last executing test programs: 18m47.615565929s ago: executing program 1 (id=909): r0 = syz_usb_connect(0x3, 0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000d684e120080490303fa60102030109022c0002000000000904fa00000e0100000904000001ff041000090500000000000000080bb679"], 0x0) syz_usb_ep_read(r0, 0xd, 0x9f, &(0x7f0000000000)=""/159) 18m46.164199694s ago: executing program 1 (id=915): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x3fff, 0x2, &(0x7f0000000240)='\x00~', 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x24) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c9b00a0006000500130902004f0091d826d79b93bf8f65b9a8085b8897837baa204aeb90944a896e73a0919cbc44f10e58ba1b8bb85562b6c8666862508bcb6cbe769413bdb8df17e680c5fa347053fab8bd36ef8f40436715014aa3dd41669dea46772379fb2c704681d111cf2f9bc70a60bc80f37f2c0a7ec6c8bb4c8e252585617da91ecb"], 0xf) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0xdbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r7, &(0x7f00000042c0)={0x2020}, 0x2020) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r6, 0x3) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000240)={@local, @random="7302bdd35004", @void, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "630e0000eaff00"}}}}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 18m45.784260866s ago: executing program 1 (id=916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="6368616e676570520166696c65203a000002"], 0x12) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(r8, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 18m44.442502625s ago: executing program 1 (id=918): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a80)={'gretap0\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x700, 0x8, 0x200, 0x3, {{0x15, 0x4, 0x0, 0x38, 0x54, 0x66, 0x0, 0x5, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@ssrr={0x89, 0x3, 0xf4}, @timestamp_prespec={0x44, 0x3c, 0xb9, 0x3, 0x0, [{@remote, 0x4}, {@broadcast, 0x80000}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x5}, {@loopback, 0x3}, {@private=0xa010102, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}}}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb4}}, 0x4004) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x2, 0xf0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902de00030100c0a70904000000010100000a24010800070201020c24020601020305ff03ffff092408010600095d960624050107860924060303010200030c2402060302040882f109070904010000010200000904010101010200000c240201050306402d83a4830905010908000d0303072501010c0600090402000001020000090402010101020000112402010902e301608cb5fe1fea30a941072401040700001124020207000a0006c4218a5400a6ac140f240202050400002e157c2f9f90520b2402010904330047295c09058209080006061407250101070800"], &(0x7f00000007c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x2, 0x1, 0x5, 0xb899a89128a4ba08, 0xd2}, 0xee, &(0x7f0000000980)={0x5, 0xf, 0xee, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0x2, 0xff00}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xec, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xbd, "7b3d8fbde11548e19e28ee14e41849d0"}, @ptm_cap={0x3}, @generic={0xb9, 0x10, 0x2, "424f4efbc84b79b3e956776209757768782a17dca04ac20aed8295d8ec290f39a0b7d9c7e25927cc14b9b0841f8ae9edd27b5646f6c6812b08f8a5f03f2f1ae73a0bf36ce851ac0d9bae70bc9ef13340ecdc2cfe175995b0844babfd4bd2e56bf44205aa7fb2546486bb0c597227977c5ab27439eead465887aa3c03ab087adf85fadefb965fa063c1f2bd11561b2bad1ca506dacf313ddebefbff38be8f010fd904df078917ff5edfe1f8141f659437a4d77d24b9b4"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x455}}, {0x5d, &(0x7f0000000600)=ANY=[@ANYBLOB="5d03c61b5ba1b087b045e6b2ef35843c1011b2460fb9ab49b14e9ea399424abe2eb3668be642a6495c349f2f0dc8ce702390c9e53de713804370da2eb0307b5eda6a3a689d5f65b9b2c1e4f2c6a049ec23a4e7b6499d4b16ecf7703ea30ef169c143624dab"]}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc1a}}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000380)={0x2, 0x0, [{0x100000, 0xa3, &(0x7f00000008c0)=""/163}, {0x5000, 0xbd, &(0x7f0000000400)=""/189}]}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000002c0)) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x40000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0}) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) ptrace(0x10, 0x1) unshare(0x2a020480) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="fcffff00"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000100)="c63e", 0x0, 0x0, 0x0, 0x55, r6}, 0x38) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x4, 0x100010, r7, 0x0) 18m44.335914458s ago: executing program 1 (id=919): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000b21000/0x4000)=nil, 0x4000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x3fe, 0x2) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0x20}, 0x10) (async) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) socket$kcm(0x29, 0x2, 0x0) 18m44.295480912s ago: executing program 1 (id=920): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x201) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x201) timer_create(0x2, &(0x7f0000000080)={0x0, 0x13, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async) timer_create(0x2, &(0x7f0000000080)={0x0, 0x13, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x3, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x200}) sendmsg$inet(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19e638475b", 0x1d}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf160000"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf160000"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @local}}, 0x0, 0x8001}, &(0x7f00000003c0)=0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f00000001c0)={'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_open_procfs(r5, &(0x7f0000000100)='net/mcfilter\x00') (async) r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/mcfilter\x00') read$FUSE(r6, 0x0, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='bic\x00', 0x4) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 18m29.026314298s ago: executing program 32 (id=920): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x201) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x201) timer_create(0x2, &(0x7f0000000080)={0x0, 0x13, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async) timer_create(0x2, &(0x7f0000000080)={0x0, 0x13, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x3, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x200}) sendmsg$inet(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19e638475b", 0x1d}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf160000"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf160000"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @local}}, 0x0, 0x8001}, &(0x7f00000003c0)=0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f00000001c0)={'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_open_procfs(r5, &(0x7f0000000100)='net/mcfilter\x00') (async) r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/mcfilter\x00') read$FUSE(r6, 0x0, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='bic\x00', 0x4) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 13m25.950637919s ago: executing program 4 (id=1987): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xbf, &(0x7f0000000780)={&(0x7f0000002740)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xc, 0xd}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r2, 0x0, 0x6b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xffffffffffffffff}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r4 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000240)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000ffffffd1eddecedd60010700000c1100fc010000000000000000000000000000ff02000000000000000000000000000100000e22000c907801000000"], 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000001fa00030059e73028080000"], 0x30}}, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64=r4], 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x680402, 0x0) sendfile(r7, r7, 0x0, 0x200000) r8 = socket(0x10, 0x3, 0x0) r9 = getpgrp(0x0) syz_open_procfs(r9, &(0x7f0000000080)='net/tcp\x00') sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 13m22.844174855s ago: executing program 4 (id=1994): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000100), 0x1000000000000045) (async) writev(r2, &(0x7f0000000100), 0x1000000000000045) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00f50100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00f50100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$netlink(0x10, 0x3, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x4, {0x0, 0x0, 0x0, {0x5, 0x0, 0x5, 0xa8, 0x6bf5, 0xfffffffffffffffe, 0x6, 0x10, 0x4, 0x2000, 0x180000, 0x0, r6, 0xce}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r7, 0x0, 0x2) (async) lseek(r7, 0x0, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0xc02) 13m20.675585304s ago: executing program 4 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @remote, 0x3}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x2) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000040)=0xfff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x8810, &(0x7f0000000d80)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001160000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x8090) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) 13m18.862728698s ago: executing program 4 (id=2008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x50, 0xffffffffffffffff, 0xbf000) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000001480)={0x0, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x15eb95fb, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x85}, {0x7, 0x80, 0x7, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x0, '\x00', 0x2}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x20, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0xc}, {0x8, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x2, 0x4, '\x00', 0xe6}, {0x50, 0x7, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0x1}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}}) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000100001c0"]) r8 = socket$inet6(0xa, 0x80002, 0x88) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/110, 0x6e}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000600)=""/126, 0x7e}], 0x6}, 0x100) (async) sendmsg$inet(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8081) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES8=r6], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000af0000000060a0b040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800a000100696e6e657200000014000280080003400000000708000140000024009b0007"], 0x118}}, 0x0) (async) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async) sendmmsg$sock(r8, &(0x7f0000005dc0)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}], 0x30}}], 0x1, 0x0) 13m18.179076407s ago: executing program 4 (id=2011): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000056c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa80) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaa289400000e06ffffffff86dd60a8192300080000fe8000000000000000eeffffff0000aafe80000000005400"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1d, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 13m17.832207372s ago: executing program 4 (id=2012): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x4000, 0x4) (async) unshare(0x10000a80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0xffff1000, 0x2000, &(0x7f0000024000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xd) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00007e3000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000440)={{r2}, "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"}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000028e000/0x400000)=nil) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c015) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (rerun: 64) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) (async) lseek(r1, 0x3, 0x0) 13m15.641763511s ago: executing program 33 (id=2012): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x4000, 0x4) (async) unshare(0x10000a80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0xffff1000, 0x2000, &(0x7f0000024000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xd) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00007e3000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000440)={{r2}, "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"}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000028e000/0x400000)=nil) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c015) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (rerun: 64) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) (async) lseek(r1, 0x3, 0x0) 8m51.776032047s ago: executing program 2 (id=2893): recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000063, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181281, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="66b95502000066b80600000066ba000000000f300fc72c66b8020000000f23c00f21f86635010006000f23f8f26d660f3a229f00015e660fc62f0b66b9950900000f3266b8000000800f23d80f21f86635c00000300f23f866b8d70200000f23d00f21f866352000000e0f23f8660f73d340", 0x72}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x88, 0x7, 0x40, '\x00', 0x7134}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f00000001c0)="46a1a0995a02", 0x0, 0x0, 0x10004, 0xffffffffffffffff, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e23, 0x80000001, @empty}}, 0xffffff26, 0xfff8, 0xbd1, 0x2, 0x25, 0x0, 0x6}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x2400, 0x8208, 0x7, 0x8001, r6}, 0x10) 8m51.497163488s ago: executing program 2 (id=2894): r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) syz_emit_ethernet(0x1aa, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a0101"], 0x0) 8m51.337771373s ago: executing program 2 (id=2896): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x51, &(0x7f0000000040)={0x40, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x3, 0x450440) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000003c0)={0x0, 0x9, 0x2, &(0x7f0000000380)={0x1d, "a0acac257e64e799062c9e0aae58c4cf014534673bcd0f4ae614e1539402bb225c"}}) 8m49.588324128s ago: executing program 2 (id=2905): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x28, &(0x7f00000001c0)={0x3, 0x0, 0xfffffffc}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)={0x18, 0x4, 0xa, 0x401, 0x70bd28, 0x25dfdbfc, {0x3, 0x0, 0x3}, [@generic="9183a7ba"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x0) 8m48.669481877s ago: executing program 2 (id=2909): syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f0682b946f2270ab4edbe20facf6f1d6052d5fe92744ca46439ef57826bb82875d02c450a2ae26f55") (async, rerun: 32) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44042, 0x1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x2004, 0x0) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x8, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) syz_fuse_handle_req(r1, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x0, 0xdcd, 0x4005, 0x1c, 0x3, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0x10000009}) open(&(0x7f0000000480)='./file0\x00', 0x148140, 0x1d8) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (rerun: 64) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r6, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async, rerun: 32) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000338000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 8m48.342449918s ago: executing program 2 (id=2910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000002c0)='_\x1e\x8dt0\xce\x19C\xec\x9c!gro_p\x00', 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000080", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x11012, r4, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x98, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x20, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x11, 0x3, "5ae3420e80c07506bfd5002f75"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 8m33.162625556s ago: executing program 34 (id=2910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000002c0)='_\x1e\x8dt0\xce\x19C\xec\x9c!gro_p\x00', 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000080", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x11012, r4, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x98, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x20, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x11, 0x3, "5ae3420e80c07506bfd5002f75"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 11.414635707s ago: executing program 7 (id=4697): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[], 0x1df) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000004c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "90be8b1c551265406c7f306003d8a0f4bd00"}}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 10.936194317s ago: executing program 3 (id=4700): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x99, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfff, 0x5}, {0x6, 0x24, 0x1a, 0x10, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x4, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x10, 0x1, 0x3, 0x0, 0xf}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x2, [0x401, 0x6, 0x2, 0x52a, 0x9, 0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x4, 0xfa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x6, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x5, 0x4}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0xec, 0x3, 0x40}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x340a}}, {0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "ae7999642d2a7a9cae2bd08d3cd0266a56dcb75907d846b183e1eb676a9d1afcd8cf4554c399658538ce905513162c028d1c1a60681a16dbad8965ff8edc1a41947d3a9904ab8553fb632b0a57a947bcd10d5592a47a7827c457b928c888a9e5c7c6ae8f3b947c66fd6dd28fa93a6d2a6594d92568258e92adcf8cc9b9f37f96fd0d63b43ddccc2efb057d128210de27034fe383f5fdc1ac951844a0a23c17ca98d58a434eee8dea599f3d8b880490c94c4dcf7c0dd2c1cc8398cac9a95014ea090eb2bdc8cc3413dd1efa4d1c9fdfa5c1ee682d4e27ee"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4ff}}, {0x28, &(0x7f00000003c0)=@string={0x28, 0x3, "b99d3082bf96bff2d56ef361c5819c82d29f0b91d1fc6cff445200a313df056cbad623948281"}}, {0xf7, &(0x7f0000000400)=@string={0xf7, 0x3, "c5cce0625b873f6746800eb8283b1efe6b0fb6f321a4ac913469b53993d5868af963f2d1505b8c4e7cbcb5b755f606c91b79f7c373822e1f01ede6a963f465ccea0cd8580dd02720f0e29e5794c7020bda0ca3250293e641f5b0e60d1996524391f1688c158a72e71934bca7133c6565e494f3e347ebe5f18f63049d3d62f53cec49989550bd12874769b2b01c6b127724ead90bb905fe8154dd937d5dfef64b33a332d1b100d9e8a647a0de49e4ccb10877b8619b0e954392d0142887e0648dc696d4d2eba575c8332d95f7a0b5d8653374ba3dc7714ab255ad03116bafe36c78856138f2a94ee065b477248e58bb69edc09b3d35"}}]}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0xee, 0x1, 0x0}) 10.491492374s ago: executing program 7 (id=4702): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) syz_usb_connect(0x5, 0x24, &(0x7f0000001cc0)={{0x12, 0x1, 0x300, 0x1, 0xdc, 0x28, 0x8, 0xe41, 0x4159, 0x6b5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x3, 0x30, 0x10, [{{0x9, 0x4, 0x0, 0xe4, 0x0, 0xc2, 0x75, 0x7f, 0x8}}]}}]}}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) 9.136085685s ago: executing program 5 (id=4704): timer_create(0x3, &(0x7f000049efa0)={0x0, 0x2f}, &(0x7f0000044000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000059c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050129bd7000fddbdf251100000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008ea110000000000"], 0x28}}, 0x20008804) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000bc0)={0x80001000, &(0x7f0000000200), 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8.970335798s ago: executing program 3 (id=4705): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) alarm(0x9) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 8.697171415s ago: executing program 0 (id=4706): r0 = syz_usb_connect(0x1, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9b, 0x0, 0x8c, 0x10, 0x2c7c, 0x128, 0x1697, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x74, 0x0, 0x0, 0xff, 0xff, 0x30, 0x0, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0xd9, "3f38db", "a777"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc3, 0x2, 0x8, 0x9, "1be23e"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x1, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0x1, "bf", '=i\x00'}]}, @uac_control={{0xa, 0x24, 0x1, 0x8, 0x2b}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x180, 0x5, 0x49, 0x0, 0x7, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x5, 0x1, 0x0, 0x1, 0x7f}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x6, 0x2, 0x6, 0x9, 0x50}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x80}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x8, "fe"}]}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000000)={0x40, 0xd, 0x2, "856f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_procfs$namespace(0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffdfffffffe}, 0x0) (async) syz_open_dev$midi(0x0, 0x500, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xf00, 0x0, 0x40}, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0xbf14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x11, 0x80a, 0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010008d042abd70000000000000000000ccd7a10e0f8805e57648bfa43b9243c32aba709e35fb91a58fd1a3b35b68d9cc16d0847e6c9d5b15988797c1f3f6344cabe65fe694990de45bc962e4b592db9fc9b513d68fa4c522df180c", @ANYRES32=0x0, @ANYBLOB="00000000400000001c00128009000100626f6e64000000000c0002800800090002000000"], 0x3c}}, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x7ffb, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x1) 8.588271184s ago: executing program 5 (id=4707): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x206576, 0x6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) open(0x0, 0x1850c2, 0x14c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0xb, 0x2}}}}]}, 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000100)=0x40) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000200060000000e0002"], 0x50}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) 7.438092929s ago: executing program 7 (id=4711): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102138d8b200819201300000102030109027e0001000200000904ae0e051966858f0b240600013a6af75c828205240009000d240f01100000000400fdff0606241a8d000809050308000402080607001000a903080725018134000009050c10000408018d0725010007060007250100096f0e09050b1000020fab08090506000800080102"], 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0xc000, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000080)=0x7) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80400) 6.98519536s ago: executing program 5 (id=4712): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x400000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x2c, r0, 0x801, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}}, 0x24004000) 6.867986102s ago: executing program 5 (id=4713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0c0, 0x0) rt_sigqueueinfo(0x0, 0xe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) sched_setscheduler(r4, 0x6, &(0x7f0000000380)=0xf) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000640)={0x796, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) socket$can_bcm(0x1d, 0x2, 0x2) 5.754951014s ago: executing program 5 (id=4714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000100001f1354d17b4ab0ac7442dc4131e060774fa4f5f1947dd1f9bb7de2801a7b989514ff46615a7d2c7684c6391963af538576ec878ab8df8d3b776c5dc41180f3f8302534c0b943205bda319b12b999d0775842016a721dfa3766956de4bee865fcca9677dd2f339ccb110c0597a08ebdda77d2c74fb595687d2f3f73c5db816493ca78d1ad63e246d2154", @ANYRES32=0x0, @ANYBLOB="0131010000000000380012800e00010069703665727370616e000000240002801400050000000000000000000000ffff0a010101080004000000000004001200"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) socket$netlink(0x10, 0x3, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r10, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r7, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r11}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r7, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r11}) socket$tipc(0x1e, 0x5, 0x0) 5.657709564s ago: executing program 6 (id=4715): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) dup3(r0, 0xffffffffffffffff, 0x80000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0), 0x0, 0x20040800) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) read$FUSE(r4, 0x0, 0x0) capget(&(0x7f0000000140)={0x20080522}, &(0x7f00000001c0)={0x7, 0x1, 0x2e3, 0x3, 0x5, 0x86d7}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7, 0xe737}}, 0x10) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f59190200867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="440200001000030528bd7000fedbdf2500000000", @ANYBLOB], 0x244}}, 0x8000) unshare(0x28040680) timerfd_create(0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 5.440304558s ago: executing program 0 (id=4716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, r1, 0x1778d2006c5c67c5, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 5.159090708s ago: executing program 0 (id=4717): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c0000001100000827bd7000fbdbdf25000000002a0aa3177d20156064b032cd6abd9ccce8bd5758a82dffc44ee8bc1a311ace1b36f64b2e16b9574500d66372f8c02402c0a9a1acbb16d77636ce8d5120b1bca98cf3146201d6998768cdaad4f4093a", @ANYRES32=0x0, @ANYBLOB="00000200188600000400140014002b8008000800", @ANYRES32=r5, @ANYBLOB="080003000f000000050011000000000024002400bd0000000019004000860bcc01000000000000000000000000ff04000000000008002c00ffffffff050022004f00000008002c000100ffff"], 0x7c}, 0x1, 0x0, 0x0, 0x58840}, 0x82) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd64fde9e200180000fc01000080000000000000000000000000000000000000000000ffffac1414aa3b02010300000000fc010000000000000000000000000001"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x5, 0x1, 0x3031334d, 0x0, 0xa, [{0x3, 0x6}, {0x8001, 0x2}, {0x3, 0x411}, {0x10002, 0x8}, {0x6, 0x8}, {0x4, 0x800d}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x8, 0x0, 0x4}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) accept$alg(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.578815864s ago: executing program 3 (id=4718): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0c0, 0x0) rt_sigqueueinfo(0x0, 0xe, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) sched_setscheduler(r4, 0x6, &(0x7f0000000380)=0xf) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000640)={0x796, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) socket$can_bcm(0x1d, 0x2, 0x2) 2.356151476s ago: executing program 7 (id=4719): r0 = syz_open_dev$vbi(&(0x7f00000005c0), 0x1, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c0a201"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/254, 0xfe}, {&(0x7f0000003ac0)=""/4123, 0x101b}, {&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/192, 0xc0}], 0x4}}], 0x1, 0x10040, 0x0) write(r1, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000600)={0xc, @capture={0x0, 0x1, {0x9, 0x1}, 0x1, 0x6}}) 2.221239575s ago: executing program 6 (id=4720): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2.139523684s ago: executing program 7 (id=4721): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303031303034303030302c757365725f6964bd", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x0, 0x1}, &(0x7f0000000780)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x150, 0x0, 0xa1, [{{0x6, 0x2, 0x3, 0x1, 0xe, 0x5, {0x80000000000002, 0x9, 0xcb, 0x1, 0x80000001, 0x8, 0xe629, 0x5, 0x7fffffff, 0x8000, 0x7c, r2, r3, 0xc3, 0x1}}, {0x0, 0x7, 0x1, 0x6e4bd64b, '\x00'}}, {{0x5, 0x2, 0x3, 0x10000007, 0x10, 0xa, {0x8000000, 0x6, 0x5, 0x80000000, 0x2000005, 0x80, 0x6e, 0x30, 0x3, 0x8000, 0x10000, r2, 0xee01, 0xd0, 0x400}}, {0x6, 0x80000000, 0x1, 0x8, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0x18) 2.026863691s ago: executing program 0 (id=4722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x7, 0x10000, 0x0, 0x4002004e4, 0x62, 0x0, 0x0, 0x0, 0x0, 0x3], 0x10000, 0x2011c0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000007508000000000000030000000000000061f57c86d978"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 2.010427606s ago: executing program 3 (id=4723): r0 = socket(0x25, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x73fd}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x410}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x499d}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40080}, 0x50) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000002c0)=0xa81, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@remote, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x8000, 0x2, 0x1, {{0x36, 0x4, 0x1, 0x8, 0xd8, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0xed, [@rand_addr=0x64010101, @empty, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x81, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x3}]}, @lsrr={0x83, 0x1f, 0x24, [@broadcast, @rand_addr=0x64010100, @loopback, @local, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x7, 0x6, "f3963ce0"}, @timestamp_addr={0x44, 0x34, 0x10, 0x1, 0x1, [{@broadcast, 0xd}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xca}, {@private=0xa010101, 0x10000}, {@loopback, 0x3}, {@empty, 0x4}]}, @generic={0x41, 0xb, "df87a0ec228eb1c57a"}, @timestamp={0x44, 0x1c, 0xf4, 0x0, 0x0, [0x52203616, 0x80000000, 0x3, 0x7, 0x400, 0x10000]}, @ssrr={0x89, 0x23, 0x13, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x8b, 0x3, 0x6, @loopback, @loopback, 0x8000, 0x8, 0xffffffff, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0xffffffff, 0x3, {{0xb, 0x4, 0x1, 0x14, 0x2c, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, {[@end, @cipso={0x86, 0x15, 0x1, [{0x5, 0x9, "986b76409c6798"}, {0x5, 0x6, "ea2d6484"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x1, 0x0, 0x20, @local, @mcast1, 0x7, 0x10, 0x86, 0xfffffff4}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000c80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x148, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) sendto$inet6(r0, &(0x7f0000000cc0)="3a93ed4727e6a6ce0d772417df30d1db777cfd45758bec4c5ccf843d454092aeb61b859aa47011de059c66cb06fc88d3b922de8fab8ea7b489ac750752f10604e91847c1b68cac6e", 0x48, 0x801, &(0x7f0000000d40)={0xa, 0x4e20, 0xaf96, @mcast2, 0x1ff}, 0x1c) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000e40)={'erspan0\x00', r8, 0x700, 0x40, 0x9, 0x5, {{0xf, 0x4, 0x3, 0x9, 0x3c, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0x9, "8b4ace7b76ccef"}, @timestamp_addr={0x44, 0x14, 0xa5, 0x1, 0x6, [{@multicast2}, {@rand_addr=0x64010102, 0x3}]}, @end, @end, @end, @rr={0x7, 0x7, 0x55, [@remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000fc0)={'ip6tnl0\x00', &(0x7f0000000f40)={'ip6gre0\x00', r4, 0x29, 0x7, 0x0, 0x81b, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x10, 0x1, 0x20000, 0x5}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001000)={0x74c, r11, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf85}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r14}, {0x68, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x1, 0x8, 0x7fff}, {0xf001, 0x40, 0xd, 0x401}, {0xff5e, 0x6, 0x5, 0x8}, {0x3, 0x2, 0xff, 0x6}, {0x3, 0x7, 0x8, 0x8}, {0x5, 0x0, 0x3, 0x18bf}]}}}]}}, {{0x8, 0x1, r7}, {0x24c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x10, 0x1, 0x2}, {0x2, 0x2, 0x0, 0x6}, {0x0, 0x10, 0x6, 0x40}, {0x5, 0x9, 0x2, 0x40}, {0x10, 0x6, 0x7f, 0x200}, {0x2, 0xff, 0x64, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2c4e, 0x7, 0x4, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x36}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r7}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xbd9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x4}, {0x100, 0x2, 0x0, 0x2}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x74c}, 0x1, 0x0, 0x0, 0x4001}, 0x8001) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xa0, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x8014) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x74, r16, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x81) r17 = socket$inet(0x2, 0x1, 0x7) r18 = accept4(r17, &(0x7f0000001b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000001b80)=0x80, 0x80800) accept4(r0, 0x0, &(0x7f0000001bc0), 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r18, 0x84, 0x66, &(0x7f0000001c00)={0x0, 0x3}, &(0x7f0000001c40)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001c80)={r19, @in={{0x2, 0x4e20, @broadcast}}, 0x9, 0x5, 0xfffffff8, 0x0, 0x1}, &(0x7f0000001d40)=0x98) 1.780496798s ago: executing program 7 (id=4724): syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf500090584"], 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ptrace(0x10, r0) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async, rerun: 32) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1.538993557s ago: executing program 3 (id=4725): write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='westwood\x00', 0x9) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x2, 0x1, 0x0, 0x10}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000000c0)=0x24) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) io_uring_enter(r1, 0x11d7, 0xdc37, 0x5, &(0x7f0000000140)={[0x42ee]}, 0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000002c0)={0x0, 0xb758, 0x81, 0x6, 0x2, [0x0, 0x0, 0x0], [0x40, 0x80000001, 0xffff, 0x4], [0x3, 0x7f, 0x3, 0x7], [0x7, 0x1, 0x5, 0x3]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1, 0x800, 0x7ff, 0x0, [0x0], [0xfffffffc, 0x62ed, 0x1, 0x200], [0x3, 0x0, 0x1c3, 0x10001], [0x9, 0xbb1, 0x200, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000003c0)={r2, 0x8, 0xb, 0x6, 0x3, [r3, r4, r5, r6], [0x8, 0xffffff7d, 0xfffffff9, 0x3], [0x1ff, 0x5, 0x40, 0x1], [0x0, 0x8, 0x9, 0x3]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x4b4, 0x5, 0x5, 0x6}, {0x8000, 0x6, 0x4, 0xa0}]}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000500)={'vlan1\x00'}) umount2(&(0x7f0000000540)='./file0\x00', 0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000580)) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000005c0)={0x1, 0x100, 0x1}) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0xf, &(0x7f0000000600)=0x9, 0x4) renameat2(r1, &(0x7f0000000640)='./file1\x00', r1, &(0x7f0000000680)='./file0\x00', 0x2) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x48040) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x10c, r9, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x18}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f0000000a00)) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x7, 0xf}, &(0x7f0000000e40)=0x10) (async) r10 = socket$inet6(0xa, 0x2, 0x40) fcntl$setsig(r10, 0xa, 0x31) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r1) (async) ioctl$VT_DISALLOCATE(r1, 0x5608) (async) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000ec0)={0x2d, "d451df486876d71db8af8a5f485965ab396d6b015f77758a50f8a02e79c979cfeffd0510af4d05e39fce36177f"}) 1.464710503s ago: executing program 0 (id=4726): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x3404}, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000340)=[@wr_crn={0x46, 0x20, {0x8, 0x6}}, @wr_crn={0x46, 0x20, {0x2, 0x6}}, @code={0xa, 0x5d, {"65f20f35c422a1aeb005000000c4e1115d5800f3420f09b805000000b9001800000f01d9460f32660fc7350000008066bad104b000ee42dbe4c7442400f0000000c744240209000000ff1c24"}}, @rdmsr={0x32, 0x18, {0xa18}}, @code={0xa, 0x57, {"66baa10066ed3e470f78f966baf80cb80a00e782ef66bafc0cb045eef20f2a04ee6465450f01c50f20e035400000000f22e03e440f01d0400f0f4500bfc4434d0f4d2d9a0f08"}}], 0x10c}) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 1.400235083s ago: executing program 6 (id=4727): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x64}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) close(r1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) 1.331062316s ago: executing program 5 (id=4728): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYRESOCT=r0], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="cbeb2de5d0d3138387", 0x9}], 0x1}}], 0x2, 0x28048005) writev(r0, &(0x7f00000037c0)=[{&(0x7f00000036c0)="7d29dbe640bf91367e7f68f8", 0xc}], 0x1) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000040)={0x1, 0xffffffff, 0x4}) 1.204078608s ago: executing program 6 (id=4729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="120000f90f00000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff2, 0xb}, {0x2, 0xf}, {0x4, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r9, 0xc0505510, &(0x7f0000000140)={0x3, 0x3f, 0x10, 0x9, &(0x7f0000001600)=[{}]}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="030109021b000100fa7f04095d9f15cf5b8e1be7d61d65d11d3904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.036290091s ago: executing program 3 (id=4730): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r4, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009703000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 861.93789ms ago: executing program 0 (id=4731): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "7d91c247de9fd2a0d55eed3aa89c157c26d7af4bac7c083d56b6a1bcf21f09b4", 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001200)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xf}, {0xc, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x7}, @TCA_CHOKE_STAB={0x104, 0x2, "028ce7a588a7ee309f2152bb4c1fc4c03763f11c085aeaba7d3e7845057c0743372d3031b1343f29f887ac33dd9653188f9bb9aa4788fcf09bc89c745b6f1da068236f47eb6b7ac404204a2af0b9d4b5fcd97242c154a5a329ff9a796725cb39535f89adf875dc3285e40f9aa98c93e6b4c6d0930f5199e9281890340355a6f5a9894b46c5b49d5ee58c9fe7930fb9f3b74ce1bea723efd0808e8019bbf1a7f47c27536aff02fe6fab32c06feb5864cf5193146e3c3aa509383276172be31042bce22452e4441abfe5169ced9cb2274af4f32f7aa02c81c66eedb0c15b396d6a7d1f99a0a9edd9157361dd00"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x6, 0x2, 0xd, 0xd, 0x2, 0x3}}]}}]}, 0x154}}, 0x40010) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) gettid() futex(0x0, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) unshare(0x28020480) gettid() r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af04, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x200000000000000}) ioctl$VHOST_VDPA_SET_GROUP_ASID(r5, 0x4008af7c, &(0x7f0000000180)={0x2}) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) 702.961324ms ago: executing program 6 (id=4732): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x10040], [0x6]], '\x00', [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x4}], '\x00', 0x1000}) accept4(r0, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="13000000020000e1ff0117000500000083010000", @ANYRES32=r0, @ANYBLOB="d60400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="02000000000000000200"/28], 0x50) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x191) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100", 0x7) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) syz_open_dev$loop(&(0x7f0000000040), 0x66b3, 0xd9cc455911d9b534) 0s ago: executing program 6 (id=4733): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xa0c0, 0x0) rt_sigqueueinfo(0x0, 0xe, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) sched_setscheduler(r4, 0x6, &(0x7f0000000380)=0xf) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000640)={0x796, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) socket$can_bcm(0x1d, 0x2, 0x2) kernel console output (not intermixed with test programs): mber 95 using dummy_hcd [ 1441.149404][T16339] usb 6-1: Using ep0 maxpacket: 8 [ 1441.195369][T16339] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1441.248522][T16339] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1441.414302][T16339] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1441.532440][ T5952] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1441.743884][ T5952] usb 1-1: too many configurations: 44, using maximum allowed: 8 [ 1441.779059][ T5952] usb 1-1: config index 0 descriptor too short (expected 65450, got 72) [ 1441.866244][ T5952] usb 1-1: config index 1 descriptor too short (expected 65450, got 72) [ 1441.883515][ T5952] usb 1-1: config index 2 descriptor too short (expected 65450, got 72) [ 1441.897101][ T5952] usb 1-1: config index 3 descriptor too short (expected 65450, got 72) [ 1441.993303][ T5952] usb 1-1: config index 4 descriptor too short (expected 65450, got 72) [ 1441.994264][T16339] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1442.014776][ T5952] usb 1-1: config index 5 descriptor too short (expected 65450, got 72) [ 1442.076874][T16339] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1442.134629][ T5952] usb 1-1: config index 6 descriptor too short (expected 65450, got 72) [ 1442.136380][T16339] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1442.169003][ T5952] usb 1-1: config index 7 descriptor too short (expected 65450, got 72) [ 1442.198232][ T5952] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1442.218480][T16339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.243373][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.263886][ T5952] usb 1-1: Product: syz [ 1442.359735][ T5952] usb 1-1: Manufacturer: syz [ 1442.385257][ T5952] usb 1-1: SerialNumber: syz [ 1442.667212][T16339] usb 6-1: usb_control_msg returned -32 [ 1442.683463][T16339] usbtmc 6-1:16.0: can't read capabilities [ 1442.806074][ T5952] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1443.012763][ T5983] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1443.414962][T24153] fuse: Unknown parameter 'mGN‡8o«ad' [ 1443.483560][T24178] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1443.506529][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4248'. [ 1443.519087][T24178] netlink: 'syz.5.4248': attribute type 5 has an invalid length. [ 1443.528784][T24178] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4248'. [ 1443.744659][T24178] geneve2: entered promiscuous mode [ 1443.750323][T24178] geneve2: entered allmulticast mode [ 1443.760964][ T7277] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1443.775648][ T7277] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1443.794784][ T7277] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1443.808350][ T7271] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1444.454287][ T5983] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1444.620456][ T5983] ath9k_htc: Failed to initialize the device [ 1444.665388][ T5983] usb 1-1: ath9k_htc: USB layer deinitialized [ 1444.868039][T16339] usb 1-1: USB disconnect, device number 66 [ 1444.874592][ T5983] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 1444.874748][ T5983] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 1444.874777][ T5983] hid-generic 0003:0004:0000.004D: unknown main item tag 0x0 [ 1444.877237][ T5983] hid-generic 0003:0004:0000.004D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1444.986091][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4259'. [ 1445.164220][T24190] fido_id[24190]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1445.330350][ T5983] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1445.459480][ T5913] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1445.495112][ T5983] usb 7-1: config 0 has no interfaces? [ 1445.560259][ T5983] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1445.570803][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.578962][ T5983] usb 7-1: Product: syz [ 1445.584260][ T5983] usb 7-1: Manufacturer: syz [ 1445.588884][ T5983] usb 7-1: SerialNumber: syz [ 1445.596724][ T5983] usb 7-1: config 0 descriptor?? [ 1445.632169][ T5931] usb 6-1: USB disconnect, device number 95 [ 1445.636654][ T5913] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1445.664131][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.689681][ T5913] usb 1-1: Product: syz [ 1445.696407][ T5913] usb 1-1: Manufacturer: syz [ 1445.717215][ T5913] usb 1-1: SerialNumber: syz [ 1445.731514][ T5913] usb 1-1: config 0 descriptor?? [ 1445.941220][ T5913] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1446.002259][ T5913] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1446.037494][ T5913] usb 1-1: USB disconnect, device number 67 [ 1447.529488][ T5913] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1447.562215][T16339] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1447.616088][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1447.616108][ T30] audit: type=1326 audit(1754952384.369:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1447.627640][T24228] batadv_slave_1: entered promiscuous mode [ 1447.647627][ T30] audit: type=1326 audit(1754952384.369:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1447.675160][ T30] audit: type=1326 audit(1754952384.369:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1447.699819][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 1447.706834][T16339] usb 6-1: device descriptor read/64, error -71 [ 1447.715857][ T5913] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1447.734488][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.740539][T24226] batadv_slave_1: left promiscuous mode [ 1447.743570][ T5913] usb 1-1: Product: syz [ 1447.752910][ T5913] usb 1-1: Manufacturer: syz [ 1447.757877][ T5913] usb 1-1: SerialNumber: syz [ 1447.758011][ T30] audit: type=1326 audit(1754952384.369:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1447.765526][ T5913] usb 1-1: config 0 descriptor?? [ 1447.791108][ T30] audit: type=1326 audit(1754952384.369:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1447.817162][ T5913] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1447.823926][ T30] audit: type=1326 audit(1754952384.369:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1447.846959][ T30] audit: type=1326 audit(1754952384.369:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1447.887585][ T30] audit: type=1326 audit(1754952384.369:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1447.912527][ T30] audit: type=1326 audit(1754952384.369:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1447.955213][T16339] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1447.977422][ T30] audit: type=1326 audit(1754952384.369:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.3.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f5ea138ebe9 code=0x7ffc0000 [ 1448.002170][ T5952] usb 7-1: USB disconnect, device number 21 [ 1448.129483][T16339] usb 6-1: device descriptor read/64, error -71 [ 1448.240926][T16339] usb usb6-port1: attempt power cycle [ 1448.259494][ T5913] gspca_ov534_9: reg_w failed -71 [ 1448.589742][T16339] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1448.610263][T16339] usb 6-1: device descriptor read/8, error -71 [ 1448.720419][ T5913] gspca_ov534_9: Unknown sensor 0000 [ 1448.720527][ T5913] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1448.777309][ T5913] usb 1-1: USB disconnect, device number 68 [ 1448.777706][T24250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1448.860579][T16339] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1448.940051][T16339] usb 6-1: device descriptor read/8, error -71 [ 1449.049660][T16339] usb usb6-port1: unable to enumerate USB device [ 1449.379791][ T5913] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1449.555696][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1449.567621][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1449.579264][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1449.590715][ T5983] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1449.601106][ T5913] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1449.611382][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.635729][ T5913] usb 1-1: Product: syz [ 1449.646906][ T5913] usb 1-1: Manufacturer: syz [ 1449.654807][ T5913] usb 1-1: SerialNumber: syz [ 1449.667368][ T5913] usb 1-1: config 0 descriptor?? [ 1449.689081][T24261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1449.759734][ T5983] usb 4-1: device descriptor read/64, error -71 [ 1449.905912][ T5913] powermate: unknown product id 0240 [ 1449.919749][ T5913] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1449.934143][ T5913] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input115 [ 1450.019805][ T5983] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1450.136074][ C1] powermate: config urb returned -71 [ 1450.137234][T16339] usb 1-1: USB disconnect, device number 69 [ 1450.141449][ C1] powermate: usb_submit_urb(config) failed [ 1450.141560][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1450.239396][ T5983] usb 4-1: device descriptor read/64, error -71 [ 1450.359878][ T5983] usb usb4-port1: attempt power cycle [ 1450.719772][ T5983] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1450.754032][ T5983] usb 4-1: device descriptor read/8, error -71 [ 1450.779839][ T5913] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1450.943546][ T5913] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1450.962924][ T5913] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1450.972687][ T5913] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.984299][ T5913] usb 7-1: config 220 has no interface number 2 [ 1450.991458][ T5913] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1451.005887][ T5983] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1451.017661][ T5913] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1451.026904][ T5913] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1451.038817][ T5913] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1451.039645][ T5983] usb 4-1: device descriptor read/8, error -71 [ 1451.067651][ T5913] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1451.077313][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.094387][ T5913] usb 7-1: Product: syz [ 1451.106833][ T5913] usb 7-1: Manufacturer: syz [ 1451.130620][ T5913] usb 7-1: SerialNumber: syz [ 1451.186235][ T5983] usb usb4-port1: unable to enumerate USB device [ 1451.499460][ T5983] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1451.585083][ T5913] usb 7-1: selecting invalid altsetting 0 [ 1451.636809][ T5913] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1451.666242][ T5913] usb 7-1: No valid video chain found. [ 1451.677557][ T5983] usb 6-1: config 252 has an invalid interface number: 107 but max is 0 [ 1451.745738][ T5983] usb 6-1: config 252 has no interface number 0 [ 1451.783983][ T5913] usb 7-1: selecting invalid altsetting 0 [ 1451.799733][ T5983] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1451.826813][ T5913] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1451.895523][ T5983] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1451.939924][ T5913] usb 7-1: USB disconnect, device number 22 [ 1452.006042][ T5983] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 1452.042484][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.053167][ T5983] usb 6-1: Product: syz [ 1452.057567][ T5983] usb 6-1: Manufacturer: syz [ 1452.063676][ T5983] usb 6-1: SerialNumber: syz [ 1452.217083][T24316] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4295'. [ 1452.239747][ T5952] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1452.409599][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 1452.424979][ T5952] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1452.436923][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.458000][ T5952] usb 4-1: config 0 descriptor?? [ 1452.619390][ T5983] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1452.799640][ T5983] usb 7-1: Using ep0 maxpacket: 16 [ 1452.815304][ T5983] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1452.844984][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.862019][ T5913] usb 6-1: USB disconnect, device number 100 [ 1452.877528][ T5983] usb 7-1: Product: syz [ 1452.890171][ T5983] usb 7-1: Manufacturer: syz [ 1452.899720][ T5983] usb 7-1: SerialNumber: syz [ 1452.907069][ T5983] usb 7-1: config 0 descriptor?? [ 1452.950679][ T5983] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1452.973918][ T5983] usb 7-1: Detected FT232H [ 1453.317783][ T5983] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1453.366106][ T5983] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 1453.392965][ T5983] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1453.485751][ T5983] usb 7-1: USB disconnect, device number 23 [ 1453.537261][ T5983] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1453.625600][ T5983] ftdi_sio 7-1:0.0: device disconnected [ 1454.296192][ T5952] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1454.377346][ T5952] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1454.412530][ T5952] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1454.541175][ T5952] usb 4-1: USB disconnect, device number 44 [ 1455.051943][ T5983] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1455.076421][ T5983] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1455.499471][T16339] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1455.738707][T16339] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1455.749101][T16339] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1455.783647][T16339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1455.866006][T16339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1455.903459][T16339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58502, setting to 1024 [ 1455.920818][T16339] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1455.930680][T16339] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1456.007274][T16339] usb 4-1: Product: syz [ 1456.011892][T16339] usb 4-1: Manufacturer: syz [ 1456.032397][T24354] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1456.071626][T16339] cdc_wdm 4-1:1.0: skipping garbage [ 1456.093632][T16339] cdc_wdm 4-1:1.0: skipping garbage [ 1456.104875][T16339] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1456.179392][T16339] cdc_wdm 4-1:1.0: Unknown control protocol [ 1456.329490][ T5952] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1456.368158][T24372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.377321][T24372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.397228][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.404026][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.410472][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.417107][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.423628][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.430343][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.436747][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.443575][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.450228][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.457047][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.463436][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.470102][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.476415][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.483059][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.489339][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.495945][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.502225][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.508815][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.515242][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1456.522020][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1456.568194][ T5952] usb 7-1: config 0 has no interfaces? [ 1456.768918][ T5952] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1456.789402][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.861133][ T5952] usb 7-1: Product: syz [ 1456.915804][ T5952] usb 7-1: Manufacturer: syz [ 1456.938018][ T5952] usb 7-1: SerialNumber: syz [ 1457.020577][ T5952] usb 7-1: config 0 descriptor?? [ 1457.387525][T24368] pimreg: entered allmulticast mode [ 1457.396581][T24384] pimreg: left allmulticast mode [ 1457.867646][T24388] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1458.280615][ T5931] usb 4-1: USB disconnect, device number 45 [ 1458.408614][T24390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4311'. [ 1458.720277][T24393] bridge2: entered promiscuous mode [ 1458.741631][ T5931] usb 7-1: USB disconnect, device number 24 [ 1459.089413][ T5931] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1459.291888][ T5954] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1459.319504][ T5931] usb 7-1: Using ep0 maxpacket: 8 [ 1459.326296][ T5931] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.339420][ T5931] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.359540][ T5931] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1459.366422][ T5931] usb 7-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1459.379184][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.422778][ T5931] usb 7-1: config 0 descriptor?? [ 1459.459379][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 1459.504690][ T5954] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1459.515444][ T5954] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1459.525464][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.534940][ T5954] usb 4-1: Product: syz [ 1459.542250][ T5954] usb 4-1: Manufacturer: syz [ 1459.647337][ T5954] usb 4-1: SerialNumber: syz [ 1459.948702][ T5931] smartjoyplus 0003:0B43:0003.004F: ignoring exceeding usage max [ 1459.977643][ T5931] smartjoyplus 0003:0B43:0003.004F: item fetching failed at offset 10/11 [ 1459.995031][ T5954] usb 4-1: config 0 descriptor?? [ 1460.101415][ T5931] smartjoyplus 0003:0B43:0003.004F: parse failed [ 1460.113521][ T5931] smartjoyplus 0003:0B43:0003.004F: probe with driver smartjoyplus failed with error -22 [ 1460.128836][ T5931] usb 7-1: USB disconnect, device number 25 [ 1460.249468][T16339] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1460.456884][T16339] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1460.479613][T16339] usb 1-1: config 0 has no interface number 1 [ 1460.485888][T16339] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1460.496299][T16339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.537542][T16339] usb 1-1: config 0 descriptor?? [ 1460.577942][T16339] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.606715][T16339] usb 1-1: MIDIStreaming interface descriptor not found [ 1461.101005][T16339] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1461.325210][ T5954] gs_usb 4-1:0.0: Couldn't get device config: (err=-110) [ 1461.332627][ T5954] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 1461.359931][ T5952] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1461.720617][T16339] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 1461.954233][ T5952] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1461.979411][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.002489][ T5952] usb 7-1: config 0 descriptor?? [ 1462.016141][ T5952] cp210x 7-1:0.0: cp210x converter detected [ 1462.986780][ T5952] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1463.092452][ T5913] usb 1-1: USB disconnect, device number 70 [ 1463.551286][ T5952] usb 7-1: USB disconnect, device number 26 [ 1463.559785][T24320] usb 4-1: USB disconnect, device number 46 [ 1463.609006][ T5952] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1463.662236][ T5952] cp210x 7-1:0.0: device disconnected [ 1465.849790][T16339] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1466.011461][T16339] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 1466.021026][T16339] usb 1-1: config 0 has no interface number 0 [ 1466.027558][T16339] usb 1-1: config 0 interface 93 has no altsetting 0 [ 1466.038437][T16339] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1466.059857][T16339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.074840][T16339] usb 1-1: config 0 descriptor?? [ 1466.088095][T16339] cp210x 1-1:0.93: cp210x converter detected [ 1466.289762][ T44] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1466.454971][ T44] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1466.479498][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1466.502587][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1466.509394][T16339] cp210x 1-1:0.93: failed to get vendor val 0x000e size 3: -32 [ 1466.519955][ T44] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1466.519985][ T44] usb 4-1: Product: syz [ 1466.520002][ T44] usb 4-1: Manufacturer: syz [ 1466.520018][ T44] usb 4-1: SerialNumber: syz [ 1466.531128][ T44] usb 4-1: config 0 descriptor?? [ 1466.580952][ T44] usb 4-1: selecting invalid altsetting 0 [ 1466.787976][T16339] cp210x 1-1:0.93: GPIO initialisation failed: -19 [ 1466.804700][T24489] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1466.818952][T16339] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1466.847776][T24489] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1466.871913][T24489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1467.081012][ T44] usb 1-1: USB disconnect, device number 71 [ 1467.089404][ T5913] usb 4-1: USB disconnect, device number 47 [ 1467.111943][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1467.159642][ T44] cp210x 1-1:0.93: device disconnected [ 1467.536186][ T5952] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1467.679517][ T5952] usb 7-1: device descriptor read/64, error -71 [ 1467.969446][ T5952] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1468.141348][ T5952] usb 7-1: device descriptor read/64, error -71 [ 1468.274774][ T5952] usb usb7-port1: attempt power cycle [ 1468.629574][ T5952] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1468.671920][ T5952] usb 7-1: device descriptor read/8, error -71 [ 1468.779746][ T5913] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1468.919911][ T5913] usb 4-1: device descriptor read/64, error -71 [ 1468.926288][ T5952] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1468.963607][ T5952] usb 7-1: device descriptor read/8, error -71 [ 1469.090574][ T5952] usb usb7-port1: unable to enumerate USB device [ 1469.179548][ T5913] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1469.319490][ T5913] usb 4-1: device descriptor read/64, error -71 [ 1469.429920][ T5913] usb usb4-port1: attempt power cycle [ 1469.532406][T24523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1469.800126][ T5913] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1469.820082][ T5913] usb 4-1: device descriptor read/8, error -71 [ 1469.946055][T16339] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1470.059333][ T5913] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1470.080128][ T5913] usb 4-1: device descriptor read/8, error -71 [ 1470.099443][T16339] usb 1-1: Using ep0 maxpacket: 32 [ 1470.115837][T16339] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1470.126045][T16339] usb 1-1: config 0 has no interface number 0 [ 1470.133104][T16339] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1470.148317][T16339] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1470.184455][T16339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.199605][T16339] usb 1-1: Product: syz [ 1470.203904][T16339] usb 1-1: Manufacturer: syz [ 1470.208731][T16339] usb 1-1: SerialNumber: syz [ 1470.214885][ T5913] usb usb4-port1: unable to enumerate USB device [ 1470.227811][T16339] usb 1-1: config 0 descriptor?? [ 1470.244270][T16339] smsc75xx v1.0.0 [ 1470.247980][T16339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1470.283693][T16339] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1470.449875][T24536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.473164][T24536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.485223][ T5913] usb 1-1: USB disconnect, device number 72 [ 1471.399627][ T5954] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1471.591293][ T5954] usb 1-1: config 0 has no interfaces? [ 1471.596960][ T5954] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1471.606711][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.730629][ T5954] usb 1-1: config 0 descriptor?? [ 1471.964641][T24543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.010084][ T5913] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1472.012214][T24543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.086651][ T5954] usb 1-1: USB disconnect, device number 73 [ 1472.169367][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 1472.176329][ T5913] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1472.206062][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.247327][ T5913] usb 4-1: config 0 descriptor?? [ 1472.278953][ T5913] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1472.668291][T24549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.698095][T24549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.792604][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1472.792624][ T30] audit: type=1326 audit(1754952409.549:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1472.928067][ T30] audit: type=1326 audit(1754952409.579:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1472.950883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.961087][ T30] audit: type=1326 audit(1754952409.579:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1472.984190][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.001753][ T30] audit: type=1326 audit(1754952409.589:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1473.033603][ T30] audit: type=1326 audit(1754952409.589:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1473.067212][ T30] audit: type=1326 audit(1754952409.589:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1473.102634][ T30] audit: type=1326 audit(1754952409.699:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1473.140453][ T5952] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1473.166050][ T30] audit: type=1326 audit(1754952409.699:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1473.319946][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 1473.333421][ T5952] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1473.352826][ T5952] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1473.362942][ T5952] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1473.371797][ T5952] usb 1-1: Product: syz [ 1473.376325][ T5952] usb 1-1: Manufacturer: syz [ 1473.382367][ T5952] usb 1-1: SerialNumber: syz [ 1473.417582][T24573] vivid-000: disconnect [ 1473.603684][T24561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.620084][T24561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.633757][T24561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.644416][T24561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.655490][T24561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.667012][T24561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.677695][T24561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.690866][T24561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.701136][T24561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.711845][T24561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.720199][ T5952] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 1473.729713][ T5952] visor 1-1:1.0: probe with driver visor failed with error -110 [ 1473.737618][ T5913] gspca_vc032x: reg_w err -71 [ 1473.746504][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.761499][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.768072][ T5952] usb 1-1: USB disconnect, device number 74 [ 1473.774441][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.782349][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.788781][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.799703][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.805311][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.812193][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.818503][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.825009][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.830753][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.836431][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.842643][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.848364][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.854224][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.859711][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.865882][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.871359][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 1473.877243][ T5913] gspca_vc032x: Unknown sensor... [ 1473.884200][ T5913] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1473.896793][ T5913] usb 4-1: USB disconnect, device number 52 [ 1474.185045][T24571] vivid-000: reconnect [ 1474.232976][T24575] netlink: 'syz.5.4360': attribute type 7 has an invalid length. [ 1474.254718][T24575] : entered promiscuous mode [ 1474.585258][T24591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.606511][T24591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.615339][ T5913] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1474.659360][ T5954] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1474.771569][ T5913] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1474.782303][ T5913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1474.791781][ T5913] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1474.809442][ T5913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1474.809624][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 1474.818525][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.818554][ T5913] usb 6-1: Product: syz [ 1474.818570][ T5913] usb 6-1: Manufacturer: syz [ 1474.853489][ T5913] usb 6-1: SerialNumber: syz [ 1474.885373][ T5913] cdc_mbim 6-1:1.0: skipping garbage [ 1474.892599][ T5913] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 1474.905902][ T5913] cdc_mbim 6-1:1.0: bind() failure [ 1474.969692][T16339] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1474.980667][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.995864][ T5954] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1475.006677][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.015128][ T5954] usb 1-1: Product: syz [ 1475.019645][ T5954] usb 1-1: Manufacturer: syz [ 1475.024274][ T5954] usb 1-1: SerialNumber: syz [ 1475.032717][ T5954] usb 1-1: config 0 descriptor?? [ 1475.046456][ T5954] hub 1-1:0.0: bad descriptor, ignoring hub [ 1475.052768][ T5954] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1475.063129][ T5954] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 1475.079646][T24584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.095151][T24584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.103477][T16339] usb 4-1: device descriptor read/64, error -71 [ 1475.123714][T24584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.134558][T24584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.146653][T24584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.158660][T24584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.174718][T24584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.186342][T24584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.198132][T24584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.212295][T24584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.233986][ T5954] usb 6-1: USB disconnect, device number 101 [ 1475.349615][T16339] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1475.369619][ T5931] usb 1-1: USB disconnect, device number 75 [ 1475.416794][T24595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1475.490303][T16339] usb 4-1: device descriptor read/64, error -71 [ 1475.610855][T16339] usb usb4-port1: attempt power cycle [ 1476.029501][T16339] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1476.062456][T16339] usb 4-1: device descriptor read/8, error -71 [ 1476.233855][ T5954] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1476.329734][T16339] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1476.380874][T16339] usb 4-1: device descriptor read/8, error -71 [ 1476.430151][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 1476.606569][T16339] usb usb4-port1: unable to enumerate USB device [ 1476.657246][T24612] vivid-000: disconnect [ 1476.715381][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1476.767460][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1476.805012][ T5954] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1476.816476][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.835027][ T5954] usb 1-1: Product: syz [ 1476.845885][ T5954] usb 1-1: Manufacturer: syz [ 1476.851415][ T5954] usb 1-1: SerialNumber: syz [ 1476.867095][T24613] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1476.899511][ T5954] usb 1-1: config 0 descriptor?? [ 1476.930358][ T5954] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1476.966210][ T5954] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1477.374762][T24608] vivid-000: reconnect [ 1477.669344][T24619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1477.973897][T24622] ptrace attach of "./syz-executor exec"[14654] was attempted by "./syz-executor exec"[24622] [ 1478.344171][ T5954] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1478.371010][ T5954] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1478.414175][ T5954] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1478.445030][ T5954] em28xx 1-1:0.0: No AC97 audio processor [ 1478.799469][ T5931] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1479.242893][ T5931] usb 4-1: config 0 has an invalid interface number: 37 but max is 0 [ 1479.269108][ T5931] usb 4-1: config 0 has no interface number 0 [ 1479.342252][ T5931] usb 4-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62 [ 1479.372119][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.429473][ T5931] usb 4-1: Product: syz [ 1479.453362][ T5931] usb 4-1: Manufacturer: syz [ 1479.490966][ T5931] usb 4-1: SerialNumber: syz [ 1479.522578][ T5931] usb 4-1: config 0 descriptor?? [ 1479.741947][ T5931] usb 4-1: USB disconnect, device number 57 [ 1479.866310][ T5954] usb 1-1: USB disconnect, device number 76 [ 1479.873443][ T5954] em28xx 1-1:0.0: Disconnecting em28xx [ 1479.880575][ T5954] em28xx 1-1:0.0: Freeing device [ 1480.051642][T24650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.131404][T24652] netlink: 'syz.5.4380': attribute type 10 has an invalid length. [ 1480.659416][ T5954] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1480.919755][ T5931] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1480.933166][T24672] vivid-000: disconnect [ 1480.939430][ T5954] usb 6-1: device descriptor read/64, error -71 [ 1481.104368][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 1481.134505][ T5931] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1481.144497][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.153247][ T5931] usb 4-1: Product: syz [ 1481.157622][ T5931] usb 4-1: Manufacturer: syz [ 1481.163608][ T5931] usb 4-1: SerialNumber: syz [ 1481.181374][ T5931] usb 4-1: config 0 descriptor?? [ 1481.196575][ T5931] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1481.229695][ T5954] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1481.369563][ T5954] usb 6-1: device descriptor read/64, error -71 [ 1481.560971][ T5954] usb usb6-port1: attempt power cycle [ 1481.775218][T24682] loop3: detected capacity change from 0 to 1 [ 1481.792955][T24682] Dev loop3: unable to read RDB block 1 [ 1481.798691][T24682] loop3: unable to read partition table [ 1481.808980][T24682] loop3: partition table beyond EOD, truncated [ 1481.817580][T24682] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1481.849980][T24670] vivid-000: reconnect [ 1481.947872][ T5954] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1482.079834][T24682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1482.089361][T24682] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1482.132585][ T5954] usb 6-1: device descriptor read/8, error -71 [ 1482.169666][T24682] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1482.176324][T24682] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1482.300922][T24682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1482.307747][T24682] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1482.330735][T24682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1482.339068][T24682] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1482.586079][ T5954] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1482.688536][ T5954] usb 6-1: device descriptor read/8, error -71 [ 1482.740997][T24682] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1482.799694][ T5954] usb usb6-port1: unable to enumerate USB device [ 1482.851685][T24669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.050084][T24669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.597261][T24699] input: syz1 as /devices/virtual/input/input117 [ 1484.060941][T24702] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4390'. [ 1484.129468][T17222] Bluetooth: hci2: command 0x0406 tx timeout [ 1484.209522][T17222] Bluetooth: hci4: command 0x0405 tx timeout [ 1484.359707][T17222] Bluetooth: hci3: command 0x0405 tx timeout [ 1484.359927][T11945] Bluetooth: hci1: command 0x0406 tx timeout [ 1484.571938][T24711] netlink: 'syz.5.4392': attribute type 9 has an invalid length. [ 1484.845642][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.852050][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.393648][ T30] audit: type=1326 audit(1754952422.129:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21e38ebe9 code=0x7ffc0000 [ 1485.417562][ T44] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1485.447829][ T5954] usb 4-1: USB disconnect, device number 58 [ 1485.455918][ T30] audit: type=1326 audit(1754952422.139:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe21e38ebe9 code=0x7ffc0000 [ 1485.545897][ T30] audit: type=1326 audit(1754952422.139:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21e38ebe9 code=0x7ffc0000 [ 1485.623100][ T30] audit: type=1326 audit(1754952422.139:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe21e38ebe9 code=0x7ffc0000 [ 1485.646854][ T5913] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1485.662801][ T30] audit: type=1326 audit(1754952422.139:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21e38ebe9 code=0x7ffc0000 [ 1485.662920][ T44] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1485.703084][ T30] audit: type=1326 audit(1754952422.139:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fe21e38ebe9 code=0x7ffc0000 [ 1485.733363][ T44] usb 6-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 1485.743357][ T30] audit: type=1326 audit(1754952422.139:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21e38ebe9 code=0x7ffc0000 [ 1485.784629][ T44] usb 6-1: Product: syz [ 1485.789106][ T44] usb 6-1: Manufacturer: syz [ 1485.795105][ T44] usb 6-1: SerialNumber: syz [ 1485.802954][ T30] audit: type=1326 audit(1754952422.139:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe21e38d550 code=0x7ffc0000 [ 1485.832373][ T44] usb 6-1: config 0 descriptor?? [ 1485.837415][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 1485.860492][ T5913] usb 7-1: config 255 has an invalid interface number: 47 but max is 0 [ 1485.888495][ T44] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1485.895463][ T5913] usb 7-1: config 255 has no interface number 0 [ 1485.912007][ T30] audit: type=1326 audit(1754952422.139:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe21e38e7eb code=0x7ffc0000 [ 1485.945088][ T5913] usb 7-1: config 255 interface 47 has no altsetting 0 [ 1485.982158][ T5913] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 1485.997622][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.006406][ T30] audit: type=1326 audit(1754952422.139:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24730 comm="syz.6.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe21e38e7eb code=0x7ffc0000 [ 1486.054952][ T5913] usb 7-1: Product: syz [ 1486.067052][T24749] (unnamed net_device) (uninitialized): down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 1486.067552][ T5913] usb 7-1: Manufacturer: syz [ 1486.110281][ T5913] usb 7-1: SerialNumber: syz [ 1486.181431][T24749] (unnamed net_device) (uninitialized): peer notification delay (237) is not a multiple of miimon (5), value rounded to 235 ms [ 1486.199761][T11945] Bluetooth: hci2: command 0x0406 tx timeout [ 1486.286823][T11945] Bluetooth: hci4: command 0x0405 tx timeout [ 1486.314937][ T44] gspca_sunplus: reg_r err -71 [ 1486.320187][ T44] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1486.334779][ T44] usb 6-1: USB disconnect, device number 106 [ 1486.362194][ T5913] legousbtower 7-1:255.47: interrupt endpoints not found [ 1486.377973][ T5913] usb 7-1: USB disconnect, device number 31 [ 1486.441069][T17222] Bluetooth: hci1: command 0x0406 tx timeout [ 1486.447721][T11945] Bluetooth: hci3: command 0x0405 tx timeout [ 1486.504605][T24749] bond3: entered promiscuous mode [ 1486.510389][T24749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1487.165342][T24775] netlink: 'syz.3.4409': attribute type 1 has an invalid length. [ 1487.679557][T16339] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1487.867796][T16339] usb 1-1: Using ep0 maxpacket: 32 [ 1487.908134][T16339] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1487.921361][T16339] usb 1-1: config 0 has no interface number 0 [ 1487.944788][T16339] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1487.969410][ T44] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1487.991433][T16339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.027923][T16339] usb 1-1: Product: syz [ 1488.052271][T16339] usb 1-1: Manufacturer: syz [ 1488.058189][T16339] usb 1-1: SerialNumber: syz [ 1488.068818][T16339] usb 1-1: config 0 descriptor?? [ 1488.086747][T16339] smsc95xx v2.0.0 [ 1488.142702][ T44] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.185851][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1488.205128][ T44] usb 7-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1488.232922][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.286472][T16339] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1488.316118][ T44] usb 7-1: config 0 descriptor?? [ 1488.372699][T16339] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1488.455529][T16339] usb 1-1: USB disconnect, device number 77 [ 1488.521342][T11945] Bluetooth: hci3: command 0x0405 tx timeout [ 1488.781815][ T44] hid-alps 0003:044E:1215.0050: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.6-1/input0 [ 1489.080044][T16339] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1489.169360][ T5931] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1489.249669][T16339] usb 6-1: Using ep0 maxpacket: 8 [ 1489.265388][T16339] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1489.275150][T16339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.289629][T16339] usb 6-1: Product: syz [ 1489.296551][T16339] usb 6-1: Manufacturer: syz [ 1489.302331][T16339] usb 6-1: SerialNumber: syz [ 1489.311197][T16339] usb 6-1: config 0 descriptor?? [ 1489.330366][T16339] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1489.365847][T24787] ip6gre1: entered allmulticast mode [ 1489.379551][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 1489.404557][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.416589][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.453110][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1489.491228][ T5931] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1489.512790][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.563045][ T5931] usb 1-1: config 0 descriptor?? [ 1489.747877][T16339] gspca_sn9c2028: read1 error -71 [ 1489.755560][T16339] gspca_sn9c2028: read1 error -71 [ 1489.761615][T16339] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1489.775556][T16339] usb 6-1: USB disconnect, device number 107 [ 1490.113179][ T5931] HID 045e:07da: Invalid code 65791 type 1 [ 1490.149880][ T5931] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0051/input/input118 [ 1490.210908][ T5931] microsoft 0003:045E:07DA.0051: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1490.275400][T24796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.304604][T24796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.345360][ T5931] usb 1-1: USB disconnect, device number 78 [ 1490.465467][T24806] fido_id[24806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1490.729592][T16339] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1490.843457][ T5913] usb 7-1: USB disconnect, device number 32 [ 1490.900951][T16339] usb 6-1: Using ep0 maxpacket: 8 [ 1490.924028][T16339] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 1490.938466][T16339] usb 6-1: config 127 has no interface number 1 [ 1490.969429][ T44] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1490.983253][T16339] usb 6-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 1490.990907][T24817] ptrace attach of "./syz-executor exec"[14654] was attempted by "./syz-executor exec"[24817] [ 1491.050212][T16339] usb 6-1: config 127 interface 171 has no altsetting 0 [ 1491.119385][T16339] usb 6-1: config 127 interface 0 has no altsetting 0 [ 1491.129565][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 1491.145614][ T44] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1491.181423][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 64918, setting to 1024 [ 1491.231071][T16339] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1491.243063][T16339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.304912][T24825] overlayfs: missing 'lowerdir' [ 1491.356094][ T44] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1491.370775][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1491.389729][T16339] usb 6-1: Product: syz [ 1491.394279][T16339] usb 6-1: Manufacturer: syz [ 1491.399052][T16339] usb 6-1: SerialNumber: syz [ 1491.408215][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1491.424473][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.436126][ T44] usb 4-1: Product: syz [ 1491.546400][ T44] usb 4-1: Manufacturer: syz [ 1491.551436][ T44] usb 4-1: SerialNumber: syz [ 1491.608718][T24812] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1491.617756][T24812] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1491.635432][T16339] xr_serial 6-1:127.171: xr_serial converter detected [ 1491.655214][T16339] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1491.662029][T16339] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1491.689409][T16339] usb 6-1: USB disconnect, device number 108 [ 1491.736561][T16339] xr_serial 6-1:127.171: device disconnected [ 1491.857488][T24812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'. [ 1493.863299][T24849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1493.986995][T24852] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4428'. [ 1494.029507][ T5931] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1494.201419][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 1494.267182][ T5931] usb 1-1: config 0 has an invalid interface number: 194 but max is 0 [ 1494.288361][ T5931] usb 1-1: config 0 has no interface number 0 [ 1494.320210][ T5931] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 1494.339035][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.343597][ T44] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1494.394411][ T5931] usb 1-1: Product: syz [ 1494.440809][ T5931] usb 1-1: Manufacturer: syz [ 1494.453825][ T44] usbtest 4-1:1.0: Linux user mode ISO test driver [ 1494.474629][ T5931] usb 1-1: SerialNumber: syz [ 1494.481743][ T44] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1494.524525][ T44] usb 4-1: USB disconnect, device number 59 [ 1494.541181][ T5931] usb 1-1: config 0 descriptor?? [ 1494.549686][ T9] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1494.598316][ T5931] cypress_cy7c63 1-1:0.194: Cypress CY7C63xxx device now attached [ 1494.729359][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1494.740848][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.756862][T24867] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4433'. [ 1494.802689][T24868] netlink: 'syz.3.4432': attribute type 1 has an invalid length. [ 1494.822079][T24846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.832864][T24846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.847130][T24846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.862776][T24846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.879880][T24846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.979396][T24846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.990875][T24846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.118788][ T9] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1495.130958][T24846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.138668][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.147500][ T9] usb 6-1: Product: syz [ 1495.170002][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4434'. [ 1495.179964][T24846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.184081][ T9] usb 6-1: Manufacturer: syz [ 1495.195850][ T9] usb 6-1: SerialNumber: syz [ 1495.207151][ T9] usb 6-1: config 0 descriptor?? [ 1495.244790][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 1495.259016][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1495.275431][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1495.283437][T24846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.392307][ T5931] usb 1-1: USB disconnect, device number 79 [ 1495.403847][ T5931] cypress_cy7c63 1-1:0.194: Cypress CY7C63xxx device now disconnected [ 1495.431426][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1495.512763][ T9] usb 6-1: USB disconnect, device number 109 [ 1495.545443][ T9692] udevd[9692]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1496.617163][T24892] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1497.546397][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1497.546422][ T30] audit: type=1800 audit(1754952434.289:1958): pid=24901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4440" name="nullb0" dev="devtmpfs" ino=3853 res=0 errno=0 [ 1497.754664][T24905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4441'. [ 1498.331371][T24922] bridge0: port 1(team0) entered disabled state [ 1498.400646][T24922] bond4: (slave veth0_to_bond): Releasing active interface [ 1498.521521][T24922] bond0: (slave è): Releasing backup interface [ 1498.611467][T24922] mac80211_hwsim hwsim22 è: left promiscuous mode [ 1498.618628][T24922] mac80211_hwsim hwsim22 è: left allmulticast mode [ 1498.686820][T24922] bond4: (slave veth7): Releasing active interface [ 1499.016765][T24935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4449'. [ 1499.137395][T24941] bridge0: entered allmulticast mode [ 1500.709504][ T44] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1500.979348][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 1500.986750][ T44] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1501.006485][ T44] usb 1-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.042282][ T44] usb 1-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 1501.123096][ T44] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1501.218571][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.273670][ T44] usb 1-1: Product: syz [ 1501.277914][ T44] usb 1-1: Manufacturer: syz [ 1501.312981][ T44] usb 1-1: SerialNumber: syz [ 1502.189429][ T5931] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1502.277883][T24976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1502.285346][T24976] IPv6: NLM_F_CREATE should be set when creating new route [ 1502.298121][T24976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1502.342747][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.357761][ T5931] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1502.392410][ T5931] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1502.408788][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.430796][ T5931] usb 4-1: Product: syz [ 1502.447841][ T5931] usb 4-1: Manufacturer: syz [ 1502.467098][ T5931] usb 4-1: SerialNumber: syz [ 1502.715792][ T5931] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1502.809370][ T5931] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1502.844050][ T5931] usb 4-1: USB disconnect, device number 60 [ 1502.917038][ T8563] udevd[8563]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1503.465413][T24970] syzkaller1: entered promiscuous mode [ 1503.471371][T24970] syzkaller1: entered allmulticast mode [ 1503.799499][ T5952] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1503.844984][ T30] audit: type=1326 audit(1754952440.599:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24982 comm="syz.5.4460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44d4d8ebe9 code=0x0 [ 1503.969188][ T5952] usb 4-1: device descriptor read/64, error -71 [ 1504.249408][ T5952] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1504.345997][ T44] usb 1-1: USB disconnect, device number 80 [ 1504.413034][ T5952] usb 4-1: device descriptor read/64, error -71 [ 1504.540374][ T5952] usb usb4-port1: attempt power cycle [ 1504.653160][T24995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4463'. [ 1504.719430][T16339] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1504.879475][T16339] usb 7-1: Using ep0 maxpacket: 32 [ 1504.886763][T16339] usb 7-1: too many configurations: 239, using maximum allowed: 8 [ 1504.901840][T16339] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1504.913157][T16339] usb 7-1: can't read configurations, error -61 [ 1504.969328][ T5952] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1505.159491][T16339] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1505.167772][ T5952] usb 4-1: device descriptor read/8, error -71 [ 1505.343477][T16339] usb 7-1: Using ep0 maxpacket: 32 [ 1505.356337][T16339] usb 7-1: too many configurations: 239, using maximum allowed: 8 [ 1505.394739][T16339] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1505.416990][T25002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4464'. [ 1505.427437][ T5952] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1505.442190][T25002] !@ÿ: renamed from xfrm0 (while UP) [ 1505.458036][T16339] usb 7-1: can't read configurations, error -61 [ 1505.469445][ T5952] usb 4-1: device descriptor read/8, error -71 [ 1505.476066][T16339] usb usb7-port1: attempt power cycle [ 1505.580931][ T5952] usb usb4-port1: unable to enumerate USB device [ 1505.595816][T25004] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1505.609608][T25004] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1506.113831][T16339] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1506.240665][T16339] usb 7-1: Using ep0 maxpacket: 32 [ 1506.248485][T16339] usb 7-1: too many configurations: 239, using maximum allowed: 8 [ 1506.261020][T16339] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1506.268927][T16339] usb 7-1: can't read configurations, error -61 [ 1506.416085][T16339] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1506.441155][T16339] usb 7-1: Using ep0 maxpacket: 32 [ 1506.447481][T16339] usb 7-1: too many configurations: 239, using maximum allowed: 8 [ 1506.462764][T16339] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1506.472721][T16339] usb 7-1: can't read configurations, error -61 [ 1506.497299][T16339] usb usb7-port1: unable to enumerate USB device [ 1506.631100][T25012] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4466'. [ 1506.717943][T25024] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1507.209659][ T5954] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1507.339671][ T5954] usb 6-1: device descriptor read/64, error -71 [ 1507.580592][ T5954] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 1507.753244][ T5954] usb 6-1: device descriptor read/64, error -71 [ 1507.926173][ T5954] usb usb6-port1: attempt power cycle [ 1508.009978][T16339] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1508.048273][T25053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1508.204911][T16339] usb 7-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config [ 1508.216151][T16339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1508.234049][T16339] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1508.246017][T16339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1508.255526][T16339] usb 7-1: SerialNumber: syz [ 1508.349551][ T5954] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1508.371288][ T5954] usb 6-1: device descriptor read/8, error -71 [ 1508.504804][T16339] usb 7-1: 0:2 : does not exist [ 1508.522171][T16339] usb 7-1: unit 5: unexpected type 0x0a [ 1508.550666][T16339] usb 7-1: USB disconnect, device number 37 [ 1508.579789][ T9692] udevd[9692]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1508.609699][ T5954] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 1508.629878][ T5954] usb 6-1: device descriptor read/8, error -71 [ 1508.749824][ T5954] usb usb6-port1: unable to enumerate USB device [ 1508.877678][T25060] binder: 25058:25060 unknown command 0 [ 1508.884023][T25060] binder: 25058:25060 ioctl c0306201 200000000c40 returned -22 [ 1509.435318][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.569826][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.587761][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.603930][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.613646][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.626247][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.638790][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.657422][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.673439][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.683388][ T5954] hid-generic 0008:0006:0007.0052: unknown main item tag 0x0 [ 1509.727408][ T5954] hid-generic 0008:0006:0007.0052: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1510.125497][T25088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4485'. [ 1511.199959][ T5954] hid-generic 00A0:0008:0003.0053: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1511.371777][ T5954] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1511.576260][ T5954] usb 7-1: Using ep0 maxpacket: 8 [ 1511.595419][ T5954] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1511.621870][ T5954] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1511.639885][ T5954] usb 7-1: can't read configurations, error -71 [ 1511.708582][T25100] fuse: Unknown parameter 'user_i00000000000000000000' [ 1511.769419][ T5952] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1511.882116][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4492'. [ 1511.914741][T16339] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1511.934966][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 1511.942199][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1511.955805][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1511.966791][ T5952] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1511.977194][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1511.987563][ T5952] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1511.997438][ T5952] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1512.006558][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.016956][ T5952] usb 6-1: config 0 descriptor?? [ 1512.047181][T11945] Bluetooth: hci5: urb ffff88807b636f00 submission failed (90) [ 1512.081937][T16339] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1512.096029][T16339] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1512.105769][T16339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.113999][T16339] usb 4-1: Product: syz [ 1512.118599][T16339] usb 4-1: Manufacturer: syz [ 1512.123595][T16339] usb 4-1: SerialNumber: syz [ 1512.136020][T16339] usb 4-1: config 0 descriptor?? [ 1512.173233][T16339] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1512.210395][ T5931] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1512.247595][ T5952] usb 6-1: USB disconnect, device number 114 [ 1512.374595][T25107] openvswitch: netlink: Flow actions attr not present in new flow. [ 1512.393945][T25107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.410742][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 1512.429053][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1512.440466][T25107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.451266][ T5931] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1512.456653][T25107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4491'. [ 1512.469915][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.469947][ T5931] usb 1-1: Product: syz [ 1512.469978][ T5931] usb 1-1: Manufacturer: syz [ 1512.469994][ T5931] usb 1-1: SerialNumber: syz [ 1512.493915][ T5931] usb 1-1: config 0 descriptor?? [ 1512.509568][ T5931] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1512.514008][ T5952] usb 4-1: USB disconnect, device number 65 [ 1512.530011][ T7277] usb 4-1: Failed to submit usb control message: -71 [ 1512.549616][ T7277] usb 4-1: unable to send the bmi data to the device: -71 [ 1512.565772][ T7277] usb 4-1: unable to get target info from device [ 1512.575080][ T7277] usb 4-1: could not get target info (-71) [ 1512.583111][ T7277] usb 4-1: could not probe fw (-71) [ 1512.881067][T25128] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4495'. [ 1512.960438][T25129] hub 9-0:1.0: USB hub found [ 1512.965841][T25129] hub 9-0:1.0: 1 port detected [ 1513.323137][ T5913] usb 1-1: USB disconnect, device number 81 [ 1513.577143][T25135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.659816][T25135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1514.369445][ T5954] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1514.519623][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 1514.638814][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.659746][ T5954] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1514.705638][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.737316][ T5954] usb 1-1: config 0 descriptor?? [ 1514.758486][ T5954] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 1515.012091][T25156] binder: BINDER_SET_CONTEXT_MGR already set [ 1515.020399][T25156] binder: 25155:25156 ioctl 4018620d 2000000001c0 returned -16 [ 1515.083941][T25163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.102736][T25163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.170324][ T5954] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1515.341364][ T5954] usb 7-1: config 255 has too many interfaces: 226, using maximum allowed: 32 [ 1515.380656][ T5954] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.418044][ T5954] usb 7-1: config 255 has 1 interface, different from the descriptor's value: 226 [ 1515.449040][ T5954] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1515.476463][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.534063][ T5954] uvcvideo 7-1:255.0: probe with driver uvcvideo failed with error -22 [ 1515.738612][T16339] usb 7-1: USB disconnect, device number 40 [ 1515.782724][T25173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4507'. [ 1517.156604][T25194] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4513'. [ 1517.179577][ T5913] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1517.195523][T16339] usb 1-1: USB disconnect, device number 82 [ 1517.254268][T25194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4513'. [ 1517.309674][T25194] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4513'. [ 1517.315688][T25195] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1517.364007][T25194] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4513'. [ 1517.446195][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.476244][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.524743][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1517.585760][T25201] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4515'. [ 1517.605194][ T5913] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1517.660648][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.716315][ T5913] usb 4-1: config 0 descriptor?? [ 1518.129902][ T5913] usbhid 4-1:0.0: can't add hid device: -71 [ 1518.161344][ T5913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1518.253552][ T5913] usb 4-1: USB disconnect, device number 66 [ 1518.761699][T25227] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1518.987831][T25227] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1519.929042][T25244] netlink: 'syz.7.4522': attribute type 21 has an invalid length. [ 1519.952193][T25244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4522'. [ 1520.138770][T25253] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1520.277158][T25257] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1520.335345][ T30] audit: type=1800 audit(1754952457.089:1960): pid=25258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4524" name="nullb0" dev="devtmpfs" ino=3853 res=0 errno=0 [ 1520.788695][T25265] 8021q: VLANs not supported on gre0 [ 1520.958372][T25270] loop2: detected capacity change from 0 to 14 [ 1521.064136][T25270] Dev loop2: unable to read RDB block 14 [ 1521.138264][T25270] loop2: AHDI p1 p2 p3 [ 1521.179329][T25270] loop2: partition table partially beyond EOD, truncated [ 1521.189406][ T44] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1521.203891][T25270] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1521.212076][T25270] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1521.299524][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1521.380101][ T44] usb 7-1: device descriptor read/64, error -71 [ 1521.528058][ T9] usb 4-1: device descriptor read/64, error -71 [ 1521.646470][ T44] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1521.700589][T25286] netlink: 1124 bytes leftover after parsing attributes in process `syz.5.4535'. [ 1521.710254][T25286] openvswitch: netlink: Flow key attr not present in new flow. [ 1521.779378][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1521.823106][ T44] usb 7-1: device descriptor read/64, error -71 [ 1521.939799][ T44] usb usb7-port1: attempt power cycle [ 1521.946003][ T9] usb 4-1: device descriptor read/64, error -71 [ 1522.060130][T25299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4539'. [ 1522.069622][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4539'. [ 1522.069869][ T9] usb usb4-port1: attempt power cycle [ 1522.289405][ T44] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1522.310005][ T44] usb 7-1: device descriptor read/8, error -71 [ 1522.489456][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1522.531022][ T9] usb 4-1: device descriptor read/8, error -71 [ 1522.549489][ T44] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1522.571888][ T44] usb 7-1: device descriptor read/8, error -71 [ 1522.683969][ T44] usb usb7-port1: unable to enumerate USB device [ 1522.779423][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1522.802608][ T9] usb 4-1: device descriptor read/8, error -71 [ 1522.869762][ T5954] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1522.909837][ T9] usb usb4-port1: unable to enumerate USB device [ 1523.083636][ T30] audit: type=1800 audit(1754952459.839:1961): pid=25318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4543" name="nullb0" dev="devtmpfs" ino=3853 res=0 errno=0 [ 1523.109660][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1523.359410][ T9] usb 7-1: device descriptor read/64, error -71 [ 1523.365844][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1523.529385][ T44] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1523.609507][ T9] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1523.617265][ T5954] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1523.679342][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 1523.773842][ T9] usb 7-1: device descriptor read/64, error -71 [ 1523.783118][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1523.921000][ T5954] usb usb1-port1: attempt power cycle [ 1523.927728][ T9] usb usb7-port1: attempt power cycle [ 1524.309562][ T5954] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1524.361670][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1524.599540][ T5954] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1524.621318][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1524.649383][T16339] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1524.731759][ T5954] usb usb1-port1: unable to enumerate USB device [ 1524.809527][T16339] usb 4-1: Using ep0 maxpacket: 8 [ 1524.828872][T16339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.923741][T16339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.964974][T16339] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1524.993705][T16339] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1525.115833][T16339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.183885][T16339] usb 4-1: config 0 descriptor?? [ 1525.724776][T16339] hid_parser_main: 51 callbacks suppressed [ 1525.724803][T16339] logitech 0003:046D:C293.0054: unknown main item tag 0x0 [ 1525.775721][T16339] logitech 0003:046D:C293.0054: unknown main item tag 0x0 [ 1525.819170][T16339] logitech 0003:046D:C293.0054: unknown main item tag 0x0 [ 1525.847492][T16339] logitech 0003:046D:C293.0054: unknown main item tag 0x0 [ 1526.109408][T16339] logitech 0003:046D:C293.0054: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 1526.170206][T16339] logitech 0003:046D:C293.0054: no inputs found [ 1526.260019][T16339] usb 4-1: USB disconnect, device number 71 [ 1526.404772][T25359] fido_id[25359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1526.542322][ T44] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1526.569176][ T44] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1526.605878][ T44] usb 6-1: can't read configurations, error -71 [ 1526.723375][T25364] usb usb8: usbfs: process 25364 (syz.0.4557) did not claim interface 0 before use [ 1526.764841][T25364] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1527.000370][ T44] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1527.190450][T24320] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1527.199605][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 1527.226599][ T44] usb 6-1: config index 0 descriptor too short (expected 46935, got 18) [ 1527.235525][ T44] usb 6-1: config 184 has too many interfaces: 116, using maximum allowed: 32 [ 1527.259459][ T44] usb 6-1: config 184 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.357701][ T44] usb 6-1: config 184 has 0 interfaces, different from the descriptor's value: 116 [ 1527.533415][ T44] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1527.576261][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.638929][T16339] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1527.667859][T25389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1527.789830][ T44] usb 6-1: Product: syz [ 1527.803660][T24320] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.814620][ T44] usb 6-1: Manufacturer: syz [ 1527.819618][T16339] usb 1-1: Using ep0 maxpacket: 16 [ 1527.830768][T16339] usb 1-1: config 0 has an invalid interface number: 80 but max is 0 [ 1527.867376][ T44] usb 6-1: SerialNumber: syz [ 1527.868796][T16339] usb 1-1: config 0 has no interface number 0 [ 1527.873520][T24320] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1527.873572][T24320] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1527.873598][T24320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.139514][T16339] usb 1-1: config 0 interface 80 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 1528.153445][T16339] usb 1-1: config 0 interface 80 altsetting 254 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1528.247967][T16339] usb 1-1: config 0 interface 80 altsetting 254 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1528.290154][T16339] usb 1-1: config 0 interface 80 altsetting 254 has a duplicate endpoint with address 0x1, skipping [ 1528.431385][T25376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4559'. [ 1528.521446][T16339] usb 1-1: config 0 interface 80 altsetting 254 bulk endpoint 0xB has invalid maxpacket 1024 [ 1528.695512][T16339] usb 1-1: config 0 interface 80 altsetting 254 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1528.718450][T16339] usb 1-1: config 0 interface 80 altsetting 254 has a duplicate endpoint with address 0x4, skipping [ 1528.737495][T16339] usb 1-1: config 0 interface 80 has no altsetting 0 [ 1528.754471][T16339] usb 1-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=e8.f8 [ 1528.790064][T16339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.837475][ T44] usb 6-1: USB disconnect, device number 116 [ 1528.937211][T16339] usb 1-1: Product: syz [ 1528.964318][T16339] usb 1-1: Manufacturer: syz [ 1528.990142][T16339] usb 1-1: SerialNumber: syz [ 1529.079578][T16339] usb 1-1: config 0 descriptor?? [ 1529.101380][T25380] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1529.203938][T25380] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1529.250663][T16339] sierra 1-1:0.80: Sierra USB modem converter detected [ 1529.513085][T25397] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4563'. [ 1529.587839][ T30] audit: type=1326 audit(1754952466.319:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25393 comm="syz.5.4563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44d4d8ebe9 code=0x0 [ 1529.761048][T16339] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1529.823062][T16339] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 1529.869341][T16339] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 1529.924212][T16339] usb 1-1: USB disconnect, device number 87 [ 1529.981271][T16339] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1530.034138][T16339] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1530.109941][T16339] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 1530.130993][T16339] sierra 1-1:0.80: device disconnected [ 1531.193324][ T5954] usb 4-1: USB disconnect, device number 72 [ 1531.319570][T16339] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1531.551514][T16339] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1531.902635][T16339] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1532.011186][T16339] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1532.099417][T16339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.169200][T25409] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1532.181006][T16339] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1532.386429][T25409] fuse: Unknown parameter 'rootmod' [ 1532.792387][ T44] usb 7-1: USB disconnect, device number 48 [ 1533.331449][ T5954] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1533.500276][T16339] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1533.607133][T25451] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1533.616469][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 1533.625817][T25451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1533.658773][T25451] loop6: detected capacity change from 0 to 1 [ 1533.665581][T16339] usb 6-1: Using ep0 maxpacket: 16 [ 1533.708037][ T5954] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1533.721061][ T5954] usb 1-1: config 0 has no interface number 0 [ 1533.738915][T25451] Dev loop6: unable to read RDB block 1 [ 1533.841647][T25451] loop6: unable to read partition table [ 1533.847619][T25451] loop6: partition table beyond EOD, truncated [ 1533.854908][ T5954] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1533.885813][ T5954] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1533.895568][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.905326][ T5954] usb 1-1: Product: syz [ 1533.912235][ T5954] usb 1-1: Manufacturer: syz [ 1533.917651][ T5954] usb 1-1: SerialNumber: syz [ 1533.928984][ T5954] usb 1-1: config 0 descriptor?? [ 1533.935639][T25451] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1534.392742][T25453] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1535.257373][ T5954] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 1535.347929][ T5954] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1535.402729][ T5954] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1535.476241][ T5954] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1535.579832][ T5954] usb 1-1: USB disconnect, device number 88 [ 1535.720604][T25466] misc userio: The device must be registered before sending interrupts [ 1535.781635][T25467] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4582'. [ 1536.007487][T16339] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1536.032301][T16339] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1536.054091][T16339] usb 6-1: can't read configurations, error -71 [ 1536.941029][T25493] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1536.947806][T25493] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1536.989456][T25493] vhci_hcd vhci_hcd.0: Device attached [ 1537.143178][ T30] audit: type=1326 audit(1754952473.819:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1537.199372][ T9] vhci_hcd: vhci_device speed not set [ 1537.211591][ T30] audit: type=1326 audit(1754952473.829:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1537.269303][ T9] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 1537.378041][ T30] audit: type=1326 audit(1754952473.829:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1537.432296][ T30] audit: type=1326 audit(1754952473.829:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1537.465277][ T30] audit: type=1326 audit(1754952473.829:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1537.529348][ T30] audit: type=1326 audit(1754952473.829:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1537.777627][ T30] audit: type=1326 audit(1754952473.829:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1538.024866][ T30] audit: type=1326 audit(1754952473.829:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1538.109402][T25494] vhci_hcd: connection reset by peer [ 1538.127241][ T7271] vhci_hcd: stop threads [ 1538.137921][ T30] audit: type=1326 audit(1754952473.939:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1538.222841][ T30] audit: type=1326 audit(1754952473.939:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25470 comm="syz.0.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ebb8ebe9 code=0x7ffc0000 [ 1538.254484][ T7271] vhci_hcd: release socket [ 1538.268653][ T7271] vhci_hcd: disconnect device [ 1538.429843][ T5913] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1538.454962][T25509] netlink: 'syz.7.4592': attribute type 1 has an invalid length. [ 1538.527994][T25509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1538.588466][T25512] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1538.599754][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 1538.606775][ T5913] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1538.615770][ T5913] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1538.628585][ T5913] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1538.639457][ T5913] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1538.648275][ T5913] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1538.657633][ T5913] usb 1-1: config 0 has no interface number 0 [ 1538.664797][ T5913] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1538.677993][ T5913] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1538.734551][ T5913] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1538.776719][ T5913] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1538.796321][ T5913] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1538.804738][ T5913] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1538.817334][T25509] bond2: (slave veth0_to_bond): making interface the new active one [ 1538.832361][ T5913] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1538.864867][T25509] veth0_to_bond: entered promiscuous mode [ 1538.872322][T25509] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1538.884245][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.893370][ T5913] usb 1-1: Product: syz [ 1538.908275][ T5913] usb 1-1: Manufacturer: syz [ 1538.923034][ T5913] usb 1-1: SerialNumber: syz [ 1538.941580][ T5913] usb 1-1: config 0 descriptor?? [ 1538.956579][ T5913] usb 1-1: selecting invalid altsetting 2 [ 1538.982515][T25512] vlan2: entered allmulticast mode [ 1539.003308][T25512] veth0_to_bond: entered allmulticast mode [ 1539.024909][T25512] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1539.394747][T25516] netlink: 'syz.6.4594': attribute type 2 has an invalid length. [ 1539.439654][T25516] : entered promiscuous mode [ 1539.456061][T25516] ip6erspan0: entered allmulticast mode [ 1539.954506][T25532] tipc: Failed to remove unknown binding: 66,1,1/134418688:134377125/134377127 [ 1539.965424][T25532] tipc: Failed to remove unknown binding: 66,1,1/134418688:134377125/134377127 [ 1540.039684][ T5913] get_1284_register timeout [ 1540.049847][ T5952] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1540.072792][ C1] usb 1-1: async_complete: urb error -104 [ 1540.079160][ T5913] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 1540.154265][ T5913] usb 1-1: USB disconnect, device number 89 [ 1540.211043][ T5952] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1540.228005][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.258578][ T5952] usb 6-1: config 0 descriptor?? [ 1540.494384][ T5952] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1540.789699][T16339] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1540.955263][T16339] usb 1-1: Using ep0 maxpacket: 16 [ 1540.963456][T16339] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.004726][T16339] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1541.027553][T16339] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1541.046604][T16339] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1541.066620][T16339] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1541.080287][T16339] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1541.100353][T16339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.171719][T16339] usb 1-1: Product: syz [ 1541.176107][T16339] usb 1-1: Manufacturer: syz [ 1541.198257][T16339] usb 1-1: SerialNumber: syz [ 1541.442691][ T5952] [drm:udl_init] *ERROR* Selecting channel failed [ 1541.534382][ T5952] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1541.564786][T25547] program syz.6.4604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1541.582090][ T5952] [drm] Initialized udl on minor 2 [ 1541.614000][ T5952] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1541.649809][ T5952] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1541.692229][T24320] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1541.707170][ T5952] usb 6-1: USB disconnect, device number 119 [ 1541.728627][T24320] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1542.025789][T25553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.045516][T25553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1542.083298][T16339] usb 1-1: USB disconnect, device number 90 [ 1542.133954][T25557] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1542.155318][ T9692] udevd[9692]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1542.157373][T25557] netlink: 'syz.0.4607': attribute type 4 has an invalid length. [ 1542.280480][ T5913] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1542.429523][ T5913] usb 6-1: device descriptor read/64, error -71 [ 1542.429705][ T9] vhci_hcd: vhci_device speed not set [ 1542.469646][ T5952] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1542.621605][T24320] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1542.629461][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 1542.637784][ T5952] usb 4-1: config 162 has an invalid interface number: 161 but max is 1 [ 1542.646787][ T5952] usb 4-1: config 162 has an invalid interface number: 187 but max is 1 [ 1542.655400][ T5952] usb 4-1: config 162 has no interface number 0 [ 1542.659357][T16339] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1542.661887][ T5952] usb 4-1: config 162 has no interface number 1 [ 1542.676193][ T5952] usb 4-1: config 162 interface 161 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1542.689901][ T5913] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1542.697767][ T5952] usb 4-1: config 162 interface 187 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1542.709641][ T5952] usb 4-1: config 162 interface 187 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1542.722417][ T5952] usb 4-1: config 162 interface 187 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1542.738180][ T5952] usb 4-1: config 162 interface 187 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1542.748834][ T5952] usb 4-1: config 162 interface 187 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1542.773844][ T5952] usb 4-1: config 162 interface 161 has no altsetting 0 [ 1542.781133][ T5952] usb 4-1: config 162 interface 187 has no altsetting 0 [ 1542.790359][T24320] usb 7-1: Using ep0 maxpacket: 16 [ 1542.797296][ T5952] usb 4-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 1542.807543][T24320] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1542.817977][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.826294][T24320] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1542.835344][ T5952] usb 4-1: Product: syz [ 1542.840016][ T5952] usb 4-1: Manufacturer: syz [ 1542.840080][T16339] usb 1-1: Using ep0 maxpacket: 32 [ 1542.844951][ T5952] usb 4-1: SerialNumber: syz [ 1542.857621][T24320] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1542.867258][ T5913] usb 6-1: device descriptor read/64, error -71 [ 1542.869139][T16339] usb 1-1: config 0 has an invalid interface number: 136 but max is 0 [ 1542.873767][T24320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.873796][T24320] usb 7-1: Product: syz [ 1542.873813][T24320] usb 7-1: Manufacturer: syz [ 1542.873830][T24320] usb 7-1: SerialNumber: syz [ 1542.906888][T16339] usb 1-1: config 0 has no interface number 0 [ 1542.918684][T16339] usb 1-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1542.938161][T16339] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1542.948946][T16339] usb 1-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1542.961672][T16339] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1542.975261][T16339] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1542.985546][T16339] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1542.989794][ T5913] usb usb6-port1: attempt power cycle [ 1542.995376][T16339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.019666][T16339] usb 1-1: config 0 descriptor?? [ 1543.134212][ T5952] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1543.147889][ T5952] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1543.172782][ T5952] usb 4-1: USB disconnect, device number 73 [ 1543.358733][T25577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.370339][ T5913] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1543.380073][T25577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.410746][ T5913] usb 6-1: device descriptor read/8, error -71 [ 1543.652808][ T5913] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1543.663247][T25579] binder: BC_ATTEMPT_ACQUIRE not supported [ 1543.685656][T25579] binder: 25578:25579 ioctl c0306201 200000000300 returned -22 [ 1543.696710][T24320] usb 7-1: 0:2 : does not exist [ 1543.703775][ T5913] usb 6-1: device descriptor read/8, error -71 [ 1543.736676][T24320] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1543.820400][T16339] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1543.829978][ T5913] usb usb6-port1: unable to enumerate USB device [ 1543.849291][T24320] usb 7-1: USB disconnect, device number 49 [ 1544.145197][T16339] usb 1-1: USB disconnect, device number 91 [ 1544.175441][ T9692] udevd[9692]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.679491][T16339] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1544.851533][T16339] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1544.896579][T16339] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1544.941967][T16339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.957696][T16339] usb 1-1: config 0 descriptor?? [ 1545.079400][T24320] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1545.190238][T16339] usbhid 1-1:0.0: can't add hid device: -71 [ 1545.196323][T16339] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1545.245120][T16339] usb 1-1: USB disconnect, device number 92 [ 1545.256532][T24320] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1545.286856][T24320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.308070][T24320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1545.324695][T24320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.364336][T24320] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1545.388098][T24320] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1545.397869][T24320] usb 4-1: Product: syz [ 1545.403095][T24320] usb 4-1: Manufacturer: syz [ 1545.425667][T24320] cdc_wdm 4-1:1.0: skipping garbage [ 1545.438308][T24320] cdc_wdm 4-1:1.0: skipping garbage [ 1545.449693][T24320] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1545.473039][T24320] cdc_wdm 4-1:1.0: Unknown control protocol [ 1545.692080][T16339] usb 4-1: USB disconnect, device number 74 [ 1546.228936][T25611] IPVS: set_ctl: invalid protocol: 255 172.30.0.7:20001 [ 1546.290950][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.297449][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.667992][T25619] netlink: 'syz.3.4626': attribute type 1 has an invalid length. [ 1546.836887][T25619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1546.961087][T25621] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1546.996746][T25622] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1547.009713][T25622] bond3: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1547.079900][ T5954] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1547.245914][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.266647][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.330578][ T5954] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1547.348890][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.388804][ T5954] usb 7-1: config 0 descriptor?? [ 1547.825750][ T5954] playstation 0003:054C:0DF2.0055: unknown main item tag 0x0 [ 1547.837951][ T5954] playstation 0003:054C:0DF2.0055: unknown main item tag 0x0 [ 1547.859404][ T5954] playstation 0003:054C:0DF2.0055: unknown main item tag 0x0 [ 1547.869364][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1547.887603][ T5954] playstation 0003:054C:0DF2.0055: unknown main item tag 0x0 [ 1547.897759][ T5954] playstation 0003:054C:0DF2.0055: unknown main item tag 0x0 [ 1547.928677][ T5954] playstation 0003:054C:0DF2.0055: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 1548.035117][T25624] loop2: detected capacity change from 0 to 7 [ 1548.050579][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1548.070492][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.079685][T25624] loop2: p1 p4 [ 1548.083233][T25624] loop2: partition table partially beyond EOD, truncated [ 1548.102093][ T9] usb 4-1: config 0 descriptor?? [ 1548.107616][T25624] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1548.127677][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1548.137816][ T5954] playstation 0003:054C:0DF2.0055: Invalid reportID received, expected 9 got 207 [ 1548.149791][ T5954] playstation 0003:054C:0DF2.0055: Failed to retrieve DualSense pairing info: -22 [ 1548.161829][T25624] loop2: p4 start 36 is beyond EOD, truncated [ 1548.170005][ T5954] playstation 0003:054C:0DF2.0055: Failed to get MAC address from DualSense [ 1548.182012][ T5954] playstation 0003:054C:0DF2.0055: Failed to create dualsense. [ 1548.203582][ T5954] playstation 0003:054C:0DF2.0055: probe with driver playstation failed with error -22 [ 1549.540258][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 1549.590847][ T9] usb 4-1: USB disconnect, device number 75 [ 1549.853832][ T9] usb 7-1: USB disconnect, device number 50 [ 1550.161031][T25646] vivid-000: disconnect [ 1550.353786][ T36] veth0_to_bond: left promiscuous mode [ 1550.765722][T25660] sctp: [Deprecated]: syz.0.4636 (pid 25660) Use of int in max_burst socket option. [ 1550.765722][T25660] Use struct sctp_assoc_value instead [ 1550.789803][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1551.005701][T25642] vivid-000: reconnect [ 1551.038069][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1551.071634][ T9] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 1551.089410][ T9] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.137408][ T9] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 1551.176355][ T9] usb 4-1: config 13 has no interface number 0 [ 1551.224187][ T9] usb 4-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1551.276003][ T9] usb 4-1: config 13 interface 50 has no altsetting 0 [ 1551.376715][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 1551.419434][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.437137][ T9] usb 4-1: Product: syz [ 1551.477260][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1551.477283][ T30] audit: type=1800 audit(1754952488.229:1991): pid=25673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4639" name="nullb0" dev="devtmpfs" ino=3853 res=0 errno=0 [ 1551.515218][ T9] usb 4-1: Manufacturer: syz [ 1551.535535][ T9] usb 4-1: SerialNumber: syz [ 1551.875535][T16481] usb 4-1: Failed to submit usb control message: -71 [ 1551.906262][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1551.936260][T16481] usb 4-1: unable to send the bmi data to the device: -71 [ 1551.971005][ T9] usb 4-1: USB disconnect, device number 76 [ 1551.992827][T16481] usb 4-1: unable to get target info from device [ 1552.018098][T16481] usb 4-1: could not get target info (-71) [ 1552.039990][T16481] usb 4-1: could not probe fw (-71) [ 1552.539612][T24320] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1552.701327][T24320] usb 7-1: Using ep0 maxpacket: 16 [ 1552.709020][T24320] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1552.718093][T24320] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.734846][T24320] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1552.746820][T24320] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1552.756778][T24320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.765210][ T5913] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1552.773356][T24320] usb 7-1: Product: syz [ 1552.777694][T24320] usb 7-1: Manufacturer: syz [ 1552.783698][T24320] usb 7-1: SerialNumber: syz [ 1552.859417][ T5983] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1552.937598][ T5913] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1552.945779][ T5913] usb 1-1: can't read configurations, error -71 [ 1553.009453][ T5983] usb 4-1: Using ep0 maxpacket: 8 [ 1553.020683][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1553.032363][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1553.044521][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1553.063632][ T5983] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 1553.073868][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1553.083963][ T5983] usb 4-1: Product: syz [ 1553.088218][ T5983] usb 4-1: Manufacturer: syz [ 1553.093844][ T5983] usb 4-1: SerialNumber: syz [ 1553.104730][ T5983] usb 4-1: config 0 descriptor?? [ 1553.118202][ T5983] redrat3 4-1:0.0: Couldn't find all endpoints [ 1553.182778][T25699] PID 25699 killed due to inadequate hugepage pool [ 1553.218824][T24320] usb 7-1: 0:2 : does not exist [ 1553.318526][ T9] usb 4-1: USB disconnect, device number 77 [ 1553.697252][T25718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4649'. [ 1553.942090][T24320] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1553.996565][T24320] usb 7-1: USB disconnect, device number 51 [ 1554.023590][ T9692] udevd[9692]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1554.275571][T25728] vivid-000: disconnect [ 1554.840781][T25723] vivid-000: reconnect [ 1555.912896][T25747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4656'. [ 1556.129588][T16339] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1556.351447][T16339] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1556.369293][T16339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.432626][T16339] usb 7-1: config 0 descriptor?? [ 1556.643752][T16339] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1556.679429][T16339] [drm:udl_init] *ERROR* Selecting channel failed [ 1556.725357][T16339] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1556.771433][T16339] [drm] Initialized udl on minor 2 [ 1556.799638][T16339] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1556.827748][T16339] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1556.847192][ T5938] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1556.865922][T16339] usb 7-1: USB disconnect, device number 52 [ 1556.873571][ T5938] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1557.054963][T25772] trusted_key: encrypted_key: master key parameter 'def.+ª²©yå¹’ault' is invalid [ 1557.075002][T25775] sctp: [Deprecated]: syz.5.4663 (pid 25775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1557.075002][T25775] Use struct sctp_sack_info instead [ 1557.130510][T25769] netlink: 'syz.3.4660': attribute type 12 has an invalid length. [ 1559.377189][T25800] ALSA: mixer_oss: invalid OSS volume '' [ 1559.953018][ T30] audit: type=1326 audit(1754952496.709:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25811 comm="syz.3.4673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ea138ebe9 code=0x0 [ 1560.739956][T25827] netlink: 'syz.7.4675': attribute type 4 has an invalid length. [ 1561.840943][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1561.858420][T25840] input: syz0 as /devices/virtual/input/input119 [ 1562.104655][T25850] delete_channel: no stack [ 1562.506098][T25856] binder: BINDER_SET_CONTEXT_MGR already set [ 1562.539274][T25856] binder: 25855:25856 ioctl 4018620d 200000000040 returned -16 [ 1564.339469][T19810] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1564.473651][T25889] af_packet: tpacket_rcv: packet too big, clamped from 2556 to 488. macoff=96 [ 1564.516312][T25889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4691'. [ 1564.530334][T19810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.548414][T19810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1564.592361][T19810] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1564.618098][T19810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.670731][T19810] usb 1-1: config 0 descriptor?? [ 1565.035744][T25909] loop6: detected capacity change from 0 to 7 [ 1565.061005][T25909] Dev loop6: unable to read RDB block 7 [ 1565.066749][T25909] loop6: unable to read partition table [ 1565.110087][T25909] loop6: partition table beyond EOD, truncated [ 1565.126590][T25909] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1565.132925][T19810] megaworld 0003:07B5:0312.0056: ignoring exceeding usage max [ 1565.160090][T25914] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1565.203871][T19810] megaworld 0003:07B5:0312.0056: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.0-1/input0 [ 1565.217630][T19810] megaworld 0003:07B5:0312.0056: no inputs found [ 1565.233759][T25913] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1565.336171][T19810] usb 1-1: USB disconnect, device number 95 [ 1565.488853][T25916] fido_id[25916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1565.536598][T25914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1565.563454][T25914] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1565.571314][T25914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1565.589039][T25914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1565.839603][T19810] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1565.849126][T24320] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1566.039564][T24320] usb 4-1: Using ep0 maxpacket: 32 [ 1566.044828][T19810] usb 6-1: Using ep0 maxpacket: 16 [ 1566.058813][T24320] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1566.069123][T24320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.078662][T19810] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.088991][T19810] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1566.123744][T24320] usb 4-1: config 0 descriptor?? [ 1566.130167][T19810] usb 6-1: config 1 has no interface number 1 [ 1566.221639][T19810] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1566.232317][T19810] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1566.245066][T19810] usb 6-1: config 1 interface 2 has no altsetting 0 [ 1566.257574][T19810] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1566.267255][T19810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.276713][T19810] usb 6-1: Product: syz [ 1566.285183][T19810] usb 6-1: Manufacturer: syz [ 1566.291167][T19810] usb 6-1: SerialNumber: syz [ 1566.419094][T24320] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1566.428851][T24320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1566.457939][T24320] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1566.475125][T24320] usb 4-1: media controller created [ 1566.522360][T19810] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1566.530673][T19810] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1566.552831][T19810] usb 6-1: selecting invalid altsetting 0 [ 1566.572537][T24320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1566.602429][T19810] usb 6-1: selecting invalid altsetting 0 [ 1566.623679][T25923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.654643][T25923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.698312][T19810] usb 6-1: USB disconnect, device number 124 [ 1566.729832][T24320] az6027: usb out operation failed. (-71) [ 1566.858096][T24320] az6027: usb out operation failed. (-71) [ 1566.896207][T24320] stb0899_attach: Driver disabled by Kconfig [ 1566.946439][T24320] az6027: no front-end attached [ 1566.946439][T24320] [ 1566.976311][T24320] az6027: usb out operation failed. (-71) [ 1567.003520][T24320] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1567.047566][T24320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input120 [ 1567.113770][T25936] netlink: 'syz.5.4703': attribute type 29 has an invalid length. [ 1567.118732][T24320] dvb-usb: schedule remote query interval to 400 msecs. [ 1567.134504][T24320] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1567.189766][T24320] usb 4-1: USB disconnect, device number 78 [ 1567.325539][T24320] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1567.559932][T11945] Bluetooth: hci2: command 0x0406 tx timeout [ 1567.639329][T11945] Bluetooth: hci3: command 0x0405 tx timeout [ 1567.645608][T11945] Bluetooth: hci1: command 0x0406 tx timeout [ 1567.652653][T11945] Bluetooth: hci4: command 0x0405 tx timeout [ 1567.689459][T25944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4705'. [ 1568.034867][T25948] vlan2: entered allmulticast mode [ 1568.051601][T24320] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 1568.060190][T25948] bond4: entered allmulticast mode [ 1568.229615][T24320] usb 1-1: Invalid ep0 maxpacket: 16 [ 1568.399897][T24320] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 1568.667111][T24320] usb 1-1: Invalid ep0 maxpacket: 16 [ 1568.824825][T25961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4710'. [ 1568.840994][T24320] usb usb1-port1: attempt power cycle [ 1569.005545][T25964] netlink: 'syz.6.4710': attribute type 2 has an invalid length. [ 1569.031923][T25964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4710'. [ 1569.191786][T24320] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 1569.250075][T24320] usb 1-1: Invalid ep0 maxpacket: 16 [ 1569.379421][T24320] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 1569.470234][T24320] usb 1-1: Invalid ep0 maxpacket: 16 [ 1569.481567][T24320] usb usb1-port1: unable to enumerate USB device [ 1570.037453][T25977] vivid-000: disconnect [ 1570.508360][T25972] vivid-000: reconnect [ 1571.194484][ T9] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1571.297835][T25992] netlink: 548 bytes leftover after parsing attributes in process `syz.6.4715'. [ 1571.379700][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1571.390343][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1571.432496][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1571.456302][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1571.486493][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1571.499707][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.508251][ T9] usb 6-1: Product: syz [ 1571.528464][ T9] usb 6-1: Manufacturer: syz [ 1571.539704][ T9] usb 6-1: SerialNumber: syz [ 1571.730702][ T9] usb 6-1: config 0 descriptor?? [ 1571.773486][T25985] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1571.805287][ T9] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 1571.862766][ T9] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 1571.907734][ T9] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 1571.914541][ T9] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 1571.927457][ T9] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 1572.078034][T25985] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4714'. [ 1572.133412][T25985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1572.395022][T26000] vivid-000: disconnect [ 1574.427551][T26016] fuse: Unknown parameter 'user_id½00000000000000000000' [ 1575.012865][T25981] vivid-000: reconnect [ 1575.039738][T19810] usb 6-1: USB disconnect, device number 125 [ 1575.056447][T19810] mcba_usb 6-1:0.0 can0: device disconnected [ 1575.190419][T26042] binder: BC_ATTEMPT_ACQUIRE not supported [ 1575.197965][T26042] binder: 26038:26042 ioctl c0306201 200000000300 returned -22 [ 1575.412716][T26052] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4729'. [ 1575.559702][T19810] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 1575.709881][ T5938] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1575.739444][T19810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1575.771332][T19810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.806184][T19810] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1575.827182][T19810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.858848][T19810] usb 6-1: config 0 descriptor?? [ 1575.939362][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 1575.946776][ T5938] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1575.970950][ T5938] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1575.980318][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1575.989669][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1576.000407][ T5938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1576.010488][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1576.029339][ T5938] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1576.042876][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.070438][ T5938] usb 4-1: config 0 descriptor?? [ 1576.302137][ T5938] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1576.309350][T19810] usbhid 6-1:0.0: can't add hid device: -71 [ 1576.326341][T19810] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1576.384313][ T5938] usb 4-1: USB disconnect, device number 79 [ 1576.400025][T19810] usb 6-1: USB disconnect, device number 126 [ 1576.454615][ T5938] usblp0: removed [ 1576.512567][T26060] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 1576.524600][T26060] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 1576.533194][T26060] CPU: 0 UID: 0 PID: 26060 Comm: syz.0.4731 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1576.543786][T26060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1576.553962][T26060] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1576.559872][T26060] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1576.581484][T26060] RSP: 0018:ffffc9000ce17498 EFLAGS: 00010206 [ 1576.587740][T26060] RAX: dffffc0000000000 RBX: ffffffff8b7bcb2e RCX: 7f514a882015f800 [ 1576.595723][T26060] RDX: 0000000000000000 RSI: ffffffff8b7bcb2e RDI: 0000000000000003 [ 1576.603877][T26060] RBP: ffffffff820ff67e R08: 0000000000000001 R09: 0000000000000000 [ 1576.612035][T26060] R10: ffffc9000ce177e0 R11: fffff520019c2efe R12: 0000000000000000 [ 1576.620180][T26060] R13: 0000000000000018 R14: 0000000000000018 R15: 0000000000000001 [ 1576.628432][T26060] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1576.637484][T26060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1576.644100][T26060] CR2: 000055f464654008 CR3: 0000000044e38000 CR4: 00000000003526f0 [ 1576.652191][T26060] Call Trace: [ 1576.655482][T26060] [ 1576.658414][T26060] __kasan_check_byte+0x12/0x40 [ 1576.663371][T26060] lock_acquire+0x8d/0x360 [ 1576.667987][T26060] ? rcu_is_watching+0x15/0xb0 [ 1576.672761][T26060] _raw_spin_lock+0x2e/0x40 [ 1576.677449][T26060] ? __pte_offset_map_lock+0x13e/0x210 [ 1576.682919][T26060] __pte_offset_map_lock+0x13e/0x210 [ 1576.688501][T26060] unmap_page_range+0xc81/0x4370 [ 1576.693750][T26060] ? __pfx_unmap_page_range+0x10/0x10 [ 1576.699134][T26060] ? mas_find+0xb0e/0xd30 [ 1576.703731][T26060] ? unmap_vmas+0x144/0x580 [ 1576.708351][T26060] unmap_vmas+0x399/0x580 [ 1576.712686][T26060] ? __pfx_unmap_vmas+0x10/0x10 [ 1576.717576][T26060] exit_mmap+0x248/0xb50 [ 1576.721834][T26060] ? uprobe_clear_state+0x20f/0x290 [ 1576.727039][T26060] ? __pfx_exit_mmap+0x10/0x10 [ 1576.731810][T26060] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1576.737565][T26060] ? __pfx_exit_aio+0x10/0x10 [ 1576.742467][T26060] ? uprobe_clear_state+0x274/0x290 [ 1576.747685][T26060] __mmput+0x118/0x420 [ 1576.751857][T26060] exit_mm+0x1da/0x2c0 [ 1576.755936][T26060] ? __pfx_exit_mm+0x10/0x10 [ 1576.760623][T26060] ? rcu_is_watching+0x15/0xb0 [ 1576.765425][T26060] do_exit+0x648/0x2300 [ 1576.769619][T26060] ? preempt_schedule_common+0x83/0xd0 [ 1576.775098][T26060] ? preempt_schedule+0xae/0xc0 [ 1576.780130][T26060] ? __pfx_do_exit+0x10/0x10 [ 1576.784729][T26060] ? preempt_schedule_thunk+0x16/0x30 [ 1576.790128][T26060] do_group_exit+0x21c/0x2d0 [ 1576.794729][T26060] __x64_sys_exit_group+0x3f/0x40 [ 1576.799796][T26060] x64_sys_call+0x21f7/0x2200 [ 1576.804492][T26060] do_syscall_64+0xfa/0x3b0 [ 1576.809005][T26060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.815244][T26060] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1576.821399][T26060] ? clear_bhb_loop+0x60/0xb0 [ 1576.826212][T26060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.832110][T26060] RIP: 0033:0x7fa2ebb8ebe9 [ 1576.836615][T26060] Code: Unable to access opcode bytes at 0x7fa2ebb8ebbf. [ 1576.843815][T26060] RSP: 002b:00007fa2ebedfd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1576.852331][T26060] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2ebb8ebe9 [ 1576.860308][T26060] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1576.868518][T26060] RBP: 00007fa2ebedfdec R08: 0000001eebedfe7f R09: 00000000000927c0 [ 1576.876642][T26060] R10: 0000000000000238 R11: 0000000000000246 R12: 00000000000000ce [ 1576.884803][T26060] R13: 00000000000927c0 R14: 0000000000180942 R15: 00007fa2ebedfe40 [ 1576.892781][T26060] [ 1576.895814][T26060] Modules linked in: [ 1576.900925][T26060] ---[ end trace 0000000000000000 ]--- [ 1576.906427][T26060] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1576.912978][T26060] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1576.933550][T26060] RSP: 0018:ffffc9000ce17498 EFLAGS: 00010206 [ 1576.939953][T26060] RAX: dffffc0000000000 RBX: ffffffff8b7bcb2e RCX: 7f514a882015f800 [ 1576.948259][T26060] RDX: 0000000000000000 RSI: ffffffff8b7bcb2e RDI: 0000000000000003 [ 1576.956814][T26060] RBP: ffffffff820ff67e R08: 0000000000000001 R09: 0000000000000000 [ 1576.965066][T26060] R10: ffffc9000ce177e0 R11: fffff520019c2efe R12: 0000000000000000 [ 1576.973298][T26060] R13: 0000000000000018 R14: 0000000000000018 R15: 0000000000000001 [ 1576.981430][T26060] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1576.990649][T26060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1576.997266][T26060] CR2: 000055f464654008 CR3: 0000000044e38000 CR4: 00000000003526f0 [ 1577.006798][T26079] vivid-000: disconnect [ 1577.012269][T26060] Kernel panic - not syncing: Fatal exception [ 1577.018769][T26060] Kernel Offset: disabled [ 1577.023201][T26060] Rebooting in 86400 seconds..