1783] dummy0: entered allmulticast mode [ 932.250187][ T1785] netlink: 'syz.0.3442': attribute type 10 has an invalid length. [ 932.254925][ T1783] bridge0: port 3(vlan2) entered blocking state [ 932.271450][ T1783] bridge0: port 3(vlan2) entered disabled state [ 932.280403][ T1783] vlan2: entered promiscuous mode [ 932.285659][ T1783] dummy0: entered promiscuous mode [ 932.292734][T21539] usb 9-1: Using ep0 maxpacket: 16 [ 932.301244][T21539] usb 9-1: unable to get BOS descriptor set [ 932.322898][T21539] usb 9-1: config 127 has an invalid interface number: 124 but max is 0 [ 932.348227][T21539] usb 9-1: config 127 has no interface number 0 [ 932.372024][ T5880] usb 5-1: invalid UAC_HEADER (v1) [ 932.401401][ T1793] netlink: 'syz.0.3442': attribute type 10 has an invalid length. [ 932.422220][T21539] usb 9-1: config 127 interface 124 has no altsetting 0 [ 932.469411][T21539] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 932.504467][T21539] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.549640][T21539] usb 9-1: Product: syz [ 932.561945][T21539] usb 9-1: Manufacturer: syz [ 932.580156][ T1793] bridge0: port 3(vlan2) entered blocking state [ 932.587057][ T1793] bridge0: port 3(vlan2) entered forwarding state [ 932.599252][T21539] usb 9-1: SerialNumber: syz [ 932.603022][ T1793] team0: Port device dummy0 added [ 932.617138][ T5880] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 932.638371][ T5880] snd_usb_pod 5-1:1.0: Line 6 PODxt Live found [ 932.645147][ T5880] usb 5-1: selecting invalid altsetting 1 [ 932.657513][ T1785] bridge0: port 3(vlan2) entered disabled state [ 932.664338][ T5880] snd_usb_pod 5-1:1.0: set_interface failed [ 932.670631][ T5880] snd_usb_pod 5-1:1.0: Line 6 PODxt Live now disconnected [ 932.678889][ T5880] snd_usb_pod 5-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 932.721833][ T5880] usb 5-1: USB disconnect, device number 45 [ 932.768314][T18972] udevd[18972]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.886832][ T1822] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3444'. [ 933.051176][ T5880] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 933.225434][ T5880] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 933.234969][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.243088][ T5880] usb 5-1: Product: syz [ 933.247640][ T5880] usb 5-1: Manufacturer: syz [ 933.253088][ T5880] usb 5-1: SerialNumber: syz [ 933.471228][T21539] usb 9-1: reset high-speed USB device number 81 using dummy_hcd [ 933.527508][ T5900] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 933.552682][ T5900] usb 7-1: USB disconnect, device number 23 [ 933.611364][T21539] usb 9-1: device descriptor read/64, error -71 [ 933.681194][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 933.693895][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 933.815054][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 933.841275][ T1840] fuse: Invalid uid '00000000000000000006' [ 933.941871][T21539] usb 9-1: reset high-speed USB device number 81 using dummy_hcd [ 934.091255][T21539] usb 9-1: device descriptor read/64, error -71 [ 934.311192][ T5887] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 934.331314][T21539] usb 9-1: reset high-speed USB device number 81 using dummy_hcd [ 934.351744][T21539] usb 9-1: device descriptor read/8, error -71 [ 934.541553][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 934.563290][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.591146][ T5887] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 934.610310][ T5887] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 934.622098][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.630277][ T5887] usb 3-1: Product: syz [ 934.638056][ T5887] usb 3-1: Manufacturer: syz [ 934.643389][ T5887] usb 3-1: SerialNumber: syz [ 934.654489][ T5887] usb 3-1: config 0 descriptor?? [ 934.671190][T21539] usb 9-1: reset high-speed USB device number 81 using dummy_hcd [ 934.692927][T21539] usb 9-1: device descriptor read/8, error -71 [ 934.811394][T21539] usb 9-1: USB disconnect, device number 81 [ 934.939631][ T1868] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3448'. [ 935.261249][T21332] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.272699][T21323] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.292539][T21323] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.307932][T21323] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.371258][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 935.384174][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 935.398134][ T5880] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 935.413215][ T5880] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 935.431933][ T5880] usb 5-1: USB disconnect, device number 46 [ 935.510505][ T1891] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3450'. [ 935.917332][ T1902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3451'. [ 936.198514][ T1913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.222636][ T796] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 936.391313][ T796] usb 9-1: Using ep0 maxpacket: 32 [ 936.415063][ T796] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 936.442143][ T796] usb 9-1: config 0 has no interface number 0 [ 936.448300][ T796] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 936.544729][ T1934] loop5: detected capacity change from 0 to 7 [ 936.562376][ T1934] Dev loop5: unable to read RDB block 7 [ 936.570494][ T796] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 936.591223][ T1934] loop5: unable to read partition table [ 936.602613][ T796] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 936.642363][ T796] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 936.651210][ T5880] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 936.661323][ T1934] loop5: partition table beyond EOD, truncated [ 936.671449][ T796] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 936.693382][ T1934] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 936.710665][ T796] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 936.724560][ T796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.773892][ T796] usb 9-1: Product: syz [ 936.778391][ T796] usb 9-1: Manufacturer: syz [ 936.789852][ T796] usb 9-1: SerialNumber: syz [ 936.802679][ T796] usb 9-1: config 0 descriptor?? [ 936.813593][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.843356][ T5880] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 936.851159][ T796] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input90 [ 936.868899][T21539] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 936.903895][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 936.920269][ T5880] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 936.929988][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.953018][ T5880] usb 5-1: config 0 descriptor?? [ 937.007914][ T1959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.062942][T21539] usb 7-1: config 0 has an invalid interface number: 5 but max is 0 [ 937.085134][T21539] usb 7-1: config 0 has no interface number 0 [ 937.113008][T21539] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 937.128752][ T5880] usb 3-1: USB disconnect, device number 8 [ 937.143417][T21539] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.173951][T21539] usb 7-1: config 0 descriptor?? [ 937.439927][T21539] usb 7-1: string descriptor 0 read error: -71 [ 937.448852][T21539] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 937.461987][T21539] usb 7-1: USB disconnect, device number 24 [ 937.571475][ T5880] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 937.735590][ T5880] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 937.750913][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.768530][ T5880] usb 3-1: Product: syz [ 937.778699][ T5880] usb 3-1: Manufacturer: syz [ 937.851237][ T5880] usb 3-1: SerialNumber: syz [ 938.377781][ T5880] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 938.394274][ T5880] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 939.027467][ T1974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.039140][ T1974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.068072][ T5880] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 939.088845][ T5880] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 939.106543][ T5887] usb 5-1: USB disconnect, device number 47 [ 939.124508][ T2022] syzkaller0: entered promiscuous mode [ 939.133140][ T5880] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 939.151887][ T2022] syzkaller0: entered allmulticast mode [ 939.160329][ T5880] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 939.239611][ T5880] usb 9-1: USB disconnect, device number 83 [ 939.605931][ T2066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 939.619311][ T2063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3468'. [ 939.630970][ T2063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 940.157941][ T2073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.174037][ T2073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.122725][ T2100] @ÿ: renamed from bond_slave_0 (while UP) [ 941.311487][ T2106] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3477'. [ 941.385504][ T2100] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3476'. [ 941.652308][ T5880] usb 3-1: USB disconnect, device number 9 [ 941.862992][ T2122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3478'. [ 941.935792][ T2125] netem: change failed [ 942.299994][ T2134] syzkaller0: entered promiscuous mode [ 942.320679][ T2134] syzkaller0: entered allmulticast mode [ 942.351199][ T5887] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 942.545515][ T5887] usb 7-1: Using ep0 maxpacket: 32 [ 942.589450][ T5887] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 942.597773][ T5887] usb 7-1: config 0 has no interface number 0 [ 942.665651][ T5887] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 942.741282][ T5887] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 943.022191][ T5887] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 943.061273][ T5887] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 943.178570][ T5887] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 943.541266][ T5887] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 943.550522][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.558738][ T5887] usb 7-1: Product: syz [ 943.568119][ T5887] usb 7-1: Manufacturer: syz [ 943.573249][ T5887] usb 7-1: SerialNumber: syz [ 943.644687][ T5887] usb 7-1: config 0 descriptor?? [ 943.666326][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input91 [ 943.871281][ T5887] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 944.071217][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 944.083516][ T5887] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 944.093936][ T5887] usb 3-1: config 0 has no interface number 0 [ 944.110254][ T5887] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 944.124413][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.135162][ T5887] usb 3-1: Product: syz [ 944.139438][ T5887] usb 3-1: Manufacturer: syz [ 944.146000][ T5887] usb 3-1: SerialNumber: syz [ 944.152791][ T2175] loop5: detected capacity change from 0 to 7 [ 944.163902][ T5887] usb 3-1: config 0 descriptor?? [ 944.204414][ T2175] Dev loop5: unable to read RDB block 7 [ 944.231672][ T2175] loop5: unable to read partition table [ 944.238782][ T2175] loop5: partition table beyond EOD, truncated [ 944.253719][ T2175] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 944.401534][ T5887] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 944.418298][ T5887] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 944.444574][ T5887] usb 3-1: USB disconnect, device number 10 [ 944.807919][ T2217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.841438][ T5887] usb 9-1: new full-speed USB device number 84 using dummy_hcd [ 944.902081][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 944.964884][T21539] usb 7-1: USB disconnect, device number 25 [ 945.085164][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 945.095060][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 945.107246][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.139842][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.157179][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.210871][ T5887] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 945.225737][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 945.308657][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.342129][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.377917][ T5887] usb 9-1: config 0 descriptor?? [ 945.398173][ T24] usb 5-1: config 0 descriptor?? [ 945.866754][ T24] savu 0003:1E7D:2D5A.0034: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 946.134856][ T5900] usb 5-1: USB disconnect, device number 48 [ 946.267726][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 946.267746][ T30] audit: type=1326 audit(1774294487.762:10534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 946.300127][ T30] audit: type=1326 audit(1774294487.762:10535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 946.326086][ T30] audit: type=1326 audit(1774294487.762:10536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 946.417832][ T2282] fido_id[2282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 946.439518][ T30] audit: type=1326 audit(1774294487.762:10537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 946.501162][ T30] audit: type=1326 audit(1774294487.762:10538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 946.604843][ T30] audit: type=1326 audit(1774294487.762:10539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 946.711519][ T30] audit: type=1326 audit(1774294487.762:10540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 946.752302][ T30] audit: type=1326 audit(1774294487.762:10541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 946.785349][ T30] audit: type=1326 audit(1774294487.762:10542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 946.822002][ T30] audit: type=1326 audit(1774294487.762:10543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2288 comm="syz.6.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 947.483689][ T2315] loop5: detected capacity change from 0 to 7 [ 947.508348][ T2315] Dev loop5: unable to read RDB block 7 [ 947.529461][ T2315] loop5: unable to read partition table [ 947.554745][ T2315] loop5: partition table beyond EOD, truncated [ 947.585238][ T2315] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 947.763133][ T5887] cp2112 0003:10C4:EA90.0035: item fetching failed at offset 5/7 [ 947.785556][ T5887] cp2112 0003:10C4:EA90.0035: parse failed [ 947.837091][ T5887] cp2112 0003:10C4:EA90.0035: probe with driver cp2112 failed with error -22 [ 948.241652][ T5907] usb 9-1: USB disconnect, device number 84 [ 949.538641][ T2369] loop6: detected capacity change from 0 to 2640 [ 949.545708][ T2369] buffer_io_error: 25 callbacks suppressed [ 949.545721][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.561007][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.570136][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.706981][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.749138][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.770466][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.798134][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 949.975769][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.033956][ T2369] ldm_validate_partition_table(): Disk read failed. [ 950.103993][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.124697][ T2369] Buffer I/O error on dev loop6, logical block 0, async page read [ 950.135015][ T2369] Dev loop6: unable to read RDB block 0 [ 950.221356][ T2369] loop6: unable to read partition table [ 950.276083][ T2369] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 950.642291][ T2391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 950.672406][ T2391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 950.718892][ T2397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 951.730851][ T2439] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 952.028847][ T5900] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 952.223384][ T2477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 952.451958][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 952.462542][ T5900] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 952.501494][ T5900] usb 5-1: config 0 interface 0 has no altsetting 0 [ 952.519970][ T5900] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 952.547962][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.583276][ T5900] usb 5-1: config 0 descriptor?? [ 952.932168][ T5900] corsair-cpro 0003:1B1C:0C10.0036: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 952.952679][ T5907] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 953.521962][ T5900] corsair-cpro 0003:1B1C:0C10.0036: probe with driver corsair-cpro failed with error -110 [ 953.581346][ T5900] usb 5-1: USB disconnect, device number 49 [ 954.690136][ T2649] netlink: 'syz.8.3522': attribute type 2 has an invalid length. [ 954.716120][ T2649] : entered promiscuous mode [ 954.787662][ T2649] netlink: 'syz.8.3522': attribute type 2 has an invalid length. [ 954.796253][ T2649] : left promiscuous mode [ 954.832312][ T2642] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3521'. [ 955.968892][ T2685] netlink: 304 bytes leftover after parsing attributes in process `syz.8.3525'. [ 956.077396][ T2691] binder: BINDER_SET_CONTEXT_MGR already set [ 956.084489][ T2691] binder: 2678:2691 ioctl 4018620d 200000000040 returned -16 [ 956.552796][ T2696] syzkaller0: entered promiscuous mode [ 956.558395][ T2696] syzkaller0: entered allmulticast mode [ 956.677118][ T2681] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 957.451629][ T796] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 957.611177][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 957.617807][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 208, changing to 7 [ 957.635499][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 18189, setting to 1024 [ 957.666860][ T796] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 957.688940][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.715614][ T796] usb 1-1: Product: syz [ 957.727626][ T796] usb 1-1: Manufacturer: syz [ 957.737552][ T796] usb 1-1: SerialNumber: syz [ 957.755270][ T796] usb 1-1: config 0 descriptor?? [ 957.784776][ T796] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 957.978691][T21318] usb 1-1: Failed to submit usb control message: -71 [ 957.986720][ T5900] usb 1-1: USB disconnect, device number 47 [ 957.994908][T21318] usb 1-1: unable to send the bmi data to the device: -71 [ 958.011250][ T796] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 958.022660][T21318] usb 1-1: unable to get target info from device [ 958.036122][T21318] usb 1-1: could not get target info (-71) [ 958.045362][T21318] usb 1-1: could not probe fw (-71) [ 958.102348][ T5907] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 958.193840][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 958.208114][ T796] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 958.222307][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.235998][ T796] usb 3-1: Product: syz [ 958.249692][ T796] usb 3-1: Manufacturer: syz [ 958.258642][ T796] usb 3-1: SerialNumber: syz [ 958.273822][ T796] usb 3-1: config 0 descriptor?? [ 958.286060][ T5907] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 958.304557][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.324756][ T5907] usb 5-1: Product: syz [ 958.332617][ T5907] usb 5-1: Manufacturer: syz [ 958.338818][ T5907] usb 5-1: SerialNumber: syz [ 958.348371][ T5907] usb 5-1: config 0 descriptor?? [ 958.358936][ T5907] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 958.504090][ T796] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 958.628374][ T2842] syzkaller0: entered promiscuous mode [ 958.665338][ T2842] syzkaller0: entered allmulticast mode [ 958.981426][ T2785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.996611][ T2785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.009797][ T5907] gspca_stk1135: reg_w 0x3 err -71 [ 959.019467][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 959.031394][ T5907] gspca_stk1135: Sensor write failed [ 959.036778][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 959.044490][ T5907] gspca_stk1135: Sensor write failed [ 959.049958][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 959.062367][ T5900] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 959.070315][ T5907] gspca_stk1135: Sensor read failed [ 959.077987][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 959.085340][ T5907] gspca_stk1135: Sensor read failed [ 959.090868][ T5907] gspca_stk1135: Detected sensor type unknown (0x0) [ 959.107151][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 959.117292][ T5907] gspca_stk1135: Sensor read failed [ 959.127459][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 959.137542][ T5907] gspca_stk1135: Sensor read failed [ 959.150490][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 959.262044][ T5907] gspca_stk1135: Sensor write failed [ 959.272928][ T5900] usb 9-1: Using ep0 maxpacket: 32 [ 959.280941][ T5900] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 959.289405][ T5900] usb 9-1: config 0 has no interface number 0 [ 959.296810][ T5900] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 959.307261][ T5900] usb 9-1: config 0 interface 89 has no altsetting 0 [ 959.314366][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 959.321422][ T5907] gspca_stk1135: Sensor write failed [ 959.327107][ T5907] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 959.338214][ T5900] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 959.347801][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.356604][ T5900] usb 9-1: Product: syz [ 959.362264][ T5900] usb 9-1: Manufacturer: syz [ 959.370473][ T5907] usb 5-1: USB disconnect, device number 50 [ 959.379515][ T5900] usb 9-1: SerialNumber: syz [ 959.405237][ T5900] usb 9-1: config 0 descriptor?? [ 959.423171][ T5900] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 959.434213][ T5900] em28xx 9-1:0.89: Video interface 89 found: [ 959.483180][ T24] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 959.667504][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.683864][ T24] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 959.719344][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 959.746866][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 959.762303][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 959.789200][ T24] usb 1-1: Product: syz [ 959.798334][ T24] usb 1-1: Manufacturer: syz [ 959.811859][ T24] usb 1-1: SerialNumber: syz [ 959.822522][ T24] usb 1-1: config 0 descriptor?? [ 959.895003][ T24] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 960.038824][ T2868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.050817][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.073023][ T5907] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 960.073485][ T2868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.140007][ T796] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 960.153789][ T10] usb 1-1: USB disconnect, device number 48 [ 960.165783][ T2868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.176997][ T2868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.205002][ T796] usb 3-1: USB disconnect, device number 11 [ 960.221223][ T5907] usb 5-1: device descriptor read/64, error -71 [ 960.464067][ T5907] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 960.611286][ T5907] usb 5-1: device descriptor read/64, error -71 [ 960.780178][ T5907] usb usb5-port1: attempt power cycle [ 960.787149][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 960.787165][ T30] audit: type=1326 audit(1774294502.222:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 960.908536][ T30] audit: type=1326 audit(1774294502.222:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 960.931942][ T5900] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 961.085677][ T2959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3550'. [ 961.133378][ T5907] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 961.161801][ T5907] usb 5-1: device descriptor read/8, error -71 [ 961.168289][ T30] audit: type=1326 audit(1774294502.222:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 961.236309][ T5900] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 961.294024][ T5900] em28xx 9-1:0.89: board has no eeprom [ 961.300093][ T30] audit: type=1326 audit(1774294502.222:10557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 961.356422][ T5900] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 961.357439][ T30] audit: type=1326 audit(1774294502.222:10558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 961.401396][ T30] audit: type=1326 audit(1774294502.222:10559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 961.411332][ T5907] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 961.477114][ T5900] em28xx 9-1:0.89: analog set to bulk mode. [ 961.477282][ T30] audit: type=1326 audit(1774294502.222:10560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 961.509766][ T30] audit: type=1326 audit(1774294502.222:10561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 961.574792][ T10] em28xx 9-1:0.89: Registering V4L2 extension [ 961.588588][ T2983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.602018][ T2983] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 961.618855][ T5907] usb 5-1: device descriptor read/8, error -71 [ 961.622732][ T30] audit: type=1326 audit(1774294502.232:10562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 961.647735][ T796] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 961.734630][ T10] em28xx 9-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 961.736250][ T30] audit: type=1326 audit(1774294502.232:10563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2947 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9819c799 code=0x7ffc0000 [ 961.782486][ T5907] usb usb5-port1: unable to enumerate USB device [ 961.821428][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 961.829416][ T5887] usb 9-1: USB disconnect, device number 86 [ 961.830467][ T10] em28xx 9-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 961.914175][ T796] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 961.935715][ T5887] em28xx 9-1:0.89: Disconnecting em28xx [ 961.939103][ T10] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 961.948611][ T796] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 961.970776][ T10] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 961.981647][ T796] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 962.001173][ T10] em28xx 9-1:0.89: No AC97 audio processor [ 962.152202][ T796] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 962.172271][ T10] usb 9-1: Decoder not found [ 962.270988][ T10] em28xx 9-1:0.89: failed to create media graph [ 962.280924][ T10] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 962.499071][ T796] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 962.530481][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.560120][ T796] usb 1-1: Product: syz [ 962.568247][ T10] em28xx 9-1:0.89: Registering snapshot button... [ 962.569303][ T3026] ================================================================== [ 962.581216][ T796] usb 1-1: Manufacturer: syz [ 962.583017][ T3026] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 962.591800][ T796] usb 1-1: SerialNumber: syz [ 962.594942][ T3026] Read of size 8 at addr ffff88807fd88790 by task v4l_id/3026 [ 962.602105][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input93 [ 962.606954][ T3026] [ 962.606970][ T3026] CPU: 1 UID: 0 PID: 3026 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 962.606994][ T3026] Tainted: [L]=SOFTLOCKUP [ 962.607001][ T3026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 962.607014][ T3026] Call Trace: [ 962.607023][ T3026] [ 962.607031][ T3026] dump_stack_lvl+0xe8/0x150 [ 962.607059][ T3026] print_report+0xba/0x230 [ 962.607081][ T3026] ? v4l2_fh_open+0xac/0x420 [ 962.607103][ T3026] kasan_report+0x117/0x150 [ 962.607126][ T3026] ? v4l2_fh_open+0xac/0x420 [ 962.607151][ T3026] v4l2_fh_open+0xac/0x420 [ 962.607174][ T3026] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 962.607199][ T3026] em28xx_v4l2_open+0x157/0x9a0 [ 962.607217][ T3026] ? do_raw_spin_lock+0x12b/0x2f0 [ 962.607239][ T3026] v4l2_open+0x1bf/0x3a0 [ 962.607265][ T3026] chrdev_open+0x4cd/0x5e0 [ 962.607288][ T3026] ? __pfx_chrdev_open+0x10/0x10 [ 962.607309][ T3026] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 962.607330][ T3026] ? __pfx_chrdev_open+0x10/0x10 [ 962.607350][ T3026] do_dentry_open+0x785/0x14e0 [ 962.607380][ T3026] vfs_open+0x3b/0x340 [ 962.607402][ T3026] ? path_openat+0x2df0/0x3860 [ 962.607422][ T3026] path_openat+0x2e08/0x3860 [ 962.607447][ T3026] ? __pfx_stack_trace_save+0x10/0x10 [ 962.607466][ T3026] ? stack_depot_save_flags+0x33/0x810 [ 962.607494][ T3026] ? __pfx_path_openat+0x10/0x10 [ 962.607511][ T3026] ? __x64_sys_openat+0x138/0x170 [ 962.607534][ T3026] ? do_syscall_64+0x14d/0xf80 [ 962.607551][ T3026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.607572][ T3026] ? __lock_acquire+0x6b5/0x2cf0 [ 962.607596][ T3026] do_file_open+0x23e/0x4a0 [ 962.607616][ T3026] ? __pfx_do_file_open+0x10/0x10 [ 962.607649][ T3026] ? _raw_spin_unlock+0x28/0x50 [ 962.607665][ T3026] ? alloc_fd+0x64b/0x6c0 [ 962.607692][ T3026] do_sys_openat2+0x113/0x200 [ 962.607716][ T3026] ? __pfx_do_sys_openat2+0x10/0x10 [ 962.607739][ T3026] ? exc_page_fault+0x6a/0xc0 [ 962.607759][ T3026] ? do_user_addr_fault+0xc6f/0x1340 [ 962.607782][ T3026] __x64_sys_openat+0x138/0x170 [ 962.607807][ T3026] do_syscall_64+0x14d/0xf80 [ 962.607825][ T3026] ? trace_irq_disable+0x3b/0x150 [ 962.607849][ T3026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.607866][ T3026] ? clear_bhb_loop+0x40/0x90 [ 962.607884][ T3026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.607902][ T3026] RIP: 0033:0x7efd43ca7407 [ 962.607920][ T3026] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 962.607934][ T3026] RSP: 002b:00007fff31c0ba60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 962.607954][ T3026] RAX: ffffffffffffffda RBX: 00007efd4449c880 RCX: 00007efd43ca7407 [ 962.607967][ T3026] RDX: 0000000000000000 RSI: 00007fff31c0bf1c RDI: ffffffffffffff9c [ 962.607979][ T3026] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 962.607990][ T3026] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 962.608001][ T3026] R13: 00007fff31c0bcb0 R14: 00007efd44603000 R15: 0000555ec16794d8 [ 962.608021][ T3026] [ 962.608027][ T3026] [ 962.769703][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 962.773689][ T3026] Allocated by task 10: [ 962.773705][ T3026] kasan_save_track+0x3e/0x80 [ 962.783971][ T796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input94 [ 962.788305][ T3026] __kasan_kmalloc+0x93/0xb0 [ 962.788337][ T3026] __kmalloc_cache_noprof+0x31c/0x660 [ 962.788354][ T3026] em28xx_v4l2_init+0x10b/0x2e70 [ 962.964051][ T3026] em28xx_init_extension+0x120/0x1c0 [ 962.969327][ T3026] process_scheduled_works+0xb6e/0x18c0 [ 962.974885][ T3026] worker_thread+0xa53/0xfc0 [ 962.979473][ T3026] kthread+0x388/0x470 [ 962.983541][ T3026] ret_from_fork+0x51e/0xb90 [ 962.988143][ T3026] ret_from_fork_asm+0x1a/0x30 [ 962.992897][ T3026] [ 962.995203][ T3026] Freed by task 10: [ 962.998991][ T3026] kasan_save_track+0x3e/0x80 [ 963.003758][ T3026] kasan_save_free_info+0x46/0x50 [ 963.008783][ T3026] __kasan_slab_free+0x5c/0x80 [ 963.013532][ T3026] kfree+0x1c1/0x630 [ 963.017586][ T3026] em28xx_v4l2_init+0x1683/0x2e70 [ 963.022696][ T3026] em28xx_init_extension+0x120/0x1c0 [ 963.027968][ T3026] process_scheduled_works+0xb6e/0x18c0 [ 963.033531][ T3026] worker_thread+0xa53/0xfc0 [ 963.038210][ T3026] kthread+0x388/0x470 [ 963.042262][ T3026] ret_from_fork+0x51e/0xb90 [ 963.046843][ T3026] ret_from_fork_asm+0x1a/0x30 [ 963.051617][ T3026] [ 963.053924][ T3026] The buggy address belongs to the object at ffff88807fd88000 [ 963.053924][ T3026] which belongs to the cache kmalloc-8k of size 8192 [ 963.068222][ T3026] The buggy address is located 1936 bytes inside of [ 963.068222][ T3026] freed 8192-byte region [ffff88807fd88000, ffff88807fd8a000) [ 963.082443][ T3026] [ 963.084861][ T3026] The buggy address belongs to the physical page: [ 963.091373][ T3026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fd88 [ 963.100146][ T3026] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 963.108631][ T3026] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 963.116189][ T3026] page_type: f5(slab) [ 963.120162][ T3026] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 963.128728][ T3026] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 963.137305][ T3026] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 963.146044][ T3026] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 963.154700][ T3026] head: 00fff00000000003 ffffea0001ff6201 00000000ffffffff 00000000ffffffff [ 963.163363][ T3026] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 963.172018][ T3026] page dumped because: kasan: bad access detected [ 963.178427][ T3026] page_owner tracks the page as allocated [ 963.184141][ T3026] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27070, tgid 27063 (syz.8.2877), ts 757841744613, free_ts 752273786770 [ 963.205744][ T3026] post_alloc_hook+0x231/0x280 [ 963.210528][ T3026] get_page_from_freelist+0x24dc/0x2580 [ 963.216053][ T3026] __alloc_frozen_pages_noprof+0x18d/0x380 [ 963.221838][ T3026] allocate_slab+0x77/0x660 [ 963.226317][ T3026] refill_objects+0x331/0x3c0 [ 963.230966][ T3026] __pcs_replace_empty_main+0x2e6/0x730 [ 963.236491][ T3026] __kmalloc_noprof+0x474/0x760 [ 963.241319][ T3026] cache_create_net+0x98/0x230 [ 963.246257][ T3026] gss_svc_init_net+0x58/0x570 [ 963.251130][ T3026] ops_init+0x35c/0x5c0 [ 963.255288][ T3026] setup_net+0x118/0x340 [ 963.259520][ T3026] copy_net_ns+0x50e/0x730 [ 963.264103][ T3026] create_new_namespaces+0x3e7/0x6a0 [ 963.269399][ T3026] unshare_nsproxy_namespaces+0x11a/0x160 [ 963.275125][ T3026] ksys_unshare+0x51d/0x930 [ 963.279713][ T3026] __x64_sys_unshare+0x38/0x50 [ 963.284462][ T3026] page last free pid 5838 tgid 5838 stack trace: [ 963.290788][ T3026] __free_frozen_pages+0xc2b/0xdb0 [ 963.295892][ T3026] __slab_free+0x263/0x2b0 [ 963.300480][ T3026] qlist_free_all+0x97/0x100 [ 963.305050][ T3026] kasan_quarantine_reduce+0x148/0x160 [ 963.310490][ T3026] __kasan_slab_alloc+0x22/0x80 [ 963.315316][ T3026] __kmalloc_noprof+0x316/0x760 [ 963.320141][ T3026] tomoyo_encode+0x28b/0x550 [ 963.324739][ T3026] tomoyo_realpath_from_path+0x58d/0x5d0 [ 963.330352][ T3026] tomoyo_path_perm+0x283/0x560 [ 963.335179][ T3026] security_inode_getattr+0x12b/0x310 [ 963.340528][ T3026] vfs_getattr+0x23/0x70 [ 963.344748][ T3026] vfs_statx_path+0x2b/0x230 [ 963.349318][ T3026] vfs_statx+0x12e/0x200 [ 963.353552][ T3026] vfs_fstatat+0x11b/0x170 [ 963.357963][ T3026] __x64_sys_newfstatat+0x151/0x200 [ 963.363261][ T3026] do_syscall_64+0x14d/0xf80 [ 963.367830][ T3026] [ 963.370133][ T3026] Memory state around the buggy address: [ 963.375754][ T3026] ffff88807fd88680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 963.383885][ T3026] ffff88807fd88700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 963.391957][ T3026] >ffff88807fd88780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 963.400010][ T3026] ^ [ 963.404582][ T3026] ffff88807fd88800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 963.412642][ T3026] ffff88807fd88880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 963.420789][ T3026] ================================================================== [ 963.432814][ T10] em28xx 9-1:0.89: Remote control support is not available for this card. [ 963.558064][ T5887] em28xx 9-1:0.89: Closing input extension [ 963.581713][ T5887] em28xx 9-1:0.89: Deregistering snapshot button [ 963.666515][ T3042] syzkaller0: entered promiscuous mode [ 963.672415][ T3042] syzkaller0: entered allmulticast mode [ 963.688081][ T3026] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 963.695421][ T3026] CPU: 1 UID: 0 PID: 3026 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 963.706013][ T3026] Tainted: [L]=SOFTLOCKUP [ 963.710331][ T3026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 963.720466][ T3026] Call Trace: [ 963.723749][ T3026] [ 963.726678][ T3026] vpanic+0x56c/0xa60 [ 963.730655][ T3026] ? __pfx_vpanic+0x10/0x10 [ 963.735175][ T3026] panic+0xc5/0xd0 [ 963.738883][ T3026] ? __pfx_panic+0x10/0x10 [ 963.743288][ T3026] ? preempt_schedule_thunk+0x16/0x30 [ 963.748917][ T3026] ? preempt_schedule_thunk+0x16/0x30 [ 963.754297][ T3026] ? v4l2_fh_open+0xac/0x420 [ 963.758924][ T3026] check_panic_on_warn+0x89/0xb0 [ 963.763922][ T3026] ? v4l2_fh_open+0xac/0x420 [ 963.768505][ T3026] end_report+0x73/0x180 [ 963.772741][ T3026] ? v4l2_fh_open+0xac/0x420 [ 963.777324][ T3026] kasan_report+0x128/0x150 [ 963.781831][ T3026] ? v4l2_fh_open+0xac/0x420 [ 963.786466][ T3026] v4l2_fh_open+0xac/0x420 [ 963.790871][ T3026] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 963.796841][ T3026] em28xx_v4l2_open+0x157/0x9a0 [ 963.801765][ T3026] ? do_raw_spin_lock+0x12b/0x2f0 [ 963.806808][ T3026] v4l2_open+0x1bf/0x3a0 [ 963.811041][ T3026] chrdev_open+0x4cd/0x5e0 [ 963.815560][ T3026] ? __pfx_chrdev_open+0x10/0x10 [ 963.820488][ T3026] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 963.826802][ T3026] ? __pfx_chrdev_open+0x10/0x10 [ 963.831816][ T3026] do_dentry_open+0x785/0x14e0 [ 963.836595][ T3026] vfs_open+0x3b/0x340 [ 963.840649][ T3026] ? path_openat+0x2df0/0x3860 [ 963.845424][ T3026] path_openat+0x2e08/0x3860 [ 963.850004][ T3026] ? __pfx_stack_trace_save+0x10/0x10 [ 963.855363][ T3026] ? stack_depot_save_flags+0x33/0x810 [ 963.860826][ T3026] ? __pfx_path_openat+0x10/0x10 [ 963.865855][ T3026] ? __x64_sys_openat+0x138/0x170 [ 963.871060][ T3026] ? do_syscall_64+0x14d/0xf80 [ 963.875818][ T3026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.881884][ T3026] ? __lock_acquire+0x6b5/0x2cf0 [ 963.886925][ T3026] do_file_open+0x23e/0x4a0 [ 963.891512][ T3026] ? __pfx_do_file_open+0x10/0x10 [ 963.896627][ T3026] ? _raw_spin_unlock+0x28/0x50 [ 963.901470][ T3026] ? alloc_fd+0x64b/0x6c0 [ 963.905796][ T3026] do_sys_openat2+0x113/0x200 [ 963.910569][ T3026] ? __pfx_do_sys_openat2+0x10/0x10 [ 963.915780][ T3026] ? exc_page_fault+0x6a/0xc0 [ 963.920471][ T3026] ? do_user_addr_fault+0xc6f/0x1340 [ 963.926021][ T3026] __x64_sys_openat+0x138/0x170 [ 963.930882][ T3026] do_syscall_64+0x14d/0xf80 [ 963.935493][ T3026] ? trace_irq_disable+0x3b/0x150 [ 963.940587][ T3026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.946642][ T3026] ? clear_bhb_loop+0x40/0x90 [ 963.951311][ T3026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.957188][ T3026] RIP: 0033:0x7efd43ca7407 [ 963.961597][ T3026] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 963.981193][ T3026] RSP: 002b:00007fff31c0ba60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 963.989684][ T3026] RAX: ffffffffffffffda RBX: 00007efd4449c880 RCX: 00007efd43ca7407 [ 963.997653][ T3026] RDX: 0000000000000000 RSI: 00007fff31c0bf1c RDI: ffffffffffffff9c [ 964.005616][ T3026] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 964.013574][ T3026] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 964.021529][ T3026] R13: 00007fff31c0bcb0 R14: 00007efd44603000 R15: 0000555ec16794d8 [ 964.029501][ T3026] [ 964.032876][ T3026] Kernel Offset: disabled [ 964.037183][ T3026] Rebooting in 86400 seconds..