last executing test programs: 6m31.43105241s ago: executing program 4 (id=3003): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x9, 0x5, 0x9d}) r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x5, 0x40001) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000280)={0x2, 0xd45b, 0x5, 0xd, '\x00', '\x00', '\x00', 0x10001, 0x351a, 0x9, 0x8, "0ecb038a58e8946509a59972906023c0"}) dup(r2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f00000018c0)=""/4096, 0x3d}) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$vcsa(0xffffff9c, &(0x7f0000000300), 0x4480, 0x0) request_key(&(0x7f0000000240)='encrypted\x00', 0x0, 0x0, r8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r8) r9 = socket(0x2, 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000000)={0xc2a10a980d0dcec8}) 6m27.868008212s ago: executing program 4 (id=3011): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000240)={0x3a}, 0x8) (async, rerun: 64) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r2 = memfd_secret(0x80000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\n\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd70008000000002000000080061000000000005003e00f5"], 0x24}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) (rerun: 32) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xb0, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x28, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{0x18}, {0x1, 0x1}, {0x24}, {0x12}, {0x24}, {0x6b, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8001}, @NL80211_ATTR_MESH_SETUP={0x3c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xc}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4080}, 0xc000) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) (async, rerun: 32) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') (rerun: 32) preadv(r8, &(0x7f0000002280)=[{&(0x7f0000002780)=""/133, 0x85}, {&(0x7f0000002840)=""/231, 0xe7}], 0x2, 0x10001, 0x7) (async, rerun: 32) syz_emit_ethernet(0x116, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x3, 0x16, 0x108, 0x66, 0x0, 0xa, 0x6, 0x0, @local, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x13}]}}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xf, 0x8, 0xac0, 0x0, 0x400, {[@generic={0x13, 0x11, "fd5e9db82817b2c15823d92f9e1f75"}, @mss={0x2, 0x4, 0x9ec}, @exp_fastopen={0xfe, 0xe, 0xf989, "90df9c5f4e84cd6dd30d"}, @sack={0x5, 0x2}, @generic={0x1c, 0x2}]}}, {"1de55e87d105d6d16997deb40ed1c49316b7ed5f83b2ec9371cdddcf2ac696402588e51856845dadac02101a3079fff6435b24cd3654334ca48f84c40a205849e8d8b6081f352f01ccff7029dee3f7b77359f2c9d8b08b2d78e494ada17c582f2295d01eda8b3af87d11e729507e18b5126ca8e69061fe9f96e26e396f1212a0fd459782c8c2d2f1dac540fa0a29e124342aca626ba581aed301fd2e7f614a96d2998bd3017da372c8e699c80bee96fa"}}}}}}, 0x0) (rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) (rerun: 64) 6m23.595509013s ago: executing program 4 (id=3017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000280)={0x0, 0x8, "6dadd3b51567f3aa46f0645bf9d84fade7cf8c0e3580f1c8cc4d0192a4ef5379", 0x3800, 0x100, 0xe6db, 0x6, 0x2, 0x7, 0x800c6, 0x0, [0x7, 0x400, 0x6, 0x5]}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba247886a9291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e3364871ee77ba64ae799a29d42c4365f8b9928eb15a7523f43020d9803060c8221d4d8f691ac14187fa7fe929eada4e16ac2eaef502c9912c59bc1f461aa032057030e4f8fa907f80b40638c022cf66b16ca7a05c35cc075ba7c93d6556c3e736a16f24f4561115962be30c4d6a248df33862d98e3b802f20ecd8348dce1149f0d11a55345a8c6410759ab7b3da2a0813df6b07385acd40a9600aa4da6eb2cc38c522bb135da7ee2c0522a4c83c97380d83c919a34fbe774744da402cff16093328e1309bbfbe881a1e9e1221a51dbef9372f0078843e95887c91fe62efc46d25fc84109f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) syz_emit_ethernet(0xff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x3, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}, {0x0}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5, 0x0, 0x0, 0xa6}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2e6", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)}, {&(0x7f0000000440)="028d9a7c7dc3d9decf249e204d8fd31920b3ceaf81d132403d926018086f8183304c9ba0791798c013e7d20c659eaa2171981edb1c37", 0x36}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="cfe8", 0x2}, {&(0x7f0000000940)="01f6e883f4aa68617c", 0x9}], 0x2, &(0x7f0000000880)}}], 0x5, 0x4000000) sendmmsg$inet(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="8c", 0x1}, {0x0}, {&(0x7f0000000840)="e2", 0x1}], 0x3}}], 0x1, 0x40088c0) socketpair(0x2c, 0x3, 0x0, 0x0) 6m20.584163556s ago: executing program 4 (id=3026): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000001c000480180001800800010066696200"], 0x70}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x54}}, 0x0) 6m19.861744755s ago: executing program 4 (id=3027): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000140)=""/205, 0xcd}], 0x1, 0xfffffffb, 0xbf6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000030000000000000000000000094000100ffffffff950000000000000040af8b566a3f"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r3, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x11008000}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000040)="c0", 0x1, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = syz_open_dev$radio(&(0x7f0000000440), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000080)={0x8000007, 0x125080f0d0f47a09, "000097cba2760700000000f80000000000000001390d3af6d74de96f48ff089c", 0xfffffffe, 0x80000000, 0x3}) 6m14.447856945s ago: executing program 4 (id=3041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x2, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, 0x4e23, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f0000000080)="ed463b47a5e15be18f0190e400a6cb790b1936018db66b35d292824c728b1517f91069e7ab23b11bef629a69498cb6a195b05d6aaf8673b3b0bfc4b0eed382c042f46c74b3eee646bc39bda0a9dac149e13d8bed49c206c5b5c84608062af97bde88ec091389baddaf5532323d70a984e14fd56d45b29cd049143c68cbfdf7bce491b98a03eb43e6cb5bc05444d32c79635c7c24e1ba8b256efa97cd013f129613fafdf274e7c365b4841b17b72331183df97b540eb25880548b2941fee9ef4bb4092693f348cc251b834b0f3ef456", 0xcf}, {&(0x7f0000000180)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5a83a57fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db637f2f0e1c2a9cd22bb3c50c52b5a2d92e17cde2cc5e10fc9a3c2310e576efefe1320e13e3ffaec8c97b930e56806ec3e54eeecc16511f9c8b6d9d4a0e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136d8bc3433069a2ad2c76dd", 0xa4}, {&(0x7f0000000500)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca3df268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f1a0dba3814e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818817b4ace348ba3a9e496f461dd87b46703be45be02f1542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb988", 0xeb}, {&(0x7f0000000340)="c83c", 0x2}], 0x5}, 0x20000090) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) 5m59.153166494s ago: executing program 32 (id=3041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x2, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, 0x4e23, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f0000000080)="ed463b47a5e15be18f0190e400a6cb790b1936018db66b35d292824c728b1517f91069e7ab23b11bef629a69498cb6a195b05d6aaf8673b3b0bfc4b0eed382c042f46c74b3eee646bc39bda0a9dac149e13d8bed49c206c5b5c84608062af97bde88ec091389baddaf5532323d70a984e14fd56d45b29cd049143c68cbfdf7bce491b98a03eb43e6cb5bc05444d32c79635c7c24e1ba8b256efa97cd013f129613fafdf274e7c365b4841b17b72331183df97b540eb25880548b2941fee9ef4bb4092693f348cc251b834b0f3ef456", 0xcf}, {&(0x7f0000000180)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5a83a57fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db637f2f0e1c2a9cd22bb3c50c52b5a2d92e17cde2cc5e10fc9a3c2310e576efefe1320e13e3ffaec8c97b930e56806ec3e54eeecc16511f9c8b6d9d4a0e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136d8bc3433069a2ad2c76dd", 0xa4}, {&(0x7f0000000500)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca3df268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f1a0dba3814e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818817b4ace348ba3a9e496f461dd87b46703be45be02f1542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb988", 0xeb}, {&(0x7f0000000340)="c83c", 0x2}], 0x5}, 0x20000090) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) 2m42.805204799s ago: executing program 3 (id=3410): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1b, 0x0}}], 0xef3a92084c7ae8b, 0x2004f794) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x800, 0x9) bind$unix(r6, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0xc5) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x3) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r2) socket$inet6(0xa, 0x2, 0x0) 2m41.28501386s ago: executing program 3 (id=3413): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) 2m40.508043424s ago: executing program 3 (id=3415): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() setpgid(r2, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$FITHAW(r4, 0xc0045878) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xf2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0xa0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newlink={0x1a4, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60900, 0x4064}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1}, @IFLA_CARRIER={0x5, 0x21, 0x68}, @IFLA_LINKINFO={0x11c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9426}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x2, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x7, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffd6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x39ff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x97b}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x679, 0x10}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x4, 0xd33}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0x4}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xeb, 0x1, {0xe33, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xbf76, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x2}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_MAP={0x24, 0xe, {0x4ee, 0x80000000, 0xfffffffffffffffc, 0x3, 0x3, 0x99}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x35}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xc}, @IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x0, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 2m39.934301903s ago: executing program 3 (id=3416): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x301, 0x0) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x100, &(0x7f00000002c0)=0xffffdffc, 0x0, 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x779ce5a2) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r6, 0x4fc1, 0x0, 0x24, 0x0, 0xff65) syz_open_dev$usbfs(0x0, 0x76, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, 0x0, 0x0) 2m36.532070885s ago: executing program 3 (id=3423): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1b, 0x0}}], 0xef3a92084c7ae8b, 0x2004f794) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x800, 0x9) bind$unix(r6, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0xc5) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x3) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r2) socket$inet6(0xa, 0x2, 0x0) 2m35.023965708s ago: executing program 3 (id=3426): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) syz_open_dev$sg(0x0, 0x3, 0x180) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0xc001, 0x10000, 0x1, 0x9}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4a) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') unshare(0x2000400) openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x2183, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x2183, 0x0) fadvise64(r6, 0x3, 0x100, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000380)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0xfffffffffffffff8) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80280, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', 0xfffffffffffffffe}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', 0xfffffffffffffffe}) 2m19.346449615s ago: executing program 33 (id=3426): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) syz_open_dev$sg(0x0, 0x3, 0x180) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0xc001, 0x10000, 0x1, 0x9}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4a) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') unshare(0x2000400) openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x2183, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x2183, 0x0) fadvise64(r6, 0x3, 0x100, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000380)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0xfffffffffffffff8) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80280, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', 0xfffffffffffffffe}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', 0xfffffffffffffffe}) 15.514453866s ago: executing program 5 (id=3686): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0xd}], 0x0, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100)=0xfffffffb, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x1080000, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) 12.766246266s ago: executing program 1 (id=3692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x100) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f00000000000000000001000000000000"], 0x64}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000000000000000000001635bb94df7201cc5c3766e6283d22ee7e38d1a35b477f5a99d5aab90de6c70e96c8101c575b5857ec965f4ab5d6e0"], 0x1c}}, 0x44044) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x19cce99f87779c7, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x92, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x2, 0x9, {0x7, 0x25, 0x1, 0x80, 0x8, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x82, 0x5, 0x6}}}}}}}]}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) socket$alg(0x26, 0x5, 0x0) syz_clone(0x800000, &(0x7f0000000280), 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)="3230257fba12322ed5573507928e6f91d7a7b7142217cd771c90e685d7cdbcb9cdc61c3e02315a3616788e8e7b759d11d93a02c816bee155a648ccb0a063cd7c7fddb8c5") 9.406245048s ago: executing program 5 (id=3696): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.644364053s ago: executing program 2 (id=3698): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001b80)=""/200, 0xc8}, {&(0x7f0000000840)=""/236, 0xec}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/257, 0x101}, {&(0x7f0000000540)=""/203, 0xcb}], 0x7}, 0x80000000}], 0x4, 0x40002160, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x18}}}}}, 0x0) (async, rerun: 64) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (rerun: 64) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x40002, 0x0) (rerun: 32) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESOCT], 0xfffffdd5) (async) msgget$private(0x0, 0x101) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) (async) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) 8.52071853s ago: executing program 5 (id=3699): syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b7c447bf9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e7fccfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992fecfc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc9, 0x0, 0x8000000, 0x0, 0x0, 0x81, 0x1000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_size(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, {0x0, 0x2, 0x7f, 0x1b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000040)="0100000002fe000000eaff06fdffffff5451cb9ac4276ab55a2a610b00", 0x1d, 0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x7d, 0x1, 0x3, 0x1, 0x6, 0x6, {0x9, 0x21, 0xffe0, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x10, 0x2}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xd, 0x9, 0x6, 0x40, 0x1}, 0x141, &(0x7f00000000c0)={0x5, 0xf, 0x141, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x6, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x6, 0xb0f4}, @ssp_cap={0x1c, 0x10, 0xa, 0x26, 0x4, 0x6, 0xf, 0x9ae, [0xc0, 0xff0000, 0x7f800f, 0xff0030]}, @generic={0xfb, 0x10, 0x1, "4a7283bb730030a9929ddb71c83c035417659c680643d10f27ba1ac909d5a0923f12eb5d96129676cd52264217364f605e8f16f153fff4b2b74358f06960399179cad42a997b99d9a7603766f06f462259cd112505130b3355fa0410c8020d5e2ac7713fc6dbe4e5960e78ffb3eb8281005952fcbb6e6e190974c758e6686f9f1e4672f37d7c24e533a585381dffff2fcf82168595219b46cde1bd275c64e3f91d3c61a39104500be9781230f256507ef79f9c3e0e6ef5dce9f63baa29542a50822e23269aa6d06adbe0f2a107423fa82ca04cd418eeb9afb03fcc258a877326319bc1c735fb0f4e7471a5ea6c25a337cc56a7f48bf8e957"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f88dfb2852a884fd9a08350d11f37d05"}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0xf, &(0x7f00000002c0)=@string={0xf, 0x3, "8eba6e8bfff829d9a57804d4df"}}]}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000340)=0x7f) 7.9607822s ago: executing program 2 (id=3702): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2c}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2c}}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x62b31792162c0e72, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r3, 0x3, r1, 0x6, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r3, 0x3, r1, 0x6, 0x80000}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r1) (async) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x8, 0xe4382) (async) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x8, 0xe4382) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f00000002c0)=[{0x0, 0x0, 0xfe, &(0x7f00000005c0)="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"}, {0x1, 0x2c01, 0xf4, &(0x7f0000000140)="ba613ff3842996f7ed4718e5708c19cd0f6a71779fa5e7bb3ac8056f289431b3078e98764cfa6a31fc1522836e023945d61caaa959d5dd849acf48ef0ed632873b6e22b7e2a173b470f366772a323c8caeac9527948ba8f4df1f8c7a87c61b1e0ede069926aa0fe58b9f10a4b0c6d0528faee8fa024eb798e9cf10a9d2ff35e4180093ad05a6b68668244d17641d2caadcfe330bca85407ac4f6b94ece191379c645f19b4cf696566a79a67df4a98ba77b5bdc6194a90279bf997685d7be4123a7633f72a0b3ae9daf95aab3e71431823cfbdb8edb8c5b0562c3bd70c63d413537cca3bdfacdf95cdf320b8a5fadb418297a67a7"}, {0xb, 0x401, 0x6, &(0x7f0000000280)="05bfce5c2d8d"}, {0x6, 0x8000, 0xfd50, &(0x7f00000003c0)="200c3c1e19a1f44425124bf1d651f24db2e091ac09c3ded0503ee4e49fb60197d3e754f0670e156b580c7ab9afae65cf43952a373aa3761c453f5085c68a81d370ba58831f5151e7c3fb76a6d174831fc2dccea95c4df5c7379d6d0196044d07b08c3eb7334c1289ee6ae1d5f089da9aa6aa323404beb537df1fd09664b0b46ab113cdd5cff9011c965295892294499e43910761bbb69192cca4aa9ae7cb08e52c2227fdd4cef4a3f68e9b176e15c6deb0f67b5530864c94cd97686a5de3471315e431e5fc888c969f322b6abdd93b5834525a450d473fdab0"}], 0x4}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002205000000aa1aefa9f4"], 0x0}, 0x0) 7.944940493s ago: executing program 1 (id=3703): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 7.660640779s ago: executing program 1 (id=3704): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000000300)={0x2, [0x79de, 0x5, 0xffff8001], [{0x7, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xe69, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x200, 0x1, 0x0, 0x1, 0x1}, {0xcfe8, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0xff, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x100}, {0x10000, 0x5, 0x0, 0x1}, {0x69, 0x7, 0x1, 0x1}, {0x5, 0x82c, 0x1}, {0x1, 0xfffffffe, 0x1, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x0, 0x1, 0x1}], 0x7}) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 7.571874707s ago: executing program 6 (id=3705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000090) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) 7.434053085s ago: executing program 2 (id=3707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x10}}}}]}, 0x38}}, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x1, 0x0, &(0x7f00000004c0)="f4"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0xfc}], 0x0, 0x0, 0x0}) 7.094465683s ago: executing program 2 (id=3709): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x9c, 0x4a, 0x4, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, r4, 0x2}, [@IFAL_LABEL={0x8, 0x2, 0x13}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) r9 = eventfd2(0x5, 0x80801) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) r10 = eventfd2(0x5, 0x800) close(r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000000)={0x1, r10}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 6.804719336s ago: executing program 1 (id=3710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0x1070bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x5}}]}]}]}, 0x50}}, 0x0) 5.350808988s ago: executing program 2 (id=3711): syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f00000000c0)='A', 0x1) close(0x3) r2 = syz_io_uring_setup(0x6366, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010, 0x0, 0x389}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unshare(0x24060400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) tee(r5, r6, 0x6, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x5a, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x2, 0x0, {0x2}}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8880, 0xa1) lseek(r11, 0x100, 0x0) getdents(r11, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d, 0x0, r7}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) 5.314740741s ago: executing program 1 (id=3712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20, 0x8004}}], 0x1, 0x868208eba740e016) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r3, 0x89e1, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xffff, @empty}, 0x1c) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fremovexattr(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, &(0x7f00000000c0)=0xc8) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 5.203898071s ago: executing program 5 (id=3713): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0xdddd0000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0xdddd0000, 0x101000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000600)={0xdddd1000, 0x10000}) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x1}) fcntl$dupfd(r3, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x6128bf36}}, './file0\x00'}) ioctl$VIDIOC_G_ENC_INDEX(r6, 0x8818564c, &(0x7f0000000700)) getsockopt$sock_int(r2, 0x1, 0x2d, 0x0, &(0x7f00000006c0)) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x68, 0x1e7d, 0x2c24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe0, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0xd7, {0x9, 0x21, 0x7, 0xa2, 0x1, {0x22, 0xf3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x6, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x80, 0x4, 0x5}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0x6, 0xc, 0xbf, 0x7}, 0x3d, &(0x7f0000000140)={0x5, 0xf, 0x3d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x9, 0x3, 0x7, 0x53}, @ssp_cap={0xc, 0x10, 0xa, 0xc7, 0x0, 0x0, 0xf0f, 0x7ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0xce, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "00f19b66c4ec07d683dbbc84840ecdae"}]}, 0x4, [{0x2d, &(0x7f0000000180)=@string={0x2d, 0x3, "e8b354d1747a2ed6a57ec1a4fa0507ed2117537a414d3720bb888830033f1bd1e33e7de0445f201be7901a"}}, {0x25, &(0x7f00000001c0)=@string={0x25, 0x3, "8846d6a20bfdd919ee5682ba9cbb5f01d23eb6f68e8fb526c9d6e531ef830c68884604"}}, {0x58, &(0x7f0000000200)=@string={0x58, 0x3, "df518637e6b671bd9a16b9c6280535549b62e09f01d4417f58ba850695702ebb8bf06a6336001217ed15ab6b3f500d39e70785b919e777dcfe2c1194fa950d138bb512a05cf324e40b611ea0032c95ddc5af6179e84f"}}, {0x49, &(0x7f0000000280)=@string={0x49, 0x3, "b16d9a0b187b3f91a8656a348440ecace6a5063fd96a77e8b1ddcf6e8ab9bff7cdfd088143a4400363fe7df438028350efec229dae83e46a854d050a7b508df2548d2a8406066d"}}]}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, &(0x7f00000000c0)={0x0, 0x30, 0x5, {0x5, 0x1, "dcdacc"}}, 0x0, 0x0, 0x0}, 0x0) 3.76155098s ago: executing program 0 (id=3715): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x24020400) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0xffffffffffffffe9}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3.163970122s ago: executing program 6 (id=3716): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000010000000000080000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000d00000007600000000000100270000000000000095000000000000000000a58fc9093e220f8900f3c474313bd69170d74a50a7eaa3da9dbfc07698cc25105bd66a97a236bc41073b6ecef48f2560cbb52ac44b7eb68c77a63aa393ad73bc07000049e4b4fe"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000400)=ANY=[], 0x1df) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r5 = getpgrp(0xffffffffffffffff) sched_setscheduler(r5, 0x3, &(0x7f0000000240)=0x9) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', r6, 0x29, 0x9, 0x81, 0x7, 0x24, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3, 0x8}}) fcntl$getownex(r4, 0x10, &(0x7f0000000280)) 2.864232787s ago: executing program 0 (id=3717): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f4", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT, @ANYBLOB=',group_']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 2.795393799s ago: executing program 6 (id=3718): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000880)=""/231, 0xe7}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f0000000b00)=""/4116, 0x1014}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000000a00)=""/218, 0xda}, {&(0x7f0000000080)=""/177, 0xb1}], 0x7}, 0x80000000}], 0x4, 0x10000, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14) (async) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x6, 0x2, 0x0, r5}, 0x10) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a9f4600000000000900000200000028000480240001800b0001006578746864720000140002800800064000000001080004400000000c0900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) (async) pwrite64(r1, &(0x7f0000000240)="ab181ea4125fa9a4adb3f55cff852a1223ef19fe9a7884d648f5f902aa6b0617636ded99e310788f6d7cc2768f4521279409", 0x32, 0x2) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f00000001c0)) execveat(r8, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x100) (async, rerun: 32) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000340)={0x0, 0x2, "1fcc1916e589ce765b1a25fff57f255f21635f2a834703c052edfb636c89cc59", 0x1ff, 0xc5d5, 0x807, 0xf693, 0x8001, 0x7, 0xe, 0x9, [0x6b1, 0x6, 0x5]}) (rerun: 32) 2.5838017s ago: executing program 5 (id=3719): r0 = syz_open_pts(0xffffffffffffffff, 0x430200) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x8, "f90366bbf2065015e74679c985d2d2b4ca8d2754e9f2b4ec1c4cad47315979d4", 0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r3, &(0x7f0000000180)='\\,+[]:[#--\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, &(0x7f00000001c0)={0x20, 0xc, 0x102, {0x102, 0x1, "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"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000340)={0x0, 0x22, 0x9, {[@local=@item_012={0x1, 0x2, 0xa, "85"}, @global=@item_012={0x1, 0x1, 0x0, "db"}, @global=@item_4={0x3, 0x1, 0x6, "b4c9917b"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x635}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0x14, 0xff, "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"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x1, 0xbe, "a60d3e111ea1815fdb74e78e9f8e05cd245b2a6f453609e5847427ed572d667dee7e09f819147e1cba7d8faaf92a205aa5b01d92c0e581e220b36b424319fb5029746d5c340536efe72c2e5ed46e565dcb2319c64d0c202ce9a119ad99034a039008ba982a937224ee10383fcfa896fe44742216528fcbd7383da87f6bdddd29c9f0f3e8bbb281fbc6b268a77aa674caeea51e8ccea7b379e49872b9f2dfec073a2153ec7ee4fe49e3fd23997cb89ee8de8479ad262a26e80f019dbaa52d"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x2}}) r4 = syz_open_dev$vcsn(&(0x7f0000000740), 0x0, 0x20001) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000780)={0x0, 0x0, 0x0, @raw}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x6, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x90, 0x8, 0x8, 0x4}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f00000009c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r4) socket$pppl2tp(0x18, 0x1, 0x1) readv(r1, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/125, 0x7d}, {&(0x7f0000000cc0)=""/202, 0xca}], 0x2) r8 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x1, &(0x7f0000000e00)) fcntl$lock(r1, 0x24, &(0x7f0000000e40)={0x0, 0x4, 0x4, 0x5, r8}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000e80)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@nat={'nat\x00', 0x1b, 0x5, 0x568, 0x358, 0x0, 0xffffffff, 0x358, 0x358, 0x498, 0x498, 0xffffffff, 0x498, 0x498, 0x5, &(0x7f0000000ec0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xa}}, @common=@mh={{0x28}, {"ec76", 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@multicast2, @ipv4=@private=0xa010101, @icmp_id=0x64, @port=0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv4=@remote, @icmp_id=0x68, @gre_key=0x200}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0xfffffff7, 0xfffffffe], 0x4, 0x30, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@local, @port=0x4e21, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, '9Z', 0x1}}, @common=@eui64={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@loopback, @ipv6=@loopback, @gre_key=0x6, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001540), 0x204802, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r9, 0xc0186419, &(0x7f0000002980)={0x5, &(0x7f0000001580)=""/92, &(0x7f0000002900)=[{0x401, 0x53, 0x7, &(0x7f0000001600)=""/83}, {0x4, 0x1000, 0x4, &(0x7f0000001680)=""/4096}, {0x2c1, 0xc8, 0x5, &(0x7f0000002680)=""/200}, {0x1, 0xfd, 0xb, &(0x7f0000002780)=""/253}, {0x3, 0x56, 0x101, &(0x7f0000002880)=""/86}]}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000002b40)={0x8, 0x2, 0xa, 0x0, 0x0, [{{r4}, 0xbe}, {{r1}, 0xec}, {{}, 0x8}, {{}, 0x6a5}, {{}, 0x2}, {{r9}}, {{r5}, 0xfffffffffffffffd}, {{}, 0x8000}, {{r6}, 0xfff}, {{r3}, 0x8}]}) 2.426337469s ago: executing program 1 (id=3720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) close(r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004400)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000010680)={0x0, 0x0, &(0x7f0000010640)={&(0x7f0000005880)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x78}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000940)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000080)={r9, 0x3, r8, 0x120000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000040)={r9, 0x1, 0x3}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x23) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) 2.275559637s ago: executing program 6 (id=3721): memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8114}, 0x8840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000002200", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) 2.044057265s ago: executing program 0 (id=3722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0x1070bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x5}}]}]}]}, 0x50}}, 0x0) 1.671976287s ago: executing program 5 (id=3723): syz_usb_connect(0x6, 0x7a, &(0x7f00000000c0)=ANY=[], 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffff, 0x800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000500)) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a74000000060a09040000000000000db7b75b000002000003400004803c000180090001007866726d000000002c000280080002400000000005000300000000000800024000000003050003000200000008000140000000020900010073797a30000000848f1b81000900020073797a3200000000050007402200000014000000110001000000000000000000"], 0x9c}}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @dev}}, 0x24) madvise(&(0x7f0000950000/0x1000)=nil, 0x1000, 0xe) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$I2C(&(0x7f00000001c0), 0x8, 0x6100) mknod(&(0x7f0000000240)='./file0\x00', 0x800, 0x8) utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x2710}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) write$cgroup_int(r6, &(0x7f0000000040)=0x902, 0x12) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000280)={0x8, 0x8, 0x1800, 0x0, "04160fe498815ac771b909c54479bcfb23a96e94020df5c055e113e3af1f8be9"}) socket(0x25, 0x6, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x70, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x1}) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.63505844s ago: executing program 6 (id=3724): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.56083632s ago: executing program 0 (id=3725): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0xe, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000300)=0xffffde70, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) r4 = syz_open_dev$vbi(&(0x7f0000000580), 0x2, 0x2) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000005c0)={0x1, 0x100, 0x4, {0xffffff80, 0x3e3, 0xfffffffb, 0xbf}}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) r6 = dup(r5) read$usbmon(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000ec000000ec000000020000000f0008000013020000000a00000001000000040000000600000004000000080000000800000001000000070000000700000003000000270000000500000006000000ff0000000c00000000000000070000000e00000002000000080000000100000001010000bf5d00000d0000000000000b05000000000000000a00000d0000000005000000000000000e00000004000000070000000400000003000000040000000b000000000000000e000000050000000c0000000000000009000000030000000e000000010000000200000004000000070000000000000b0100"/262], 0x0, 0x106, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.251836805s ago: executing program 6 (id=3726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000090) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) 1.146012411s ago: executing program 0 (id=3727): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0xf030000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x7fff, '\x00', @value64=0x2}}) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f0000000700)=[{{&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000640), 0x3, &(0x7f0000000440)=""/97, 0x61}, 0x6}], 0x1, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x20000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100000, 0x0, {0x77359400}, {0x5, 0x0, 0x0, 0x0, 0x4}, 0x20000, 0x1, {0x0}, 0xfffffffe}) (async, rerun: 64) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) syz_usb_connect(0x6, 0x797, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x0, 0x70, 0x3, 0x8, 0x8}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x8, [{0xe6, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44d}}, {0x100, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x411}}, {0xf2, &(0x7f0000000740)=@string={0xf2, 0x3, "8b5757e7f954cd8cb39c48560c5e3f3b4482c0e6471ba54bb1b4c8fcfd9f4a1eafd958f975b2db04ad2881da748462a8edb2bbe9c0b6dc7afd96f59099a367d2a00d50e1176ff6388f28943e6df818d2943d1efa17680807f51476c8cf3760e4fbe1dc7f357096027b08d45e4f4b80c0456c31e5f46673f635788f85fb68e47cf33ccd68764b544efd5917043170ced4bd23127a9c2379767f7f4a195d5e9b05aff346dd84c188981988a80f96ac26b3ea8c794f70f191ee9fe0156abcc888858c547b10b5575131bb734a0366bfc265c1db93463101126950c8d01cb76ff4620c6786902093db5a035e0d1163cc37e7"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x280a}}]}) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x1f, 0x3400, 0x0, 0xff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000002100)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a098cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a36e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) (rerun: 32) ioctl$sock_inet_SIOCSARP(r6, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x8, {0x2, 0x0, @multicast2}, 'veth1_virt_wifi\x00'}) (async) r7 = socket(0x6, 0x1, 0x7ffffffd) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x3d, 0x6, 0x4, 0x4, 0x0, 0xc, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6]}}) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8918, 0x0) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r8, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000100)=0x1) (async) write$dsp(r8, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 708.236529ms ago: executing program 0 (id=3728): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4ea3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @local, 0x0, 0x4}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1b, 0x0}}], 0xef3a92084c7ae8b, 0x2004f794) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$inet(0x2, 0x800, 0x9) bind$unix(r6, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0xc5) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r8, 0x3) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ppoll(&(0x7f0000000140)=[{r9, 0x2000}, {r9, 0x64ea}, {r7, 0x200}, {r5, 0xd004}, {r6, 0x63b4}], 0x2122, 0x0, 0x0, 0x0) close(r2) socket$inet6(0xa, 0x2, 0x0) 0s ago: executing program 2 (id=3729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x6f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x180}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x80) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0xfc, 0x1b3}]}) syz_open_dev$sndctrl(0x0, 0x336, 0x20200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x8, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 6 [ 1340.304657][ T5887] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1340.533623][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 1340.547269][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.560228][ T5887] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1340.596622][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.630632][ T5887] usb 2-1: config 0 descriptor?? [ 1340.861238][T19669] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3422'. [ 1341.158971][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 1341.172335][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1341.213051][ T975] usb 4-1: USB disconnect, device number 97 [ 1341.262597][ T5887] usb 2-1: USB disconnect, device number 11 [ 1342.266827][ T5917] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1342.395159][ T5917] gspca_spca501: reg write: error -32 [ 1342.400710][ T5917] spca501 1-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 1342.515447][ T5917] spca501 1-1:68.220: probe with driver spca501 failed with error -22 [ 1342.641802][ T5917] usb 1-1: USB disconnect, device number 119 [ 1342.833487][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1343.034934][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 1343.074082][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1343.084216][ T10] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1343.154975][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1343.219935][ T10] usb 2-1: config 1 has no interface number 0 [ 1343.251489][ T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1343.293588][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1343.450320][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1343.515721][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.539967][ T10] usb 2-1: Product: syz [ 1343.557598][ T10] usb 2-1: Manufacturer: syz [ 1343.562268][ T10] usb 2-1: SerialNumber: syz [ 1343.648653][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1343.668652][ T10] cdc_ncm 2-1:1.1: bind() failure [ 1344.169361][ T5887] usb 6-1: USB disconnect, device number 20 [ 1344.482989][T19702] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3429'. [ 1345.303409][ T5887] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1345.513308][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 1345.529252][ T5887] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1345.663215][ T5887] usb 6-1: config 0 has no interface number 0 [ 1345.738629][ T5887] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1345.785144][T19699] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3428'. [ 1345.805292][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.882361][ T5887] usb 6-1: Product: syz [ 1345.923514][ T5887] usb 6-1: Manufacturer: syz [ 1345.928555][ T5887] usb 6-1: SerialNumber: syz [ 1346.053136][T16379] usb 2-1: USB disconnect, device number 12 [ 1346.078913][ T5887] usb 6-1: config 0 descriptor?? [ 1346.129003][T19699] syz.2.3428: attempt to access beyond end of device [ 1346.129003][T19699] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1346.179808][ T5887] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1346.336989][ T5887] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1346.490897][ T5887] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1346.663453][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1346.774054][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1346.774705][ T975] usb 6-1: USB disconnect, device number 21 [ 1346.827523][ T975] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1346.842557][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.867330][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.880681][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1346.895918][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1346.905639][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.928928][ T975] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1346.941641][ T10] usb 2-1: config 0 descriptor?? [ 1346.996755][ T975] quatech2 6-1:0.51: device disconnected [ 1347.398406][ T10] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1347.464501][ T10] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1347.486816][ T10] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1347.543367][ T10] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1347.567050][ T10] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1347.577338][T19711] FAULT_INJECTION: forcing a failure. [ 1347.577338][T19711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1347.593330][ T975] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1347.626688][ T10] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1347.664323][ T10] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 1347.696037][T19711] CPU: 0 UID: 0 PID: 19711 Comm: syz.1.3431 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1347.696071][T19711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1347.696086][T19711] Call Trace: [ 1347.696096][T19711] [ 1347.696108][T19711] dump_stack_lvl+0x189/0x250 [ 1347.696150][T19711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1347.696184][T19711] ? __pfx__printk+0x10/0x10 [ 1347.696220][T19711] should_fail_ex+0x414/0x560 [ 1347.696250][T19711] _copy_to_user+0x31/0xb0 [ 1347.696284][T19711] simple_read_from_buffer+0xe1/0x170 [ 1347.696324][T19711] proc_fail_nth_read+0x1df/0x250 [ 1347.696362][T19711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1347.696398][T19711] ? rw_verify_area+0x258/0x650 [ 1347.696423][T19711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1347.696457][T19711] vfs_read+0x200/0x980 [ 1347.696489][T19711] ? __pfx___mutex_lock+0x10/0x10 [ 1347.696520][T19711] ? __pfx_vfs_read+0x10/0x10 [ 1347.696547][T19711] ? __fget_files+0x2a/0x420 [ 1347.696583][T19711] ? __fget_files+0x3a0/0x420 [ 1347.696611][T19711] ? __fget_files+0x2a/0x420 [ 1347.696651][T19711] ksys_read+0x145/0x250 [ 1347.696675][T19711] ? __fget_files+0x2a/0x420 [ 1347.696706][T19711] ? __pfx_ksys_read+0x10/0x10 [ 1347.696736][T19711] ? do_syscall_64+0xba/0x210 [ 1347.696771][T19711] do_syscall_64+0xf6/0x210 [ 1347.696800][T19711] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1347.696825][T19711] ? clear_bhb_loop+0x60/0xb0 [ 1347.696852][T19711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.696874][T19711] RIP: 0033:0x7fcf95f8d37c [ 1347.696894][T19711] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1347.696914][T19711] RSP: 002b:00007fcf93df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1347.696937][T19711] RAX: ffffffffffffffda RBX: 00007fcf961b5fa0 RCX: 00007fcf95f8d37c [ 1347.696954][T19711] RDX: 000000000000000f RSI: 00007fcf93df60a0 RDI: 0000000000000004 [ 1347.696968][T19711] RBP: 00007fcf93df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.696982][T19711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.696995][T19711] R13: 0000000000000000 R14: 00007fcf961b5fa0 R15: 00007fcf962dfa28 [ 1347.697030][T19711] [ 1348.005110][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 1348.035760][ T975] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1348.046101][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.054289][ T975] usb 1-1: Product: syz [ 1348.058621][ T975] usb 1-1: Manufacturer: syz [ 1348.063387][ T975] usb 1-1: SerialNumber: syz [ 1348.202400][T19715] loop2: detected capacity change from 0 to 7 [ 1348.219591][ T975] usb 1-1: config 0 descriptor?? [ 1348.229204][T19715] Dev loop2: unable to read RDB block 7 [ 1348.241652][ T10] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1348.259552][T19715] loop2: unable to read partition table [ 1348.307012][ T975] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1348.315275][T19715] loop2: partition table beyond EOD, truncated [ 1348.333489][T19715] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1348.344923][ T10] usb 2-1: USB disconnect, device number 13 [ 1348.500873][ T975] gspca_stk1135: reg_w 0x2 err -71 [ 1348.512675][ T975] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.544274][ T975] gspca_stk1135: Sensor write failed [ 1348.575254][ T975] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.581836][ T975] gspca_stk1135: Sensor write failed [ 1348.650849][ T975] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.683240][ T975] gspca_stk1135: Sensor read failed [ 1348.693647][T19717] fido_id[19717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1348.720215][ T975] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.741120][ T975] gspca_stk1135: Sensor read failed [ 1348.749724][ T975] gspca_stk1135: Detected sensor type unknown (0x0) [ 1348.773493][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1348.790067][ T975] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.803416][T16254] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1348.825273][ T975] gspca_stk1135: Sensor read failed [ 1348.832719][ T975] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.842952][ T975] gspca_stk1135: Sensor read failed [ 1348.850990][ T975] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.861877][ T975] gspca_stk1135: Sensor write failed [ 1348.867832][ T975] gspca_stk1135: serial bus timeout: status=0x00 [ 1348.874783][ T975] gspca_stk1135: Sensor write failed [ 1348.886255][ T975] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1348.939136][ T975] usb 1-1: USB disconnect, device number 120 [ 1348.965429][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1348.993062][T16254] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.025593][ T10] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1349.057767][T16254] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1349.075719][ T10] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1349.089746][T16254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.099242][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.110274][T16254] usb 3-1: Product: syz [ 1349.119729][T16254] usb 3-1: Manufacturer: syz [ 1349.126733][ T10] usb 2-1: Product: syz [ 1349.130990][ T10] usb 2-1: Manufacturer: syz [ 1349.143724][T16254] usb 3-1: SerialNumber: syz [ 1349.148432][ T10] usb 2-1: SerialNumber: syz [ 1349.169404][T16254] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1349.180769][ T10] usb 2-1: config 0 descriptor?? [ 1349.411226][ T10] usb 2-1: USB disconnect, device number 14 [ 1349.797798][T16254] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1349.849899][T16254] usb 3-1: USB disconnect, device number 107 [ 1350.590792][ T5887] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1350.854240][T19737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3440'. [ 1351.026648][ T5887] usb 2-1: config 0 has no interfaces? [ 1351.109022][ T5887] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1351.120794][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.151228][ T5887] usb 2-1: Product: syz [ 1351.192221][ T5887] usb 2-1: Manufacturer: syz [ 1351.225325][ T5887] usb 2-1: SerialNumber: syz [ 1351.389799][ T5887] usb 2-1: config 0 descriptor?? [ 1351.562515][ T30] audit: type=1326 audit(1747197116.387:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.2.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1351.589215][ T5887] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1351.641793][T19735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.653368][T19735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.692268][ T30] audit: type=1326 audit(1747197116.387:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.2.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1351.757241][ T30] audit: type=1326 audit(1747197116.447:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.2.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1351.836457][ T30] audit: type=1326 audit(1747197116.447:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.2.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1351.864518][ T10] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1351.946045][ T5887] usb 1-1: config index 0 descriptor too short (expected 32820, got 52) [ 1351.988874][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.047365][ T10] usb 3-1: device descriptor read/64, error -71 [ 1352.065750][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1352.113567][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1352.145700][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1352.183622][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1352.231875][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1352.270750][ T5887] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 1352.281202][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.303470][ T10] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1352.306001][ T5887] usb 1-1: Product: syz [ 1352.343436][ T5887] usb 1-1: Manufacturer: syz [ 1352.359475][ T5887] usb 1-1: SerialNumber: syz [ 1352.392101][ T5887] usb 1-1: config 0 descriptor?? [ 1352.428104][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1352.453528][ T10] usb 3-1: device descriptor read/64, error -71 [ 1352.568532][ T10] usb usb3-port1: attempt power cycle [ 1352.894712][ T5887] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1352.944466][ T10] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1353.026762][ T10] usb 3-1: device descriptor read/8, error -71 [ 1353.059894][T19749] netlink: 368 bytes leftover after parsing attributes in process `syz.5.3443'. [ 1353.095457][ T5887] usb 1-1: USB disconnect, device number 121 [ 1353.191836][T19749] geneve3: entered promiscuous mode [ 1353.197529][T19749] geneve3: entered allmulticast mode [ 1353.283294][ T10] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1353.316527][ T10] usb 3-1: device descriptor read/8, error -71 [ 1353.560515][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1353.626930][ T10] usb usb3-port1: unable to enumerate USB device [ 1354.299674][T16379] usb 2-1: USB disconnect, device number 15 [ 1355.183355][T16379] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1355.251472][T19753] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3444'. [ 1355.439588][T16379] usb 3-1: Using ep0 maxpacket: 32 [ 1355.465933][T16379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.513267][T16379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.549045][T16379] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1355.589782][T16379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.679213][T16379] usb 3-1: config 0 descriptor?? [ 1355.752321][T19766] fuse: Unknown parameter './file0' [ 1356.187295][T16379] greenasia 0003:0E8F:0012.004E: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 1356.343406][T16379] greenasia 0003:0E8F:0012.004E: no inputs found [ 1356.583503][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1356.715393][T19756] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3445'. [ 1356.854945][T19756] syz.1.3445: attempt to access beyond end of device [ 1356.854945][T19756] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1357.556231][T16379] usb 3-1: USB disconnect, device number 112 [ 1357.825046][ T5887] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1357.963506][ T5887] usb 1-1: device descriptor read/64, error -71 [ 1358.293343][ T5887] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1358.491792][ T5887] usb 1-1: device descriptor read/64, error -71 [ 1358.664440][ T5887] usb usb1-port1: attempt power cycle [ 1358.671844][T19780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1358.857842][T19782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1358.931027][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1358.944000][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1359.033132][ T5887] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1359.127365][ T5887] usb 1-1: device descriptor read/8, error -71 [ 1359.512648][ T5887] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1359.579321][ T5887] usb 1-1: device descriptor read/8, error -71 [ 1359.605211][ T5884] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1359.727620][ T5887] usb usb1-port1: unable to enumerate USB device [ 1359.853370][ T10] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1359.890206][ T5884] usb 6-1: config 0 has no interfaces? [ 1359.916155][ T5884] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1359.927819][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.956277][ T5884] usb 6-1: Product: syz [ 1359.991592][ T5884] usb 6-1: Manufacturer: syz [ 1360.060675][ T5884] usb 6-1: SerialNumber: syz [ 1360.105756][ T10] usb 3-1: config 0 has no interfaces? [ 1360.137609][ T5884] usb 6-1: config 0 descriptor?? [ 1360.182547][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1360.228091][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.278478][ T10] usb 3-1: Product: syz [ 1360.306990][ T10] usb 3-1: Manufacturer: syz [ 1360.338008][ T10] usb 3-1: SerialNumber: syz [ 1360.385538][ T10] usb 3-1: config 0 descriptor?? [ 1360.634960][T19793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.647064][T19793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.663027][T19793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.676023][T19793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.781347][T19803] kvm: kvm [19801]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x3030303030303030 [ 1361.075196][T17853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1361.092718][T17853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1361.127251][ T30] audit: type=1800 audit(1747197125.887:1218): pid=19809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3458" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1361.139538][T17853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1361.187346][T17853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1361.213760][T17853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1361.712837][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.721340][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.567167][ T5887] usb 3-1: USB disconnect, device number 113 [ 1362.959257][T19812] chnl_net:caif_netlink_parms(): no params data found [ 1363.308810][T17196] Bluetooth: hci4: command tx timeout [ 1363.942807][T19812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.984301][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1363.992373][T19812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.027646][T19812] bridge_slave_0: entered allmulticast mode [ 1364.259944][T19812] bridge_slave_0: entered promiscuous mode [ 1364.331381][T19812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.369280][T19812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.485794][T19812] bridge_slave_1: entered allmulticast mode [ 1364.535934][T19812] bridge_slave_1: entered promiscuous mode [ 1364.573077][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.604353][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1364.617117][ T975] usb 6-1: USB disconnect, device number 22 [ 1364.774408][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1364.807702][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1364.894165][ T10] usb 2-1: SerialNumber: syz [ 1365.149287][ T10] usb 2-1: 0:2 : does not exist [ 1365.194428][T19812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.221765][ T10] usb 2-1: unit 5 not found! [ 1365.263020][T19812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.314163][ T10] usb 2-1: USB disconnect, device number 16 [ 1365.395036][T17196] Bluetooth: hci4: command tx timeout [ 1365.403302][ T5887] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1365.477997][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1365.592181][ T5887] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1365.622728][ T5887] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1365.662092][ T5887] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1365.677016][T19837] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3462'. [ 1365.703248][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.764704][T19841] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1365.880805][T19812] team0: Port device team_slave_0 added [ 1365.886685][ T5887] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1365.957672][T19843] syz.0.3462: attempt to access beyond end of device [ 1365.957672][T19843] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1365.996519][T19812] team0: Port device team_slave_1 added [ 1366.692159][T19850] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3465' sets config #0 [ 1366.813108][T19850] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3465' sets config #1 [ 1367.445244][T16379] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1367.475094][T17196] Bluetooth: hci4: command tx timeout [ 1367.603037][T19812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.622519][T19812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1367.658195][T19855] loop6: detected capacity change from 0 to 7 [ 1367.673307][T16379] usb 3-1: Using ep0 maxpacket: 16 [ 1367.683026][T19855] Dev loop6: unable to read RDB block 7 [ 1367.690148][T19855] loop6: unable to read partition table [ 1367.690501][T16379] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 1367.701955][T19812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.725555][T19855] loop6: partition table beyond EOD, truncated [ 1367.732285][T16379] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.743829][T16379] usb 3-1: config 4 has no interface number 0 [ 1367.751198][T19855] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1367.765992][T16379] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1367.798696][T16379] usb 3-1: config 4 interface 51 has no altsetting 0 [ 1367.807641][T19812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.810561][T16379] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1367.841789][T19812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1367.848914][T16379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.920329][T16379] usb 3-1: Product: syz [ 1367.927330][T16379] usb 3-1: Manufacturer: syz [ 1367.932438][T16379] usb 3-1: SerialNumber: syz [ 1367.949549][T19812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.986931][T16379] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 1368.013080][ T5884] usb 6-1: USB disconnect, device number 23 [ 1368.362885][T16379] usb 3-1: USB disconnect, device number 114 [ 1368.387170][T19812] hsr_slave_0: entered promiscuous mode [ 1368.401992][T19812] hsr_slave_1: entered promiscuous mode [ 1368.452084][T19812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1368.465102][T19812] Cannot create hsr debugfs directory [ 1368.473627][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1368.644546][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1368.675318][ T10] usb 2-1: config index 0 descriptor too short (expected 16460, got 76) [ 1368.723357][ T10] usb 2-1: config 4 has an invalid descriptor of length 181, skipping remainder of the config [ 1368.773613][ T10] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 1368.844413][ T10] usb 2-1: New USB device found, idVendor=124a, idProduct=4023, bcdDevice=85.9e [ 1368.914415][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.009287][ T10] usb 2-1: Product: syz [ 1369.043291][ T10] usb 2-1: Manufacturer: syz [ 1369.048053][ T10] usb 2-1: SerialNumber: syz [ 1369.328323][T19870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.396487][ T10] usb 2-1: USB disconnect, device number 17 [ 1369.433473][T16254] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1369.543471][T17196] Bluetooth: hci4: command tx timeout [ 1369.604569][T16254] usb 3-1: Using ep0 maxpacket: 8 [ 1369.644397][T16254] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.693495][T16254] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1369.753296][T16254] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1369.805708][T16254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.880013][T16254] usb 3-1: config 0 descriptor?? [ 1369.961367][T19812] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1370.060167][T19812] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1370.145353][T19812] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1370.202248][T19812] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1370.355871][T16254] elecom 0003:056E:00FE.004F: collection stack underflow [ 1370.393293][T16254] elecom 0003:056E:00FE.004F: item 0 4 0 12 parsing failed [ 1370.436911][T16254] elecom 0003:056E:00FE.004F: probe with driver elecom failed with error -22 [ 1370.805285][ T5884] usb 3-1: USB disconnect, device number 115 [ 1370.882701][T19812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.997233][T19812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.049878][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.057674][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.167384][T16366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.174794][T16366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.572190][T19812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1371.673322][T16379] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1371.831734][T19812] veth0_vlan: entered promiscuous mode [ 1371.845878][T16379] usb 6-1: Using ep0 maxpacket: 32 [ 1371.859488][T16379] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.884160][T16379] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1371.914446][T16379] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1371.928565][T19812] veth1_vlan: entered promiscuous mode [ 1371.935439][T16379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.991603][T16379] usb 6-1: Product: М [ 1372.018610][T16379] usb 6-1: Manufacturer: 隱䁍䕤䥧윬칞癲풘쟪둕ף̮⭨닍ﺚ䌴㹋븺䳠⏭枔 [ 1372.102174][T16379] usb 6-1: SerialNumber: 놾뱩瓢а鰼ꊥ沁닅鍗녧췭ﶍ頿Ꚅ᥅ࡆ螟헱矝擪廈᠛ [ 1372.136870][T19812] veth0_macvtap: entered promiscuous mode [ 1372.237913][T19812] veth1_macvtap: entered promiscuous mode [ 1372.491057][T16379] usb 6-1: 0:2 : does not exist [ 1372.540242][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.585235][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.645876][T16379] usb 6-1: USB disconnect, device number 24 [ 1372.677873][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.720076][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.752309][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.815730][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1372.839831][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.886931][T19812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1372.980304][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.002716][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.044694][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.114203][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.124338][ T30] audit: type=1326 audit(1747197137.947:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1373.204294][T19812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.270977][T19812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.288175][ T30] audit: type=1326 audit(1747197137.957:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1373.346868][T19812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.418424][ T30] audit: type=1326 audit(1747197137.957:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1373.481337][T19812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.520218][T19812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.549357][ T30] audit: type=1326 audit(1747197137.957:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1373.579035][T19812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.633926][T19812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.691977][ T30] audit: type=1326 audit(1747197137.957:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1373.774479][T19910] kernel read not supported for file /eth0 (pid: 19910 comm: syz.5.3483) [ 1373.810438][ T30] audit: type=1326 audit(1747197137.967:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1373.897711][ T30] audit: type=1326 audit(1747197137.967:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1373.902186][T19904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1373.947038][ T30] audit: type=1326 audit(1747197137.967:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1373.974302][ T30] audit: type=1326 audit(1747197137.967:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1374.008789][ T30] audit: type=1326 audit(1747197137.967:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19902 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb356d8e969 code=0x7ffc0000 [ 1374.034422][T19904] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1374.133883][T16254] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1374.333538][T16254] usb 6-1: Using ep0 maxpacket: 16 [ 1374.345730][T16254] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.365847][T16254] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.396126][T16254] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1374.434472][T16254] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1374.501897][T16254] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1374.531784][T16254] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1374.563309][T16254] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1374.594332][T19904] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1374.621127][T19904] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1374.637477][T16254] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1374.656950][T16254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1374.688218][T16254] usb 6-1: SerialNumber: syz [ 1374.729025][T16254] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1374.746172][T19904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1374.752599][T19904] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1374.756816][T16254] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 1375.116831][T19906] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3481'. [ 1375.141456][T19917] loop2: detected capacity change from 0 to 7 [ 1375.152836][ T6096] Dev loop2: unable to read RDB block 7 [ 1375.159085][ T6096] loop2: unable to read partition table [ 1375.202751][ T6096] loop2: partition table beyond EOD, truncated [ 1375.229174][T19917] Dev loop2: unable to read RDB block 7 [ 1375.243377][T19917] loop2: unable to read partition table [ 1375.265160][T19917] loop2: partition table beyond EOD, truncated [ 1375.272654][T19917] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1375.319868][T19905] syz.2.3481: attempt to access beyond end of device [ 1375.319868][T19905] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1375.522285][T19904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1375.530635][T19904] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1375.768808][T19904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1375.802988][T19904] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1376.125964][ T975] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1376.355084][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.374864][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 1376.400269][ T975] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1376.408806][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.424228][ T975] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1376.435376][ T975] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1376.445757][ T975] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1376.460408][ T975] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1376.471896][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.625059][ T5884] usb 6-1: USB disconnect, device number 25 [ 1376.695694][ T975] usb 2-1: GET_CAPABILITIES returned 0 [ 1376.764642][ T975] usbtmc 2-1:16.0: can't read capabilities [ 1376.918676][T19921] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1376.925261][T19921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1377.045744][T19921] vhci_hcd vhci_hcd.0: Device attached [ 1377.135219][T19932] vhci_hcd: connection closed [ 1377.143990][T16363] vhci_hcd: stop threads [ 1377.157052][T16363] vhci_hcd: release socket [ 1377.172689][T16363] vhci_hcd: disconnect device [ 1377.232135][T16379] usb 2-1: USB disconnect, device number 18 [ 1377.815847][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.862909][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.001204][T16381] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1378.145118][T19946] loop6: detected capacity change from 0 to 7 [ 1378.190240][ T6096] Dev loop6: unable to read RDB block 7 [ 1378.208400][ T6096] loop6: unable to read partition table [ 1378.223320][T16381] usb 3-1: Using ep0 maxpacket: 16 [ 1378.241260][ T6096] loop6: partition table beyond EOD, truncated [ 1378.248484][T16381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1378.271764][T16381] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1378.308128][T19946] Dev loop6: unable to read RDB block 7 [ 1378.317279][T19946] loop6: unable to read partition table [ 1378.317742][T16381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.355178][T19946] loop6: partition table beyond EOD, truncated [ 1378.383493][T19946] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1378.473913][T16381] usb 3-1: config 0 descriptor?? [ 1378.968487][T19958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.144048][T19958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.263425][ T5941] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1379.531452][ T5941] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1379.574737][ T5941] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1379.735527][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1379.832982][ T5941] usb 7-1: config 1 has no interface number 0 [ 1379.950708][ T5941] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1380.191745][ T5941] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1380.409331][ T5941] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1380.420412][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.430250][ T5941] usb 7-1: Product: syz [ 1380.435915][ T5941] usb 7-1: Manufacturer: syz [ 1380.462231][ T5941] usb 7-1: SerialNumber: syz [ 1380.507708][ T5941] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1380.516328][ T5941] cdc_ncm 7-1:1.1: bind() failure [ 1380.563848][T16381] usbhid 3-1:0.0: can't add hid device: -71 [ 1380.656729][T19971] fuse: Bad value for 'fd' [ 1380.739549][T16381] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1380.801900][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 1380.817301][T16381] usb 3-1: USB disconnect, device number 116 [ 1382.380544][T19982] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3497'. [ 1382.928247][T16379] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1383.145732][T16379] usb 1-1: Using ep0 maxpacket: 32 [ 1383.278486][T16379] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1383.399425][ T5941] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1383.415935][T16379] usb 1-1: config 127 has an invalid interface number: 25 but max is 0 [ 1383.505371][T16379] usb 1-1: config 127 has no interface number 0 [ 1383.508107][T19988] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1383.584820][T19988] caif0: entered allmulticast mode [ 1383.628060][T16379] usb 1-1: config 127 interface 25 has no altsetting 0 [ 1383.926812][ T5941] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.947141][T16379] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 1384.015337][T19993] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1384.122470][ T5941] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.157704][T16379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.178074][T16381] usb 7-1: USB disconnect, device number 2 [ 1384.212371][ T5941] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1384.253674][T16379] usb 1-1: Product: syz [ 1384.298768][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1384.311901][T16379] usb 1-1: Manufacturer: syz [ 1384.322996][T16379] usb 1-1: SerialNumber: syz [ 1384.366853][ T5941] usb 6-1: SerialNumber: syz [ 1384.403017][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1385.032754][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1385.035030][T19986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.058307][T16379] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 1385.069159][T19986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.099385][ T5941] usb 6-1: 0:2 : does not exist [ 1385.130989][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1385.187137][ T5941] usb 6-1: USB disconnect, device number 26 [ 1385.245311][ T10] usb 3-1: config 0 has no interface number 0 [ 1385.303759][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1385.415193][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1385.468306][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.491161][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1385.562669][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1385.586533][T16379] usb 1-1: reset high-speed USB device number 126 using dummy_hcd [ 1385.666469][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1385.803228][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.872175][ T10] usb 3-1: config 0 descriptor?? [ 1386.051943][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1386.775460][ T10] usb 3-1: USB disconnect, device number 117 [ 1386.810136][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1387.593038][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1387.966556][T16381] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1388.888503][T16379] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1388.915191][T16381] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1388.957957][T16379] usb 1-1: device firmware changed [ 1388.984773][T16379] ueagle-atm 1-1:127.25: usbatm_usb_probe: bind failed: -19! [ 1389.117294][T16381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.140744][T16379] usb 1-1: USB disconnect, device number 126 [ 1389.151636][T16381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.176354][T16381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1389.251059][T16381] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1389.282710][T16381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.335119][T16381] usb 2-1: config 0 descriptor?? [ 1389.674224][T16379] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1389.796588][T16381] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1389.818412][T16381] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1389.904395][T16379] usb 1-1: Using ep0 maxpacket: 16 [ 1389.937876][T16381] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1389.977424][T16379] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 1390.021357][T16381] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1390.038725][T16379] usb 1-1: config 0 has no interface number 0 [ 1390.071810][T16381] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1390.111528][T16379] usb 1-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 1390.138986][T16381] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1390.171361][T16379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.242028][T16381] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving [ 1390.302787][T16379] usb 1-1: Product: syz [ 1390.320146][T16379] usb 1-1: Manufacturer: syz [ 1390.331912][T16379] usb 1-1: SerialNumber: syz [ 1390.377214][T16381] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1390.492154][T16379] usb 1-1: config 0 descriptor?? [ 1390.838188][T16381] usb 2-1: USB disconnect, device number 20 [ 1392.320691][T16379] usb 1-1: Found UVC 0.00 device syz (0408:4034) [ 1392.374107][T16379] usb 1-1: No valid video chain found. [ 1392.472070][T16379] usb 1-1: USB disconnect, device number 127 [ 1392.693479][T20062] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3517'. [ 1393.053282][ T975] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1393.094424][ T10] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 1393.173686][T17292] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1393.313940][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 1393.323911][ T10] usb 2-1: config 0 has an invalid interface number: 180 but max is 1 [ 1393.340153][ T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1393.360020][ T975] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.398457][ T10] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1393.409372][T17292] usb 1-1: Using ep0 maxpacket: 32 [ 1393.430036][ T975] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1393.465393][T17292] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1393.484368][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1393.500853][T17292] usb 1-1: config 127 has an invalid interface number: 25 but max is 0 [ 1393.511833][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1393.519920][T17292] usb 1-1: config 127 has no interface number 0 [ 1393.530125][ T10] usb 2-1: config 0 has no interface number 0 [ 1393.540324][T17292] usb 1-1: config 127 interface 25 has no altsetting 0 [ 1393.549875][ T975] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1393.562047][ T10] usb 2-1: config 0 interface 180 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 1393.619295][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.675178][T17292] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 1393.685174][ T10] usb 2-1: config 0 interface 180 altsetting 1 endpoint 0xC is Bulk; changing to Interrupt [ 1393.746753][ T975] usb 6-1: config 0 descriptor?? [ 1393.774170][T17292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.797578][ T10] usb 2-1: config 0 interface 180 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 1393.836916][T17292] usb 1-1: Product: syz [ 1393.841156][T17292] usb 1-1: Manufacturer: syz [ 1393.906514][ T10] usb 2-1: config 0 interface 180 has no altsetting 0 [ 1393.919001][T17292] usb 1-1: SerialNumber: syz [ 1394.180410][T16379] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1394.351989][T17292] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 1394.527625][T16379] usb 7-1: Using ep0 maxpacket: 32 [ 1394.605015][T16379] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1394.694479][T16379] usb 7-1: config 0 has no interface number 0 [ 1394.875507][T17292] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 1394.881063][T16379] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1394.887813][T16379] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1394.887869][T16379] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.887907][T16379] usb 7-1: Product: syz [ 1394.887919][T16379] usb 7-1: Manufacturer: syz [ 1394.887931][T16379] usb 7-1: SerialNumber: syz [ 1394.906453][T16379] usb 7-1: config 0 descriptor?? [ 1396.041308][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=3009, bcdDevice=78.ed [ 1396.041390][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.048012][ T10] usb 2-1: config 0 descriptor?? [ 1396.049290][ T10] usb 2-1: can't set config #0, error -71 [ 1396.103845][ T10] usb 2-1: USB disconnect, device number 21 [ 1396.167590][T16379] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 1396.167689][T16379] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1396.167710][T16379] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1396.167842][T16379] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1396.240848][T16379] usb 7-1: USB disconnect, device number 3 [ 1396.988912][ T975] usbhid 6-1:0.0: can't add hid device: -71 [ 1397.036914][ T975] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1397.120211][ T975] usb 6-1: USB disconnect, device number 27 [ 1397.743834][T16379] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1397.959221][T17292] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1398.002593][T17292] usb 1-1: device firmware changed [ 1398.035953][T17292] ueagle-atm 1-1:127.25: usbatm_usb_probe: bind failed: -19! [ 1398.117018][T17292] usb 1-1: USB disconnect, device number 2 [ 1398.190688][T16379] usb 2-1: config 0 has no interfaces? [ 1398.227309][T16379] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1398.402218][T16379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.495692][T16379] usb 2-1: Product: syz [ 1398.500381][T16379] usb 2-1: Manufacturer: syz [ 1398.530145][T16379] usb 2-1: SerialNumber: syz [ 1398.609913][T16379] usb 2-1: config 0 descriptor?? [ 1399.125204][T16379] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1399.395935][T16379] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1399.432714][T16379] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1399.513212][T16379] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1399.766968][T16379] usb 6-1: config 1 has no interface number 0 [ 1399.835817][T16379] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1400.235855][T16379] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1400.320276][T16379] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1400.360770][T16379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.404760][T16379] usb 6-1: Product: syz [ 1400.420841][T16379] usb 6-1: Manufacturer: syz [ 1400.455152][T16379] usb 6-1: SerialNumber: syz [ 1400.548396][T16379] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1400.598073][T16379] cdc_ncm 6-1:1.1: bind() failure [ 1402.957767][ T5823] usb 6-1: USB disconnect, device number 28 [ 1402.964163][T17292] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1403.003668][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1403.145630][T17292] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1403.197797][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1403.243802][T17292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.273451][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1403.288614][T17292] usb 1-1: Product: syz [ 1403.292828][T17292] usb 1-1: Manufacturer: syz [ 1403.298810][T17292] usb 1-1: SerialNumber: syz [ 1403.312922][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1403.334762][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1403.350094][T17292] usb 1-1: config 0 descriptor?? [ 1403.359357][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1403.519761][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.558271][ T5823] usb 2-1: USB disconnect, device number 22 [ 1403.571402][ T10] usb 7-1: config 0 descriptor?? [ 1403.673359][ T975] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1403.796563][T20121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.854292][T20121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.936121][T17292] airspy 1-1:0.0: Board ID: 00 [ 1403.945710][T17292] airspy 1-1:0.0: Firmware version: [ 1403.992875][ T975] usb 6-1: config 0 has no interfaces? [ 1404.012394][ T975] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1404.023966][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.032152][ T975] usb 6-1: Product: syz [ 1404.053836][ T975] usb 6-1: Manufacturer: syz [ 1404.117483][ T5823] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1404.125779][ T975] usb 6-1: SerialNumber: syz [ 1404.158847][ T10] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 1404.192741][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3532'. [ 1404.219417][ T975] usb 6-1: config 0 descriptor?? [ 1404.365085][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 1404.378534][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1404.413778][ T5823] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1404.487528][ T10] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1404.515045][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.587543][ T10] usb 7-1: USB disconnect, device number 4 [ 1404.714114][ T5823] usb 2-1: config 0 descriptor?? [ 1404.764206][ T5823] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input73 [ 1404.947370][T20141] fido_id[20141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1404.980859][T17292] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 1404.989900][T20132] input: syz0 as /devices/virtual/input/input74 [ 1405.086388][T17292] airspy 1-1:0.0: Registered as swradio24 [ 1405.166719][T17292] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1405.285494][T17292] usb 1-1: USB disconnect, device number 3 [ 1405.776985][T20157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3543'. [ 1406.493830][T17292] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1406.890271][ T5185] bcm5974 2-1:0.0: could not read from device [ 1406.992870][T17292] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 1407.012666][ T5185] bcm5974 2-1:0.0: could not read from device [ 1407.025554][T17292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.072134][T17292] usb 3-1: config 0 has no interface number 0 [ 1407.093854][T17292] usb 3-1: config 0 interface 76 has no altsetting 0 [ 1407.121136][T17292] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 1407.121408][ T5823] usb 2-1: USB disconnect, device number 23 [ 1407.131814][ T5185] bcm5974 2-1:0.0: could not read from device [ 1407.190713][T17292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.202262][T20171] netlink: 'syz.1.3545': attribute type 1 has an invalid length. [ 1407.221222][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 1407.230516][T18163] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1407.256442][ T5185] bcm5974 2-1:0.0: could not read from device [ 1407.304237][T17292] usb 3-1: config 0 descriptor?? [ 1407.427780][T17292] cxacru 3-1:0.76: usbatm_usb_probe: bind failed: -19! [ 1407.444619][T18163] usb 1-1: Using ep0 maxpacket: 32 [ 1407.469091][T18163] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1407.470794][T18163] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 1407.470825][T18163] usb 1-1: config 7 has no interface number 0 [ 1407.470878][T18163] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 1407.470906][T18163] usb 1-1: config 7 interface 187 has no altsetting 0 [ 1407.475379][T18163] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1407.475412][T18163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.475435][T18163] usb 1-1: Product: syz [ 1407.475452][T18163] usb 1-1: Manufacturer: syz [ 1407.475469][T18163] usb 1-1: SerialNumber: syz [ 1407.480887][T20170] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1407.641791][ T975] usb 3-1: USB disconnect, device number 118 [ 1408.013546][T18163] usb 1-1: Cannot retrieve CPort count: -110 [ 1408.013601][T18163] usb 1-1: Cannot retrieve CPort count: -110 [ 1408.013632][T18163] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 1408.772108][ T5823] usb 6-1: USB disconnect, device number 29 [ 1409.132985][T20178] FAULT_INJECTION: forcing a failure. [ 1409.132985][T20178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.256443][T20178] CPU: 0 UID: 0 PID: 20178 Comm: syz.2.3547 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1409.256479][T20178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1409.256493][T20178] Call Trace: [ 1409.256502][T20178] [ 1409.256513][T20178] dump_stack_lvl+0x189/0x250 [ 1409.256549][T20178] ? __lock_acquire+0xaac/0xd20 [ 1409.256584][T20178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1409.256617][T20178] ? __pfx__printk+0x10/0x10 [ 1409.256639][T20178] ? __might_fault+0xb0/0x130 [ 1409.256678][T20178] should_fail_ex+0x414/0x560 [ 1409.256707][T20178] _copy_from_user+0x2d/0xb0 [ 1409.256741][T20178] ___sys_sendmsg+0x158/0x2a0 [ 1409.256785][T20178] ? __pfx____sys_sendmsg+0x10/0x10 [ 1409.256856][T20178] ? __fget_files+0x2a/0x420 [ 1409.256885][T20178] ? __fget_files+0x3a0/0x420 [ 1409.256927][T20178] __sys_sendmmsg+0x227/0x430 [ 1409.256964][T20178] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1409.257006][T20178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1409.257053][T20178] ? ksys_write+0x1f0/0x250 [ 1409.257078][T20178] ? rcu_is_watching+0x15/0xb0 [ 1409.257109][T20178] __x64_sys_sendmmsg+0xa0/0xc0 [ 1409.257143][T20178] do_syscall_64+0xf6/0x210 [ 1409.257173][T20178] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1409.257194][T20178] ? clear_bhb_loop+0x60/0xb0 [ 1409.257221][T20178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.257242][T20178] RIP: 0033:0x7f0c3c38e969 [ 1409.257262][T20178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1409.257281][T20178] RSP: 002b:00007f0c3d221038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1409.257305][T20178] RAX: ffffffffffffffda RBX: 00007f0c3c5b5fa0 RCX: 00007f0c3c38e969 [ 1409.257322][T20178] RDX: 000000000400005c RSI: 00002000000007c0 RDI: 0000000000000003 [ 1409.257338][T20178] RBP: 00007f0c3d221090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.257352][T20178] R10: 000000002400c8a0 R11: 0000000000000246 R12: 0000000000000001 [ 1409.257366][T20178] R13: 0000000000000000 R14: 00007f0c3c5b5fa0 R15: 00007f0c3c6dfa28 [ 1409.257397][T20178] [ 1409.473072][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.922837][ T5941] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1410.126824][ T5941] usb 6-1: config 0 has no interfaces? [ 1410.137747][ T5941] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1410.148830][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.204901][ T5941] usb 6-1: Product: syz [ 1410.209357][ T5941] usb 6-1: Manufacturer: syz [ 1410.295126][ T5941] usb 6-1: SerialNumber: syz [ 1410.303366][ T5823] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1410.333560][ T5941] usb 6-1: config 0 descriptor?? [ 1410.474995][ T5823] usb 3-1: device descriptor read/64, error -71 [ 1410.733271][ T5823] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1410.924603][ T5823] usb 3-1: device descriptor read/64, error -71 [ 1411.055692][ T5823] usb usb3-port1: attempt power cycle [ 1411.414711][T16381] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1411.434458][ T5823] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1411.469717][ T5823] usb 3-1: device descriptor read/8, error -71 [ 1411.629787][T18163] usb 1-1: USB disconnect, device number 4 [ 1411.755701][ T5823] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1411.815001][T16381] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.923367][T16381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1411.944573][ T5823] usb 3-1: device descriptor read/8, error -71 [ 1411.961876][T16381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1411.987978][T16381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1412.015497][T16381] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1412.033844][T16381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.140663][ T5823] usb usb3-port1: unable to enumerate USB device [ 1412.176598][T16381] usb 2-1: config 0 descriptor?? [ 1412.200742][T16381] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1412.226701][T16381] usb 2-1: MIDIStreaming interface descriptor not found [ 1413.147499][ T5823] usb 6-1: USB disconnect, device number 30 [ 1413.371513][T20205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3555'. [ 1413.383412][T20204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3554'. [ 1413.702965][T20205] bond1: entered promiscuous mode [ 1413.756534][T20205] bond1: entered allmulticast mode [ 1413.851395][T20205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1414.357337][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1414.357358][ T30] audit: type=1326 audit(1747197179.167:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1414.488035][T20223] netlink: 312 bytes leftover after parsing attributes in process `syz.6.3559'. [ 1414.663862][ T30] audit: type=1326 audit(1747197179.167:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1414.818928][ T975] usb 2-1: USB disconnect, device number 24 [ 1414.869463][ T30] audit: type=1326 audit(1747197179.167:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1415.003924][ T30] audit: type=1326 audit(1747197179.167:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1415.133236][ T30] audit: type=1326 audit(1747197179.167:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1415.194733][T17292] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1415.233380][ T30] audit: type=1326 audit(1747197179.167:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1415.321110][ T30] audit: type=1326 audit(1747197179.167:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1415.333624][T18163] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1415.378406][T17292] usb 7-1: Using ep0 maxpacket: 8 [ 1415.405163][ T30] audit: type=1326 audit(1747197179.167:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1415.413419][T16254] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1415.455743][T17292] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 1415.466616][T17292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.480213][T17292] usb 7-1: Product: syz [ 1415.486118][T17292] usb 7-1: Manufacturer: syz [ 1415.490784][T17292] usb 7-1: SerialNumber: syz [ 1415.529135][ T30] audit: type=1326 audit(1747197179.167:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1415.545272][T17292] usb 7-1: config 0 descriptor?? [ 1415.606927][ T30] audit: type=1326 audit(1747197179.167:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2138e969 code=0x7ffc0000 [ 1415.645068][T16254] usb 6-1: Using ep0 maxpacket: 32 [ 1415.650525][T18163] usb 1-1: config 0 has no interfaces? [ 1415.664979][T16254] usb 6-1: config 2 has an invalid interface number: 157 but max is 0 [ 1415.683006][T16254] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1415.714363][T16254] usb 6-1: config 2 has no interface number 1 [ 1415.720661][T16254] usb 6-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30 [ 1415.814764][T18163] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1415.839272][T18163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.857897][T17292] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1415.870857][T16254] usb 6-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 1415.918109][T18163] usb 1-1: Product: syz [ 1415.922368][T18163] usb 1-1: Manufacturer: syz [ 1415.924132][T16381] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1415.934414][T17292] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1415.948739][T18163] usb 1-1: SerialNumber: syz [ 1415.953596][T16254] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1415.971006][T16254] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 1416.007707][T17292] usb 7-1: USB disconnect, device number 5 [ 1416.013934][T18163] usb 1-1: config 0 descriptor?? [ 1416.018968][T16254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.073326][T16254] usb 6-1: Product: syz [ 1416.081264][T16254] usb 6-1: Manufacturer: syz [ 1416.101570][T16254] usb 6-1: SerialNumber: syz [ 1416.171897][T16254] imon 6-1:2.157: inconsistent driver matching [ 1416.218948][T16254] imon 6-1:2.157: unable to register, err -22 [ 1416.235856][T16254] imon 6-1:2.157: probe with driver imon failed with error -22 [ 1416.391319][T16381] usb 2-1: config 0 has no interfaces? [ 1416.410113][T16381] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1416.516974][T16381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.650774][T16381] usb 2-1: Product: syz [ 1416.728488][T16381] usb 2-1: Manufacturer: syz [ 1416.749528][T16381] usb 2-1: SerialNumber: syz [ 1416.820571][T16381] usb 2-1: config 0 descriptor?? [ 1417.283675][T20242] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1417.532738][T20242] syz.2.3566: attempt to access beyond end of device [ 1417.532738][T20242] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1418.201342][T17292] usb 1-1: USB disconnect, device number 5 [ 1418.788840][T16254] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1418.836906][T16254] imon 6-1:2.0: unable to initialize intf0, err -19 [ 1418.869602][T16254] imon:imon_probe: failed to initialize context! [ 1418.887230][T16254] imon 6-1:2.0: unable to register, err -19 [ 1418.951267][T16254] usb 6-1: USB disconnect, device number 31 [ 1419.064707][T17292] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1419.299833][T17292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.348898][T16254] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1419.392028][T17292] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1419.467686][T17292] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1419.514313][T17292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.572498][T16254] usb 6-1: Using ep0 maxpacket: 8 [ 1419.615498][T16254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.675984][T17292] usb 1-1: config 0 descriptor?? [ 1419.712837][T16254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.775631][T16254] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1419.844002][T16254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.915988][T16254] usb 6-1: config 0 descriptor?? [ 1420.135986][T17292] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 1420.205266][T16381] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1420.231021][T17292] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1420.295467][T18163] usb 2-1: USB disconnect, device number 25 [ 1420.367913][T16254] logitech 0003:046D:C20E.0053: rdesc size test failed for formula gp [ 1420.404665][T16381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 1420.419694][T16254] logitech 0003:046D:C20E.0053: nested delimiters [ 1420.442285][T16254] logitech 0003:046D:C20E.0053: item 0 4 2 10 parsing failed [ 1420.473099][T20248] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3567'. [ 1420.474704][T16254] logitech 0003:046D:C20E.0053: parse failed [ 1420.493702][T16381] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.518818][T16254] logitech 0003:046D:C20E.0053: probe with driver logitech failed with error -22 [ 1420.541536][T16381] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1420.636809][T16381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.668888][T16254] usb 6-1: USB disconnect, device number 32 [ 1420.694899][T16381] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1420.707678][T16381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.761450][T16381] usb 3-1: config 0 descriptor?? [ 1420.864470][T20248] syz.6.3567: attempt to access beyond end of device [ 1420.864470][T20248] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1420.992600][T16379] usb 1-1: USB disconnect, device number 6 [ 1421.060718][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1421.312409][T16381] usbhid 3-1:0.0: can't add hid device: -71 [ 1421.339574][T16381] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1421.447816][T16381] usb 3-1: USB disconnect, device number 123 [ 1421.540548][T20267] netlink: 'syz.5.3574': attribute type 23 has an invalid length. [ 1421.643452][T20270] netlink: 'syz.5.3574': attribute type 2 has an invalid length. [ 1421.966416][T20267] xt_hashlimit: max too large, truncated to 1048576 [ 1422.006351][T20267] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1422.797443][T20283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3577'. [ 1422.930417][T20283] bridge_slave_1: left allmulticast mode [ 1422.963444][T20283] bridge_slave_1: left promiscuous mode [ 1422.989488][T20283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.151173][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.160373][T20283] bridge_slave_0: left allmulticast mode [ 1423.166171][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.172860][T20283] bridge_slave_0: left promiscuous mode [ 1423.192293][T20283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.784818][T16381] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1423.944393][T16379] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1424.130921][T16381] usb 2-1: config 0 has no interfaces? [ 1424.140600][T16379] usb 1-1: Using ep0 maxpacket: 8 [ 1424.154522][T16381] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1424.164542][T16381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.175272][T16381] usb 2-1: Product: syz [ 1424.179891][T16379] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1424.193847][T16379] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1424.214959][T16381] usb 2-1: Manufacturer: syz [ 1424.236553][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1424.236568][ T30] audit: type=1326 audit(1747197189.047:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.6.3578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cfcf8e969 code=0x0 [ 1424.278133][T16381] usb 2-1: SerialNumber: syz [ 1424.283212][T16379] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1424.322412][T16379] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1424.336006][T16381] usb 2-1: config 0 descriptor?? [ 1424.375519][T16379] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1424.416000][T16379] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1424.432009][T16379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.562416][T20293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.584324][T20293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.621314][T20293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.635846][T20293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.659130][T16379] usb 1-1: usb_control_msg returned -71 [ 1424.706942][T16379] usbtmc 1-1:16.0: can't read capabilities [ 1424.728329][T16379] usb 1-1: USB disconnect, device number 7 [ 1427.244575][T18163] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1427.510096][T18163] usb 6-1: config 0 has no interfaces? [ 1427.615073][T18163] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1427.697770][T18163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.773317][T18163] usb 6-1: Product: syz [ 1427.777563][T18163] usb 6-1: Manufacturer: syz [ 1427.814872][T18163] usb 6-1: SerialNumber: syz [ 1427.877973][T17292] usb 2-1: USB disconnect, device number 26 [ 1427.929837][T18163] usb 6-1: config 0 descriptor?? [ 1428.037598][T20320] loop6: detected capacity change from 0 to 7 [ 1428.058750][ T6096] Dev loop6: unable to read RDB block 7 [ 1428.072243][ T6096] loop6: AHDI p1 p2 p3 p4 [ 1428.085890][ T6096] loop6: partition table partially beyond EOD, truncated [ 1428.100382][ T6096] loop6: p1 start 926365495 is beyond EOD, truncated [ 1428.109113][ T6096] loop6: p2 start 744947712 is beyond EOD, truncated [ 1428.127534][ T6096] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1428.138370][T20320] Dev loop6: unable to read RDB block 7 [ 1428.150942][T20320] loop6: AHDI p1 p2 p3 p4 [ 1428.172154][T20320] loop6: partition table partially beyond EOD, truncated [ 1428.236173][T20320] loop6: p1 start 926365495 is beyond EOD, truncated [ 1428.284641][T20320] loop6: p2 start 744947712 is beyond EOD, truncated [ 1428.306238][T20320] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1429.015800][T20332] syz.1.3590: attempt to access beyond end of device [ 1429.015800][T20332] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1429.730911][T20340] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1430.153475][T17292] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1430.285333][T16381] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1430.535376][T16381] usb 7-1: device descriptor read/64, error -71 [ 1430.566535][T17292] usb 3-1: config 0 has no interfaces? [ 1430.595076][T17292] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1430.604932][T17292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.636486][T17292] usb 3-1: Product: syz [ 1430.696412][T17292] usb 3-1: Manufacturer: syz [ 1430.753274][T17292] usb 3-1: SerialNumber: syz [ 1430.785313][T16381] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1430.805911][T17292] usb 3-1: config 0 descriptor?? [ 1430.923292][T16381] usb 7-1: device descriptor read/64, error -71 [ 1431.035740][T16381] usb usb7-port1: attempt power cycle [ 1431.261309][T20349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.273445][T20349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.303330][T20349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.327786][T20349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.433534][T16381] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1431.479263][T16381] usb 7-1: device descriptor read/8, error -71 [ 1431.726432][T20359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'. [ 1431.743280][T16381] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1431.874139][T16381] usb 7-1: device descriptor read/8, error -71 [ 1431.910527][T16379] usb 6-1: USB disconnect, device number 33 [ 1431.994257][T16381] usb usb7-port1: unable to enumerate USB device [ 1432.063638][T18163] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1432.217909][T18163] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.270590][T18163] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1432.329503][T18163] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1432.369431][T20339] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3592'. [ 1432.392734][T18163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.495522][T18163] usb 2-1: Product: syz [ 1432.516381][T18163] usb 2-1: Manufacturer: syz [ 1432.560564][T18163] usb 2-1: SerialNumber: syz [ 1432.692182][T20341] syz.0.3592: attempt to access beyond end of device [ 1432.692182][T20341] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1432.887074][T18163] usb 2-1: config 0 descriptor?? [ 1433.486646][T20366] netlink: 'syz.1.3598': attribute type 10 has an invalid length. [ 1433.668984][T20366] bond0: (slave wlan1): Opening slave failed [ 1433.779080][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3602'. [ 1433.874698][T16381] usb 3-1: USB disconnect, device number 124 [ 1434.272793][T20383] fuse: Unknown parameter 'use00000000000000000000' [ 1434.973343][T20358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.015945][ T5823] usb 2-1: USB disconnect, device number 27 [ 1435.500042][T16379] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1435.773254][T16379] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 1435.800832][T16379] usb 6-1: config 0 has no interface number 0 [ 1435.823318][T16379] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.933058][T16379] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.972248][T16379] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1436.001312][T16379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.085840][T16379] usb 6-1: config 0 descriptor?? [ 1436.480733][T20398] loop2: detected capacity change from 0 to 7 [ 1436.501091][T20398] Dev loop2: unable to read RDB block 7 [ 1436.538397][T16379] logitech-djreceiver 0003:046D:C71B.0054: unknown main item tag 0x0 [ 1436.573417][T20398] loop2: unable to read partition table [ 1436.610500][T16379] logitech-djreceiver 0003:046D:C71B.0054: unknown main item tag 0x0 [ 1436.610882][T20398] loop2: partition table beyond EOD, truncated [ 1436.692222][T16379] logitech-djreceiver 0003:046D:C71B.0054: unknown main item tag 0x0 [ 1436.702688][T20398] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1436.813245][T16379] logitech-djreceiver 0003:046D:C71B.0054: unknown main item tag 0x0 [ 1436.861755][T16379] logitech-djreceiver 0003:046D:C71B.0054: unknown main item tag 0x0 [ 1436.921237][T16379] logitech-djreceiver 0003:046D:C71B.0054: unknown main item tag 0x0 [ 1436.998130][T16379] logitech-djreceiver 0003:046D:C71B.0054: unknown main item tag 0x0 [ 1437.085875][T16379] logitech-djreceiver 0003:046D:C71B.0054: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.5-1/input32 [ 1437.174503][T16379] usb 6-1: USB disconnect, device number 34 [ 1437.547330][T20406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3609'. [ 1437.684441][T20403] fido_id[20403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1438.313575][ T5917] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1438.431695][T20417] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3613'. [ 1438.463352][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 1438.520555][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.597279][ T5917] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 1438.739240][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1438.897491][ T5917] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 1439.024644][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.147977][ T5917] usb 3-1: config 0 descriptor?? [ 1439.246151][T16381] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1439.399096][ T5941] usb 3-1: USB disconnect, device number 125 [ 1439.475345][T16381] usb 7-1: Using ep0 maxpacket: 32 [ 1439.633791][T16381] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1439.782347][T16381] usb 7-1: config 127 has an invalid interface number: 25 but max is 0 [ 1439.813179][T16381] usb 7-1: config 127 has no interface number 0 [ 1439.820034][T16381] usb 7-1: config 127 interface 25 has no altsetting 0 [ 1440.909896][T16381] usb 7-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 1440.953509][T16381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.974587][T16381] usb 7-1: Product: syz [ 1440.978996][T16381] usb 7-1: Manufacturer: syz [ 1441.004927][T16381] usb 7-1: SerialNumber: syz [ 1441.428478][T16381] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 1441.866482][T16381] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 1442.373401][ T5823] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1442.403250][ T5917] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1442.563511][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 1442.733935][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 1442.767755][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1442.775970][ T5917] usb 1-1: can't read configurations, error -61 [ 1442.792485][ T5823] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1442.820327][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.852443][ T5823] usb 2-1: Product: syz [ 1442.865564][ T5823] usb 2-1: Manufacturer: syz [ 1442.895264][ T5823] usb 2-1: SerialNumber: syz [ 1442.944592][ T5823] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1442.951886][ T5823] r8152-cfgselector 2-1: config 0 descriptor?? [ 1443.043957][ T5917] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1443.733958][T20432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.745767][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 1443.747893][T20432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.796286][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1443.806926][ T5917] usb 1-1: can't read configurations, error -61 [ 1443.845736][ T5917] usb usb1-port1: attempt power cycle [ 1444.249746][ T5917] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1444.390476][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 1444.550275][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1444.600739][ T5917] usb 1-1: can't read configurations, error -61 [ 1444.753561][ T5917] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1446.672026][T16381] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1446.734679][T16381] usb 7-1: device firmware changed [ 1446.816385][T16381] ueagle-atm 7-1:127.25: usbatm_usb_probe: bind failed: -19! [ 1446.885070][T16381] usb 7-1: USB disconnect, device number 10 [ 1447.144999][T20446] loop2: detected capacity change from 0 to 7 [ 1447.299203][T20446] Dev loop2: unable to read RDB block 7 [ 1447.393371][T20446] loop2: unable to read partition table [ 1447.399846][T20446] loop2: partition table beyond EOD, truncated [ 1447.480468][T16381] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1447.493507][T20446] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1447.577099][T16381] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1447.731871][T16381] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 1448.079629][ T5823] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1448.238202][ T5917] usb 1-1: device descriptor read/8, error -71 [ 1448.306419][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.425484][ T5917] usb usb1-port1: unable to enumerate USB device [ 1448.512869][T16381] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1448.534803][ T5823] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1448.587131][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.636976][ T5823] usb 3-1: config 0 descriptor?? [ 1448.684323][T16381] usb 2-1: device descriptor read/64, error -71 [ 1448.737076][ T5823] pwc: Askey VC010 type 2 USB webcam detected. [ 1448.823640][ T5941] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1448.985384][T16381] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1448.993763][ T5941] usb 7-1: device descriptor read/64, error -71 [ 1449.091803][ T5823] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1449.111550][ T5823] pwc: recv_control_msg error -32 req 02 val 2700 [ 1449.141069][ T5823] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1449.154008][ T5823] pwc: recv_control_msg error -32 req 04 val 1000 [ 1449.169207][ T5823] pwc: recv_control_msg error -32 req 04 val 1300 [ 1449.180081][T16381] usb 2-1: device descriptor read/64, error -71 [ 1449.201587][T20452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.221436][T20452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.237424][ T5823] pwc: recv_control_msg error -32 req 04 val 1400 [ 1449.245755][ T5941] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1449.266708][ T5823] pwc: recv_control_msg error -32 req 02 val 2000 [ 1449.294056][T16381] usb usb2-port1: attempt power cycle [ 1449.305782][ T5823] pwc: recv_control_msg error -32 req 02 val 2100 [ 1449.330160][ T5823] pwc: recv_control_msg error -32 req 04 val 1500 [ 1449.340801][ T5823] pwc: recv_control_msg error -32 req 02 val 2500 [ 1449.387817][ T5823] pwc: recv_control_msg error -32 req 02 val 2400 [ 1449.397336][ T5941] usb 7-1: device descriptor read/64, error -71 [ 1449.516531][ T5941] usb usb7-port1: attempt power cycle [ 1449.538454][ T5823] pwc: recv_control_msg error -71 req 02 val 2600 [ 1449.565355][ T5823] pwc: recv_control_msg error -71 req 02 val 2900 [ 1449.572994][ T5823] pwc: recv_control_msg error -71 req 02 val 2800 [ 1449.591904][ T5823] pwc: recv_control_msg error -71 req 04 val 1100 [ 1449.642191][ T5823] pwc: recv_control_msg error -71 req 04 val 1200 [ 1449.653706][T16381] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1449.675951][ T5823] pwc: Registered as video103. [ 1449.687193][T16381] usb 2-1: device descriptor read/8, error -71 [ 1449.710156][ T5823] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input75 [ 1449.812686][ T5823] usb 3-1: USB disconnect, device number 126 [ 1449.864524][ T5941] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1449.907853][ T5941] usb 7-1: device descriptor read/8, error -71 [ 1449.936218][T16381] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1449.975825][T16381] usb 2-1: device descriptor read/8, error -71 [ 1450.084876][T16381] usb usb2-port1: unable to enumerate USB device [ 1450.166879][ T5941] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1450.224344][ T5941] usb 7-1: device descriptor read/8, error -71 [ 1450.344247][ T5941] usb usb7-port1: unable to enumerate USB device [ 1450.545094][T20477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.651624][T20477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.753289][T17292] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1450.807326][T20477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.821520][T20477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.420478][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3632'. [ 1455.711016][T16381] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1455.868325][T20525] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.868878][T16381] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 1455.877933][T20525] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.878003][T20525] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.878036][T20525] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1456.025686][T20525] vxlan0: entered promiscuous mode [ 1456.094591][T16381] usb 7-1: config 5 has no interface number 0 [ 1456.115312][T16381] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1456.167483][T16381] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1456.287733][T16381] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1456.355137][T16381] usb 7-1: config 5 interface 123 has no altsetting 0 [ 1456.406808][T16381] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1456.448609][T16381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.491853][T16381] usb 7-1: Product: syz [ 1456.522756][T16381] usb 7-1: Manufacturer: syz [ 1456.548365][T16381] usb 7-1: SerialNumber: syz [ 1456.767207][T20531] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 1456.910363][T16381] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1456.987644][T16381] usb 7-1: USB disconnect, device number 15 [ 1457.200854][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3637'. [ 1457.359354][T20538] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3637'. [ 1457.483367][ T5823] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1457.707161][T20552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3641'. [ 1457.709291][ T5823] usb 3-1: config 0 has no interfaces? [ 1457.734903][ T5917] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1457.896982][ T5823] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1457.901166][ T5917] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1457.939105][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1457.952669][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.998941][ T5823] usb 3-1: Product: syz [ 1458.031686][ T5823] usb 3-1: Manufacturer: syz [ 1458.061705][ T5823] usb 3-1: SerialNumber: syz [ 1458.083916][ T5941] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1458.095936][ T5917] usb 2-1: config 0 descriptor?? [ 1458.117903][ T5823] usb 3-1: config 0 descriptor?? [ 1458.205541][ T5917] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1458.586534][ T5941] usb 7-1: device descriptor read/64, error -71 [ 1458.628024][ T5917] gp8psk: usb in 128 operation failed. [ 1458.847118][T17292] usb 3-1: USB disconnect, device number 2 [ 1458.965892][T20563] loop6: detected capacity change from 0 to 7 [ 1459.120841][T20563] Dev loop6: unable to read RDB block 7 [ 1459.132368][T20563] loop6: unable to read partition table [ 1459.161263][T20563] loop6: partition table beyond EOD, truncated [ 1459.194833][T20563] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1459.539737][ T5941] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1459.781320][T20570] input input76: cannot allocate more than FF_MAX_EFFECTS effects [ 1459.794637][ T5941] usb 7-1: device descriptor read/64, error -71 [ 1459.830331][T20569] loop2: detected capacity change from 0 to 7 [ 1459.864571][ T6096] Dev loop2: unable to read RDB block 7 [ 1459.903240][ T6096] loop2: unable to read partition table [ 1459.922276][ T5941] usb usb7-port1: attempt power cycle [ 1459.960126][ T6096] loop2: partition table beyond EOD, truncated [ 1460.001908][T20569] Dev loop2: unable to read RDB block 7 [ 1460.011811][T20569] loop2: unable to read partition table [ 1460.074412][T20569] loop2: partition table beyond EOD, truncated [ 1460.092527][T20569] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1460.283857][ T5941] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1460.368390][ T5941] usb 7-1: device descriptor read/8, error -71 [ 1460.693560][ T5941] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1460.752625][ T5917] gp8psk: usb in 137 operation failed. [ 1460.819417][ T5917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1460.902539][ T5917] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1461.904536][T20587] fuse: Unknown parameter 'dd' [ 1461.923803][T18163] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1462.114506][T18163] usb 3-1: Using ep0 maxpacket: 16 [ 1462.142975][T18163] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.195329][T18163] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1462.233064][T18163] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1462.307467][T18163] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1462.324809][T17292] usb 2-1: USB disconnect, device number 33 [ 1462.348779][T18163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.405449][T18163] usb 3-1: Product: syz [ 1462.433948][T18163] usb 3-1: Manufacturer: syz [ 1462.438616][T18163] usb 3-1: SerialNumber: syz [ 1462.504619][T18163] usb 3-1: config 0 descriptor?? [ 1462.626026][T18163] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1462.670225][T18163] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1463.334011][T18163] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1463.417864][T18163] usb 3-1: USB disconnect, device number 3 [ 1463.924285][T18163] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1463.941692][T20615] [U] [ 1464.068217][T20619] loop2: detected capacity change from 0 to 7 [ 1464.095941][T18163] usb 6-1: device descriptor read/64, error -71 [ 1464.153160][T20619] Dev loop2: unable to read RDB block 7 [ 1464.158818][T20619] loop2: unable to read partition table [ 1464.217057][T20619] loop2: partition table beyond EOD, truncated [ 1464.261567][T20619] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1464.353769][T18163] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1464.404556][ T5941] usb 7-1: device descriptor read/8, error -71 [ 1464.554765][T18163] usb 6-1: device descriptor read/64, error -71 [ 1464.604886][ T5941] usb usb7-port1: unable to enumerate USB device [ 1464.674872][T18163] usb usb6-port1: attempt power cycle [ 1464.864388][T20629] sctp: [Deprecated]: syz.2.3661 (pid 20629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1464.864388][T20629] Use struct sctp_sack_info instead [ 1464.987709][T20633] bridge_slave_0: left allmulticast mode [ 1465.053411][T18163] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1465.064982][T20633] bridge_slave_0: left promiscuous mode [ 1465.088676][T20633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.128669][T18163] usb 6-1: device descriptor read/8, error -71 [ 1465.345157][T17292] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1465.443941][T18163] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1465.516901][T18163] usb 6-1: device descriptor read/8, error -71 [ 1465.564935][T17292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1465.604543][T17292] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1465.644074][T17292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.669016][T18163] usb usb6-port1: unable to enumerate USB device [ 1465.680059][T17292] usb 3-1: config 0 descriptor?? [ 1466.162084][T17292] usbhid 3-1:0.0: can't add hid device: -71 [ 1466.172443][T17292] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1466.239468][T17292] usb 3-1: USB disconnect, device number 4 [ 1467.727122][T20633] bridge_slave_1: left allmulticast mode [ 1467.732861][T20633] bridge_slave_1: left promiscuous mode [ 1467.755058][T20633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.339185][T20633] bond0: (slave bond_slave_0): Releasing backup interface [ 1468.433858][T20633] bond0: (slave bond_slave_1): Releasing backup interface [ 1468.647275][T20642] input: syz0 as /devices/virtual/input/input78 [ 1469.143652][T20633] team0: Port device team_slave_0 removed [ 1469.196325][T20633] team0: Port device team_slave_1 removed [ 1469.244009][T20633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.303444][T20633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.365525][T20633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1469.373078][T20633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.936981][T20651] vlan2: entered promiscuous mode [ 1469.942198][T20651] hsr0: entered promiscuous mode [ 1469.983568][ T5917] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 1470.143328][ T5917] usb 3-1: device descriptor read/64, error -71 [ 1470.667308][ T5917] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1470.844714][ T5917] usb 3-1: device descriptor read/64, error -71 [ 1470.965262][ T5917] usb usb3-port1: attempt power cycle [ 1471.253264][T18163] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1471.569780][T18163] usb 7-1: Using ep0 maxpacket: 32 [ 1471.604140][T18163] usb 7-1: no configurations [ 1471.608857][T18163] usb 7-1: can't read configurations, error -22 [ 1471.924543][T18163] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1472.203300][T18163] usb 7-1: Using ep0 maxpacket: 32 [ 1472.211684][T18163] usb 7-1: no configurations [ 1472.258954][T18163] usb 7-1: can't read configurations, error -22 [ 1472.315252][T18163] usb usb7-port1: attempt power cycle [ 1472.423321][ T5887] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1472.585005][ T5887] usb 2-1: device descriptor read/64, error -71 [ 1472.715035][ T5917] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1472.763320][T18163] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1472.784036][T18163] usb 7-1: Using ep0 maxpacket: 32 [ 1472.825093][ T5887] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1472.838398][T18163] usb 7-1: no configurations [ 1472.843076][T18163] usb 7-1: can't read configurations, error -22 [ 1472.901657][ T5917] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1472.901691][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1472.902895][ T5917] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1472.902934][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1472.902957][ T5917] usb 3-1: SerialNumber: syz [ 1472.993374][ T5887] usb 2-1: device descriptor read/64, error -71 [ 1473.070591][T18163] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1473.235224][T18163] usb 7-1: Using ep0 maxpacket: 32 [ 1473.353691][ T5887] usb usb2-port1: attempt power cycle [ 1473.365532][T20685] netlink: 'syz.5.3673': attribute type 21 has an invalid length. [ 1473.417547][T18163] usb 7-1: no configurations [ 1473.422294][T18163] usb 7-1: can't read configurations, error -22 [ 1473.453318][T18163] usb usb7-port1: unable to enumerate USB device [ 1473.764000][ T5887] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1473.892391][ T5887] usb 2-1: device descriptor read/8, error -71 [ 1474.253874][T16254] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1474.375830][ T5887] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1474.455025][T16254] usb 7-1: Using ep0 maxpacket: 32 [ 1474.476314][T16254] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1474.505428][T16254] usb 7-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1474.554365][T16254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.577133][ T5887] usb 2-1: device descriptor read/8, error -71 [ 1474.621525][T16254] usb 7-1: config 0 descriptor?? [ 1474.775669][ T5887] usb usb2-port1: unable to enumerate USB device [ 1475.030142][ T5917] usb 3-1: invalid UAC_HEADER (v1) [ 1475.078388][T16254] holtek_mouse 0003:04D9:A070.0056: item fetching failed at offset 2/5 [ 1475.146230][T16254] holtek_mouse 0003:04D9:A070.0056: hid parse failed: -22 [ 1475.178111][ T5917] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1475.204692][T16254] holtek_mouse 0003:04D9:A070.0056: probe with driver holtek_mouse failed with error -22 [ 1475.248008][ T5917] usb 3-1: USB disconnect, device number 8 [ 1475.262261][T20690] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3675'. [ 1475.283275][T18163] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1475.399640][T20682] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1475.469200][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1475.476529][T18163] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.566668][T18163] usb 6-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 1475.583646][T18163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.608830][T18163] usb 6-1: config 0 descriptor?? [ 1475.649613][T18163] pwc: Philips PCA646VC USB webcam detected. [ 1475.840575][T20696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1476.753262][ T5917] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1476.955544][ T5823] usb 7-1: USB disconnect, device number 24 [ 1477.067223][ T5917] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1477.121380][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.140906][T20704] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3679'. [ 1477.153340][T18163] pwc: send_video_command error -71 [ 1477.158606][T18163] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1477.224766][ T5917] usb 3-1: Product: syz [ 1477.229015][ T5917] usb 3-1: Manufacturer: syz [ 1477.252986][ T5917] usb 3-1: SerialNumber: syz [ 1477.295069][T18163] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1477.414624][ T5917] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1477.435977][T18163] usb 6-1: USB disconnect, device number 39 [ 1477.557082][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1477.620204][T20710] netlink: 'syz.0.3680': attribute type 1 has an invalid length. [ 1477.914733][ T5917] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1477.957063][T18163] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1478.073805][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 1478.094937][ T5917] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1478.106870][ T5917] usb 7-1: config 127 has an invalid interface number: 25 but max is 0 [ 1478.116104][ T5917] usb 7-1: config 127 has no interface number 0 [ 1478.128296][ T5917] usb 7-1: config 127 interface 25 has no altsetting 0 [ 1478.154612][T18163] usb 6-1: Using ep0 maxpacket: 32 [ 1478.244040][T17292] usb 3-1: USB disconnect, device number 9 [ 1478.258853][T20713] bond2: (slave gretap1): making interface the new active one [ 1478.260079][T20713] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1478.302782][ T5917] usb 7-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 1478.324096][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.332201][ T5917] usb 7-1: Product: syz [ 1478.342832][T18163] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1478.357642][ T5917] usb 7-1: Manufacturer: syz [ 1478.362309][ T5917] usb 7-1: SerialNumber: syz [ 1478.374505][T18163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.477651][T18163] usb 6-1: config 0 descriptor?? [ 1478.546896][T18163] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1478.662995][ T5917] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 1478.830546][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1479.577030][ T5917] usb 7-1: reset high-speed USB device number 25 using dummy_hcd [ 1479.799383][ T10] ath9k_htc: Failed to initialize the device [ 1479.891895][T17292] usb 3-1: ath9k_htc: USB layer deinitialized [ 1480.693587][T18163] gspca_nw80x: reg_w err -110 [ 1480.698461][T18163] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 1481.688833][T16254] usb 6-1: USB disconnect, device number 40 [ 1482.496655][ T30] audit: type=1326 audit(1747197247.327:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1482.658291][ T30] audit: type=1326 audit(1747197247.327:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1482.905622][ T30] audit: type=1326 audit(1747197247.357:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1483.126328][ T30] audit: type=1326 audit(1747197247.357:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1483.291344][ T30] audit: type=1326 audit(1747197247.357:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1483.354681][ T30] audit: type=1326 audit(1747197247.357:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1483.380956][ T30] audit: type=1326 audit(1747197247.357:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1483.426349][T20743] netlink: 'syz.2.3687': attribute type 1 has an invalid length. [ 1483.458626][ T30] audit: type=1326 audit(1747197247.357:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1483.531403][T20743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1483.624531][ T30] audit: type=1326 audit(1747197247.357:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1483.714710][ T30] audit: type=1326 audit(1747197247.367:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.2.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f0c3c38e969 code=0x7ffc0000 [ 1483.879204][T20742] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1484.084520][T20743] bond1: (slave dummy0): making interface the new active one [ 1484.099021][T20743] dummy0: entered promiscuous mode [ 1484.110760][T20743] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1484.593904][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.604685][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.683437][ T5917] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1484.723764][ T5917] usb 7-1: device firmware changed [ 1484.755796][ T5917] ueagle-atm 7-1:127.25: usbatm_usb_probe: bind failed: -19! [ 1484.896498][ T5917] usb 7-1: USB disconnect, device number 25 [ 1485.773210][ T5823] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1485.968347][T20759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1486.045255][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.058631][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.131019][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1486.313601][ T5823] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1486.324667][ T5917] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1486.467512][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.526272][ T5823] usb 3-1: config 0 descriptor?? [ 1486.573293][ T5917] usb 2-1: device descriptor read/64, error -71 [ 1486.903284][ T5917] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1486.983784][ T5823] usbhid 3-1:0.0: can't add hid device: -71 [ 1486.990362][ T5823] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1487.104693][ T5917] usb 2-1: device descriptor read/64, error -71 [ 1487.214068][ T5917] usb usb2-port1: attempt power cycle [ 1487.279536][ T5823] usb 3-1: USB disconnect, device number 10 [ 1487.615237][ T5917] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1487.664355][ T5917] usb 2-1: device descriptor read/8, error -71 [ 1487.933248][ T5917] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1487.975413][ T5917] usb 2-1: device descriptor read/8, error -71 [ 1488.125179][ T5917] usb usb2-port1: unable to enumerate USB device [ 1489.271396][T20783] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1489.358671][T20783] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1489.704513][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1489.805712][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3700'. [ 1489.872180][T20796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3700'. [ 1489.933182][T20796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3700'. [ 1490.026645][T20799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3700'. [ 1490.030238][T20803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.097866][T20803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.165308][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1490.165347][ T30] audit: type=1326 audit(1747197254.997:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20800 comm="syz.2.3702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c3c38e969 code=0x0 [ 1490.222891][ T5823] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1490.263555][T16381] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1490.385227][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 1490.397508][ T5823] usb 6-1: config 1 interface 0 altsetting 125 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.426780][ T5823] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1490.441864][ T5823] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.40 [ 1490.457923][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.484660][ T5823] usb 6-1: Product: 몎譮碥퐄 [ 1490.497684][ T5823] usb 6-1: Manufacturer: ဉ [ 1490.523733][ T5823] usb 6-1: SerialNumber: syz [ 1490.557468][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 1491.211661][T20830] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3708'. [ 1491.464997][ T5941] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1491.657010][T20832] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.720131][T20832] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.734881][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 1491.762689][ T5941] usb 1-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1491.769044][T20832] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.781927][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.831593][T20832] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.979779][ T5941] usb 1-1: Product: syz [ 1492.001558][ T5941] usb 1-1: Manufacturer: syz [ 1492.022381][ T5941] usb 1-1: SerialNumber: syz [ 1492.088523][ T5941] usb 1-1: config 0 descriptor?? [ 1492.109538][T20835] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1492.144772][T20835] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1492.146320][ T5941] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1492.448103][ T5941] pwc: send_video_command error -71 [ 1492.529053][ T5941] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1492.599377][ T5941] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1492.787901][ T5823] usbhid 6-1:1.0: can't add hid device: -71 [ 1492.808352][ T5941] usb 1-1: USB disconnect, device number 13 [ 1492.816409][ T5823] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1492.848657][ T5823] usb 6-1: USB disconnect, device number 41 [ 1493.253296][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1493.355314][ T5823] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1493.509872][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1493.555930][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1493.608216][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1493.627154][ T5823] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1493.667869][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.680893][ T5823] usb 6-1: config 0 descriptor?? [ 1493.686728][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1493.688208][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1493.797348][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1493.816373][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1493.827570][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1493.916762][T20841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.943829][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1493.944185][T20841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.023986][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1494.066158][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1494.100134][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1494.186418][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1494.216862][ T5823] logitech 0003:046D:CA03.0057: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0 [ 1494.264112][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1494.276051][ T5823] logitech 0003:046D:CA03.0057: no inputs found [ 1494.314752][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1494.367112][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1494.416271][ T5823] usb 6-1: USB disconnect, device number 42 [ 1494.484304][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1494.551180][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1494.685022][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1494.706487][T20852] fido_id[20852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1494.745297][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1494.787297][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1494.866794][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1494.905640][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1494.926130][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1494.965159][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1495.011434][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1495.055685][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1495.105823][ T10] usb 3-1: Product: syz [ 1495.123422][ T10] usb 3-1: Manufacturer: syz [ 1495.153614][ T10] usb 3-1: SerialNumber: syz [ 1495.232782][ T10] usb 3-1: config 0 descriptor?? [ 1495.233535][T20857] loop6: detected capacity change from 0 to 7 [ 1495.307044][ T10] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1495.338135][T20857] Dev loop6: unable to read RDB block 7 [ 1495.404799][T20857] loop6: unable to read partition table [ 1495.459017][T20857] loop6: partition table beyond EOD, truncated [ 1495.534861][T20857] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1495.596914][T20865] x_tables: duplicate underflow at hook 1 [ 1495.799483][T20870] loop2: detected capacity change from 0 to 7 [ 1495.840342][ T6096] Dev loop2: unable to read RDB block 7 [ 1495.885750][ T6096] loop2: unable to read partition table [ 1495.915036][ T6096] loop2: partition table beyond EOD, truncated [ 1495.929538][T20870] Dev loop2: unable to read RDB block 7 [ 1495.971373][T20870] loop2: unable to read partition table [ 1495.993938][T20874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1496.028282][T20870] loop2: partition table beyond EOD, truncated [ 1496.054095][T20870] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1496.124833][ T5823] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1496.298940][ T5823] usb 2-1: device descriptor read/64, error -71 [ 1496.583553][ T5823] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1496.743493][ T5823] usb 2-1: device descriptor read/64, error -71 [ 1496.885833][ T5823] usb usb2-port1: attempt power cycle [ 1497.585550][ T5823] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1497.629580][ T5823] usb 2-1: device descriptor read/8, error -71 [ 1497.785577][T16381] usb 3-1: USB disconnect, device number 12 [ 1497.834271][T16381] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1498.027045][ T31] INFO: task syz.3.3426:19691 blocked for more than 143 seconds. [ 1498.035537][ T5823] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1498.085186][ T31] Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 [ 1498.104831][ T5823] usb 2-1: device descriptor read/8, error -71 [ 1498.238354][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1498.286251][ T31] task:syz.3.3426 state:D stack:23840 pid:19691 tgid:19689 ppid:17199 task_flags:0x400140 flags:0x00000004 [ 1498.288675][ T30] audit: type=1326 audit(1747197263.117:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20904 comm="syz.2.3729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c3c38e969 code=0x0 [ 1498.333027][ T5823] usb usb2-port1: unable to enumerate USB device [ 1498.369525][ T31] Call Trace: [ 1498.400364][ T31] [ 1498.425216][ T31] __schedule+0x16e2/0x4cd0 [ 1498.490911][ T31] ? schedule+0x165/0x360 [ 1498.610862][ T31] ? __pfx___schedule+0x10/0x10 [ 1498.755953][ T31] ? schedule+0x91/0x360 [ 1498.792138][ T31] schedule+0x165/0x360 [ 1498.830987][ T31] schedule_preempt_disabled+0x13/0x30 [ 1498.884338][ T31] __mutex_lock+0x724/0xe80 [ 1498.889044][ T31] ? __mutex_lock+0x51b/0xe80 [ 1498.925192][ T31] ? blk_trace_ioctl+0x1b9/0x430 [ 1498.930281][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1499.032879][ T31] ? stack_depot_save_flags+0x40/0x910 [ 1499.077992][ T31] ? kasan_save_track+0x4f/0x80 [ 1499.084280][ T31] ? kasan_save_track+0x3e/0x80 [ 1499.089534][ T31] blk_trace_ioctl+0x1b9/0x430 [ 1499.095341][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1499.101072][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 1499.111109][T20879] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3723'. [ 1499.120805][ T31] blkdev_common_ioctl+0xdce/0x2450 [ 1499.127026][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1499.134608][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1499.140640][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1499.148916][ T31] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1499.156293][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1499.162537][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1499.214587][ T31] ? __lock_acquire+0xaac/0xd20 [ 1499.220059][ T31] blkdev_ioctl+0x4ef/0x6d0 [ 1499.227539][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1499.234713][ T31] ? __fget_files+0x3a0/0x420 [ 1499.239874][ T31] ? __fget_files+0x2a/0x420 [ 1499.246832][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1499.252514][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1499.259591][T20909] syz.5.3723: attempt to access beyond end of device [ 1499.259591][T20909] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1499.276100][ T31] __se_sys_ioctl+0xfc/0x170 [ 1499.280956][ T31] do_syscall_64+0xf6/0x210 [ 1499.287452][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1499.292567][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.301861][T20909] PM: Image not found (code -5) [ 1499.309813][ T31] RIP: 0033:0x7f9a19f8e969 [ 1499.339748][ T31] RSP: 002b:00007f9a1ae19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1499.397668][ T31] RAX: ffffffffffffffda RBX: 00007f9a1a1b5fa0 RCX: 00007f9a19f8e969 [ 1499.474340][ T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000006 [ 1499.514612][ T31] RBP: 00007f9a1a010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1499.526927][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.535700][ T31] R13: 0000000000000000 R14: 00007f9a1a1b5fa0 R15: 00007f9a1a2dfa28 [ 1499.545016][ T31] [ 1499.548680][ T31] [ 1499.548680][ T31] Showing all locks held in the system: [ 1499.647088][ T31] 1 lock held by khungtaskd/31: [ 1499.652010][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1499.668871][ T31] 2 locks held by klogd/5189: [ 1499.676630][ T31] 2 locks held by getty/5592: [ 1499.681377][ T31] #0: ffff88803443a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1499.694478][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1499.710720][ T31] 2 locks held by kworker/u8:10/8352: [ 1499.853742][ T31] 7 locks held by kworker/0:2H/12635: [ 1499.859655][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1499.992542][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 1500.025521][ T31] #2: ffff88802ef33b50 (&substream->lock){....}-{3:3}, at: snd_rawmidi_proceed+0x2c/0x120 [ 1500.037242][ T31] #3: ffff88806c66f070 (&runtime->sleep){....}-{3:3}, at: __wake_up_common_lock+0x2f/0x1f0 [ 1500.048201][ T31] #4: ffff88802f512828 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x6e/0x1290 [ 1500.057844][ T31] #5: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1500.070151][ T31] #6: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xe5/0x250 [ 1500.109584][ T31] 3 locks held by kworker/u8:4/16363: [ 1500.137285][ T31] 5 locks held by kworker/u8:11/16365: [ 1500.198548][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1500.283300][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 1500.295374][ T31] #2: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: taprio_dequeue+0x26/0x550 [ 1500.309889][ T31] #3: ffffffff99ae3890 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 1500.323329][ T31] #4: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: taprio_dequeue+0x26/0x550 [ 1500.339918][ T31] 3 locks held by kworker/u8:12/16366: [ 1500.387787][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1500.428762][ T31] #1: ffffc9001efbfc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1500.502876][ T31] #2: ffffffff8f2f72c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1500.631195][ T31] 3 locks held by kworker/1:4/16381: [ 1500.761289][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1500.877168][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x318/0x6d0 [ 1500.982979][ T31] #2: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: taprio_dequeue+0x26/0x550 [ 1501.017465][ T31] 1 lock held by syz.3.3426/19691: [ 1501.030270][ T31] #0: ffff888024514398 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x1b9/0x430 [ 1501.052252][ T31] 2 locks held by syz.3.3426/19692: [ 1501.072194][ T31] 4 locks held by kworker/u8:7/20518: [ 1501.092448][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1501.131058][ T31] #1: ffffc9000bddfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1501.165853][ T31] #2: ffffffff8f2ea790 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 1501.196828][ T31] #3: ffffffff8f2f72c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 1501.231443][ T31] 3 locks held by syz.5.3723/20883: [ 1501.251052][ T31] #0: ffff88805b68e808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1501.285436][ T31] #1: ffffffff8f359cb0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1501.320971][ T31] #2: ffff88805bafd8d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 1501.358682][ T31] 2 locks held by syz.6.3726/20884: [ 1501.376699][ T31] #0: ffffffff8f2f72c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1501.407671][ T31] #1: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 1501.453484][ T31] 2 locks held by syz.2.3729/20905: [ 1501.458867][ T31] #0: ffffffff8f35b830 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1501.493200][ T31] #1: ffffffff8f2f72c8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 1501.502605][ T31] [ 1501.644094][ T31] ============================================= [ 1501.644094][ T31] [ 1501.862881][ T31] NMI backtrace for cpu 0 [ 1501.862905][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1501.862934][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1501.862947][ T31] Call Trace: [ 1501.862956][ T31] [ 1501.862965][ T31] dump_stack_lvl+0x189/0x250 [ 1501.863001][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1501.863031][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1501.863062][ T31] ? __pfx__printk+0x10/0x10 [ 1501.863099][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1501.863124][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1501.863145][ T31] ? _printk+0xcf/0x120 [ 1501.863170][ T31] ? __pfx__printk+0x10/0x10 [ 1501.863194][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1501.863219][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1501.863244][ T31] watchdog+0xfee/0x1030 [ 1501.863276][ T31] ? watchdog+0x1de/0x1030 [ 1501.863312][ T31] kthread+0x711/0x8a0 [ 1501.863340][ T31] ? __pfx_watchdog+0x10/0x10 [ 1501.863368][ T31] ? __pfx_kthread+0x10/0x10 [ 1501.863395][ T31] ? __pfx_kthread+0x10/0x10 [ 1501.863420][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1501.863445][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1501.863482][ T31] ? __pfx_kthread+0x10/0x10 [ 1501.863507][ T31] ret_from_fork+0x4b/0x80 [ 1501.863528][ T31] ? __pfx_kthread+0x10/0x10 [ 1501.863554][ T31] ret_from_fork_asm+0x1a/0x30 [ 1501.863590][ T31] [ 1502.007588][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1502.013289][ C1] NMI backtrace for cpu 1 [ 1502.013315][ C1] CPU: 1 UID: 0 PID: 5941 Comm: kworker/1:7 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1502.013337][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1502.013351][ C1] Workqueue: events_power_efficient gc_worker [ 1502.013382][ C1] RIP: 0010:pie_calculate_probability+0x3c9/0x7e0 [ 1502.013421][ C1] Code: ff ff ff ff ff ff 00 48 8b 6c 24 38 4c 8b 7c 24 10 e9 a4 00 00 00 e8 f6 ec 49 f8 49 39 ef 76 33 e8 8c ea 49 f8 48 8b 44 24 18 <42> 80 3c 20 00 48 8b 6c 24 38 4c 8b 7c 24 10 74 08 4c 89 f7 e8 0e [ 1502.013437][ C1] RSP: 0018:ffffc90000a08a90 EFLAGS: 00000246 [ 1502.013452][ C1] RAX: 1ffff11009741050 RBX: ffbce459a57bbb40 RCX: ffff88802f42da00 [ 1502.013467][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffbce459a57bbb40 [ 1502.013480][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1502.013491][ C1] R10: dffffc0000000000 R11: fffff52000141154 R12: dffffc0000000000 [ 1502.013505][ C1] R13: 0019999999999998 R14: ffff88804ba08280 R15: ffbce459a57bbb40 [ 1502.013520][ C1] FS: 0000000000000000(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 1502.013535][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1502.013549][ C1] CR2: 0000555f8ef9aa08 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1502.013566][ C1] DR0: 0000000000000680 DR1: 0000000000000003 DR2: 0000000000000007 [ 1502.013577][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1502.013589][ C1] Call Trace: [ 1502.013596][ C1] [ 1502.013612][ C1] fq_pie_timer+0x288/0x5b0 [ 1502.013631][ C1] ? fq_pie_timer+0x4d/0x5b0 [ 1502.013650][ C1] call_timer_fn+0x17e/0x5f0 [ 1502.013677][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 1502.013693][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1502.013717][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1502.013747][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1502.013768][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1502.013790][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 1502.013808][ C1] __run_timer_base+0x61a/0x860 [ 1502.013831][ C1] ? ktime_get+0x3e/0x1f0 [ 1502.013857][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1502.013878][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1502.013907][ C1] run_timer_softirq+0xb7/0x180 [ 1502.013931][ C1] handle_softirqs+0x283/0x870 [ 1502.013950][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1502.013970][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1502.013989][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1502.014015][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1502.014032][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1502.014054][ C1] irq_exit_rcu+0x9/0x30 [ 1502.014070][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1502.014091][ C1] [ 1502.014097][ C1] [ 1502.014105][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1502.014124][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 1502.014150][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 6f c0 c6 09 e8 ca 65 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1502.014166][ C1] RSP: 0018:ffffc90004ce7518 EFLAGS: 00000286 [ 1502.014181][ C1] RAX: 80e4743b9af6a800 RBX: 0000000000000000 RCX: 80e4743b9af6a800 [ 1502.014194][ C1] RDX: 0000000000000006 RSI: ffffffff8d74c03c RDI: ffffffff8bc1d820 [ 1502.014207][ C1] RBP: ffffc90004ce7570 R08: ffffffff8f7efb77 R09: 1ffffffff1efdf6e [ 1502.014221][ C1] R10: dffffc0000000000 R11: fffffbfff1efdf6f R12: ffff88802f42da00 [ 1502.014235][ C1] R13: dffffc0000000000 R14: ffff88801d6f1e00 R15: ffff8880b893a6d8 [ 1502.014258][ C1] ? finish_task_switch+0x266/0x950 [ 1502.014286][ C1] __schedule+0x16ea/0x4cd0 [ 1502.014315][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1502.014335][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1502.014359][ C1] ? __pfx___schedule+0x10/0x10 [ 1502.014387][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1502.014417][ C1] preempt_schedule_irq+0xb5/0x150 [ 1502.014439][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1502.014465][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1502.014484][ C1] irqentry_exit+0x6f/0x90 [ 1502.014505][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1502.014525][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 [ 1502.014548][ C1] Code: f8 4d 85 e4 75 16 e8 f1 7d 37 f8 eb 15 e8 ea 7d 37 f8 e8 85 d3 cd 01 4d 85 e4 74 ea e8 db 7d 37 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 1502.014564][ C1] RSP: 0018:ffffc90004ce7900 EFLAGS: 00000293 [ 1502.014579][ C1] RAX: ffffffff89887415 RBX: 0000000000000000 RCX: ffff88802f42da00 [ 1502.014592][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1502.014603][ C1] RBP: ffffc90004ce79b0 R08: ffffffff8f7efb77 R09: 1ffffffff1efdf6e [ 1502.014617][ C1] R10: dffffc0000000000 R11: fffffbfff1efdf6f R12: 0000000000000200 [ 1502.014630][ C1] R13: ffff88802fc93018 R14: 1ffff9200099cf20 R15: dffffc0000000000 [ 1502.014648][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1502.014677][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1502.014708][ C1] gc_worker+0x308/0x1380 [ 1502.014736][ C1] ? gc_worker+0x264/0x1380 [ 1502.014765][ C1] ? __pfx_gc_worker+0x10/0x10 [ 1502.014791][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1502.014810][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1502.014828][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1502.014845][ C1] process_scheduled_works+0xade/0x17a0 [ 1502.014877][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1502.014916][ C1] worker_thread+0x8a0/0xda0 [ 1502.014935][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1502.014960][ C1] ? __kthread_parkme+0x7b/0x200 [ 1502.014985][ C1] kthread+0x711/0x8a0 [ 1502.015008][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1502.015025][ C1] ? __pfx_kthread+0x10/0x10 [ 1502.015047][ C1] ? __pfx_kthread+0x10/0x10 [ 1502.015068][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1502.015087][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1502.015108][ C1] ? __pfx_kthread+0x10/0x10 [ 1502.015129][ C1] ret_from_fork+0x4b/0x80 [ 1502.015148][ C1] ? __pfx_kthread+0x10/0x10 [ 1502.015169][ C1] ret_from_fork_asm+0x1a/0x30 [ 1502.015194][ C1] [ 1502.913210][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1502.920222][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 1502.932123][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1502.942591][ T31] Call Trace: [ 1502.945988][ T31] [ 1502.949059][ T31] dump_stack_lvl+0x99/0x250 [ 1502.953722][ T31] ? __asan_memcpy+0x40/0x70 [ 1502.958459][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1502.963725][ T31] ? __pfx__printk+0x10/0x10 [ 1502.968395][ T31] panic+0x2db/0x790 [ 1502.972384][ T31] ? __pfx_panic+0x10/0x10 [ 1502.976912][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 1502.982438][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1502.987850][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1502.994229][ T31] watchdog+0x102d/0x1030 [ 1502.999062][ T31] ? watchdog+0x1de/0x1030 [ 1503.003548][ T31] kthread+0x711/0x8a0 [ 1503.007683][ T31] ? __pfx_watchdog+0x10/0x10 [ 1503.012526][ T31] ? __pfx_kthread+0x10/0x10 [ 1503.017179][ T31] ? __pfx_kthread+0x10/0x10 [ 1503.021820][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1503.027078][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1503.032335][ T31] ? __pfx_kthread+0x10/0x10 [ 1503.036997][ T31] ret_from_fork+0x4b/0x80 [ 1503.041456][ T31] ? __pfx_kthread+0x10/0x10 [ 1503.046091][ T31] ret_from_fork_asm+0x1a/0x30 [ 1503.050943][ T31] [ 1503.054355][ T31] Kernel Offset: disabled [ 1503.058707][ T31] Rebooting in 86400 seconds..