last executing test programs: 8m55.219239922s ago: executing program 1 (id=485): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f00000002c0)='cifs.idmap\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) (async) add_key(&(0x7f00000002c0)='cifs.idmap\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) openat$sequencer(0xffffff9c, &(0x7f0000000200), 0x424c2, 0x0) (async) openat$sequencer(0xffffff9c, &(0x7f0000000200), 0x424c2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff}}}}}]}}]}}, 0x0) (async) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, &(0x7f0000000300)={0x0, 0xa, 0xf4, {0xf4, 0x31, "4460e7cfb46a1c9daa4e7b16d58a352da167c1c6ca0e02302bf7e52c662c71c4caeff3928509a633f74757331a48087cc423e7a663081f767eabc721bd7c6555bf7131b2f7413c40eeb02e9513edaddaeff23f068a93e6728b1d285670c5f3511c42aa9d9f6c0453e36ebdc47735358083f9f55aee8a036eb8508f23cacf7b3cc6d7700770ba800dce30f6e27aa91f163b94932ca4dd0fccb8973a1071430efac96ce4d4065499b69cc2dd436833f6c740e3ec8794f1706460ed63c0fa953f1c0488b3b131aa713ab1f9db2473fecf72a299e7b8ff29ecd71dab19a8eccf57932f544a0687dfc54a3ac9e083e088f5ae0745"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 8m53.517166966s ago: executing program 1 (id=491): socket$inet6(0xa, 0x3, 0xff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x3bac, &(0x7f00000001c0)={0x0, 0x4133, 0x20, 0x1, 0x313}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b0, 0x290, 0xd0, 0x1a0, 0x1a0, 0x0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff00, 0xff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x73, 0x81, 0x2, 0x64}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e0}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@private0, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x84}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0x8001, 0x6, 0x0, [0x3, 0x2, 0x1, 0x8, 0xd850, 0x8000, 0x0, 0x2bd8, 0x6, 0x7, 0x9, 0x3, 0x1, 0x1, 0xb30, 0xa2f6], 0xf}}, @common=@frag={{0x30}, {[0x6, 0x800], 0x5, 0xe, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x6, @ipv4=@private=0xa010101, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) syz_io_uring_submit(0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000480), 0x1000, 0xe2001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff7]}}) 8m50.896188271s ago: executing program 1 (id=502): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000480)=""/140, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) execve(0x0, 0x0, 0x0) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x32b982, 0x0) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = memfd_secret(0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) clock_gettime(0x0, &(0x7f0000000200)) 8m50.305237343s ago: executing program 1 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000540)="262e260fd7e266f30fc7fb2e65f2dee1bad104b80000ef0f08b886008ed0b823008ec0a071c166b84a0000000f23d00f21f866352000000c0f23f88e991f00", 0x3f}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 8m49.010321308s ago: executing program 1 (id=506): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000040)) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xfe00]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xb}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x8000}) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x35, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x33]}, &(0x7f0000000080)={0x0, "69dcaf2086ec9a8545f45826cb35be51ca73845d177dd8dba7221faeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) 8m48.745791969s ago: executing program 1 (id=507): socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x7) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) epoll_create(0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x3a04, &(0x7f0000000540)={0x0, 0xd046, 0x20, 0x1, 0x98}, &(0x7f0000000240), &(0x7f00000002c0)) io_uring_setup(0x131e, &(0x7f0000000440)={0x0, 0x6d37, 0x200, 0x1, 0x79, 0x0, r5}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000140)=0x7, 0x4) 8m47.655138672s ago: executing program 32 (id=507): socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x7) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) epoll_create(0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x3a04, &(0x7f0000000540)={0x0, 0xd046, 0x20, 0x1, 0x98}, &(0x7f0000000240), &(0x7f00000002c0)) io_uring_setup(0x131e, &(0x7f0000000440)={0x0, 0x6d37, 0x200, 0x1, 0x79, 0x0, r5}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000140)=0x7, 0x4) 7m22.409826373s ago: executing program 3 (id=807): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000000)=[0x0], &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x7, 0x9, 0x1, 0x0, r1}) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 7m21.894511023s ago: executing program 3 (id=809): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003000000000088a8000081000079"], 0x3e) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="d3", 0x1, 0x84000, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @private0, 0xffff}, 0x1c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x40010, r0, 0x96a00000) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000200)=0x32) 7m21.259303686s ago: executing program 3 (id=815): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket(0x1d, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000, 0x0, 0x1}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c0f000000c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576648eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af095a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0714b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb6ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b40867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d0400000000000000a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f710100ab8d0b545c334014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b57fe072d3218983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="d7ac50f1d4bdfe451abe4b40b7b0a6d0ad2c579028154749e634be35909906c77738d43f33cf9bfd62f65c045d59122b8b6f944b9804b0f56fcd9205c9734951e36b3d8abb965a8bd5e1375338be24055cac14fc2e980b8651e151521d7ca16e476260ae04d6154680a64178b5280cf2319a4770429bd7bea325d1b0e41508f19cdc2f06344940f2"], 0xdd) bind(r1, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) 7m21.037613361s ago: executing program 3 (id=816): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsname={'fsname', 0x3d, 'group_id'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m20.902974639s ago: executing program 3 (id=817): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0x54ef}}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x4000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x19, 0x4, 0xb9, 0x2c, @dev={0xfe, 0x80, '\x00', 0x36}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x700, 0x7800, 0x2, 0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) shutdown(r1, 0x1) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80880, 0x0) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000a0001004155444954"], 0xb4}}, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0xe5, 0x6, 0x1, 0x7, 0x1, 0x40, 0x2e, 0x1, 0xd7, [0x8, 0x4, 0x0, 0x5, 0x11d, 0x8000, 0x9, 0x3], [0x7, 0xffffffff, 0x5, 0x7, 0x4, 0x7, 0x0, 0x6, 0x5de1a01]}}) 7m20.898996234s ago: executing program 3 (id=818): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001000000080005000300000005000d"], 0x54}}, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0238bbee04a8f1b3d89b8148b70483efd5", @ANYRES32=r1], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r2, 0x0) (async, rerun: 64) io_setup(0x8, &(0x7f00000001c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000300)="87", 0x1, 0x4}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x408c0, 0x0) (async) r7 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) (async) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r8, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0x9c, 0x8, 0x3, 0x5, 0x1635}}, 0x120) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) readv(r8, &(0x7f0000000340)=[{&(0x7f0000000180)=""/48, 0x30}], 0x1) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000c40), 0x0, 0x54, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000380), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1808002100000000000000080001fe9300100000", @ANYRESHEX=r9, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x14, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0xa, 0x58, &(0x7f0000000780)=""/88, 0x40f00, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xd, 0x58de5a10, 0xe4d}, 0x10, 0x1bafe, 0xffffffffffffffff, 0x3, &(0x7f0000000840)=[0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x4, 0x0, 0x4}, {0x0, 0x5, 0xf, 0xa}, {0x5, 0x1, 0x3, 0x6}], 0x10, 0x401, @void, @value}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%-010d \x00'}, 0x20) (rerun: 64) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r12, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x7ff, 0x18}, 0xc) (async) r14 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r14, 0x4, 0x2) getdents64(r14, 0xffffffffffffffff, 0x43) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="83b3000108000000186b00000e0000000000000001000080183000000300000000000000000000006280e0ff0800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000080008500000086000000852000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018450000fdffffff0000000000000000"], &(0x7f0000000380)='GPL\x00', 0x10001, 0x74, &(0x7f00000003c0)=""/116, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, r6, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r10, 0x4, &(0x7f0000000a80)=[r11, 0xffffffffffffffff, r12, r13, r14], &(0x7f0000000ac0)=[{0x2, 0x2, 0x7, 0xa}, {0x2, 0x2, 0x4, 0x3}, {0x1, 0x3, 0xa, 0x7}, {0x4, 0x3, 0x0, 0x9}], 0x10, 0x3, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x12d0c0f1}, {}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x12000000}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x67a}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x3, 0x0, 0xb, 0x6, 0x30, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x72a}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0xa, 0x8f, &(0x7f0000000480)=""/143, 0x41000, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x30b, @void, @value}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0xf3}, 0xc) 7m20.287894474s ago: executing program 33 (id=818): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001000000080005000300000005000d"], 0x54}}, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0238bbee04a8f1b3d89b8148b70483efd5", @ANYRES32=r1], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r2, 0x0) (async, rerun: 64) io_setup(0x8, &(0x7f00000001c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000300)="87", 0x1, 0x4}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x408c0, 0x0) (async) r7 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) (async) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r8, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0x9c, 0x8, 0x3, 0x5, 0x1635}}, 0x120) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) readv(r8, &(0x7f0000000340)=[{&(0x7f0000000180)=""/48, 0x30}], 0x1) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000c40), 0x0, 0x54, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000380), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1808002100000000000000080001fe9300100000", @ANYRESHEX=r9, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x14, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0xa, 0x58, &(0x7f0000000780)=""/88, 0x40f00, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xd, 0x58de5a10, 0xe4d}, 0x10, 0x1bafe, 0xffffffffffffffff, 0x3, &(0x7f0000000840)=[0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x4, 0x0, 0x4}, {0x0, 0x5, 0xf, 0xa}, {0x5, 0x1, 0x3, 0x6}], 0x10, 0x401, @void, @value}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%-010d \x00'}, 0x20) (rerun: 64) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r12, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x7ff, 0x18}, 0xc) (async) r14 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r14, 0x4, 0x2) getdents64(r14, 0xffffffffffffffff, 0x43) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="83b3000108000000186b00000e0000000000000001000080183000000300000000000000000000006280e0ff0800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000080008500000086000000852000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018450000fdffffff0000000000000000"], &(0x7f0000000380)='GPL\x00', 0x10001, 0x74, &(0x7f00000003c0)=""/116, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, r6, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r10, 0x4, &(0x7f0000000a80)=[r11, 0xffffffffffffffff, r12, r13, r14], &(0x7f0000000ac0)=[{0x2, 0x2, 0x7, 0xa}, {0x2, 0x2, 0x4, 0x3}, {0x1, 0x3, 0xa, 0x7}, {0x4, 0x3, 0x0, 0x9}], 0x10, 0x3, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x12d0c0f1}, {}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x12000000}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x67a}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x3, 0x0, 0xb, 0x6, 0x30, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x72a}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0xa, 0x8f, &(0x7f0000000480)=""/143, 0x41000, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x30b, @void, @value}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0xf3}, 0xc) 1m42.764326702s ago: executing program 2 (id=2213): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) memfd_secret(0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r1, 0xae64, 0x0) 1m42.423808772s ago: executing program 2 (id=2214): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x80000000, &(0x7f0000000000)=0x1) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "e857"}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) 1m41.577696694s ago: executing program 4 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x9, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 1m41.312428596s ago: executing program 4 (id=2221): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000980)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={0x0, 0xcb}, 0x8) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f0000000400)=ANY=[@ANYBLOB="52bbc2b429"], 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, [0x97, 0x6, 0x100, 0x6, 0x793fc725, 0x8, 0x9, 0x76, 0x0, 0x200, 0x2, 0x75fb, 0x9, 0x10000, 0xe]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x51, 0x8001, 0x800, 0x40, 0x8, 0x200, 0x8000, r5}, &(0x7f0000000280)=0x20) 1m40.179979747s ago: executing program 4 (id=2230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffffffffffffd6, &(0x7f00000000c0)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) 1m39.53789646s ago: executing program 4 (id=2235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f0000000000000000000100000000000000140020"], 0x64}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f000031f000/0x4000)=nil, 0x4000, 0x0, 0x8031, r3, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2d, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x44044) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x19cce99f87779c7, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x92, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x2, 0x9, {0x7, 0x25, 0x1, 0x80, 0x8, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x82, 0x5, 0x6}}}}}}}]}}, 0x0) 1m38.584119706s ago: executing program 2 (id=2238): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x6, &(0x7f0000003b80)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0xffff, r0, 0x0, 0x0, 0x800}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x7c}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x8, &(0x7f0000000100)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8c}, [@ldst={0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x3, 0x9, 0x4, 0x6, 0xffffffffffffffe0}, @ldst={0x1, 0x3, 0x2, 0xb, 0xc, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000003ff6)='GPL\x00', 0xfffffa2b, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$TIOCCONS(r4, 0x541d) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xff, 0x4000000, 0x80000001, 0x9, 0x2, 0x8, 0xd, 0x20000, 0xe}) 1m37.171885963s ago: executing program 2 (id=2242): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0006400000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6bfdffff190001000000000000000000e00000020000000000000000000000000000000000000000000a00200000000000acfefb9367e8d0715f67bba56faabdb78471acaf085f07b1c5a1f92b9c2be088437d1dbf92cbd660e428ecf62e4225ce06913d41e0a90e56bb00"/122, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000010000000000000000"], 0xb8}}, 0x0) io_setup(0x5, &(0x7f0000000040)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$TIOCGSID(r5, 0x800248a0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000100)=0x7fffffff, 0x4) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0}) 1m36.387741966s ago: executing program 4 (id=2245): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x118, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x218, 0x230, 0x230, 0x218, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb8, 0x0, {0x1000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffffffd}}}}, 0x288) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4000000, @loopback, 0x1}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x37, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdd}, [@map_idx={0x18, 0xc, 0x5, 0x0, 0x1}, @alu={0x7, 0x0, 0xc, 0x9, 0x8, 0x4, 0xffffffffffffffff}, @tail_call, @snprintf, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x1, 0x3, 0x0, 0x4, 0x80}, @exit]}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}}, 0x0) (async) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_NMI(r8, 0xae9a) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x5, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x7}}]}]}}}}}}}, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m36.120308754s ago: executing program 2 (id=2247): syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/vlan0\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x60}}, 0x8000) 1m35.696246386s ago: executing program 4 (id=2249): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x100, 0x4, 0x80288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2800000006"], 0x28}, 0x0, 0x2000c000}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x26) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff940200000000000040000000000000000000000000000000000000002c8f380003"], 0xe6) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1m34.650606973s ago: executing program 34 (id=2249): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x100, 0x4, 0x80288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2800000006"], 0x28}, 0x0, 0x2000c000}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x26) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff940200000000000040000000000000000000000000000000000000002c8f380003"], 0xe6) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1m34.645451137s ago: executing program 2 (id=2251): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0xd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf1ff, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 1m34.644968331s ago: executing program 35 (id=2251): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0xd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf1ff, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 9.581005969s ago: executing program 7 (id=2616): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r1, 0x0, r1, &(0x7f0000000080)=0xfffffffffffffffc, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x00Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000749000/0x4000)=nil, 0x4000, 0x1000000) (async) splice(r3, 0x0, r2, &(0x7f0000000140)=0x9, 0x27, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000790900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r4, 0x400, 0x0) (async) fcntl$getflags(r4, 0x401) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x21, 0xe1, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) (async) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c00)=""/4092, 0xffc}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002d40)=""/4107, 0x100b}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000840)=""/249, 0xf9}], 0x7}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x10122, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 7.953845131s ago: executing program 7 (id=2621): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x600000000000000, 0x200000000200, 0x200000000230, 0x200000000260], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000900000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000001ac100feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 7.798012127s ago: executing program 7 (id=2624): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(anubis-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_clone(0x21209000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_setup(0x75b5, &(0x7f0000000380)={0x0, 0x8b15, 0x8, 0x7ffe, 0x2d9}, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 5.824275364s ago: executing program 6 (id=2630): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000500ac1414bb08001e0069"], 0x60}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x300) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 5.767928664s ago: executing program 6 (id=2631): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0x1f8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) (async, rerun: 32) r0 = socket$nl_generic(0x11, 0x3, 0x10) (rerun: 32) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f86dd", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4002, &(0x7f0000006680)) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000880)=""/4096) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x21, 0x800, 0x0) (async) listen(r1, 0x7) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) syz_emit_ethernet(0x86, &(0x7f0000000240)={@broadcast, @random="010000950700", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@loopback]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async, rerun: 32) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000fca01443622533411000030401610000000000000000000037240ded620ce6ef6bf64f2914f385a74ee1f59f25", @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 5.677488223s ago: executing program 6 (id=2632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x4018000, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000240)={0x18, 0x0, r3, {0xc17}}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000100003040000c1000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) (async) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x4018000, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async) write$FUSE_WRITE(r4, &(0x7f0000000240)={0x18, 0x0, r3, {0xc17}}, 0x18) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0, r4}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000100003040000c1000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) 5.383147838s ago: executing program 5 (id=2635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000340), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000007880)) syz_emit_ethernet(0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045bd751249b9b743d74785e8a656bfbd3c0000330000000000019078ac1e0001ac1414aa0bff03000000000045000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getgid() ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = gettid() sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x800, 0x0, 0x6, 0x7, 0xfffffffffffffffd, 0x3, 0x4008}, 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000000340), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000008c0)=@gettaction={0x84, 0x32, 0x300, 0x70bd25, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x84}}, 0x40088c4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x0, 0x0, 0x1c0, 0x1c0, 0x298, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'ipvlan1\x00', {0xff}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, 0x4e21}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x89}}, @common=@inet=@set4={{0x50}, {{0x2, 0x4, 0x2}, {{0x2}, 0x4}, {{0x2}, 0xfc}, 0x6}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffff7, 0x800000e, @ipv4=@loopback, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000280)={0x3, 0x0, [{0x8080000, 0x1000, &(0x7f0000001cc0)=""/4096}, {0x3000, 0xa6, &(0x7f0000000180)=""/166}, {0xffff1000, 0x21, &(0x7f0000000240)=""/33}]}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.613065742s ago: executing program 7 (id=2638): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x421, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4b61}, [@IFLA_ADDRESS={0xa, 0x1, @random="d7655687250f"}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) r2 = getpid() r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r4, 0x7) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x10}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xc4, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x7, 0x9, 0x0, 0x5, 0x1, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x8, 0xa, 0x7fff, 0xdc63, 0x0, 0x2d, 0x800}}, {0x4}}, {{0x1c, 0x1, {0x70, 0x1, 0x4, 0x100, 0x1, 0xfffffff9, 0x8, 0x3}}, {0xa, 0x2, [0x3, 0xb, 0x5]}}, {{0x1c, 0x1, {0x5, 0x9, 0x5000, 0x1, 0x1, 0x4, 0x3, 0x2}}, {0x8, 0x2, [0x9, 0x2]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 4.285476491s ago: executing program 5 (id=2640): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) r7 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r4], 0x4}}, 0x0) (async) sendfile(r8, r7, 0x0, 0x100000002) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.262730663s ago: executing program 7 (id=2641): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_ifindex=r1, @dev}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300010000000800014000000017080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x8801) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0x4}, {0xfff3, 0x2}, {0x7, 0xe}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0xfb59}, {0x8}, {0x8, 0xb, 0xe833}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x90) close(r4) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000540)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000001c0)={@local, @remote, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a8316804003fd4401100", 0x0, 0x3, 0x0, 0x3}, 0x3c) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="09004500005c00000000002f9078000000e0e000c800b480655800000088be000000021000000088f7ffff00000000080022eb0000000020000000020000000000000000008b7ae25047e3d7e000"/91], 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x202, 0x0) socket$igmp(0x2, 0x3, 0x2) 4.208122549s ago: executing program 6 (id=2642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x200800, 0x8) fcntl$getflags(r4, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x84, 0x10001, 0xfffffffffffffff2, 0xfffffffffffffff0, 0x5, 0x8, 0x5, 0x8, 0x6, 0x800, 0x4, 0xa, 0x1, 0x4, 0xffffffffffffffff]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000280)={r5, 0x9, 0x6, [0xd, 0xbd44, 0xe, 0x2, 0x2, 0x2]}, 0x14) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100a, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$UHID_CREATE2(r8, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x42, 0x4, 0x400, 0x7, 0x7, 0x3, "0e5bc66ac9cf3cfeec4cca4e181d59d636aa38a6d8a2d980add6b13f30c88bbe5407f7addcabf79101c6f3d013504eb4fc938344ab3e12faf4a166692a886d2c75a1"}}, 0x15a) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffffb7000040"]) 4.06349388s ago: executing program 5 (id=2644): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x73}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x24000810) 3.956049767s ago: executing program 6 (id=2645): timer_create(0x3, 0x0, &(0x7f0000003240)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x22400, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) mq_notify(r1, &(0x7f0000000440)={0x0, 0x2, 0x2, @tid=r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="050025bd7000fedbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="080005000600000010001780040006000400010004000500280017800400050004000500040005000400060004000200040015000400020004000200040004000a00e80008021100000100001c00e7"], 0x84}, 0x1, 0x0, 0x0, 0x40048}, 0x24004800) timer_getoverrun(r0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x85, 0x0, 0x0, 0x0, 0x6c, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000002c0)={@empty, @loopback, 0x0}, &(0x7f0000000040)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000004c0)="2694288ee76e0950fb912fc492d2f75b578dfa71bea2f5cef20613548609f6f07e655e509fad9b0f309ece26b46d1d6323bc253e7670ba41460a287aaceb93e3a890b4e7ef69b1ab658aabd45f42d177fd16459eb2faf1e7b0bef6bb0338851e6fac41380136488f37592ecc8530c46e94b0677663eb9f746b8f074bae06620d6818218dec15e40dc330411cd407574f28559ac767b5581598c9d93f9ba3554dff740fbba9d5894cfb22d0d8b6a1083fbc21dbea17f470d30723a792b55b45c1084dde086a2c9a0ec768aed0b90fe1c6a494e1a4487f471e5976a462679bcada68fddf119bf0791954cefb", 0xeb, 0xfffffffffffffffe) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x9, r9, 0x5}, 0xc) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[], 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 3.160318116s ago: executing program 5 (id=2646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x0, 0xfd, 0xb, 0x1, 0x5, @remote, @loopback={0x0, 0x460c6}, 0x20, 0x8000, 0x1, 0x40000}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010007bd7000a400df2555000000080001006400000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x28, r4, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x20}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000050) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r9 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000040)={0x16000000b}) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r10 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r10, 0x25, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003080103000000000000000000000000050003008400000014000480080009"], 0x38}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000400)={{{@in=@initdev, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0xe8) 2.715775774s ago: executing program 8 (id=2647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01}, 0x0) (fail_nth: 2) 2.180022407s ago: executing program 8 (id=2648): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) listen(r0, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) unshare(0x24020400) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x82) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x2e25ffeff7222b81, 0x404c040}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r9, 0xffffffffffffffff, 0x7, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) readv(r10, &(0x7f0000001280)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/36, 0x24) 1.606247925s ago: executing program 0 (id=2649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x54, "4af85587a57a539699d80896fbf1d964aeac5a41d767f5167d795633f56ad3d7f9ccb98b44ba2f5abccd5e9b6530e5a5e862921601d750d31739c05de6a3be9ebc335723e836b16368d41a3b9f53b2b9633a5011"}, &(0x7f00000000c0)=0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={r3, @in={{0x2, 0x4e22, @multicast2}}, 0xc0, 0x5, 0x8, 0x9, 0xda}, &(0x7f00000001c0)=0x98) r4 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) listen(r1, 0xb0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0x80800) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @empty}, &(0x7f0000000340)=0xc) bind$packet(r5, &(0x7f0000000380)={0x11, 0xf6, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=@newsa={0x278, 0x10, 0x800, 0x70bd29, 0x25dfdbfe, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e21, 0x8, 0xa, 0x20, 0xc0, 0x29, r6, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, @in6=@mcast2, {0x240000, 0x6, 0xfa32, 0x101, 0x0, 0x5c1, 0x9, 0x7f}, {0x7, 0xd, 0x1, 0x6}, {0x1, 0x1, 0x100}, 0x70bd26, 0x3503, 0xa, 0x1, 0x7, 0x7e58d822537ae9ed}, [@address_filter={0x28, 0x1a, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x2, 0x0, 0x5}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x2}}, @migrate={0x134, 0x11, [{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in=@rand_addr=0x64010101, 0x33, 0x2, 0x0, 0x0, 0x2, 0x1e}, {@in=@rand_addr=0x64010100, @in6=@mcast1, @in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x3506, 0xa, 0xa}, {@in6=@mcast1, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33, 0x0, 0x0, 0x3507, 0x2, 0xa}, {@in=@private=0xa010101, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in6=@local, @in=@multicast2, 0x0, 0xa98c1f633049fd65, 0x0, 0x3502, 0xa, 0xa}]}]}, 0x278}, 0x1, 0x0, 0x0, 0xc011}, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r9, &(0x7f0000000700)={0xa, 0x4e24, 0x6, @local, 0x2}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r8, {0x6, 0x2}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000000780)=[@in6={0xa, 0x4e21, 0x9, @loopback, 0x3b5}, @in6={0xa, 0x4e24, 0x60, @local, 0x7ff}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0xc8be}], 0x64) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x7, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x2, 0x10, 0x5, 0x400, r12, 0x0, '\x00', r6, r11, 0x3, 0x4, 0x2, 0xc, @void, @value, @void, @value}, 0x50) socket$l2tp(0x2, 0x2, 0x73) r13 = openat$mice(0xffffffffffffff9c, &(0x7f0000000900), 0x80400) sendmsg$NL80211_CMD_TESTMODE(r13, &(0x7f0000000b00)={&(0x7f0000000940), 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x140, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xe6, 0x45, "78b6686d484a0308e56937f09eefccbb3fabcaa7de175f5a0c800c1679fddf10bd650d50dd49e3c59ec7d40c713cb22b6a2feca36ca4a5bff628beed2496e8ae790715cdc55b469bb9d9d74dce117f1401e4181824e78d49efc9e5cba9946977c3e43681bdb76394da45c734f6a353019ac09d6f4ad4e861792dc536d0fd1702d7cc9790352c90f9c1648f03ed5ea6b51a28bbcee9946a460880432bfd38415ab31ada722dd1b7c033c8bf793f3b03c298d1d5378694b7355e382ad0b5747a4ec6f59b33bb5fcc8950a991f7dc9e6432f785e2f2db64a671683cd568f0c57c4119c5"}, @NL80211_ATTR_TESTDATA={0x43, 0x45, "6591394f76b4c11312b70fdb418a776701ba0c144b588177ac85253f834a0aa14686f387d24b58f942423ec13ff0f90b17e75cb9488a195aa40c49f00bf817"}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl$NBD_CLEAR_QUE(r10, 0xab05) syz_emit_ethernet(0x1e, &(0x7f0000000b40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @empty, @void, {@can={0xc, {{}, 0x5, 0x3, 0x0, 0x0, "15be50b95cb3ddb2"}}}}, &(0x7f0000000b80)={0x1, 0x4, [0xbcb, 0x922, 0xffe, 0xe1f]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={r13, 0x20, &(0x7f0000000dc0)={&(0x7f0000000bc0)=""/250, 0xfa, 0x0, &(0x7f0000000cc0)=""/241, 0xf1}}, 0x10) ioctl$IOCTL_STOP_ACCEL_DEV(r11, 0x40096101, &(0x7f0000001240)={{&(0x7f00000011c0)={'KERNEL\x00', {&(0x7f0000000f00)=@adf_dec={@format={'Cy', '0', 'RingAsymRx\x00'}, {0x1}, {&(0x7f0000000e40)=@adf_hex={@normal='NumberDcInstances\x00', {0x1}}}}}, {&(0x7f0000001140)={'Accelerator1\x00', {&(0x7f0000001080)=@adf_dec={@normal='NumberDcInstances\x00', {0x2535}, {&(0x7f0000000fc0)=@adf_str={@normal='NumberCyInstances\x00', {"2ddad2fd51dc897e907f78137ffe784b8215fa5ecbd3ad2b164565ff3f64dcbab03d36236797d7777096da645efd294786859a93cdb1d959c986e05af4fc8394"}}}}}}}}}, 0x8}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{}, &(0x7f0000001280), &(0x7f00000012c0)='%pi6 \x00'}, 0x20) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001380)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80400) 332.718394ms ago: executing program 5 (id=2650): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x0) unshare(0x20000400) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f00000001c0)={0x9, 0x5, 0x9}) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010, 0x0, 0x389}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 327.784966ms ago: executing program 7 (id=2651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x6c}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109025c00020107e0f10904000001020d000005240600012c232475db43dfa528a2fd2a3dcf05240008000d240f0107000000227303007206241a018000090581034800500afc0904010000020d00000904010102020d000009050b02d1c4b467bd424dd064ca31fe84e5"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x1007}}, {0x6, &(0x7f0000001480)=@string={0x6, 0x3, "28da2adc"}}]}) socket$netlink(0x10, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000180), 0x80) 319.823495ms ago: executing program 0 (id=2652): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x7f, {{0xa, 0x4e22, 0x9, @private2, 0x2}}}, 0x88) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f0000000040)}) 316.476281ms ago: executing program 8 (id=2653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x3, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000008c0)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c33d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 314.608291ms ago: executing program 5 (id=2654): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x57, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x67, 0xf9, 0x78, 0x40, 0x2639, 0x3, 0xfd62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x0, 0x0, 0xb2, 0xfa, 0x4e}}]}}]}}, 0x0) 296.254283ms ago: executing program 8 (id=2655): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x30, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}}, 0x8000) 295.492679ms ago: executing program 6 (id=2656): r0 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000640)) r2 = socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000206b1d01014000010203010902930003010900040904000000010100000a240101000e0201020d2407050100014c8d3ca75ddc0c240704010006f01fc273da0c2402050302010807000206090401000001020000090402000101020000090501094000070805072501007f050009040200000102000009040201"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/cpu_byteorder', 0x80, 0xd) read$FUSE(r7, &(0x7f0000000800)={0x2020}, 0x2020) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x2a) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x6, 0x1, 0x1, 0x1}, 0x8) epoll_create1(0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, r0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getpeername$packet(r1, 0x0, &(0x7f0000000640)) (async) socket(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) (async) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000206b1d01014000010203010902930003010900040904000000010100000a240101000e0201020d2407050100014c8d3ca75ddc0c240704010006f01fc273da0c2402050302010807000206090401000001020000090402000101020000090501094000070805072501007f050009040200000102000009040201"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) (async) socket$alg(0x26, 0x5, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/cpu_byteorder', 0x80, 0xd) (async) read$FUSE(r7, &(0x7f0000000800)={0x2020}, 0x2020) (async) openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) (async) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x2a) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x6, 0x1, 0x1, 0x1}, 0x8) (async) 294.352228ms ago: executing program 8 (id=2657): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @local}, {0x0, 0x4e32, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "0000000000000000000000000000000200", '\x00', {'\x00', "000000000000000000009b7e00"}}}}}}}, 0x0) 293.612719ms ago: executing program 0 (id=2658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01}, 0x0) (fail_nth: 3) 292.977917ms ago: executing program 0 (id=2659): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x5, 0x42242) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001340)={0x7, [[0x100, 0xcde0, 0x9, 0x9, 0x7fffffff, 0x0, 0x1, 0xf], [0x6, 0xf, 0x3, 0x7, 0x5, 0xe4, 0x7, 0x8f], [0x23, 0x9a, 0xe, 0x7ff, 0x1, 0x1, 0x7fffffff, 0x3]], '\x00', [{0x9, 0x7, 0x1, 0x1}, {0x0, 0x1f96, 0x1, 0x0, 0x1}, {0xf, 0x400, 0x1, 0x1, 0x1}, {0x200, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x1b, 0x9, 0x1, 0x1, 0x1}, {0x3ff, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xfffffeff, 0x680e, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x7fff, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x4, 0xfffffff9, 0x0, 0x0, 0x1}, {0x9, 0x2f, 0x1, 0x0, 0x1, 0x1}], '\x00', 0x2}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xc4, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x7, 0x9, 0x0, 0x5, 0x1, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x8, 0xa, 0x7fff, 0xdc63, 0x0, 0x2d, 0x800}}, {0x4}}, {{0x1c, 0x1, {0x70, 0x1, 0x4, 0x100, 0x1, 0xfffffff9, 0x8, 0x3}}, {0xa, 0x2, [0x3, 0xb, 0x5]}}, {{0x1c, 0x1, {0x5, 0x9, 0x5000, 0x1, 0x1, 0x4, 0x3, 0x2}}, {0x8, 0x2, [0x9, 0x2]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x1401, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='numa_maps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0x2020) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x1b, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x1, 0x2, 0x4, 0x9, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xc32}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0xc, 0xb, 0x2, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0xfffffff8}], &(0x7f0000000340)='GPL\x00', 0x80, 0x1b, &(0x7f0000000440)=""/27, 0x41100, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x1, 0x4, 0x8}, 0x10, 0x0, r4, 0x2, &(0x7f0000000500)=[r1, 0x1], &(0x7f0000000540)=[{0x1, 0x1, 0xb, 0x1b}, {0x3, 0x2, 0xe, 0xa}], 0x10, 0x7fffffff, @void, @value}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@fallback=r0, 0x1f, 0x0, 0x616a, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000016c0)={@cgroup=r4, r5, 0x2a, 0x4, 0x0, @void, @value=r4, @void, @void, r6}, 0x20) 285.22357ms ago: executing program 8 (id=2660): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x5, 0x141101) r3 = dup(r2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) mlockall(0x7) (async) shutdown(r4, 0x2) (async) close(r4) (async) close(0xffffffffffffffff) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000408010400ae8a45085b4809f6947ea2605de8f364168e81190fad74206b2a2d1e6bb40a1d6d296890ff29446f4c166e06ee2698791400c57ad262b59ea3c4a306248e859a113f0150197b4264ffb2c6f99dc5535bc352254913841a77392c674230dcbc5cd749b927744f331637f9cf2930446e189c69fcf0be217a8877e3a3708ca85cf00e6db154273bf295be21d6005d1c57f53368b2a15a65398508585026d0e01ad8f0dbc74b3ba6f7cec7156d14e2828411b78617c3ab7b6baca371c854fe3aba3df7c7a418beb67baa884be981c8a3a3e64c3cabb99629b62ae91cb2"], 0x14}}, 0x1080) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x2400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000100)=0x2) (async, rerun: 32) r7 = socket$kcm(0x2, 0x2, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e000100ffffffff0000cd0f0c000000"], 0x14}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000002c0)='vlan1\x00', 0x10) 239.250609ms ago: executing program 0 (id=2661): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008"], 0x92fc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xd80, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) (async) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) 0s ago: executing program 0 (id=2662): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000500000000000000800b0001006970766c616e00000d000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) fsopen(&(0x7f0000000100)='binder\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500004000a606056d000600000008000300", @ANYRES32=r4, @ANYBLOB="08004d01", @ANYRES8], 0x24}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x80, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): scriptor's value: 2 [ 645.723187][ T5897] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 645.763607][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.821663][ T5897] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 645.842259][ T5897] usb 6-1: invalid MIDI out EP 0 [ 645.945873][T14649] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 645.961350][ T52] IPVS: starting estimator thread 0... [ 646.053968][T14625] delete_channel: no stack [ 646.075145][T14650] IPVS: using max 44 ests per chain, 105600 per kthread [ 646.172537][ T5897] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 646.210363][ T5897] usb 6-1: USB disconnect, device number 102 [ 646.320840][T14656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.360808][T14656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.577784][T14659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.595575][T14659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.922315][T14671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.963911][T14671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.265147][ T53] TC_ACT_REPEAT abuse ? [ 647.289946][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.311479][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.687473][T14682] netlink: 'syz.5.2105': attribute type 4 has an invalid length. [ 647.910015][ T63] TC_ACT_REPEAT abuse ? [ 648.008680][T14691] sctp: [Deprecated]: syz.6.2106 (pid 14691) Use of int in max_burst socket option deprecated. [ 648.008680][T14691] Use struct sctp_assoc_value instead [ 648.088375][T14694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.110669][T14694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.369473][T14708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.383498][T14708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.442455][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.480513][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.674669][ T52] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 648.861363][ T52] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 648.880708][ T52] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 648.895214][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 648.924661][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 648.955011][ T52] usb 6-1: config 0 interface 0 has no altsetting 0 [ 648.986097][ T52] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 648.999058][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.034785][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 649.054609][ T52] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.076898][ T52] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.086105][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.129374][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 649.175237][T14714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.183665][ T52] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.208427][ T52] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.223274][T14714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.244836][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.290256][T14714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.308399][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 649.325675][T14714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.336380][ T52] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.344200][ T52] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.357447][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.369454][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 649.379758][ T52] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.388111][ T52] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.397658][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.424854][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 649.435612][ T52] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.443606][ T52] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.456235][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.469185][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 649.502425][ T52] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.523096][ T52] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.533663][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.554611][ T52] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 649.566029][ T52] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.589341][ T52] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 649.600667][ T52] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 649.609664][ T52] usb 6-1: Product: syz [ 649.618440][ T52] usb 6-1: Manufacturer: syz [ 649.623385][ T52] usb 6-1: SerialNumber: syz [ 649.700172][ T52] usb 6-1: config 0 descriptor?? [ 649.710274][T14718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.725097][T14718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.742366][ T52] yurex 6-1:0.0: Could not submitting URB [ 649.754743][ T52] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 649.763663][T14718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.798320][T14718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.956172][T14720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.969132][T14705] binder: BINDER_SET_CONTEXT_MGR already set [ 649.975723][T14705] binder: 14703:14705 ioctl 4018620d 200000000040 returned -16 [ 649.985998][T14286] usb 6-1: USB disconnect, device number 103 [ 650.002545][T14720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.080377][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 650.535366][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2116'. [ 650.647837][T14724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.876018][ T52] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 651.074888][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 651.083826][ T52] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 651.092413][ T52] usb 5-1: config 0 has no interface number 0 [ 651.104277][ T52] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 651.124184][ T52] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 651.148498][ T52] usb 5-1: config 0 interface 41 has no altsetting 0 [ 651.170778][ T52] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 651.183109][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.191899][ T52] usb 5-1: Product: syz [ 651.200476][ T52] usb 5-1: Manufacturer: syz [ 651.209955][ T52] usb 5-1: SerialNumber: syz [ 651.226379][ T52] usb 5-1: config 0 descriptor?? [ 651.238102][T14725] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 651.249362][T14725] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 651.773872][T14724] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 651.827515][T14286] TC_ACT_REPEAT abuse ? [ 651.853265][ T52] dm9601 5-1:0.41: probe with driver dm9601 failed with error -71 [ 651.911354][ T52] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 651.922163][T14757] netlink: 'syz.2.2126': attribute type 2 has an invalid length. [ 651.953769][ T52] usb 5-1: USB disconnect, device number 47 [ 651.963564][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 652.061904][T14757] : entered promiscuous mode [ 652.270030][T14754] netlink: 'syz.5.2124': attribute type 29 has an invalid length. [ 652.279776][T14754] netlink: 'syz.5.2124': attribute type 29 has an invalid length. [ 652.388318][T14286] TC_ACT_REPEAT abuse ? [ 652.591570][T14777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.631321][T14777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.855516][ T152] TC_ACT_REPEAT abuse ? [ 653.026152][ T63] TC_ACT_REPEAT abuse ? [ 653.669993][ T53] TC_ACT_REPEAT abuse ? [ 653.771239][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.855698][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.908319][ T53] TC_ACT_REPEAT abuse ? [ 653.913380][ T53] TC_ACT_REPEAT abuse ? [ 654.193247][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.209003][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.360380][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'. [ 654.398337][T14823] TC_ACT_REPEAT abuse ? [ 654.507492][T14286] TC_ACT_REPEAT abuse ? [ 654.640087][T14831] netlink: 'syz.6.2143': attribute type 10 has an invalid length. [ 654.648467][T14831] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2143'. [ 654.689100][T14831] geneve0: entered promiscuous mode [ 654.725787][T14831] team0: Port device geneve0 added [ 655.519373][T14848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.720723][T14850] loop6: detected capacity change from 0 to 524287999 [ 655.829755][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.869218][T14853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.919388][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.940156][T14853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.979855][T14839] netlink: 'syz.2.2144': attribute type 29 has an invalid length. [ 656.028386][T14855] netlink: 'syz.2.2144': attribute type 29 has an invalid length. [ 656.075407][T14839] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2144'. [ 656.552303][T14286] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 657.259724][ T30] audit: type=1800 audit(1748157036.073:1536): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2151" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 657.287796][T14286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 657.308041][T14870] fuse: Unknown parameter '' [ 657.322295][T14870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2151'. [ 657.339199][T14286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.390922][T14286] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 657.405616][T14286] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 657.416790][T14286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.459754][T14286] usb 5-1: config 0 descriptor?? [ 657.509442][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 657.553036][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 657.885564][T14286] cherry 0003:046A:0023.0025: unbalanced collection at end of report description [ 657.904361][T14286] cherry 0003:046A:0023.0025: probe with driver cherry failed with error -22 [ 657.985231][ C0] TC_ACT_REPEAT abuse ? [ 658.100156][T14857] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.2150'. [ 658.134163][T14857] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `] Iq!>s*!)\+` [ 658.145949][ T152] TC_ACT_REPEAT abuse ? [ 658.341085][T14888] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.2150'. [ 658.471465][T14888] sysfs: cannot create duplicate filename '/class/ieee80211/`] Iq!>s*!)\+`iF=#' [ 658.503021][T14888] CPU: 1 UID: 0 PID: 14888 Comm: syz.4.2150 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 658.503051][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 658.503062][T14888] Call Trace: [ 658.503069][T14888] [ 658.503077][T14888] dump_stack_lvl+0x189/0x250 [ 658.503105][T14888] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.503126][T14888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.503148][T14888] ? __pfx__printk+0x10/0x10 [ 658.503166][T14888] ? kernfs_path_from_node+0x2b/0x260 [ 658.503190][T14888] ? kernfs_path_from_node+0x216/0x260 [ 658.503218][T14888] sysfs_warn_dup+0x8e/0xa0 [ 658.503239][T14888] sysfs_do_create_link_sd+0xc0/0x110 [ 658.503262][T14888] device_add_class_symlinks+0x1cf/0x240 [ 658.503285][T14888] device_add+0x475/0xb50 [ 658.503307][T14888] wiphy_register+0x199a/0x26b0 [ 658.503343][T14888] ? __pfx_wiphy_register+0x10/0x10 [ 658.503363][T14888] ? minstrel_ht_alloc+0x893/0x990 [ 658.503394][T14888] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 658.503422][T14888] ieee80211_register_hw+0x33e1/0x4120 [ 658.503452][T14888] ? ieee80211_register_hw+0x1411/0x4120 [ 658.503475][T14888] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 658.503496][T14888] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 658.503520][T14888] ? __hrtimer_setup+0x187/0x210 [ 658.503542][T14888] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 658.503561][T14888] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 658.503609][T14888] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 658.503632][T14888] ? trace_kmalloc+0x1f/0xd0 [ 658.503649][T14888] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 658.503670][T14888] ? kstrndup+0xbf/0x160 [ 658.503693][T14888] hwsim_new_radio_nl+0xea4/0x1b10 [ 658.503710][T14888] ? __pfx___nla_validate_parse+0x10/0x10 [ 658.503741][T14888] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 658.503768][T14888] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 658.503801][T14888] ? __nla_parse+0x40/0x60 [ 658.503822][T14888] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 658.503852][T14888] genl_family_rcv_msg_doit+0x215/0x300 [ 658.503881][T14888] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 658.503914][T14888] ? bpf_lsm_capable+0x9/0x20 [ 658.503935][T14888] ? security_capable+0x7e/0x2e0 [ 658.503959][T14888] genl_rcv_msg+0x60e/0x790 [ 658.504001][T14888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 658.504039][T14888] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 658.504076][T14888] ? ref_tracker_free+0x63a/0x7d0 [ 658.504093][T14888] ? __copy_skb_header+0xa7/0x550 [ 658.504122][T14888] netlink_rcv_skb+0x219/0x490 [ 658.504142][T14888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 658.504165][T14888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 658.504202][T14888] ? down_read+0x1ad/0x2e0 [ 658.504224][T14888] genl_rcv+0x28/0x40 [ 658.504244][T14888] netlink_unicast+0x75b/0x8d0 [ 658.504268][T14888] netlink_sendmsg+0x805/0xb30 [ 658.504294][T14888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.504315][T14888] ? aa_sock_msg_perm+0x94/0x160 [ 658.504333][T14888] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.504350][T14888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.504369][T14888] __sock_sendmsg+0x21c/0x270 [ 658.504388][T14888] ____sys_sendmsg+0x505/0x830 [ 658.504413][T14888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.504442][T14888] ? import_iovec+0x74/0xa0 [ 658.504466][T14888] ___sys_sendmsg+0x21f/0x2a0 [ 658.504488][T14888] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.504544][T14888] ? __fget_files+0x2a/0x420 [ 658.504571][T14888] ? __fget_files+0x3a0/0x420 [ 658.504612][T14888] __x64_sys_sendmsg+0x19b/0x260 [ 658.504645][T14888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.504696][T14888] ? do_syscall_64+0xba/0x210 [ 658.504729][T14888] do_syscall_64+0xf6/0x210 [ 658.504758][T14888] ? clear_bhb_loop+0x60/0xb0 [ 658.504782][T14888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.504802][T14888] RIP: 0033:0x7f69c4b8e969 [ 658.504821][T14888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.504840][T14888] RSP: 002b:00007f69c5a60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.504864][T14888] RAX: ffffffffffffffda RBX: 00007f69c4db6080 RCX: 00007f69c4b8e969 [ 658.504879][T14888] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 658.504893][T14888] RBP: 00007f69c4c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 658.504906][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.504919][T14888] R13: 0000000000000001 R14: 00007f69c4db6080 R15: 00007f69c4edfa28 [ 658.504954][T14888] [ 658.942945][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.052087][T14286] usb 5-1: USB disconnect, device number 48 [ 659.435159][ T63] TC_ACT_REPEAT abuse ? [ 659.717960][T14903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.747312][T14903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.017937][T14908] loop8: detected capacity change from 0 to 7 [ 660.026837][T14908] Dev loop8: unable to read RDB block 7 [ 660.032432][T14908] loop8: AHDI p3 [ 660.037160][T14908] loop8: partition table partially beyond EOD, truncated [ 660.088702][ T5966] Dev loop8: unable to read RDB block 7 [ 660.099241][ T5966] loop8: AHDI p3 [ 660.103052][ T5966] loop8: partition table partially beyond EOD, truncated [ 660.119324][T14908] Dev loop8: unable to read RDB block 7 [ 660.137376][T14908] loop8: AHDI p3 [ 660.141286][T14908] loop8: partition table partially beyond EOD, truncated [ 660.291038][T14899] netlink: 'syz.5.2161': attribute type 29 has an invalid length. [ 660.339777][T14899] netlink: 'syz.5.2161': attribute type 29 has an invalid length. [ 660.473559][T14919] fuse: Bad value for 'fd' [ 660.514700][T14919] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 660.521333][T14919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.645313][T14919] vhci_hcd vhci_hcd.0: Device attached [ 660.811373][T14919] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 660.818009][T14919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.825483][T14928] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 660.832094][T14928] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 660.885095][T14924] bridge0: entered promiscuous mode [ 661.025511][T14919] vhci_hcd vhci_hcd.0: Device attached [ 661.063176][T14928] vhci_hcd vhci_hcd.0: Device attached [ 661.069318][ T5897] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 661.150902][T14919] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 661.201956][T14919] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(23) [ 661.208568][T14919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 661.306034][T14919] vhci_hcd vhci_hcd.0: Device attached [ 661.362965][T14919] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 661.538857][T14928] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(27) [ 661.545500][T14928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 661.568652][T14928] vhci_hcd vhci_hcd.0: Device attached [ 661.765857][T14919] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 661.781244][T14919] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 661.950044][T14919] vhci_hcd vhci_hcd.0: port 0 already used [ 661.987444][T14934] vhci_hcd: connection closed [ 661.989018][T14929] vhci_hcd: connection closed [ 662.006208][T14926] vhci_hcd: connection closed [ 662.011607][T14920] vhci_hcd: connection reset by peer [ 662.012260][ T1158] vhci_hcd: stop threads [ 662.030656][ T1158] vhci_hcd: release socket [ 662.039442][ T1158] vhci_hcd: disconnect device [ 662.048857][T14949] netlink: del zone limit has 4 unknown bytes [ 662.138095][T14949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.223761][T14949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.237602][T14937] vhci_hcd: connection closed [ 662.259090][ T1158] vhci_hcd: stop threads [ 662.373599][ T1158] vhci_hcd: release socket [ 662.403388][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2174'. [ 662.435420][ T1158] vhci_hcd: disconnect device [ 662.436028][T14952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2174'. [ 662.463493][T14952] xt_TPROXY: Can be used only with -p tcp or -p udp [ 662.484151][ T1158] vhci_hcd: stop threads [ 662.512153][ T1158] vhci_hcd: release socket [ 662.535467][ T1158] vhci_hcd: disconnect device [ 662.560634][ T1158] vhci_hcd: stop threads [ 662.571610][ T1158] vhci_hcd: release socket [ 662.598958][ T1158] vhci_hcd: disconnect device [ 662.615377][ T1158] vhci_hcd: stop threads [ 662.628361][ T1158] vhci_hcd: release socket [ 662.653515][ T1158] vhci_hcd: disconnect device [ 662.884761][ T5891] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 663.060381][ T5891] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.143860][ T5891] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.206713][ T5891] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.244248][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.288572][ T5891] usb 6-1: Product: syz [ 663.306137][ T5891] usb 6-1: Manufacturer: syz [ 663.311501][T14961] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.333804][ T5891] usb 6-1: SerialNumber: syz [ 663.647119][ T5891] usb 6-1: 0:2 : does not exist [ 663.690252][ T5891] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 663.772101][ T5891] usb 6-1: USB disconnect, device number 104 [ 663.897537][T14961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.933165][ T9689] udevd[9689]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.990113][T14961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.136230][T14961] veth1_vlan: left allmulticast mode [ 664.166571][T14961] macvlan0: left allmulticast mode [ 664.256594][T14961] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 664.291653][T14961] ipvlan2: left promiscuous mode [ 664.309262][T14961] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.328447][T14961] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.368882][T14961] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.386949][T14961] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.400565][T14961] geneve2: left promiscuous mode [ 664.414722][T14961] geneve2: left allmulticast mode [ 665.109235][T14997] bridge2: entered promiscuous mode [ 665.160378][T15007] sch_fq: defrate 0 ignored. [ 665.171370][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2183'. [ 665.256792][T15007] openvswitch: netlink: IPv4 tunnel dst address is zero [ 665.298456][T15011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.390388][T15011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.754866][T14986] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 665.966372][T14986] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.983699][T15030] netlink: 'syz.6.2190': attribute type 7 has an invalid length. [ 665.991630][T14986] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.017958][T14986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 666.032468][T14986] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 666.036122][T15030] : entered promiscuous mode [ 666.085062][T14986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.135834][T14986] usb 6-1: config 0 descriptor?? [ 666.169123][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2190'. [ 666.188923][T15030] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 666.216115][ T5897] vhci_hcd: vhci_device speed not set [ 666.395396][T14968] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 666.559346][T14968] usb 5-1: config 0 has no interfaces? [ 666.595359][T14986] aquacomputer_d5next 0003:0C70:F010.0026: hidraw0: USB HID v0.00 Device [HID 0c70:f010] on usb-dummy_hcd.5-1/input0 [ 666.616072][T14968] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 666.625731][T14968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.689495][T14968] usb 5-1: Product: syz [ 666.693708][T14968] usb 5-1: Manufacturer: syz [ 666.740318][T14968] usb 5-1: SerialNumber: syz [ 666.751978][T15015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2188'. [ 666.792880][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.792906][T14968] usb 5-1: config 0 descriptor?? [ 666.822765][T15015] netlink: 'syz.5.2188': attribute type 7 has an invalid length. [ 666.871867][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.880548][T15015] netlink: 'syz.5.2188': attribute type 8 has an invalid length. [ 666.942023][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2188'. [ 667.011587][T15046] netlink: 'syz.0.2195': attribute type 3 has an invalid length. [ 667.073790][T15037] xt_TCPMSS: Only works on TCP SYN packets [ 667.114339][T15046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.176379][T15046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.201808][T14968] usb 6-1: USB disconnect, device number 105 [ 667.525708][ T5889] usb usb42-port1: attempt power cycle [ 667.857336][T15051] sock: sock_set_timeout: `syz.5.2197' (pid 15051) tries to set negative timeout [ 668.001950][T15059] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2200'. [ 668.140162][ T5889] usb usb42-port1: unable to enumerate USB device [ 668.163534][ T30] audit: type=1326 audit(1748157046.963:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 668.190028][T15067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.199018][ T30] audit: type=1326 audit(1748157046.963:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 668.241223][T15067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.332481][T15070] loop6: detected capacity change from 0 to 524287999 [ 668.386551][ T30] audit: type=1326 audit(1748157046.973:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 669.014361][ T30] audit: type=1326 audit(1748157046.973:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 669.031786][T15075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.092058][ T5897] usb 5-1: USB disconnect, device number 49 [ 669.095819][T15075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.152843][ T30] audit: type=1326 audit(1748157046.973:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 669.217019][ T30] audit: type=1326 audit(1748157046.973:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 669.263603][T15086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.281220][T15086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.291728][ T30] audit: type=1326 audit(1748157046.973:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 669.314152][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.329073][ T30] audit: type=1326 audit(1748157046.973:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 669.357034][ T30] audit: type=1326 audit(1748157046.973:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 669.379470][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.391404][ T30] audit: type=1326 audit(1748157046.973:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15063 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 669.413824][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.624650][T14985] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 669.902580][T14985] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.922555][T14985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 669.940929][T14985] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 670.015419][T14985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.037520][T14985] usb 5-1: config 0 descriptor?? [ 670.388338][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2212'. [ 670.452435][T14985] kye 0003:0458:5013.0027: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 670.481996][T14985] kye 0003:0458:5013.0027: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 670.585669][T14985] kye 0003:0458:5013.0027: tablet-enabling feature report not found [ 670.605991][T14985] kye 0003:0458:5013.0027: tablet enabling failed [ 670.686916][T14985] usb 5-1: USB disconnect, device number 50 [ 670.739852][T15106] fido_id[15106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 670.925478][T15110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.970297][T15110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.574033][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 671.613947][T15118] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2217'. [ 671.673866][T15121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.705736][T15121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.732667][T15121] fuse: Bad value for 'fd' [ 671.821651][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 672.484006][T15144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.513089][T15144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.136042][T15159] loop6: detected capacity change from 0 to 7 [ 673.210781][T15159] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 673.218013][T15159] loop6: partition table partially beyond EOD, truncated [ 673.245268][T15159] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 673.749970][T15175] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2234'. [ 673.794766][T15175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2234'. [ 674.024945][T14985] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 674.055827][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2235'. [ 674.366506][T14985] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 674.380077][T14985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.398855][T14985] usb 6-1: config 0 descriptor?? [ 674.818705][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.870414][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.921724][T14985] ortek 0003:1223:3F07.0028: hidraw0: USB HID v0.05 Device [HID 1223:3f07] on usb-dummy_hcd.5-1/input0 [ 675.309067][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.318198][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.362120][T14985] usb 6-1: USB disconnect, device number 106 [ 676.254373][T15204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.263751][T15204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.392546][T15204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.402699][T15204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.588795][T15212] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2244'. [ 676.935037][T14985] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 677.135325][T14985] usb 6-1: Using ep0 maxpacket: 32 [ 677.144467][T14985] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 677.167514][T14985] usb 6-1: config 0 has no interface number 0 [ 677.174341][T14985] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.222253][T14985] usb 6-1: config 0 interface 85 has no altsetting 0 [ 677.258367][T14985] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 677.269181][T14985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.278759][T14985] usb 6-1: Product: syz [ 677.283435][T14985] usb 6-1: Manufacturer: syz [ 677.288511][T14985] usb 6-1: SerialNumber: syz [ 677.295271][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.366911][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.492909][T14985] usb 6-1: config 0 descriptor?? [ 678.037379][ T1158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.268444][ T1158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.511840][ T1158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.614656][T14985] appletouch 6-1:0.85: Geyser mode initialized. [ 678.639844][ T1158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.650652][T14985] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input66 [ 678.744211][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2252'. [ 678.779742][ C1] appletouch 6-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 680.023531][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 680.068247][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 680.125533][ T5897] usb 6-1: USB disconnect, device number 107 [ 680.142642][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 680.171027][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 680.181725][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 680.288265][ T5897] appletouch 6-1:0.85: input: appletouch disconnected [ 680.526889][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 680.545440][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 680.554915][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 680.564062][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 680.575194][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 680.654999][ T5897] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 680.828850][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 680.841722][ T5897] usb 6-1: not running at top speed; connect to a high speed hub [ 680.856662][ T5897] usb 6-1: config 14 has an invalid interface number: 242 but max is 0 [ 680.866365][ T5897] usb 6-1: config 14 has no interface number 0 [ 680.872567][ T5897] usb 6-1: config 14 interface 242 has no altsetting 0 [ 680.884137][ T5897] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=43.0d [ 680.894028][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.914176][ T5897] usb 6-1: Product: syz [ 680.929647][ T5897] usb 6-1: Manufacturer: syz [ 680.950629][ T5897] usb 6-1: SerialNumber: syz [ 681.052239][T15251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.092980][T15251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.239283][T15237] [U] [ 681.437147][ T5897] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 681.455381][ T5897] pctv452e: pctv452e_power_ctrl: 1 [ 681.455381][ T5897] [ 681.468000][ T5897] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 681.468000][ T5897] [ 681.498126][ T5897] dvb-usb: bulk message failed: -22 (5/0) [ 681.564027][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 681.664150][ T5897] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 681.681395][ T1158] bridge_slave_1: left allmulticast mode [ 681.701127][ T1158] bridge_slave_1: left promiscuous mode [ 681.717700][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.725577][ T5897] usb 6-1: USB disconnect, device number 108 [ 681.784832][ T1158] bridge_slave_0: left allmulticast mode [ 681.835276][ T1158] bridge_slave_0: left promiscuous mode [ 681.851243][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.176329][ T1158] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 682.225169][ T5846] Bluetooth: hci1: command tx timeout [ 682.284842][T14985] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 682.444845][T14985] usb 6-1: device descriptor read/64, error -71 [ 682.637496][ T5846] Bluetooth: hci4: command tx timeout [ 682.705287][T14985] usb 6-1: new low-speed USB device number 110 using dummy_hcd [ 682.769441][ T1158] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 682.874756][T14985] usb 6-1: device descriptor read/64, error -71 [ 682.886343][ T1158] team0: Port device geneve0 removed [ 682.995351][T14985] usb usb6-port1: attempt power cycle [ 683.272483][ T1158] bond0 (unregistering): left allmulticast mode [ 683.279133][ T1158] bond_slave_0: left allmulticast mode [ 683.285646][ T1158] bond_slave_1: left allmulticast mode [ 683.291135][ T1158] batadv_slave_0: left allmulticast mode [ 683.297248][ T1158] bond0 (unregistering): left promiscuous mode [ 683.303422][ T1158] bond_slave_0: left promiscuous mode [ 683.309062][ T1158] bond_slave_1: left promiscuous mode [ 683.314668][ T1158] batadv_slave_0: left promiscuous mode [ 683.336610][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.345268][T14985] usb 6-1: new low-speed USB device number 111 using dummy_hcd [ 683.355131][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.366933][ T1158] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 683.377686][T14985] usb 6-1: device descriptor read/8, error -71 [ 683.385868][ T1158] bond0 (unregistering): Released all slaves [ 683.399989][ T1158] bond1 (unregistering): Released all slaves [ 683.516355][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.527363][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.537866][ T1158] bond0 (unregistering): Released all slaves [ 683.634684][T14985] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 683.654334][ T1158] bond1 (unregistering): Released all slaves [ 683.665636][T14985] usb 6-1: device descriptor read/8, error -71 [ 683.679788][T15236] chnl_net:caif_netlink_parms(): no params data found [ 683.776543][T14985] usb usb6-port1: unable to enumerate USB device [ 683.967140][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.978257][T15236] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.986557][T15236] bridge_slave_0: entered allmulticast mode [ 684.003730][T15236] bridge_slave_0: entered promiscuous mode [ 684.037322][T15242] chnl_net:caif_netlink_parms(): no params data found [ 684.077540][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.108838][T15236] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.122405][T15236] bridge_slave_1: entered allmulticast mode [ 684.134477][T15236] bridge_slave_1: entered promiscuous mode [ 684.251782][T15236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.289160][T15236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.304705][ T5846] Bluetooth: hci1: command tx timeout [ 684.471403][T15236] team0: Port device team_slave_0 added [ 684.488686][T15236] team0: Port device team_slave_1 added [ 684.693374][T15236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.702960][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.704896][ T5846] Bluetooth: hci4: command tx timeout [ 684.728884][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.729894][T15236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.753199][T15236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.764720][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.820391][T15236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.840756][T15242] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.859950][T15242] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.875035][T15242] bridge_slave_0: entered allmulticast mode [ 684.882832][T15242] bridge_slave_0: entered promiscuous mode [ 684.913525][T15242] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.923502][T15242] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.938901][T15242] bridge_slave_1: entered allmulticast mode [ 684.953596][T15242] bridge_slave_1: entered promiscuous mode [ 685.080709][T15242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.141553][T15236] hsr_slave_0: entered promiscuous mode [ 685.161104][T15236] hsr_slave_1: entered promiscuous mode [ 685.176048][T15236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.183666][T15236] Cannot create hsr debugfs directory [ 685.215238][T15242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.387553][T15242] team0: Port device team_slave_0 added [ 685.393721][T15309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.397199][T15242] team0: Port device team_slave_1 added [ 685.415987][T15309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.530404][T15242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.543423][T15242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.577992][T15242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.599676][T15242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.614082][T15242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.648198][T15242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.673492][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.687043][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.722376][ T1158] : left promiscuous mode [ 685.864694][T15242] hsr_slave_0: entered promiscuous mode [ 685.886531][ T1158] IPVS: stopping backup sync thread 11872 ... [ 685.887596][T15242] hsr_slave_1: entered promiscuous mode [ 685.918664][T15242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.930688][T15242] Cannot create hsr debugfs directory [ 686.214406][T15236] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 686.261648][T15236] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 686.301341][T15236] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 686.329177][T15236] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 686.384714][ T5846] Bluetooth: hci1: command tx timeout [ 686.652748][T15242] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 686.691699][T15242] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 686.708128][T15242] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 686.744489][T15242] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 686.785120][ T5846] Bluetooth: hci4: command tx timeout [ 686.850647][T15236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.020538][T15236] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.172647][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.179890][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.284072][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.291288][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.744125][T15355] netlink: 'syz.5.2270': attribute type 20 has an invalid length. [ 687.870581][T15242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.020297][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.085613][ T1158] hsr_slave_0: left promiscuous mode [ 688.112158][ T1158] hsr_slave_1: left promiscuous mode [ 688.136365][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.154883][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.484721][ T5846] Bluetooth: hci1: command tx timeout [ 688.503491][T15360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.539158][T15360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.559658][T15360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.560010][T15360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.870476][ T5846] Bluetooth: hci4: command tx timeout [ 689.250445][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 689.333811][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 689.591849][T15377] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2275'. [ 690.365284][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 690.408141][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 690.816235][T15370] netlink: 'syz.0.2275': attribute type 29 has an invalid length. [ 690.825147][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2277'. [ 690.846919][T15242] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.853814][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'. [ 690.959065][T14458] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.966300][T14458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.012833][T15236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.023716][T14458] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.030943][T14458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.230212][T15242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 691.272935][T15236] veth0_vlan: entered promiscuous mode [ 691.298692][T15236] veth1_vlan: entered promiscuous mode [ 691.326248][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.416078][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.420134][T15242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.561345][T15236] veth0_macvtap: entered promiscuous mode [ 691.586559][T15236] veth1_macvtap: entered promiscuous mode [ 691.653769][T15236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.690105][T15236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.714049][T15242] veth0_vlan: entered promiscuous mode [ 691.744323][T15236] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.768556][T15236] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.784571][T15236] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.793317][T15236] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.896299][T15242] veth1_vlan: entered promiscuous mode [ 691.966302][T15409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2282'. [ 692.029858][ T1158] IPVS: stop unused estimator thread 0... [ 692.077489][ T1158] IPVS: stop unused estimator thread 0... [ 692.122188][T15242] veth0_macvtap: entered promiscuous mode [ 692.170458][T15242] veth1_macvtap: entered promiscuous mode [ 692.197427][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2283'. [ 692.216829][T14458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.235893][T14458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.293777][T15242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.370122][T15242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.388545][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.404361][T15242] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.419643][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.428096][T15242] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.442949][T15242] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.452415][T15242] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.681791][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2285'. [ 692.728243][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.765115][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.838611][T14461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.858559][T14461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.058845][T15436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.088965][T15436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.169484][T15429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.201689][T15429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.644181][T15452] sctp: [Deprecated]: syz.8.2288 (pid 15452) Use of int in maxseg socket option. [ 693.644181][T15452] Use struct sctp_assoc_value instead [ 693.709629][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2288'. [ 695.020216][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2292'. [ 695.042987][T15485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 695.224675][T14968] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 695.375159][T14968] usb 9-1: Using ep0 maxpacket: 32 [ 695.382248][T14968] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.407018][T14968] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.436809][T14968] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 695.465895][T14968] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.492781][T14968] usb 9-1: config 0 descriptor?? [ 695.820882][T14968] usbhid 9-1:0.0: can't add hid device: -71 [ 695.846228][T14968] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 695.909539][T14968] usb 9-1: USB disconnect, device number 2 [ 696.276221][T14968] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 696.434772][T14968] usb 9-1: Using ep0 maxpacket: 8 [ 696.441593][T14968] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.452190][T14968] usb 9-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 696.469957][T15513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.478900][T15513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.503063][T14968] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.544964][T14968] usb 9-1: config 0 descriptor?? [ 696.557015][T14968] usb 9-1: bad CDC descriptors [ 696.572053][T14968] cdc_acm 9-1:0.0: Control and data interfaces are not separated! [ 696.582019][T14968] cdc_acm 9-1:0.0: This needs exactly 3 endpoints [ 696.588602][T14968] cdc_acm 9-1:0.0: probe with driver cdc_acm failed with error -22 [ 696.777234][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2300'. [ 696.777237][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2300'. [ 696.831615][T15520] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 696.846818][T15520] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 696.860678][T15520] bond1 (unregistering): Released all slaves [ 696.864085][T15498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 696.875541][T15498] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 696.881783][T15498] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 696.888380][T15498] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 696.894970][T15498] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 696.908079][T15498] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 696.947315][T15498] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 696.955128][T15498] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 696.969472][T15498] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 697.091805][T14986] usb 9-1: USB disconnect, device number 3 [ 697.242373][T15536] kernel read not supported for file /eth0 (pid: 15536 comm: syz.0.2304) [ 697.289484][T15537] program syz.8.2303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.301241][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 697.301257][ T30] audit: type=1800 audit(1748157076.103:1566): pid=15536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2304" name="eth0" dev="mqueue" ino=61553 res=0 errno=0 [ 697.327452][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.460376][T15536] xt_CT: No such helper "snmp" [ 697.531224][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.560637][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.704696][T14977] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 697.704700][T14966] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 697.835078][T14966] usb 6-1: device descriptor read/64, error -71 [ 697.868251][T14977] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 697.881959][T14977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.896928][T14977] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 697.913483][T14977] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 697.923740][T14977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.943796][T14977] usb 9-1: config 0 descriptor?? [ 698.074820][T14966] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 698.214690][T14966] usb 6-1: device descriptor read/64, error -71 [ 698.334934][T14966] usb usb6-port1: attempt power cycle [ 698.369613][T14977] holtek_kbd 0003:04D9:A055.0029: unknown main item tag 0x0 [ 698.398462][T14977] holtek_kbd 0003:04D9:A055.0029: unknown main item tag 0x0 [ 698.423932][T14977] holtek_kbd 0003:04D9:A055.0029: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.8-1/input0 [ 698.568276][ T5897] usb 9-1: USB disconnect, device number 4 [ 698.633478][T15586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.663014][T15586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.686350][T14966] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 698.718556][T14966] usb 6-1: device descriptor read/8, error -71 [ 698.865604][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 698.946516][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 698.947562][T15231] Bluetooth: hci3: command 0x0406 tx timeout [ 698.952576][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 698.964608][T14966] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 698.987464][T14966] usb 6-1: device descriptor read/8, error -71 [ 699.027168][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 699.110013][T14966] usb usb6-port1: unable to enumerate USB device [ 699.408035][T15614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.416973][T15614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.427336][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'. [ 699.437864][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'. [ 699.450057][T15614] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2313'. [ 700.235285][T15635] sctp: [Deprecated]: syz.6.2314 (pid 15635) Use of int in max_burst socket option. [ 700.235285][T15635] Use struct sctp_assoc_value instead [ 700.864427][T15640] tipc: Enabling of bearer rejected, failed to enable media [ 700.888886][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2316'. [ 700.943633][T15654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.953322][T14984] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 700.987591][T15654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.025428][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 701.106049][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 701.114716][T14984] usb 6-1: Using ep0 maxpacket: 16 [ 701.135757][T14984] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.176659][T14984] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 701.186337][T14984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.194399][T14984] usb 6-1: Product: syz [ 701.208178][T14984] usb 6-1: Manufacturer: syz [ 701.216499][T14984] usb 6-1: SerialNumber: syz [ 701.260379][T14984] usb 6-1: config 0 descriptor?? [ 701.294419][T14984] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 701.326971][T14984] sr9700 6-1:0.0: probe with driver sr9700 failed with error -22 [ 701.349645][T15675] team0: mtu less than device minimum [ 701.506187][T14984] usb 6-1: USB disconnect, device number 117 [ 701.735068][T15688] fuse: Unknown parameter 'group_id00000000000000000000' [ 701.992521][T15701] loop6: detected capacity change from 0 to 7 [ 702.100183][T15701] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 702.105851][T15701] loop6: partition table partially beyond EOD, truncated [ 702.113281][T15701] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 702.236573][T14966] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 702.283269][T15707] fuse: Unknown parameter 'f0xffffffffffffffff' [ 702.404706][T14966] usb 9-1: Using ep0 maxpacket: 32 [ 702.428398][T14966] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 702.443655][T14966] usb 9-1: config 0 has no interface number 0 [ 702.483814][T14966] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.552811][T14966] usb 9-1: config 0 interface 85 has no altsetting 0 [ 702.610394][T14966] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 702.635394][T14966] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.662483][T14966] usb 9-1: Product: syz [ 702.673300][T15716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.682175][T14966] usb 9-1: Manufacturer: syz [ 702.701864][T15716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.712278][ T5199] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 702.722712][T14966] usb 9-1: SerialNumber: syz [ 702.733525][ T5199] loop6: partition table partially beyond EOD, truncated [ 702.766010][T14966] usb 9-1: config 0 descriptor?? [ 702.783519][ T5199] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 702.999444][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.045644][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.104112][ T9689] udevd[9689]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 703.114803][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 703.184654][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 703.190562][T15729] netlink: 'syz.5.2339': attribute type 1 has an invalid length. [ 703.435361][T15741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.444123][T15741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.457025][T15729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 703.510418][T14966] appletouch 9-1:0.85: Geyser mode initialized. [ 703.539359][T15734] vlan0: entered allmulticast mode [ 703.547173][T14966] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input67 [ 703.561205][T15745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2341'. [ 703.565358][T15734] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 703.614607][T15734] bond3: (slave vlan0): Opening slave failed [ 703.639470][T15745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.707464][T15745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.720208][T12202] usb 9-1: USB disconnect, device number 5 [ 703.819193][T12202] appletouch 9-1:0.85: input: appletouch disconnected [ 704.485981][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'. [ 704.565798][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2349'. [ 704.588961][T15770] IPv6: sit1: Disabled Multicast RS [ 704.622341][T14966] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 704.804729][T14966] usb 9-1: Using ep0 maxpacket: 8 [ 704.816005][T14966] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 704.873119][T14966] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 704.917757][T14966] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 704.947873][T15782] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2352'. [ 704.955188][T14966] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.006326][T14966] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 705.034329][T14966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.280724][T14966] usb 9-1: GET_CAPABILITIES returned 0 [ 705.288757][T14966] usbtmc 9-1:16.0: can't read capabilities [ 705.403531][T15793] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2351'. [ 705.464953][T15776] netlink: 'syz.0.2351': attribute type 29 has an invalid length. [ 705.483844][T15790] netlink: 'syz.0.2351': attribute type 29 has an invalid length. [ 705.506917][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 705.522414][T15798] loop6: detected capacity change from 0 to 7 [ 705.546474][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 705.555585][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 705.564674][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 705.573779][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 705.582862][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 705.598051][T14977] usb 9-1: USB disconnect, device number 6 [ 705.808708][T15798] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 705.814207][T15798] loop6: partition table partially beyond EOD, truncated [ 705.851744][T15798] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 705.994836][T12202] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 706.186966][T12202] usb 6-1: unable to get BOS descriptor or descriptor too short [ 706.242898][T12202] usb 6-1: not running at top speed; connect to a high speed hub [ 706.271120][ T5199] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 706.284123][ T5199] loop6: partition table partially beyond EOD, truncated [ 706.292380][ T5199] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 706.334002][T12202] usb 6-1: config 24 has an invalid interface number: 219 but max is 0 [ 706.382376][T12202] usb 6-1: config 24 has no interface number 0 [ 706.414684][ T9689] udevd[9689]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 706.434915][T12202] usb 6-1: config 24 interface 219 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 706.482125][T12202] usb 6-1: config 24 interface 219 has no altsetting 0 [ 706.508138][T15810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.529375][T12202] usb 6-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=2f.c7 [ 706.545000][T15810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.583487][T12202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.603798][T12202] usb 6-1: Product: syz [ 706.614107][T12202] usb 6-1: Manufacturer: syz [ 706.621708][T15820] fuse: Unknown parameter 'rotmode' [ 706.636701][T12202] usb 6-1: SerialNumber: syz [ 706.660437][T15802] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 706.744895][T15820] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2359'. [ 706.760999][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2361'. [ 706.883982][T12202] usb 6-1: Could not find all expected endpoints [ 706.932134][T12202] usb 6-1: USB disconnect, device number 118 [ 707.312376][T15839] netlink: 'syz.0.2363': attribute type 20 has an invalid length. [ 707.824859][T14966] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 707.842314][T15853] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 708.114966][T14966] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.144600][T14966] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 708.155248][T14966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.172615][T14966] usb 9-1: config 0 descriptor?? [ 708.197599][T14966] pwc: Askey VC010 type 2 USB webcam detected. [ 708.595546][T14966] pwc: recv_control_msg error -32 req 02 val 2b00 [ 708.642609][T14966] pwc: recv_control_msg error -32 req 02 val 2700 [ 708.711291][T14966] pwc: recv_control_msg error -32 req 02 val 2c00 [ 708.742280][T14966] pwc: recv_control_msg error -32 req 04 val 1000 [ 708.769386][T14966] pwc: recv_control_msg error -32 req 04 val 1300 [ 708.790201][T14966] pwc: recv_control_msg error -32 req 04 val 1400 [ 708.904359][T14966] pwc: recv_control_msg error -32 req 02 val 2000 [ 709.030734][T14966] pwc: recv_control_msg error -32 req 02 val 2100 [ 709.083454][T14966] pwc: recv_control_msg error -32 req 04 val 1500 [ 709.092750][T15874] netlink: 596 bytes leftover after parsing attributes in process `syz.7.2368'. [ 709.135553][T15852] netlink: 'syz.7.2368': attribute type 29 has an invalid length. [ 709.179771][T15870] netlink: 'syz.7.2368': attribute type 29 has an invalid length. [ 709.313150][T14966] pwc: recv_control_msg error -32 req 02 val 2400 [ 709.321390][T14966] pwc: recv_control_msg error -32 req 02 val 2600 [ 709.354265][T14966] pwc: recv_control_msg error -32 req 02 val 2900 [ 709.365617][T14966] pwc: recv_control_msg error -32 req 02 val 2800 [ 709.366757][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.423342][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.655008][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 710.655037][T14966] pwc: recv_control_msg error -71 req 04 val 1100 [ 710.665213][T14966] pwc: recv_control_msg error -71 req 04 val 1200 [ 710.688824][T14966] pwc: Registered as video103. [ 710.707522][T14966] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input68 [ 710.726503][T14966] usb 9-1: USB disconnect, device number 7 [ 710.914351][T15909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.994382][T15909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.578789][T15923] loop6: detected capacity change from 0 to 7 [ 711.614827][T15923] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 711.649384][T15923] loop6: partition table partially beyond EOD, truncated [ 711.658232][T15923] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 711.742275][T15928] netlink: 'syz.0.2379': attribute type 1 has an invalid length. [ 711.790988][T15928] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2379'. [ 712.430644][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2383'. [ 713.695638][T15967] fuse: Bad value for 'fd' [ 713.709696][T15948] netlink: 'syz.8.2384': attribute type 29 has an invalid length. [ 713.794078][T15948] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2384'. [ 713.823580][T15965] netlink: 'syz.8.2384': attribute type 29 has an invalid length. [ 714.091109][T15976] fuse: Bad value for 'fd' [ 714.604764][T14968] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 714.775938][T14968] usb 9-1: Using ep0 maxpacket: 16 [ 714.786839][T14968] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 714.819323][T14968] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 714.877478][T14968] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 714.896936][T14968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.921530][T14968] usb 9-1: Product: syz [ 714.937495][T14968] usb 9-1: Manufacturer: syz [ 714.945446][T14968] usb 9-1: SerialNumber: syz [ 714.975421][T14968] usb 9-1: config 0 descriptor?? [ 715.087917][T14968] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 715.139459][T16012] loop6: detected capacity change from 0 to 7 [ 715.160245][T14968] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 715.261390][ T9830] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 715.274687][ T9830] loop6: partition table partially beyond EOD, truncated [ 715.312131][ T9830] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 715.508574][T16012] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 715.528332][T16012] loop6: partition table partially beyond EOD, truncated [ 715.535964][T16012] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 715.649999][ T5199] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 715.671785][ T5199] loop6: partition table partially beyond EOD, truncated [ 715.682713][ T5199] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 715.690730][T14968] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 715.697599][T14968] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 715.836146][ T30] audit: type=1326 audit(1748157094.653:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 715.858594][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.874372][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 715.967428][ T30] audit: type=1326 audit(1748157094.683:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 715.989989][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.003792][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 716.078189][ T30] audit: type=1326 audit(1748157094.683:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 716.131354][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 716.192386][T16038] fuse: Bad value for 'fd' [ 716.211347][ T30] audit: type=1326 audit(1748157094.683:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 716.335783][ T30] audit: type=1326 audit(1748157094.683:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 716.358226][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.505636][ T30] audit: type=1326 audit(1748157094.683:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 716.528075][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.608102][ T30] audit: type=1326 audit(1748157094.683:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 716.714711][ T30] audit: type=1326 audit(1748157094.683:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 716.717409][T14968] em28xx 9-1:0.0: AC97 vendor ID = 0x00fc00fe [ 716.811554][ T30] audit: type=1326 audit(1748157094.683:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 716.854059][ T30] audit: type=1326 audit(1748157094.683:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.6.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79bb8e969 code=0x7ffc0000 [ 717.089131][T14968] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 717.120889][T14968] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 717.172316][T14968] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 717.216251][T14968] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 717.253276][T14968] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 717.287975][T14968] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 717.344359][T14968] usb 9-1: USB disconnect, device number 8 [ 717.370364][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2408'. [ 717.444231][T16066] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 717.757743][T14967] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 717.902397][T16091] Cannot find add_set index 0 as target [ 717.914913][T14967] usb 6-1: device descriptor read/64, error -71 [ 718.106927][T16097] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2415'. [ 718.161265][T14967] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 718.305571][T14967] usb 6-1: device descriptor read/64, error -71 [ 718.425082][T14967] usb usb6-port1: attempt power cycle [ 719.139303][T16124] netlink: 'syz.7.2417': attribute type 20 has an invalid length. [ 719.166482][ T5897] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 719.275875][T14967] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 719.337606][ T5897] usb 9-1: Using ep0 maxpacket: 32 [ 719.365414][T14967] usb 6-1: device descriptor read/8, error -71 [ 719.377713][ T5897] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.394667][ T5897] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.425194][ T5897] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.467889][ T5897] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 719.531585][ T5897] usb 9-1: config 0 interface 0 has no altsetting 0 [ 719.547156][ T5897] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 719.580040][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.614954][T14967] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 719.682311][ T5897] usb 9-1: config 0 descriptor?? [ 719.708651][T14967] usb 6-1: device descriptor read/8, error -71 [ 719.855090][T14967] usb usb6-port1: unable to enumerate USB device [ 720.144143][ T5897] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 720.153777][ T5897] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 720.182572][ T5897] hid-thrustmaster 0003:044F:B65D.002A: item fetching failed at offset 2/5 [ 720.188413][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2422'. [ 720.207816][ T5897] hid-thrustmaster 0003:044F:B65D.002A: parse failed with error -22 [ 720.232820][T16143] bridge1: port 1(ip6gretap1) entered blocking state [ 720.239823][ T5897] hid-thrustmaster 0003:044F:B65D.002A: probe with driver hid-thrustmaster failed with error -22 [ 720.239889][T16143] bridge1: port 1(ip6gretap1) entered disabled state [ 720.265124][T16143] ip6gretap1: entered allmulticast mode [ 720.278411][T16144] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:21 [ 720.280083][T16143] ip6gretap1: entered promiscuous mode [ 720.361014][T16143] veth2: entered promiscuous mode [ 720.367592][T16131] netlink: 'syz.7.2420': attribute type 29 has an invalid length. [ 720.384307][T16131] netlink: 'syz.7.2420': attribute type 29 has an invalid length. [ 720.409623][T16131] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2420'. [ 721.255165][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 721.255184][ T30] audit: type=1804 audit(1748157100.063:1609): pid=16183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2432" name="/newroot/385/bus" dev="tmpfs" ino=2027 res=1 errno=0 [ 721.314987][T16184] netlink: 'syz.6.2431': attribute type 20 has an invalid length. [ 721.745423][T16187] fuse: Bad value for 'fd' [ 721.932705][ T5897] usb 9-1: USB disconnect, device number 9 [ 722.360193][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'. [ 722.372064][T16201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.380923][T16201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.444635][ T5897] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 722.826017][ T5897] usb 9-1: Using ep0 maxpacket: 32 [ 722.863145][ T5897] usb 9-1: config 64 has an invalid interface number: 4 but max is 0 [ 722.874115][ T5897] usb 9-1: config 64 has no interface number 0 [ 722.913643][ T5897] usb 9-1: config 64 interface 4 has no altsetting 0 [ 722.938193][ T5897] usb 9-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 722.976822][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.034593][ T5897] usb 9-1: Product: syz [ 723.049080][ T5897] usb 9-1: Manufacturer: syz [ 723.078279][ T5897] usb 9-1: SerialNumber: syz [ 723.350333][ T5897] qmi_wwan 9-1:64.4: probe with driver qmi_wwan failed with error -22 [ 723.432307][ T5897] usb 9-1: USB disconnect, device number 10 [ 723.640222][T16217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.705023][T16217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.579020][T16239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.620698][T16239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.020101][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'. [ 726.135511][T16289] syzkaller1: entered promiscuous mode [ 726.141001][T16289] syzkaller1: entered allmulticast mode [ 726.261628][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'. [ 727.225536][T16309] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2457'. [ 727.256863][T16309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.091640][T16316] netlink: 'syz.0.2459': attribute type 29 has an invalid length. [ 728.115864][T16316] netlink: 'syz.0.2459': attribute type 29 has an invalid length. [ 728.133539][T16316] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2459'. [ 729.011298][T16353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.039176][T16353] batadv_slave_1: entered promiscuous mode [ 729.896123][T14984] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 730.064860][T14984] usb 9-1: Using ep0 maxpacket: 8 [ 730.084961][T14984] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.104934][T14984] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 730.134339][T14984] usb 9-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 730.150087][T14984] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.190365][T14984] usb 9-1: config 0 descriptor?? [ 730.410033][T16379] netlink: 'syz.5.2472': attribute type 29 has an invalid length. [ 730.429055][T16379] netlink: 'syz.5.2472': attribute type 29 has an invalid length. [ 730.691081][T14984] elecom 0003:056E:00FE.002B: collection stack underflow [ 730.709537][T14984] elecom 0003:056E:00FE.002B: item 0 4 0 12 parsing failed [ 730.726550][T14984] elecom 0003:056E:00FE.002B: probe with driver elecom failed with error -22 [ 730.900007][T16375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.937818][T16375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.055229][T14984] usb 9-1: USB disconnect, device number 11 [ 731.317188][ T30] audit: type=1326 audit(1748157110.133:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16413 comm="syz.7.2480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33f1f8e969 code=0x0 [ 731.393039][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2480'. [ 732.566021][T16460] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2486'. [ 732.753825][T16417] syz.7.2480 (16417): drop_caches: 2 [ 732.823120][T16466] netlink: 'syz.0.2487': attribute type 27 has an invalid length. [ 732.934783][T16467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.070912][T16467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.277159][T16466] bridge0: port 4(vlan3) entered disabled state [ 733.381763][T16478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.414891][T16478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.157527][T16466] bridge0: port 3(vlan2) entered disabled state [ 734.165974][T16466] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.576121][T16466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.670488][T16466] veth0_macvtap: left allmulticast mode [ 734.697858][T16466] 0XD: left allmulticast mode [ 734.761661][T16466] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.770775][T16466] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.780131][T16466] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.796105][T16466] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.967361][T16466] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 735.143261][T16466] veth2: left promiscuous mode [ 735.235788][T16467] bridge0: port 4(vlan3) entered blocking state [ 735.242239][T16467] bridge0: port 4(vlan3) entered forwarding state [ 735.249095][T16467] bridge0: port 3(vlan2) entered blocking state [ 735.255555][T16467] bridge0: port 3(vlan2) entered forwarding state [ 735.339978][T16467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.393964][T16467] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.452487][T16467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 735.508588][T16506] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2498'. [ 736.114581][T14977] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 736.265042][T14977] usb 9-1: Using ep0 maxpacket: 32 [ 736.286218][T14977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.325368][T14977] usb 9-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 736.346594][T14977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.362816][T14977] usb 9-1: Product: syz [ 736.376562][T14977] usb 9-1: Manufacturer: syz [ 736.386705][T14977] usb 9-1: SerialNumber: syz [ 736.405964][T14977] usb 9-1: config 0 descriptor?? [ 736.425437][T14977] pn533_usb 9-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 736.595042][T14968] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 736.744571][T14968] usb 6-1: device descriptor read/64, error -71 [ 736.995137][T14968] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 737.135987][T14968] usb 6-1: device descriptor read/64, error -71 [ 737.244975][T14968] usb usb6-port1: attempt power cycle [ 737.282252][T16566] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2507'. [ 737.594835][T14968] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 737.628162][T14968] usb 6-1: device descriptor read/8, error -71 [ 737.884680][T14968] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 737.905296][T14968] usb 6-1: device descriptor read/8, error -71 [ 738.171355][T16574] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 738.249027][T14968] usb usb6-port1: unable to enumerate USB device [ 738.279055][T16576] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2509'. [ 738.636413][T16582] binder: 16580:16582 ioctl c0306201 200000000540 returned -14 [ 738.774901][T14985] usb 9-1: USB disconnect, device number 12 [ 739.290928][T16597] program syz.6.2515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 739.441937][T16602] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[16602] [ 740.151782][T14985] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 740.371207][T14985] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 740.395343][T14985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.404285][T14985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 740.490602][T14985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 740.522356][T14985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.557993][T14985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 740.610072][T14985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 740.675154][T14985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.684098][T14985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 740.794195][T14985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 740.800602][T16630] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 740.859432][T14985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.889038][T14985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 740.919004][T14985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 740.942738][T16636] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2520'. [ 740.965279][T14985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 740.974220][T14985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.054667][T14985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 741.108489][T14985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.148235][T14985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.197833][T14985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 741.234751][T14985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.243731][T14985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.308324][T14985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 741.354995][T14985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.363971][T14985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.450548][T14985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 741.471587][T14985] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 741.510937][T14985] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 741.529136][T14985] usb 6-1: Product: syz [ 741.571778][T14985] usb 6-1: Manufacturer: syz [ 741.588171][T14985] usb 6-1: SerialNumber: syz [ 741.621157][T14985] usb 6-1: config 0 descriptor?? [ 741.685721][T14985] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 741.851424][T16664] syzkaller1: entered promiscuous mode [ 741.865708][T16664] syzkaller1: entered allmulticast mode [ 742.003656][T16671] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2834047395 (22672379160 ns) > initial count (8751802360 ns). Using initial count to start timer. [ 742.106156][T16671] kvm: pic: single mode not supported [ 742.106181][T16671] kvm: pic: level sensitive irq not supported [ 742.239076][ T5897] usb 6-1: USB disconnect, device number 127 [ 742.285873][ T5897] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 742.433645][T16651] program syz.0.2523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 743.111000][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2530'. [ 743.411869][T16714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.437801][T16714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.468686][T16715] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2532'. [ 743.936941][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 744.120332][ T5897] usb 6-1: config 16 interface 0 has no altsetting 0 [ 744.142189][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 744.159409][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 744.211109][ T5897] usb 6-1: Manufacturer: syz [ 744.439949][ T5897] (null): keene_cmd_main failed (-71) [ 744.582269][ T5897] video4linux radio48: keene_cmd_main failed (-71) [ 744.605511][ T5897] radio-keene 6-1:16.0: V4L2 device registered as radio48 [ 744.610278][T16733] loop6: detected capacity change from 0 to 7 [ 744.640741][T16733] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 744.646470][T16733] loop6: partition table partially beyond EOD, truncated [ 744.657965][T16733] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 744.735953][ T5897] usb 6-1: USB disconnect, device number 2 [ 745.574661][ T5897] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 745.793046][ T5897] usb 9-1: unable to get BOS descriptor or descriptor too short [ 745.842864][ T5897] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.914306][ T5897] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 746.017299][ T5897] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 746.117127][ T5897] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.141805][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.172803][ T5897] usb 9-1: Product: syz [ 746.186167][ T5897] usb 9-1: Manufacturer: syz [ 746.199990][ T5897] usb 9-1: SerialNumber: syz [ 746.234132][ T5897] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 746.241800][ T5897] cdc_ncm 9-1:1.0: bind() failure [ 746.284842][T14967] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 747.144257][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.150819][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.163051][T16768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.175355][T16768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.228853][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 747.672102][T16767] team0 (unregistering): Port device team_slave_0 removed [ 747.684266][T16767] team0 (unregistering): Port device team_slave_1 removed [ 747.694665][T14967] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 747.719690][T16767] team0 (unregistering): Port device hsr_slave_0 removed [ 747.852607][T14967] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.863814][T14967] usb 6-1: config 0 interface 0 has no altsetting 0 [ 747.974208][T14967] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 747.992387][T14967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.013781][T14967] usb 6-1: config 0 descriptor?? [ 748.460490][T14967] magicmouse 0003:05AC:0269.002C: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.5-1/input0 [ 748.650195][T14984] usb 6-1: USB disconnect, device number 4 [ 748.899869][T14967] usb 9-1: USB disconnect, device number 13 [ 749.524723][T14984] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 749.553897][T16798] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 749.694794][T14984] usb 6-1: Using ep0 maxpacket: 16 [ 749.823744][T14984] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 749.849049][T14984] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.881948][T14984] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.937593][T14984] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.959696][T14984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.970254][T14984] usb 6-1: Product: syz [ 749.974864][T14984] usb 6-1: Manufacturer: syz [ 749.980827][T14984] usb 6-1: SerialNumber: syz [ 750.116986][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 750.150782][T16809] random: crng reseeded on system resumption [ 750.500860][T14984] usb 6-1: 0:2 : does not exist [ 750.935035][T16830] fuse: Unknown parameter 'e 8ycnux' [ 750.950777][T16832] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 750.957326][T16832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 750.968001][T16832] vhci_hcd vhci_hcd.0: Device attached [ 751.205124][T14967] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 751.276981][ T30] audit: type=1326 audit(1748157130.093:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 751.282639][T16847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.300360][ T30] audit: type=1326 audit(1748157130.093:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 751.338516][T16847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.343566][ T30] audit: type=1326 audit(1748157130.093:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3154b8d2d0 code=0x7ffc0000 [ 751.379993][ T30] audit: type=1326 audit(1748157130.093:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 751.403378][ T30] audit: type=1326 audit(1748157130.093:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 751.426067][ T30] audit: type=1326 audit(1748157130.093:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 751.448778][ T30] audit: type=1326 audit(1748157130.093:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3154b8d2d0 code=0x7ffc0000 [ 751.455075][T14986] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 751.477961][ T30] audit: type=1326 audit(1748157130.093:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3154b8e56b code=0x7ffc0000 [ 751.502031][ T30] audit: type=1326 audit(1748157130.093:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3154b8e56b code=0x7ffc0000 [ 751.524835][ T30] audit: type=1326 audit(1748157130.183:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3154b8e969 code=0x7ffc0000 [ 751.564163][T14984] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 751.591838][T14984] usb 6-1: USB disconnect, device number 5 [ 751.622169][ T9689] udevd[9689]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.648823][T14986] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 751.660457][T14986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.676262][T14986] usb 9-1: config 0 descriptor?? [ 751.684125][T14986] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 751.696034][T14986] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 751.756132][T16834] vhci_hcd: connection reset by peer [ 751.764369][ T152] vhci_hcd: stop threads [ 751.769293][ T152] vhci_hcd: release socket [ 751.773909][ T152] vhci_hcd: disconnect device [ 751.889550][T14984] usb 9-1: USB disconnect, device number 14 [ 751.896937][T14984] ftdi_sio 9-1:0.0: device disconnected [ 752.121016][T16851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.132192][T16851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.375019][T14984] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 752.504695][T14984] usb 6-1: device descriptor read/64, error -71 [ 752.744611][T14984] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 752.885452][T14984] usb 6-1: device descriptor read/64, error -71 [ 753.006242][T14984] usb usb6-port1: attempt power cycle [ 753.354625][T14984] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 753.387390][T14984] usb 6-1: device descriptor read/8, error -71 [ 753.922146][T16882] loop6: detected capacity change from 0 to 7 [ 754.000406][T14984] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 754.046161][T14984] usb 6-1: device descriptor read/8, error -71 [ 754.061916][T16886] netlink: 'syz.6.2569': attribute type 20 has an invalid length. [ 754.101761][T16882] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 754.111274][T16882] loop6: partition table partially beyond EOD, truncated [ 754.122302][T16882] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 754.200883][ T9689] udevd[9689]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 754.209323][T14984] usb usb6-port1: unable to enumerate USB device [ 754.470658][T16888] fuse: Unknown parameter 'user00000000000000000000' [ 754.682798][T16893] vivid-007: ================= START STATUS ================= [ 754.700073][T16893] vivid-007: Enable Output Cropping: true [ 754.753159][T16895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.824651][T16893] vivid-007: Enable Output Composing: true [ 754.846740][T16893] vivid-007: Enable Output Scaler: true [ 754.888970][T16893] vivid-007: Tx RGB Quantization Range: Automatic [ 754.896557][T16895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.937661][T16893] vivid-007: Transmit Mode: HDMI [ 754.942767][T16893] vivid-007: Hotplug Present: 0x00000000 [ 754.964070][T16893] vivid-007: RxSense Present: 0x00000000 [ 754.971406][T16895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.996856][T16893] vivid-007: EDID Present: 0x00000000 [ 755.003900][T16895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.074139][T16893] vivid-007: ================== END STATUS ================== [ 755.220325][T16899] PKCS7: Unknown OID: [4] 0.38.35.103221770.12929 [ 755.227722][T16899] PKCS7: Only support pkcs7_signedData type [ 755.905275][T14977] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 756.076737][T14977] usb 9-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60 [ 756.091057][T14977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.120851][T14977] usb 9-1: config 0 descriptor?? [ 756.127838][T14977] ums-cypress 9-1:0.0: USB Mass Storage device detected [ 756.174846][ T5897] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 756.305200][T14967] vhci_hcd: vhci_device speed not set [ 756.332373][ T5897] usb 6-1: config 2 has an invalid interface number: 86 but max is 0 [ 756.339231][T14977] usb 9-1: USB disconnect, device number 15 [ 756.340831][ T5897] usb 6-1: config 2 has no interface number 0 [ 756.363826][ T5897] usb 6-1: config 2 interface 86 has no altsetting 0 [ 756.372803][ T5897] usb 6-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 756.385160][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.393168][ T5897] usb 6-1: Product: syz [ 756.400238][ T5897] usb 6-1: Manufacturer: syz [ 756.405571][ T5897] usb 6-1: SerialNumber: syz [ 756.615051][T16915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.624224][T16915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.633720][T16915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.643915][T16915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.645274][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.664249][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.680666][ T5897] usb-storage 6-1:2.86: USB Mass Storage device detected [ 756.738803][ T5897] option 6-1:2.86: GSM modem (1-port) converter detected [ 756.756609][ T5897] usb 6-1: USB disconnect, device number 10 [ 756.764282][ T5897] option 6-1:2.86: device disconnected [ 757.248893][T16923] netlink: 'syz.8.2582': attribute type 29 has an invalid length. [ 757.273717][T16923] netlink: 'syz.8.2582': attribute type 29 has an invalid length. [ 757.288542][T16923] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2582'. [ 757.311987][T16925] netlink: 'syz.7.2583': attribute type 1 has an invalid length. [ 757.505088][T14977] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 757.674810][T14977] usb 6-1: device descriptor read/64, error -71 [ 757.787493][T16937] netlink: 'syz.8.2585': attribute type 20 has an invalid length. [ 757.974685][T14977] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 758.133830][T16942] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[16942] [ 758.176996][T14977] usb 6-1: device descriptor read/64, error -71 [ 758.295071][T14977] usb usb6-port1: attempt power cycle [ 758.410237][T16946] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2589'. [ 758.452986][T16946] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 758.634653][T14977] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 758.702572][T14977] usb 6-1: device descriptor read/8, error -71 [ 758.785190][T16954] netlink: 'syz.6.2591': attribute type 1 has an invalid length. [ 759.016880][T14977] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 759.081133][T16957] usb usb8: usbfs: process 16957 (syz.6.2592) did not claim interface 0 before use [ 759.089666][T14977] usb 6-1: device descriptor read/8, error -71 [ 759.234980][T14977] usb usb6-port1: unable to enumerate USB device [ 759.574638][T14967] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 759.724590][T14967] usb 9-1: Using ep0 maxpacket: 32 [ 759.730739][T14967] usb 9-1: too many configurations: 168, using maximum allowed: 8 [ 759.742533][T14967] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 759.750518][T14967] usb 9-1: can't read configurations, error -61 [ 759.905408][T14967] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 760.070282][T14967] usb 9-1: Using ep0 maxpacket: 32 [ 760.077910][T14967] usb 9-1: too many configurations: 168, using maximum allowed: 8 [ 760.108096][T14967] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 760.116852][T14967] usb 9-1: can't read configurations, error -61 [ 760.135600][T14967] usb usb9-port1: attempt power cycle [ 760.455936][T16975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.504900][T14967] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 760.523246][T16975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.537689][T14967] usb 9-1: Using ep0 maxpacket: 32 [ 760.554859][T14967] usb 9-1: too many configurations: 168, using maximum allowed: 8 [ 760.570745][T14967] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 760.578587][T14967] usb 9-1: can't read configurations, error -61 [ 760.717723][T14967] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 760.747158][T14967] usb 9-1: Using ep0 maxpacket: 32 [ 760.754047][T14967] usb 9-1: too many configurations: 168, using maximum allowed: 8 [ 760.814215][T14967] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 760.824178][T14967] usb 9-1: can't read configurations, error -61 [ 760.841788][T14967] usb usb9-port1: unable to enumerate USB device [ 761.699868][T16999] bridge0: entered promiscuous mode [ 761.746721][T16999] bridge0: port 3(macvlan0) entered blocking state [ 761.767845][T16999] bridge0: port 3(macvlan0) entered disabled state [ 761.779736][T16999] macvlan0: entered allmulticast mode [ 761.803374][T16999] bridge0: entered allmulticast mode [ 761.830146][T16999] macvlan0: left allmulticast mode [ 761.835723][T16999] bridge0: left allmulticast mode [ 761.847815][T16999] bridge0: left promiscuous mode [ 762.844643][T14977] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 763.025442][T14977] usb 9-1: Using ep0 maxpacket: 32 [ 763.075310][T14977] usb 9-1: config 0 has an invalid interface number: 151 but max is 0 [ 763.103927][T14977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.144578][T14977] usb 9-1: config 0 has no interface number 0 [ 763.180466][T14977] usb 9-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.246369][T14977] usb 9-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 763.274634][T14977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.294572][T14977] usb 9-1: Product: syz [ 763.298884][T14977] usb 9-1: Manufacturer: syz [ 763.303520][T14977] usb 9-1: SerialNumber: syz [ 763.363205][T14977] usb 9-1: config 0 descriptor?? [ 763.712783][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2613'. [ 763.743316][T17029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.784639][T17029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.835979][T17029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.843487][T17029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.088169][T17049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 765.134007][T17052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.156147][T17053] input: syz0 as /devices/virtual/input/input70 [ 765.162998][T17052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.284615][T14967] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 765.488787][T14967] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.493804][T17068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.507028][T14967] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 765.532347][T17069] loop6: detected capacity change from 0 to 7 [ 765.699733][T14967] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 765.707956][T17069] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 765.714282][T14967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 765.725734][T14967] usb 6-1: SerialNumber: syz [ 765.785301][T17074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 765.796218][T17069] loop6: partition table partially beyond EOD, truncated [ 765.816059][T17069] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 765.853473][ T9689] udevd[9689]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.872912][T17074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.890837][T14977] usb 9-1: USB disconnect, device number 20 [ 766.224755][T14977] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 766.466623][T14977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 766.530766][T14977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 766.581318][T14977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 766.633981][T14977] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 766.645239][T14977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.653314][T14977] usb 9-1: Product: syz [ 766.660594][T14977] usb 9-1: Manufacturer: syz [ 766.665405][T14977] usb 9-1: SerialNumber: syz [ 766.675776][T14977] usb 9-1: config 0 descriptor?? [ 766.686742][T14977] usb 9-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f [ 767.096248][T14977] usb 9-1: USB disconnect, device number 21 [ 767.146721][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.766589][T17103] vlan3: entered allmulticast mode [ 767.772019][T17103] bond0: entered allmulticast mode [ 767.777442][T17103] bond_slave_0: entered allmulticast mode [ 767.783347][T17103] bond_slave_1: entered allmulticast mode [ 767.849599][T14967] usb 6-1: 0:2 : does not exist [ 767.868698][T14967] usb 6-1: unit 5: unexpected type 0x03 [ 767.923744][T14967] usb 6-1: USB disconnect, device number 15 [ 768.061866][ T9689] udevd[9689]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.091428][T17111] loop8: detected capacity change from 0 to 8 [ 768.100849][T17111] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 768.131943][T17111] loop8: p1 start 669833711 is beyond EOD, truncated [ 768.174612][T17111] loop8: p2 start 422213120 is beyond EOD, truncated [ 768.186245][T17111] loop8: p3 start 3833721018 is beyond EOD, truncated [ 768.193879][T17111] loop8: p4 start 1945720663 is beyond EOD, truncated [ 768.202047][T17111] loop8: p5 start 3662658880 is beyond EOD, truncated [ 768.209447][T17111] loop8: p6 start 514366226 is beyond EOD, truncated [ 768.247369][T17111] loop8: p7 start 4087642507 is beyond EOD, truncated [ 768.271319][T17111] loop8: p8 start 963101659 is beyond EOD, truncated [ 768.283927][T17111] loop8: p9 start 3468131593 is beyond EOD, truncated [ 768.308763][T17111] loop8: p10 start 2597257774 is beyond EOD, truncated [ 768.341297][T17111] loop8: p11 start 3140533928 is beyond EOD, truncated [ 768.351440][T17111] loop8: p12 start 3028492062 is beyond EOD, truncated [ 768.833204][T17122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2639'. [ 768.880619][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'. [ 769.130686][T17127] syzkaller0: entered promiscuous mode [ 769.144720][T17127] syzkaller0: entered allmulticast mode [ 769.403603][T17147] trusted_key: encrypted_key: master key parameter 'P/Ē[WqT' is invalid [ 769.911994][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059000400: rx timeout, send abort [ 769.921108][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059000400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 770.202875][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2646'. [ 770.265509][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2646'. [ 770.274779][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2646'. [ 770.511669][ T5199] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 770.529532][ T5199] loop8: p1 start 669833711 is beyond EOD, truncated [ 770.541914][ T5199] loop8: p2 start 422213120 is beyond EOD, truncated [ 770.549836][ T5199] loop8: p3 start 3833721018 is beyond EOD, truncated [ 770.571790][ T5199] loop8: p4 start 1945720663 is beyond EOD, truncated [ 770.584846][ T5199] loop8: p5 start 3662658880 is beyond EOD, truncated [ 770.591661][ T5199] loop8: p6 start 514366226 is beyond EOD, truncated [ 770.598482][ T5199] loop8: p7 start 4087642507 is beyond EOD, truncated [ 770.612603][ T5199] loop8: p8 start 963101659 is beyond EOD, truncated [ 770.625264][ T5199] loop8: p9 start 3468131593 is beyond EOD, truncated [ 770.632090][ T5199] loop8: p10 start 2597257774 is beyond EOD, truncated [ 770.639061][ T5199] loop8: p11 start 3140533928 is beyond EOD, truncated [ 770.645975][ T5199] loop8: p12 start 3028492062 is beyond EOD, truncated [ 770.712501][T17153] FAULT_INJECTION: forcing a failure. [ 770.712501][T17153] name failslab, interval 1, probability 0, space 0, times 0 [ 770.729290][T17153] CPU: 1 UID: 0 PID: 17153 Comm: syz.8.2647 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 770.729318][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.729330][T17153] Call Trace: [ 770.729338][T17153] [ 770.729347][T17153] dump_stack_lvl+0x189/0x250 [ 770.729383][T17153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.729410][T17153] ? __pfx__printk+0x10/0x10 [ 770.729435][T17153] ? __pfx___might_resched+0x10/0x10 [ 770.729470][T17153] should_fail_ex+0x414/0x560 [ 770.729496][T17153] should_failslab+0xa8/0x100 [ 770.729520][T17153] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 770.729542][T17153] ? __alloc_skb+0x112/0x2d0 [ 770.729566][T17153] __alloc_skb+0x112/0x2d0 [ 770.729590][T17153] netlink_sendmsg+0x5c6/0xb30 [ 770.729618][T17153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.729641][T17153] ? aa_sock_msg_perm+0x94/0x160 [ 770.729661][T17153] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 770.729681][T17153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.729702][T17153] __sock_sendmsg+0x21c/0x270 [ 770.729724][T17153] ____sys_sendmsg+0x505/0x830 [ 770.729751][T17153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.729781][T17153] ? import_iovec+0x74/0xa0 [ 770.729808][T17153] ___sys_sendmsg+0x21f/0x2a0 [ 770.729833][T17153] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.729885][T17153] ? __fget_files+0x2a/0x420 [ 770.729906][T17153] ? __fget_files+0x3a0/0x420 [ 770.729936][T17153] __x64_sys_sendmsg+0x19b/0x260 [ 770.729961][T17153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 770.729998][T17153] ? do_syscall_64+0xba/0x210 [ 770.730023][T17153] do_syscall_64+0xf6/0x210 [ 770.730044][T17153] ? clear_bhb_loop+0x60/0xb0 [ 770.730064][T17153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.730080][T17153] RIP: 0033:0x7fc71e98e969 [ 770.730095][T17153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.730110][T17153] RSP: 002b:00007fc71f7db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.730127][T17153] RAX: ffffffffffffffda RBX: 00007fc71ebb5fa0 RCX: 00007fc71e98e969 [ 770.730139][T17153] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 770.730150][T17153] RBP: 00007fc71f7db090 R08: 0000000000000000 R09: 0000000000000000 [ 770.730160][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.730169][T17153] R13: 0000000000000000 R14: 00007fc71ebb5fa0 R15: 00007fc71ecdfa28 [ 770.730194][T17153] [ 770.975881][ C1] vkms_vblank_simulate: vblank timer overrun [ 771.010702][ T5199] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 771.024850][ T5199] loop8: p1 start 669833711 is beyond EOD, truncated [ 771.033027][ T5199] loop8: p2 start 422213120 is beyond EOD, truncated [ 771.043208][ T5199] loop8: p3 start 3833721018 is beyond EOD, truncated [ 771.050492][ T5199] loop8: p4 start 1945720663 is beyond EOD, truncated [ 771.057617][ T5199] loop8: p5 start 3662658880 is beyond EOD, truncated [ 771.064471][ T5199] loop8: p6 start 514366226 is beyond EOD, truncated [ 771.074159][ T5199] loop8: p7 start 4087642507 is beyond EOD, truncated [ 771.081213][ T5199] loop8: p8 start 963101659 is beyond EOD, truncated [ 771.090875][ T5199] loop8: p9 start 3468131593 is beyond EOD, truncated [ 771.098139][ T5199] loop8: p10 start 2597257774 is beyond EOD, truncated [ 771.105292][ T5199] loop8: p11 start 3140533928 is beyond EOD, truncated [ 771.112421][ T5199] loop8: p12 start 3028492062 is beyond EOD, truncated [ 771.188665][T17157] VFS: Mount too revealing [ 771.856809][T17167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.872319][T17167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.932832][ T5199] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 771.959996][ T5199] loop8: p1 start 669833711 is beyond EOD, truncated [ 771.980914][ T5199] loop8: p2 start 422213120 is beyond EOD, truncated [ 772.014860][ T5199] loop8: p3 start 3833721018 is beyond EOD, truncated [ 772.027029][ T5199] loop8: p4 start 1945720663 is beyond EOD, truncated [ 772.037806][ T5199] loop8: p5 start 3662658880 is beyond EOD, truncated [ 772.047921][ T5199] loop8: p6 start 514366226 is beyond EOD, truncated [ 772.065502][ T5199] loop8: p7 start 4087642507 is beyond EOD, truncated [ 772.072676][ T5199] loop8: p8 start 963101659 is beyond EOD, truncated [ 772.086131][ T5199] loop8: p9 start 3468131593 is beyond EOD, truncated [ 772.093008][ T5199] loop8: p10 start 2597257774 is beyond EOD, truncated [ 772.103149][ T5199] loop8: p11 start 3140533928 is beyond EOD, truncated [ 772.112162][ T5199] loop8: p12 start 3028492062 is beyond EOD, truncated [ 772.312072][ T5199] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 772.353438][ T5199] loop8: p1 start 669833711 is beyond EOD, truncated [ 772.372797][ T5199] loop8: p2 start 422213120 is beyond EOD, truncated [ 772.403402][ T5199] loop8: p3 start 3833721018 is beyond EOD, truncated [ 772.418297][ T5199] loop8: p4 start 1945720663 is beyond EOD, truncated [ 772.426439][ T5199] loop8: p5 start 3662658880 is beyond EOD, truncated [ 772.433268][ T5199] loop8: p6 start 514366226 is beyond EOD, truncated [ 772.466776][ T5199] loop8: p7 start 4087642507 is beyond EOD, truncated [ 772.473754][ T5199] loop8: p8 start 963101659 is beyond EOD, truncated [ 772.484813][ T5199] loop8: p9 start 3468131593 is beyond EOD, truncated [ 772.491647][ T5199] loop8: p10 start 2597257774 is beyond EOD, truncated [ 772.495196][T14967] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 772.501429][ T5199] loop8: p11 start 3140533928 is beyond EOD, truncated [ 772.514391][ T5199] loop8: p12 start 3028492062 is beyond EOD, truncated [ 772.572005][ T5199] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 772.582669][ T5199] loop8: p1 start 669833711 is beyond EOD, truncated [ 772.590665][ T5199] loop8: p2 start 422213120 is beyond EOD, truncated [ 772.602405][ T5199] loop8: p3 start 3833721018 is beyond EOD, truncated [ 772.609473][ T5199] loop8: p4 start 1945720663 is beyond EOD, truncated [ 772.634562][ T5199] loop8: p5 start 3662658880 is beyond EOD, truncated [ 772.650085][ T5199] loop8: p6 start 514366226 is beyond EOD, truncated [ 772.662707][ T5199] loop8: p7 start 4087642507 is beyond EOD, truncated [ 772.672863][ T5199] loop8: p8 start 963101659 is beyond EOD, truncated [ 772.686603][ T5199] loop8: p9 start 3468131593 is beyond EOD, truncated [ 772.693486][ T5199] loop8: p10 start 2597257774 is beyond EOD, truncated [ 772.700478][ T5199] loop8: p11 start 3140533928 is beyond EOD, truncated [ 772.709316][ T5199] loop8: p12 start 3028492062 is beyond EOD, truncated [ 772.710769][T14967] usb 6-1: config 0 has an invalid interface number: 37 but max is 0 [ 772.728503][T14967] usb 6-1: config 0 has no interface number 0 [ 772.738514][ T5199] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 772.741529][T14967] usb 6-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62 [ 772.746568][ T5199] loop8: p1 start 669833711 is beyond EOD, truncated [ 772.758326][T14967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.762438][ T5199] loop8: p2 start 422213120 is beyond EOD, truncated [ 772.771019][T14967] usb 6-1: Product: syz [ 772.777532][ T5199] loop8: p3 start 3833721018 is beyond EOD, truncated [ 772.791037][ T5199] loop8: p4 start 1945720663 is beyond EOD, truncated [ 772.791298][T14967] usb 6-1: Manufacturer: syz [ 772.797999][ T5199] loop8: p5 start 3662658880 is beyond EOD, truncated [ 772.798023][ T5199] loop8: p6 start 514366226 is beyond EOD, truncated [ 772.798043][ T5199] loop8: p7 start 4087642507 is beyond EOD, truncated [ 772.798072][ T5199] loop8: p8 start 963101659 is beyond EOD, truncated [ 772.798091][ T5199] loop8: p9 start 3468131593 is beyond EOD, truncated [ 772.798110][ T5199] loop8: p10 start 2597257774 is beyond EOD, [ 772.803640][T14967] usb 6-1: SerialNumber: syz [ 772.815062][ T5199] truncated [ 772.819513][T14967] usb 6-1: config 0 descriptor?? [ 772.823316][ T5199] loop8: p11 start 3140533928 is beyond EOD, truncated [ 772.862905][ T5199] loop8: p12 start 3028492062 is beyond EOD, truncated [ 773.021768][T17188] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2661'. [ 773.035650][T14985] usb 6-1: USB disconnect, device number 16 [ 773.298951][T17193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2662'. [ 773.344882][ T31] INFO: task kworker/0:2:1927 blocked for more than 143 seconds. [ 773.352809][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 773.360827][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 773.370593][ T31] task:kworker/0:2 state:D stack:21416 pid:1927 tgid:1927 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 773.397315][ T31] Workqueue: usb_hub_wq hub_event [ 773.404816][ T31] Call Trace: [ 773.411062][ T31] [ 773.414148][ T31] __schedule+0x16e2/0x4cd0 [ 773.419104][ T31] ? driver_probe_device+0x4f/0x430 [ 773.424456][ T31] ? __device_attach+0x2b8/0x400 [ 773.429876][ T31] ? process_scheduled_works+0xadb/0x17a0 [ 773.436207][ T31] ? __switch_to_asm+0x41/0x70 [ 773.441243][ T31] ? schedule+0x165/0x360 [ 773.445989][ T31] ? __pfx___schedule+0x10/0x10 [ 773.451003][ T31] ? schedule+0x91/0x360 [ 773.455828][ T31] schedule+0x165/0x360 [ 773.460127][ T31] schedule_timeout+0x9a/0x270 [ 773.465247][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 773.472028][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 773.477572][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.484166][ T31] ? wait_for_completion+0x267/0x5d0 [ 773.489813][ T31] wait_for_completion+0x2bf/0x5d0 [ 773.496825][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 773.502607][ T31] i2c_del_adapter+0x581/0x6e0 [ 773.502877][ T5199] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 773.507656][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 773.520434][ T31] ? rcu_is_watching+0x15/0xb0 [ 773.520555][ T5199] loop8: p1 start 669833711 is beyond EOD, [ 773.525294][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 773.525333][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 773.531859][ T5199] truncated [ 773.547838][ T5199] loop8: p2 start 422213120 is beyond EOD, truncated [ 773.556946][ T31] dvb_usb_device_exit+0x1be/0x350 [ 773.557482][ T5199] loop8: p3 start 3833721018 is beyond EOD, [ 773.562097][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 773.562132][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 773.571499][ T5199] truncated [ 773.583574][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.589118][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 773.592411][ T5199] loop8: p4 start 1945720663 is beyond EOD, [ 773.595166][ T31] cxusb_probe+0x603/0x700 [ 773.595200][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 773.603490][ T5199] truncated [ 773.605962][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 773.614371][ T5199] loop8: p5 start 3662658880 is beyond EOD, truncated [ 773.619852][ T31] usb_probe_interface+0x641/0xbc0 [ 773.631790][ T5199] loop8: p6 start 514366226 is beyond EOD, truncated [ 773.632011][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 773.638889][ T5199] loop8: p7 start 4087642507 is beyond EOD, truncated [ 773.644403][ T31] really_probe+0x26d/0x9a0 [ 773.654063][ T5199] loop8: p8 start 963101659 is beyond EOD, [ 773.655834][ T31] __driver_probe_device+0x18c/0x2f0 [ 773.656295][ T5199] truncated [ 773.661863][ T31] driver_probe_device+0x4f/0x430 [ 773.675714][ T31] __device_attach_driver+0x2ce/0x530 [ 773.679132][ T5199] loop8: p9 start 3468131593 is beyond EOD, truncated [ 773.681239][ T31] bus_for_each_drv+0x24e/0x2e0 [ 773.690591][ T5199] loop8: p10 start 2597257774 is beyond EOD, truncated [ 773.693093][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 773.706172][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 773.711721][ T31] __device_attach+0x2b8/0x400 [ 773.716744][ T31] ? __pfx___device_attach+0x10/0x10 [ 773.717207][ T5199] loop8: p11 start 3140533928 is beyond EOD, truncated [ 773.722166][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 773.732177][ T5199] loop8: p12 start 3028492062 is beyond EOD, truncated [ 773.734392][ T31] bus_probe_device+0x185/0x260 [ 773.746471][ T31] device_add+0x7b6/0xb50 [ 773.751002][ T31] usb_set_configuration+0x1a87/0x20e0 [ 773.756818][ T31] usb_generic_driver_probe+0x8d/0x150 [ 773.762433][ T31] usb_probe_device+0x1c1/0x390 [ 773.767647][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 773.773171][ T31] really_probe+0x26d/0x9a0 [ 773.782014][ T31] __driver_probe_device+0x18c/0x2f0 [ 773.794626][ T31] driver_probe_device+0x4f/0x430 [ 773.800021][ T31] __device_attach_driver+0x2ce/0x530 [ 773.805824][ T31] bus_for_each_drv+0x24e/0x2e0 [ 773.810913][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 773.817135][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 773.822682][ T31] __device_attach+0x2b8/0x400 [ 773.827872][ T31] ? __pfx___device_attach+0x10/0x10 [ 773.833193][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 773.838726][ T31] bus_probe_device+0x185/0x260 [ 773.843615][ T31] device_add+0x7b6/0xb50 [ 773.849016][ T31] usb_new_device+0xa39/0x16c0 [ 773.853827][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 773.859275][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 773.864614][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.869936][ T31] hub_event+0x2941/0x4a00 [ 773.874439][ T31] ? __pfx_hub_event+0x10/0x10 [ 773.879612][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 773.885522][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 773.890725][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 773.897650][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 773.903539][ T31] process_scheduled_works+0xadb/0x17a0 [ 773.909392][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 773.915545][ T31] worker_thread+0x8a0/0xda0 [ 773.920243][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 773.926824][ T31] ? __kthread_parkme+0x7b/0x200 [ 773.931877][ T31] kthread+0x70e/0x8a0 [ 773.936067][ T31] ? __pfx_worker_thread+0x10/0x10 [ 773.941334][ T31] ? __pfx_kthread+0x10/0x10 [ 773.946077][ T31] ? __pfx_kthread+0x10/0x10 [ 773.950824][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 773.956263][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.961492][ T31] ? __pfx_kthread+0x10/0x10 [ 773.966274][ T31] ret_from_fork+0x4b/0x80 [ 773.970870][ T31] ? __pfx_kthread+0x10/0x10 [ 773.975612][ T31] ret_from_fork_asm+0x1a/0x30 [ 773.980424][ T31] [ 773.983633][ T31] [ 773.983633][ T31] Showing all locks held in the system: [ 773.992047][ T31] 1 lock held by khungtaskd/31: [ 773.997156][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 774.007212][ T31] 5 locks held by kworker/0:2/1927: [ 774.012540][ T31] #0: ffff888020e97148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 774.024020][ T31] #1: ffffc90004a87c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 774.036109][ T31] #2: ffff888145313198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 774.045117][ T31] #3: ffff888056814198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 774.054647][ T31] #4: ffff88801fed2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 774.063928][ T31] 2 locks held by getty/5595: [ 774.068702][ T31] #0: ffff8880348310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 774.078825][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 774.089077][ T31] 4 locks held by udevd/8054: [ 774.093884][ T31] #0: ffff8880330b6418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 774.103052][ T31] #1: ffff88807be87488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 774.112585][ T31] #2: ffff88807c55f2d8 (kn->active#20){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 774.122255][ T31] #3: ffff888056814198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 774.131684][ T31] 2 locks held by kworker/u8:15/14461: [ 774.137469][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 774.149038][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 774.162353][ T31] 2 locks held by syz.0.2662/17192: [ 774.169479][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 774.179663][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 774.191244][ T31] [ 774.193582][ T31] ============================================= [ 774.193582][ T31] [ 774.209758][ T31] NMI backtrace for cpu 0 [ 774.209772][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 774.209794][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 774.209805][ T31] Call Trace: [ 774.209813][ T31] [ 774.209821][ T31] dump_stack_lvl+0x189/0x250 [ 774.209857][ T31] ? __wake_up_klogd+0xd9/0x110 [ 774.209881][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.209899][ T31] ? __pfx__printk+0x10/0x10 [ 774.209919][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 774.209935][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 774.209947][ T31] ? _printk+0xcf/0x120 [ 774.209962][ T31] ? __pfx__printk+0x10/0x10 [ 774.209976][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 774.209991][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 774.210007][ T31] watchdog+0xfee/0x1030 [ 774.210025][ T31] ? watchdog+0x1de/0x1030 [ 774.210047][ T31] kthread+0x70e/0x8a0 [ 774.210065][ T31] ? __pfx_watchdog+0x10/0x10 [ 774.210080][ T31] ? __pfx_kthread+0x10/0x10 [ 774.210096][ T31] ? __pfx_kthread+0x10/0x10 [ 774.210111][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 774.210125][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.210141][ T31] ? __pfx_kthread+0x10/0x10 [ 774.210156][ T31] ret_from_fork+0x4b/0x80 [ 774.210169][ T31] ? __pfx_kthread+0x10/0x10 [ 774.210184][ T31] ret_from_fork_asm+0x1a/0x30 [ 774.210206][ T31] [ 774.210211][ T31] Sending NMI from CPU 0 to CPUs 1: [ 774.357705][ C1] NMI backtrace for cpu 1 [ 774.357722][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 774.357742][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 774.357753][ C1] RIP: 0010:select_task_rq_fair+0x43f/0x34e0 [ 774.357781][ C1] Code: 06 48 89 44 24 30 45 31 f6 eb 0f 48 8b 1b 4d 89 fe 48 85 db 0f 84 da 00 00 00 4c 8d 6b 3c 4d 89 ef 49 c1 ef 03 43 0f b6 04 27 <84> c0 0f 85 8d 00 00 00 41 8b 45 00 80 7c 24 10 00 74 0c 49 89 df [ 774.357796][ C1] RSP: 0018:ffffc90000a08bf8 EFLAGS: 00000807 [ 774.357812][ C1] RAX: 0000000000000000 RBX: ffff88801b6e8c00 RCX: b589ac29844d4900 [ 774.357825][ C1] RDX: 0000000000000000 RSI: ffffffff8d939072 RDI: ffffffff8bc1f600 [ 774.357837][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000080000 [ 774.357847][ C1] R10: 0000000000000000 R11: ffffffff81954459 R12: dffffc0000000000 [ 774.357859][ C1] R13: ffff88801b6e8c3c R14: 0000000000000000 R15: 1ffff110036dd187 [ 774.357872][ C1] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 774.357886][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.357898][ C1] CR2: 00007f3154d82338 CR3: 0000000050c0a000 CR4: 00000000003526f0 [ 774.357914][ C1] Call Trace: [ 774.357922][ C1] [ 774.357932][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 774.357954][ C1] ? select_task_rq_fair+0x309/0x34e0 [ 774.357977][ C1] try_to_wake_up+0x51e/0x1290 [ 774.358002][ C1] hrtimer_wakeup+0x4e/0x60 [ 774.358018][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 774.358034][ C1] __hrtimer_run_queues+0x529/0xc60 [ 774.358069][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 774.358093][ C1] ? read_tsc+0x9/0x20 [ 774.358113][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 774.358163][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 774.358185][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 774.358210][ C1] [ 774.358215][ C1] [ 774.358222][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 774.358239][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 774.358258][ C1] Code: c3 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 7f 11 00 f3 0f 1e fa fb f4 98 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 774.358271][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 774.358284][ C1] RAX: b589ac29844d4900 RBX: ffffffff81977108 RCX: b589ac29844d4900 [ 774.358296][ C1] RDX: 0000000000000001 RSI: ffffffff8d74e2cc RDI: ffffffff8bc1f600 [ 774.358308][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 774.358320][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7f3570 [ 774.358332][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dab40 [ 774.358344][ C1] ? do_idle+0x1e8/0x510 [ 774.358363][ C1] default_idle+0x13/0x20 [ 774.358384][ C1] default_idle_call+0x74/0xb0 [ 774.358424][ C1] do_idle+0x1e8/0x510 [ 774.358455][ C1] ? __pfx_do_idle+0x10/0x10 [ 774.358480][ C1] cpu_startup_entry+0x44/0x60 [ 774.358495][ C1] start_secondary+0x101/0x110 [ 774.358510][ C1] common_startup_64+0x13e/0x147 [ 774.358539][ C1] [ 774.359130][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 774.672186][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 774.683991][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 774.694052][ T31] Call Trace: [ 774.697334][ T31] [ 774.700265][ T31] dump_stack_lvl+0x99/0x250 [ 774.704875][ T31] ? __asan_memcpy+0x40/0x70 [ 774.709461][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.714666][ T31] ? __pfx__printk+0x10/0x10 [ 774.719276][ T31] panic+0x2db/0x790 [ 774.723180][ T31] ? __pfx_panic+0x10/0x10 [ 774.727599][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 774.733409][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 774.738794][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 774.744953][ T31] watchdog+0x102d/0x1030 [ 774.749287][ T31] ? watchdog+0x1de/0x1030 [ 774.753711][ T31] kthread+0x70e/0x8a0 [ 774.757782][ T31] ? __pfx_watchdog+0x10/0x10 [ 774.762458][ T31] ? __pfx_kthread+0x10/0x10 [ 774.767046][ T31] ? __pfx_kthread+0x10/0x10 [ 774.771642][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 774.776838][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.782046][ T31] ? __pfx_kthread+0x10/0x10 [ 774.786666][ T31] ret_from_fork+0x4b/0x80 [ 774.791084][ T31] ? __pfx_kthread+0x10/0x10 [ 774.795678][ T31] ret_from_fork_asm+0x1a/0x30 [ 774.800460][ T31] [ 774.803794][ T31] Kernel Offset: disabled [ 774.808138][ T31] Rebooting in 86400 seconds..