last executing test programs: 10m19.604750445s ago: executing program 3 (id=1062): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) socket(0xa, 0x3, 0xff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c0100000000000000000000000007000500ff020000000000000000000000000001ff"], 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000780)=""/169, 0xa9}], 0x2}}], 0x1, 0x2102, 0x0) sendmsg$nl_route_sched(r2, &(0x7f000001f640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000001f600)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0x9}, {0x0, 0xa}}}, 0x24}}, 0x0) 10m16.482264506s ago: executing program 3 (id=1074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m16.125261114s ago: executing program 3 (id=1075): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000049c0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000580)="2b36d708e1f8c54b4417932f6ccb37d6bcaeff699a3fab20839cd723bc6ef280214b506dd7d9bc99b4f0ad4729413a628cc7a34aac38348be06fb7922adf3a3a065bc274db0a43bf", 0x48}, {&(0x7f0000000600)="f2940c9b3e84b7bd6b09d9e1b6d4a8a845645ad3", 0x14}], 0x2, 0x0, 0x0, 0x4810}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000780)="68fb17bad21d47a959b42fd380b430fcdd10ea7d5a2846de2543f0a5313f0d99e60ba9918ca30b1ba253471324e1e4f9a0ad24ea9d6243e282e9a1728df237613b54f3823daaafbcb0b4834bb2dbb7ff2867aee12e498817d37c5cd70b8fe3a64eb4adf1b8c2b244114594f2d2422fc507dac42e16", 0x75}, {&(0x7f0000000800)="0eba97daf849597813d5cc4c70095084ba873014e80b473621c299f63ab15a512a22f4dde991ad779ca5561c6aab304450900fc2320434147e507c39ab509efb9c028a9c47439207e3eca897c582e520fa9598e615a45af95af1546c455308f348a1788c38b06b1e5256", 0x6a}, {&(0x7f0000000880)="1d8fbc0e82a1c05a5c6dc7e6ef2f8c010b4c38ff9c1018523a428f928a909bd8bf86c69cf5490a3eef53fb6a2a97932a6e4ff8f0", 0x34}], 0x3, &(0x7f0000003f80)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c}}], 0x130, 0x800c814}}, {{&(0x7f00000040c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000004140)="0c16c7fa22800889fa03949706529ddb5e0e35d112dcf2fee526d305754ae8a7d6fe69d0d7c328693a1f34cb89af8968e837353718ec79f87e8196f9", 0x3c}, {&(0x7f0000004180)="7c654a703c9ea3935c28b843aeb4bb16b27990a1225655243b85783794e90d20bc048dd25f2849e7b99eafacc0c3c567d1ade439093a7f3acbcebef5f84f8973418da195d49f6ed473a37c738fbf48911335d75728a7f2efbf6b422486c3f315c29aa3eb49107834b66b06e4aeff72f2110a3690e1e2a54170cb81ac0502d77fe29b5d39ead4a54b5639bd05ee1e6fadd3122a2d48215306b247d1203387be48cd3383f88b", 0xa5}, {&(0x7f0000004240)="a1234dbb2cf285d6464e0b30810669d50c4c9c40396267429a9535a7a6af3631f2b1439f79dae7022066fb03d0de07b3ea2947b121bda3fede0302ecc2eb0cdfbb252d53e5089c605defa44e9639e4077714f5837b164b85ee5a9ec219609f954963642df256801043207d8d8ad8da85ac727bfc2db8aa1c18c939fb623f8172bdb61ee63c1e211f0fc25b233f243550c9dfecec8466", 0x96}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES64=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000077203d081f219e0000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0], 0xa8, 0xe0}}, {{&(0x7f0000004500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000004580)="637fb00712037f56857a26ff0b0d3e318058e489245c8706c8f60e2b2bfa034c9f8be813b87533ef42f9aa8a1e2c9223427d361745f7e522ba7287e7cc8a07320f3b34caa51dc4c5d02f28665820e4a05aac8a5c26eec0c6622cb99dbe9bc023a1fba7a12cccf4c2fd467075113eee1687c3f442534b5abaa5e3d34fc5936cf510c7079c655c628d5d859096eec25003f986310f4868cf4c37c41c9a798422fdf4d0b52237b05756d7ce7496774e9ee6327d881c45f75498e3c1f9d4a918c9659b4d0b6db534cc7ea95708224955af5d333c50f220cd7690dd66498607cae29a4f", 0xe1}], 0x1, &(0x7f00000009c0)=[@rights={{0x30, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x128, 0x20000080}}], 0x4, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000104000008000b4000000000400004803c0001800b00010065787468647200002c000280080001400000001508000340000000000800044000000000050002000700000008000640000000020900010073797a30"], 0xdc}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x40004000, 0x2, 0x200000000000008a, 0x5a, 0xb319, 0x2}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) (async) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000100)) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) (async) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000001c00), 0x1, 0x20008000) (async) shutdown(r5, 0x1) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r6, r7, 0x0, 0x201f00) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180c75, 0x7, 0x104, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 10m15.978568861s ago: executing program 3 (id=1076): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) sendmsg$tipc(r0, &(0x7f0000000f00)={&(0x7f0000000880)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10, &(0x7f0000000d80)=[{&(0x7f00000008c0)="b0221aac08429effe511c4dcc6755e68a9f43ae26cd8c07f34720575508fad43b2ea5ccf511dd6232fd2b21c709c403bcfdd37b1f8c33b73907b740667d2595fb14d0457dd77c537a1c37078b6af580d8c638e57b6da9fc941abb5e02a0e6997f9ace8ff4c05b54d03c06a495c0859eb8624fb3e8ef56b8bea8796909fa0a4cf11d1a64f0c963d778a93e5187e3f9d778efd6e336053bd54afceed52e0ee24844f9cdda49809c9a9dc46cc2d5e", 0xad}, {&(0x7f0000000980)="ab8644fbde0b3427ef08c1824ab149df4fe8b62536d0e4d57f6333fe8e51e371691fbae8b530621ecc7f48faa52042bd6133a680d4a40eb97ceed346bdca694806df0b1d947f01f1e81fb47f570ba66920afa8f754decf089c22a5297fb97a1e19629070", 0x64}, {&(0x7f0000000a00)="f814b0b9f46aa53f0d8c5805aba2687523b413b03aef8df748eca2053c06fedcbd9d4987398813c6e7ebf5f86271ee6e21af2f61fbe15ad09893a3e6739b95861ce2e69fbdb37dec9f41a1e9d40d7823771ce64a9a9d96a5db2b8a20ad5d08ae309940c41201ecb616d3cf3416fba1533a6e1e8e966584a20fdf03d741b18c0f7e", 0x81}, {&(0x7f0000000ac0)="8252e21aef51a04e55ed8e78e6a1e54ba5aa147595a10b6d4f827437165da34a5b17ce26c5239de6b07409680301815779f38e364600dcc1c9b0ccd78636db6a76ee93afbff4938b4905b220069fad73c7f191a36b962b176a78478e6a2bb7af20a64a3ebc4709c3161b34ce54d16f8538742e3839b8dfdefb06e4e6f80b6cf60cd5bde73e3e402f3af21cb756a84fe28e43691a650b1b701cdeebcf772656cf3b1282048187aa5f91069620ab877b79eee217f2e620a628659af69ed0", 0xbd}, {&(0x7f0000000b80)="2f84a30881bbae4feeb639946c2da7c3653312e595947c8355adcef758ea225b9a2a4ada58c6875a71ca342cde034c5c34af412885f40b812cd93714e3b5e224f669bee4545ce35ab5b876c4b04263c67331abefa752dff705308c58ba9156c675b414ab6f41890ab95437c13ad6c7eda76470b9", 0x74}, {&(0x7f0000000c00)="dc75a5e095538b9711f61a985e4817a72cce5fee4361191cf4e8b58c0b3dbd", 0x1f}, {&(0x7f0000000c40)="9dc306cfd48cff53b61516f30874d0b07341f16bb1f7e40e6f62afea428c05a1214f5bbe5d92f1cfeabd0e88216f0415cbebb9655b3f6a855db82e515df928e56b543a83d5f04a87ae86277b98b19c44c1eca44b66f99c8d057cca0a6093c8f311078808ca3cfbd0fa88801396c89d7d4469ff3bf2fdfbf4e8fec121e44b1f02ad3832a91ce69b2d0a721f71ee992725be23f1ac6b9b5c4a282193c6fbcbc46070a7f1ca278b85e4477629147aec6df21b4758c31317de05503a5777f74256f64a3f92a797e12179f01d4a31483bb4057e540374a0dcf1630c59efd7fa623768c203685b7a9adaee941a868d", 0xec}, {&(0x7f0000000d40)="d716f81a0371192e777bbda73d4befe9dd5b6e6d37afd79e46cad07b5cdd0bb8b37b15aaa8b52032aa672cabb7fe75c45224aa574e", 0x35}], 0x8, &(0x7f0000000e00)="dc9627d288293c7aab89535d40b40ce55e20040f65e338b5e2a371f041c5b559180d7823e4e9432e988c5bda3148b83b1951f1bea6af1c148c4f56cf02161943d84438121423a9e328e05c5a774f7470ff33c239f275c4a4612a620ba7e80ad1b1d03d00611386111e658edbf9ff75df9725d82a8d5fb605108d9b17033bd66fcd2da21a705a5ccaf790527946a17a67fb3a5d4abba35108e9ba17b196874663a858bb122647310d2fdeabc04e5a47548bd6b3deadcc9161d376acee96fc771baee6b2b55f54d4019cefe16ca7d6ce8a30bd9f7b98fe4a0e0e2adcd0e6951098355f110320a5a4a2541f1faf9a764bd0f1ba78ce3cd511e940d3cf3b", 0xfc, 0x4080}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000680)=""/59, 0x3b}], 0x4, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r6, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r6, &(0x7f0000000100)='./file0\x00', 0x220) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x15, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0x81, 0x1000, 0xc, 0x4b, 0x9}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 10m15.558068666s ago: executing program 3 (id=1080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x6000, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) close(r0) 10m15.327171085s ago: executing program 3 (id=1082): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x3a, 0xd0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x2], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4000) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000000840)={0x4b, 0x2, 'client0\x00', 0x1, "d4d576861ad7dc8b", "88c3861c6edcf0d6f3d142f615af47292bf6541b8aa35cb7bb6ca6c978edfd81", 0x20f9, 0x7}) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000200)=0xfe) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a0300000000000000000001000240000000050900010073797a300000000028000000000a01040000000000006cea86db89f39b35d91e0000010000080900010073797a30000000000800024000000006140000001000010000000000000000000700000a00000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000100)={0x2, 0x1, 0x0, {0x2, 0x9, 0x9, 0x3}}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r3}) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) 10m14.797313074s ago: executing program 32 (id=1082): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x3a, 0xd0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x2], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4000) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000000840)={0x4b, 0x2, 'client0\x00', 0x1, "d4d576861ad7dc8b", "88c3861c6edcf0d6f3d142f615af47292bf6541b8aa35cb7bb6ca6c978edfd81", 0x20f9, 0x7}) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000200)=0xfe) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a0300000000000000000001000240000000050900010073797a300000000028000000000a01040000000000006cea86db89f39b35d91e0000010000080900010073797a30000000000800024000000006140000001000010000000000000000000700000a00000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000100)={0x2, 0x1, 0x0, {0x2, 0x9, 0x9, 0x3}}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r3}) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) 8.702703649s ago: executing program 1 (id=3657): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000002400004803c0001800e00010006006d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000d862002faa6502000000000000000000000a"], 0x94}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0xb, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000006900000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0xffd, &(0x7f00000015c0)=""/4093, 0x40f00}, 0x94) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) 7.268076065s ago: executing program 0 (id=3661): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0xfffffff3}, 0xffffffffffffff60}, 0x48) 7.082426369s ago: executing program 0 (id=3664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 6.846221451s ago: executing program 0 (id=3665): unshare(0x6a040000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) ioctl$HIDIOCGUSAGE(r6, 0xc0105b08, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r8, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x41, 0x69}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x189e1ce0075f5ed6, 0x8031, r6, 0xfffff000) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r10 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r10, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r10, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000780)={0x40, 0x1, 0x2, "b4cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="00a026"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r9, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$VIDIOC_S_STD(r9, 0x40085618, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x14) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 6.789013076s ago: executing program 5 (id=3666): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000340)="f36736440f46001d080000000001d7670f013966baf80cb8de8a8682ef66bafc0cb0e9eec4a1f9d0f63626f343e100f342a766baf80cb80f469386ef66bafc0cb0427c7c410f766f000f009986000000", 0x50}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r0, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x405}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001900010000000000000000008020000000110005"], 0x34}}, 0x0) fcntl$setlease(r6, 0x400, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r9, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000003c0)={{{@in, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000240)=0xe8) recvmmsg$unix(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x1a}}], 0x1, 0x40002102, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r10, 0x5, &(0x7f0000000040)={0x1, 0x0, 0x20000080, 0xfffffffffffffffb}) sendmsg$nl_route_sched(r4, &(0x7f000001f640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000001f600)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0x9}, {0x0, 0xa}}}, 0x24}}, 0x0) 6.307198487s ago: executing program 1 (id=3669): recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x1a, &(0x7f0000000300)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1}, 0x9}], 0x1, 0x42, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300)) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300)) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040f204211400000040000109022400010000b00009040100090300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, &(0x7f0000000540)={0x40, 0x24, 0x30, {0x30, 0xb, "98c1b95e87ee9fa47fad7cc0fa5bba479c82dc874c88a7211f46d75fe34c250c0c1cb45655f4f5a487741efe7c78"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.241580443s ago: executing program 5 (id=3670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_usb_connect$uac1(0x2, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307032040000102030109027200030109103f0904000000010100000a2401d2000a000201020904010000010200000904010101010200000905010000014200000904020101010200000b240201fc030801371fc8072401080500000905820920"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) (async) gettid() (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth1_to_bond\x00', 0x400}) (async, rerun: 32) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0xfdef) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r6, 0x100000000) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) read(r7, &(0x7f00000000c0)=""/163, 0xd0140f23) unshare(0x20000400) (async) write(r5, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) (rerun: 32) bind$packet(r1, &(0x7f0000000240)={0x11, 0xc, r8, 0x1, 0x1, 0x6, @broadcast}, 0x14) 5.835437277s ago: executing program 4 (id=3672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newtaction={0x210, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x1fc, 0x1, [@m_ipt={0x124, 0x7, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x6d, 0x6, {0xb16d, 'security\x00', 0x3, 0x8, "e44750540aaac21ea6c0e843fe12184ee10017d29f43a40a23514ce79acb73cf1c4275674c7e438508dbf5d8bda3151fd9e84bb476b3a7f70a77ad1ff92cc45819c858"}}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xd4, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0xa9, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x210}}, 0x40c1) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000240)}, 0xb}], 0x2, 0x10, 0x0) 5.700045459s ago: executing program 4 (id=3674): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f0000000dc0)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)="a28bdbd53fa214050c08eb545a4de9aa15b36f1ff44f92764024311cde5149dec8fb0f09d4ed34cefa39fbd5583b24e871c5656fceb499e2c04637ca5b9bd1969c0d37b9ac8d4e139e79dd698a7cd9afbe266b98585c85db65a91723161f7e2f0d612b0e6a", 0x65}, {&(0x7f00000004c0)="5fbe7b882b5f3ea28615c65bf394d986acc202c10be6f2dea583e3fcca60fe79b9fab8b817e03d76d1f649906a53f0de1a50ae1e8e55049a1f7f1e0f3b75c4cd69", 0x41}, {&(0x7f0000000e40)="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", 0xfb}], 0x3, &(0x7f00000006c0), 0x0, 0x24040091}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000007c0)="c54c9314f55f45ef69e58fbff3f89a7abbed088d2dd78ad3325887ef5b4057e6c926a0564ae8f35d9e21f005a10555a10820427d3e581153d0bc808435c8aac83b1db7e134210d96c1a973b73027f8ce15f66e45a5eb12f916974b828dbad4087975a58416b3c2c8fd8d", 0x6a}, {&(0x7f0000000840)="5d88f8ad57928676bd965a491a779a5a77e49ea7b92f672dc741aa89e552d1f97c7ad0173eee84801a5a9f205b09d2633478325f8b1cd0e2210a5dd745c440870d83c06b5edbd0ebbd9541bbcee190ec869f689cb8add96598d5f2535de11c88c1647c0c9867e2267bbf990b7b18342fb0f7b324c370e9bdf98d00cda6bc77a0da", 0x81}, {&(0x7f0000000900)="816fa9e4223600f0ee8c587ddc8dfa8cf82e32e34ed4b43a50090b3b35ed67ee4a4f4e6332892f23d7b6b64002b7f80d7903281cd99666cb042ad7601be59b6c781b6a92729f8694d29266207749e27bf77e469ac77d6863b4f5b4f10e23001e6610bf6c0b150de0b360946fcaab1db71e02393fa9d95157ac800ead86436203566136f71f2aee2570099545d0b950c84d8fe50cc8f53857acb8da44a54dbe1499376a152ed72a74125fdfd9918c4afb3d92d50a214cbc4ec25219329572b87b9f925386919ed7a03816354db307832991dfdf0c0444abe9031ea22343992fd0883a1f", 0xe3}, {&(0x7f0000000a00)="7cbf8e6503b75f28014e67020148c4775c758318863288cc0f058cab68d6f3591640ca20cf595f78c6bf276acf5205331e6651c5bd2f0c177116698a09c1db8ed29f161731ac27d514c23cf9a227b669bccf6829ce68e73898de5c2367dc5468cdca48f2fc7f96862313a5a8e0cf1ff8883cc385951048d46323df49e29044718f417a8e25b3c179e84cb17a051fb1fa7ff36f72538c0a44670bbfac2f10c97c0caa840ee177056d0d89a4adac1eea7dc90f1576ab9b9b71c1710acbcd3e1d1bc6f5d731eea3ee6e88dc", 0xca}, {&(0x7f0000000b00)="8c22c599d3e7ca8f07d25fa1406a8338c11d1b62549a44dfd4069deb2d2024a806485a9c64f2ed9792d6abb5dabc17559da25f8ec6609e781a08e140e9fff067e64021536211605f80312f403f3dec831ca36398b77f557cbaaabb2b9a225c8e89e050315b040aa7dcdc1fe3", 0x6c}, {&(0x7f0000000b80)="558de746eeed48e2b243cf75b329c342f0a197cde13081339ff311a4e1ac291f201de74f7538e79d597f5f9b5c5b4f45e0616a54357486c093d6fc466aa5824f8c03061fe976c81c03719d43615b51122d3064f8abe04a86c95aa12967339c00dd38a8e11e56aa26b355430251e10ee8c909a62f4811d55b6efc5ca1da85a40e3f1ebe71119ca27c9722e47decb9ef516595bb867f7beb8b23fcc7ee8deeec8be778a130a54c337b3a59b3ef16bf43a3c2e19a6f1881dad1f2661769a0428f561bc83136800c6e8733674c26740269a1241e92dbb63b7e3be21e67c7f5da21690596be6b9666c1f13af00c7c2b7dd112f7a5685fb15a0a", 0xf7}, {&(0x7f0000000f40)="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", 0xff}, {&(0x7f0000000cc0)="047a035ad19330f10cea06f5ddfe453b64e242676c148c709584eaff1c12f249af2b68e49543c5f8516dcfe14b6fa1e807b71cd3ba809500945519f34ec305911052a1923625863b3c864b10880f59cbe55ad308be3797c2f77c33f12fb5eba42d3e2894a164b0867f788e9b8ddce1ae0476c41d", 0x74}], 0x8, 0x0, 0x0, 0x4001}}], 0x2, 0x4010) (async) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) (rerun: 64) write$UHID_CREATE2(r2, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x20, 0x8, 0x91, 0x9, 0x80000001, 0x8000000, "88ee9fdb45ada97dd28bc7af929edb66bbd02e523d043bf43903fe740b612ae9"}}, 0x138) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xee) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000780)={0x45000, 0x118000, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000240)) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f00000004c0)={0x0, 0x1, &(0x7f00000006c0), &(0x7f00000003c0)}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x2000000007ffc, 0xe, 0x4, 0x4, 0xa, 0x1000, 0xd35, 0x0, 0x7ffffeffffffb, 0x5, 0x8000000000000001, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xbde], 0x2, 0x3c4210}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x24000010) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2"], 0x0) (async, rerun: 32) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x41e, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async, rerun: 32) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@remote, @in=@private, 0x4e23, 0x1, 0x4e22}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800, 0x0, 0x6}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x7d}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x40}}]}, 0x194}}, 0x4050) (async) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000740)={0x2, {0x2, 0x1, 0x5, 0xffff, 0x9, 0x2}}) (async, rerun: 64) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x9, 0x9, 0x19, 0x5, "cc7d45a830efb0d768d9ebf448ed12827187fff9e30891461936f6c9443071699b6cc1d4930d977bfb9ee244edf316283c1a3a8ebc23bb56fefdd1c5654ceb2d", "1882d2ec7eba2ea433ba8d94b01659b5398b86944d235d40735c592ec6fca9b0", [0x5, 0x80000000]}) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000006c0)={0x2, 'veth1_to_bridge\x00', {0x2}, 0x5}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="08e1004e"]) 5.557767001s ago: executing program 2 (id=3675): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000bc0)="d18a", 0x2}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x64480000, 0x0, 0x0, 0x7, 0xa19, 0x0, 0x0, 0x1}}, 0x50) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80010000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4028000}, 0x24040000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x5c) io_uring_enter(r2, 0x8ae, 0x6933, 0xfa05bc9a9e395947, 0x0, 0x14) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x1, 0x0, 0x3}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 5.501871864s ago: executing program 4 (id=3676): socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.495043846s ago: executing program 4 (id=3677): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3}) r5 = open_tree(r1, &(0x7f00000002c0)='./file0\x00', 0x1401) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r6) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b15, &(0x7f0000000000)={'geneve1\x00', @multicast}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xf], &(0x7f0000000340)=[r4], &(0x7f0000000100)=[0x31], 0x0, 0xff}) io_setup(0x3fd, &(0x7f0000000500)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a1, 0x1000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0, 0x2000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 5.09695794s ago: executing program 2 (id=3678): syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xc, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = inotify_init() r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) read$FUSE(r2, &(0x7f0000002800)={0x2020}, 0x2020) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) lseek(r6, 0x0, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYBLOB="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"/5792], 0x16a0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000008000000140012800c0001006d6163766c616e000400020008000000000000766c616e30000000000000000024000e0004040000000000000400000000000000000000000700b302000000000000"], 0x6c}}, 0x8050) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000130a05000000000000000000000000060800034000000005740008006b29d747a350a3b9cb57edcee2dd798b8b6c145ea96e51f08b5a60f788fd302bd4489756ec734885c90211d2152d71e37c3e5576a80361018c27dcb1f5faf10a57c0f5ce032b700b898e3a8391152b75b63843527aa7dae48000dd84091a7326e0b287c74f817adef9d3d89d7318654329880c0006400000000000000002080003400000000a0900020073797a320000"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40044800}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 4.853107979s ago: executing program 5 (id=3679): socketpair$unix(0x1, 0x1, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x0, 0x1, 0x40000000000, 0x400000004, 0x2, 0xe767, 0x6, 0xe96, 0x8000, 0x0, r4, r2, 0x80000001, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88840) ioctl$EVIOCSKEYCODE(r6, 0x40084504, 0x0) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x5c}, 0x6e) socket(0x2, 0x80805, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x2) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0xce, 0xf5, 0xbf, 0x40, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x61, 0xd, 0x1, 0x2f, 0xa3, 0x68, 0x9, [], [{{0x9, 0x5, 0x82, 0x12, 0x40, 0x4, 0x4, 0x3f}}]}}]}}]}}, 0x0) 4.402910954s ago: executing program 4 (id=3680): syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="122505a8a440000102740109021b0001010250030904000000070100000905010200"/45], &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="050f05080087"]}) syz_emit_ethernet(0x9f, &(0x7f00000000c0)={@broadcast, @link_local, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x65, 0x6, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x40}, {"db254de04bea3209936383e602f581023f8b05e07a4407dc387a866faede99b5cf500760686437ef18c4fcd04d7ab0ea894cd1ec5931e7603f0d4be9d62a239c8cbf34f60b5ab7552db3c805de9b32bfbf"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x8, 0x0, 0x1}, [@CTA_LABELS_MASK={0x1c, 0x17, [0x1, 0x2, 0x0, 0x4034, 0x2, 0x5]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0xc010) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x6, 0x9, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r6}, &(0x7f0000044000)) sched_rr_get_interval(r6, &(0x7f0000000540)) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="04010000090601010000000000000000030000070900020073797a32000000000900020073797a300000000068000880100007800c001b40000000000000fc430c000780060004404e230000100007800c001680080001407f000001100007800c00148008000140ac1414bb1c0007801800148014000240fe88000000000000000080c5cc1d4000000000090005404e2300000c00018008000140ac14141905000300810000001800028014000240fc010000000000000000000000000000647d1940000000000000000205000700020000000a0011000180c200000000000c00078008000640000007ff"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 3.868237917s ago: executing program 2 (id=3681): bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socket(0x23, 0x6, 0x1000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000003d40)=[{{&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f0000000c80)=[{&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000700)}, {&(0x7f00000026c0)=""/10, 0xa}, {&(0x7f00000004c0)=""/40, 0x28}, {&(0x7f0000000500)=""/48, 0x30}, {&(0x7f0000000b80)=""/195, 0xc3}], 0xd, &(0x7f00000027c0)=""/231, 0xe7}, 0x8}, {{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000800)=""/91, 0x5b}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000002a80)=""/117, 0x75}], 0x3, &(0x7f0000003e00)=""/4106, 0x100a}, 0x9}, {{&(0x7f0000003b40)=@caif, 0x80, &(0x7f0000000a40)=[{&(0x7f0000003bc0)=""/213, 0xd5}, {&(0x7f0000000880)=""/197, 0xc5}, {&(0x7f0000000d80)=""/167, 0xa7}], 0x3, &(0x7f0000003d00)=""/64, 0x40}, 0x101}], 0x3, 0x23, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x14, 0x8001, 0x10, 0x9, 0x100000000, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0xde39ea0f8cb0e61e, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f0000000d80), 0x0, 0x10142, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x1, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) (async) socket$kcm(0x10, 0x2, 0x4) 3.725292715s ago: executing program 2 (id=3682): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000140)='1', 0x1) write$P9_RSTATFS(r4, &(0x7f00000001c0)={0x43, 0x9, 0xfffe, {0x4b2, 0xa3, 0x4, 0x8000000000000001, 0x8b6, 0x0, 0x1, 0x401, 0x7fff}}, 0x43) close(0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r9) r10 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.307760164s ago: executing program 0 (id=3683): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02"], 0x0) file_getattr(0xffffffffffffffff, &(0x7f0000005000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000006040), 0x18, 0x1000) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x140) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) pwritev2(r3, &(0x7f00000011c0)=[{&(0x7f0000001140)="c510d07b79", 0x5}], 0x1, 0x8, 0x9, 0x9) mkdir(&(0x7f0000000280)='./file1\x00', 0x9f550acf755c461b) dup2(r0, r1) 3.214349213s ago: executing program 1 (id=3684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newtaction={0x210, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x1fc, 0x1, [@m_ipt={0x124, 0x7, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x6d, 0x6, {0xb16d, 'security\x00', 0x3, 0x8, "e44750540aaac21ea6c0e843fe12184ee10017d29f43a40a23514ce79acb73cf1c4275674c7e438508dbf5d8bda3151fd9e84bb476b3a7f70a77ad1ff92cc45819c858"}}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xd4, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0xa9, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x210}}, 0x40c1) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000240)}, 0xb}], 0x2, 0x10, 0x0) 3.132296605s ago: executing program 1 (id=3685): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0076010900010073797a310000000028000480240001800b000100736f636b6574000014000280080002400000000808000140000000050900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvfrom$unix(r3, 0x0, 0x0, 0x2000, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000d00)=[{r3, 0x4200}, {r3, 0xd044}], 0x2, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000002c0)=0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.851412276s ago: executing program 2 (id=3686): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',euid', @ANYRESDEC=0x0, @ANYBLOB=',fowne', @ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc4) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.281909898s ago: executing program 1 (id=3687): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x100, 0x4) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000254000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a310000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r2, r4) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$char_usb(r6, &(0x7f0000000480)=""/74, 0x4a) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000000400)=""/19, 0x13}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) poll(&(0x7f0000000200)=[{r8, 0x4000}], 0x1, 0x9) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x1000, 0x2000, 0x0, 0x0}], 0x1}) 1.997386478s ago: executing program 0 (id=3688): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x5, 0x0, &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x6}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[r8], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 1.681284997s ago: executing program 5 (id=3689): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140)={0x0, 0x8}, 0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@generic={0xfe, 0x6d, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d18"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x90, 0x29, 0x36, {0x5e, 0xe, '\x00', [@generic={0xff, 0x3f, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c2"}, @pad1, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}]}}}], 0x1c0}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x0, 0xffff, 0x47524247, 0x7, 0x0, 0x4, 0xb}}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xfc}, 0x2) 1.35908993s ago: executing program 2 (id=3690): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x49, 0x0, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xf, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffc01, 0x3f, &(0x7f0000000140)=""/63, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x4003, 0xd, 0x1, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0x9, 0x2}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x3, 0x4, 0x4}, {0x3, 0x4, 0x100000, 0x5}], 0x10, 0xb9}, 0x94) r7 = openat$cgroup_root(0xffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r6, r7, 0x12, 0x0, @val=@tracing={0xffffffffffffffff, 0x34b00000000000}}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r10) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f00000003c0)=0x4) 1.318452032s ago: executing program 4 (id=3691): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="92276d95ae3a"]}, @typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404e800}, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40e1, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.129528781s ago: executing program 5 (id=3692): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2c2}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x8b0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x884, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xffffffff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x3, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x1, 0x100, 0x7ff, 0xaef, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x3ff, 0x7, 0x3326ea06, 0x7, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773815, 0x8, 0x8001, 0x6, 0x5, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x100, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x40010000, 0x3, 0x0, 0x9, 0x3, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x3, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0xffffff01, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x91, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0x7, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x1, 0x0, 0x5, 0x401, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0x1, 0xfffffffc, 0x5, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x1ff, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0x90, 0x0, 0x1, 0x10, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x7, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x0, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x4, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x0, 0x8, 0x7fff, 0x1, 0x8, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x7, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1000001, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb5, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x8, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x0, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x4, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x80000001, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x7, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x8b0}}, 0x24040084) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000540)={0x0, 0x0, 0x8, &(0x7f0000000040)={0x1, "fd5a44512b7e1b0020ed2abb4301002700"}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 673.006109ms ago: executing program 5 (id=3693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) 492.834504ms ago: executing program 1 (id=3694): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x5, 0x0, &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x6}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2010000}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[r8], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 0 (id=3695): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newtaction={0x210, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x1fc, 0x1, [@m_ipt={0x124, 0x7, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x6d, 0x6, {0xb16d, 'security\x00', 0x3, 0x8, "e44750540aaac21ea6c0e843fe12184ee10017d29f43a40a23514ce79acb73cf1c4275674c7e438508dbf5d8bda3151fd9e84bb476b3a7f70a77ad1ff92cc45819c858"}}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xd4, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0xa9, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x210}}, 0x40c1) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}], 0x4}, 0xb}], 0x2, 0x10, 0x0) kernel console output (not intermixed with test programs): 196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.991740][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.038195][T12727] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.045369][T12727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.110511][T12727] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.117803][T12727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.135182][ T5919] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 855.357731][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.559516][ T5919] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 855.570885][ T5919] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 855.603563][T17196] veth0_vlan: entered promiscuous mode [ 855.647689][T17196] veth1_vlan: entered promiscuous mode [ 855.768896][T17196] veth0_macvtap: entered promiscuous mode [ 855.780953][ T5919] usb 2-1: USB disconnect, device number 113 [ 855.860787][T17196] veth1_macvtap: entered promiscuous mode [ 855.963174][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.975335][T17375] vivid-000: disconnect [ 856.020378][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.098962][T12728] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.151073][T12728] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.195930][T12728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.250535][T12728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.316659][T17371] vivid-000: reconnect [ 856.406934][T17389] netlink: 826 bytes leftover after parsing attributes in process `syz.5.3129'. [ 856.472809][T17389] netlink: 826 bytes leftover after parsing attributes in process `syz.5.3129'. [ 856.509844][T17394] loop3: detected capacity change from 0 to 7 [ 856.526771][T15045] Dev loop3: unable to read RDB block 7 [ 856.532412][T15045] loop3: unable to read partition table [ 856.541600][T15045] loop3: partition table beyond EOD, truncated [ 856.580563][T17394] Dev loop3: unable to read RDB block 7 [ 856.599895][T17394] loop3: unable to read partition table [ 856.629607][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.672665][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.687963][T17394] loop3: partition table beyond EOD, truncated [ 856.755565][T17394] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 856.807281][T12727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.835224][T12727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.140740][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 857.221927][T17418] hub 1-0:1.0: USB hub found [ 857.228200][T17418] hub 1-0:1.0: 1 port detected [ 857.268153][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'. [ 857.279259][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 857.359627][T14752] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 857.859010][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 857.876412][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 858.231903][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 858.322672][T14752] usb 6-1: device descriptor read/64, error -32 [ 858.490762][T14752] raw-gadget.1 gadget.5: failed to queue suspend event [ 858.524369][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 858.542612][T10395] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 858.672782][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 858.742585][T10395] usb 3-1: Using ep0 maxpacket: 32 [ 858.750217][T10395] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 858.761575][T14752] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 858.781011][T10395] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.813186][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 858.830595][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 858.842597][T10395] usb 3-1: config 0 has no interface number 0 [ 858.879497][T10395] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 858.932882][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 858.942307][T10395] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 858.953667][ T5906] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 858.971214][T10395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.030343][T10395] usb 3-1: Product: syz [ 859.040503][T10395] usb 3-1: Manufacturer: syz [ 859.045287][T14752] usb 6-1: device descriptor read/64, error -32 [ 859.067770][T10395] usb 3-1: SerialNumber: syz [ 859.098773][T10395] usb 3-1: config 0 descriptor?? [ 859.125779][T10395] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input65 [ 859.148976][ T5906] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 859.169706][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.182679][T14752] raw-gadget.1 gadget.5: failed to queue suspend event [ 859.202687][T14752] usb usb6-port1: attempt power cycle [ 859.219094][ T5906] usb 1-1: config 0 descriptor?? [ 859.227518][T14752] raw-gadget.1 gadget.5: failed to queue disconnect event [ 859.290265][ T5906] cp210x 1-1:0.0: cp210x converter detected [ 859.306972][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 859.357469][T10395] usb 3-1: USB disconnect, device number 122 [ 859.445309][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 859.520303][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 859.673644][ T5906] usb 1-1: cp210x converter now attached to ttyUSB0 [ 859.764947][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 859.784322][T17448] netlink: 'syz.4.3141': attribute type 12 has an invalid length. [ 859.822631][T17448] netlink: 'syz.4.3141': attribute type 29 has an invalid length. [ 859.842647][T14752] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 859.876008][T17448] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3141'. [ 859.892850][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 859.922377][T14752] usb 6-1: device descriptor read/8, error -32 [ 859.989228][ T5906] usb 1-1: USB disconnect, device number 72 [ 860.023495][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 860.074120][ T5906] cp210x 1-1:0.0: device disconnected [ 860.083529][T14752] raw-gadget.1 gadget.5: failed to queue suspend event [ 860.104571][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 860.115484][T10395] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 860.146474][T10395] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 860.204688][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 860.283221][T14752] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 860.355996][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 860.364127][T14752] usb 6-1: device descriptor read/8, error -32 [ 860.453559][T17473] misc userio: Invalid payload size [ 860.459237][T17462] fido_id[17462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 860.483523][T14752] raw-gadget.1 gadget.5: failed to queue suspend event [ 860.506164][T14752] usb usb6-port1: unable to enumerate USB device [ 860.599786][T17474] misc userio: The device must be registered before sending interrupts [ 860.718426][T17478] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3147'. [ 860.743247][T17479] FAULT_INJECTION: forcing a failure. [ 860.743247][T17479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.780465][T17479] CPU: 1 UID: 0 PID: 17479 Comm: syz.0.3148 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.780498][T17479] Tainted: [L]=SOFTLOCKUP [ 860.780506][T17479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 860.780537][T17479] Call Trace: [ 860.780546][T17479] [ 860.780562][T17479] dump_stack_lvl+0xe8/0x150 [ 860.780598][T17479] should_fail_ex+0x412/0x560 [ 860.780637][T17479] _copy_from_user+0x2d/0xb0 [ 860.780665][T17479] ppp_ioctl+0xad7/0x1b10 [ 860.780698][T17479] ? __pfx_ppp_ioctl+0x10/0x10 [ 860.780728][T17479] ? ksys_write+0x1fc/0x270 [ 860.780760][T17479] ? bpf_lsm_file_ioctl+0x9/0x20 [ 860.780789][T17479] ? __pfx_ppp_ioctl+0x10/0x10 [ 860.780814][T17479] __se_sys_ioctl+0xfc/0x170 [ 860.780845][T17479] do_syscall_64+0x14d/0xf80 [ 860.780873][T17479] ? trace_irq_disable+0x3b/0x150 [ 860.780897][T17479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.780919][T17479] ? clear_bhb_loop+0x40/0x90 [ 860.780945][T17479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.780966][T17479] RIP: 0033:0x7f4a4839c819 [ 860.780986][T17479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.781005][T17479] RSP: 002b:00007f4a49307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.781028][T17479] RAX: ffffffffffffffda RBX: 00007f4a48615fa0 RCX: 00007f4a4839c819 [ 860.781043][T17479] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 860.781056][T17479] RBP: 00007f4a49307090 R08: 0000000000000000 R09: 0000000000000000 [ 860.781070][T17479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.781083][T17479] R13: 00007f4a48616038 R14: 00007f4a48615fa0 R15: 00007f4a4873fa48 [ 860.781116][T17479] [ 861.973421][T17504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.005637][T17504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.210420][T17532] misc userio: Invalid payload size [ 864.244455][T17535] FAULT_INJECTION: forcing a failure. [ 864.244455][T17535] name failslab, interval 1, probability 0, space 0, times 0 [ 864.277424][T17535] CPU: 0 UID: 0 PID: 17535 Comm: syz.4.3160 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.277459][T17535] Tainted: [L]=SOFTLOCKUP [ 864.277467][T17535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 864.277480][T17535] Call Trace: [ 864.277489][T17535] [ 864.277498][T17535] dump_stack_lvl+0xe8/0x150 [ 864.277532][T17535] should_fail_ex+0x412/0x560 [ 864.277570][T17535] should_failslab+0xa8/0x100 [ 864.277597][T17535] ? skb_clone+0x212/0x3a0 [ 864.277626][T17535] kmem_cache_alloc_noprof+0x87/0x650 [ 864.277648][T17535] ? __netlink_lookup+0xc6/0x8b0 [ 864.277684][T17535] skb_clone+0x212/0x3a0 [ 864.277716][T17535] __netlink_deliver_tap+0x404/0x850 [ 864.277751][T17535] ? netlink_deliver_tap+0x2e/0x1b0 [ 864.277775][T17535] netlink_deliver_tap+0x19c/0x1b0 [ 864.277799][T17535] netlink_unicast+0x7e3/0x9b0 [ 864.277840][T17535] ? __pfx_netlink_unicast+0x10/0x10 [ 864.277873][T17535] ? netlink_sendmsg+0x650/0xb40 [ 864.277895][T17535] ? skb_put+0x11b/0x210 [ 864.277923][T17535] netlink_sendmsg+0x813/0xb40 [ 864.277956][T17535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.277982][T17535] ? aa_sock_msg_perm+0xf1/0x1b0 [ 864.278016][T17535] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.278045][T17535] ____sys_sendmsg+0x972/0x9f0 [ 864.278082][T17535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.278118][T17535] ? import_iovec+0x73/0xa0 [ 864.278146][T17535] ___sys_sendmsg+0x2a5/0x360 [ 864.278179][T17535] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.278244][T17535] ? __fget_files+0x2a/0x420 [ 864.278265][T17535] ? __fget_files+0x3a0/0x420 [ 864.278295][T17535] __x64_sys_sendmsg+0x1bd/0x2a0 [ 864.278335][T17535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.278373][T17535] ? __pfx_ksys_write+0x10/0x10 [ 864.278410][T17535] do_syscall_64+0x14d/0xf80 [ 864.278439][T17535] ? trace_irq_disable+0x3b/0x150 [ 864.278458][T17535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.278479][T17535] ? clear_bhb_loop+0x40/0x90 [ 864.278506][T17535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.278527][T17535] RIP: 0033:0x7f0b84b9c819 [ 864.278547][T17535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.278565][T17535] RSP: 002b:00007f0b8598f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.278588][T17535] RAX: ffffffffffffffda RBX: 00007f0b84e15fa0 RCX: 00007f0b84b9c819 [ 864.278603][T17535] RDX: 0000000000004084 RSI: 0000200000000040 RDI: 0000000000000003 [ 864.278617][T17535] RBP: 00007f0b8598f090 R08: 0000000000000000 R09: 0000000000000000 [ 864.278630][T17535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.278642][T17535] R13: 00007f0b84e16038 R14: 00007f0b84e15fa0 R15: 00007f0b84f3fa48 [ 864.278675][T17535] [ 864.613592][T17536] misc userio: The device must be registered before sending interrupts [ 864.642656][ T5825] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 864.798594][ T5825] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 864.808852][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.884123][ T5825] usb 1-1: config 0 descriptor?? [ 864.904969][ T5825] cp210x 1-1:0.0: cp210x converter detected [ 865.013471][ T5906] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 865.173079][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 865.180384][ T5906] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 865.189390][ T5906] usb 5-1: config 179 has no interface number 0 [ 865.210171][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 865.241780][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 865.282585][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 865.324632][ T5825] usb 1-1: cp210x converter now attached to ttyUSB0 [ 865.329320][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 865.387592][ T5906] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 865.416727][ T5906] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 865.466592][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.492365][T17540] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 865.528823][T10395] usb 1-1: USB disconnect, device number 73 [ 865.537484][T10395] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 865.574577][T10395] cp210x 1-1:0.0: device disconnected [ 865.767437][T17548] vlan3: entered promiscuous mode [ 865.806230][T17548] macvlan0: entered promiscuous mode [ 866.056098][ T5910] usb 5-1: USB disconnect, device number 107 [ 866.056135][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 866.070862][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 866.482442][T17557] veth2: entered allmulticast mode [ 866.523575][T17560] program syz.0.3166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 866.608464][T17556] delete_channel: no stack [ 866.822339][T17575] loop3: detected capacity change from 0 to 7 [ 866.852726][T17575] Dev loop3: unable to read RDB block 7 [ 866.863645][T17575] loop3: unable to read partition table [ 866.869860][T17575] loop3: partition table beyond EOD, truncated [ 866.901169][T17575] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 867.161034][T17583] loop5: detected capacity change from 0 to 7 [ 867.186680][ T5192] Dev loop5: unable to read RDB block 7 [ 867.192396][ T5192] loop5: AHDI p1 [ 867.196351][ T5192] loop5: partition table partially beyond EOD, truncated [ 867.234395][T17583] Dev loop5: unable to read RDB block 7 [ 867.250253][T17583] loop5: AHDI p1 [ 867.332625][T17583] loop5: partition table partially beyond EOD, truncated [ 867.352345][ T5192] Dev loop5: unable to read RDB block 7 [ 867.359902][ T5192] loop5: AHDI p1 [ 867.374424][ T5192] loop5: partition table partially beyond EOD, truncated [ 868.879108][T17620] netlink: 'syz.4.3188': attribute type 12 has an invalid length. [ 868.902658][T17620] netlink: 'syz.4.3188': attribute type 29 has an invalid length. [ 868.925290][T17620] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3188'. [ 868.940365][T17620] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3188'. [ 869.347048][T17638] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 869.432662][ T24] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 869.468109][T17637] netlink: 'syz.5.3192': attribute type 2 has an invalid length. [ 869.540776][T17637] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3192'. [ 869.748159][ T5919] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 869.758629][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 869.795404][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 869.831031][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 869.851263][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.866104][ T24] usb 5-1: Product: syz [ 869.873912][ T24] usb 5-1: Manufacturer: syz [ 869.882065][ T24] usb 5-1: SerialNumber: syz [ 869.894930][ T24] usb 5-1: config 0 descriptor?? [ 870.156644][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.163053][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.603979][ T5910] usb 5-1: USB disconnect, device number 108 [ 870.708963][T17654] bridge0: left promiscuous mode [ 870.762189][T17654] bridge0: left allmulticast mode [ 870.779153][T17654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 871.214212][T17667] kAFS: unable to lookup cell 'ÿ' [ 871.807379][T17675] netlink: 'syz.2.3203': attribute type 12 has an invalid length. [ 871.947254][T17675] netlink: 'syz.2.3203': attribute type 29 has an invalid length. [ 871.974585][T17675] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3203'. [ 872.067417][T17675] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3203'. [ 872.443585][T17689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.466545][T17689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.590833][T17696] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3207'. [ 872.780099][T17703] loop3: detected capacity change from 0 to 7 [ 872.787936][T17703] Dev loop3: unable to read RDB block 7 [ 872.793600][T17703] loop3: unable to read partition table [ 872.810327][T17703] loop3: partition table beyond EOD, truncated [ 872.868448][T17703] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 873.626236][T17719] netlink: 'syz.0.3217': attribute type 12 has an invalid length. [ 873.639131][T17719] netlink: 'syz.0.3217': attribute type 29 has an invalid length. [ 873.656832][T17719] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3217'. [ 873.726233][T17719] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3217'. [ 874.343131][ T5919] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 874.608450][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 874.653489][ T5919] usb 5-1: config 164 has an invalid interface number: 195 but max is 0 [ 874.662192][ T5919] usb 5-1: config 164 has no interface number 0 [ 874.693363][ T5919] usb 5-1: config 164 interface 195 has no altsetting 0 [ 874.753169][ T5919] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 874.836818][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.852764][ T5919] usb 5-1: Product: syz [ 874.863940][ T5919] usb 5-1: Manufacturer: syz [ 874.875423][ T5919] usb 5-1: SerialNumber: syz [ 875.465663][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3222'. [ 875.482750][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3222'. [ 875.922733][T12724] wlan0: Trigger new scan to find an IBSS to join [ 876.321411][T17753] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3225'. [ 876.612307][T17758] netlink: 'syz.5.3227': attribute type 29 has an invalid length. [ 876.657107][T17758] netlink: 'syz.5.3227': attribute type 29 has an invalid length. [ 876.708385][T17758] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3227'. [ 876.975000][ T5919] usb 5-1: USB disconnect, device number 109 [ 877.015194][T11355] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 877.180493][T11355] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 877.193354][T11355] usb 3-1: config 0 has no interface number 0 [ 877.261441][T11355] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 877.547442][T11355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.640092][T11355] usb 3-1: config 0 descriptor?? [ 877.682757][T11355] usb 3-1: selecting invalid altsetting 1 [ 877.729837][T11355] dvb_ttusb_budget: ttusb_init_controller: error [ 877.793642][T11355] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 878.182329][T11355] DVB: Unable to find symbol cx22700_attach() [ 878.789351][T11355] DVB: Unable to find symbol tda10046_attach() [ 878.840329][T11355] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 880.009717][T10395] usb 3-1: USB disconnect, device number 124 [ 880.700078][T17805] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 880.706658][T17805] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 880.776816][T17805] vhci_hcd vhci_hcd.0: Device attached [ 880.830224][T17814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.840041][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.891552][T12725] wlan0: Trigger new scan to find an IBSS to join [ 880.899084][T17814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.937781][T17812] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 880.944391][T17812] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 880.953530][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.972814][T17812] vhci_hcd vhci_hcd.0: Device attached [ 881.012853][T10395] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 881.128951][T17806] vhci_hcd: connection reset by peer [ 881.129187][T17815] vhci_hcd: connection closed [ 881.139168][ T49] vhci_hcd vhci_hcd.4: stop threads [ 881.148711][T17822] netlink: 'syz.2.3242': attribute type 12 has an invalid length. [ 881.158450][ T49] vhci_hcd vhci_hcd.4: release socket [ 881.165034][T17822] netlink: 'syz.2.3242': attribute type 29 has an invalid length. [ 881.173313][T17822] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3242'. [ 881.182320][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 881.189765][ T49] vhci_hcd vhci_hcd.4: stop threads [ 881.199905][ T49] vhci_hcd vhci_hcd.4: release socket [ 881.245165][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 881.305158][ T5906] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 881.465884][ T5906] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 881.475649][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.509987][ T5906] usb 1-1: config 0 descriptor?? [ 881.532160][ T5906] cp210x 1-1:0.0: cp210x converter detected [ 881.972757][ T5906] usb 1-1: cp210x converter now attached to ttyUSB0 [ 882.049512][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.219907][T11355] usb 1-1: USB disconnect, device number 74 [ 882.228254][T11355] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 882.237951][T11355] cp210x 1-1:0.0: device disconnected [ 883.012827][T11355] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 883.119582][ T5910] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 883.186648][T17840] bridge0: port 3(team0) entered disabled state [ 883.193179][T17840] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.200479][T17840] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.212055][T11355] usb 1-1: config 1 interface 0 has no altsetting 0 [ 883.248649][T11355] usb 1-1: string descriptor 0 read error: -22 [ 883.256001][T11355] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.40 [ 883.269105][T11355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.284668][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.310021][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.334798][ T5910] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 883.365027][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.387046][ T5910] usb 5-1: config 0 descriptor?? [ 883.491543][T17840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.554045][T11355] usbhid 1-1:1.0: can't add hid device: -71 [ 883.560233][T11355] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 883.631883][T11355] usb 1-1: USB disconnect, device number 75 [ 883.825809][ T5910] hid-steam 0003:28DE:1142.001C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 883.893998][ T5910] hid-steam 0003:28DE:1142.001C: Steam wireless receiver connected [ 883.984179][T17849] netlink: 'syz.0.3249': attribute type 12 has an invalid length. [ 883.994290][T17849] netlink: 'syz.0.3249': attribute type 29 has an invalid length. [ 884.013579][T17849] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3249'. [ 884.049937][T12726] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.067330][T17853] netlink: 'syz.2.3251': attribute type 12 has an invalid length. [ 884.092615][T17854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.111485][T17853] netlink: 'syz.2.3251': attribute type 29 has an invalid length. [ 884.135725][T17853] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3251'. [ 884.167575][T12726] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.196386][T12726] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.203081][ T5910] hid-steam 0003:28DE:1142.001D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 884.207195][T17854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.266679][T12726] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.381646][ T5910] usb 5-1: USB disconnect, device number 110 [ 884.457240][ T5910] hid-steam 0003:28DE:1142.001C: Steam wireless receiver disconnected [ 884.487854][T17857] fido_id[17857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 884.760719][T17872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3258'. [ 884.771361][T17873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.798807][T17873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.941997][ T5910] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 885.239996][ T5910] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 885.250628][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.276019][ T5910] usb 5-1: config 0 descriptor?? [ 885.285330][ T5910] cp210x 5-1:0.0: cp210x converter detected [ 885.694677][ T5910] usb 5-1: cp210x converter now attached to ttyUSB0 [ 885.905253][ T5910] usb 5-1: USB disconnect, device number 111 [ 885.917439][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 885.953050][ T5910] cp210x 5-1:0.0: device disconnected [ 886.049425][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 886.132699][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 886.142876][T10395] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 886.242620][T14752] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 886.268023][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 886.276795][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 886.327920][T17891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.353436][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 886.367581][T17891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.400029][T17893] netlink: 'syz.2.3264': attribute type 12 has an invalid length. [ 886.422593][T17893] netlink: 'syz.2.3264': attribute type 29 has an invalid length. [ 886.437553][T14752] usb 6-1: device descriptor read/64, error -32 [ 886.462867][T17893] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3264'. [ 886.566395][T14752] raw-gadget.1 gadget.5: failed to queue suspend event [ 886.591376][T17891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.602317][T17891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.611784][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 886.682888][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 886.711301][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 886.711319][ T30] audit: type=1326 audit(1775484304.009:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 886.763071][T14752] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 886.771583][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 886.814649][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 886.847487][T17907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.863161][ T30] audit: type=1326 audit(1775484304.009:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 886.895297][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 886.921068][T17907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.936085][T17907] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3265'. [ 886.950545][ T30] audit: type=1326 audit(1775484304.049:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 886.975002][ T30] audit: type=1326 audit(1775484304.049:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 886.997936][T14752] usb 6-1: device descriptor read/64, error -32 [ 887.004771][ T30] audit: type=1326 audit(1775484304.049:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 887.038513][ T30] audit: type=1326 audit(1775484304.049:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 887.065103][ T30] audit: type=1326 audit(1775484304.049:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 887.093090][ T30] audit: type=1326 audit(1775484304.099:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 887.131768][ T30] audit: type=1326 audit(1775484304.099:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 887.157279][ T30] audit: type=1326 audit(1775484304.099:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17901 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 887.164622][ T5906] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 887.191687][T14752] raw-gadget.1 gadget.5: failed to queue suspend event [ 887.224800][T14752] usb usb6-port1: attempt power cycle [ 887.230265][T14752] raw-gadget.1 gadget.5: failed to queue disconnect event [ 887.256917][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 887.342602][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 887.351307][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 887.416029][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.426944][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 887.441657][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 887.455333][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 887.467883][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 887.483548][ T5906] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 887.495956][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 887.504613][ T5906] usb 1-1: Product: syz [ 887.508993][ T5906] usb 1-1: Manufacturer: syz [ 887.544454][ T5906] usb 1-1: SerialNumber: syz [ 887.563576][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 887.583383][ T5906] usb 1-1: config 0 descriptor?? [ 887.652853][T14752] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 887.682808][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 887.690507][T14752] usb 6-1: device descriptor read/8, error -32 [ 887.805482][T14752] raw-gadget.1 gadget.5: failed to queue suspend event [ 887.813295][T14752] raw-gadget.1 gadget.5: failed to queue reset event [ 887.883405][T14752] raw-gadget.1 gadget.5: failed to queue resume event [ 887.901048][T17919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3267'. [ 887.919395][ T5906] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 887.944754][T14752] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 887.965249][ T5906] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 887.984617][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 887.991951][T14752] usb 6-1: device descriptor read/8, error -32 [ 888.103011][T14752] raw-gadget.1 gadget.5: failed to queue suspend event [ 888.110239][T14752] usb usb6-port1: unable to enumerate USB device [ 888.191306][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3271'. [ 888.350314][T17921] loop2: detected capacity change from 0 to 7 [ 888.368982][T15045] Dev loop2: unable to read RDB block 7 [ 888.381086][T15045] loop2: AHDI p1 p2 p3 [ 888.391220][T15045] loop2: partition table partially beyond EOD, truncated [ 888.491705][T15045] loop2: p1 start 1601398130 is beyond EOD, truncated [ 888.499800][ T5906] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 888.509225][ T5906] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 888.520350][T15045] loop2: p2 start 1702059890 is beyond EOD, truncated [ 888.535875][T17921] Dev loop2: unable to read RDB block 7 [ 888.543649][ T5906] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 888.552719][T17921] loop2: AHDI p1 p2 p3 [ 888.560989][T17921] loop2: partition table partially beyond EOD, truncated [ 888.573166][T17921] loop2: p1 start 1601398130 is beyond EOD, truncated [ 888.580202][T17921] loop2: p2 start 1702059890 is beyond EOD, truncated [ 888.982581][ T5919] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 889.123309][ T5919] usb 2-1: device descriptor read/64, error -71 [ 889.375105][ T5919] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 889.487051][T17935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.532711][ T5919] usb 2-1: device descriptor read/64, error -71 [ 889.561564][T17935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.644281][ T5919] usb usb2-port1: attempt power cycle [ 889.913909][T10395] usb 1-1: USB disconnect, device number 76 [ 889.924818][ T49] wlan0: Trigger new scan to find an IBSS to join [ 889.994245][ T5919] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 890.023809][T17937] netlink: 'syz.0.3276': attribute type 12 has an invalid length. [ 890.035177][ T5919] usb 2-1: device descriptor read/8, error -71 [ 890.041705][T17937] netlink: 'syz.0.3276': attribute type 29 has an invalid length. [ 890.061748][T17937] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3276'. [ 890.309114][ T5919] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 890.348891][ T5919] usb 2-1: device descriptor read/8, error -71 [ 890.468965][T17947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.487978][ T5919] usb usb2-port1: unable to enumerate USB device [ 890.503527][T17947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.577832][T17951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3282'. [ 891.672632][ T5910] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 891.843313][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 891.858767][ T5910] usb 3-1: no configurations [ 891.864716][ T5910] usb 3-1: can't read configurations, error -22 [ 892.036132][T17976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3292'. [ 892.090087][T17978] syz_tun: entered allmulticast mode [ 892.101758][T17977] syz_tun: left allmulticast mode [ 892.491598][T17986] netlink: 568 bytes leftover after parsing attributes in process `syz.2.3296'. [ 892.953673][ T49] wlan0: Trigger new scan to find an IBSS to join [ 893.012633][ T5910] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 893.198314][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.210819][ T5910] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 893.221827][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.235849][ T5910] usb 3-1: config 0 descriptor?? [ 893.349286][T18009] input: syz1 as /devices/virtual/input/input69 [ 893.662309][ T5910] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 893.715657][ T5910] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001E/input/input70 [ 893.744561][T18019] ip6erspan1: entered allmulticast mode [ 893.919863][ T5910] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 893.946529][ T5910] usb 3-1: USB disconnect, device number 127 [ 894.111929][T18028] fido_id[18028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 895.462428][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3347'. [ 895.500898][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3347'. [ 895.742070][T18114] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3351'. [ 895.751390][T18114] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3351'. [ 895.915004][T12724] wlan0: Trigger new scan to find an IBSS to join [ 896.069566][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 896.133242][T18124] netlink: 'syz.2.3354': attribute type 12 has an invalid length. [ 896.281732][T18124] netlink: 'syz.2.3354': attribute type 29 has an invalid length. [ 896.326171][T18124] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3354'. [ 896.377674][T18124] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3354'. [ 896.516313][T18135] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3358'. [ 897.124033][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.495662][ T30] kauditd_printk_skb: 137 callbacks suppressed [ 897.495682][ T30] audit: type=1326 audit(1775484314.799:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 897.902965][ T30] audit: type=1326 audit(1775484314.829:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 897.940608][ T30] audit: type=1326 audit(1775484314.829:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 898.064653][ T30] audit: type=1326 audit(1775484314.839:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 898.139873][ T30] audit: type=1326 audit(1775484314.839:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 898.139913][ T30] audit: type=1326 audit(1775484314.839:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 898.139944][ T30] audit: type=1326 audit(1775484314.839:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 898.139978][ T30] audit: type=1326 audit(1775484314.839:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 898.140009][ T30] audit: type=1326 audit(1775484314.849:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 898.140073][ T30] audit: type=1326 audit(1775484314.849:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18143 comm="syz.2.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 898.545432][T18156] program syz.2.3364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 898.957282][T18166] netlink: 'syz.2.3368': attribute type 12 has an invalid length. [ 898.957302][T18166] netlink: 'syz.2.3368': attribute type 29 has an invalid length. [ 898.957313][T18166] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3368'. [ 898.957327][T18166] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3368'. [ 899.432633][ T5825] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 899.544499][T18178] input: syz0 as /devices/virtual/input/input76 [ 899.588172][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 899.644706][ T5825] usb 1-1: config 0 has no interfaces? [ 899.653209][ T5825] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 899.665081][ T5825] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 899.682592][ T5825] usb 1-1: Manufacturer: syz [ 899.794441][ T5825] usb 1-1: config 0 descriptor?? [ 900.144762][T18164] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 900.202934][ T5906] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 900.364543][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 900.372375][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.400979][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.659900][ T5906] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 900.678020][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.733853][ T5906] usb 3-1: config 0 descriptor?? [ 901.212589][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 901.218811][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 901.252244][ T5906] usb 3-1: USB disconnect, device number 2 [ 901.652689][ T5825] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 901.841475][ T5910] usb 1-1: USB disconnect, device number 77 [ 901.849183][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 901.892421][T18202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3382'. [ 901.903019][ T5825] usb 5-1: unable to get BOS descriptor or descriptor too short [ 901.915485][ T5825] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 901.929360][ T5825] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 901.950424][ T5825] usb 5-1: config 17 has no interface number 0 [ 901.970683][ T5825] usb 5-1: config 17 interface 8 altsetting 6 has an endpoint descriptor with address 0x56, changing to 0x6 [ 902.010371][ T5825] usb 5-1: config 17 interface 8 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 204 [ 902.030377][ T5825] usb 5-1: config 17 interface 8 has no altsetting 0 [ 902.056498][ T5825] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 902.097129][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.112158][ T5825] usb 5-1: Product: syz [ 902.117289][ T5825] usb 5-1: Manufacturer: syz [ 902.122073][ T5825] usb 5-1: SerialNumber: syz [ 902.170875][T18191] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 902.232647][ T5910] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 902.385036][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.409484][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.423721][T10395] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 902.435975][ T5825] usb 5-1: selecting invalid altsetting 0 [ 902.445159][ T5910] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 902.458641][T18212] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3385'. [ 902.466571][ T5910] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 902.486753][ T5910] usb 1-1: Manufacturer: syz [ 902.499439][ T5910] usb 1-1: config 0 descriptor?? [ 902.542143][ T5825] usb 5-1: USB disconnect, device number 112 [ 902.592836][T10395] usb 3-1: Using ep0 maxpacket: 16 [ 902.606508][T10395] usb 3-1: config 0 has no interfaces? [ 902.627040][T10395] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 902.636462][T10395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.647429][T10395] usb 3-1: Product: syz [ 902.651652][T10395] usb 3-1: Manufacturer: syz [ 902.656884][T10395] usb 3-1: SerialNumber: syz [ 902.669011][T15045] udevd[15045]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.690400][T10395] usb 3-1: config 0 descriptor?? [ 902.934476][ T5910] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 902.951858][ T5910] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 902.959354][T10395] usb 3-1: USB disconnect, device number 3 [ 902.974573][ T5910] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 903.024885][ T5910] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 903.045434][ T5910] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 903.063755][ T5910] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 903.101521][ T5910] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 903.132236][ T5910] pyra 0003:1E7D:2CF6.001F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 904.235361][T18237] netlink: 'syz.2.3393': attribute type 12 has an invalid length. [ 904.312867][T18237] netlink: 'syz.2.3393': attribute type 29 has an invalid length. [ 904.353309][T18237] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3393'. [ 904.881241][ T5910] pyra 0003:1E7D:2CF6.001F: couldn't init struct pyra_device [ 904.899674][ T5910] pyra 0003:1E7D:2CF6.001F: couldn't install mouse [ 904.935679][ T5910] pyra 0003:1E7D:2CF6.001F: probe with driver pyra failed with error -71 [ 904.976013][ T5910] usb 1-1: USB disconnect, device number 78 [ 905.201239][T18245] fido_id[18245]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 905.474391][T18247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.487267][T18247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.331001][T18273] netlink: 'syz.4.3404': attribute type 12 has an invalid length. [ 906.339419][T18273] netlink: 'syz.4.3404': attribute type 29 has an invalid length. [ 906.358505][T18273] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3404'. [ 908.293720][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 908.293742][ T30] audit: type=1800 audit(1775484325.579:4315): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3407" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 910.110473][T18293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3411'. [ 910.285275][T18300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.409271][T18305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.419006][T18305] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 910.684868][T18306] bond0: (slave bond_slave_0): Releasing backup interface [ 910.699032][T18306] bond0: (slave bond_slave_1): Releasing backup interface [ 910.717324][T18306] team0: Port device team_slave_0 removed [ 910.735400][T18306] team0: Port device team_slave_1 removed [ 910.745784][T18306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.755656][T18306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.774306][T18306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.784860][T18306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.801897][T18306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 911.195210][T18320] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3417'. [ 911.204930][T18320] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3417'. [ 911.344156][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3417'. [ 911.372812][ T5825] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 911.572672][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 911.580121][ T5825] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 911.599933][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.631668][ T5825] usb 3-1: config 0 has no interface number 0 [ 911.638353][ T5825] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.680843][T18329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.692242][T18329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.711039][ T5837] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 911.720358][ T5825] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 911.730180][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.738421][ T5825] usb 3-1: Product: syz [ 911.744085][ T5825] usb 3-1: Manufacturer: syz [ 911.756581][ T5825] usb 3-1: SerialNumber: syz [ 911.836154][ T5825] usb 3-1: config 0 descriptor?? [ 911.861007][ T5825] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input78 [ 912.084655][T18336] loop3: detected capacity change from 0 to 7 [ 912.092270][T18336] Dev loop3: unable to read RDB block 7 [ 912.098206][T18336] loop3: unable to read partition table [ 912.128069][T18336] loop3: partition table beyond EOD, truncated [ 912.139279][ T5825] usb 3-1: USB disconnect, device number 4 [ 912.178601][T18336] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 913.202811][ T5825] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 913.363774][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 913.375028][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 913.387911][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 913.414300][ T5825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 913.437826][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 913.468756][ T5825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 913.496482][ T5825] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 913.520458][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.532876][ T5919] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 913.584033][ T5825] usb 3-1: config 0 descriptor?? [ 913.594543][T18349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 913.694828][ T5919] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 913.704952][ T5919] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 913.722672][ T5919] usb 1-1: config 220 has no interface number 2 [ 913.756382][ T5919] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 913.848465][ T5919] usb 1-1: config 220 interface 0 has no altsetting 0 [ 913.881399][ T5919] usb 1-1: config 220 interface 76 has no altsetting 0 [ 913.909059][ T5919] usb 1-1: config 220 interface 1 has no altsetting 0 [ 914.001623][ T5919] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 914.012258][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.039842][T18349] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3422'. [ 914.058012][ T5919] usb 1-1: Product: syz [ 914.078003][ T5919] usb 1-1: Manufacturer: syz [ 914.098014][ T5919] usb 1-1: SerialNumber: syz [ 914.428725][T12727] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 914.452611][ T30] audit: type=1326 audit(1775484331.449:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 914.513469][T18358] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3425'. [ 914.546344][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 914.612228][ T30] audit: type=1326 audit(1775484331.479:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 914.748756][ T30] audit: type=1326 audit(1775484331.479:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 914.832933][ T5919] usb 1-1: selecting invalid altsetting 0 [ 914.877343][ T5919] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 914.919467][ T30] audit: type=1326 audit(1775484331.479:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 914.939567][ T5919] uvcvideo 1-1:220.0: No valid video chain found. [ 914.948126][ T30] audit: type=1326 audit(1775484331.479:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 914.948381][ T30] audit: type=1326 audit(1775484331.479:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 914.948426][ T30] audit: type=1326 audit(1775484331.479:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 914.949381][ T30] audit: type=1326 audit(1775484331.479:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 915.370336][ T30] audit: type=1326 audit(1775484331.479:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 915.420688][ T30] audit: type=1326 audit(1775484331.479:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18347 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 915.488152][ T5919] usb 1-1: selecting invalid altsetting 0 [ 915.505031][ T5919] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 915.584399][ T5919] usb 1-1: USB disconnect, device number 79 [ 915.683324][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 916.053290][T18311] usb 3-1: USB disconnect, device number 5 [ 916.535681][T18381] program syz.4.3431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.642950][ T5919] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 916.823413][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 916.829623][T18311] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 916.851327][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.885437][T18388] vivid-000: disconnect [ 916.981814][T18374] vivid-000: reconnect [ 916.992403][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.005266][ T5919] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 917.022805][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.072075][ T5919] usb 1-1: config 0 descriptor?? [ 917.086008][ T5919] hub 1-1:0.0: USB hub found [ 917.095781][T18311] usb 2-1: Using ep0 maxpacket: 32 [ 917.119998][T18311] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 917.138884][T18311] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.169341][T18311] usb 2-1: config 0 has no interface number 0 [ 917.201034][T18311] usb 2-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 917.232847][T18311] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 917.245902][T18311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.254157][T18311] usb 2-1: Product: syz [ 917.258445][T18311] usb 2-1: Manufacturer: syz [ 917.263128][T18311] usb 2-1: SerialNumber: syz [ 917.285967][ T5919] hub 1-1:0.0: 1 port detected [ 917.295414][T18311] usb 2-1: config 0 descriptor?? [ 917.314169][T18311] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input79 [ 917.548797][T18311] usb 2-1: USB disconnect, device number 118 [ 917.941813][ T5919] hub 1-1:0.0: activate --> -90 [ 918.033001][T18413] loop3: detected capacity change from 0 to 7 [ 918.043476][T18413] Dev loop3: unable to read RDB block 7 [ 918.049213][T18413] loop3: unable to read partition table [ 918.061930][T18413] loop3: partition table beyond EOD, truncated [ 918.069779][T18413] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 918.143483][ T5919] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 918.254940][T18415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 918.265268][T18415] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 918.328894][T18417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.346364][T18417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.493323][ T5919] usb 1-1: USB disconnect, device number 80 [ 919.151151][T18433] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3446'. [ 920.301374][T18447] binder: BINDER_SET_CONTEXT_MGR already set [ 920.307524][T18447] binder: 18440:18447 ioctl 4018620d 200000004a80 returned -16 [ 920.881896][T18453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 921.172659][T18311] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 921.472870][T18311] usb 5-1: Using ep0 maxpacket: 32 [ 921.488689][T18311] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 921.498662][T18311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.509668][T18311] usb 5-1: config 0 has no interface number 0 [ 921.836234][T18311] usb 5-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 921.870820][T18311] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 921.882987][T18311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.901963][T18311] usb 5-1: Product: syz [ 921.912109][T18311] usb 5-1: Manufacturer: syz [ 922.112599][T18311] usb 5-1: SerialNumber: syz [ 922.129682][T18311] usb 5-1: config 0 descriptor?? [ 922.169873][T18311] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input80 [ 922.703559][T18311] usb 5-1: USB disconnect, device number 113 [ 923.138838][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 923.148243][T18469] bridge_slave_1: left allmulticast mode [ 923.154058][T18469] bridge_slave_1: left promiscuous mode [ 923.160074][T18469] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.250029][T18474] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 923.268033][T18469] bridge_slave_0: left allmulticast mode [ 923.311627][T18469] bridge_slave_0: left promiscuous mode [ 923.352374][T18469] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.504022][T18493] binder: BINDER_SET_CONTEXT_MGR already set [ 924.510419][T18493] binder: 18488:18493 ioctl 4018620d 200000004a80 returned -16 [ 924.523520][T18497] binder: BINDER_SET_CONTEXT_MGR already set [ 924.529530][T18497] binder: 18494:18497 ioctl 4018620d 200000004a80 returned -16 [ 924.735531][T18500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.775218][T18500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.833247][T18507] binder: BINDER_SET_CONTEXT_MGR already set [ 925.839392][T18507] binder: 18503:18507 ioctl 4018620d 200000004a80 returned -16 [ 925.945645][T18513] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 926.162745][ T5825] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 926.332006][T18523] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3471'. [ 926.341292][T18311] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 926.434162][ T5825] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 926.443035][ T5825] usb 3-1: config 0 has no interface number 0 [ 926.449295][ T5825] usb 3-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 926.462833][ T5825] usb 3-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 926.502556][T18311] usb 1-1: device descriptor read/64, error -71 [ 926.520410][T18525] loop3: detected capacity change from 0 to 7 [ 926.526935][ T5825] usb 3-1: config 0 interface 11 has no altsetting 0 [ 926.529077][T18525] Dev loop3: unable to read RDB block 7 [ 926.543332][T18525] loop3: unable to read partition table [ 926.549276][ T5825] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 926.549305][T18525] loop3: partition table beyond EOD, truncated [ 926.559221][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.652517][ T5825] usb 3-1: Product: syz [ 926.663451][ T5825] usb 3-1: Manufacturer: syz [ 926.676269][ T5825] usb 3-1: SerialNumber: syz [ 926.690996][T18525] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 926.722818][ T5825] usb 3-1: config 0 descriptor?? [ 926.762899][T18311] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 926.903126][T18311] usb 1-1: device descriptor read/64, error -71 [ 926.947906][ T5825] usb 3-1: Expected 3 endpoints, found: 0 [ 927.057282][T18311] usb usb1-port1: attempt power cycle [ 927.070184][ T5825] usb 3-1: USB disconnect, device number 6 [ 927.442864][T18311] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 927.483946][T18311] usb 1-1: device descriptor read/8, error -71 [ 927.492652][ T5919] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 927.549465][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3476'. [ 927.580643][T18532] binder: BINDER_SET_CONTEXT_MGR already set [ 927.586911][T18532] binder: 18529:18532 ioctl 4018620d 200000004a80 returned -16 [ 927.686900][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 927.700889][ T5919] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 927.711995][ T5919] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 927.723749][ T5919] usb 5-1: config 0 interface 0 has no altsetting 0 [ 927.739545][ T5919] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 927.750475][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.779264][ T5919] usb 5-1: Product: syz [ 927.783485][T18311] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 927.792841][ T5919] usb 5-1: Manufacturer: syz [ 927.797582][ T5919] usb 5-1: SerialNumber: syz [ 927.806663][T18311] usb 1-1: device descriptor read/8, error -71 [ 927.817202][ T5919] usb 5-1: config 0 descriptor?? [ 927.933994][T18311] usb usb1-port1: unable to enumerate USB device [ 928.267331][ T5919] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 928.610715][T18550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3480'. [ 928.874331][ T5919] usb 5-1: USB disconnect, device number 114 [ 929.315240][ T5825] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 929.503664][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.522864][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 929.539736][ T5825] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 929.550391][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.569720][ T5825] usb 1-1: Product: syz [ 929.584972][ T5825] usb 1-1: Manufacturer: syz [ 929.589640][ T5825] usb 1-1: SerialNumber: syz [ 929.641506][T18574] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3486'. [ 929.770098][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3488'. [ 929.833618][ T5825] usb 1-1: 0:2 : does not exist [ 929.846842][ T5825] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 930.029059][ T5825] usb 1-1: USB disconnect, device number 85 [ 930.125964][T15045] udevd[15045]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 930.246451][T18587] netlink: 'syz.5.3491': attribute type 29 has an invalid length. [ 930.269211][T18587] netlink: 'syz.5.3491': attribute type 29 has an invalid length. [ 930.286855][T18587] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3491'. [ 930.325173][T12728] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 930.517753][T18564] netlink: 'syz.2.3484': attribute type 1 has an invalid length. [ 930.533496][T18564] netlink: 'syz.2.3484': attribute type 2 has an invalid length. [ 930.864878][T18602] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3494'. [ 930.899935][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3494'. [ 930.969355][T18602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3494'. [ 931.043168][T18607] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3495'. [ 931.405357][T18615] netlink: 'syz.2.3496': attribute type 12 has an invalid length. [ 931.413302][T18615] netlink: 'syz.2.3496': attribute type 29 has an invalid length. [ 931.421467][T18615] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3496'. [ 931.444543][T18618] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3498'. [ 931.485513][T18615] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3496'. [ 931.606647][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.616733][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.883282][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 931.883302][ T30] audit: type=1326 audit(1775484349.189:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 932.017763][ T30] audit: type=1326 audit(1775484349.189:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 932.135473][ T30] audit: type=1326 audit(1775484349.249:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 932.229422][ T30] audit: type=1326 audit(1775484349.259:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 932.322653][ T30] audit: type=1326 audit(1775484349.259:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 932.422670][ T30] audit: type=1326 audit(1775484349.259:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 932.741144][ T30] audit: type=1326 audit(1775484349.259:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 932.807990][ T30] audit: type=1326 audit(1775484349.259:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 932.900505][ T30] audit: type=1326 audit(1775484349.259:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 932.972531][ T30] audit: type=1326 audit(1775484349.259:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.2.3501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 933.340759][T18656] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 933.553936][T18661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.572982][T18661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.583482][T18662] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3508'. [ 933.766783][T18669] loop3: detected capacity change from 0 to 7 [ 933.777404][T15045] Dev loop3: unable to read RDB block 7 [ 933.785328][T15045] loop3: unable to read partition table [ 933.791735][T15045] loop3: partition table beyond EOD, truncated [ 933.807317][T18669] Dev loop3: unable to read RDB block 7 [ 933.813414][T18669] loop3: unable to read partition table [ 933.819220][T18669] loop3: partition table beyond EOD, truncated [ 933.826647][T18669] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 933.925777][T18658] fuse: Bad value for 'user_id' [ 933.930736][T18658] fuse: Bad value for 'user_id' [ 934.164096][T18676] netlink: 'syz.4.3515': attribute type 29 has an invalid length. [ 934.173306][T18676] netlink: 'syz.4.3515': attribute type 29 has an invalid length. [ 934.186972][T18676] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3515'. [ 934.196262][T18311] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 934.208839][T18677] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 934.362711][T18311] usb 2-1: Using ep0 maxpacket: 8 [ 934.381246][T18311] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 934.397141][T18311] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 934.423212][T18311] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 934.455125][T18311] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 934.465719][T18311] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.877773][T18311] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 934.918687][T18311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.108695][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3519'. [ 935.169885][T18311] usb 2-1: usb_control_msg returned -32 [ 935.189211][T18311] usbtmc 2-1:16.0: can't read capabilities [ 935.396738][T18690] FAULT_INJECTION: forcing a failure. [ 935.396738][T18690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.436224][T18690] CPU: 0 UID: 0 PID: 18690 Comm: syz.2.3520 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.436259][T18690] Tainted: [L]=SOFTLOCKUP [ 935.436268][T18690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 935.436282][T18690] Call Trace: [ 935.436292][T18690] [ 935.436303][T18690] dump_stack_lvl+0xe8/0x150 [ 935.436341][T18690] should_fail_ex+0x412/0x560 [ 935.436382][T18690] _copy_to_user+0x31/0xb0 [ 935.436414][T18690] simple_read_from_buffer+0xe1/0x170 [ 935.436452][T18690] proc_fail_nth_read+0x1bb/0x230 [ 935.436489][T18690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 935.436526][T18690] ? rw_verify_area+0x2a6/0x4d0 [ 935.436552][T18690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 935.436595][T18690] vfs_read+0x20c/0xa70 [ 935.436619][T18690] ? fdget_pos+0x246/0x320 [ 935.436645][T18690] ? __pfx___mutex_lock+0x10/0x10 [ 935.436680][T18690] ? __pfx_vfs_read+0x10/0x10 [ 935.436709][T18690] ? __fget_files+0x2a/0x420 [ 935.436753][T18690] ? __fget_files+0x3a0/0x420 [ 935.436775][T18690] ? __fget_files+0x2a/0x420 [ 935.436807][T18690] ksys_read+0x150/0x270 [ 935.436837][T18690] ? __pfx_ksys_read+0x10/0x10 [ 935.436888][T18690] do_syscall_64+0x14d/0xf80 [ 935.436919][T18690] ? trace_irq_disable+0x3b/0x150 [ 935.436940][T18690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.436963][T18690] ? clear_bhb_loop+0x40/0x90 [ 935.437008][T18690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.437034][T18690] RIP: 0033:0x7f339795d04e [ 935.437058][T18690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 935.437091][T18690] RSP: 002b:00007f3398915fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 935.437115][T18690] RAX: ffffffffffffffda RBX: 00007f33989166c0 RCX: 00007f339795d04e [ 935.437131][T18690] RDX: 000000000000000f RSI: 00007f33989160a0 RDI: 0000000000000004 [ 935.437146][T18690] RBP: 00007f3398916090 R08: 0000000000000000 R09: 0000000000000000 [ 935.437160][T18690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.437173][T18690] R13: 00007f3397c16038 R14: 00007f3397c15fa0 R15: 00007f3397d3fa48 [ 935.437241][T18690] [ 935.774436][T18693] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 936.014066][T18699] FAULT_INJECTION: forcing a failure. [ 936.014066][T18699] name failslab, interval 1, probability 0, space 0, times 0 [ 936.062245][T18699] CPU: 0 UID: 0 PID: 18699 Comm: syz.0.3523 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.062282][T18699] Tainted: [L]=SOFTLOCKUP [ 936.062291][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 936.062304][T18699] Call Trace: [ 936.062313][T18699] [ 936.062323][T18699] dump_stack_lvl+0xe8/0x150 [ 936.062360][T18699] should_fail_ex+0x412/0x560 [ 936.062399][T18699] should_failslab+0xa8/0x100 [ 936.062436][T18699] __kmalloc_noprof+0xe8/0x760 [ 936.062462][T18699] ? tomoyo_encode+0x28b/0x550 [ 936.062492][T18699] tomoyo_encode+0x28b/0x550 [ 936.062530][T18699] tomoyo_realpath_from_path+0x58d/0x5d0 [ 936.062568][T18699] ? tomoyo_path_number_perm+0x219/0x630 [ 936.062600][T18699] tomoyo_path_number_perm+0x246/0x630 [ 936.062636][T18699] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 936.062673][T18699] ? sb_end_write+0xe9/0x1c0 [ 936.062706][T18699] ? vfs_write+0x9bc/0xb90 [ 936.062767][T18699] ? ksys_write+0x1fc/0x270 [ 936.062801][T18699] security_file_ioctl+0xc3/0x2a0 [ 936.062834][T18699] __se_sys_ioctl+0x47/0x170 [ 936.062866][T18699] do_syscall_64+0x14d/0xf80 [ 936.062896][T18699] ? trace_irq_disable+0x3b/0x150 [ 936.062917][T18699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.062941][T18699] ? clear_bhb_loop+0x40/0x90 [ 936.062970][T18699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.062993][T18699] RIP: 0033:0x7f4a4839c819 [ 936.063015][T18699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.063035][T18699] RSP: 002b:00007f4a49307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.063060][T18699] RAX: ffffffffffffffda RBX: 00007f4a48615fa0 RCX: 00007f4a4839c819 [ 936.063077][T18699] RDX: 0000000000000000 RSI: 000000004010744d RDI: 0000000000000003 [ 936.063092][T18699] RBP: 00007f4a49307090 R08: 0000000000000000 R09: 0000000000000000 [ 936.063108][T18699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.063122][T18699] R13: 00007f4a48616038 R14: 00007f4a48615fa0 R15: 00007f4a4873fa48 [ 936.063157][T18699] [ 936.466861][T18699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 937.446868][T18696] io-wq is not configured for unbound workers [ 937.482091][T18311] usb 2-1: USB disconnect, device number 119 [ 937.741828][T18716] netlink: 'syz.5.3529': attribute type 29 has an invalid length. [ 937.780305][T18716] netlink: 'syz.5.3529': attribute type 29 has an invalid length. [ 937.804116][T18716] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3529'. [ 937.892853][T18312] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 938.074821][T18312] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 938.083806][T18312] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 938.093267][T18311] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 938.140599][T18312] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 938.160271][T18722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.177618][T18722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.189789][T18722] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3530'. [ 938.249659][T18312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.272544][T18312] usb 1-1: Product: syz [ 938.277273][T18312] usb 1-1: Manufacturer: syz [ 938.300966][T18312] usb 1-1: SerialNumber: syz [ 938.323514][T18312] usb 1-1: config 0 descriptor?? [ 938.334111][T18311] usb 2-1: Using ep0 maxpacket: 16 [ 938.356263][T18312] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 938.586425][T18311] usb 2-1: config 251 has an invalid interface number: 16 but max is 0 [ 938.656779][T18311] usb 2-1: config 251 has an invalid descriptor of length 121, skipping remainder of the config [ 938.667640][T18311] usb 2-1: config 251 has no interface number 0 [ 938.679330][T18311] usb 2-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 938.698004][T18311] usb 2-1: config 251 interface 16 has no altsetting 0 [ 938.719169][T18311] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 938.728652][T18311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.758140][T18311] usb 2-1: Product: syz [ 938.762521][T18311] usb 2-1: Manufacturer: syz [ 938.767242][T18311] usb 2-1: SerialNumber: syz [ 939.225722][ T5910] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 939.383031][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 939.397817][ T5910] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 939.421931][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.443801][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'. [ 939.455335][ T5910] usb 5-1: config 0 has no interface number 0 [ 939.472600][ T5910] usb 5-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 939.499161][ T5910] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 939.532548][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.554522][ T5910] usb 5-1: Product: syz [ 939.564633][ T5910] usb 5-1: Manufacturer: syz [ 939.586262][ T5910] usb 5-1: SerialNumber: syz [ 939.639417][T18311] usb 2-1: USB disconnect, device number 120 [ 939.646159][ T5910] usb 5-1: config 0 descriptor?? [ 939.705981][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input81 [ 939.960026][T18739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3531'. [ 939.998166][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3531'. [ 940.261314][T18312] usb 5-1: USB disconnect, device number 115 [ 940.595225][T18755] sg_write: data in/out 262118/92 bytes for SCSI command 0x69-- guessing data in; [ 940.595225][T18755] program syz.1.3542 not setting count and/or reply_len properly [ 940.647124][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'. [ 940.737702][T18765] netlink: 'syz.5.3546': attribute type 3 has an invalid length. [ 940.963253][T18312] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 941.215048][ T5919] usb 1-1: USB disconnect, device number 86 [ 941.258989][T18312] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 941.268542][T18312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.300222][T18312] usb 3-1: Product: syz [ 941.322595][T18312] usb 3-1: Manufacturer: syz [ 941.342176][T18312] usb 3-1: SerialNumber: syz [ 941.389296][T18312] usb 3-1: config 0 descriptor?? [ 941.562906][T18778] netlink: 'syz.4.3551': attribute type 1 has an invalid length. [ 942.017242][T18312] usb 3-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 942.178099][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3557'. [ 942.221857][T18312] usb 3-1: failed to fetch extended address, random address set [ 942.282581][T14753] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 942.305615][T18796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.315140][T18796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.329261][T18312] usb 3-1: USB disconnect, device number 7 [ 942.444927][T14753] usb 1-1: Using ep0 maxpacket: 32 [ 942.457347][T14753] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 942.467563][T18798] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 942.477117][T14753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 942.546528][T14753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 942.566661][T14753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 942.579885][T14753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 942.598325][T14753] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 942.621348][T14753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.639669][T14753] usb 1-1: Product: syz [ 942.644199][T14753] usb 1-1: Manufacturer: syz [ 942.648909][T14753] usb 1-1: SerialNumber: syz [ 942.675561][T14753] usb 1-1: config 0 descriptor?? [ 942.835091][T18804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.850843][T18804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.862359][T18804] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3561'. [ 943.089761][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.114191][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.133365][ T5919] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 943.136263][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.176568][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.198804][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.220834][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.236173][T18813] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3564'. [ 943.266859][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.294909][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.308176][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.315084][ T5919] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 943.324750][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.330955][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.341486][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.348869][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.357223][ T5919] usb 3-1: config 0 descriptor?? [ 943.411199][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.426558][ T5919] cp210x 3-1:0.0: cp210x converter detected [ 943.437750][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.458854][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.480029][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.497982][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.516407][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.535866][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.593441][T14753] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 943.610964][T14753] input input82: Timeout waiting for response from device. [ 943.622410][T18806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.644871][T14753] usb 1-1: USB disconnect, device number 87 [ 943.665371][T18806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.718823][T18806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 943.782064][T18819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.801308][T18819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.966481][ T5919] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 943.982064][ T5919] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 943.992203][ T5919] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 944.006169][T14753] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 944.049190][ T5919] usb 3-1: cp210x converter now attached to ttyUSB0 [ 944.178353][T14753] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 944.328666][T14753] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.338433][T14753] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.352617][T14753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.387650][T14753] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.399640][T14753] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.427746][T14753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.447486][T14753] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.467019][T14753] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.498417][T14753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.519898][T14753] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.547598][T14753] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.580411][T14753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.602102][T14753] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.621492][T14753] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.659289][T14753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.679687][T14753] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.699288][T14753] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.733150][T14753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.782879][T14753] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.967127][T14753] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.978510][T14753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.986897][T14753] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 945.029186][T14753] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 945.082876][T14753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 945.123622][T14753] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 945.132960][T14753] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 945.148118][T14753] usb 1-1: Product: syz [ 945.157183][T14753] usb 1-1: Manufacturer: syz [ 945.177362][T14753] usb 1-1: SerialNumber: syz [ 945.206807][T14753] usb 1-1: config 0 descriptor?? [ 945.261948][T14753] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 945.454807][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 945.538331][T18827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.578328][T18827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.688727][T18829] openvswitch: netlink: IPv6 tunnel dst address is zero [ 945.904264][ T5919] usb 3-1: USB disconnect, device number 8 [ 945.935731][ T5910] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 945.950510][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 945.987218][ T5919] cp210x 3-1:0.0: device disconnected [ 946.096972][T18836] syz.2.3572 (18836) used obsolete PPPIOCDETACH ioctl [ 946.182845][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 946.194500][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 946.211302][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 946.245211][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 946.274834][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 946.305439][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 946.322932][T12725] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 946.335433][ T5910] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 946.348651][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.366654][ T5910] usb 2-1: Product: syz [ 946.382328][ T5910] usb 2-1: Manufacturer: syz [ 946.394357][ T5910] usb 2-1: SerialNumber: syz [ 946.429131][ T5910] usb 2-1: config 0 descriptor?? [ 946.517067][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 946.517087][ T30] audit: type=1326 audit(1775484363.819:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 946.561155][ T30] audit: type=1326 audit(1775484363.829:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 947.017308][T12725] wlan0: Trigger new scan to find an IBSS to join [ 947.342786][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 947.639201][ T30] audit: type=1326 audit(1775484363.829:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 947.662858][ T5910] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 947.669365][ T5910] input input83: Device does not respond to id packet M [ 947.677411][ T30] audit: type=1326 audit(1775484363.919:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 947.711030][ T5910] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 947.722572][ T5910] input input83: Device does not respond to id packet P [ 947.951982][ T5910] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 947.981234][ T5910] input input83: Device does not respond to id packet B [ 947.998811][ T30] audit: type=1326 audit(1775484363.969:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 948.044166][ T5910] input input83: Limiting number of effects to 32 (device reports 105) [ 948.098591][ T30] audit: type=1326 audit(1775484363.969:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b84b9c582 code=0x7ffc0000 [ 948.127023][ T5919] usb 1-1: USB disconnect, device number 88 [ 948.148493][ T5919] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 948.207971][ T30] audit: type=1326 audit(1775484363.969:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0b84b9c617 code=0x7ffc0000 [ 948.258401][ T5910] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 948.268014][ T5910] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 948.277898][ T30] audit: type=1326 audit(1775484363.969:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0b84b59511 code=0x7ffc0000 [ 948.305368][ T5910] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 948.318378][ T5910] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 948.327566][T18851] binder: 18850:18851 ioctl c0306201 200000000140 returned -14 [ 948.351850][ T5910] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input83 [ 948.364562][ T30] audit: type=1326 audit(1775484363.969:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0b84b9d609 code=0x7ffc0000 [ 948.417653][ T5910] usb 2-1: USB disconnect, device number 121 [ 948.431323][ T30] audit: type=1326 audit(1775484364.039:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18840 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0b84b5957b code=0x7ffc0000 [ 948.993759][T18857] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3576'. [ 949.542974][T18867] netlink: 'syz.5.3577': attribute type 1 has an invalid length. [ 949.648280][T18872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.664293][T18871] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3580'. [ 951.816984][T18897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.850326][T18897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.902585][ T5919] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 952.022693][T18903] netlink: 'syz.0.3587': attribute type 13 has an invalid length. [ 952.052595][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 952.059633][ T5919] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 952.068354][ T5919] usb 5-1: config 0 has no interface number 0 [ 952.093850][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 952.112538][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 952.124487][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 952.135888][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 952.156878][ T5919] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 952.166094][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.359103][ T5919] usb 5-1: config 0 descriptor?? [ 952.371673][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 952.371692][ T30] audit: type=1326 audit(1775484369.669:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 952.418429][ T5919] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 952.438669][ T30] audit: type=1326 audit(1775484369.669:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 952.488286][ T30] audit: type=1326 audit(1775484369.709:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 952.552128][ T30] audit: type=1326 audit(1775484369.709:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 952.616098][ T30] audit: type=1326 audit(1775484369.709:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 952.685658][T18911] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3590'. [ 952.827880][ T30] audit: type=1326 audit(1775484369.719:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 952.856042][ T30] audit: type=1326 audit(1775484369.719:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 952.882115][T18913] program syz.5.3591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.892257][T12726] wlan0: Trigger new scan to find an IBSS to join [ 952.920683][ T30] audit: type=1326 audit(1775484369.719:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 952.991992][ T30] audit: type=1326 audit(1775484369.719:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 953.082666][ T30] audit: type=1326 audit(1775484369.719:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18905 comm="syz.2.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339799c819 code=0x7ffc0000 [ 953.222015][T18920] loop3: detected capacity change from 0 to 7 [ 953.234136][T15045] Dev loop3: unable to read RDB block 7 [ 953.241754][T15045] loop3: unable to read partition table [ 953.249643][T18916] mmap: syz.5.3591 (18916): VmData 37720064 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 953.263902][T15045] loop3: partition table beyond EOD, truncated [ 953.281367][T18920] Dev loop3: unable to read RDB block 7 [ 953.320204][T18920] loop3: unable to read partition table [ 953.335323][T18920] loop3: partition table beyond EOD, truncated [ 953.362580][T18920] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 953.822701][ T5910] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 953.856078][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.962748][ T5910] usb 3-1: device descriptor read/64, error -71 [ 954.255423][ T5910] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 954.442690][ T5910] usb 3-1: device descriptor read/64, error -71 [ 954.553241][ T5910] usb usb3-port1: attempt power cycle [ 954.912634][ T5910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 955.090388][T18941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.126603][T18941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.356449][ T5910] usb 3-1: device descriptor read/8, error -71 [ 955.457129][T18943] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3598'. [ 955.722568][ T5910] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 955.753888][ T5910] usb 3-1: device descriptor read/8, error -71 [ 955.873405][ T5910] usb usb3-port1: unable to enumerate USB device [ 955.937899][T18947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.960052][T14753] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 955.976488][T18947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.126396][T14753] usb 2-1: Using ep0 maxpacket: 32 [ 956.134230][T14753] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 956.162577][T14753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.192719][T14753] usb 2-1: config 0 has no interface number 0 [ 956.207576][T14753] usb 2-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 956.245990][T14753] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 956.255692][T14753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.272872][T14753] usb 2-1: Product: syz [ 956.282712][T14753] usb 2-1: Manufacturer: syz [ 956.292889][T14753] usb 2-1: SerialNumber: syz [ 956.302061][T14753] usb 2-1: config 0 descriptor?? [ 956.325546][T14753] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input84 [ 956.359080][T18950] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3602'. [ 956.559238][ T5910] usb 2-1: USB disconnect, device number 122 [ 957.113345][T14753] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 957.364804][T14753] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 957.374445][T14753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.427641][T14753] usb 1-1: config 0 descriptor?? [ 957.447100][T14753] cp210x 1-1:0.0: cp210x converter detected [ 957.833573][T11355] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 957.920089][T14753] usb 1-1: cp210x converter now attached to ttyUSB0 [ 958.022872][T11355] usb 2-1: Using ep0 maxpacket: 32 [ 958.040572][T11355] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 958.059347][T11355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.089907][T11355] usb 2-1: config 0 has no interface number 0 [ 958.107525][T11355] usb 2-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 958.129694][T11355] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 958.142584][T11355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.151056][T11355] usb 2-1: Product: syz [ 958.176901][ T5910] usb 1-1: USB disconnect, device number 89 [ 958.197587][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 958.221688][ T5910] cp210x 1-1:0.0: device disconnected [ 958.246790][T11355] usb 2-1: Manufacturer: syz [ 958.254520][T11355] usb 2-1: SerialNumber: syz [ 958.288154][T11355] usb 2-1: config 0 descriptor?? [ 958.333955][T11355] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input85 [ 958.544810][T18967] syzkaller1: entered promiscuous mode [ 958.551263][T18967] syzkaller1: entered allmulticast mode [ 958.669064][T18312] usb 2-1: USB disconnect, device number 123 [ 958.868661][T18975] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 959.042427][T18981] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3613'. [ 959.247937][T18984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.287732][T18983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.299534][T18983] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3612'. [ 959.908955][T18999] loop3: detected capacity change from 0 to 7 [ 959.997204][T18999] Dev loop3: unable to read RDB block 7 [ 960.036476][T18999] loop3: unable to read partition table [ 960.098893][T18999] loop3: partition table beyond EOD, truncated [ 960.211970][T18999] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 960.663268][T19006] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3620'. [ 960.757650][T19009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.789950][T19009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.876775][ T5910] usb 5-1: USB disconnect, device number 116 [ 960.898938][ T5910] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 961.041354][T19011] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 961.114311][T19013] input: syz1 as /devices/virtual/input/input86 [ 961.247606][T19017] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3625'. [ 962.401665][T12726] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 962.442509][T19038] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3631'. [ 962.640059][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3631'. [ 963.008560][T19056] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3634'. [ 963.022085][T19055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.092668][ T5910] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 963.331991][T19058] input: syz1 as /devices/virtual/input/input87 [ 963.400880][ T5910] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 963.414562][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 963.444663][ T5910] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 963.455021][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 963.509003][ T5910] usb 1-1: Product: syz [ 963.517975][ T5910] usb 1-1: Manufacturer: syz [ 963.559983][ T5910] usb 1-1: SerialNumber: syz [ 963.634771][ T5910] usb 1-1: config 0 descriptor?? [ 963.661909][ T5910] usb 1-1: selecting invalid altsetting 0 [ 963.678928][T19062] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3637'. [ 963.880063][ T5910] usb 1-1: USB disconnect, device number 90 [ 964.024478][T14957] udevd[14957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 964.238466][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 964.238484][ T30] audit: type=1326 audit(1775484381.539:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 964.334731][ T30] audit: type=1326 audit(1775484381.539:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 964.503472][ T30] audit: type=1326 audit(1775484381.569:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 964.552644][ T30] audit: type=1326 audit(1775484381.569:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 964.654792][ T30] audit: type=1326 audit(1775484381.569:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 964.758310][ T30] audit: type=1326 audit(1775484381.569:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 964.871203][ T30] audit: type=1326 audit(1775484381.569:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 964.952854][ T30] audit: type=1326 audit(1775484381.569:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 965.064456][ T30] audit: type=1326 audit(1775484381.569:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 965.104940][T19074] IPVS: Error connecting to the multicast addr [ 965.159659][ T30] audit: type=1326 audit(1775484381.569:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4839c819 code=0x7ffc0000 [ 965.614583][T19075] vivid-000: disconnect [ 965.740664][T19065] vivid-000: reconnect [ 966.550539][T19092] loop3: detected capacity change from 0 to 7 [ 966.579875][T15045] Dev loop3: unable to read RDB block 7 [ 966.585802][T11355] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 966.649408][T15045] loop3: unable to read partition table [ 966.657940][T15045] loop3: partition table beyond EOD, truncated [ 966.669666][T19092] Dev loop3: unable to read RDB block 7 [ 966.693190][T19092] loop3: unable to read partition table [ 966.703805][T19092] loop3: partition table beyond EOD, truncated [ 966.742762][T19092] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 966.754385][T11355] usb 2-1: Using ep0 maxpacket: 32 [ 966.764278][T11355] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 966.772648][T11355] usb 2-1: config 0 has no interface number 0 [ 966.780807][T11355] usb 2-1: config 0 interface 184 has no altsetting 0 [ 966.791706][T11355] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 966.811720][T11355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.829009][T11355] usb 2-1: Product: syz [ 966.839576][T11355] usb 2-1: Manufacturer: syz [ 966.856409][T11355] usb 2-1: SerialNumber: syz [ 966.861772][T19097] input: syz1 as /devices/virtual/input/input88 [ 966.906044][T11355] usb 2-1: config 0 descriptor?? [ 967.264751][T19105] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3649'. [ 968.061352][T19119] netlink: 'syz.2.3654': attribute type 12 has an invalid length. [ 968.088662][T19119] netlink: 'syz.2.3654': attribute type 29 has an invalid length. [ 968.099654][T19119] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3654'. [ 968.282527][T19125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.296647][T19125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.308819][T19125] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3655'. [ 968.330494][T11355] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 968.344262][T11355] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 968.360298][T11355] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 968.439986][T11355] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 968.462070][T11355] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 968.480470][T11355] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 968.502652][T11355] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 968.572636][T11355] usb 2-1: USB disconnect, device number 124 [ 969.512562][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 969.916921][T19146] xt_TPROXY: Can be used only with -p tcp or -p udp [ 969.987344][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'. [ 970.768391][T19155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 971.512611][T11355] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 971.618643][T19181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.629468][T19181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.714871][T11355] usb 1-1: Using ep0 maxpacket: 8 [ 971.734639][T11355] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 971.752634][T11355] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 971.782541][T11355] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 971.792355][T11355] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 971.822843][T11355] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.836007][ T5910] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 971.852564][T11355] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 971.870096][T11355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.973369][ T5910] usb 2-1: device descriptor read/64, error -71 [ 972.178617][T11355] usb 1-1: GET_CAPABILITIES returned 0 [ 972.188132][T11355] usbtmc 1-1:16.0: can't read capabilities [ 972.232569][ T5910] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 972.382611][ T5910] usb 2-1: device descriptor read/64, error -71 [ 972.394994][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 972.395014][ T30] audit: type=1326 audit(1775484389.689:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 972.429398][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.438575][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.447700][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.456810][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.500864][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.501604][ T30] audit: type=1326 audit(1775484389.699:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 972.509999][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.510045][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.510087][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.535394][ T30] audit: type=1326 audit(1775484389.709:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 972.548489][ T5910] usb usb2-port1: attempt power cycle [ 972.551778][ T30] audit: type=1326 audit(1775484389.709:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 972.583653][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.619827][ T30] audit: type=1326 audit(1775484389.709:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 972.621314][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.647026][ T30] audit: type=1326 audit(1775484389.709:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 972.742799][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.751981][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.761155][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.770302][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.812399][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 972.821566][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 972.839396][ T30] audit: type=1326 audit(1775484389.709:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 972.863265][ T30] audit: type=1326 audit(1775484389.709:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 972.888927][ T30] audit: type=1326 audit(1775484389.709:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 972.923961][ T5910] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 972.965133][ T5910] usb 2-1: device descriptor read/8, error -71 [ 972.996526][T19209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3678'. [ 973.082855][ T30] audit: type=1326 audit(1775484389.719:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19201 comm="syz.4.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84b9c819 code=0x7ffc0000 [ 973.202836][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 973.224474][ T5910] usb 2-1: device descriptor read/8, error -71 [ 973.296350][T19215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.308626][T19215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.333088][ T5910] usb usb2-port1: unable to enumerate USB device [ 973.570491][T19164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.599542][T19164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.793023][T11355] usb 1-1: USB disconnect, device number 91 [ 973.844587][ T5910] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 973.983628][ T5910] usb 5-1: device descriptor read/64, error -71 [ 974.122942][T19227] tipc: Enabling of bearer rejected, failed to enable media [ 974.252592][ T5910] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 974.386536][ T5910] usb 5-1: device descriptor read/64, error -71 [ 974.514440][ T5910] usb usb5-port1: attempt power cycle [ 974.772640][T14753] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 974.872714][ T5910] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 974.893313][ T5910] usb 5-1: device descriptor read/8, error -71 [ 974.934195][T14753] usb 1-1: Using ep0 maxpacket: 32 [ 974.941065][T14753] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 974.954554][T14753] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.965379][T14753] usb 1-1: config 0 has no interface number 0 [ 974.971539][T14753] usb 1-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 974.992351][T14753] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 975.005182][T14753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.013693][T14753] usb 1-1: Product: syz [ 975.017901][T14753] usb 1-1: Manufacturer: syz [ 975.022577][T14753] usb 1-1: SerialNumber: syz [ 975.029748][T14753] usb 1-1: config 0 descriptor?? [ 975.041450][T14753] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input89 [ 975.142575][ T5910] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 975.173663][ T5910] usb 5-1: device descriptor read/8, error -71 [ 975.280638][T14753] usb 1-1: USB disconnect, device number 92 [ 975.293050][ T5910] usb usb5-port1: unable to enumerate USB device [ 975.872597][T14753] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 976.023317][T14753] usb 2-1: Using ep0 maxpacket: 8 [ 976.030333][T14753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.042530][T14753] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 976.053571][T14753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.166922][T14753] usb 2-1: config 0 descriptor?? [ 976.894395][T14753] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 976.941757][T19254] netlink: 'syz.4.3691': attribute type 23 has an invalid length. [ 977.100263][ T5910] usb 2-1: USB disconnect, device number 3 [ 977.106890][T19242] iowarrior 2-1:0.0: Error -19 while submitting URB [ 977.507521][T19270] binder: BINDER_SET_CONTEXT_MGR already set [ 977.522882][T19270] binder: 19262:19270 ioctl 4018620d 200000004a80 returned -16 [ 977.927113][T19275] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 977.939050][T19275] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 977.947508][T19275] CPU: 0 UID: 0 PID: 19275 Comm: syz.0.3695 Tainted: G L syzkaller #0 PREEMPT(full) [ 977.958491][T19275] Tainted: [L]=SOFTLOCKUP [ 977.962844][T19275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 977.972936][T19275] RIP: 0010:memcpy_sglist+0x420/0x730 [ 977.978375][T19275] Code: e8 b5 b9 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 c7 b4 52 fd 4c 89 f3 eb 07 e8 bd b4 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 977.998020][T19275] RSP: 0018:ffffc9000fee7698 EFLAGS: 00010202 [ 978.004139][T19275] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 978.012158][T19275] RDX: ffffc90020436000 RSI: 00000000000001dd RDI: 00000000000001de [ 978.020172][T19275] RBP: dffffc0000000000 R08: 10611e7538ce9d6f R09: c991f1501ad13760 [ 978.028179][T19275] R10: 898bc4ba12973ec4 R11: f5e72f23450ac426 R12: 000000000000000a [ 978.036184][T19275] R13: ffff88805a3d8e80 R14: ffff888078ea6080 R15: 0000000000000008 [ 978.044193][T19275] FS: 00007f4a493076c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 978.053169][T19275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 978.060226][T19275] CR2: 000000110c3e34b2 CR3: 00000000607c0000 CR4: 00000000003526f0 [ 978.068268][T19275] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 978.076290][T19275] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 978.084297][T19275] Call Trace: [ 978.087609][T19275] [ 978.090581][T19275] aead_recvmsg+0x719/0x1030 [ 978.095233][T19275] ? __pfx_aead_recvmsg+0x10/0x10 [ 978.100302][T19275] ? __pfx_aead_recvmsg+0x10/0x10 [ 978.105368][T19275] sock_recvmsg_nosec+0x10c/0x140 [ 978.110431][T19275] ____sys_recvmsg+0x3e3/0x4a0 [ 978.115253][T19275] ? __pfx_____sys_recvmsg+0x10/0x10 [ 978.120762][T19275] ? import_iovec+0x73/0xa0 [ 978.125320][T19275] ___sys_recvmsg+0x215/0x590 [ 978.130041][T19275] ? __lock_acquire+0x6b5/0x2cf0 [ 978.135035][T19275] ? __pfx____sys_recvmsg+0x10/0x10 [ 978.140279][T19275] ? get_futex_key+0x8cd/0x1690 [ 978.145207][T19275] do_recvmmsg+0x334/0x800 [ 978.149678][T19275] ? __pfx_do_recvmmsg+0x10/0x10 [ 978.154674][T19275] ? __pfx_do_futex+0x10/0x10 [ 978.159403][T19275] __x64_sys_recvmmsg+0x198/0x250 [ 978.164491][T19275] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 978.170104][T19275] do_syscall_64+0x14d/0xf80 [ 978.174760][T19275] ? trace_irq_disable+0x3b/0x150 [ 978.179827][T19275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.185932][T19275] ? clear_bhb_loop+0x40/0x90 [ 978.190654][T19275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.196587][T19275] RIP: 0033:0x7f4a4839c819 [ 978.201051][T19275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.220694][T19275] RSP: 002b:00007f4a49307028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 978.229170][T19275] RAX: ffffffffffffffda RBX: 00007f4a48615fa0 RCX: 00007f4a4839c819 [ 978.237186][T19275] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 978.245194][T19275] RBP: 00007f4a48432c91 R08: 0000000000000000 R09: 0000000000000000 [ 978.253197][T19275] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 978.261198][T19275] R13: 00007f4a48616038 R14: 00007f4a48615fa0 R15: 00007f4a4873fa48 [ 978.269214][T19275] [ 978.272285][T19275] Modules linked in: [ 978.277218][T19275] ---[ end trace 0000000000000000 ]--- [ 978.332808][T19275] RIP: 0010:memcpy_sglist+0x420/0x730 [ 978.342782][T19275] Code: e8 b5 b9 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 c7 b4 52 fd 4c 89 f3 eb 07 e8 bd b4 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 978.395405][T19275] RSP: 0018:ffffc9000fee7698 EFLAGS: 00010202 [ 978.405298][T19275] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 978.435142][T19275] RDX: ffffc90020436000 RSI: 00000000000001dd RDI: 00000000000001de [ 978.477527][T19275] RBP: dffffc0000000000 R08: 10611e7538ce9d6f R09: c991f1501ad13760 [ 978.498587][T19275] R10: 898bc4ba12973ec4 R11: f5e72f23450ac426 R12: 000000000000000a [ 978.537170][T19275] R13: ffff88805a3d8e80 R14: ffff888078ea6080 R15: 0000000000000008 [ 978.589860][T19275] FS: 00007f4a493076c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 978.619233][T19275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 978.712477][T19275] CR2: 00002000002c5030 CR3: 00000000607c0000 CR4: 00000000003526f0 [ 978.767806][T19275] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 978.820915][T19275] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 978.845619][T19275] Kernel panic - not syncing: Fatal exception [ 978.851911][T19275] Kernel Offset: disabled [ 978.856251][T19275] Rebooting in 86400 seconds..