last executing test programs: 17m34.142936672s ago: executing program 3 (id=2098): futex(&(0x7f0000000080)=0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000000c0)) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r3 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x200, 0xff7fffff, 0x118}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3e, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000048"]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r8, r11) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000440)={r10, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000140)={r10, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r10, @in6={{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf}}}, 0x84) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) futex(&(0x7f000000cffc)=0x2, 0xb7e054f5a498cd7d, 0x0, 0x0, &(0x7f0000000000), 0x0) clock_settime(0x4, &(0x7f0000000040)) 17m33.901560298s ago: executing program 3 (id=2102): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) pipe2(&(0x7f0000000040), 0x0) openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x6, 0x1, 0x7f, 0xdf, "faace8761b2fdf0df5c2ff0656b0f378122d1b", 0x9, 0x3}) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01042dbd7000fcdbdf2512000000180001801400020076657468305f746f5f626f6e64000000f80007000080ffff080008007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) syz_open_dev$cec(&(0x7f0000000480), 0x0, 0x48001) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x200000000000ff83, 0x8, 0x4, 0xf, 0x80000006, 0x1000000000}, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000140), 0x0, 0x40040) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x5) r7 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r8 = fcntl$getown(r7, 0x9) r9 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r10 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) kcmp$KCMP_EPOLL_TFD(0x0, r8, 0x7, r9, &(0x7f0000000180)={r10, r7, 0xf04}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000040)=0xe1, 0x4) socket(0x25, 0x6, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(r9, 0x0, 0x42, 0x1b7) r11 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100), 0x100100, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) 17m32.94669252s ago: executing program 3 (id=2106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000002014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004"], 0xcc}}, 0x0) 17m32.459281646s ago: executing program 3 (id=2107): syz_emit_ethernet(0x46, &(0x7f0000001cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000014aa0b00907803000000450400000000000000020002ac14140a00000000040022ebffffffff"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000001cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000014aa0b00907803000000450400000000000000020002ac14140a00000000040022ebffffffff"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x80) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600020906ffffffffffffffff03003e0000000000000100000000000040000000000000009a010000000000000000000000003800030000000100000051e574640900000087000000000000000e0000000000000000000000000000800500000000000000bf04000000000000ffffffffffffffff0700000003000000ff03000000000000030000000000000005000000000000000500000000000000000000000000001004000000000000000300000004000000e500000000000000000000000000000006000000000000006d"], 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) ppoll(&(0x7f0000000240)=[{r2, 0x2}], 0x1, &(0x7f0000000300), 0x0, 0x0) (async) ppoll(&(0x7f0000000240)=[{r2, 0x2}], 0x1, &(0x7f0000000300), 0x0, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x8, 0x7) 17m31.112247132s ago: executing program 3 (id=2114): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x8000000) 17m30.744644246s ago: executing program 3 (id=2118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000e00060000000800000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f0000000a80)={{0x4, 0x7}, 'port1\x00', 0x8, 0x1040, 0x9, 0x7, 0xfcb, 0x9, 0x6, 0x0, 0x1, 0xb2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="49000000d34dfe09000000001000e80000f6ffff840000002a9eca26635a647d7d106ded10000000a096555d1c7a7caa28b6233157ef064e94c07e24799add9df26d339fcee7b4929cded011fad35ab6588ad37c49e299e3439f5479cf98b312b01b3224c50500addbb52a873ef1c686dd8b70da1564ab9c34ca88a5ebe1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() setns(0xffffffffffffffff, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000a40)={0x3, {0x9, 0x6, 0x6, 0x7fffffff}, {0x3ff, 0xb, 0x6, 0x8}, {0x81, 0x10001}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x5, 0xf, 0x10, 0x13, 0x1f, 0x7}}]}}]}, 0x148}}, 0x0) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x0, 0x2, 0x7, 0x8, 0x10000, r0, 0x9, '\x00', r9, r2, 0x5, 0x5, 0x5, 0x0, @void, @value, @value=r10}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 17m30.306966467s ago: executing program 32 (id=2118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000e00060000000800000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f0000000a80)={{0x4, 0x7}, 'port1\x00', 0x8, 0x1040, 0x9, 0x7, 0xfcb, 0x9, 0x6, 0x0, 0x1, 0xb2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="49000000d34dfe09000000001000e80000f6ffff840000002a9eca26635a647d7d106ded10000000a096555d1c7a7caa28b6233157ef064e94c07e24799add9df26d339fcee7b4929cded011fad35ab6588ad37c49e299e3439f5479cf98b312b01b3224c50500addbb52a873ef1c686dd8b70da1564ab9c34ca88a5ebe1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() setns(0xffffffffffffffff, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000a40)={0x3, {0x9, 0x6, 0x6, 0x7fffffff}, {0x3ff, 0xb, 0x6, 0x8}, {0x81, 0x10001}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "1e20167147edf01ff373eace88d075ff99a144456a38ec47e07f003253492ba9242048f60ed8c0ea71ddb8716d0205a243d4431e81b319b1cb64e2c01ff51162e2ae910c292c8ecc040a585cc94a9086ba92cd7f31c4ea17efb38b1bbe69e846bdd1ac50319cdacc3b305d2ae1402a9c82493e91c357dc175918a430d11a6bdfef8c3ae43c4fcae3909b38b23024bb7cf2bed0915cabc2e40b3a50056dc030b64113d32aa2ffbbbfd68045df32a522c82c9002c18bbf12afb3c607dd6fb05f3045a299dee90cc2b5a10de9ca82ac248e10bdacb15c6a4e55927253b5a4b9bebd3b2961705dbfbd4c4a70f1cbd86db32e03af4ca73087fa21aa03924b36d7b67c"}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x5, 0xf, 0x10, 0x13, 0x1f, 0x7}}]}}]}, 0x148}}, 0x0) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x0, 0x2, 0x7, 0x8, 0x10000, r0, 0x9, '\x00', r9, r2, 0x5, 0x5, 0x5, 0x0, @void, @value, @value=r10}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 5m31.977528991s ago: executing program 0 (id=4905): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "00fc2000"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000340)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$inet(0x2, 0x6, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 5m31.033887521s ago: executing program 0 (id=4909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) 5m30.157595289s ago: executing program 0 (id=4917): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r1 = socket(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) 5m27.88263834s ago: executing program 0 (id=4926): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x80000, 0xeb) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f00000001c0)={0xa149}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x9, 0x13, @l2={'ib', 0x3a, 'team0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x200c48a4) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 5m26.814567337s ago: executing program 0 (id=4932): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x6, 0xfe, 0x5, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0xe) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xfffff5cb}], 0x1, 0x2, 0x0) shutdown(r0, 0x1) 5m26.507440648s ago: executing program 0 (id=4934): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x3d, 0x0, 0x1}, {0x1d, 0x0, 0x0, 0x10000000}, {0x6}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000003) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x3d, 0x0, 0x1}, {0x1d, 0x0, 0x0, 0x10000000}, {0x6}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000003) (async) 5m25.867087107s ago: executing program 33 (id=4934): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x3d, 0x0, 0x1}, {0x1d, 0x0, 0x0, 0x10000000}, {0x6}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000003) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x3d, 0x0, 0x1}, {0x1d, 0x0, 0x0, 0x10000000}, {0x6}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000003) (async) 3m30.869044608s ago: executing program 1 (id=5414): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x81800) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x81800) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) (async) 3m30.366449895s ago: executing program 1 (id=5415): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) r0 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {}], [{@uid_eq}, {@seclabel}, {@dont_appraise}, {@uid_gt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic}, {@euid_eq={'euid', 0x3d, 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000340)="2d4dca5ee879601ce9c2ccf77cfbe29dd24dcb2c784251e7d54eb3") mknodat$loop(r0, &(0x7f0000000380)='./file0\x00', 0x8000, 0x1) 3m30.194516112s ago: executing program 1 (id=5417): r0 = gettid() r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = gettid() bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="a71d7bf04d1a104fea417b20e4b52782c0d2d7858cc229ca82dd0724a557048430606b0aeb0a885a7a751f99c80c528ccf80f877a390cd1ffcecdcdc58e03a34c3d33f96490d2ca8b2de0010c33b133d43abe250c3839f198a55cadb72df48dba8332de0aa00", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1c54c3, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)=0x8400088) syz_io_uring_setup(0x1f87, &(0x7f00000003c0)={0x0, 0x0, 0x100}, &(0x7f0000000380), &(0x7f0000000180)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x4000000, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) 3m29.194095304s ago: executing program 1 (id=5421): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x60603) setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0x1}}, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x9, @buffer={0x0, 0x84, &(0x7f0000000000)=""/132}, &(0x7f0000000540)="9edf55168046", 0x0, 0x0, 0x14, 0x0, 0x0}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x26, 0x0, 0x0, 0x202}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$tun(0xffffff9c, &(0x7f0000000080), 0x404801, 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 3m28.208052874s ago: executing program 1 (id=5425): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ftruncate(r4, 0x4) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffe9a}, 0x49d32d254ae22f79}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) ftruncate(r4, 0x4) (async) accept4(r3, 0x0, 0x0, 0x800) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffe9a}, 0x49d32d254ae22f79}}, 0x0) (async) 3m27.665111978s ago: executing program 1 (id=5428): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r1 = socket(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_route(r1, 0x0, 0x0) 3m27.311568834s ago: executing program 34 (id=5428): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r1 = socket(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_route(r1, 0x0, 0x0) 19.158226286s ago: executing program 4 (id=6166): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) (async) syz_usb_disconnect(r0) (async) 16.035086433s ago: executing program 4 (id=6177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$cgroup_procs(r5, 0x0, 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 12.806608965s ago: executing program 5 (id=6184): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, 0x3, 0x2, 0x5, 0x200, 0xb7, 0xc20022}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf5a1, 0x1f, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x400}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x38}) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x9e}, 0xd}, 0x1c) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) socket(0x2, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f00000002c0)=""/4096, 0x1000}, {0x0}], 0x3}, 0x1}], 0x2, 0x100, 0x0) 11.404670269s ago: executing program 5 (id=6189): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x541b, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r5, 0x2285, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) ioctl$BLKFRASET(r6, 0x1264, &(0x7f0000000100)=0x4) write$sndseq(r6, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x3, 0x0, 0x0, @time, {0x0, 0x1f}, {}, @control={0x0, 0x8000, 0x4ee8}}], 0x8c) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f00000018c0)) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 10.057268869s ago: executing program 5 (id=6196): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003042abd70000000000000007400", @ANYRES32=0x0, @ANYBLOB="110000000000000024001202976f2cb0e55cbc3302723d730004fd8009000100697069000000003a3a405e06c6008000010000000500050080000000"], 0x44}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3f91, 0x13100, 0x0, 0x32d}, &(0x7f0000000100)=0x0, &(0x7f0000001400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4000}, 0x1}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0xe, 0xa4a}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) unshare(0x2a020400) open(&(0x7f0000000140)='./cgroup\x00', 0x222840, 0x104) 9.807852546s ago: executing program 4 (id=6198): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f0000000240)="e30080670000ec67838717bd86dde148f063096244", 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) fcntl$setlease(r1, 0x400, 0x1) r3 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x400b40, 0x0) fcntl$getflags(r0, 0x401) syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb02030306"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000000c0)) 9.407465465s ago: executing program 7 (id=6200): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet(0x2, 0x80000, 0xd088) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x5c, @rand_addr=0x64010100, 0x4e23, 0x2, 'none\x00', 0x42, 0x1, 0x39}, 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_TOS={0x5, 0x9, 0x8f}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000008c0)={r1, 0x1, 0x1a8e, 0x0, 0x0}) 9.243842334s ago: executing program 7 (id=6202): openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x8000007) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2, 0x2}}, 0x20) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x83e, 0x0, 0x80000000}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpeername(r0, &(0x7f0000000340)=@generic, &(0x7f0000000400)=0x80) 9.188833718s ago: executing program 2 (id=6203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0xa1, &(0x7f0000000100)={@link_local, @local, @void, {@llc_tr={0x11, {@llc={0x2, 0x2, "8668", "f1c69c68af171210d2234a9aa31d42a79ec6970ff6904223cbb8f869871c07debb364151ee68d6fe4fe13ec5e1b2ba9ff43ef4ebec85a216f6036f44f8cfe4a52a143e3c364dbf61da967d57db51a461a7d36719b81912a2d8d31d0a2d8fce5952157f57f1abfcf2219832be6481c98aecdcf268efaeb901d38cc65eaa5c7d7941c25e96e0444398ac09b2a362f4b5"}}}}}, 0x0) sendto$inet6(r0, &(0x7f00000004c0)="d7", 0x1, 0x8d0, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 8.992595194s ago: executing program 5 (id=6204): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) syz_usb_connect(0x3, 0x74, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002d369e43f392aa03fe141010203010902620002040050080904000700fff4000981ff09050401007708090607250100048c760e233cb9a3fab939ff2895260c7c0905030000006900a709050800ff030902090725018303fa06000000817f0002"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000040)={&(0x7f0000000380)={{@my=0x1, 0xa}, {@local, 0xbc00000}, 0x400, "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"}, 0x418, 0x654}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x800, 0x2, 0x3d6}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r10, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xff}, 0x18) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @dstopts={0x4}]}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000000201040000000000000000020000052400028014000180080001000000000008110200ac1e00010c00028005000100000000001800038014000180080001000000008b49ab393a2ffffbbb040001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.758414683s ago: executing program 2 (id=6205): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setpriority(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$isdn(0x22, 0x2, 0x25) socket$isdn(0x22, 0x2, 0x22) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={0x2c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.473664854s ago: executing program 2 (id=6206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 8.311947891s ago: executing program 2 (id=6207): syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x5}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) socket$kcm(0x29, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000400)={[0x6, 0x3]}, &(0x7f0000000380), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@allocspi={0x19c, 0x16, 0x401, 0xfffffffe, 0x0, {{{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x20000000, 0x33}, @in=@remote, {0x3, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x8, 0xffffffff}, [@migrate={0x9c, 0x1b, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x33, 0x2, 0x0, 0x3500, 0x2, 0xa}, {@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@multicast2, 0xff, 0x3, 0x0, 0x3503, 0x2, 0xa}]}, @offload={0xc}]}, 0x19c}}, 0x20004808) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) 8.280057625s ago: executing program 4 (id=6208): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) (async) unshare(0x2c020400) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r5 = epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000001c0)={0x70000000}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000100001080000000000000000000000001771e1932d90e263730551cf1da864e28b24e63e4781e522f96f5e34b3e956aa334a09f41379775043e69179349007fdde62977414d9c56e51e2656a387d761ce46848ce1a5f3dcd2c5d09dd68f07a9c7c845e361d5f234693c8270eb35ce0457094912801ea00106ca15b2c9d74ca606d23d562371acb3125a2703d113a220237e97277dfcf4076816e7ee584dda4550ab6dde3b77b0a9da8e6fa857a57003a", @ANYRES32=r3, @ANYBLOB="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"], 0xec}}, 0x0) 8.123791692s ago: executing program 7 (id=6209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000001, 0x7, 0x9, 0xffffb9e5, 0xffffffff, 0x3ff, 0x84a, 0x5, 0x7f}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x7, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x8, 0x6cb2, 0x7, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048e5}, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r7 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000440)='./file0\x00', 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.043395591s ago: executing program 4 (id=6210): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) (async) fcntl$setstatus(r0, 0x4, 0x42800) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000200)='0', 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e90904000001030000000921050000012205"], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0x10c}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0x10c}}, 0x10) 7.020252149s ago: executing program 7 (id=6212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x4000800) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d5001020301090239000100001647090400000308066200090507000000000000092401"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7fffffff}}, 0x10) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r3, 0x100) r4 = dup(r3) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x18}, 0x8050) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) 6.354397932s ago: executing program 6 (id=6213): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x403, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="42050006060000002dbd700004dbdf2504000300380000dc0f00000000000000f9ffffffffffffffff7f000000000000530707531c6937880a2088ba13f64c012f0f21fa74feddba70ad7331204fc959c4a0a86cc99c2e817ac3e3aa484ef8e5a8a375c947b53ea383140115bafd52ed0a416fea34cbcb7f1e08c4ec4fc951c0f99d8b0d1be0a04e59d1cdbd4ec51a82fe96b5395169c07b6055bb24d089d81c6978492b1c506a2cd75743ffbe4f37ba58b16361a997827c3f7c0074fd73abc1eb04689685eadb8da751e882f522244b9c646caf892cbc11d661d17e7ec4c83cb233e09f793103d68eea4080", @ANYRESHEX, @ANYRES64=r3, @ANYRES16=r6, @ANYRES8, @ANYRES16=r4, @ANYRES16=r3], 0x30}}, 0x4008810) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f0000000340)={0x88000003, 0x0, "679c51ecbc83d0e22e845e3ede5adc714d88a57474315dc49c00", 0x1, 0x0, 0x0, 0x200, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004000000000008000f00ff01"], 0x64}}, 0x0) 6.339577162s ago: executing program 4 (id=6214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) 5.738406306s ago: executing program 5 (id=6215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockname$unix(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f00000002c0)='::0:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000c80)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)="01b78b5030000dc9f6", 0x9}, {0x0}], 0x2, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4001}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)="db48e293", 0x4}, {&(0x7f0000000600)="0314357ee593e79f0af494fe21655c16822195a6f8432ea81d257ccb7d6859b994d5551ff11c1562bcf559f7429cf23b43df597032b5", 0x36}, {&(0x7f0000000680)="ff0637c426231315b1465eb2e0cc2b65c9481857bc22498f97060cc71a77b9c85fafe97b13ca1f1c8b2a743c7856a011f51d401179a552375d482043a54876e11ade39ca87a5b4ebaaab69782590501e0384178b03f2150e094892846366c5271ed38ab9e8b98b197533bb70ab5be768bed1a56ad62bfd1c39731c2a5c752cbbd51ff788c4260887410a9a9f8d61ac4683300dc186f83e", 0x97}], 0x3, &(0x7f0000000940), 0x0, 0x20000081}}, {{&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000400000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRESOCT, @ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4], 0x9c, 0x8000}}, {{&(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002180)=[{0x0}, {&(0x7f0000002000)="d6c220612038b27c54ff415a67bdb79cbf384c729f28969b419c09a5f8978809b267b79c0e2e18ba985c370594d4956ce09aab576a4c5dc7e12cc2fad053ba32d571216f1ae6b7d6861919403eda26762f4fa90a39743dc82bdcf3231efd6e32ccc71503b67f6f01f6e3679c", 0x6c}, {&(0x7f0000002080)}, {0x0}], 0x4, 0x0, 0x0, 0x40040c5}}, {{&(0x7f0000002200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000002280)="bbc8f1d4c4c5918411efdc0eee3238e69b33a784d1ae001fa4d8b36d", 0x1c}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="d974ded297e0fcfe4ca2e0a97268d9dd44aa0bd2cec8b13bddf1ecebfea7a461eff4a5826bc073be29909daa110d58a83200c83edadc814bbd4a4d590544866e8523c5b66fe04300ebfadf02c45713a8e5bf41cc7f94cdcdcfd2120574ad0087a150b7d5b128f528c70fb2d2aa10b59e4e0ba1e7f7099d97dc004ff7660c4a90ef752c7eb938137515a9db84f45125042bc261ec0c7cc473", 0x98}, {&(0x7f0000003380)="6befdfef794a6de459135fa133dce7934e52a9906528651f8e6b1e62bf8942047e3d55463d4fe041dd3705b69105e9793d7e46d8f3aec8f31ef67a500e8381e74b7a493b08edbda7a6808cff2a6ae4fbc18cdfea910316935f87fbe813b6bbe0d00bfad194709da6eac33fc5e778ae755108d3163fb1cef9b7933bbaed027dd546c093be82fd1bfa16fe13b405aede15e4ae4b1d3ae4fabde2c833b6c907b24c3a82d55917b494fe06f997d268ccde97c6e5c5330b46636cdc10156c8f17f54c228dd91b6b22fd6da97c078a8e62a62f66c21937f860fe072e8906cd4f09af2e665a349ef1a227b3ec71cd", 0xeb}, {&(0x7f0000003480)="066d5a780b7b18192d3d7f2d16096ce9d1b73fdc73916b275fbd00984a6a00be93898c5b5e48b80973152279c26d26586fa90506e3a8955c8117169e5fb8213db5dfbc7b6c62a530eba1584df149e810baa9f3c5850e04bdbcaa759b8994cc167f78c846ad975a4385128af86fc77c760fec88f633fafa0ab8cba06cc9f2e3a797df1f155d725a55bd549a3087639626a27b66d9f68b65e6743b8c301bc8102df13210ae4e51c2a28af43ddffe169a99a9133f0f591fd8ca57a4222c3be3771d5d5762a428e287d98e06fb42aadd1e5086f1dced9a5e0c80253603bc0d13b931f79fbe8b67b660", 0xe7}, {&(0x7f0000003580)="3b722d4367804f912d0d667b26ec058172eefcc5f7e0a65a4074b3ddd1f26a668ec9f318c5703460729fff7a013bdee3ad5f7116f567c8d37b97f01b762a692b3d95651839d2d099fe3a5be6ea08c048c74b6feb34350a425415bc82f6a0fd680e203cf694228cad45c9c5fc511b5c6a5b9160675f91eb3e9d45eb8a3ac71ea9b6f160fd6e9902eb68a83526e1c827de26e99aa3a3640a5e3e3187982260294737bfcf887c26ac151c755c9ac23a979a8ca0e71869809fdff9adb1e93a2dd992320681294b92143dac5aea573e7f4a30", 0xd0}], 0x6, &(0x7f0000003980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x34, 0x20000024}}, {{&(0x7f00000039c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003a40)="05f955a41f6cebb30903baac6b96e4e9e096de8ae59aab7701d5853325897276c90b13716c45d385d4888875c9712f44c29297404c6a82ddce9310a09b3fa5e55066859f8f84e2b3cdf4eed113fb028624cb4619f462063c09878f331904c4c20b2c4d811bc4c2b4a71a96338b9b21c9a1addbf7f19da495c7d38cf60655622421a4d0bcf2", 0x85}, {&(0x7f0000003b00)="228d0b1353df4a325685291d2819378148e649611362c8d89109f67dc5a08d418eb908e742b57385b980d30dc2a2b9bfc38734c0a9efaa4ee86d3b551f22f1bdf37f8d1fa14730919f5a920baaab06bb9069071f57d841d962da76969a16480c", 0x60}, {&(0x7f0000003b80)="1a3c451471d706e18cd76fe41703f6e6406106faf43d83bbf3c96ef1ec2bd2234fe05763edfbc34c7a25983627bb9a5a8772438f94edbaa6b804c164eaeefcecbb3a63e9c3c0b3bf8e82b01422ab077ace0b", 0x52}, {&(0x7f0000003c00)="7063f1b8ea35b328829460b9cc7c1cbbb31af8eb9001e4084f28d992d90e413b582f8babc1af56c8080ab57ae705661975666ac2192e6c07d59b957535c2f7383bf4f4c407e06f72ae87c8705a77f2ebd9cfc9ee11dce66289846ba7a33a049c77349ba87604b0a91c153779aa3e7ed8aee8bb8f02e5e28f9def750a0ad1fc3977a8b028ea0cfaa116848347ceb854cd280462dfcd5f088734e445bf250ad8b868a125", 0xa3}, {&(0x7f0000003cc0)="2b49ea7ec09519816e6ee94403a7dc4e1d251ac86e631ca0a51eac99c9a85f9577ac7f67ce0d327896adc793e7fd24c85563fc9923bdccd65df4404287c55a5252cf9ff380d1577a2ace0ace49f17624f424514f9867cd40fdfed0d5e1886cd41627e13f494174cea97db84b37b29e778aba5c0222b509bf17577cb5ed0c09d54429bef721d236b971456d27579e8e3dda04", 0x92}, {&(0x7f0000003d80)="2488d8d707edb340905d115fe76507bacad334412e8abd3d05be", 0x1a}], 0x6, 0x0, 0x0, 0x890}}, {{&(0x7f0000003e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000000780)="75a27a899d30dd7671f8c154eb54c02a1440f8989e6f3c2e3e91be4d591f1cdb6bedc1a58e11c30fc98b97470ffc2ad3bdb0c390d398a082ef36296347d76b5d51dd1f3e6756cd503c488898b89e8586668a446a9c938e397e50d78008fbfbd2f0cd79a92b1078565a48ee154016175c574390613939c2279e4859176de2e8d8d76eac361c22d67dcdfc6798176fa4760ad6ee58e11e49fde50183e4b08ea3708866904787b853e5dc78efbe33aa5816548a4a773dee1d3ce3e3165b881b105f480b", 0xc2}, {&(0x7f0000003f80)="970d781dbc8c1f76e2b33fd26578f4e1cdbc115d4a4aff5a57fcdfdc300a308ce3e21959f2690f3f60454ac4e6263056e48876f070bd8304c0cc6f253ea958c49d64d791db17a78234004f4a3e13d5018f1cb6453be7d231d1", 0x59}], 0x2, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000004040)="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", 0x800}, {&(0x7f0000005040)="a054ee554c4fed95b85b936e92a4db2f755bea6f4fb7a8a09388e46da0a56609ab29e6282d5c7844331079c2332eb854bd7c4ab83a46718cb13c7244270900063a7d7120003a5e693bf899dd2fe1bedfdba760db17f32613967d458bd17416ee722cbfc45387cf760c2c9e0cf846cdc26eaf81d96f028c8443bcfa72ae0d28971e0f5432b8140e583fa0c8880ca7c1cc755937b2f5fac355af1f50e5ebbe55cebeb6a651c9792b73a235", 0xaa}, {&(0x7f0000005100)="2afa54d43a270683bf405dbfc8c5dc8973bfa41154b5fb920f0c5d7e948905a69375e9b7fbc8a9d1b7f8870c0cf3b55b17b5f84bc3", 0x35}, {&(0x7f00000051c0)}], 0x4, &(0x7f0000001000)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [r6, r0, 0xffffffffffffffff, r5, r6, r5]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0xb8, 0x40000}}, {{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000040)}, {&(0x7f0000000140)="18157cc688a5483d9c2c7d949498ca0e", 0x10}, {&(0x7f0000000880)="bf9c39fe0e48704248cec02e41f7e9e7a5e47e96d032ea23d6c2c50fd83314459c6b2b937cb18b9f2f8f28e8242e7ac69217f7b8bb5f3f4e5aa6dc91a187a8e6b0a8cd29f909042673a285015d80e3fa481b3afd007e44eeefbb8c20c5309ca3034368778c29f51fb2abb9e157a9385e55c8031fe388", 0x76}, {&(0x7f0000000a80)="3deee7b3187580f4b09909ddb8b5440bc75a5b0caf4e8d8146c44c5667e3c340e44a68661136ede9b6a8cd280a75a21853a51669c0ec35243eef90ac7e5715df9399e5bfc132717119990e5864f459a9962609e491349cd7d9c4a2225b592b008ba17feb6354d88dade3b38e5e29db66d5535885191ce57ec04fee5f4c2f152f1eae802ca35f8b3725d9f4f5cad8d0b674525242e5", 0x95}], 0x4, 0x0, 0x0, 0x15}}], 0xa, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$read(0xb, r9, &(0x7f0000000000)=""/2, 0x2) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r8, 0x81, 0x0, 0x0) readv(r10, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x4d1e, 0x10100, 0x0, 0xfffffffd}, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) fcntl$lock(r11, 0x24, &(0x7f0000000140)={0x0, 0x1, 0x100000002, 0x8}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) socket$inet6_sctp(0xa, 0x5, 0x84) fchmod(0xffffffffffffffff, 0x32) 4.631901363s ago: executing program 2 (id=6217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000040)={0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000180)={0xa, @capture={0x0, 0x0, {0x2, 0x2}, 0x4, 0x9}}) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000100)=""/1, 0x1}) 4.067179598s ago: executing program 6 (id=6218): r0 = socket(0x27, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0xd020, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x80, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x840) sendto$inet6(r6, 0x0, 0xffffffffffffff6f, 0x2004041, &(0x7f0000000280)={0xa, 0x4, 0x3, @private2}, 0x1c) sendto$inet6(r6, &(0x7f0000000240)="a42c9666524495bc45ad36f664da3bee96", 0xfffffffffffffd75, 0x404c814, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_open_dev$evdev(&(0x7f0000000180), 0x7, 0x4200) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfffffe3a) sendmmsg$unix(r12, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="1affe898eb6817b7762411df177f577bf50a77b9fce7ea82ff760c8cb30bc84f54b0f33738a047a04e6ad95072e63cbf95a5186df91d13b8d291d13006715479619e05879310f7d59817549f839bdf40ecdfcd1994958509cdeba746c88fc8db09e6b21075685d1d27f65a219588abbad4fed95c2c8039b76c8c5a44cb45aed70bc67cbfe1efd7eca5cd", 0x8a}, {&(0x7f0000000380)="aa2c5bb8159d2b587a9cee59e3e996e0d381354f302499c3984a1decba25574727041ffb6ac760bda1de1c25436e9ff3423028ce7b2d0dd903bd10fd935eedcd864fe829b3080e2c6deebca7173bc85a880d064409568212d39d8da30970a71b8df7", 0x62}, {&(0x7f0000000100)="b2dc5665e2fabf7c6cc324a70125be62f871839e052829ffe0c15119eb24a39d16a6", 0x22}, {&(0x7f00000005c0)="7acfc36b89f06082b3d2867c29d452c3d8c9fce1dbce8ac683663e98375ffe00205d38851ee7c534e080573b8fc96b0fe6cbb6a9154b71e9f18980f05aa62dd70af59909a444783a74c2d1619f32561cca300b20878aea2720cc3796e6dc834e602a8e34f525468ff04329619108fd256d089936b9901c2eb218f1c0b21ccb438f1819ab04de221d67c31449bfbd657412673d231864d834977614796d7c4fc757109d2dc1ad624b65a40aee1fb9de8a2671ef9b5f0e09145c7c2a74f4744a384c667ac3a49f89c04eb0f7993c2288294e9e639e4198916ab3b3da11fec917415f", 0xe1}, {&(0x7f0000000400)="d6b2503f0f17a9236105b1c9b985ab8cfbda042b6f7559afdb012012b1725515", 0x20}, {&(0x7f0000000480)="53f12e0903d59f9754b7845719d780114c2eb579ffb5e180f109c8286086ea9bd23eff227a8a7dc22927b204a0cfdc948faaf63e5379f8018157d3a5f9b22724fc04f17118dcc2bde44d2e0678", 0x4d}, {&(0x7f00000006c0)="f3307e3a8a5d861cd91b403c98d393533a7cd0c06fcf8623239dca03dfa6dc610524955b975aae1cb6f7fedac93d2ae4958f511d7954c314a1dca66db82e9fbe630a46902ede54426e41fe0f83eca72db43e7e2924eed5d96cee4d6bbec24a581d20647e671aa0f295f6b3cb3367a4bde12023f8ea55e34c36dd1aab58264fcbe579634e23f1b7bf77833188f97f151ac7bae3d773d49613352d1a22", 0x9c}, {&(0x7f0000001880)="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", 0xfd}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="1cf61dcc4b0d263ffb7b57e3", @ANYRES32, @ANYRES32=r9, @ANYRES32=r0, @ANYRES8=r11], 0x1c, 0x4081}}, {{0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB='0\x00'/12, @ANYRES32=r11, @ANYRES32, @ANYRES32=r5, @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r8], 0x30, 0x4000000}}], 0x2, 0x0) 3.680330621s ago: executing program 7 (id=6219): openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x8000007) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2, 0x2}}, 0x20) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x83e, 0x0, 0x80000000}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpeername(r0, &(0x7f0000000340)=@generic, &(0x7f0000000400)=0x80) 3.552368995s ago: executing program 2 (id=6220): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)={0x217, 0x2, 0x0, {{0x500, 0xd6, 0x500, 0x3, {}, 0x2810000, 0xffffffff, 0x0, 0x4, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x31, 'pg>\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00|E\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\x03\xb4\x94\xe1\x9et\xb7\xd2\xa7\x1c5\xfaW.', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee01, 0x0, 0xee01}}, 0x217) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000180)=0x11) socket(0x1e, 0x4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @mcast1, 0x8}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x38}}}}, &(0x7f0000000040)=0x84) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r7], &(0x7f0000000040)=0x24) 2.462154032s ago: executing program 6 (id=6221): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5Zy\xc2\x964\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xeb\v\xf8r\x10 >p\x95=N\xbepd\x99\xf9\x86k\xdf\xc7w\xff\x8f\x98\xd8\xe0C\xb2-[}\xb6\x88E5\xa0\xf9\x9f@I;\fn\xed\'\xe2\xf0\xe7_\xfa\x91\xba\x81\xbb\xda\xde\\\x98#g\xd1\xbb2\xd1WI\f\x9e\t\xe8\x1c{\xcd\x905\f=\xfe\'\x1ax\x91\xb7sB\xecN\x8e\x97$75\x16\xaaJ\x1e\'P\x12_D\xa2\x19dC(\xb4\xb8\x87]\x91\xefggP\x7f\xc4\a\xff\xcc\x19\x15\xae8m;nH\x9c\xda\x95\xf6\xe8F\x99\x99\x92M\xd0\xe5:\xcb\x19\xb4\xd2\xc5V\x8f\x8a\x1f\xe6\xc0\xfb$\xe9d\xe3\v', 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}]}, 0xc) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.099704821s ago: executing program 7 (id=6222): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_clone(0x2044091, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 2.093769761s ago: executing program 6 (id=6231): openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140), 0x0, 0x8000007) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2, 0x2}}, 0x20) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x83e, 0x0, 0x80000000}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpeername(r0, &(0x7f0000000340)=@generic, &(0x7f0000000400)=0x80) 1.690921593s ago: executing program 5 (id=6223): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 64) mmap(&(0x7f0000044000/0x1000)=nil, 0x1000, 0x2, 0x40010, r1, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstatfs(0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4$alg(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="1883cc7594fbeb06afa2fdb600f7b3fb", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4004}], 0x1, 0xa841) io_setup(0xff, &(0x7f0000000380)=0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)="97b5ee06edbce480b6bdc020061952fd2661e171449c341cf2c2c9b0e932aaba977ec145d6fb273c392cc3e58c475aaf210dcba48c2856089975cf42e5e97238", 0x40}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x800) (async) recvmsg$can_raw(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000009c0)=""/170, 0xaa}], 0x2}, 0x10081) (async) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r4, &(0x7f0000000240)="dd", 0x1}]) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'macvtap0\x00'}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f00000000c0), 0x4) 940.000035ms ago: executing program 6 (id=6224): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x10) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) pwrite64(r3, &(0x7f0000000240)="2d18fbd2c1f9495e083fd6bf3d0575678a5042ff363f51fb1497b5035428500589fbcac27e9c547fd9f83af53ac611c4c70ca004acf36dab8fa77a4840e2b9df7f6e68c90a946fdc7db914c216178d25c29dd1d1848a4465defef99560", 0x5d, 0x4fed3) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100e0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000200)={[0xffffffffffffffff]}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffff}, 0x0) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xd8241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf25420000000c0099080f6d000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x80080}, 0x4000) 0s ago: executing program 6 (id=6225): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001380), 0x101, 0x2501) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x9, 0x2000006, 0x100c, 0x4, 0x2, 0x2, 0x2, 0x5}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r5, 0xfff}, 0x8) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): l 1000 [ 1486.666633][T17541] pwc: recv_control_msg error -71 req 04 val 1300 [ 1486.679516][T17541] pwc: recv_control_msg error -71 req 04 val 1400 [ 1486.691512][T17541] pwc: recv_control_msg error -71 req 02 val 2000 [ 1486.704792][T17541] pwc: recv_control_msg error -71 req 02 val 2100 [ 1486.713068][T17541] pwc: recv_control_msg error -71 req 04 val 1500 [ 1486.714660][ T5953] tipc: Resetting bearer [ 1486.720131][T17541] pwc: recv_control_msg error -71 req 02 val 2500 [ 1486.759553][T17541] pwc: recv_control_msg error -71 req 02 val 2400 [ 1486.766933][T17541] pwc: recv_control_msg error -71 req 02 val 2600 [ 1486.774904][T17541] pwc: recv_control_msg error -71 req 02 val 2900 [ 1486.786605][T17541] pwc: recv_control_msg error -71 req 02 val 2800 [ 1486.800100][ T5953] tipc: Disabling bearer [ 1486.802241][T17541] pwc: recv_control_msg error -71 req 04 val 1100 [ 1486.829760][T17541] pwc: recv_control_msg error -71 req 04 val 1200 [ 1486.839403][T27579] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5711'. [ 1486.873511][T17541] pwc: Registered as video103. [ 1486.910480][T17541] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input134 [ 1486.969661][T17541] usb 7-1: USB disconnect, device number 33 [ 1487.291893][ T5903] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1487.337835][ T30] audit: type=1326 audit(1766229697.339:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.432136][ T5903] usb 5-1: device descriptor read/64, error -71 [ 1487.438742][T17541] usb 6-1: USB disconnect, device number 67 [ 1487.471127][T17541] em28xx 6-1:0.0: Disconnecting em28xx [ 1487.492110][ T30] audit: type=1326 audit(1766229697.339:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.548835][ T30] audit: type=1326 audit(1766229697.339:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.570112][T16756] em28xx 6-1:0.0: Registering input extension [ 1487.585620][ T30] audit: type=1326 audit(1766229697.339:9275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.610902][T17541] em28xx 6-1:0.0: Closing input extension [ 1487.619592][ T30] audit: type=1326 audit(1766229697.339:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.643775][ T934] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1487.663999][ T30] audit: type=1326 audit(1766229697.339:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.686802][ T30] audit: type=1326 audit(1766229697.349:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.709522][ T30] audit: type=1326 audit(1766229697.349:9279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.712097][ T5903] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1487.732962][ T30] audit: type=1326 audit(1766229697.359:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.762716][ T30] audit: type=1326 audit(1766229697.369:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27586 comm="syz.6.5714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1487.810976][T17541] em28xx 6-1:0.0: Freeing device [ 1487.831864][ T934] usb 7-1: Using ep0 maxpacket: 8 [ 1487.869968][ T934] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1487.903917][ T934] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1487.948372][ T934] usb 7-1: string descriptor 0 read error: -22 [ 1487.962012][ T934] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1487.971083][ T934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.006972][ T5903] usb 5-1: device descriptor read/64, error -71 [ 1488.032187][ T934] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1488.063257][ T934] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1488.082115][ T934] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1488.089434][ T934] usb 7-1: media controller created [ 1488.124389][ T5903] usb usb5-port1: attempt power cycle [ 1488.215027][ T934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1488.305279][T27588] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 1488.341716][ T934] zl10353_read_register: readreg error (reg=127, ret==0) [ 1488.510184][ T934] usb 7-1: USB disconnect, device number 34 [ 1488.516403][ T5903] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1488.565579][ T5903] usb 5-1: device descriptor read/8, error -71 [ 1488.622631][T27601] input: syz1 as /devices/virtual/input/input136 [ 1488.812601][T27601] netlink: 'syz.7.5717': attribute type 1 has an invalid length. [ 1488.837866][ T5903] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1488.902858][ T5903] usb 5-1: device descriptor read/8, error -71 [ 1489.037493][ T5903] usb usb5-port1: unable to enumerate USB device [ 1489.841500][T27605] gretap1: entered allmulticast mode [ 1489.883039][T27605] bond2: (slave gretap1): making interface the new active one [ 1489.904412][T27605] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1490.052133][ T5953] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 1490.067529][T27619] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5722'. [ 1490.259536][ T5953] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1490.282197][ T5953] usb 7-1: too many configurations: 74, using maximum allowed: 8 [ 1490.304179][ T5953] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 1490.325525][ T5953] usb 7-1: config 7 has no interface number 0 [ 1490.364793][ T5953] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 1490.391935][ T5953] usb 7-1: config 7 has no interface number 0 [ 1490.416551][ T5953] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 1490.448586][ T5953] usb 7-1: config 7 has no interface number 0 [ 1490.486866][ T5953] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 1490.522232][ T5953] usb 7-1: config 7 has no interface number 0 [ 1490.536414][ T5953] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 1490.553717][ T5953] usb 7-1: config 7 has no interface number 0 [ 1490.568533][ T5953] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 1490.588552][ T5953] usb 7-1: config 7 has no interface number 0 [ 1490.603892][ T5953] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 1490.627475][ T5953] usb 7-1: config 7 has no interface number 0 [ 1490.641848][ T5953] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 1490.660169][ T5953] usb 7-1: config 7 has no interface number 0 [ 1490.677711][ T5953] usb 7-1: string descriptor 0 read error: -22 [ 1490.690737][ T5953] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1490.712514][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.723966][ T5952] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1490.871906][ T5952] usb 3-1: device descriptor read/64, error -71 [ 1490.959674][ T5903] usb 7-1: USB disconnect, device number 35 [ 1491.129811][ T5952] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1491.291902][ T5952] usb 3-1: device descriptor read/64, error -71 [ 1491.402189][ T5952] usb usb3-port1: attempt power cycle [ 1491.421958][ T5953] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1491.515564][ T5903] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1491.572155][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 1491.579575][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.590705][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.601397][ T5953] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1491.611022][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.622790][ T5953] usb 6-1: config 0 descriptor?? [ 1491.634059][ T5953] hub 6-1:0.0: USB hub found [ 1491.671905][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 1491.693891][ T5903] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1491.706966][ T5903] usb 5-1: config 0 has no interface number 0 [ 1491.713617][ T5903] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1491.735339][ T5903] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1491.744495][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.753114][ T5903] usb 5-1: Product: syz [ 1491.757305][ T5903] usb 5-1: Manufacturer: syz [ 1491.761892][ T5952] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1491.769662][ T5903] usb 5-1: SerialNumber: syz [ 1491.780316][ T5903] usb 5-1: config 0 descriptor?? [ 1491.788968][T27643] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1491.797957][ T5952] usb 3-1: device descriptor read/8, error -71 [ 1491.854038][ T5953] hub 6-1:0.0: 1 port detected [ 1492.008114][T27643] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1492.052277][ T5952] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1492.083079][ T5952] usb 3-1: device descriptor read/8, error -71 [ 1492.153663][ T934] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1492.194032][ T5952] usb usb3-port1: unable to enumerate USB device [ 1492.314624][ T934] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1492.323998][ T934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.340695][ T934] usb 7-1: config 0 descriptor?? [ 1492.471968][ T5953] hub 6-1:0.0: activate --> -90 [ 1492.550866][ T934] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1492.876581][T17541] usb 6-1: USB disconnect, device number 68 [ 1492.876589][ T5953] usb 6-1-port1: config error [ 1493.289531][ T934] [drm:udl_init] *ERROR* Selecting channel failed [ 1493.325140][ T934] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1493.346187][ T934] [drm] Initialized udl on minor 2 [ 1493.366823][ T934] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1493.393582][ T934] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1493.424517][T17541] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1493.435283][T27659] tipc: Enabling of bearer rejected, already enabled [ 1493.443692][ T934] usb 7-1: USB disconnect, device number 36 [ 1493.453836][T17541] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1493.836614][ T5903] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1493.885527][ T5903] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1493.947962][ T5903] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1493.990501][ T5903] usb 5-1: USB disconnect, device number 93 [ 1494.546612][T27669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5738'. [ 1494.566143][T27669] netlink: 'syz.5.5738': attribute type 13 has an invalid length. [ 1494.660806][T27669] vxlan0: entered promiscuous mode [ 1494.685231][ T3661] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.718438][ T3661] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.757824][ T3661] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.792925][ T3661] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.855733][T27688] netlink: 'syz.2.5744': attribute type 23 has an invalid length. [ 1495.071946][ T5952] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1495.244278][ T5952] usb 5-1: device descriptor read/64, error -71 [ 1495.442672][ T5896] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1495.511879][ T5952] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1495.532470][ T5953] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1495.631956][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 1495.644503][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.672431][ T5952] usb 5-1: device descriptor read/64, error -71 [ 1495.681719][ T5896] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 1495.691069][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.699454][ T5896] usb 6-1: Product: syz [ 1495.705452][ T5896] usb 6-1: Manufacturer: syz [ 1495.710049][ T5896] usb 6-1: SerialNumber: syz [ 1495.718572][ T5896] usb 6-1: config 0 descriptor?? [ 1495.723936][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 1495.731006][ T5953] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1495.741011][ T5896] xr_serial 6-1:0.0: failed to claim sibling interface: -16 [ 1495.748520][ T5953] usb 3-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 1495.759052][ T5896] xr_serial 6-1:0.0: probe with driver xr_serial failed with error -16 [ 1495.768813][ T5953] usb 3-1: config 0 has no interface number 0 [ 1495.776270][ T5953] usb 3-1: too many endpoints for config 0 interface 12 altsetting 78: 69, using maximum allowed: 30 [ 1495.792110][ T5952] usb usb5-port1: attempt power cycle [ 1495.798179][ T5953] usb 3-1: config 0 interface 12 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 1495.813059][ T5953] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1495.834220][ T5953] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1495.844749][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.860081][ T5953] usb 3-1: Product: syz [ 1495.868312][ T5953] usb 3-1: Manufacturer: syz [ 1495.874447][ T5953] usb 3-1: SerialNumber: syz [ 1495.897878][ T5953] usb 3-1: config 0 descriptor?? [ 1495.936256][T17541] usb 6-1: USB disconnect, device number 69 [ 1496.117976][ T5953] f81534 3-1:0.12: required endpoints missing [ 1496.162105][ T5952] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1496.171434][ T5953] usb 3-1: USB disconnect, device number 42 [ 1496.192779][ T5952] usb 5-1: device descriptor read/8, error -71 [ 1496.260537][T27704] cgroup: fork rejected by pids controller in /syz6 [ 1496.452014][ T5952] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1496.493691][ T5952] usb 5-1: device descriptor read/8, error -71 [ 1496.609939][T28141] openvswitch: netlink: Flow key attribute not present in set flow. [ 1496.625599][ T5952] usb usb5-port1: unable to enumerate USB device [ 1496.990306][T28327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5752'. [ 1497.060550][T28339] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5751'. [ 1497.222033][ T5952] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1497.269131][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1497.284302][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1497.297768][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1497.307775][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1497.316103][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1497.431917][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 1497.446165][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1497.457510][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1497.472847][ T5952] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1497.482805][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.500031][ T5952] usb 6-1: config 0 descriptor?? [ 1497.595619][T27488] Bluetooth: hci3: unexpected event for opcode 0x041c [ 1497.736503][ T5952] usbhid 6-1:0.0: can't add hid device: -71 [ 1497.761110][ T5952] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1497.804267][ T5952] usb 6-1: USB disconnect, device number 70 [ 1498.948213][T28513] netlink: 'syz.6.5758': attribute type 4 has an invalid length. [ 1498.982158][T28481] chnl_net:caif_netlink_parms(): no params data found [ 1498.993987][T28511] netlink: 'syz.6.5758': attribute type 4 has an invalid length. [ 1499.116062][T28509] netlink: 'syz.5.5756': attribute type 10 has an invalid length. [ 1499.336392][T27488] Bluetooth: hci5: command tx timeout [ 1499.510382][T28481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.538009][T28481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.564404][T28481] bridge_slave_0: entered allmulticast mode [ 1499.596323][T28481] bridge_slave_0: entered promiscuous mode [ 1499.634065][T28481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.679159][T28481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.705673][T28481] bridge_slave_1: entered allmulticast mode [ 1499.743744][T28481] bridge_slave_1: entered promiscuous mode [ 1499.911969][ T5953] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1500.309968][T28481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.387333][T28481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.920732][T28536] sg_write: data in/out 3145852/1 bytes for SCSI command 0x1c-- guessing data in; [ 1500.920732][T28536] program syz.5.5763 not setting count and/or reply_len properly [ 1500.950762][T28481] team0: Port device team_slave_0 added [ 1500.995701][T28481] team0: Port device team_slave_1 added [ 1501.202904][T28481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.223764][T28481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.258433][ T5903] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1501.299702][T28481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.316880][T28481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.372152][T28481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.433287][T27488] Bluetooth: hci5: command tx timeout [ 1501.545635][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 1501.565253][ T5903] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1501.588703][ T5903] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.601479][T28481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.615915][ T5903] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1501.628209][ T5903] usb 6-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1501.637865][ T5903] usb 6-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 1501.649391][ T5903] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1501.672428][T27488] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1501.685261][T27488] Bluetooth: hci3: Injecting HCI hardware error event [ 1501.696915][T27488] Bluetooth: hci3: hardware error 0x00 [ 1501.731440][ T5903] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1501.750421][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.764795][ T5903] usb 6-1: Product: syz [ 1501.769235][ T5903] usb 6-1: Manufacturer: syz [ 1501.777955][ T5903] usb 6-1: SerialNumber: syz [ 1501.840570][T28481] hsr_slave_0: entered promiscuous mode [ 1501.848400][T28481] hsr_slave_1: entered promiscuous mode [ 1501.856367][T28481] debugfs: 'hsr0' already exists in 'hsr' [ 1501.862770][T28481] Cannot create hsr debugfs directory [ 1501.901285][T23719] syz_tun (unregistering): left allmulticast mode [ 1502.089626][ T5903] usb 6-1: USB disconnect, device number 71 [ 1502.137948][T11273] udevd[11273]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1502.306320][T28546] Cannot find add_set index 0 as target [ 1502.440213][ T3661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.514295][ T5953] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1502.544679][ T5953] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1502.552613][ T5953] usb 7-1: can't read configurations, error -71 [ 1502.722927][ T3661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.937905][T28561] xt_cgroup: path and classid specified [ 1503.014382][ T3661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.044213][T28563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5770'. [ 1503.349780][ T3661] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.472633][T28568] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5771'. [ 1503.581873][ T53] Bluetooth: hci5: command tx timeout [ 1503.761916][T27488] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1504.470216][ T3661] bridge_slave_1: left allmulticast mode [ 1504.477396][ T3661] bridge_slave_1: left promiscuous mode [ 1504.489273][ T3661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.527747][ T3661] bridge_slave_0: left allmulticast mode [ 1504.549163][ T3661] bridge_slave_0: left promiscuous mode [ 1504.572420][ T3661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.614526][T28574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5772'. [ 1504.625401][T28574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5772'. [ 1504.647018][ T3661] tipc: Resetting bearer [ 1505.472609][ T3661] tipc: Disabling bearer [ 1505.594841][ T3661] bridge0 (unregistering): left promiscuous mode [ 1505.662061][T27488] Bluetooth: hci5: command tx timeout [ 1505.868240][ T3661] bond1 (unregistering): Released all slaves [ 1505.884297][ T3661] bond2 (unregistering): Released all slaves [ 1506.064729][ T3661] bond3 (unregistering): Released all slaves [ 1506.082969][ T3661] bond0 (unregistering): Released all slaves [ 1506.262976][ T3661] bond4 (unregistering): Released all slaves [ 1506.435460][ T3661] bond5 (unregistering): (slave dummy0): Releasing active interface [ 1506.443541][ T3661] dummy0: left promiscuous mode [ 1506.448880][ T3661] dummy0: left allmulticast mode [ 1506.459829][ T3661] bond5 (unregistering): Released all slaves [ 1506.505898][T28574] vlan3: entered allmulticast mode [ 1506.511038][T28574] bridge_slave_0: entered allmulticast mode [ 1506.772488][ T3661] æÿîÿ: left promiscuous mode [ 1506.979733][ T3661] tipc: Disabling bearer [ 1507.072280][ T3661] tipc: Left network mode [ 1507.117393][T28590] VFS: Mount too revealing [ 1507.606314][T17541] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1507.829310][T17541] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1507.854973][T17541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.879907][T17541] usb 6-1: Product: syz [ 1507.892074][T17541] usb 6-1: Manufacturer: syz [ 1507.917951][T28481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1507.937293][T17541] usb 6-1: SerialNumber: syz [ 1507.949302][T17541] usb 6-1: config 0 descriptor?? [ 1507.958244][T28481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1508.024493][T28481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1508.042144][T28481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1508.108211][ T3661] veth1_to_team: left promiscuous mode [ 1508.142799][ T5953] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1508.154792][ T3661] hsr_slave_0: left promiscuous mode [ 1508.166855][ T3661] hsr_slave_1: left promiscuous mode [ 1508.176991][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.194651][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1508.236813][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1508.247336][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.296267][ T3661] veth1_to_hsr: left allmulticast mode [ 1508.317212][ T3661] veth1_to_hsr: left promiscuous mode [ 1508.327692][ T5953] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1508.352201][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.376587][ T5953] usb 5-1: Product: syz [ 1508.380839][ T5953] usb 5-1: Manufacturer: syz [ 1508.405868][ T5953] usb 5-1: SerialNumber: syz [ 1508.423005][T17541] airspy 6-1:0.0: Board ID: 00 [ 1508.426270][ T5953] usb 5-1: config 0 descriptor?? [ 1508.457474][T17541] airspy 6-1:0.0: Firmware version: [ 1508.948312][ T5953] mos7840 5-1:0.0: required endpoints missing [ 1509.183465][ T5953] usb 5-1: USB disconnect, device number 98 [ 1509.235788][T28595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.256786][T28595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.489345][T17541] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 1509.541183][T17541] airspy 6-1:0.0: Registered as swradio24 [ 1509.549549][T17541] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1509.595150][T17541] usb 6-1: USB disconnect, device number 72 [ 1510.799132][ T5953] hid-generic 0003:0004:0000.004C: unknown main item tag 0x0 [ 1510.845573][ T5953] hid-generic 0003:0004:0000.004C: unknown main item tag 0x0 [ 1510.862748][ T5953] hid-generic 0003:0004:0000.004C: unknown main item tag 0x0 [ 1510.925731][ T5953] hid-generic 0003:0004:0000.004C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1511.207960][ T3661] IPVS: stop unused estimator thread 0... [ 1511.233897][T28481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.249097][T28658] fido_id[28658]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1511.319667][T28481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.479363][T20558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.486650][T20558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.533293][T28666] FAULT_INJECTION: forcing a failure. [ 1511.533293][T28666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1511.588922][T28666] CPU: 0 UID: 0 PID: 28666 Comm: syz.4.5792 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.588956][T28666] Tainted: [L]=SOFTLOCKUP [ 1511.588964][T28666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1511.588975][T28666] Call Trace: [ 1511.588984][T28666] [ 1511.588993][T28666] dump_stack_lvl+0x189/0x250 [ 1511.589023][T28666] ? __pfx____ratelimit+0x10/0x10 [ 1511.589044][T28666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1511.589068][T28666] ? __pfx__printk+0x10/0x10 [ 1511.589109][T28666] should_fail_ex+0x414/0x560 [ 1511.589144][T28666] _copy_to_user+0x31/0xb0 [ 1511.589169][T28666] simple_read_from_buffer+0xe1/0x170 [ 1511.589198][T28666] proc_fail_nth_read+0x1b3/0x220 [ 1511.589223][T28666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1511.589247][T28666] ? rw_verify_area+0x2a6/0x4d0 [ 1511.589266][T28666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1511.589290][T28666] vfs_read+0x200/0xa30 [ 1511.589308][T28666] ? fdget_pos+0x247/0x320 [ 1511.589338][T28666] ? __pfx___mutex_lock+0x10/0x10 [ 1511.589359][T28666] ? __pfx_vfs_read+0x10/0x10 [ 1511.589380][T28666] ? __fget_files+0x2a/0x420 [ 1511.589409][T28666] ? __fget_files+0x3a0/0x420 [ 1511.589431][T28666] ? __fget_files+0x2a/0x420 [ 1511.589462][T28666] ksys_read+0x145/0x250 [ 1511.589484][T28666] ? __pfx_ksys_read+0x10/0x10 [ 1511.589507][T28666] ? __do_fast_syscall_32+0xbe/0x590 [ 1511.589533][T28666] __do_fast_syscall_32+0x1f7/0x590 [ 1511.589556][T28666] ? rcu_is_watching+0x15/0xb0 [ 1511.589578][T28666] ? do_fast_syscall_32+0x34/0x80 [ 1511.589606][T28666] do_fast_syscall_32+0x34/0x80 [ 1511.589629][T28666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1511.589652][T28666] RIP: 0023:0xf709d539 [ 1511.589671][T28666] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1511.589688][T28666] RSP: 002b:00000000f548d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1511.589711][T28666] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d620 [ 1511.589725][T28666] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 1511.589737][T28666] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1511.589749][T28666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1511.589770][T28666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1511.589802][T28666] [ 1512.005146][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.012344][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.212021][T16756] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1512.364296][T16756] usb 7-1: config 0 has an invalid interface number: 250 but max is 0 [ 1512.375502][T16756] usb 7-1: config 0 has no interface number 0 [ 1512.426376][T16756] usb 7-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5c.f1 [ 1512.456488][T16756] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.505679][T16756] usb 7-1: Product: syz [ 1512.520151][T16756] usb 7-1: Manufacturer: syz [ 1512.524242][T28481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1512.537034][T16756] usb 7-1: SerialNumber: syz [ 1512.580849][T16756] usb 7-1: config 0 descriptor?? [ 1512.606083][T16756] usb 7-1: selecting invalid altsetting 1 [ 1512.634248][T16756] catc 7-1:0.250: Can't set altsetting 1. [ 1512.652174][T16756] catc 7-1:0.250: probe with driver catc failed with error -5 [ 1512.706493][T28481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.807149][T16756] usb 7-1: USB disconnect, device number 39 [ 1512.879214][T28481] veth0_vlan: entered promiscuous mode [ 1512.911567][T28481] veth1_vlan: entered promiscuous mode [ 1512.973235][T28481] veth0_macvtap: entered promiscuous mode [ 1512.986870][T28481] veth1_macvtap: entered promiscuous mode [ 1513.036159][T28481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.078580][T28481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.110230][T17930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.120531][T17930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.135581][T17930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.148052][T17930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.306358][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.336372][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.502430][ T3661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.531597][ T3661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.854337][T28711] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5803'. [ 1514.441933][T16756] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1514.546448][T28723] bond1 (unregistering): Released all slaves [ 1514.601905][T16756] usb 5-1: Using ep0 maxpacket: 8 [ 1514.625316][T16756] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1514.674830][T16756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.725812][T16756] usb 5-1: Product: syz [ 1514.730032][T16756] usb 5-1: Manufacturer: syz [ 1514.766654][T16756] usb 5-1: SerialNumber: syz [ 1514.785682][T16756] usb 5-1: config 0 descriptor?? [ 1515.033378][T16756] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1515.151916][ T5903] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1515.244538][T28741] tipc: Enabling of bearer rejected, failed to enable media [ 1515.304119][ T5903] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1515.313585][ T5903] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1515.324683][ T5903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1515.334891][ T5903] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1515.346495][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1515.357736][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1515.375149][ T5903] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1515.384470][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1515.392767][ T5903] usb 6-1: Product: syz [ 1515.396954][ T5903] usb 6-1: Manufacturer: syz [ 1515.408434][T28734] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1515.418059][ T5903] cdc_wdm 6-1:1.0: skipping garbage [ 1515.423538][ T5903] cdc_wdm 6-1:1.0: skipping garbage [ 1515.433187][ T5903] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1515.439951][ T5903] cdc_wdm 6-1:1.0: Unknown control protocol [ 1515.491941][T27544] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1515.625841][ T5953] usb 6-1: USB disconnect, device number 73 [ 1515.641920][T27544] usb 3-1: Using ep0 maxpacket: 16 [ 1515.658292][T27544] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1515.668086][T27544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.676620][T27544] usb 3-1: Product: syz [ 1515.681188][T27544] usb 3-1: Manufacturer: syz [ 1515.685916][T27544] usb 3-1: SerialNumber: syz [ 1515.697955][T27544] usb 3-1: config 0 descriptor?? [ 1515.705666][T27544] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1515.915649][T27544] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 1515.941113][T27544] visor 3-1:0.0: probe with driver visor failed with error -71 [ 1515.956030][T27544] usb 3-1: USB disconnect, device number 43 [ 1516.554573][T27488] Bluetooth: hci2: unexpected event for opcode 0x041c [ 1516.716960][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1516.716979][ T30] audit: type=1326 audit(1766229726.729:9344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28716 comm="syz.4.5805" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d539 code=0x0 [ 1516.900147][T28764] tipc: Enabled bearer , priority 0 [ 1516.902229][T28764] syzkaller0: entered promiscuous mode [ 1516.902254][T28764] syzkaller0: entered allmulticast mode [ 1516.911937][ T5903] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1517.033864][T28766] tipc: Resetting bearer [ 1517.093055][ T5903] usb 3-1: not running at top speed; connect to a high speed hub [ 1517.138201][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1517.158260][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.176776][ T5903] usb 3-1: Product: з [ 1517.192490][ T5903] usb 3-1: Manufacturer: М [ 1517.207486][ T5903] usb 3-1: SerialNumber: 줧欙ꊿ瞢뫓彯꼯僫쓢ٚᄡæ¥ì‡™î†™ëœµï‘¦î®¡î²²é´”⟢졸錮㼘é‹è­çœ°ïš™ë²‚퇈埽ॕ╅ꨊ꒨彙醦঻㽂国㚕ᛃ멙Ἓ귫껬츉擛鰱蹫兪㮔á®ï¤¸êž®ì‚匥⌨僃푕蜙胔ઠ㴛﹎â’ㄓ嵑妓èŒã…æ‰æ¤£ã«‰à®•îƒì‘¿å­‰ë‹ïŒ˜å¢´é’†å‘Ôå­‘Ç©à¼á´ƒâ®™ê¢¬è»¦ï•—웒烚ⱈê¸å¼ç¾™í•¾á„Žáš®ç€¿Ð„í„➅☭ç¶éŒ’扞ᕋ [ 1517.342582][T27544] tipc: Resetting bearer [ 1517.390965][T27544] tipc: Disabling bearer [ 1517.509068][T28768] tipc: Enabled bearer , priority 0 [ 1517.520854][T28768] syzkaller0: entered promiscuous mode [ 1517.528941][T28768] syzkaller0: entered allmulticast mode [ 1517.543011][ T5903] cdc_ncm 3-1:1.0: bind() failure [ 1517.582848][ T5903] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1517.598810][ T5903] cdc_ncm 3-1:1.1: bind() failure [ 1517.645866][ T5903] usb 3-1: USB disconnect, device number 44 [ 1517.699650][T28769] tipc: Resetting bearer [ 1518.245331][T28774] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5821'. [ 1518.257257][T28768] tipc: Resetting bearer [ 1518.287728][T28768] tipc: Disabling bearer [ 1518.304307][T28776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5821'. [ 1518.338771][T28776] netlink: 'syz.7.5821': attribute type 5 has an invalid length. [ 1518.351099][T28774] bridge_slave_1: left allmulticast mode [ 1518.365666][T28774] bridge_slave_1: left promiscuous mode [ 1518.388384][T28776] netlink: 'syz.7.5821': attribute type 8 has an invalid length. [ 1518.403950][T28774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.407228][T28776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5821'. [ 1518.491328][T28774] bridge_slave_0: left allmulticast mode [ 1518.531717][T28774] bridge_slave_0: left promiscuous mode [ 1518.539641][T28774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.661441][T16756] usb write operation failed. (-71) [ 1518.781358][T16756] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1518.824973][T16756] dvbdev: DVB: registering new adapter (Terratec H7) [ 1518.857077][T16756] usb 5-1: media controller created [ 1518.882898][T16756] usb read operation failed. (-71) [ 1518.912585][T16756] usb write operation failed. (-71) [ 1518.925038][T16756] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1519.005097][T28776] geneve2: entered promiscuous mode [ 1519.006588][T16756] usb 5-1: USB disconnect, device number 99 [ 1519.031871][T28776] geneve2: entered allmulticast mode [ 1519.057447][T28783] netlink: 'syz.5.5823': attribute type 10 has an invalid length. [ 1519.071301][T28783] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5823'. [ 1519.148410][T16066] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1519.182106][T16066] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1519.232105][T16066] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1519.292571][T16066] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1519.895234][T28772] netlink: 'syz.6.5820': attribute type 61 has an invalid length. [ 1520.032213][T27544] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1520.262975][T27544] usb 6-1: Using ep0 maxpacket: 8 [ 1520.289500][T27544] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1520.322220][T27544] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1520.364149][T27544] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1520.413472][T27544] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1520.469310][T27544] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1520.502566][T27544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.611945][T27488] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1520.632129][T27488] Bluetooth: hci2: Injecting HCI hardware error event [ 1520.643122][ T53] Bluetooth: hci2: hardware error 0x00 [ 1521.367560][T28821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5832'. [ 1521.447435][T28822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5833'. [ 1522.651719][ T30] audit: type=1326 audit(1766229732.659:9345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28837 comm="syz.6.5837" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0 [ 1522.695622][T27544] usb 6-1: usb_control_msg returned -71 [ 1522.701232][T27544] usbtmc 6-1:16.0: can't read capabilities [ 1522.712348][ T53] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1522.787195][T27544] usb 6-1: USB disconnect, device number 74 [ 1524.451710][T28865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1524.458289][T28865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1524.489860][T28865] vhci_hcd vhci_hcd.0: Device attached [ 1524.732017][T16756] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1524.754741][T27544] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1524.931906][T27544] usb 3-1: Using ep0 maxpacket: 16 [ 1524.941617][T27544] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 1524.978724][T27544] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1524.996987][T27544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1525.006368][T27544] usb 3-1: Product: syz [ 1525.010836][T27544] usb 3-1: Manufacturer: syz [ 1525.017737][T27544] usb 3-1: SerialNumber: syz [ 1525.034936][T27544] usb 3-1: config 0 descriptor?? [ 1525.059769][T27544] pwc: Philips SPC 880NC USB webcam detected. [ 1525.269464][T28865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.323219][T28865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.353782][T28867] usbip_core: unknown command [ 1525.358581][T28867] vhci_hcd: unknown pdu 0 [ 1525.385576][T27544] pwc: Warning: more than 1 configuration available. [ 1525.403793][T28867] usbip_core: unknown command [ 1525.448813][T27544] pwc: Failed to set LED on/off time (-71) [ 1525.452771][ T1167] vhci_hcd vhci_hcd.2: stop threads [ 1525.474232][T27544] pwc: send_video_command error -71 [ 1525.476958][T28888] netlink: 'syz.5.5849': attribute type 10 has an invalid length. [ 1525.500226][ T1167] vhci_hcd vhci_hcd.2: release socket [ 1525.506291][T27544] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1525.511499][ T1167] vhci_hcd vhci_hcd.2: disconnect device [ 1525.533510][T27544] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1525.547849][T28888] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1525.564931][T27544] usb 3-1: USB disconnect, device number 45 [ 1525.722215][ T5965] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1525.891903][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 1525.899567][ T5965] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1525.936833][ T5965] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 1525.972221][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.001957][ T5965] usb 5-1: Product: syz [ 1526.006330][ T5965] usb 5-1: Manufacturer: syz [ 1526.031581][ T5965] usb 5-1: SerialNumber: syz [ 1526.076086][ T5965] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input137 [ 1526.302955][T17541] usb 5-1: USB disconnect, device number 100 [ 1526.312187][ T5965] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1526.453754][T28911] tipc: Enabling of bearer rejected, already enabled [ 1526.475205][ T5965] usb 6-1: config index 0 descriptor too short (expected 51236, got 36) [ 1526.492255][ T5965] usb 6-1: config 170 has too many interfaces: 228, using maximum allowed: 32 [ 1526.501253][ T5965] usb 6-1: config 170 has an invalid descriptor of length 211, skipping remainder of the config [ 1526.548295][ T5965] usb 6-1: config 170 has 0 interfaces, different from the descriptor's value: 228 [ 1526.578693][ T5965] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1526.606045][T17541] IPVS: starting estimator thread 0... [ 1526.628898][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.733786][T28917] IPVS: using max 48 ests per chain, 115200 per kthread [ 1526.881941][T17541] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1527.091900][T17541] usb 3-1: device descriptor read/64, error -71 [ 1527.219816][ T5965] usb 6-1: string descriptor 0 read error: -71 [ 1527.292465][ T5965] usb 6-1: USB disconnect, device number 75 [ 1527.381888][T17541] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1527.573286][T17541] usb 3-1: device descriptor read/64, error -71 [ 1527.682230][T17541] usb usb3-port1: attempt power cycle [ 1527.797340][ T5965] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1527.972142][ T5965] usb 6-1: Using ep0 maxpacket: 16 [ 1527.993466][ T5965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.014835][ T5965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.071946][T17541] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1528.079777][ T5965] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1528.135142][T17541] usb 3-1: device descriptor read/8, error -71 [ 1528.137916][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.224849][ T5965] usb 6-1: config 0 descriptor?? [ 1528.431913][T17541] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1528.505299][T17541] usb 3-1: device descriptor read/8, error -71 [ 1528.550871][ T5965] usbhid 6-1:0.0: can't add hid device: -71 [ 1528.581074][ T5965] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1528.652527][T17541] usb usb3-port1: unable to enumerate USB device [ 1528.653544][ T5965] usb 6-1: USB disconnect, device number 76 [ 1529.151923][ T5965] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1529.372607][ T5965] usb 5-1: Using ep0 maxpacket: 32 [ 1529.411413][ T5965] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 1529.449552][ T5965] usb 5-1: config 0 has no interface number 0 [ 1529.504078][ T5965] usb 5-1: config 0 interface 78 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1529.547322][ T5965] usb 5-1: config 0 interface 78 has no altsetting 0 [ 1529.564649][T28960] netlink: 'syz.5.5867': attribute type 10 has an invalid length. [ 1529.597296][ T5965] usb 5-1: New USB device found, idVendor=0489, idProduct=e036, bcdDevice=9c.e4 [ 1529.634965][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.664581][ T5965] usb 5-1: Product: syz [ 1529.712731][ T5965] usb 5-1: Manufacturer: syz [ 1529.718773][T28960] bond0: (slave netdevsim0): Releasing backup interface [ 1529.736035][ T5965] usb 5-1: SerialNumber: syz [ 1529.768220][ T5965] usb 5-1: config 0 descriptor?? [ 1529.785873][T28960] team0: Port device netdevsim0 added [ 1529.807117][T28955] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1529.824369][T28961] veth1_to_bond: entered allmulticast mode [ 1529.892157][T16756] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1530.824816][T28956] veth1_to_bond: left allmulticast mode [ 1531.012697][ T5965] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1531.175136][ T5965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1531.201866][ T5965] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1531.220392][ T5965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.231930][T16756] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1531.269505][ T5965] usb 7-1: config 0 descriptor?? [ 1531.289929][T28982] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1531.411930][T16756] usb 3-1: Using ep0 maxpacket: 32 [ 1531.424454][T16756] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.458485][T16756] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.499626][T16756] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1531.531203][T16756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.565942][T16756] usb 3-1: config 0 descriptor?? [ 1531.595258][T16756] hub 3-1:0.0: USB hub found [ 1531.763860][ T5965] elan 0003:04F3:0755.004D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1531.803811][T16756] hub 3-1:0.0: 1 port detected [ 1531.888870][ T6298] usb 5-1: USB disconnect, device number 101 [ 1531.933883][T28982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.976423][T28982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.008349][T17541] usb 7-1: USB disconnect, device number 40 [ 1532.256980][T28999] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5876'. [ 1532.293688][T28999] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5876'. [ 1532.439046][T16756] hub 3-1:0.0: activate --> -90 [ 1533.493782][T16756] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1533.564207][T16756] usb 3-1: USB disconnect, device number 50 [ 1533.831898][ T5965] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1534.012324][ T5965] usb 6-1: Using ep0 maxpacket: 16 [ 1534.031876][ T5965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.075867][ T5965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.120497][ T5965] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1534.157220][ T5965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.199115][ T5965] usb 6-1: config 0 descriptor?? [ 1534.650444][T29027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5884'. [ 1534.735229][ T5965] macally 0003:060B:0001.004E: item fetching failed at offset 2/69 [ 1534.763848][ T5965] macally 0003:060B:0001.004E: probe with driver macally failed with error -22 [ 1535.123796][T16756] usb 6-1: USB disconnect, device number 77 [ 1535.239580][T29041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5888'. [ 1535.248738][T29041] netlink: 'syz.4.5888': attribute type 5 has an invalid length. [ 1535.260826][T29041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5888'. [ 1535.275811][T29041] geneve2: entered promiscuous mode [ 1535.281078][T29041] geneve2: entered allmulticast mode [ 1535.288057][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1535.299444][ T1167] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1535.309150][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1535.319015][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1535.551902][ T5965] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 1535.667128][T29048] ip6tnl4: entered promiscuous mode [ 1535.684188][T29048] ip6tnl4: entered allmulticast mode [ 1535.711877][ T5965] usb 5-1: device descriptor read/64, error -71 [ 1535.951918][ T5965] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 1536.101898][ T5965] usb 5-1: device descriptor read/64, error -71 [ 1536.222409][ T5965] usb usb5-port1: attempt power cycle [ 1536.381957][T16756] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1536.542236][T16756] usb 3-1: Using ep0 maxpacket: 32 [ 1536.556038][T16756] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 1536.573051][ T5965] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 1536.575493][T16756] usb 3-1: config 0 has no interface number 0 [ 1536.603045][T16756] usb 3-1: config 0 interface 24 has no altsetting 0 [ 1536.603276][ T5965] usb 5-1: device descriptor read/8, error -71 [ 1536.627965][T16756] usb 3-1: New USB device found, idVendor=00db, idProduct=dce6, bcdDevice=d9.01 [ 1536.644029][T16756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.661454][T16756] usb 3-1: Product: syz [ 1536.674744][T16756] usb 3-1: Manufacturer: syz [ 1536.679418][T16756] usb 3-1: SerialNumber: syz [ 1536.720176][T16756] usb 3-1: config 0 descriptor?? [ 1536.862225][ T5965] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 1536.874876][T29082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5898'. [ 1536.926045][ T5965] usb 5-1: device descriptor read/8, error -71 [ 1537.043151][ T5965] usb usb5-port1: unable to enumerate USB device [ 1537.181790][T29086] random: crng reseeded on system resumption [ 1537.656928][ T5952] IPVS: starting estimator thread 0... [ 1537.684654][ T5965] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1537.772107][T29094] IPVS: using max 28 ests per chain, 67200 per kthread [ 1537.859173][ T5965] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.874278][ T5965] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1537.889796][ T5965] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1537.901722][ T5965] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1537.912711][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.923818][ T5965] usb 6-1: Product: syz [ 1537.929271][ T5965] usb 6-1: Manufacturer: syz [ 1537.936939][ T5965] usb 6-1: SerialNumber: syz [ 1538.198198][ T5965] usb 6-1: USB disconnect, device number 78 [ 1538.791892][T16756] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1538.808586][ T5965] usb 3-1: USB disconnect, device number 51 [ 1538.971938][T16756] usb 7-1: Using ep0 maxpacket: 8 [ 1538.991223][T16756] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1539.011625][T16756] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.040383][T16756] usb 7-1: Product: syz [ 1539.047427][T16756] usb 7-1: Manufacturer: syz [ 1539.061806][T16756] usb 7-1: SerialNumber: syz [ 1539.084198][T16756] usb 7-1: config 0 descriptor?? [ 1539.332705][T16756] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1539.352594][T29110] binder_alloc: 29105: binder_alloc_buf, no vma [ 1539.384097][T29118] binder: 29105:29118 unknown command 0 [ 1539.412035][T29118] binder: 29105:29118 ioctl c0306201 800001c0 returned -22 [ 1540.172301][ T30] audit: type=1800 audit(1766229750.189:9346): pid=29101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5904" name="nullb0" dev="devtmpfs" ino=4134 res=0 errno=0 [ 1541.896620][T16756] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1541.995920][T29161] usb 7-1: USB disconnect, device number 41 [ 1543.071889][ T5952] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1543.252447][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 1543.261361][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.272375][ T5952] usb 6-1: config 0 has no interfaces? [ 1543.277858][ T5952] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1543.302961][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.343196][ T5952] usb 6-1: config 0 descriptor?? [ 1543.604018][T29152] IPv6: sit1: Disabled Multicast RS [ 1543.942534][T29152] sit1: entered allmulticast mode [ 1544.167739][T29180] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1545.119927][T29196] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5928'. [ 1546.138296][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.144644][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.192298][ T5953] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1547.302077][T29224] netlink: 'syz.2.5935': attribute type 1 has an invalid length. [ 1547.381891][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 1547.403817][ T5953] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1547.414409][T29226] bond2: (slave bridge1): making interface the new active one [ 1547.427225][T29226] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1547.427466][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.512829][ T5953] usb 5-1: Product: syz [ 1547.518537][ T5953] usb 5-1: Manufacturer: syz [ 1547.542429][ T5953] usb 5-1: SerialNumber: syz [ 1547.562644][ T5953] usb 5-1: config 0 descriptor?? [ 1547.624296][ T5965] usb 6-1: USB disconnect, device number 79 [ 1547.775630][T29234] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5938'. [ 1547.785126][ T5953] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1548.222001][ T5952] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1548.381837][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 1548.397945][ T5952] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 1548.415120][ T5952] usb 6-1: config 0 has no interface number 0 [ 1548.438123][ T5952] usb 6-1: New USB device found, idVendor=0dbe, idProduct=5000, bcdDevice=e1.41 [ 1548.461983][ T5952] usb 6-1: New USB device strings: Mfr=250, Product=138, SerialNumber=196 [ 1548.488254][ T5952] usb 6-1: Product: syz [ 1548.498387][ T5952] usb 6-1: Manufacturer: syz [ 1548.508456][ T5952] usb 6-1: SerialNumber: syz [ 1548.521240][ T5952] usb 6-1: config 0 descriptor?? [ 1548.811319][T29239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5940'. [ 1548.827371][ T5953] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1548.841679][T29239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5940'. [ 1548.875900][ T5953] usb 5-1: USB disconnect, device number 106 [ 1548.939319][T29243] fuse: Unknown parameter 'Чݺsétej!$ü#YV‰K²×j7àØ(”ÌO!üé‹íÑÀ [ 1548.939319][T29243] ¡¢Bu©hï±Êpú' [ 1548.963237][T29241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.974421][T29241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.001111][T29243] binder: 29242:29243 ioctl c0306201 800003c0 returned -14 [ 1549.791980][T16756] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1549.965391][T16756] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1549.988208][T16756] usb 5-1: config 0 has no interface number 0 [ 1550.026902][T16756] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1550.059896][T16756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.083389][T16756] usb 5-1: Product: syz [ 1550.094421][T16756] usb 5-1: Manufacturer: syz [ 1550.105464][T16756] usb 5-1: SerialNumber: syz [ 1550.125856][T16756] usb 5-1: config 0 descriptor?? [ 1550.579323][T16756] usb 5-1: Firmware: major: 125, minor: 136, hardware type: UNKNOWN (85) [ 1550.779974][T16756] usb 5-1: Firmware: build [ 1550.796012][T29267] netlink: 'syz.2.5948': attribute type 1 has an invalid length. [ 1550.838928][ T30] audit: type=1326 audit(1766229760.849:9347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1550.885383][T29271] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1550.924395][ T30] audit: type=1326 audit(1766229760.879:9348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1550.974707][T29267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1551.033607][ T30] audit: type=1326 audit(1766229760.889:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1551.039004][T16756] usb 5-1: failed to fetch extended address, random address set [ 1551.137018][T29267] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1551.152929][ T30] audit: type=1326 audit(1766229760.889:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1551.177412][ T5952] usb 6-1: USB disconnect, device number 80 [ 1551.188134][ T30] audit: type=1326 audit(1766229760.889:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1551.215594][ T30] audit: type=1326 audit(1766229760.889:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29263 comm="syz.7.5947" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1551.215634][T16756] usb 5-1: atusb_probe: initialization failed, error = -524 [ 1551.367558][T16756] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 1551.418069][T16756] usb 5-1: USB disconnect, device number 107 [ 1552.190972][T29289] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5953'. [ 1552.326563][T29296] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1552.808445][T29305] fuse: Bad value for 'fd' [ 1553.313607][T29317] netlink: 'syz.4.5959': attribute type 33 has an invalid length. [ 1553.332852][T29317] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5959'. [ 1553.396612][T29317] netlink: 'syz.4.5959': attribute type 33 has an invalid length. [ 1553.422241][T29317] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5959'. [ 1554.081900][ T5952] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1554.090716][T29331] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5962'. [ 1554.114464][T16756] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 1554.144121][T16756] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1554.212795][ T5952] usb 5-1: device descriptor read/64, error -71 [ 1554.219975][T29336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5963'. [ 1554.471897][ T5952] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1554.633451][ T5952] usb 5-1: device descriptor read/64, error -71 [ 1554.753099][ T5952] usb usb5-port1: attempt power cycle [ 1554.982789][T29353] netlink: 'syz.7.5967': attribute type 1 has an invalid length. [ 1555.008228][T29353] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1555.102260][ T5952] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1555.169418][ T5952] usb 5-1: device descriptor read/8, error -71 [ 1555.399475][T29366] netlink: 'syz.6.5970': attribute type 1 has an invalid length. [ 1555.407597][T29366] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5970'. [ 1555.411934][ T5952] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1555.452889][ T5952] usb 5-1: device descriptor read/8, error -71 [ 1555.563023][ T5952] usb usb5-port1: unable to enumerate USB device [ 1555.585140][T29370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5971'. [ 1555.596364][T29370] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5971'. [ 1555.988287][T29380] i2c i2c-0: Invalid block write size 34 [ 1556.741882][T27544] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1556.912472][T27544] usb 6-1: Using ep0 maxpacket: 8 [ 1556.929924][T27544] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 1556.957076][T27544] usb 6-1: config 0 has no interface number 0 [ 1556.981386][T27544] usb 6-1: too many endpoints for config 0 interface 191 altsetting 46: 38, using maximum allowed: 30 [ 1557.026263][T27544] usb 6-1: config 0 interface 191 altsetting 46 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 1557.079792][T27544] usb 6-1: config 0 interface 191 has no altsetting 0 [ 1557.106083][T27544] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1557.148912][T27544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.204395][T27544] usb 6-1: config 0 descriptor?? [ 1557.543038][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5975'. [ 1557.564739][T29394] netlink: 'syz.5.5975': attribute type 12 has an invalid length. [ 1557.613727][T29394] netlink: 'syz.5.5975': attribute type 14 has an invalid length. [ 1558.493469][T29407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1558.515803][T29407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1558.553707][T29410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1558.570755][T29407] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1558.603140][T29407] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1558.667852][T29407] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1558.744012][T29410] bond4: option resend_igmp: invalid value (511) [ 1558.751242][T29410] bond4: option resend_igmp: allowed values 0 - 255 [ 1558.833998][T29410] bond4 (unregistering): Released all slaves [ 1559.546810][ T5952] usb 6-1: USB disconnect, device number 81 [ 1559.751488][T29428] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1559.758074][T29428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1559.805660][T29436] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 1559.812250][T29436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1559.821336][T29428] vhci_hcd vhci_hcd.0: Device attached [ 1559.878863][T29436] vhci_hcd vhci_hcd.0: Device attached [ 1559.971166][T29436] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(10) [ 1559.977839][T29436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1560.037582][T29428] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(14) [ 1560.044413][T29428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1560.073117][ T5952] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1560.084335][T29436] vhci_hcd vhci_hcd.0: Device attached [ 1560.110225][T29428] vhci_hcd vhci_hcd.0: Device attached [ 1560.197535][T29442] tc_dump_action: action bad kind [ 1560.318910][T29442] xt_bpf: check failed: parse error [ 1560.531881][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 1560.532371][T27488] Bluetooth: hci4: command 0x0406 tx timeout [ 1560.612352][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 1560.664022][T29446] vhci_hcd: connection closed [ 1560.664119][T29443] vhci_hcd: connection closed [ 1560.669574][T29429] vhci_hcd: connection reset by peer [ 1560.680314][T29437] vhci_hcd: connection closed [ 1560.734447][T15285] vhci_hcd vhci_hcd.5: stop threads [ 1560.775921][T15285] vhci_hcd vhci_hcd.5: release socket [ 1560.813131][T15285] vhci_hcd vhci_hcd.5: disconnect device [ 1560.846986][T29473] loop5: detected capacity change from 0 to 7 [ 1560.884569][T15285] vhci_hcd vhci_hcd.5: stop threads [ 1560.890273][T11273] Dev loop5: unable to read RDB block 7 [ 1560.904613][T11273] loop5: AHDI p3 [ 1560.909281][T11273] loop5: partition table partially beyond EOD, truncated [ 1560.911858][T15285] vhci_hcd vhci_hcd.5: release socket [ 1560.958833][T29473] Dev loop5: unable to read RDB block 7 [ 1560.972045][T29473] loop5: AHDI p3 [ 1560.992101][T29473] loop5: partition table partially beyond EOD, truncated [ 1560.999346][T15285] vhci_hcd vhci_hcd.5: disconnect device [ 1561.077672][T15285] vhci_hcd vhci_hcd.5: stop threads [ 1561.112061][T15285] vhci_hcd vhci_hcd.5: release socket [ 1561.153023][T15285] vhci_hcd vhci_hcd.5: disconnect device [ 1561.195632][T15285] vhci_hcd vhci_hcd.5: stop threads [ 1561.250036][T15285] vhci_hcd vhci_hcd.5: release socket [ 1561.296108][T15285] vhci_hcd vhci_hcd.5: disconnect device [ 1561.469859][ T5199] Dev loop5: unable to read RDB block 7 [ 1561.516088][ T5199] loop5: AHDI p3 [ 1561.542247][ T5199] loop5: partition table partially beyond EOD, truncated [ 1562.214996][T29486] tipc: Enabled bearer , priority 0 [ 1562.456500][T29487] tipc: Resetting bearer [ 1562.692632][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 1562.717278][T29476] netlink: 'syz.4.5994': attribute type 4 has an invalid length. [ 1562.751131][T29476] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5994'. [ 1562.872079][T29498] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5999'. [ 1562.961477][T29486] tipc: Disabling bearer [ 1563.032324][T17541] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1563.216437][T17541] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1563.246791][T17541] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.285901][T17541] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1563.305221][T17541] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.320611][T17541] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1563.339547][T17541] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1563.350751][T17541] usb 5-1: Product: syz [ 1563.358131][T17541] usb 5-1: Manufacturer: syz [ 1563.377837][T17541] cdc_wdm 5-1:1.0: skipping garbage [ 1563.392467][T17541] cdc_wdm 5-1:1.0: skipping garbage [ 1563.400675][T17541] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1563.413433][T17541] cdc_wdm 5-1:1.0: Unknown control protocol [ 1563.967140][ C0] cdc_wdm 5-1:1.0: Unexpected error -71 [ 1563.973604][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1563.980296][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1563.986667][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1563.993273][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1563.999709][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1564.006322][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1564.015924][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1564.022531][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1564.029001][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1564.035593][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1564.041946][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1564.048554][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1564.055156][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1564.061776][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1564.068093][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1564.074695][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1564.081113][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1564.087719][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1564.093977][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1564.100559][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1564.128022][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1564.137071][ T5965] usb 5-1: USB disconnect, device number 112 [ 1564.744047][T29506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.761440][T29506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1564.782830][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 1564.974456][T29529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1565.242094][ T5952] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1566.212103][ T5896] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1566.252174][ T6298] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1566.269137][T29538] tipc: Enabled bearer , priority 0 [ 1566.355280][T29538] tipc: Resetting bearer [ 1566.385858][ T5896] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 1566.397783][ T5896] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1566.431902][ T6298] usb 3-1: Using ep0 maxpacket: 16 [ 1566.438448][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1566.457615][ T6298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1566.472196][ T5896] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 1566.501365][ T6298] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1566.518238][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1566.566688][ T5896] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 1566.593432][ T6298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.597996][ T5953] tipc: Disabling bearer [ 1566.609311][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.632511][ T5896] usb 5-1: Product: syz [ 1566.641946][ T5896] usb 5-1: Manufacturer: syz [ 1566.651871][ T5896] usb 5-1: SerialNumber: syz [ 1566.664420][ T5896] usb 5-1: config 0 descriptor?? [ 1566.682597][T29534] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1566.792956][ T6298] usb 3-1: Product: syz [ 1566.797494][ T6298] usb 3-1: Manufacturer: syz [ 1566.812814][ T6298] usb 3-1: SerialNumber: syz [ 1566.831653][ T6298] usb 3-1: config 0 descriptor?? [ 1566.855864][ T6298] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1566.871873][ T6298] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1566.912382][ T5896] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 1566.920389][ T5896] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1566.940719][ T5896] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1566.953711][ T5896] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1566.967322][ T5896] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1566.978988][ T5896] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 1566.997893][ T5896] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1567.008405][ T5896] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1567.019707][ T5896] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1567.027872][ T5896] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1567.046974][ T5896] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1567.066166][ T5896] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 1567.078552][ T5896] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1567.102914][ T5896] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1567.167777][ T5896] usb 5-1: USB disconnect, device number 113 [ 1567.200374][ T5896] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1567.231272][ T5896] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1567.247066][ T5896] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1567.263096][ T5896] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1567.274121][ T5896] keyspan 5-1:0.0: device disconnected [ 1567.893941][ T6298] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1567.923427][ T30] audit: type=1326 audit(1766229777.939:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29558 comm="syz.4.6018" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d539 code=0x0 [ 1568.008182][ T6298] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1568.059551][ T6298] em28xx 3-1:0.0: board has no eeprom [ 1568.152133][ T6298] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1568.178521][ T6298] em28xx 3-1:0.0: dvb set to bulk mode. [ 1568.211403][T17541] em28xx 3-1:0.0: Binding DVB extension [ 1568.267045][ T6298] usb 3-1: USB disconnect, device number 52 [ 1568.315833][ T6298] em28xx 3-1:0.0: Disconnecting em28xx [ 1568.395881][T17541] em28xx 3-1:0.0: Registering input extension [ 1568.481281][ T6298] em28xx 3-1:0.0: Closing input extension [ 1568.540546][ T6298] em28xx 3-1:0.0: Freeing device [ 1568.587986][ T30] audit: type=1326 audit(1766229778.599:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29570 comm="syz.6.6022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1568.669354][ T30] audit: type=1326 audit(1766229778.599:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29570 comm="syz.6.6022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1568.785867][ T30] audit: type=1326 audit(1766229778.639:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29570 comm="syz.6.6022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1568.854743][ T30] audit: type=1326 audit(1766229778.649:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29570 comm="syz.6.6022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1568.908839][ T30] audit: type=1326 audit(1766229778.649:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29570 comm="syz.6.6022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1568.939191][ T30] audit: type=1326 audit(1766229778.659:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29570 comm="syz.6.6022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1568.966603][ T30] audit: type=1326 audit(1766229778.659:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29570 comm="syz.6.6022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1569.001513][ T30] audit: type=1326 audit(1766229778.659:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29570 comm="syz.6.6022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1569.029257][ T30] audit: type=1326 audit(1766229778.659:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29570 comm="syz.6.6022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1569.481867][ T9] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1569.641874][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1569.671655][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.705126][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.705189][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1569.705206][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.710688][ T9] usb 5-1: config 0 descriptor?? [ 1569.827813][T29589] vcan1: entered promiscuous mode [ 1570.137663][ T9] kye 0003:0458:501B.0050: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1570.163539][ T6298] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1570.187481][ T9] kye 0003:0458:501B.0050: unknown main item tag 0x0 [ 1570.214932][ T9] kye 0003:0458:501B.0050: unknown main item tag 0x0 [ 1570.256408][ T9] kye 0003:0458:501B.0050: hidraw0: USB HID v0.04 Device [HID 0458:501b] on usb-dummy_hcd.4-1/input0 [ 1570.305126][ T9] kye 0003:0458:501B.0050: tablet-enabling feature report not found [ 1570.331963][ T6298] usb 6-1: Using ep0 maxpacket: 16 [ 1570.345920][ T9] kye 0003:0458:501B.0050: tablet enabling failed [ 1570.470217][ T6298] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1570.508207][ T6298] usb 6-1: no configurations [ 1570.535895][ T6298] usb 6-1: can't read configurations, error -22 [ 1571.784736][T29606] netlink: 'syz.5.6030': attribute type 4 has an invalid length. [ 1571.802183][T29606] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6030'. [ 1571.835001][T29606] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1572.061877][ T6298] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1572.093855][T17541] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1572.234382][ T6298] usb 3-1: Using ep0 maxpacket: 16 [ 1572.251579][ T6298] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1572.283154][T17541] usb 6-1: config 0 has an invalid interface number: 212 but max is 0 [ 1572.294626][ T6298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1572.310882][T17541] usb 6-1: config 0 has no interface number 0 [ 1572.329678][T17541] usb 6-1: config 0 interface 212 altsetting 103 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 1572.352994][ T6298] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1572.370577][T17541] usb 6-1: config 0 interface 212 has no altsetting 0 [ 1572.378591][ T6298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.396973][T17541] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1572.409762][ T6298] usb 3-1: Product: syz [ 1572.417257][ T6298] usb 3-1: Manufacturer: syz [ 1572.428534][T17541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.439421][ T6298] usb 3-1: SerialNumber: syz [ 1572.459674][ T6298] usb 3-1: config 0 descriptor?? [ 1572.465381][T17541] usb 6-1: config 0 descriptor?? [ 1572.487943][ T6298] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1572.514652][ T6298] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1572.665830][T29613] netlink: 'syz.6.6032': attribute type 20 has an invalid length. [ 1572.751641][T29606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.900939][T17541] usb 6-1: string descriptor 0 read error: -71 [ 1572.939996][T17541] pegasus 6-1:0.212: probe with driver pegasus failed with error -71 [ 1572.971566][T17541] usb 6-1: USB disconnect, device number 84 [ 1572.986283][ T9] usb 5-1: USB disconnect, device number 114 [ 1573.106203][ T6298] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1573.137804][ T6298] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1573.502091][T17541] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1573.632002][T29627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6035'. [ 1573.680213][T29627] bond0: entered promiscuous mode [ 1573.697566][T17541] usb 5-1: Using ep0 maxpacket: 16 [ 1573.716430][T17541] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1573.718096][T29627] geneve0: entered promiscuous mode [ 1573.725936][T17541] usb 5-1: config 0 has an invalid interface number: 137 but max is 128 [ 1573.740958][T17541] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.752158][T17541] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1573.766561][T17541] usb 5-1: config 0 has no interface number 0 [ 1573.770526][T29627] hsr1: entered promiscuous mode [ 1573.778240][T17541] usb 5-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1573.818417][T17541] usb 5-1: New USB device strings: Mfr=1, Product=1, SerialNumber=3 [ 1573.836945][T17541] usb 5-1: Product: syz [ 1573.846970][T17541] usb 5-1: Manufacturer: syz [ 1573.858691][T17541] usb 5-1: SerialNumber: syz [ 1573.880072][T17541] usb 5-1: config 0 descriptor?? [ 1573.909688][ T6298] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1573.926158][T17541] go7007 5-1:0.137: Sensoray 2250 found [ 1573.941390][ T6298] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1573.949462][T17541] go7007 5-1:0.137: probe with driver go7007 failed with error -12 [ 1573.964735][ T6298] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1573.999992][T29633] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1574.176772][T29636] syzkaller0: entered promiscuous mode [ 1574.182667][T29636] syzkaller0: entered allmulticast mode [ 1574.217941][T29638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1574.228618][T29636] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6038'. [ 1574.240932][T29636] tipc: Enabled bearer , priority 0 [ 1574.256453][T29635] tipc: Resetting bearer [ 1574.311208][T29635] tipc: Disabling bearer [ 1574.391367][ T6298] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1574.405153][ T6298] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1574.415676][ T6298] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1574.475819][ T6298] usb 3-1: USB disconnect, device number 53 [ 1575.308030][T29660] netlink: 'syz.7.6044': attribute type 1 has an invalid length. [ 1575.308065][T29660] netlink: 'syz.7.6044': attribute type 2 has an invalid length. [ 1575.308074][T29660] netlink: 'syz.7.6044': attribute type 1 has an invalid length. [ 1575.308082][T29660] netlink: 'syz.7.6044': attribute type 3 has an invalid length. [ 1575.313218][T29660] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1575.731150][T29670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1576.050627][T29673] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6047'. [ 1576.050648][T29673] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6047'. [ 1576.400465][T29677] netlink: zone id is out of range [ 1577.575843][T29677] netlink: set zone limit has 4 unknown bytes [ 1578.283013][T29687] hub 1-0:1.0: USB hub found [ 1578.284822][T29687] hub 1-0:1.0: 1 port detected [ 1579.078688][T29696] bridge_slave_0: left allmulticast mode [ 1579.112587][T29696] bridge_slave_0: left promiscuous mode [ 1579.126358][T29696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.190100][T29696] bridge_slave_1: left allmulticast mode [ 1579.202976][T29696] bridge_slave_1: left promiscuous mode [ 1579.226716][T29696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.259843][T29696] bond0: (slave bond_slave_0): Releasing backup interface [ 1579.321163][T29696] bond0: (slave bond_slave_1): Releasing backup interface [ 1579.364675][T29696] team0: Port device team_slave_0 removed [ 1579.395088][T29696] team0: Port device team_slave_1 removed [ 1579.407940][T29696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.421803][T29696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.513937][T29696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.522013][T29696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.672872][T29696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1579.714520][T29703] netlink: 'syz.6.6056': attribute type 12 has an invalid length. [ 1579.762304][T29703] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6056'. [ 1581.436947][T29730] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6060'. [ 1581.972819][ T5896] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1582.112023][ T5896] usb 6-1: device descriptor read/64, error -71 [ 1582.352705][ T5896] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1582.493365][ T5896] usb 6-1: device descriptor read/64, error -71 [ 1582.585602][T29737] can: request_module (can-proto-0) failed. [ 1582.605596][ T5896] usb usb6-port1: attempt power cycle [ 1582.900857][T17541] usb 5-1: USB disconnect, device number 115 [ 1582.963145][ T5896] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1583.021957][ T5896] usb 6-1: device descriptor read/8, error -71 [ 1583.291866][ T5896] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1583.337082][ T5896] usb 6-1: device descriptor read/8, error -71 [ 1583.452522][ T5896] usb usb6-port1: unable to enumerate USB device [ 1584.705792][T29778] xt_CT: No such helper "pptp" [ 1584.773006][T29784] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1585.471264][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1585.495385][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1586.551277][T29813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6085'. [ 1587.102416][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1587.142011][ T5896] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1587.251950][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1587.260139][ T9] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.271489][ T9] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.282313][ T9] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1587.293320][ T9] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1587.303154][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 1587.308717][ T9] usb 5-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1587.324661][ T9] usb 5-1: config 7 interface 0 has no altsetting 0 [ 1587.331383][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1587.341008][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.351350][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.359861][ T5896] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1587.370170][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.388533][ T5896] usb 6-1: config 0 descriptor?? [ 1587.405790][ T5896] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1587.795754][T29822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1587.806996][T29822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1587.865007][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0051/input/input142 [ 1588.001915][ T9] kye 0003:0458:5010.0051: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 1588.044217][T29822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.089454][T29822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.187501][T17541] usb 5-1: USB disconnect, device number 116 [ 1588.233603][T29835] fido_id[29835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1588.584813][ T5896] gspca_vc032x: reg_r err -71 [ 1588.595758][ T5896] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 1588.622143][ T5896] usb 6-1: USB disconnect, device number 89 [ 1588.728417][ T9] IPVS: starting estimator thread 0... [ 1588.872694][T29842] IPVS: using max 49 ests per chain, 117600 per kthread [ 1589.382960][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1589.404566][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1589.404580][ T30] audit: type=1326 audit(1766229799.419:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1589.499312][ T30] audit: type=1326 audit(1766229799.449:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1589.570807][ T30] audit: type=1326 audit(1766229799.449:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1589.600483][ T30] audit: type=1326 audit(1766229799.449:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1589.623273][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1589.668137][ T9] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 1589.676737][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1589.698395][ T9] usb 5-1: config 0 has no interface number 0 [ 1589.710721][ T30] audit: type=1326 audit(1766229799.449:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1589.733264][ T9] usb 5-1: config 0 interface 59 has no altsetting 0 [ 1589.753051][ T30] audit: type=1326 audit(1766229799.449:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1589.782428][ T9] usb 5-1: New USB device found, idVendor=2405, idProduct=0003, bcdDevice=9f.e0 [ 1589.795118][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.819378][ T9] usb 5-1: Product: syz [ 1589.823937][ T30] audit: type=1326 audit(1766229799.449:9396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1589.852404][ T9] usb 5-1: Manufacturer: syz [ 1589.861585][ T9] usb 5-1: SerialNumber: syz [ 1589.878651][ T9] usb 5-1: config 0 descriptor?? [ 1589.892395][ T9] cp210x 5-1:0.59: cp210x converter detected [ 1589.912064][ T30] audit: type=1326 audit(1766229799.449:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1589.981850][ T30] audit: type=1326 audit(1766229799.449:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1590.044499][ T30] audit: type=1326 audit(1766229799.449:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29857 comm="syz.2.6099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1590.092173][ T9] cp210x 5-1:0.59: failed to get vendor val 0x370b size 1: -32 [ 1590.101850][ T9] cp210x 5-1:0.59: querying part number failed [ 1590.136894][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1591.208464][ T9] usb 5-1: USB disconnect, device number 117 [ 1591.252751][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1591.301474][ T9] cp210x 5-1:0.59: device disconnected [ 1591.327840][T29891] lo: Caught tx_queue_len zero misconfig [ 1591.751915][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1591.938815][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1591.970925][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1592.005092][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1592.040127][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1592.059642][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1592.072172][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1592.084270][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1592.098995][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1592.126071][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1592.153575][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1592.180701][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1592.208131][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1592.224932][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1592.239377][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1592.249339][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1592.261076][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1592.269245][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1592.279635][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1592.296529][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1592.307824][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1592.333361][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1592.361869][ T6298] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1592.369764][T17541] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1592.388533][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1592.418862][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1592.438171][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1592.460897][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1592.486913][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1592.541957][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1592.556332][ T6298] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 1592.575536][ T9] usb 5-1: Product: syz [ 1592.583071][ T9] usb 5-1: Manufacturer: syz [ 1592.584040][T17541] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1592.587813][ T9] usb 5-1: SerialNumber: syz [ 1592.604323][ T6298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.613106][T17541] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1592.623395][ T9] usb 5-1: config 0 descriptor?? [ 1592.643094][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1592.647814][ T6298] usb 3-1: config 0 descriptor?? [ 1592.664333][T17541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.686354][ T6298] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1592.721435][T17541] usb 6-1: config 0 descriptor?? [ 1592.727020][ T6298] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1592.747550][ T6298] dvb-usb: bulk message failed: -22 (2/0) [ 1592.788952][ T6298] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1592.861122][ T6298] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1593.188042][ T9] usb 5-1: USB disconnect, device number 118 [ 1593.250409][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1593.651275][ T9] usb 3-1: USB disconnect, device number 54 [ 1593.872382][T17541] video4linux radio48: keene_cmd_main failed (-110) [ 1593.879387][T17541] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 1594.061856][T17541] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1594.129132][ T5903] usb 6-1: USB disconnect, device number 90 [ 1594.211879][T17541] usb 5-1: Using ep0 maxpacket: 16 [ 1594.218866][T17541] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.229433][T17541] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.241202][T17541] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1594.252650][T17541] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1594.269010][T17541] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1594.278867][T17541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1594.287316][T17541] usb 5-1: SerialNumber: syz [ 1594.309820][T17541] hub 5-1:1.0: bad descriptor, ignoring hub [ 1594.319141][T17541] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1594.328499][T17541] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1594.369848][T29952] vivid-000: disconnect [ 1594.719455][T29936] raw-gadget.1 gadget.4: fail, usb_ep_set_halt returned -11 [ 1594.734480][T29936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.747118][T29936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.862322][ T9] usb 5-1: USB disconnect, device number 119 [ 1595.149010][T29952] vivid-000: reconnect [ 1595.348109][T29962] fuse: Unknown parameter './file0' [ 1595.363282][T24351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.388359][T24351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.418514][T29960] netlink: 45 bytes leftover after parsing attributes in process `syz.5.6126'. [ 1595.433304][T29968] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1595.636465][T29975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1595.646303][T29975] netlink: 'syz.4.6132': attribute type 7 has an invalid length. [ 1595.655751][T29975] netlink: 'syz.4.6132': attribute type 8 has an invalid length. [ 1595.665324][T29975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1595.689154][T29975] erspan0: entered promiscuous mode [ 1595.694641][T17541] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1595.710638][T29975] gretap0: entered promiscuous mode [ 1595.720659][T29975] debugfs: 'hsr1' already exists in 'hsr' [ 1595.726975][T29975] Cannot create hsr debugfs directory [ 1595.842529][T17541] usb 6-1: device descriptor read/64, error -71 [ 1596.073014][ T5896] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1596.081955][T17541] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1596.212022][T17541] usb 6-1: device descriptor read/64, error -71 [ 1596.241318][ T5896] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.261914][ T5896] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1596.283334][ T5896] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1596.301403][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.309969][ T5896] usb 5-1: Product: syz [ 1596.314490][ T5896] usb 5-1: Manufacturer: syz [ 1596.322907][ T5896] usb 5-1: SerialNumber: syz [ 1596.333233][T17541] usb usb6-port1: attempt power cycle [ 1596.361938][ T5896] cdc_mbim 5-1:1.0: skipping garbage [ 1596.567855][T29977] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1596.691849][T17541] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1596.722508][T17541] usb 6-1: device descriptor read/8, error -71 [ 1596.832032][T16756] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 1596.961930][T17541] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1596.994895][T17541] usb 6-1: device descriptor read/8, error -71 [ 1597.012146][T16756] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1597.020230][T16756] usb 3-1: config 0 has no interface number 0 [ 1597.039635][T16756] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1597.061153][T16756] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1597.083345][T16756] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1597.103193][T16756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.130650][T16756] usb 3-1: config 0 descriptor?? [ 1597.137245][T17541] usb usb6-port1: unable to enumerate USB device [ 1597.156499][T29996] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1597.183281][T16756] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1597.186180][T29977] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1597.223848][ T5896] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1597.232461][ T5896] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 1597.397405][ T9] usb 3-1: USB disconnect, device number 55 [ 1597.397489][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1597.440594][ T5896] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 1597.463463][ T5896] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1597.491692][ T5896] wwan wwan0: port wwan0mbim0 attached [ 1597.514522][ T5896] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 2e:e1:92:8e:8d:b2 [ 1597.655542][ C1] wdm_int_callback: 29 callbacks suppressed [ 1597.655570][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.668206][ C1] wdm_int_callback: 29 callbacks suppressed [ 1597.668230][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.680740][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.687457][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.694160][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.700885][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.712223][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.719029][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.726198][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.732995][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.740725][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.747446][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.754312][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.761025][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.767596][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.774301][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.780751][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.787466][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.793926][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 1597.800647][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 1597.813904][T16756] usb 5-1: USB disconnect, device number 120 [ 1597.821052][T16756] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1597.857323][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6141'. [ 1597.877441][T30007] netlink: 'syz.6.6141': attribute type 10 has an invalid length. [ 1597.891044][T30007] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6141'. [ 1597.924629][T16756] wwan wwan0: port wwan0mbim0 disconnected [ 1598.561113][T30032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6145'. [ 1598.668581][T30039] macvtap1: entered allmulticast mode [ 1598.686980][T30039] veth0_macvtap: entered allmulticast mode [ 1598.741909][T16756] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1598.922294][T16756] usb 3-1: Using ep0 maxpacket: 16 [ 1598.935180][T16756] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1598.949365][T16756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.961492][T16756] usb 3-1: config 0 descriptor?? [ 1598.986634][T16756] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1599.141990][ T5896] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 1599.300301][ T5896] usb 5-1: device descriptor read/64, error -71 [ 1599.474932][T30072] program syz.6.6151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1599.562344][ T5896] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 1599.814491][ T5896] usb 5-1: device descriptor read/64, error -71 [ 1599.853657][T30084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6153'. [ 1599.877324][T30084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6153'. [ 1599.922375][ T5896] usb usb5-port1: attempt power cycle [ 1600.271845][ T5896] usb 5-1: new low-speed USB device number 123 using dummy_hcd [ 1600.293586][ T5896] usb 5-1: device descriptor read/8, error -71 [ 1600.532656][ T5896] usb 5-1: new low-speed USB device number 124 using dummy_hcd [ 1600.569778][ T5896] usb 5-1: device descriptor read/8, error -71 [ 1600.612500][T16756] gspca_sonixj: reg_w1 err -110 [ 1600.632122][T16756] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1600.702490][ T5896] usb usb5-port1: unable to enumerate USB device [ 1600.943807][T16756] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1601.047771][T30102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6159'. [ 1601.106756][T16756] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 1601.115572][T16756] usb 6-1: config 0 has no interface number 0 [ 1601.122640][T16756] usb 6-1: config 0 interface 122 has no altsetting 0 [ 1601.133673][T16756] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1601.157563][T16756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.185943][T16756] usb 6-1: Product: syz [ 1601.190747][T16756] usb 6-1: Manufacturer: syz [ 1601.199757][T16756] usb 6-1: SerialNumber: syz [ 1601.210702][T30105] vivid-002: disconnect [ 1601.211344][T16756] usb 6-1: config 0 descriptor?? [ 1601.493354][ T5896] usb 3-1: USB disconnect, device number 56 [ 1602.509065][T30105] vivid-002: reconnect [ 1602.698234][T30144] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6164'. [ 1603.152013][ T5896] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1603.291936][ T5896] usb 5-1: device descriptor read/64, error -71 [ 1603.552567][ T5896] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1603.610583][T16756] usb 6-1: USB disconnect, device number 95 [ 1603.622744][T16756] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1603.703040][ T5896] usb 5-1: device descriptor read/64, error -71 [ 1603.731982][ T9] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1603.823049][ T5896] usb usb5-port1: attempt power cycle [ 1603.904567][ T9] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1603.916116][ T9] usb 3-1: config 0 has no interface number 0 [ 1603.929027][ T9] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1603.956205][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1603.978838][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.996037][ T9] usb 3-1: Product: syz [ 1604.000266][ T9] usb 3-1: Manufacturer: syz [ 1604.016544][ T9] usb 3-1: SerialNumber: syz [ 1604.033664][ T9] usb 3-1: config 0 descriptor?? [ 1604.042108][T30152] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1604.061692][ T9] usb-storage 3-1:0.20: USB Mass Storage device detected [ 1604.094746][ T9] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1604.162089][ T5896] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 1604.211886][ T5896] usb 5-1: device descriptor read/8, error -71 [ 1604.257008][ T9] scsi host1: usb-storage 3-1:0.20 [ 1604.312219][ T9] usb 3-1: USB disconnect, device number 57 [ 1604.452853][ T5896] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1604.535452][ T5896] usb 5-1: device descriptor read/8, error -71 [ 1604.653048][ T5896] usb usb5-port1: unable to enumerate USB device [ 1604.661875][T17541] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1604.811930][T17541] usb 6-1: Using ep0 maxpacket: 32 [ 1604.827793][T17541] usb 6-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1604.838125][T17541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.861292][T17541] usb 6-1: config 0 descriptor?? [ 1604.884074][T17541] go7007 6-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1605.088879][T17541] usb 6-1: USB disconnect, device number 96 [ 1606.879226][T30196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'. [ 1607.591505][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.597896][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.956656][T30225] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1608.981504][T30225] netlink: 'syz.6.6183': attribute type 10 has an invalid length. [ 1609.028393][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6183'. [ 1609.511920][ T5896] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1609.675096][ T5896] usb 6-1: not running at top speed; connect to a high speed hub [ 1609.710429][ T5896] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1609.760690][ T5896] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1609.778975][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.788139][ T5896] usb 6-1: Product: syz [ 1609.801434][ T5896] usb 6-1: Manufacturer: syz [ 1609.809239][ T5896] usb 6-1: SerialNumber: syz [ 1609.834984][T30239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6188'. [ 1609.855380][ T5896] usb 6-1: bad CDC descriptors [ 1610.056057][T17541] usb 6-1: USB disconnect, device number 97 [ 1610.869468][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1610.869485][ T30] audit: type=1326 audit(1766229820.879:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.000316][ T30] audit: type=1326 audit(1766229820.879:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.074309][ T30] audit: type=1326 audit(1766229820.879:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.149390][ T30] audit: type=1326 audit(1766229820.879:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.201571][ T30] audit: type=1326 audit(1766229820.879:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.272426][ T30] audit: type=1326 audit(1766229820.879:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.313740][ T30] audit: type=1326 audit(1766229820.879:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.378227][ T30] audit: type=1326 audit(1766229820.879:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.459056][ T30] audit: type=1326 audit(1766229820.909:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.522505][ T30] audit: type=1326 audit(1766229820.909:9502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30244 comm="syz.5.6189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1611.954727][T30266] openvswitch: netlink: Flow key attribute not present in set flow. [ 1612.061471][T30268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6195'. [ 1612.185130][T30271] tipc: Started in network mode [ 1612.192775][T30271] tipc: Node identity 06d581151be7, cluster identity 4711 [ 1612.255867][T30271] tipc: Enabled bearer , priority 0 [ 1612.276244][T30273] syzkaller0: entered promiscuous mode [ 1612.283207][T30273] syzkaller0: entered allmulticast mode [ 1612.294667][T30276] program syz.4.6198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1612.346441][T30271] tipc: Resetting bearer [ 1612.374168][T30270] tipc: Resetting bearer [ 1612.397785][T30270] tipc: Disabling bearer [ 1612.562230][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1612.714318][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 1612.728156][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1612.740925][ T5953] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1612.759772][ T5953] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1612.780118][ T5953] usb 5-1: config 4 has no interface number 0 [ 1612.805974][T30288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6201'. [ 1612.814388][ T5953] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1612.847141][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.872543][ T5953] usb 5-1: Product: syz [ 1612.876756][ T5953] usb 5-1: Manufacturer: syz [ 1612.891990][ T5953] usb 5-1: SerialNumber: syz [ 1613.152872][ T5953] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1613.182188][ T5953] uvcvideo 5-1:4.147: No valid video chain found. [ 1613.242317][ T5953] usb 5-1: USB disconnect, device number 3 [ 1613.253463][T16062] tipc: Left network mode [ 1613.390753][T30301] netlink: 'syz.2.6205': attribute type 1 has an invalid length. [ 1613.445676][T30303] netlink: 'syz.2.6205': attribute type 61 has an invalid length. [ 1613.453151][T30301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1613.473450][T17541] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1613.512687][T30300] delete_channel: no stack [ 1613.517377][T30300] delete_channel: no stack [ 1613.643743][T17541] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1613.657600][T17541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1613.671264][T17541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1613.699764][T17541] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1613.750167][T17541] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1613.782488][T17541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.827853][T17541] usb 6-1: config 0 descriptor?? [ 1613.880600][T30309] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6208'. [ 1614.131626][T30314] tipc: Enabled bearer , priority 0 [ 1614.259325][T17541] plantronics 0003:047F:FFFF.0052: ignoring exceeding usage max [ 1614.285345][T30314] tipc: Resetting bearer [ 1614.346170][T17541] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1614.353092][ T5953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1614.571984][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 1614.628450][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.681478][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1614.748721][ T5953] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1614.790620][T30328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.798608][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.847727][ T5953] usb 5-1: config 0 descriptor?? [ 1614.859806][T30314] tipc: Disabling bearer [ 1614.860368][T30328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.913459][ T5953] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1615.070370][T30328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6204'. [ 1615.113902][ T5953] usb 5-1: USB disconnect, device number 4 [ 1616.091290][T30341] random: crng reseeded on system resumption [ 1616.130685][T30341] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6213'. [ 1616.471146][T17541] usb 6-1: USB disconnect, device number 98 [ 1616.872054][T17541] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1617.127064][T17541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.170222][T27488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1617.184204][T27488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1617.220056][T27488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1617.230618][T27488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1617.231841][T17541] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1617.248178][T27488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1617.302244][T17541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.350915][T17541] usb 6-1: config 0 descriptor?? [ 1617.599271][T17541] usbhid 6-1:0.0: can't add hid device: -71 [ 1617.607113][T17541] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1617.646414][T17541] usb 6-1: USB disconnect, device number 99 [ 1617.665793][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 1617.665812][ T30] audit: type=1326 audit(1766229827.679:9593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30349 comm="syz.2.6217" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd539 code=0x0 [ 1618.161957][T17541] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1618.192198][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.248413][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1618.341938][T17541] usb 6-1: Using ep0 maxpacket: 32 [ 1618.375890][T17541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.421937][T17541] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1618.492070][T17541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.514979][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.537410][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1618.560833][T17541] usb 6-1: config 0 descriptor?? [ 1618.600427][T17541] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1618.629149][T30348] chnl_net:caif_netlink_parms(): no params data found [ 1618.643792][T17541] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1618.786959][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.810994][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1618.975073][ T70] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 1619.049154][ T70] batman_adv: batadv0: Removing interface: netdevsim0 [ 1619.068715][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.104758][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1619.331949][T27488] Bluetooth: hci1: command tx timeout [ 1619.840609][T30348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.855728][T30348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.863378][T30348] bridge_slave_0: entered allmulticast mode [ 1619.875299][T30348] bridge_slave_0: entered promiscuous mode [ 1619.903738][T30348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.911178][T30348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.920939][T30348] bridge_slave_1: entered allmulticast mode [ 1619.934079][T30348] bridge_slave_1: entered promiscuous mode [ 1620.078430][ T70] bridge1: port 2(veth5) entered disabled state [ 1620.090179][ T70] bridge1: port 1(veth3) entered disabled state [ 1620.114284][ T70] tipc: Resetting bearer [ 1620.326554][ T5953] usb 6-1: USB disconnect, device number 100 [ 1620.361384][ T5953] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1621.200174][ T30] audit: type=1804 audit(1766229831.199:9594): pid=30394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6224" name="file1" dev="ramfs" ino=142812 res=1 errno=0 [ 1621.310797][ T30] audit: type=1804 audit(1766229831.319:9595): pid=30395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6224" name="file1" dev="ramfs" ino=142812 res=1 errno=0 [ 1621.424831][T27488] Bluetooth: hci1: command tx timeout [ 1622.216949][ T70] BUG: MAX_LOCKDEP_KEYS too low! [ 1622.221942][ T70] turning off the locking correctness validator. [ 1622.228289][ T70] CPU: 1 UID: 0 PID: 70 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.228318][ T70] Tainted: [L]=SOFTLOCKUP [ 1622.228325][ T70] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1622.228337][ T70] Workqueue: netns cleanup_net [ 1622.228364][ T70] Call Trace: [ 1622.228373][ T70] [ 1622.228378][ T70] dump_stack_lvl+0x189/0x250 [ 1622.228395][ T70] ? is_dynamic_key+0xd6/0x1c0 [ 1622.228406][ T70] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1622.228419][ T70] ? __pfx__printk+0x10/0x10 [ 1622.228434][ T70] ? is_dynamic_key+0xd6/0x1c0 [ 1622.228444][ T70] ? is_module_address+0x17/0xf0 [ 1622.228455][ T70] ? is_module_address+0x17/0xf0 [ 1622.228465][ T70] ? is_dynamic_key+0xd6/0x1c0 [ 1622.228474][ T70] ? is_dynamic_key+0xd6/0x1c0 [ 1622.228484][ T70] ? is_dynamic_key+0xd6/0x1c0 [ 1622.228495][ T70] register_lock_class+0x2dc/0x320 [ 1622.228507][ T70] __lock_acquire+0xae/0x2cf0 [ 1622.228519][ T70] ? irqentry_exit+0x5dd/0x660 [ 1622.228535][ T70] ? dev_reset_queue+0xfa/0x1b0 [ 1622.228548][ T70] lock_acquire+0x117/0x340 [ 1622.228558][ T70] ? dev_reset_queue+0xfa/0x1b0 [ 1622.228573][ T70] ? dev_reset_queue+0xfa/0x1b0 [ 1622.228585][ T70] _raw_spin_lock_bh+0x36/0x50 [ 1622.228600][ T70] ? dev_reset_queue+0xfa/0x1b0 [ 1622.228612][ T70] dev_reset_queue+0xfa/0x1b0 [ 1622.228625][ T70] dev_deactivate_many+0x720/0xd40 [ 1622.228639][ T70] ? dev_deactivate_many+0x258/0xd40 [ 1622.228652][ T70] __dev_close_many+0x152/0x6b0 [ 1622.228664][ T70] ? __pfx___dev_close_many+0x10/0x10 [ 1622.228677][ T70] netif_close_many+0x225/0x410 [ 1622.228689][ T70] ? __pfx_netif_close_many+0x10/0x10 [ 1622.228702][ T70] unregister_netdevice_many_notify+0xb50/0x2340 [ 1622.228722][ T70] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1622.228738][ T70] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1622.228753][ T70] ? net_generic+0x1e/0x240 [ 1622.228768][ T70] ? nexthop_net_exit_rtnl+0xde/0x110 [ 1622.228781][ T70] ops_undo_list+0x3dc/0x990 [ 1622.228794][ T70] ? __pfx_ops_undo_list+0x10/0x10 [ 1622.228806][ T70] ? do_raw_spin_unlock+0x122/0x240 [ 1622.228831][ T70] cleanup_net+0x4d8/0x7a0 [ 1622.228843][ T70] ? __pfx_cleanup_net+0x10/0x10 [ 1622.228855][ T70] ? _raw_spin_unlock_irq+0x23/0x50 [ 1622.228870][ T70] ? process_scheduled_works+0x9ef/0x1770 [ 1622.228882][ T70] ? process_scheduled_works+0x9ef/0x1770 [ 1622.228893][ T70] process_scheduled_works+0xad1/0x1770 [ 1622.228910][ T70] ? __pfx_process_scheduled_works+0x10/0x10 [ 1622.228925][ T70] worker_thread+0x8a0/0xda0 [ 1622.228942][ T70] kthread+0x711/0x8a0 [ 1622.228956][ T70] ? __pfx_worker_thread+0x10/0x10 [ 1622.228967][ T70] ? __pfx_kthread+0x10/0x10 [ 1622.228981][ T70] ? _raw_spin_unlock_irq+0x23/0x50 [ 1622.228996][ T70] ? lockdep_hardirqs_on+0x98/0x140 [ 1622.229006][ T70] ? __pfx_kthread+0x10/0x10 [ 1622.229019][ T70] ret_from_fork+0x599/0xb30 [ 1622.229031][ T70] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.229044][ T70] ? __switch_to_asm+0x39/0x70 [ 1622.229058][ T70] ? __switch_to_asm+0x33/0x70 [ 1622.229071][ T70] ? __pfx_kthread+0x10/0x10 [ 1622.229084][ T70] ret_from_fork_asm+0x1a/0x30 [ 1622.229102][ T70] [ 1623.503388][T27488] Bluetooth: hci1: command tx timeout [ 1625.576018][T27488] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: Connection timed out during banner exchange Connection to 10.128.1.67 port 22 timed out failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.1.67" "cat" "/proc/lockdep_stats" "/proc/lockdep" "/proc/lockdep_chains"]: exit status 255