last executing test programs: 3m24.831982864s ago: executing program 0 (id=1088): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)}) 3m24.705476161s ago: executing program 0 (id=1090): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2b02, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000414040226bd7000fbdbdf25b702575c1e379f26"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc0003) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffc, r6, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl_fd$Q_GETFMT(r8, 0xffffffff80000401, 0x0, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0xb, 'syz1\x00', 0x81}, 0x1, [0x6, 0x7fffffff, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000006, 0xfffffffffffffffa, 0xc8, 0xb6da, 0x80000a5, 0xb7, 0xb6, 0x8000000000000002, 0x4000000008, 0x7, 0xfff, 0x6, 0xfb, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x8, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000003, 0x5, 0x0, 0x7, 0x72, 0x9, 0x2000000002, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x4, 0x6, 0xfffffffffffffffd, 0x9, 0xf1, 0xfffffffffffffffe, 0x5, 0x2, 0x5, 0x2, 0xfffffffffffffffd, 0x9, 0x7, 0xdffffffffffffd, 0xd, 0x81, 0x8, 0x7fff, 0x6, 0xe, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x2, 0x1, 0xf, 0x79d, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0xf, 0x6, 0xb, 0x1, 0x10003, 0x1, 0x10000, 0x1ff, 0x6, 0x0, 0x7, 0x7, 0x0, 0xfc0, 0x7, 0xaad, 0x8000000000007, 0x2, 0x8, 0x200e2, 0x6, 0x6, 0x8, 0xa, 0x0, 0x9, 0x5, 0x40, 0x8000, 0x83d0, 0xf0, 0x100000000]}) 3m20.898958187s ago: executing program 0 (id=1100): syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x800006, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [@routing={0x2f, 0x0, 0x0, 0x1}], "13d86558da0a7f6b"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 3m20.425919172s ago: executing program 0 (id=1103): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20008004) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20008004}, 0xb4) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) unshare(0x22020600) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x180, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x69d}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1c8}, 0x1, 0x0, 0x0, 0xc091}, 0x800) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r10 = dup2(r6, r8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r10) (async) close_range(r10, 0xffffffffffffffff, 0x0) 3m20.258619913s ago: executing program 0 (id=1104): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000100)={0x2, "02c0cf0c629c527e5162bf1cab3223b02749791e5c7465e0caa7b1214ac1efe3", 0x5, 0x100, 0x1aa35bb2, 0x4b70, 0x4, 0x2, 0x80000001, 0x401}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8a06, 0x0, 0x0, 0x0, 0x4}, [@generic={0x1, 0x0, 0x7, 0x4, 0x100}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd700e000000001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x7, 0xfff, 0x4, @mcast1, @private0, 0x8, 0x1, 0x8, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x400, 0x3, {{0x23, 0x4, 0x2, 0x3, 0x8c, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x69, 0x1, [{0x6, 0xc, "dbdfb6fa168e6ac89a15"}, {0x2, 0x8, "03380c9e0e07"}, {0x5, 0xd, "02ff11da2371803a3f6bb7"}, {0x2, 0xb, "d4c2ccd23046499ecc"}, {0x5, 0xd, "128f382fbdcc630f41a971"}, {0x5, 0x7, "186ab90157"}, {0x2, 0x11, "5be2cff3c556f8225d5e6d0272a43c"}, {0x1, 0x12, "f887d3457a0759535cc8b570c78284bb"}]}, @timestamp={0x44, 0x8, 0xb6, 0x0, 0x3, [0x7a]}, @end, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x9c, 0x0, 0x3, 0x14, @loopback, @mcast2, 0x80, 0x1, 0x8}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'xfrm0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@loopback, 0x0}, &(0x7f0000000500)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@private, @multicast2, 0x0}, &(0x7f00000005c0)=0xc) r11 = socket(0x28, 0x1, 0x0) getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xfff1}, {0x0, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) syz_usb_connect(0x0, 0x4fa, &(0x7f0000000540)=ANY=[@ANYBLOB="120100022502aa10120a105daae9010203010902e80404060000000904"], 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x5, 0x6, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @multicast1, {[@rr={0x7, 0x17, 0x13, [@rand_addr=0x64010101, @broadcast, @multicast2, @local, @rand_addr=0x64010100]}, @cipso={0x86, 0x27, 0x1, [{0x2, 0x12, "c7a7ff0f002d775dd01b2d95fedfb17e"}, {0x7, 0x7, "529bd9c513"}, {0x6, 0x8, "3460676a3fdd"}]}, @timestamp={0x44, 0x8, 0x3d, 0x0, 0x5, [0x1]}, @rr={0x7, 0xf, 0xe1, [@multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2d}]}, @timestamp_prespec={0x44, 0x14, 0xf0, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff80}, {@local, 0x6ee}]}, @ssrr={0x89, 0x7, 0x66, [@multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x4a, 0xd808, 0x12, @mcast2, @mcast1, 0x40, 0x10, 0x5, 0xf}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="20020000", @ANYRES16=r2, @ANYBLOB="00012abd7000fcdbdf250b0000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="1400020070696d367265673000000000000000001400020064766d72703100000000000000000000140002007663616e3000000000000000000000000c00018008000100", @ANYRES32=r6, @ANYBLOB="3000018014000200766c616e310000000000000000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5800018008000100", @ANYRES32=r9, @ANYBLOB="140002006e7230000000000000000000000000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020070696d3672656730000000000000000008000300020000001400018008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c0001801400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000008000300000000000c00018008000300000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000080003000000000008000100", @ANYRES32=r14, @ANYBLOB="140002006e657470636930000000000000000000140002007465616d5f736c6176655f31000000004c000180080003000300000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="0800019d1a2ec11fc476f6fca5e39738c84d26d77cf1c8a9cb2dc5c0bf1b921491a0be5acfb51fc7cc50f37abec17b1f32a1082610967cf1501219a8c3540dead38946a51f17ccd1209a460e0d31a83c9033d5f6e11bae9ecc0fa813f6e10af5edebbb3e6669009ce4f69c578815b7ca75de2a6caefe420004f1c7a937e0430324b2993c7c719bd50d06bc796cc1e51af6d58e2aee77c5977c4b935caea20c7530adc81b6f20323b022e522802a171f1", @ANYRES32=0x0, @ANYBLOB="14000200766574683000000000000000000000001400020076657468305f746f5f62726964676500"], 0x220}, 0x1, 0x0, 0x0, 0x24088004}, 0x10) 3m19.987093407s ago: executing program 0 (id=1108): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) io_setup(0x1, &(0x7f0000000000)=0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r5, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6, r6, 0x0, 0x0, 0x5601}]) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078ff6f23a18d6d2aea1ef7a22885d916bd3c4a8f64e2636d175e2eac55087fe9e7417eb7f2071e6c27651c3feb5246928e10b1327b70cde62faf14c46908a8947e74"], 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xe, 0xffff}, {0x7, 0xfffc}, {0xfff1, 0xc}}}, 0x24}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0xfff1}, {0xfff2, 0xffff}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat(0xffffffffffffff9c, 0x0, 0x515001, 0x488) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="b3af001d64c0d694aed544a10000965f057c3d1f23bece3ed145ff96b245f47362f2b39e12311d6c7415c0d570f8ab778a6816e4fde915ffd7ea9ce212b938b437efb2a56b06ba48d187"], 0x14}, 0x1, 0x0, 0x0, 0x6008801}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) 3m19.618293192s ago: executing program 32 (id=1108): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) io_setup(0x1, &(0x7f0000000000)=0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r5, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6, r6, 0x0, 0x0, 0x5601}]) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078ff6f23a18d6d2aea1ef7a22885d916bd3c4a8f64e2636d175e2eac55087fe9e7417eb7f2071e6c27651c3feb5246928e10b1327b70cde62faf14c46908a8947e74"], 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xe, 0xffff}, {0x7, 0xfffc}, {0xfff1, 0xc}}}, 0x24}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0xfff1}, {0xfff2, 0xffff}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat(0xffffffffffffff9c, 0x0, 0x515001, 0x488) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="b3af001d64c0d694aed544a10000965f057c3d1f23bece3ed145ff96b245f47362f2b39e12311d6c7415c0d570f8ab778a6816e4fde915ffd7ea9ce212b938b437efb2a56b06ba48d187"], 0x14}, 0x1, 0x0, 0x0, 0x6008801}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) 20.113656828s ago: executing program 2 (id=1757): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="060000000400000040020000070000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x428840) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000900)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000844) shutdown(r4, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x49c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x464, 0x2, [@TCA_BASIC_POLICE={0x460, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x800003, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2d, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0xffffffff, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dc, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x100, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x25, 0x1, 0x4, 0x0, 0xb, 0x7, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0x8, 0x8, 0x9, 0x0, 0x6, 0x4, 0xc, 0x800, 0x6, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x9, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0xfffffffe, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x826]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x49c}, 0x1, 0x0, 0x0, 0xc0c3}, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="35ab2788d003aaaaaaaaaabb0800450000240000000000119078000000e0e00000014e240e22001090780201000080000000d57925f69deddd226b2c85"], 0x0) 18.520594578s ago: executing program 2 (id=1763): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) poll(&(0x7f0000000100), 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1", 0x7f, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff3}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}, 0x1, 0x3000000}, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.361713553s ago: executing program 2 (id=1768): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x0, 0x41) read$FUSE(r0, &(0x7f000000ddc0)={0x2020}, 0x2020) recvmmsg(r0, 0x0, 0x60, 0x10163, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16.237396142s ago: executing program 2 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x107, 0x20003, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="e2"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0c, 0xfac05, 0xfac08]}]]}, 0x34}}, 0x48080) 15.888634816s ago: executing program 2 (id=1770): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x1cc6, &(0x7f0000000480)={0x0, 0xcf2a, 0x2, 0x2, 0x259}, &(0x7f0000000440), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f00000002c0)='l', 0x1) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000180)=0x5) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000001c0)={'gre0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000001c0)={'gre0\x00', @multicast}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x2004c000) 15.632629801s ago: executing program 2 (id=1771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'virt_wifi0\x00', 0x1000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x80241, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000480)=0xffff8000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x2, 0x8000, 0x84, 0xe2, 0x0, 0xff, 0x3575}, &(0x7f0000000080)=0x20) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x9, 0x802) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x80004506, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x60, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x7, 0xdffffff9, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) fcntl$setsig(r6, 0xa, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000080)={0x2001, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000540)={0x3, 0xc, 0x400, 0xf3c07b33db9026f3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', r8, 0x4, 0xff, 0xa, 0x1, 0x4b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7800, 0xffff0001, 0x6}}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@getqdisc={0x30, 0x26, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xb, 0x10}, {0xf, 0x1}, {0xa, 0xfff1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c8c4}, 0x0) 10.161523591s ago: executing program 5 (id=1787): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xcb, 0xd2, 0x67, 0x9, 0x19d2, 0x326, 0x1d11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8f, 0x1, 0x70, 0x81, "", [{{0x9, 0x4, 0xe3, 0x2, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x20, 0x5, 0x68, {0x68, 0x24, "d4e4ba56f51d1e50925d08dd3671b81897d0c350ef2d8866dc9b0c7768b27af3f16ee1913c5b406d48db6fc897100b303586421f331cee0f2df721535b165d188ff4e4d7c1b9b6bb3fe5097f3d3f97180bba4b727a425af4ee6794272640707c7055d3d97237"}}, &(0x7f0000000100)={0x0, 0x3, 0xca, @string={0xca, 0x3, "423b10a2d10bb8dbba713b8319ee4793f5fc77175f7a03163db865b9e2fe9b7289cdd41c2bf6c70d5e64e3fcb91f2ddf45ddd5d44ebb357bb14a3268b4ad9b5925db1c4c7dbd0120a1135e2e0a2928c5fe5bde2b0bb80849ba1f97ca4d5ca99d1409e341f92645636c2aa4cda77544633d6dc86ad76a888d41f7c273530018909835115772e994bd8be61409db4015ee3755fcb5003f75607bcad61d35e082b3f5664ba10902bddc6bc949cedc2c478b5c65247139c3798cc7c1cb4c77293b5510dd3fca05c558c0"}}, &(0x7f0000000200)={0x0, 0xf, 0x173, {0x5, 0xf, 0x173, 0x6, [@ptm_cap={0x3}, @generic={0x72, 0x10, 0xa, "5603f712ee39aa4daafa17be834d7b858845bda6b109410998f5a739f8505d1feeb934c16cebeaf352109a5bbd33731b6a925533c0005997688fe54f194b8e9ac6aacb27c05c14c2b998088c1db2ec451f0eab6c5ee148d5050cedce51a234e3c212265be46a0508a28b91ddf8de80"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d0519c9186b9ae506e2e2535052edcc5"}, @ext_cap={0x7, 0x10, 0x2, 0x9, 0x5, 0x7, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9d, "76fa405bd5b0663fc1c3c2f7723543c4"}, @generic={0xca, 0x10, 0x4, "1c3d0b3fd931d079c3eeacaa4544397cd694430e238aa65e60f087cf2d991b3595e9893a3a36f689eee6a91232e8d76cb887130436d1879b756179d9d2b3bb1f5fe329028e987a263690cac65c2a77fda6265f592a53b0172fc11637858af7115b19725a2eaca6d326e6ed0f5b0036c4fd5b9a04b06a5417b15b99cafb310d47f47903d2e78f29df78c9495eaf028f441f9bff9145f1f74e8ee2cbfccecc72cd5eac5ffc91f326051e1ff1f101e7bdcdede63283931a43c8f4bef33f3add11bfa017490834712f"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x0, 0x5e, 0x8, "253ac22d", "67211509"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x9, 0x1, 0x7, 0x8001}}}, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x20, 0x3, 0xd4, "a5d18aa8a6a77b61eb8468ede4cc285b5e39b5275d2d585cdc3b52c78ebeff3d1bfcc6a66353cc90ee454cbfbef071167919481336ea35015ee2104c6f8d8232d4c91a07e2c6eff53c8572df0d7c543350fbff16bfd22666ea836901b7b065b1f2d5b3c0ecae8f55048ed9eaeb0ac3b29cc10d2046f24223fde9a613765afe528f1c56b398852833f4387eea47acadd084308f385db752fe7097ecb15a783a89844634a8be27844ec168e2348f568e849d0a629d6dd462d1e110c18fe2e495ff3738a5d31688e3bfbb90130041b201485fa552a4"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xa5c3}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0xb, 0x2, '\\9'}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "8b9e"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1}}) open_by_handle_at(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="280000004e0010"], 0x10000) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0xb241, 0x480000) 9.744146402s ago: executing program 3 (id=1789): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="22ff0000190000010000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x200080c0}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x20, 0xc, 0x9, {0x9, 0x22, "2557cba2f16414"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000400)={0x20, 0x22, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="e98b1c91c7005ce25596f7a93aea5da81dbd3ba69f0ddbe86daffc44cc0b848e67faac6653da188fef3b740d7c91c0c7e5fc38b626f603d7694ec83f4ce15cb515bfaf553e", 0x45}], 0x1, 0x0, 0x3a0}}], 0x1, 0x810) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8) r1 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x0) 9.562206447s ago: executing program 5 (id=1790): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) socket$kcm(0x2, 0x1000000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x8000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x101, 0xffffffff}, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) truncate(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x7) 8.360986151s ago: executing program 5 (id=1792): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x498, 0x400, 0x1, 0x161}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400}) io_uring_enter(r5, 0x847bd, 0x5052, 0x5, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) syz_open_dev$dvb_demux(0x0, 0xfffffffffffffffe, 0x140c3) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x22, 0x8e, {0x8e, 0x2, "6454132ef9e8c2dcb958211125249f402618292cb5c4e6419d7ea35998b804690ad4178bb9613bebc6457526873ccf0eee49e4c9f1e48cadda1ccbd2cb006b1218046f4e4041ba80cd2872812f9fa50910b7f57ee55d7efe7cdcf85625cf983ca0886f8dfe6c0e904a287e457c166fdfe2b90fa6edf91b9172396cffcb63ac61c8848efd2611ae0626143add"}}, &(0x7f00000003c0)={0x0, 0x3, 0x64, @string={0x64, 0x3, "1e4c88ed7c1748eb5aeae41d7ee9e0a38f471395e9a59091966311c4e226d07fa917ea685246315f724206080c198e519efc11648c3dedf7d5b9b4d60d6d84ca891687b372b4f9db797f9c327bef800933effebfbdf01895f5be36bf4b3f24cb7c25"}}, &(0x7f0000000280)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x7, 0x9, "48ca6cd7", "3ca284f5"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0xc, 0x7, 0x1, 0x77a7, 0xfff3}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000c00)={0x40, 0xe, 0xe6, "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"}, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x7f}, &(0x7f00000000c0)={0x40, 0xb, 0x2, "6efe"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000940)={0x40, 0x19, 0x2, "aeb1"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x5}}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) sendfile(r9, r9, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) 7.405238114s ago: executing program 1 (id=1794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}}]}, 0x80}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}}]}, 0x80}, 0x1, 0x7}, 0x0) poll(&(0x7f0000000000)=[{r1, 0x402}, {r2, 0x8120}], 0x2, 0x2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4) (async) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4) 7.309893482s ago: executing program 1 (id=1795): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd338", 0x11e}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}], 0x4, 0x2090) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) close(0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.218224419s ago: executing program 3 (id=1796): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x6100083a, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r4 = syz_io_uring_setup(0x48d8, &(0x7f00000001c0)={0x0, 0x48e2, 0x40, 0x3, 0x1d4}, &(0x7f0000000000), &(0x7f0000000240)) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x20000) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r5, 0x5403) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x3) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000001180)=[{0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)}, {0x5, 0x1, 0x0, &(0x7f0000000a40)=[{&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000780)=""/15, 0xf}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f00000007c0)=""/16, 0x10}, {&(0x7f0000000940)=""/206, 0xce}], &(0x7f0000000ac0)=[0x0, 0xe8, 0x6, 0x2]}, {0x1, 0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)=""/223, 0xdf}], &(0x7f0000000c40)=[0x1000, 0x180, 0x7fffffff]}, {0x8, 0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000000e00)=""/78, 0x4e}, {&(0x7f0000000e80)=""/29, 0x1d}, {&(0x7f0000001000)=""/220, 0xdc}, {&(0x7f0000000ec0)=""/32, 0x20}], &(0x7f0000000f00)=[0x2, 0x5]}], 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000280)={0x6, 0x3, 0x8db3, 0x3, 'syz1\x00', 0x3c}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4000}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x8000) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x0, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0xfffffffffffffffe, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0xffffffff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x20641, 0xb3836f6d7a15f29) socketpair$unix(0x1, 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 6.877418478s ago: executing program 5 (id=1798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="77541b79b2cdf236214d5c6030f56bcc81099bf4eca4a4c279db4b7e8e4d550f39cc1ad60ae65497be28f71730088548a68d9aa7afd86ad9122a4315c665d9f9a7f7c3035c87853f3a671528bed0af", 0x4f}, {&(0x7f0000000440)="a86bbd68dac207de7d67da478a6c1f1f6c2e588a2b361f49d6392eee98bfe6146f2f4a943be9e2c323b9fd5ea34f64c71d930196d72448db2f61f6c6406ae0d2080d9300da9c7b835ec8fb0eda4de4474f", 0x51}], 0x2, 0x0, 0x0, 0x20004080}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/139, 0x8b}, {&(0x7f0000000080)=""/165, 0xa5}], 0x2}, 0x40000020) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0xa0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5}, {}, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x404d3, 0x2b}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x7f, @loopback, 0xfff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0cc5640, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x30, 0x32, 0x400, 0x70bd29, 0x25dfdafe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x30}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="34010000170001000000008000000000fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000200000000000000968fc477155f1a2fa07d4b0fd032186bfab44ad6dd9c9a2063a8f4db3d6bd2b16325306f9284890fbd4f1e3b7ccf33ded75291eda19f9d693336001f8de5c29b1ae3e221879bc562c64788015660f8ccf4f8e5ffcdc2931ed11540409db1418e517212600f103947eceb462aad84e40c20a3b4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000fd7f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000000000000000000800000000000000000000000000000000c0008000800080001050000"], 0x134}}, 0x0) listen(r9, 0x8) syz_open_dev$dri(&(0x7f00000000c0), 0x7b, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) 6.473402166s ago: executing program 4 (id=1799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00001cb000/0x12000)=nil, 0x12000, 0x13) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x5) 6.450417628s ago: executing program 1 (id=1800): r0 = socket$inet6(0xa, 0x3, 0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x2, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002200)={0x10, 0xffffffffffffffda}, 0x10) 6.414638783s ago: executing program 4 (id=1801): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x804) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 6.285537998s ago: executing program 3 (id=1802): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000000)=0xd, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x7, 0x4, 0x5, 0x8, 0xfff2, 0x2, 0x7ff, 0x2b, [{0xfffffff7, 0xcf, 0xffffb44b, 0x4}, {0x9, 0x400, 0x2, 0x8}, {0x8, 0x400, 0x3, 0xfffffff7}, {0x6, 0x6, 0x7fff, 0x51f3}, {0x3ff, 0xffff, 0x1}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 5.867365108s ago: executing program 3 (id=1803): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@loopback}}, 0xfffffffffffffffe) r1 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)=0x1, 0x0) r2 = syz_usb_connect(0x6, 0xf53, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x1d, 0x8d, 0x8f, 0x40, 0x1b3d, 0x11e, 0xfd2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf41, 0x3, 0xfc, 0xfc, 0xd0, 0x2, "", [{{0x9, 0x4, 0x4b, 0x2, 0xe, 0x19, 0x3a, 0xb, 0x7, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "1edb2080"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x8, 0x38}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x9, 0x7f, 0x7, 0x4b7f, 0x80}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xc, 0x1ff, 0xf4}, {0x6, 0x24, 0x1a, 0x14c8, 0x10}, [@mdlm_detail={0x31, 0x24, 0x13, 0x7, "ae1e08b4cc7a0f75c98f8b16c83518550a0aed3aa43805e61f52490f1c708c705a166ecedf130c3e1ddeb4e183"}]}], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x6, 0x8, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x17, 0xc}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x1, 0x3, 0x4a, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa}]}}, {{0x9, 0x5, 0xa, 0x1f, 0x3ff, 0x8, 0xf8, 0x7, [@generic={0x100, 0x21, "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"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x1, 0x2, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x6}]}}, {{0x9, 0x5, 0xd, 0x2b, 0x20, 0x9, 0x7, 0x7, [@generic={0xfa, 0x21, "1dc02be6f5b5f816c71655803a169da04a91ce7f7687e1029ddf699009ba8f8792113f03aed6679ded073071115876f9cfc7c262c921fe307fccc1e7c2f7bc52cf05884760593a9ee454b596a42fa5fd61cdab3e3ad678808dd1f51c082638a40adb19c79f60f439d5421a98efeed166152850094eef66ee4a3fe64f0fc1c907e7133f1b00789f1320d6388939eb3b27f9d8328edf06a538876fd37e264fa76f9290e2bbc7e1d909fdee248754ce5c8da89f5595715212f9ff684439346843ba139006ad62de06925604eba193ced37654f6bfc29c556eed5e02230376fd6b5f717afea5187e42f4754a89dc76de89460c6423532a5d2e2c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2b, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xc}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0xef, 0x7, 0x4, [@generic={0xad, 0x31, "6831402715f42b2b04fc6b17b382a46e1064f04087898d6c3e0ca0863a54d51572b964728a405ace992b97f05525a0ae5e438819c2b464248c10d1dd00816212232b5fcd2efe0c23e70d4a661133eb895cb4ebb4aa4523049321033a9f08f902873119107a954c38e1a08c81ffad84e00d8e34487b08aff097ca186727e2644e3a9472d08b89aeffed64b6737941d6e2fe3343473bac858ec47b7953076a3c52be79388f201952b192fc80"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xf, 0x2, 0x3, [@generic={0xba, 0x10, "96fd25bdeef7c4217da0180e409dcee2f39b544c15f955a1cd4f410db0b3f730f019bbc3eff6d059791d81e2b9740e17c4b48fa169f1e95ad446baa768b3c217dc96c806d28ab8e473a2b3e5ff08f61d12ad299feb8251c78d3c42a5a98e8e6ac5e66de9b3333a4da324ef985c16bd170c63a51b95571f4bfbc47dc6aeb532b5170741c928c19bd93d47f95f8dd8370650f4b09459f68fc40dc364875bd97dbaa1e8f159982e39ca9f9a27488fd6c1e5fd94a1d6951c5cbb"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x40, 0x7, 0x4, [@generic={0xd3, 0x1a, "f57f3efef3e431847d7298dfcf5fe59045bfa8a79cbe3927650ad9ac953ab605db7efbbd5b0cfa911c5f72c2c6951f5b02b5e858bf6a79dd92225d78f4f7ac703a737852a0b9be0648107f371d0128a022092ff4584f5a648537528fe8dec0a3e0dff772054c766dbc7d2146caa810fd0783ae46bf9addbae639031fca4a8f428ac811db101d4975fc2d85142b9a47d5c69b2afd5c09027944c4466f50aa16697170108e67803981f03eb5c60542446577405bdc756059a0d5e17f1d314bcf040e952d52cf14a255cc226f949939c6be38"}, @generic={0x89, 0x23, "a1718fc99943e96ab5e1009c50f9ae71ced71cb21d5a4d1bfa21fb6e73d924803b2e7ac23a2b80767bae91658f26f52dc3de017365cdf87a48cf6629fdf86ca20cf6d653acf7f09488ac839f6d7855bfd29f5a403ed8570bf7518b1099af0a2024aa7ee3b16db23caf2a86f32c46f42e281be17c1d0e21327b3ea6b49144de045a60ac3e104672"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x8, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xe}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x24, 0x6, 0x40, [@generic={0xda, 0x0, "2869b827436d6d5d6e8a9e00442327a80c5974f179929d00f3393cfd5589066f12b888d122d5f6fb08c439776d820fa3cc855d766fee4693d2a8b358f25bdec3a8fcda5f292931b5c1c387b10b13e91128bd8683c94c56de21241fd35b69654b1615d5d9f466e8db2a5780d7088229b39ef9379c073736cc0daa304c0e17a0afad17b1163dab5ca27fcfd100e314b0757343c1299410f13513b6cb99e9929c28eb742e2ce9ac84f3220d4c65fa90a70102da2437f951ed86a0189ad3a31b201fa02ba683a75e9839939b6abc26c3d7436534063eb906832d"}, @generic={0x59, 0x23, "cfc71b7c92b26fd499bab3d22949eb04a3005a4ea0097aca0b3e0c5030a4bebd06fa76ae335f15a68d399b9e43892eefecd17ab62fc71cb41d086858e67e26467357e8b77b42a378101082b2fa820e1b9bacff5e98beff"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}]}}, {{0x9, 0x5, 0x8, 0x11, 0x200, 0x1a, 0x2, 0x74, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf9, 0x5}, @generic={0x70, 0x7, "d22380b233f20af0d06904222f66f3f97c776b46cb94afa8cb23ca14fcfc1d6ad8eedba8957ecfce94f1459fedc327a8d7a4f00c5e2b52c0df56bb47c287e197f07b37d1e04b7c67424ab5ec937e0dd42bb77c1d97a2aeafad85c6564aaf97a316b8420003c328cdd6cf88cb5104"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x21, 0x0, 0x8, [@generic={0x4, 0xa, "1fe9"}, @generic={0x64, 0x9, "67ecfb2bd9ee42f252390e811284ad44c8f297c822614bad95a05fb766061e2f5e6de2ea331cfea6edeab16d21fe6909d46b0ea9fd9c2dd7041f70f0c5295ff778c480f2f665256ebc2a526a0ddc2b40a0deee014c8d01434259681df17a825997b2"}]}}]}}, {{0x9, 0x4, 0x38, 0x4, 0xd, 0xff, 0x4, 0x5, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x46}, [@extension_unit={0xd, 0x24, 0x8, 0x3, 0x1, 0x4, "7d3907bf589f"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x401, 0x5, 0x2, 0x2}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x6, 0x6, [0x9, 0x7, 0x4, 0x9, 0xe, 0xb], 0x14}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0xa7, "57deabacfd"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x5, 0x6, 0x6}]}, @hid_hid={0x9, 0x21, 0x7f, 0x2, 0x1, {0x22, 0xab2}}], [{{0x9, 0x5, 0x2833b8cec6301059, 0x10, 0x200, 0x3, 0x8, 0x8, [@generic={0x79, 0x21, "944985cdf5a883d9fc0244e817f8015148249a6f094069a68784298acefec3e987463af7a379b6f04a3d729e17775473e0c2d409737f49f3dc831937bb9849efedf08ab1c38c1d93410c5dc8d7a90244a9122abb0dcbd483ce8f4c2725ef13246c781de84689b016307a8125590b57b5e8608d72a56804"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x4d, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x4, 0xcd, [@generic={0xec, 0x6, "79898e15ea5b2e2b386aa888a6701cdf8467144b7020bbf5a81a0ed1c1b174292e57a2703b0a7ba21fda8bf661289bc9714bc89ff1516931e86f2306271858290fa2e693226c75800f34a93d33fbc6b2386ae52e1c34f6a73f32d6089008a9727bf393d2876b2b9beea7b62abdccd8ae690fbd64947c9cc32f0b143f174fab8a94ba721a84499a8c314658a8a33e0e762af35ddf29ab182dfac93fd512dbf00f3dd22ea022ae2470cb156125ee52e21649311e2ee9d46ac3f945200aacad285d0a6f876b07dae650dad6bbf29a222cdbff34dcac35969c7ae70311c5001f0c0642c05aff31c95317b401"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x40, 0x80, 0x8, [@generic={0xae, 0x23, "5e78cc547e3652ce4b035f297885e74c39b15ac635f98c26c5c05528b6688bba9762ab84540429e2594876b837a25ea3958c66715e690ec9da13287aac3e69642222f49de6b52b4ce874182bf2ab1644885aa7e84acb4ad30368c8c987d44ac5136fa8716a2f403a21f2e63ec3e16ad6377bdd26208cd412d2d7b420a8eafb965bd85fba7d4457c32fd6b7144d5127180a796edc75d72bfd6051943848167b827794665dfd9ee698abb7050d"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x9, 0x0, 0x2, [@generic={0x82, 0x23, "e85cfcb35638db468c12bf1f90d5a3da958fe77fee45edbf90d2eafbfe29890225d0eb3e351680f244e0480c11e97e8a285555f8832eb9ee5284ae891119dc1fdb82c4117cb6e69328bbdda49044af08ee73ab5e2789f4a838cd4cec4a92d5d28fc6df2e2530b968e59c525d3a990bb4326514daf536ef6918cc370d00c7afdd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x6, 0xf5, 0x9, [@generic={0x1b, 0xf, "74abe259fb7edc9feb7d344783437c1871f505fb41faba48c1"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x0, 0x60, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xb89}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x1, 0x8, 0x4, [@generic={0x7, 0x23, "c42f0a2e13"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x6, 0x0, 0x2, [@generic={0x3, 0xc, "ab"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x9fece830fce16481, 0x40, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x3}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xf, 0x0, 0x6a, [@generic={0x79, 0x9, "01a622b6a4ece6914cffd0462e0216f3e1d69fef661dd656042bd0b3b67ffd8e12c0adf4a2e6263acf1923bca7f8b12665469a9ba5a90935a14cec8f72a05e8ea034f85da868447dd13b055dae711416d35da6dc926825a3ea746d91311135a7afcf896331ac38c514d82b7643f7627a9158957bd08182"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x3b, [@generic={0xbf, 0x24, "e2f7977e910d938e0479a51259ea604887f875ea5b3f28aca1f3c5ae9c3ec0fa4d8df5ff60acdd38506b8531835fbde0555911b26678e182b0c86122153a317b94e841eee91e62f483b225b57a2058ec86595621f07b9cf647084466663f315b46e2736dc04601a96e12abf6c1a35617c120276b69b8f01acd15cc75da3a84cd1d337894ecc5709d7f1e8c4e90bfeac82311f01909434526c1cf971c15a4e8e65acaa7c0600411f7a323e78c60baf4698d61d568535690a3ebb714ee84"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x0, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7fff}]}}]}}, {{0x9, 0x4, 0x86, 0x8, 0x4, 0xa3, 0xbf, 0x9c, 0x3, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e3249963"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x401, 0x4, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xd}]}], [{{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x1, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5d, 0x3}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x0, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x64b0}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x74, 0x5, [@generic={0xfd, 0x11, "2ed6dc605d1934cd99a9c92eaba12a9c27b4eca1dd7158e3127adf6f2ba0cdba2bbd3161f0dda710c0a648d4be18611e6aae547ce3b55f9ec08d78267d9199214134e814cd82e7bba30c00e271bea1c7add55aa2f1fcecfcb73e4e4f563cc3267b4c6c4fd1303f4b864067cc211ad58e4cdf8ac926c44ec3b79fc674d18c118d306780abbe33458df21b0bebc82ec14a571f996b1daff03ddfb54c666ecf902616407c5278eda6f451ccc88eef5e3fd5eb255e993d23e5708fe9a9524b3c98de3201efcc51814800785951d17cb23305e196b3d392dbba89848f647c725d299f7c5e2b60e1272d488425bb1b6e14e7321c24d2dbbf9b12d35f9026"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x3, 0x2, 0x1, [@generic={0xe, 0xb, "4c09b7825a3e3ddc219fd02f"}, @generic={0xee, 0x22, "d1109d227cb12715a9050921c24300dca5123fa87433ae88cf09e0cb3cfd1dca67db06d3298f4c60f1b4ce2877fce1b152bfe2764388d676cbdbafd306a7aaf56174f3fc70def94727db7a84456dedbf272ccac90685b04df0b30e1f91181e0c45207c9fe41bbd067965f8c14b807feeefeb93cd91f7d1ffcf0b10e3c1dfde1045fffcca184bbc2f6c624a63ef523195927039b73d3cea92613e91edf863a520916c74e59073003805d9f9395b78648634776100a2f5e4ecd376562139da46dc2b6c1a13b36d7e0aafa10b84de97034fd5a36aff75ebd6e1be93a2f1995b64fcc43062c9fded09fbfef18947"}]}}]}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x110, 0x8, 0x5, 0x7, 0xff, 0xc}, 0x10, &(0x7f00000011c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x30, 0x6, 0xff, 0xd3d, 0x3}]}, 0x9, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0xc07}}, {0x7f, &(0x7f0000001240)=@string={0x7f, 0x3, "f7855105221a3cd02ff65b669189cf0028224d5ee8ba43ef83174a6f32e8f6345f9a05c8e82c7d8256da5fcd263a53633d7d6beaa729e21ce83395254a587d3392101e5ccc3f6397396591beb841d52c15167f584910ff2b0fc8fc2091a61198b697eaad838780d058a2c1825cf992a5792754c4132dae6610c57412ea"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x44c}}, {0x4e, &(0x7f0000001380)=@string={0x4e, 0x3, "648d1452c0276fc0f19491beeaddadfc3c89b49b7aa03c01e0883c1bf6f847189eca70c7a0d99a80a19a63b7535c32ec44c24208f9046c8bf9e9be1d0d378c51a8d33771c33e7537d64d612f"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x812}}, {0xa7, &(0x7f0000001440)=@string={0xa7, 0x3, "f0dc085c4a42e81eb51a4e88ac1eb239c417c75a0eb5c481d7c979d3425c60b69edb688e463d9ff8a25762a34597edf8459f6070b24c120105c75f9d912e779e0be6544ffd25f4512a02e0cebc560cceb6cb139c4eb25045eed02bcc1d6c6af35eff70d41e5f25dd87729250c8b04291818c6d383d87421ad53eac23131685dc5cb9b02eb13729b6c3dd0b2a236c9b8e5f1b277b1d45132467174058e0bfa5370f948023cd"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44c}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001740)={0x24, &(0x7f0000001600)={0x0, 0x816c85202b3806b0, 0x51, {0x51, 0x2, "f81bca513d5289ad51de8cf5640b6e1970211a289bb2a516fa1ae3b4807d2cbf7a9e6c65ac8dad10d7c3d43dfd30879f065775b08603b40e967ec855215c0c2fbca8482248a4fc09d9c8e7bc94320c"}}, &(0x7f0000001680)={0x0, 0x3, 0x8, @string={0x8, 0x3, "228eefcd92a4"}}, &(0x7f00000016c0)={0x0, 0x22, 0x17, {[@main=@item_4={0x3, 0x0, 0x9, "1ae954ff"}, @global=@item_012={0x2, 0x1, 0x7, "cd4c"}, @global=@item_4={0x3, 0x1, 0x8, "76eb9972"}, @local=@item_4={0x3, 0x2, 0x7, "70b59085"}, @local=@item_4={0x3, 0x2, 0x0, "e4340d2a"}]}}, &(0x7f0000001700)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0x834}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001780)={0x40, 0x8, 0x70, "b65456aa2f8d94ad8c99df38ece71df7073daf65683427676702999c27cbec9925e597c3bc8cc637a7a5c275ed2c4161cf8182909052be693afda8d9cd35dfd8a0000ac3711fd92a31df8a93f090f161002acbd2ce0a9669f847da1939731a536376438d4eb9f2a0f1f273ca5d35020f"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0xb8}, &(0x7f0000001880)={0x20, 0x1, 0x18, "8705e90105d8e9f9187c44e34ed4ff9be4100a1c71bcd1fb"}, &(0x7f00000018c0)={0x20, 0x3, 0x1, 0x7}}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r3 = shmget$private(0x0, 0x2000, 0x78001000, &(0x7f0000ffe000/0x2000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x6000) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) socket$nl_xfrm(0x10, 0x3, 0x6) flistxattr(r0, &(0x7f0000001940)=""/180, 0xb4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001a80)={0x9, &(0x7f0000001a00)=[{0x9, 0x44, 0x8, 0xffff0b6d}, {0xf3, 0xff, 0x90, 0x6}, {0x26, 0x5, 0xd, 0x9}, {0xfffc, 0x65, 0xb8, 0x3}, {0xfffd, 0x0, 0x3, 0x7769}, {0x6, 0x91, 0x57, 0x80000000}, {0x7, 0x9, 0xfc, 0x8}, {0xb46, 0x3, 0x2, 0x9}, {0x5, 0xb1, 0xf, 0xb545}]}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0xa010, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000001b00)=@IORING_OP_LINK_TIMEOUT={0xf, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x77359400}, 0x1, 0x4}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000001b80)={0x1, r0}) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000001bc0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000001c00), 0x1ec00, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setsig(r6, 0xa, 0xc) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001cc0)=@generic={&(0x7f0000001c80)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000001d00)={0x1, 0x39c7, 0x3ff, 0x5}, 0x10) syz_usb_control_io$hid(r2, &(0x7f0000001e80)={0x24, &(0x7f0000001d40)={0x20, 0x30, 0x58, {0x58, 0x5, "60e2d051173bde0b5f27646b9866dd7433168b7907ae8ca5b202fda3450b2be7f879219ab9b8e9bf8249027e96261e5cf14bcbce78864b38a847c53a18ad3c43fb683e4c0fe39b992ca888b20e8e159e88729f4fa5f6"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x9, @string={0x9, 0x3, "4b0e98eaaa4dd5"}}, &(0x7f0000001e00)={0x0, 0x22, 0x24, {[@global=@item_012={0x1, 0x1, 0x9, 'A'}, @local=@item_012={0x1, 0x2, 0x1, 'I'}, @local, @global=@item_4={0x3, 0x1, 0x3, "d98edb73"}, @main=@item_012={0x2, 0x0, 0xb, "f79f"}, @local=@item_012={0x2, 0x2, 0x3, "6fb9"}, @global=@item_4={0x3, 0x1, 0x8, "1edf58c6"}, @global=@item_4={0x3, 0x1, 0x6, "fee61937"}, @global=@item_4={0x3, 0x1, 0x8, "95b826d4"}, @global=@item_4={0x3, 0x1, 0xa, "bfec7acb"}]}}, &(0x7f0000001e40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x220f, 0xc2, 0x1, {0x22, 0x1}}}}, &(0x7f0000002080)={0x2c, &(0x7f0000001ec0)={0x40, 0x15, 0x6a, "040bb4011fb15c10914d2f7ee884b52e2dd56488955eeacfed7253ec10b6bb7a3c92858a28160ad841c103b4b72ae58fa31bdf3a49bf74fb8a5235c617ee02a5c04a80f1d1fa8cc822037157376354f1706321b7dca0e1b085626c0da37503d3fa79d9eba6f54e92956f"}, &(0x7f0000001f40)={0x0, 0xa, 0x1}, &(0x7f0000001f80)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000001fc0)={0x20, 0x1, 0x61, "88e8f3d932e97469ede860167faf3e2a51e26c07b198f1528e8def419a50fb22b4d6c9961ffab309fb134248fa68ccd818634b66a5459bcfde366a66f8590a8a2605cdd7204e57ed55d646b2eb027004aad2056edf575ab987cd821f9c0ffea427"}, &(0x7f0000002040)={0x20, 0x3, 0x1}}) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000020c0)={0x5823, 0x7, 0x1, 0x7}, 0x8) chdir(&(0x7f0000002100)='./file0\x00') 5.247964265s ago: executing program 1 (id=1804): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = socket(0x6, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r3, 0x7488, 0x4ff5, 0x10, &(0x7f0000000000)={[0x1000]}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xfffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x168, 0x188, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) ioprio_get$uid(0x3, 0x0) syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x2, 0x10, 0x4, 0x219}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="66b9800000c00f326635010000000f300fc777febaf80c66b8147c288666efbafc0ced66b81c4900000f23d80f21f86635400000c00f23f8b86a048ee8baf80c66b8e0de1f8d66efbafc0c66b8b775000066ef660f22130f01c966b9800000c00f326635002000000f30bad104b80048ef", 0x71}], 0x1, 0x0, &(0x7f0000000240), 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r7, 0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000001200)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000001240)='\vH\x81\xa2\xeb\x9e\x14\xd4\xe4\xc5\xce\xe69.\xba\xa2O\"\xda\x1b;\x93\xb4\xc6P\xd6\x01\x10\xa0\x12\xce9\xdb`1K\xa3\xa2N\xf8\x1b\x86>\xe8', 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}, 0x0) 3.794669802s ago: executing program 5 (id=1805): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x804) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.673908241s ago: executing program 1 (id=1806): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r9, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000071, 0x0, 0xff000000000c0700}]}) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f00000000c0)={0x80}) fdatasync(r9) socket$nl_netfilter(0x10, 0x3, 0xc) 2.668406552s ago: executing program 3 (id=1807): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fallocate(r3, 0x0, 0x9, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000001780)={0x5, 0x10, 0xfa00, {0x0, r6, 0x2}}, 0x18) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "7e176dab0090155b89d68e1ca73be7"}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_SEQ={0xa, 0x4, "4a42f9583b68"}, @NL80211_KEY_SEQ={0x6, 0x4, "ae6a"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "63ef6c4252"}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x400c040) 2.429361293s ago: executing program 4 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="5ff700000000000071124d000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1}, 0x4008000) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, r1, 0xc20c9000) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0e1ac6e7049b3341959b759a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000729a5f50b254be550eaf7eed7e00000000840000000000000000800f0005000000"], 0x18, 0x4008000}, 0x28008841) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000180)) syz_usb_connect(0x0, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109023f00010000000009046900000e010000082402010202"], 0x0) 805.248805ms ago: executing program 4 (id=1810): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x11e}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}], 0x4, 0x2090) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) close(0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 740.368947ms ago: executing program 3 (id=1811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000006580), 0x2, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000065c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) close(r1) syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000314000000110001"], 0x64}}, 0x0) 678.099007ms ago: executing program 4 (id=1812): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4251}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r10 = mq_open(&(0x7f0000000000)='(\'$]]\x00', 0x40, 0x110, &(0x7f0000000080)={0x0, 0x3, 0x6}) r11 = syz_clone(0xa00a8180, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000000500)=[{&(0x7f0000000780)=""/58, 0x3a}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000800)=""/239, 0xef}], 0x1, 0x0) mq_notify(r10, &(0x7f00000001c0)={0x0, 0x35, 0x0, @tid=r11}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 589.659141ms ago: executing program 1 (id=1813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x37) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x4000000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a0531030000000000010902"], 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000005667d1040206402d14e0102030109021b000100000000090400000190f19c0009058459"], 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x20000002}, 0x48081) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0xffffffff80000002) write(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x8, 0x6, 0x90, 0x8001}, {0x7, 0x3, 0x53, 0x30f}]}) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2924, 0x3ff, 0x9, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x82}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x24048018) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32=r8], 0x7) 585.067527ms ago: executing program 33 (id=1771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'virt_wifi0\x00', 0x1000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x80241, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000480)=0xffff8000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x2, 0x8000, 0x84, 0xe2, 0x0, 0xff, 0x3575}, &(0x7f0000000080)=0x20) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x9, 0x802) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x80004506, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x60, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x7, 0xdffffff9, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) fcntl$setsig(r6, 0xa, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000080)={0x2001, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000540)={0x3, 0xc, 0x400, 0xf3c07b33db9026f3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', r8, 0x4, 0xff, 0xa, 0x1, 0x4b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7800, 0xffff0001, 0x6}}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@getqdisc={0x30, 0x26, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xb, 0x10}, {0xf, 0x1}, {0xa, 0xfff1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c8c4}, 0x0) 0s ago: executing program 5 (id=1815): r0 = socket$inet(0x2, 0x0, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e0014000280080003006b"], 0x58}}, 0x0) r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac47", 0x1e}, {&(0x7f0000000e80)}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) r3 = socket$isdn(0x22, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r4, 0x4, 0x0) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x4) kernel console output (not intermixed with test programs): 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.612108][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.647873][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 443.667545][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.730312][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 443.734935][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 443.748472][ T5944] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 443.762862][T11092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.778553][ T5944] usb 3-1: device descriptor read/8, error -71 [ 443.831108][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 443.859567][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1456'. [ 443.879698][T11090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.892982][T11090] bond1: (slave bond0): making interface the new active one [ 443.909753][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 443.923259][ T24] usbtmc 5-1:16.0: can't read capabilities [ 443.931367][T11092] netlink: 'syz.5.1456': attribute type 4 has an invalid length. [ 443.969873][T11090] bond1: (slave bond0): Enslaving as an active interface with an up link [ 443.978633][T11092] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1456'. [ 444.009422][T11092] .`: renamed from bond0 (while UP) [ 444.020969][ T5944] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 444.048816][ T5944] usb 3-1: device descriptor read/8, error -71 [ 444.113598][T11079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.122315][T11079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.129230][ T1143] bond1: (slave .`): link status definitely down, disabling slave [ 444.140897][ T1143] bond1: now running without any active interface! [ 444.167848][ T5944] usb usb3-port1: unable to enumerate USB device [ 444.558058][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 444.586025][T11112] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 444.596322][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 445.158286][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 445.158306][ T29] audit: type=1326 audit(1774328194.142:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.191891][ T29] audit: type=1326 audit(1774328194.172:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.218134][ T29] audit: type=1326 audit(1774328194.182:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.271869][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 445.324194][T11117] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1463'. [ 445.399041][ T29] audit: type=1326 audit(1774328194.182:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.453760][ T29] audit: type=1326 audit(1774328194.182:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.485897][T11122] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 445.500257][ T29] audit: type=1326 audit(1774328194.232:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.525555][ T29] audit: type=1326 audit(1774328194.232:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.549755][ T29] audit: type=1326 audit(1774328194.242:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.575109][ T29] audit: type=1326 audit(1774328194.242:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.629303][ T29] audit: type=1326 audit(1774328194.242:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.5.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 445.853229][T11128] tc_dump_action: action bad kind [ 446.166234][ T5944] usb 5-1: USB disconnect, device number 81 [ 446.668297][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 446.895627][T11134] netlink: 'syz.2.1469': attribute type 13 has an invalid length. [ 447.177180][T11143] __nla_validate_parse: 2 callbacks suppressed [ 447.177250][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1471'. [ 447.298040][ T5944] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 447.508112][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 447.582411][ T5944] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.638184][ T5944] usb 3-1: config 0 interface 0 has no altsetting 0 [ 447.660284][ T5944] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 447.669751][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.739252][ T5944] usb 3-1: Product: syz [ 447.744785][ T5944] usb 3-1: Manufacturer: syz [ 447.750096][ T5944] usb 3-1: SerialNumber: syz [ 447.791578][T11147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.015030][ T5944] usb 3-1: config 0 descriptor?? [ 448.032600][ T5944] gs_usb 3-1:0.0: Required endpoints not found [ 448.328670][ T24] IPVS: starting estimator thread 0... [ 448.438047][T11156] IPVS: using max 38 ests per chain, 91200 per kthread [ 448.568038][ T5944] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 448.889262][ T5944] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 448.907488][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.956500][ T5944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.980795][ T5944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.007674][ T5944] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 449.039681][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 449.066809][ T5944] usb 5-1: Product: syz [ 449.110531][ T5944] usb 5-1: Manufacturer: syz [ 449.147541][ T5944] cdc_wdm 5-1:1.0: skipping garbage [ 449.158936][ T5944] cdc_wdm 5-1:1.0: skipping garbage [ 449.174386][T11162] loop9: detected capacity change from 0 to 524287936 [ 449.210634][ T5944] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 449.231022][ T5944] cdc_wdm 5-1:1.0: Unknown control protocol [ 449.748043][ T5944] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 449.889287][ T24] usb 3-1: USB disconnect, device number 98 [ 449.910916][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 449.929958][ T5944] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 449.939124][ T5944] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.963690][ T5944] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.983544][ T5944] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.003343][ T5944] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.028572][ T5944] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.044213][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.248181][ T24] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 450.333368][ T5944] usb 2-1: GET_CAPABILITIES returned 0 [ 450.345837][ T5944] usbtmc 2-1:16.0: can't read capabilities [ 450.488097][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 450.496848][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.508434][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 450.518021][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 450.546342][ T24] usb 3-1: Manufacturer: syz [ 450.566856][T11168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.575732][T11168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.612597][ T24] usb 3-1: config 0 descriptor?? [ 450.788199][ T24] rc_core: IR keymap rc-hauppauge not found [ 450.802896][ T24] Registered IR keymap rc-empty [ 450.824806][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 450.877230][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input61 [ 450.933949][ T24] usb 3-1: USB disconnect, device number 99 [ 451.350755][ C1] wdm_int_callback: 7145 callbacks suppressed [ 451.350788][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.363474][ C1] wdm_int_callback: 7145 callbacks suppressed [ 451.363494][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.375933][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.382526][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.388993][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.395578][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.402052][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.408648][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.415681][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.422279][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.428725][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.435337][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.441830][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.448443][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.454867][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.461481][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.467822][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.474427][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.480743][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 451.487364][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 451.502750][ T5944] usb 5-1: USB disconnect, device number 82 [ 451.502906][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 451.526145][T11185] netlink: 'syz.5.1482': attribute type 1 has an invalid length. [ 451.534748][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1482'. [ 451.833382][T11191] fuse: Bad value for 'fd' [ 452.098189][ T5937] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 452.259694][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 452.269101][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.325518][ T5937] usb 3-1: config 0 descriptor?? [ 452.362339][ T5937] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 452.485853][ T5945] usb 2-1: USB disconnect, device number 76 [ 452.550300][T11189] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 452.643992][ T5937] usb 3-1: USB disconnect, device number 100 [ 452.820118][T11204] loop9: detected capacity change from 0 to 524287936 [ 453.152034][T11208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1488'. [ 453.161226][T11208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1488'. [ 453.688217][ T50] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 453.778052][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1490'. [ 453.787516][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1490'. [ 454.364068][ T50] usb 3-1: Using ep0 maxpacket: 32 [ 454.442195][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.508597][ T50] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.564440][ T50] usb 3-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 454.573575][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.581785][ T50] usb 3-1: Product: syz [ 454.586073][ T50] usb 3-1: Manufacturer: syz [ 454.591093][ T50] usb 3-1: SerialNumber: syz [ 454.639045][ T50] usb 3-1: config 0 descriptor?? [ 455.278550][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 455.392200][T11230] syzkaller0: entered promiscuous mode [ 455.400116][T11230] syzkaller0: entered allmulticast mode [ 455.449263][T11230] tipc: Started in network mode [ 455.456533][T11230] tipc: Node identity 02083c08a10a, cluster identity 4711 [ 455.467828][T11230] tipc: Enabled bearer , priority 0 [ 455.578123][ T5937] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 455.591015][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 455.591034][ T29] audit: type=1326 audit(1774328204.582:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 455.608081][ T5944] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 455.630396][ T29] audit: type=1326 audit(1774328204.582:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 455.706054][ T29] audit: type=1326 audit(1774328204.582:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 455.753497][ T29] audit: type=1326 audit(1774328204.582:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 455.777811][T11239] wireguard1: entered promiscuous mode [ 455.784595][T11239] wireguard1: entered allmulticast mode [ 455.793424][ T29] audit: type=1326 audit(1774328204.582:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 455.895445][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.913807][ T5937] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 455.916788][ T5944] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 455.923464][ T29] audit: type=1326 audit(1774328204.582:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 455.958060][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.968510][ T5937] usb 4-1: Product: syz [ 455.975726][ T5937] usb 4-1: Manufacturer: syz [ 455.985154][ T5937] usb 4-1: SerialNumber: syz [ 455.985231][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.999072][ T5944] usb 2-1: Product: syz [ 456.003962][ T5944] usb 2-1: Manufacturer: syz [ 456.012094][ T5944] usb 2-1: SerialNumber: syz [ 456.018484][ T5937] usb 4-1: config 0 descriptor?? [ 456.024241][ T29] audit: type=1326 audit(1774328204.582:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 456.060547][ T5944] usb 2-1: config 0 descriptor?? [ 456.061194][ T5937] usb 4-1: no audio or video endpoints found [ 456.093508][ T29] audit: type=1326 audit(1774328204.582:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 456.177584][T11228] tipc: Resetting bearer [ 456.185862][ T29] audit: type=1326 audit(1774328204.582:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 456.209668][ T29] audit: type=1326 audit(1774328204.582:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11228 comm="syz.5.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ff00000 [ 456.259983][T11228] tipc: Disabling bearer [ 456.298119][ T5944] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 456.327218][T11233] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 456.333736][T11233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 456.340034][T11233] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 456.346861][T11233] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 456.353370][T11233] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 456.399587][ T5945] usb 3-1: USB disconnect, device number 101 [ 457.347459][T11251] SET target dimension over the limit! [ 457.378048][T11251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.598162][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 458.398139][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 458.398391][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 458.404400][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 458.416472][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 458.831283][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 458.838657][ T5944] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 458.881042][ T5944] usb 2-1: USB disconnect, device number 77 [ 458.942300][ T10] usb 4-1: USB disconnect, device number 94 [ 458.964190][T11260] input: syz0 as /devices/virtual/input/input62 [ 458.995226][ T50] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 459.191117][ T50] usb 3-1: config 6 has an invalid interface number: 20 but max is 0 [ 459.215947][ T50] usb 3-1: config 6 has no interface number 0 [ 459.240294][ T50] usb 3-1: config 6 interface 20 has no altsetting 0 [ 459.256684][ T50] usb 3-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=21.86 [ 459.268109][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.276517][ T50] usb 3-1: Product: syz [ 459.284646][ T50] usb 3-1: Manufacturer: syz [ 459.290558][ T50] usb 3-1: SerialNumber: syz [ 459.612816][T11268] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 459.622489][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 460.290876][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.401200][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.542484][ T5945] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 460.709951][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 460.721404][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.732404][ T5945] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 460.745605][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.797769][ T5945] usb 6-1: config 0 descriptor?? [ 461.230278][ T5945] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 461.243491][ T5945] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 461.258455][ T5945] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 461.421462][ T5945] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 461.429005][ T5945] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 461.438360][ T5945] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 461.445459][ T5945] isku 0003:1E7D:319C.0026: unknown main item tag 0x0 [ 461.490986][ T5945] isku 0003:1E7D:319C.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 461.658050][ T5944] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 461.721596][ T5945] usb 6-1: USB disconnect, device number 21 [ 461.746526][ T50] usb 3-1: Could not find all expected endpoints [ 461.771960][ T50] usb 3-1: USB disconnect, device number 102 [ 461.839882][ T5944] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.858792][ T5944] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 461.880590][ T5944] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.905236][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.924625][T11286] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 461.940239][ T5944] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.013597][T11293] loop5: detected capacity change from 0 to 7 [ 462.423277][ T5937] usb 5-1: USB disconnect, device number 83 [ 462.687304][T11310] netlink: 'syz.1.1517': attribute type 13 has an invalid length. [ 462.739970][T11311] netlink: 'syz.5.1514': attribute type 27 has an invalid length. [ 462.943930][ T5937] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 463.008041][ T50] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 463.144444][ T5937] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 463.158077][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 463.183642][ T5937] usb 3-1: config 0 has no interface number 0 [ 463.192994][ T50] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.208151][ T50] usb 2-1: config 0 interface 0 has no altsetting 0 [ 463.227153][ T50] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 463.236842][ T5937] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 463.257078][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.275262][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.284273][ T50] usb 2-1: Product: syz [ 463.299140][ T50] usb 2-1: Manufacturer: syz [ 463.307988][ T5937] usb 3-1: Product: syz [ 463.312248][ T5937] usb 3-1: Manufacturer: syz [ 463.319091][ T50] usb 2-1: SerialNumber: syz [ 463.334379][ T5937] usb 3-1: SerialNumber: syz [ 463.419221][ T50] usb 2-1: config 0 descriptor?? [ 463.425101][ T5937] usb 3-1: config 0 descriptor?? [ 463.497667][ T50] gs_usb 2-1:0.0: Required endpoints not found [ 463.508698][ T5937] usb 3-1: selecting invalid altsetting 1 [ 463.558440][ T5937] dvb_ttusb_budget: ttusb_init_controller: error [ 463.576116][ T5937] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 463.772837][ T5937] DVB: Unable to find symbol stv0299_attach() [ 463.896408][ T5937] DVB: Unable to find symbol tda8083_attach() [ 463.902620][ T5937] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 463.922955][ T5937] usb 3-1: USB disconnect, device number 103 [ 463.929320][ T5887] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 464.076358][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1521'. [ 464.089891][T11328] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1521'. [ 464.150059][ T5887] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 464.160336][ T5887] usb 4-1: config 0 has no interface number 0 [ 464.169009][ T5887] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 464.179285][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.187309][ T5887] usb 4-1: Product: syz [ 464.215536][ T5887] usb 4-1: Manufacturer: syz [ 464.223744][ T5887] usb 4-1: SerialNumber: syz [ 464.238941][ T5887] usb 4-1: config 0 descriptor?? [ 464.322476][T11332] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 464.466249][ T5887] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 464.485263][ T5887] uvcvideo 4-1:0.64: No valid video chain found. [ 464.512989][ T5887] usb 4-1: USB disconnect, device number 95 [ 464.701932][ T5944] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 464.799570][T11345] netlink: 'syz.5.1527': attribute type 1 has an invalid length. [ 464.808500][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 464.879920][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 464.894993][ T5944] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 464.913872][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.932082][ T5944] usb 3-1: Product: syz [ 464.939804][ T5944] usb 3-1: Manufacturer: syz [ 464.944522][ T5944] usb 3-1: SerialNumber: syz [ 465.003867][ T5944] usb 3-1: config 0 descriptor?? [ 465.016439][ T5944] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 465.128032][ T5887] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 465.280049][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.306677][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 465.551795][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.569595][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 465.587178][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.597712][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 465.617761][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.655926][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 465.687676][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.770996][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 465.800486][ T5887] usb 5-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 465.813762][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.834644][ T5887] usb 5-1: config 0 descriptor?? [ 465.839702][ T5944] usb 2-1: USB disconnect, device number 78 [ 465.880100][ T5887] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 466.129595][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'. [ 466.148090][T11358] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1532'. [ 467.038173][ T5937] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 467.192509][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.204082][ T5937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.216667][ T5937] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 467.227621][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.236071][ T5937] usb 4-1: Product: syz [ 467.240711][ T5937] usb 4-1: Manufacturer: syz [ 467.245594][T11369] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1536'. [ 467.255104][ T5937] usb 4-1: SerialNumber: syz [ 467.470602][ T5937] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 467.646452][ T5937] usb 4-1: USB disconnect, device number 96 [ 467.691901][ T24] usb 3-1: USB disconnect, device number 104 [ 467.859543][ T5887] usb 5-1: USB disconnect, device number 84 [ 468.249912][T11385] netlink: 'syz.5.1541': attribute type 13 has an invalid length. [ 468.388093][ T5944] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 468.428379][ T5887] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 468.538457][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 468.545737][ T5944] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 468.554120][ T5944] usb 3-1: can't read configurations, error -61 [ 468.585726][ T5887] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 468.601260][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.612235][ T5887] usb 5-1: Product: syz [ 468.616437][ T5887] usb 5-1: Manufacturer: syz [ 468.621606][ T5887] usb 5-1: SerialNumber: syz [ 468.628362][ T5887] usb 5-1: config 0 descriptor?? [ 468.688073][ T5944] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 468.838188][ T5887] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 468.848236][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 468.855622][ T5944] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 468.863779][ T5944] usb 3-1: can't read configurations, error -61 [ 468.870535][ T5944] usb usb3-port1: attempt power cycle [ 469.218231][ T5944] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 469.238744][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 469.246132][ T5944] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 469.254043][ T5944] usb 3-1: can't read configurations, error -61 [ 469.398340][ T5944] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 469.418620][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 469.425829][ T5944] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 469.433673][ T5944] usb 3-1: can't read configurations, error -61 [ 469.445111][ T5944] usb usb3-port1: unable to enumerate USB device [ 469.451574][ T50] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 469.538810][ T5945] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 469.611051][ T50] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.622922][ T50] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 469.637228][ T50] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.647834][ T50] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 469.663218][ T50] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.673855][ T50] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 469.688190][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 469.689156][ T50] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.704108][ T50] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 469.720139][ T5945] usb 2-1: config 2 has an invalid interface number: 45 but max is 0 [ 469.720395][ T50] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.738928][ T50] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 469.752183][ T50] usb 4-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 469.762011][ T5945] usb 2-1: config 2 has no interface number 0 [ 469.768963][ T5945] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 469.780333][ T5945] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 469.780973][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.809961][ T5945] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 469.819615][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.821312][ T50] usb 4-1: config 0 descriptor?? [ 469.827626][ T5945] usb 2-1: Product: syz [ 469.827646][ T5945] usb 2-1: Manufacturer: syz [ 469.827661][ T5945] usb 2-1: SerialNumber: syz [ 469.923074][ T50] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 469.939457][ T5945] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected [ 470.033623][ T5945] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 471.326911][ T5887] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 471.338895][ T5887] usb 5-1: USB disconnect, device number 85 [ 471.387283][T11423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1556'. [ 471.780396][T11430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1558'. [ 471.789536][T11430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1558'. [ 472.243918][ T5909] usb 4-1: USB disconnect, device number 97 [ 472.342621][ T5887] usb 2-1: USB disconnect, device number 79 [ 472.387138][ T5887] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 472.399034][ T5887] kobil_sct 2-1:2.45: device disconnected [ 472.526685][ T5945] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 472.764493][ T5909] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 472.845477][ T5945] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 472.854410][ T5945] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 472.866454][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.921694][ T5945] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 472.938942][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 472.947016][ T5945] usb 3-1: config 0 has no interface number 0 [ 472.960133][ T5909] usb 4-1: config 255 has an invalid interface number: 106 but max is 0 [ 472.975153][ T5909] usb 4-1: config 255 has no interface number 0 [ 472.985803][ T5945] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 473.005245][ T5909] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 473.026545][ T5945] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 473.048052][ T5909] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 473.064430][ T5945] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 473.084044][ T5909] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xA has invalid maxpacket 951, setting to 64 [ 473.097970][ T5945] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.118126][ T5909] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 473.138620][ T5945] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 473.152611][ T5909] usb 4-1: config 255 interface 106 has no altsetting 0 [ 473.164605][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.194951][ T5909] usb 4-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 473.210382][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.229542][ T5945] usb 3-1: config 0 descriptor?? [ 473.236413][ T5909] usb 4-1: Product: syz [ 473.274334][ T5909] usb 4-1: Manufacturer: syz [ 473.283452][ T5945] gspca_main: spca561-2.14.0 probing abcd:cdee [ 473.289957][ T5909] usb 4-1: SerialNumber: syz [ 473.393157][T11447] syzkaller0: entered promiscuous mode [ 473.400976][T11447] syzkaller0: entered allmulticast mode [ 473.485257][ T5945] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 473.502838][T11440] loop2: detected capacity change from 0 to 7 [ 473.527421][T11440] Dev loop2: unable to read RDB block 7 [ 473.533161][T11440] loop2: unable to read partition table [ 473.539732][T11440] loop2: partition table beyond EOD, truncated [ 473.563141][ T5945] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.582005][T11440] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 473.594058][ T5945] usb 3-1: MIDIStreaming interface descriptor not found [ 473.655528][ T5909] sierra 4-1:255.106: Sierra USB modem converter detected [ 473.706946][ T5909] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 473.823685][ T5909] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 473.873857][ T5909] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 473.883165][ T5945] usb 3-1: USB disconnect, device number 109 [ 473.981372][ T5909] usb 4-1: USB disconnect, device number 98 [ 474.043009][ T5909] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 474.061116][ T5909] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 474.077203][ T5909] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 474.110040][ T5909] sierra 4-1:255.106: device disconnected [ 474.128542][ T5942] udevd[5942]: setting mode of /dev/bus/usb/004/098 to 020664 failed: No such file or directory [ 474.152531][ T5942] udevd[5942]: setting owner of /dev/bus/usb/004/098 to uid=0, gid=0 failed: No such file or directory [ 474.321326][ T5944] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 474.417986][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'. [ 474.427191][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'. [ 474.560217][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 474.587092][ T5944] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 474.594898][ T5944] usb 2-1: can't read configurations, error -61 [ 474.888364][ T5944] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 475.129198][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 475.144404][ T5944] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 475.163364][ T5944] usb 2-1: can't read configurations, error -61 [ 475.188518][ T5944] usb usb2-port1: attempt power cycle [ 475.638161][ T5944] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 475.893279][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 475.938230][T11473] wireguard2: entered promiscuous mode [ 475.944302][T11473] wireguard2: entered allmulticast mode [ 475.963929][ T5944] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 475.998982][ T5944] usb 2-1: can't read configurations, error -61 [ 476.158902][ T5944] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 476.190467][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 476.200703][ T5944] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 476.209290][ T5944] usb 2-1: can't read configurations, error -61 [ 476.216827][ T5944] usb usb2-port1: unable to enumerate USB device [ 476.388178][ T5887] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 476.541056][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.553630][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 476.596680][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.915365][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 476.949121][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.973247][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 476.999132][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.018111][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 477.058290][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.075214][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 477.108821][ T5887] usb 3-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 477.123295][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.139419][ T5887] usb 3-1: config 0 descriptor?? [ 477.157372][ T5887] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 477.340994][T11496] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[11496] [ 477.645546][T11500] tc_dump_action: action bad kind [ 478.426318][T11508] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 478.536870][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 478.603376][T11508] bond1: entered promiscuous mode [ 478.612279][T11508] bond1: entered allmulticast mode [ 478.622997][T11508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.665947][T11510] erspan1: entered allmulticast mode [ 478.732944][T11510] bond1: (slave erspan1): making interface the new active one [ 478.760060][T11510] erspan1: entered promiscuous mode [ 478.775769][T11510] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 478.845208][T11510] syz.4.1581 (11510) used greatest stack depth: 17608 bytes left [ 478.861556][T11519] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 478.861556][T11519] The task syz.3.1582 (11519) triggered the difference, watch for misbehavior. [ 478.927656][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 479.006887][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 479.006909][ T29] audit: type=1326 audit(1774328227.902:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09adf9c799 code=0x7ffc0000 [ 479.063834][ T29] audit: type=1326 audit(1774328227.902:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09adf9c799 code=0x7ffc0000 [ 479.089186][ T29] audit: type=1326 audit(1774328227.902:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09adf9c799 code=0x7ffc0000 [ 479.125356][ T29] audit: type=1326 audit(1774328227.902:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f09adf9c799 code=0x7ffc0000 [ 479.192987][ T5945] usb 3-1: USB disconnect, device number 110 [ 479.273670][ T29] audit: type=1326 audit(1774328227.902:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09adf9c799 code=0x7ffc0000 [ 479.337096][ T29] audit: type=1326 audit(1774328227.902:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09adf9e007 code=0x7ffc0000 [ 479.361735][ T29] audit: type=1326 audit(1774328227.902:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f09adf5cfce code=0x7ffc0000 [ 479.564922][ T29] audit: type=1326 audit(1774328227.902:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f09adf5cfce code=0x7ffc0000 [ 479.648263][ T29] audit: type=1326 audit(1774328227.902:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f09adf5cfce code=0x7ffc0000 [ 479.671207][ T29] audit: type=1326 audit(1774328227.902:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f09adf5cfce code=0x7ffc0000 [ 479.797845][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 480.403724][T11542] SET target dimension over the limit! [ 480.427070][T11542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.302396][T11555] tc_dump_action: action bad kind [ 481.331524][T11556] input: syz0 as /devices/virtual/input/input64 [ 481.368047][ T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 481.548331][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 481.557648][ T24] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 481.566984][ T24] usb 3-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 481.587406][ T24] usb 3-1: config 0 has no interface number 0 [ 481.604610][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 481.613898][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.625600][ T24] usb 3-1: Product: syz [ 481.642440][ T24] usb 3-1: Manufacturer: syz [ 481.657681][ T24] usb 3-1: SerialNumber: syz [ 481.685576][ T24] usb 3-1: config 0 descriptor?? [ 481.694118][ T24] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 481.704381][ T24] uvcvideo 3-1:0.105: No valid video chain found. [ 481.803558][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1596'. [ 481.913430][T11549] netlink: 'syz.2.1594': attribute type 21 has an invalid length. [ 481.931011][T11549] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1594'. [ 481.944261][T11549] netlink: 'syz.2.1594': attribute type 4 has an invalid length. [ 481.956200][T11549] netlink: 'syz.2.1594': attribute type 5 has an invalid length. [ 481.969160][T11549] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1594'. [ 482.010304][T11561] loop5: detected capacity change from 0 to 7 [ 482.017068][T11561] Dev loop5: unable to read RDB block 7 [ 482.022731][T11561] loop5: unable to read partition table [ 482.029019][T11561] loop5: partition table beyond EOD, truncated [ 482.035386][T11561] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.168302][ T5909] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 482.233314][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 482.302621][ T5909] usb 5-1: device descriptor read/64, error -71 [ 482.388065][ T5887] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 482.448881][ T5194] Dev loop5: unable to read RDB block 7 [ 482.459008][ T5194] loop5: unable to read partition table [ 482.468223][ T5194] loop5: partition table beyond EOD, truncated [ 482.886745][ T5909] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 482.920257][ T50] usb 3-1: USB disconnect, device number 111 [ 482.989168][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 482.996236][ T5887] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 483.007671][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 483.016653][ T5887] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 483.085398][ T5909] usb 5-1: device descriptor read/64, error -71 [ 483.090638][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.113506][ T5887] usb 2-1: Product: syz [ 483.117719][ T5887] usb 2-1: Manufacturer: syz [ 483.128607][ T5887] usb 2-1: SerialNumber: syz [ 483.136168][ T5887] usb 2-1: config 0 descriptor?? [ 483.200297][ T5909] usb usb5-port1: attempt power cycle [ 483.341054][T11580] SET target dimension over the limit! [ 483.352327][T11580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.390695][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.402844][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.433117][ T5887] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input65 [ 483.578368][ T5909] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 483.598979][ T5909] usb 5-1: device descriptor read/8, error -71 [ 483.818123][ T5887] rc_core: IR keymap rc-imon-pad not found [ 483.824706][ T5887] Registered IR keymap rc-empty [ 483.830294][ T5887] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 483.848423][ T5887] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 483.858133][ T5909] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 483.889619][ T5909] usb 5-1: device descriptor read/8, error -71 [ 483.960027][ T5887] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 483.986198][ T5887] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 484.001594][ T5887] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:84> initialized [ 484.018942][ T5909] usb usb5-port1: unable to enumerate USB device [ 484.668044][ T5909] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 484.820234][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 484.835801][ T5909] usb 3-1: config 0 has no interface number 0 [ 484.856959][ T5909] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 484.879482][ T5909] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 484.917893][ T5909] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 484.944791][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.967508][ T5909] usb 3-1: config 0 descriptor?? [ 484.980835][T11588] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 485.000410][ T5909] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 485.320375][T11588] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 485.353948][T11588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.404512][T11588] bond2: (slave geneve2): making interface the new active one [ 485.569192][T11588] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 485.608889][ T5887] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 485.685249][ T5945] usb 3-1: USB disconnect, device number 112 [ 485.808640][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 485.823015][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.968642][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 485.976043][ T24] usb 2-1: USB disconnect, device number 84 [ 485.982184][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.006177][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 486.075962][ T5887] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 486.118370][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.161274][ T5887] usb 5-1: config 0 descriptor?? [ 486.257291][T11606] wireguard2: entered promiscuous mode [ 486.262982][T11606] wireguard2: entered allmulticast mode [ 486.335849][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 486.456979][ T5945] IPVS: starting estimator thread 0... [ 486.560646][T11615] IPVS: using max 31 ests per chain, 74400 per kthread [ 486.624832][T11616] tc_dump_action: action bad kind [ 487.561255][ T50] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 488.036430][ T50] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 488.046664][ T50] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 488.056201][ T50] usb 3-1: Product: syz [ 488.064759][ T50] usb 3-1: Manufacturer: syz [ 488.071486][ T50] usb 3-1: SerialNumber: syz [ 488.131654][ T50] usb 3-1: config 0 descriptor?? [ 488.246532][T11627] syz.5.1614 (11627): drop_caches: 2 [ 488.698028][ T5945] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 488.858140][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 488.874964][ T5945] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 488.884612][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.908589][ T5945] usb 4-1: Product: syz [ 488.920173][ T5945] usb 4-1: Manufacturer: syz [ 488.939194][ T5945] usb 4-1: SerialNumber: syz [ 488.956476][ T5945] usb 4-1: config 0 descriptor?? [ 489.095926][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 489.119313][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 489.178196][ T5945] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 489.195595][ T5887] usb 5-1: USB disconnect, device number 90 [ 489.473768][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1620'. [ 489.539509][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 489.539530][ T29] audit: type=1326 audit(1774328238.442:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 489.640676][ T29] audit: type=1326 audit(1774328238.442:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 489.878063][ T5887] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 489.886265][ T29] audit: type=1326 audit(1774328238.442:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 490.004188][ T29] audit: type=1326 audit(1774328238.442:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 490.118103][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 490.125831][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 490.133716][ T29] audit: type=1326 audit(1774328238.442:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 490.158130][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 490.450567][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 490.469531][ T29] audit: type=1326 audit(1774328238.442:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cc419e007 code=0x7ffc0000 [ 490.496877][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 490.521412][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 490.545732][ T29] audit: type=1326 audit(1774328238.442:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3cc415cfce code=0x7ffc0000 [ 490.571320][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 490.594241][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 490.612422][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 490.624491][ T29] audit: type=1326 audit(1774328238.442:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3cc415cfce code=0x7ffc0000 [ 490.689792][ T5887] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 490.700612][ T29] audit: type=1326 audit(1774328238.442:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3cc415cfce code=0x7ffc0000 [ 490.723857][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.754505][ T5887] usb 5-1: Product: syz [ 490.764237][ T5887] usb 5-1: Manufacturer: syz [ 490.772327][ T5887] usb 5-1: SerialNumber: syz [ 490.782161][ T29] audit: type=1326 audit(1774328238.442:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11641 comm="syz.5.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3cc415cfce code=0x7ffc0000 [ 490.817178][ T5887] usb 5-1: config 0 descriptor?? [ 490.841942][T11640] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 490.881911][ T5887] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.950167][ T5909] usb 3-1: USB disconnect, device number 113 [ 491.064244][ T5945] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 491.082970][ T5945] usb 4-1: USB disconnect, device number 99 [ 491.122841][ T5942] udevd[5942]: setting mode of /dev/bus/usb/004/099 to 020664 failed: No such file or directory [ 491.122953][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 491.207266][ T5942] udevd[5942]: setting owner of /dev/bus/usb/004/099 to uid=0, gid=0 failed: No such file or directory [ 491.236288][ T5887] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 491.331097][ T7458] udevd[7458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 491.432560][ T5945] usb 5-1: USB disconnect, device number 91 [ 491.509153][T11657] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 491.599600][T11659] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1624'. [ 491.609314][T11659] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 491.882795][T11667] tc_dump_action: action bad kind [ 492.388116][ T5909] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 492.567343][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 492.618482][ T5909] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 492.626574][ T5909] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 492.697339][ T5909] usb 4-1: config 6 has no interface number 0 [ 492.714897][ T5909] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 492.756676][ T5909] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 492.811005][ T5909] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.910653][ T5909] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 492.928062][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.934416][ T5887] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 492.954037][ T5909] usb 4-1: Product: syz [ 492.961820][ T5909] usb 4-1: Manufacturer: syz [ 492.977277][ T5909] usb 4-1: SerialNumber: syz [ 493.036437][ T5909] hso 4-1:6.2: Failed to find INT IN ep [ 493.098983][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 493.106208][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.138171][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.161875][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 493.197455][ T5887] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 493.223576][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.263701][ T5887] usb 5-1: config 0 descriptor?? [ 493.308168][ T50] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 493.459967][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.485298][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.508090][ T50] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.538218][ T50] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.547330][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.583933][ T50] usb 3-1: config 0 descriptor?? [ 493.617659][T11694] netlink: 'syz.5.1633': attribute type 13 has an invalid length. [ 493.658121][ T5909] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 493.818054][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 493.827963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 493.878214][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 493.881466][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.944198][ T5909] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 493.956668][ T5909] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 493.965315][ T5909] usb 2-1: Manufacturer: syz [ 493.982664][ T5909] usb 2-1: config 0 descriptor?? [ 494.078272][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 494.086638][ T24] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.104813][ T50] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 494.118066][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 494.125594][ T50] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x1 [ 494.134529][ T50] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 494.146788][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 494.160681][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.176818][ T50] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 494.196830][ T24] usb 6-1: Product: syz [ 494.201581][ T24] usb 6-1: Manufacturer: syz [ 494.211985][ T24] usb 6-1: SerialNumber: syz [ 494.261514][ T24] usb 6-1: config 0 descriptor?? [ 494.283266][ T24] gs_usb 6-1:0.0: Required endpoints not found [ 494.359231][T11689] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1631'. [ 494.370584][ T5907] usb 3-1: USB disconnect, device number 114 [ 494.422458][T11698] fido_id[11698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 494.833406][ T5945] usb 4-1: USB disconnect, device number 100 [ 494.896288][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1634'. [ 494.905970][T11701] netlink: 'syz.3.1634': attribute type 7 has an invalid length. [ 494.916318][T11701] netlink: 'syz.3.1634': attribute type 8 has an invalid length. [ 494.924296][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 494.959604][T11701] erspan0: entered promiscuous mode [ 494.966470][T11701] gretap0: entered promiscuous mode [ 494.978136][T11701] erspan0: left promiscuous mode [ 494.988294][T11701] gretap0: left promiscuous mode [ 495.218908][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 495.218926][ T29] audit: type=1326 audit(1774328244.212:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 495.234912][T11709] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1637'. [ 495.270307][ T29] audit: type=1326 audit(1774328244.212:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 495.293832][ T29] audit: type=1326 audit(1774328244.212:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 495.339104][ T5907] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 495.349960][ T29] audit: type=1326 audit(1774328244.212:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 495.388946][ T29] audit: type=1326 audit(1774328244.212:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 495.429666][ T29] audit: type=1326 audit(1774328244.212:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 495.466594][ T29] audit: type=1326 audit(1774328244.212:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 495.493753][ T29] audit: type=1326 audit(1774328244.212:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f494099e007 code=0x7ffc0000 [ 495.516404][ T29] audit: type=1326 audit(1774328244.212:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f494095cfce code=0x7ffc0000 [ 495.520184][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 495.543628][ T29] audit: type=1326 audit(1774328244.212:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f494095cfce code=0x7ffc0000 [ 495.637489][ T5907] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 495.660162][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.715934][ T5907] usb 3-1: Product: syz [ 495.722242][ T5907] usb 3-1: Manufacturer: syz [ 495.728531][ T5907] usb 3-1: SerialNumber: syz [ 495.790001][ T5907] usb 3-1: config 0 descriptor?? [ 495.810737][ T5907] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 496.383846][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 496.426410][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 496.454993][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 496.470650][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 496.492039][ T5887] usb 5-1: USB disconnect, device number 92 [ 496.506213][ T5909] usb 2-1: USB disconnect, device number 85 [ 496.704247][ T24] usb 6-1: USB disconnect, device number 22 [ 496.838268][ T5945] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 496.955424][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1640'. [ 496.965235][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1640'. [ 497.012950][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 497.054981][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 497.146327][T11726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.236233][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 497.279656][ T5945] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 497.289172][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.300924][ T5945] usb 4-1: Product: syz [ 497.305360][ T5945] usb 4-1: Manufacturer: syz [ 497.312618][ T5945] usb 4-1: SerialNumber: syz [ 497.326831][ T5945] usb 4-1: config 0 descriptor?? [ 497.377237][ T5945] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 497.410844][ T5945] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 497.428445][ T5909] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 497.648085][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 497.661308][ T5909] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 497.677493][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.723896][ T5909] usb 6-1: config 0 descriptor?? [ 497.744401][ T5909] gspca_main: sq930x-2.14.0 probing 041e:403c [ 497.990832][ T5945] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 497.998214][ T5945] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 498.453299][T11748] Invalid argument reading file caps for ./file0 [ 498.462274][T11748] netlink: 'syz.1.1648': attribute type 26 has an invalid length. [ 498.601452][ T24] usb 3-1: USB disconnect, device number 115 [ 498.628030][ T5945] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 498.664664][T11752] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1649'. [ 498.675921][ T5945] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 498.870474][ T5945] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 498.893060][ T5945] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 499.068209][ T5945] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 499.077245][ T5945] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 499.151774][T11760] netlink: 'syz.4.1652': attribute type 13 has an invalid length. [ 499.201263][ T5909] gspca_sq930x: ucbus_write failed -110 [ 499.213190][ T5909] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 499.259694][T11719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.286833][T11719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.298099][ T5945] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 499.338444][ T5945] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 499.361854][ T5945] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 499.458095][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 499.538140][T11768] SET target dimension over the limit! [ 499.549209][T11768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.685630][ T5945] usb 4-1: USB disconnect, device number 101 [ 499.830938][ T5909] usb 6-1: USB disconnect, device number 23 [ 499.838321][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 499.848040][ T24] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.862671][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 499.931477][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 499.956319][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.985731][ T24] usb 5-1: Product: syz [ 500.000092][ T24] usb 5-1: Manufacturer: syz [ 500.014872][ T24] usb 5-1: SerialNumber: syz [ 500.041560][ T24] usb 5-1: config 0 descriptor?? [ 500.060709][ T24] gs_usb 5-1:0.0: Required endpoints not found [ 500.423142][T11772] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1654'. [ 500.628172][ T5944] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 500.642639][T11778] syzkaller0: entered promiscuous mode [ 500.665973][T11778] syzkaller0: entered allmulticast mode [ 500.788222][ T5944] usb 2-1: device descriptor read/64, error -71 [ 500.901977][T11786] FAULT_INJECTION: forcing a failure. [ 500.901977][T11786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.915944][T11786] CPU: 1 UID: 0 PID: 11786 Comm: syz.2.1661 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.915973][T11786] Tainted: [L]=SOFTLOCKUP [ 500.915980][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.915992][T11786] Call Trace: [ 500.915999][T11786] [ 500.916008][T11786] dump_stack_lvl+0xe8/0x150 [ 500.916044][T11786] should_fail_ex+0x412/0x560 [ 500.916079][T11786] _copy_to_user+0x31/0xb0 [ 500.916104][T11786] simple_read_from_buffer+0xe1/0x170 [ 500.916136][T11786] proc_fail_nth_read+0x1bb/0x230 [ 500.916166][T11786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.916192][T11786] ? rw_verify_area+0x2a6/0x4d0 [ 500.916211][T11786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.916237][T11786] vfs_read+0x20c/0xa70 [ 500.916255][T11786] ? fdget_pos+0x246/0x320 [ 500.916276][T11786] ? __pfx___mutex_lock+0x10/0x10 [ 500.916300][T11786] ? __pfx_vfs_read+0x10/0x10 [ 500.916322][T11786] ? __fget_files+0x2a/0x420 [ 500.916351][T11786] ? __fget_files+0x3a0/0x420 [ 500.916373][T11786] ? __fget_files+0x2a/0x420 [ 500.916392][T11786] ksys_read+0x150/0x270 [ 500.916404][T11786] ? __pfx_ksys_read+0x10/0x10 [ 500.916414][T11786] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 500.916555][T11786] do_syscall_64+0x14d/0xf80 [ 500.916568][T11786] ? trace_irq_disable+0x3b/0x150 [ 500.916583][T11786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.916595][T11786] ? clear_bhb_loop+0x40/0x90 [ 500.916607][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.916617][T11786] RIP: 0033:0x7f4d7455cfce [ 500.916629][T11786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 500.916639][T11786] RSP: 002b:00007f4d7543afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.916650][T11786] RAX: ffffffffffffffda RBX: 00007f4d7543b6c0 RCX: 00007f4d7455cfce [ 500.916658][T11786] RDX: 000000000000000f RSI: 00007f4d7543b0a0 RDI: 0000000000000006 [ 500.916664][T11786] RBP: 00007f4d7543b090 R08: 0000000000000000 R09: 0000000000000000 [ 500.916671][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.916676][T11786] R13: 00007f4d74816128 R14: 00007f4d74816090 R15: 00007f4d7493fa48 [ 500.916691][T11786] [ 500.968591][ T5909] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 501.029291][ T24] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 501.098351][ T5944] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 501.250017][ T5909] usb 6-1: config 1 interface 0 has no altsetting 0 [ 501.259093][ T5909] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 501.271077][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.279292][ T5909] usb 6-1: Product: syz [ 501.283589][ T5909] usb 6-1: Manufacturer: Ћ [ 501.288363][ T5944] usb 2-1: device descriptor read/64, error -71 [ 501.295832][ T5909] usb 6-1: SerialNumber: syz [ 501.299735][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 501.320595][ T24] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 501.332047][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.340923][ T24] usb 4-1: Product: syz [ 501.345209][ T24] usb 4-1: Manufacturer: syz [ 501.350314][ T24] usb 4-1: SerialNumber: syz [ 501.361895][ T24] usb 4-1: config 0 descriptor?? [ 501.373426][ T24] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 501.408518][ T5944] usb usb2-port1: attempt power cycle [ 501.530299][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.536886][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.551205][ T5909] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 187 proto 1 vid 0x0525 pid 0xA4A8 [ 501.591737][ T5909] usb 6-1: USB disconnect, device number 24 [ 501.607089][ T5909] usblp0: removed [ 501.724056][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 501.724075][ T29] audit: type=1326 audit(1774328250.712:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 501.755176][ T29] audit: type=1326 audit(1774328250.712:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 501.779106][ T29] audit: type=1326 audit(1774328250.712:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 501.784230][ T5944] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 501.802301][ T29] audit: type=1326 audit(1774328250.712:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 501.986414][ T29] audit: type=1326 audit(1774328250.772:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 502.018970][ T5944] usb 2-1: device descriptor read/8, error -71 [ 502.104999][ T29] audit: type=1326 audit(1774328250.772:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 502.162044][ T29] audit: type=1326 audit(1774328250.942:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 502.195636][ T50] usb 5-1: USB disconnect, device number 93 [ 502.268653][ T5944] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 502.278373][ T29] audit: type=1326 audit(1774328250.942:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 502.334175][ T5944] usb 2-1: device descriptor read/8, error -71 [ 502.366701][ T29] audit: type=1326 audit(1774328250.942:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 502.470045][ T5944] usb usb2-port1: unable to enumerate USB device [ 502.476631][ T29] audit: type=1326 audit(1774328250.942:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.2.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7459c799 code=0x7ffc0000 [ 502.557460][T11809] PKCS8: Unsupported PKCS#8 version [ 502.918101][ T5944] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 503.080083][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 503.110736][ T5944] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 503.134951][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.191107][ T5944] usb 6-1: Product: syz [ 503.219769][ T5944] usb 6-1: Manufacturer: syz [ 503.248978][ T5944] usb 6-1: SerialNumber: syz [ 503.278920][ T5944] usb 6-1: config 0 descriptor?? [ 503.351975][ T5944] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 503.543676][T11816] syzkaller0: entered promiscuous mode [ 503.551266][T11816] syzkaller0: entered allmulticast mode [ 503.588088][ T24] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 503.739900][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 503.749679][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.763805][ T24] usb 3-1: config 0 descriptor?? [ 504.030874][ T24] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 504.239778][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 504.267872][ T24] [drm] Initialized udl on minor 2 [ 504.740584][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 504.794474][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 504.800257][ T5944] usb 4-1: USB disconnect, device number 102 [ 504.843371][ T5880] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.875168][ T5880] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 504.901531][ T24] usb 3-1: USB disconnect, device number 116 [ 505.341502][T11837] tc_dump_action: action bad kind [ 506.263239][ T5909] usb 6-1: USB disconnect, device number 25 [ 507.202330][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 507.202348][ T29] audit: type=1326 audit(1774328256.192:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0039c799 code=0x7ffc0000 [ 507.310061][T11856] syzkaller0: entered promiscuous mode [ 507.315564][T11856] syzkaller0: entered allmulticast mode [ 507.330984][ T29] audit: type=1326 audit(1774328256.192:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf0039c799 code=0x7ffc0000 [ 507.366368][ T29] audit: type=1326 audit(1774328256.192:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0039c799 code=0x7ffc0000 [ 507.398307][ T29] audit: type=1326 audit(1774328256.192:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fcf0039c799 code=0x7ffc0000 [ 507.428507][ T29] audit: type=1326 audit(1774328256.232:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0039c799 code=0x7ffc0000 [ 507.430077][T11859] syzkaller1: entered promiscuous mode [ 507.516108][T11859] syzkaller1: entered allmulticast mode [ 507.606526][ T29] audit: type=1326 audit(1774328256.232:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf0039e007 code=0x7ffc0000 [ 507.713289][ T29] audit: type=1326 audit(1774328256.232:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcf0035cfce code=0x7ffc0000 [ 507.785531][T11866] tipc: Started in network mode [ 507.798202][ T29] audit: type=1326 audit(1774328256.232:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcf0035cfce code=0x7ffc0000 [ 507.825818][ T29] audit: type=1326 audit(1774328256.232:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcf0035cfce code=0x7ffc0000 [ 507.827241][T11866] tipc: Node identity bf, cluster identity 4711 [ 507.860870][T11866] tipc: Enabling of bearer rejected, failed to enable media [ 507.870785][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1683'. [ 508.019651][ T5907] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 508.085627][ T29] audit: type=1326 audit(1774328256.232:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcf0035cfce code=0x7ffc0000 [ 508.176955][T11874] FAULT_INJECTION: forcing a failure. [ 508.176955][T11874] name failslab, interval 1, probability 0, space 0, times 0 [ 508.200569][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 508.220290][ T5907] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 508.229647][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.243190][T11874] CPU: 0 UID: 0 PID: 11874 Comm: syz.2.1687 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.243222][T11874] Tainted: [L]=SOFTLOCKUP [ 508.243228][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.243239][T11874] Call Trace: [ 508.243247][T11874] [ 508.243256][T11874] dump_stack_lvl+0xe8/0x150 [ 508.243287][T11874] should_fail_ex+0x412/0x560 [ 508.243318][T11874] should_failslab+0xa8/0x100 [ 508.243344][T11874] __kmalloc_noprof+0xe8/0x760 [ 508.243366][T11874] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 508.243398][T11874] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 508.243425][T11874] genl_family_rcv_msg_doit+0xd9/0x330 [ 508.243454][T11874] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 508.243483][T11874] ? apparmor_capable+0x126/0x170 [ 508.243508][T11874] ? bpf_lsm_capable+0x9/0x20 [ 508.243533][T11874] ? security_capable+0x7e/0x2c0 [ 508.243575][T11874] genl_rcv_msg+0x61c/0x7a0 [ 508.243602][T11874] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.243622][T11874] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 508.243778][T11874] ? __lock_acquire+0x6b5/0x2cf0 [ 508.243812][T11874] netlink_rcv_skb+0x232/0x4b0 [ 508.243840][T11874] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.243863][T11874] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.243906][T11874] ? down_read+0x272/0x2e0 [ 508.243927][T11874] ? genl_rcv+0xd/0x40 [ 508.243948][T11874] genl_rcv+0x28/0x40 [ 508.243969][T11874] netlink_unicast+0x80f/0x9b0 [ 508.244002][T11874] ? __pfx_netlink_unicast+0x10/0x10 [ 508.244028][T11874] ? netlink_sendmsg+0x650/0xb40 [ 508.244043][T11874] ? skb_put+0x11b/0x210 [ 508.244067][T11874] netlink_sendmsg+0x813/0xb40 [ 508.244094][T11874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.244114][T11874] ? aa_sock_msg_perm+0xf1/0x1b0 [ 508.244142][T11874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.244166][T11874] ____sys_sendmsg+0x972/0x9f0 [ 508.244196][T11874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.244226][T11874] ? import_iovec+0x73/0xa0 [ 508.244249][T11874] ___sys_sendmsg+0x2a5/0x360 [ 508.244275][T11874] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.244329][T11874] ? __fget_files+0x2a/0x420 [ 508.244355][T11874] ? __fget_files+0x3a0/0x420 [ 508.244390][T11874] __x64_sys_sendmsg+0x1bd/0x2a0 [ 508.244415][T11874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.244445][T11874] ? __pfx_ksys_write+0x10/0x10 [ 508.244477][T11874] do_syscall_64+0x14d/0xf80 [ 508.244497][T11874] ? trace_irq_disable+0x3b/0x150 [ 508.244522][T11874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.244549][T11874] ? clear_bhb_loop+0x40/0x90 [ 508.244571][T11874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.244589][T11874] RIP: 0033:0x7f4d7459c799 [ 508.244607][T11874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.244622][T11874] RSP: 002b:00007f4d7545c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.244642][T11874] RAX: ffffffffffffffda RBX: 00007f4d74815fa0 RCX: 00007f4d7459c799 [ 508.244655][T11874] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 508.244667][T11874] RBP: 00007f4d7545c090 R08: 0000000000000000 R09: 0000000000000000 [ 508.244678][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.244690][T11874] R13: 00007f4d74816038 R14: 00007f4d74815fa0 R15: 00007f4d7493fa48 [ 508.244720][T11874] [ 508.573995][ T5880] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 508.584771][ T5907] usb 4-1: Product: syz [ 508.589095][ T5907] usb 4-1: Manufacturer: syz [ 508.593687][ T5907] usb 4-1: SerialNumber: syz [ 508.639272][ T5907] usb 4-1: config 0 descriptor?? [ 508.647083][ T5907] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 508.675187][T11876] sctp: [Deprecated]: syz.5.1688 (pid 11876) Use of int in max_burst socket option deprecated. [ 508.675187][T11876] Use struct sctp_assoc_value instead [ 508.896858][T11883] fuse: Bad value for 'group_id' [ 508.913773][T11883] fuse: Bad value for 'group_id' [ 508.922927][ T5880] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 508.958936][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.218088][ T5880] usb 2-1: config 0 has no interfaces? [ 509.227688][ T5880] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 509.242700][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.264717][ T5880] usb 2-1: config 0 descriptor?? [ 509.657825][T11896] tc_dump_action: action bad kind [ 510.048136][ T5907] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 510.198307][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 510.705750][ T5909] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 510.880013][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.888487][ T5909] usb 3-1: config 0 has no interface number 0 [ 510.901137][ T5909] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 510.932685][ T5909] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 510.958247][ T5909] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 510.968090][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.988886][ T5907] usb 6-1: unable to get BOS descriptor or descriptor too short [ 511.001596][ T5907] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 511.024042][ T5909] usb 3-1: config 0 descriptor?? [ 511.037270][ T5907] usb 6-1: can't read configurations, error -71 [ 511.052293][T11902] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 511.065901][ T5909] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 511.098899][T11905] netlink: 'syz.5.1696': attribute type 13 has an invalid length. [ 511.171228][ T5909] usb 4-1: USB disconnect, device number 103 [ 511.271622][T11911] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1698'. [ 511.287189][ T5944] usb 3-1: USB disconnect, device number 117 [ 511.314753][T11911] lo: Caught tx_queue_len zero misconfig [ 511.418134][ T5907] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 511.502678][ T5944] usb 2-1: USB disconnect, device number 90 [ 511.556546][T11921] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 511.569303][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 511.580651][ T5907] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.593974][ T5909] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 511.602323][ T5907] usb 6-1: config 0 interface 0 has no altsetting 0 [ 511.613750][ T5907] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 511.623419][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.632097][ T5907] usb 6-1: Product: syz [ 511.636369][ T5907] usb 6-1: Manufacturer: syz [ 511.641785][ T5907] usb 6-1: SerialNumber: syz [ 511.658237][ T5907] usb 6-1: config 0 descriptor?? [ 511.665701][ T5907] gs_usb 6-1:0.0: Required endpoints not found [ 511.768026][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 511.803642][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.844373][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.885352][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 511.929849][ T5909] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 511.957034][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.328166][ T50] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 512.599865][ T50] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 512.889628][ T5909] usb 4-1: config 0 descriptor?? [ 512.929219][ T50] usb 3-1: config 0 has no interface number 0 [ 512.960866][ T50] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 512.974241][ T50] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.004866][ T50] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 513.016513][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.027153][ T50] usb 3-1: Product: syz [ 513.031490][ T50] usb 3-1: Manufacturer: syz [ 513.036282][ T50] usb 3-1: SerialNumber: syz [ 513.078770][ T50] usb 3-1: config 0 descriptor?? [ 513.090118][T11936] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 513.101078][ T50] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 513.131311][ T50] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 513.596154][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.605491][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.722185][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 513.785993][T11946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.795432][T11946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.080256][ T24] usb 6-1: USB disconnect, device number 27 [ 514.106958][T11950] PKCS7: Unknown OID: [5] (bad) [ 514.116466][T11950] PKCS7: Only support pkcs7_signedData type [ 514.252094][T11946] ip6gretap0: left promiscuous mode [ 514.319018][T11946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.370750][T11946] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.516340][T11946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.637705][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 514.637723][ T29] audit: type=1326 audit(1774328263.622:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 514.810215][ T29] audit: type=1326 audit(1774328263.622:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 514.853168][T11963] tc_dump_action: action bad kind [ 515.055175][ T29] audit: type=1326 audit(1774328263.622:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 515.130523][ T29] audit: type=1326 audit(1774328263.622:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 515.163275][ T29] audit: type=1326 audit(1774328263.622:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 515.252304][ T5880] usb 3-1: USB disconnect, device number 118 [ 515.338144][ T50] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 515.395056][ T29] audit: type=1326 audit(1774328263.622:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 515.418361][ T29] audit: type=1326 audit(1774328263.622:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 515.542835][T11970] tc_dump_action: action bad kind [ 515.584495][ T29] audit: type=1326 audit(1774328263.622:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 515.585189][ T5880] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 515.617877][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 515.718134][ T29] audit: type=1326 audit(1774328263.622:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 515.743965][ T50] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 515.762484][ T29] audit: type=1326 audit(1774328263.622:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.5.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3cc419c799 code=0x7ffc0000 [ 515.810051][ T50] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 515.899097][ T50] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 515.911867][ T5880] cyberjack 3-1:0.69: device disconnected [ 515.924169][ T50] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 515.958954][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 515.991140][ T50] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 516.000860][ T50] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 516.063522][T11975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.092078][ T50] usb 6-1: Product: syz [ 516.097613][ T50] usb 6-1: Manufacturer: syz [ 516.102957][ T50] usb 6-1: SerialNumber: syz [ 516.172593][ T50] usb 6-1: config 0 descriptor?? [ 516.180779][ T50] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 516.590917][ T50] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 516.699798][ T50] usb 6-1: USB disconnect, device number 28 [ 516.893596][ T50] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 517.138158][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 517.144181][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 517.220481][ T5909] usb 4-1: USB disconnect, device number 104 [ 518.034963][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 518.243274][T11997] netlink: 'syz.2.1720': attribute type 13 has an invalid length. [ 519.081574][ T5944] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 519.258237][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 519.266523][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.282941][ T5944] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 519.296620][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.347731][T12011] tc_dump_action: action bad kind [ 519.398327][ T5944] usb 4-1: config 0 descriptor?? [ 519.658987][T12016] bridge0: port 3(hsr0) entered blocking state [ 519.674757][T12016] bridge0: port 3(hsr0) entered disabled state [ 519.693582][T12016] hsr0: entered allmulticast mode [ 519.707678][T12016] hsr_slave_0: entered allmulticast mode [ 519.725160][T12016] hsr_slave_1: entered allmulticast mode [ 519.765572][T12016] hsr0: entered promiscuous mode [ 519.768124][ T5909] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 519.774197][T12016] bridge0: port 3(hsr0) entered blocking state [ 519.784588][T12016] bridge0: port 3(hsr0) entered forwarding state [ 519.836150][ T5944] mcp2221 0003:04D8:00DD.0028: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 519.930779][ T5909] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 519.942302][ T5909] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 519.978064][ T5909] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 520.023563][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.032953][ T5944] usb 4-1: USB disconnect, device number 105 [ 520.146608][T12014] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 520.156743][ T5909] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.327067][T12021] input: syz0 as /devices/virtual/input/input71 [ 520.423874][ T5909] usb 2-1: USB disconnect, device number 91 [ 521.451764][ T50] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 521.478102][ T5880] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 521.902120][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 521.917812][ T50] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.937815][ T50] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 521.948022][ T5880] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 521.968295][ T50] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 521.977418][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.985704][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.994225][ T5880] usb 5-1: Product: syz [ 522.018907][ T5880] usb 5-1: Manufacturer: syz [ 522.023907][T12038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 522.031512][ T5880] usb 5-1: SerialNumber: syz [ 522.197005][ T5880] usb 5-1: config 0 descriptor?? [ 522.204043][ T50] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.227367][ T5880] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 522.421939][ T50] usb 5-1: USB disconnect, device number 94 [ 522.469929][T12038] openvswitch: netlink: IP tunnel dst address not specified [ 522.623431][ T5909] usb 2-1: USB disconnect, device number 92 [ 523.147580][T12066] tc_dump_action: action bad kind [ 524.298725][ T50] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 524.459434][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 524.494326][ T50] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 524.506075][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.518053][ T50] usb 2-1: Product: syz [ 524.522251][ T50] usb 2-1: Manufacturer: syz [ 524.527072][ T50] usb 2-1: SerialNumber: syz [ 524.535768][ T50] usb 2-1: config 0 descriptor?? [ 524.632623][ T50] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 524.705629][T12088] tc_dump_action: action bad kind [ 524.949249][T12094] SET target dimension over the limit! [ 524.961736][T12094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.264046][ T5907] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 525.540886][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 525.560805][ T5907] usb 5-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 525.628039][ T5907] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 526.263779][ T5907] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 526.302393][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.357119][ T5907] usb 5-1: Product: syz [ 526.374408][ T5907] usb 5-1: Manufacturer: syz [ 526.447982][ T5907] usb 5-1: SerialNumber: syz [ 526.495193][ T5907] usb 5-1: config 0 descriptor?? [ 526.847018][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 527.135416][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1748'. [ 527.144577][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1748'. [ 527.250109][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 527.477448][T12113] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 527.798035][ T5880] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 527.815569][ T50] usb 2-1: USB disconnect, device number 93 [ 527.958023][ T5880] usb 6-1: device descriptor read/64, error -71 [ 528.198065][ T5880] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 528.244194][ T5907] usb 5-1: USB disconnect, device number 95 [ 528.308059][ T50] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 528.358126][ T5880] usb 6-1: device descriptor read/64, error -71 [ 528.384643][T12118] syzkaller0: entered promiscuous mode [ 528.404223][T12118] syzkaller0: entered allmulticast mode [ 528.468261][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 528.480321][ T5880] usb usb6-port1: attempt power cycle [ 528.486845][ T50] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 528.507467][ T50] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.537006][ T50] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.548206][ T50] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 528.591141][ T50] usb 2-1: config 7 interface 0 has no altsetting 0 [ 528.601533][ T50] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 528.614073][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.814615][T12124] netlink: 'syz.3.1753': attribute type 1 has an invalid length. [ 528.824095][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 528.848199][ T5880] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 528.879051][ T5880] usb 6-1: device descriptor read/8, error -71 [ 529.062225][ T50] hid (null): usage index exceeded [ 529.081909][ T50] hid (null): global environment stack underflow [ 529.118856][ T5880] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 529.137891][ T50] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0029/input/input74 [ 529.147168][ T5909] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 529.189304][ T5880] usb 6-1: device descriptor read/8, error -71 [ 529.191259][ T5909] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 529.288453][ T50] kye 0003:0458:5010.0029: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 529.299109][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 529.308430][ T5880] usb usb6-port1: unable to enumerate USB device [ 530.368121][ T5907] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 530.968912][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 531.005578][ T5907] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 531.012520][ T50] usb 2-1: USB disconnect, device number 94 [ 531.022110][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.037874][ T5907] usb 5-1: Product: syz [ 531.043118][ T5907] usb 5-1: Manufacturer: syz [ 531.050772][ T5907] usb 5-1: SerialNumber: syz [ 531.074887][ T5907] usb 5-1: config 0 descriptor?? [ 531.111069][ T5907] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 531.309924][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1762'. [ 531.386957][T12157] input: syz0 as /devices/virtual/input/input76 [ 531.402378][T12157] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1762'. [ 531.443908][T12156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.558308][ T50] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 531.858158][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 531.907251][ T50] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 531.934428][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.956356][ T50] usb 2-1: Product: syz [ 531.971870][ T50] usb 2-1: Manufacturer: syz [ 532.021215][ T50] usb 2-1: SerialNumber: syz [ 532.120076][ T50] usb 2-1: config 0 descriptor?? [ 532.135832][ T50] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 532.202196][T12170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1764'. [ 533.987424][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.009488][T12192] batadv_slave_0: entered promiscuous mode [ 534.111882][T12195] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1771'. [ 534.243748][ T5909] usb 5-1: USB disconnect, device number 96 [ 534.300943][ T50] usb 2-1: USB disconnect, device number 95 [ 534.479807][ T5826] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 534.688051][ T50] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 534.747688][T12210] pim6reg1: entered promiscuous mode [ 534.753265][T12210] pim6reg1: entered allmulticast mode [ 534.841593][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.858178][ T5909] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 534.874345][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 534.895614][ T50] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 534.920500][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.940070][ T50] usb 2-1: config 0 descriptor?? [ 535.021786][ T5909] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 535.030832][ T5909] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 535.041893][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 535.051339][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 535.063034][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 535.076741][ T5909] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 535.086704][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 535.095236][ T5909] usb 4-1: Product: syz [ 535.100042][ T5909] usb 4-1: Manufacturer: syz [ 535.115156][ T5909] cdc_wdm 4-1:1.0: skipping garbage [ 535.121568][ T5909] cdc_wdm 4-1:1.0: skipping garbage [ 535.130601][ T5909] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 535.136808][ T5909] cdc_wdm 4-1:1.0: Unknown control protocol [ 535.208053][ T5887] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 535.318291][ C0] wdm_int_callback: 53 callbacks suppressed [ 535.318320][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 535.330877][ C0] wdm_int_callback: 53 callbacks suppressed [ 535.330901][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 535.343796][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 535.350431][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 535.356785][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 535.363392][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 535.369769][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 535.369936][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 535.376389][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 535.376657][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 535.398954][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 535.399669][ T5887] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 535.405626][ T5909] usb 4-1: USB disconnect, device number 106 [ 535.414184][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 535.414205][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 535.414219][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 535.424533][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.460495][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.467534][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.488195][ T5887] usb 5-1: Product: syz [ 535.492372][ T5887] usb 5-1: Manufacturer: syz [ 535.500725][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.518017][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.525011][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.532042][ T5887] usb 5-1: SerialNumber: syz [ 535.548849][ T5887] usb 5-1: config 0 descriptor?? [ 535.554295][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.561964][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.565209][ T5887] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 535.581462][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.598025][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.606318][ T50] saitek 0003:06A3:0621.002B: unknown main item tag 0x0 [ 535.634742][ T50] saitek 0003:06A3:0621.002B: ignoring exceeding usage max [ 535.660222][ T50] saitek 0003:06A3:0621.002B: unknown global tag 0xe [ 535.666994][ T50] saitek 0003:06A3:0621.002B: item 0 1 1 14 parsing failed [ 535.676738][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 535.676754][ T29] audit: type=1326 audit(1774328284.672:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 535.678726][ T50] saitek 0003:06A3:0621.002B: parse failed [ 535.684393][ T29] audit: type=1326 audit(1774328284.672:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 535.738086][ T50] saitek 0003:06A3:0621.002B: probe with driver saitek failed with error -22 [ 535.738832][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 535.757339][T12208] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1774'. [ 535.778122][ T50] usb 2-1: USB disconnect, device number 96 [ 535.779042][ T29] audit: type=1326 audit(1774328284.722:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 535.809202][ T29] audit: type=1326 audit(1774328284.722:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 535.836928][ T29] audit: type=1326 audit(1774328284.722:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 535.860453][ T29] audit: type=1326 audit(1774328284.722:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 535.884693][ T29] audit: type=1326 audit(1774328284.722:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 535.927632][ T29] audit: type=1326 audit(1774328284.722:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 535.973371][ T29] audit: type=1326 audit(1774328284.722:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 536.055319][ T29] audit: type=1326 audit(1774328284.722:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f494099c799 code=0x7ffc0000 [ 536.742305][T12226] bridge: RTM_NEWNEIGH with invalid ether address [ 536.820858][T12235] bridge: RTM_NEWNEIGH with invalid ether address [ 537.538174][ T50] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 537.700636][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 537.714667][ T50] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 537.734578][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.751776][ T50] usb 2-1: Product: syz [ 537.760969][ T50] usb 2-1: Manufacturer: syz [ 537.769850][ T50] usb 2-1: SerialNumber: syz [ 537.787446][ T50] usb 2-1: config 0 descriptor?? [ 537.816359][ T50] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 539.214095][T12260] input: syz0 as /devices/virtual/input/input80 [ 539.529351][ T50] usb 5-1: USB disconnect, device number 97 [ 539.644951][T12263] veth1_macvtap: left promiscuous mode [ 539.651600][T12263] macsec0: entered allmulticast mode [ 539.679711][T12263] veth1_macvtap: entered promiscuous mode [ 539.687792][T12263] veth1_macvtap: entered allmulticast mode [ 539.695180][T12263] macsec0: left allmulticast mode [ 539.700826][T12263] veth1_macvtap: left allmulticast mode [ 539.968707][ T5944] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 540.148169][ T5944] usb 5-1: device descriptor read/64, error -71 [ 540.278038][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 540.388257][ T5944] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 540.429481][ T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 540.518325][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 540.527423][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.601988][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 540.610095][ T50] usb 2-1: USB disconnect, device number 97 [ 540.638111][ T5944] usb 5-1: device descriptor read/64, error -71 [ 540.748932][ T5944] usb usb5-port1: attempt power cycle [ 540.867458][T12276] SET target dimension over the limit! [ 541.011241][T12276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.179076][ T5944] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 541.217698][ T5944] usb 5-1: device descriptor read/8, error -71 [ 541.468116][ T5944] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 541.489032][ T5944] usb 5-1: device descriptor read/8, error -71 [ 541.723424][ T5944] usb usb5-port1: unable to enumerate USB device [ 541.791025][ T24] stv0680 4-1:4.0: Could not get descriptor 0200 [ 541.903275][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.914375][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.994541][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 542.003784][ T24] stv0680 4-1:4.0: last error: 2, command = 0x23 [ 542.022868][ T24] usb 4-1: USB disconnect, device number 107 [ 543.002208][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1798'. [ 543.348335][ T5909] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 543.500281][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 543.512074][ T5909] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 543.532502][ T5909] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 543.553644][ T5909] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.580774][ T5909] usb 6-1: config 1 interface 0 has no altsetting 0 [ 543.605693][ T5909] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 543.628558][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.636597][ T5909] usb 6-1: Product: syz [ 543.652987][ T5909] usb 6-1: Manufacturer: syz [ 543.657698][ T5909] usb 6-1: SerialNumber: syz [ 543.678148][ T5907] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 543.850033][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 543.862805][ T5907] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 543.877554][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.896088][ T5907] usb 5-1: Product: syz [ 543.906224][ T5907] usb 5-1: Manufacturer: syz [ 543.918807][ T5907] usb 5-1: SerialNumber: syz [ 543.940178][ T5907] usb 5-1: config 0 descriptor?? [ 543.960837][ T5907] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 545.932486][ T5909] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 546.003698][ T5909] usb 6-1: USB disconnect, device number 33 [ 546.023456][ T5909] usblp0: removed [ 546.398096][ T5909] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 546.560178][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 546.584399][ T5909] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 546.603673][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.620307][ T5909] usb 6-1: Product: syz [ 546.629562][ T5909] usb 6-1: Manufacturer: syz [ 546.638824][ T5909] usb 6-1: SerialNumber: syz [ 546.654686][ T5909] usb 6-1: config 0 descriptor?? [ 546.667625][ T5909] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 547.070573][ T5887] usb 5-1: USB disconnect, device number 102 [ 547.357354][T12338] tc_dump_action: action bad kind [ 547.516369][T12341] geneve1: Caught tx_queue_len zero misconfig [ 547.808074][ T5909] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 547.958110][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 547.966203][ T5909] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 547.975858][ T5909] usb 5-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 547.986718][ T5909] usb 5-1: config 0 has no interface number 0 [ 547.999039][ T5909] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 548.009281][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.020385][ T5909] usb 5-1: Product: syz [ 548.026642][ T5909] usb 5-1: Manufacturer: syz [ 548.036600][ T5909] usb 5-1: SerialNumber: syz [ 548.122428][ T5909] usb 5-1: config 0 descriptor?? [ 548.171123][ T5909] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 548.414350][ T24] usb 5-1: USB disconnect, device number 103 [ 549.202124][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1811'. [ 549.444842][T12354] batadv0: entered promiscuous mode [ 549.452038][T12354] bond0: entered promiscuous mode [ 549.457144][T12354] bond_slave_0: entered promiscuous mode [ 549.463346][T12354] bond_slave_1: entered promiscuous mode [ 549.469476][T12354] bridge0: entered promiscuous mode [ 549.478665][T12354] hsr1: entered allmulticast mode [ 549.483773][T12354] batadv0: entered allmulticast mode [ 549.535269][T12354] bond0: entered allmulticast mode [ 549.555723][T12354] bond_slave_0: entered allmulticast mode [ 549.561819][T12354] bond_slave_1: entered allmulticast mode [ 549.572103][T12354] bridge0: entered allmulticast mode [ 549.591417][T12354] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 549.660056][T12354] ptrace attach of "./syz-executor exec"[12358] was attempted by "./syz-executor exec"[12354] [ 549.678282][ T5907] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 549.746493][ T5909] usb 6-1: USB disconnect, device number 34 [ 549.783178][ T5944] [ 549.785524][ T5944] ============================================ [ 549.791718][ T5944] WARNING: possible recursive locking detected [ 549.797919][ T5944] syzkaller #0 Tainted: G L [ 549.803892][ T5944] -------------------------------------------- [ 549.810019][ T5944] kworker/0:7/5944 is trying to acquire lock: [ 549.816067][ T5944] ffff88807c8e8fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 549.825218][ T5944] [ 549.825218][ T5944] but task is already holding lock: [ 549.832565][ T5944] ffff88804fd74fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 549.841593][ T5944] [ 549.841593][ T5944] other info that might help us debug this: [ 549.849628][ T5944] Possible unsafe locking scenario: [ 549.849628][ T5944] [ 549.857132][ T5944] CPU0 [ 549.860416][ T5944] ---- [ 549.863723][ T5944] lock(&hsr->seqnr_lock); [ 549.868209][ T5944] lock(&hsr->seqnr_lock); [ 549.872686][ T5944] [ 549.872686][ T5944] *** DEADLOCK *** [ 549.872686][ T5944] [ 549.880809][ T5944] May be due to missing lock nesting notation [ 549.880809][ T5944] [ 549.889116][ T5944] 15 locks held by kworker/0:7/5944: [ 549.894376][ T5944] #0: ffff8880319e9548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 549.905081][ T5944] #1: ffffc90004517c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 549.918187][ T5944] #2: ffff88805c48d538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 549.927468][ T5944] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 549.936667][ T5944] #4: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 549.945791][ T5944] #5: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 549.955767][ T5944] #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 549.964889][ T5944] #7: ffff88804fd74fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 549.974348][ T5944] #8: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 549.983808][ T5944] #9: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 549.993729][ T5944] #10: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xc9/0x1960 [ 550.003435][ T5944] #11: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 550.013431][ T5944] #12: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 550.022783][ T5944] #13: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 550.032775][ T5944] #14: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 550.041982][ T5944] [ 550.041982][ T5944] stack backtrace: [ 550.047852][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.047867][ T5944] Tainted: [L]=SOFTLOCKUP [ 550.047871][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.047880][ T5944] Workqueue: mld mld_ifc_work [ 550.047893][ T5944] Call Trace: [ 550.047910][ T5944] [ 550.047920][ T5944] dump_stack_lvl+0xe8/0x150 [ 550.047968][ T5944] print_deadlock_bug+0x279/0x290 [ 550.047992][ T5944] __lock_acquire+0x253f/0x2cf0 [ 550.048006][ T5944] ? __lock_acquire+0x6b5/0x2cf0 [ 550.048021][ T5944] ? unwind_next_frame+0xa5/0x23c0 [ 550.048037][ T5944] ? unwind_next_frame+0x1aaf/0x23c0 [ 550.048052][ T5944] lock_acquire+0xf0/0x2e0 [ 550.048063][ T5944] ? hsr_dev_xmit+0x237/0x360 [ 550.048077][ T5944] ? hsr_dev_xmit+0x237/0x360 [ 550.048089][ T5944] _raw_spin_lock_bh+0x36/0x50 [ 550.048106][ T5944] ? hsr_dev_xmit+0x237/0x360 [ 550.048117][ T5944] hsr_dev_xmit+0x237/0x360 [ 550.048129][ T5944] ? hsr_dev_xmit+0x2d/0x360 [ 550.048141][ T5944] dev_hard_start_xmit+0x2d8/0x870 [ 550.048156][ T5944] __dev_queue_xmit+0x16d1/0x3890 [ 550.048170][ T5944] ? __dev_queue_xmit+0x277/0x3890 [ 550.048181][ T5944] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.048194][ T5944] ? ebt_do_table+0x2665/0x2830 [ 550.048293][ T5944] ? __local_bh_enable_ip+0xd0/0x130 [ 550.048306][ T5944] ? ebt_do_table+0x2665/0x2830 [ 550.048320][ T5944] ? __pfx___dev_queue_xmit+0x10/0x10 [ 550.048336][ T5944] ? br_nf_post_routing+0x219/0xfe0 [ 550.048350][ T5944] br_dev_queue_push_xmit+0x370/0x4a0 [ 550.048364][ T5944] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 550.048375][ T5944] NF_HOOK+0x360/0x3f0 [ 550.048387][ T5944] ? NF_HOOK+0xa2/0x3f0 [ 550.048397][ T5944] ? __pfx_NF_HOOK+0x10/0x10 [ 550.048407][ T5944] ? process_scheduled_works+0xb6e/0x18c0 [ 550.048419][ T5944] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 550.048433][ T5944] br_forward_finish+0xd3/0x130 [ 550.048444][ T5944] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 550.048455][ T5944] ? __pfx_br_forward_finish+0x10/0x10 [ 550.048466][ T5944] NF_HOOK+0x360/0x3f0 [ 550.048477][ T5944] ? NF_HOOK+0xa2/0x3f0 [ 550.048487][ T5944] ? __pfx_NF_HOOK+0x10/0x10 [ 550.048498][ T5944] ? __pfx_br_forward_finish+0x10/0x10 [ 550.048510][ T5944] ? br_handle_vlan+0x3e7/0x530 [ 550.048543][ T5944] __br_forward+0x397/0x540 [ 550.048554][ T5944] ? __pfx_br_forward_finish+0x10/0x10 [ 550.048566][ T5944] br_flood+0x6ee/0xb80 [ 550.048579][ T5944] ? br_dev_xmit+0x193/0x1980 [ 550.048593][ T5944] br_dev_xmit+0x12bd/0x1980 [ 550.048607][ T5944] ? br_dev_xmit+0x193/0x1980 [ 550.048621][ T5944] ? __pfx_br_dev_xmit+0x10/0x10 [ 550.048633][ T5944] ? __skb_get_hash_net+0x13f/0x2e0 [ 550.048675][ T5944] ? __pfx___skb_get_hash_net+0x10/0x10 [ 550.048686][ T5944] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 550.048698][ T5944] ? skb_network_protocol+0x23d/0x3f0 [ 550.048709][ T5944] ? __pfx_passthru_features_check+0x10/0x10 [ 550.048721][ T5944] dev_hard_start_xmit+0x2d8/0x870 [ 550.048736][ T5944] __dev_queue_xmit+0x16d1/0x3890 [ 550.048749][ T5944] ? __dev_queue_xmit+0x277/0x3890 [ 550.048760][ T5944] ? unwind_next_frame+0xa5/0x23c0 [ 550.048775][ T5944] ? __pfx___dev_queue_xmit+0x10/0x10 [ 550.048788][ T5944] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 550.048831][ T5944] ? bond_get_slave_by_id+0x589/0x590 [ 550.048870][ T5944] ? __pfx_bond_get_slave_by_id+0x10/0x10 [ 550.048881][ T5944] bond_start_xmit+0xd6e/0x1960 [ 550.048897][ T5944] ? bond_start_xmit+0xc9/0x1960 [ 550.048909][ T5944] ? __pfx_bond_start_xmit+0x10/0x10 [ 550.048922][ T5944] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 550.048934][ T5944] ? skb_network_protocol+0x23d/0x3f0 [ 550.048945][ T5944] ? __pfx_passthru_features_check+0x10/0x10 [ 550.048957][ T5944] dev_hard_start_xmit+0x2d8/0x870 [ 550.048970][ T5944] __dev_queue_xmit+0x16d1/0x3890 [ 550.048983][ T5944] ? __dev_queue_xmit+0x277/0x3890 [ 550.048994][ T5944] ? rcu_is_watching+0x15/0xb0 [ 550.049008][ T5944] ? trace_kmalloc+0x2a/0x110 [ 550.049032][ T5944] ? skb_copy_bits+0xf7/0x8f0 [ 550.049045][ T5944] ? __pfx___dev_queue_xmit+0x10/0x10 [ 550.049057][ T5944] ? __copy_skb_header+0xa3/0x4a0 [ 550.049089][ T5944] ? __asan_memcpy+0x40/0x70 [ 550.049098][ T5944] ? skb_copy_expand+0x3a9/0xb90 [ 550.049109][ T5944] ? __asan_memcpy+0x40/0x70 [ 550.049118][ T5944] ? skb_copy_expand+0x60c/0xb90 [ 550.049131][ T5944] ? skb_put+0x11b/0x210 [ 550.049139][ T5944] ? hsr_addr_subst_dest+0x30d/0xa90 [ 550.049154][ T5944] hsr_forward_skb+0x157b/0x2860 [ 550.049163][ T5944] ? ret_from_fork_asm+0x1a/0x30 [ 550.049178][ T5944] ? hsr_forward_skb+0xb3/0x2860 [ 550.049187][ T5944] ? __pfx_hsr_forward_skb+0x10/0x10 [ 550.049195][ T5944] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.049206][ T5944] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 550.049216][ T5944] ? hsr_dev_xmit+0x237/0x360 [ 550.049228][ T5944] hsr_dev_xmit+0x242/0x360 [ 550.049240][ T5944] ? hsr_dev_xmit+0x2d/0x360 [ 550.049252][ T5944] dev_hard_start_xmit+0x2d8/0x870 [ 550.049266][ T5944] __dev_queue_xmit+0x16d1/0x3890 [ 550.049279][ T5944] ? __dev_queue_xmit+0x277/0x3890 [ 550.049291][ T5944] ? ___neigh_create+0x1c5f/0x2280 [ 550.049327][ T5944] ? __local_bh_enable_ip+0xd0/0x130 [ 550.049339][ T5944] ? __pfx___dev_queue_xmit+0x10/0x10 [ 550.049350][ T5944] ? neigh_connected_output+0x1ea/0x460 [ 550.049364][ T5944] ? eth_header+0x11b/0x200 [ 550.049405][ T5944] ? __asan_memcpy+0x40/0x70 [ 550.049414][ T5944] ? eth_header+0x11b/0x200 [ 550.049424][ T5944] ? __pfx_eth_header+0x10/0x10 [ 550.049433][ T5944] ? neigh_connected_output+0x3b6/0x460 [ 550.049449][ T5944] ? ip6_output+0x126/0x550 [ 550.049464][ T5944] ip6_output+0x340/0x550 [ 550.049478][ T5944] ? __pfx_ip6_output+0x10/0x10 [ 550.049491][ T5944] NF_HOOK+0x177/0x4f0 [ 550.049501][ T5944] ? __pfx_NF_HOOK+0x10/0x10 [ 550.049511][ T5944] ? __pfx_dst_output+0x10/0x10 [ 550.049519][ T5944] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.049529][ T5944] ? __local_bh_enable_ip+0xd0/0x130 [ 550.049541][ T5944] ? icmp6_dst_alloc+0x3a6/0x440 [ 550.049575][ T5944] mld_sendpack+0x8b4/0xe40 [ 550.049585][ T5944] ? look_up_lock_class+0x57/0x110 [ 550.049598][ T5944] ? mld_sendpack+0x213/0xe40 [ 550.049607][ T5944] ? __pfx_mld_sendpack+0x10/0x10 [ 550.049619][ T5944] mld_ifc_work+0x835/0xe70 [ 550.049629][ T5944] ? process_scheduled_works+0xa8d/0x18c0 [ 550.049641][ T5944] process_scheduled_works+0xb6e/0x18c0 [ 550.049658][ T5944] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.049671][ T5944] ? assign_work+0x3d5/0x5e0 [ 550.049682][ T5944] worker_thread+0xa53/0xfc0 [ 550.049699][ T5944] kthread+0x388/0x470 [ 550.049717][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 550.049728][ T5944] ? __pfx_kthread+0x10/0x10 [ 550.049737][ T5944] ret_from_fork+0x51e/0xb90 [ 550.049754][ T5944] ? __pfx_ret_from_fork+0x10/0x10 [ 550.049765][ T5944] ? __switch_to+0xc7d/0x1450 [ 550.049783][ T5944] ? __pfx_kthread+0x10/0x10 [ 550.049792][ T5944] ret_from_fork_asm+0x1a/0x30 [ 550.049813][ T5944] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 551.609692][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1815'. [ 551.981055][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 551.998304][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 553.042718][ T5907] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 553.050942][ T5907] usb 2-1: can't read configurations, error -71 [ 553.821067][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.850292][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.871830][ T1143] bond0 (unregistering): Released all slaves [ 553.890788][ T1143] bond1 (unregistering): Released all slaves [ 553.958153][ T1143] tipc: Disabling bearer [ 553.964026][ T1143] tipc: Left network mode [ 554.111439][ T1143] hsr_slave_0: left promiscuous mode [ 554.128162][ T1143] hsr_slave_1: left promiscuous mode [ 554.134011][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.302610][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 554.315189][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 555.199257][ T1143] bridge_slave_1: left allmulticast mode [ 555.204945][ T1143] bridge_slave_1: left promiscuous mode [ 555.228191][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.239277][ T1143] bridge_slave_0: left allmulticast mode [ 555.244954][ T1143] bridge_slave_0: left promiscuous mode [ 555.268752][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.422913][ T1143] bond1 (unregistering): (slave .`): Releasing active interface [ 555.433675][ T1143] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.443856][ T1143] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.453293][ T1143] .` (unregistering): Released all slaves [ 555.463674][ T1143] bond1 (unregistering): Released all slaves [ 555.569155][ T1143] tipc: Left network mode [ 555.789335][ T1143] hsr_slave_0: left promiscuous mode [ 555.806638][ T1143] hsr_slave_1: left promiscuous mode [ 555.828511][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.114325][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 556.151671][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 556.773820][ T1143] IPVS: stop unused estimator thread 0...